last executing test programs: 2m0.820075776s ago: executing program 4 (id=890): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f0000000180)=@delnexthop={0x28, 0x69, 0x100, 0x70bd2b, 0x9, {}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000040)={0x1d, r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@deltclass={0x13c, 0x29, 0x200, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xffe0, 0x7}, {0x4, 0x2}, {0xffea, 0xa}}, [@tclass_kind_options=@c_hfsc={{0x9}, {0xa4, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0x2, 0x6, 0x6}}, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x6, 0x3}}, @TCA_HFSC_USC={0x10, 0x3, {0xc, 0x8, 0x8}}, @TCA_HFSC_USC={0x10, 0x3, {0xffff7fff, 0x4, 0x7}}, @TCA_HFSC_RSC={0x10, 0x1, {0xc00000, 0x0, 0x9}}, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0xfffffffc, 0x3}}, @TCA_HFSC_FSC={0x10, 0x2, {0x0, 0x80, 0xc}}, @TCA_HFSC_FSC={0x10, 0x2, {0x6, 0x4}}, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x5, 0xfff}}, @TCA_HFSC_RSC={0x10, 0x1, {0x9, 0x1, 0x5db8}}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0xae}}, @TCA_RATE={0x6, 0x5, {0x5, 0x4}}, @tclass_kind_options=@c_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}, @tclass_kind_options=@c_qfq={{0x8}, {0x1c, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0xffffffff}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x10000}, @TCA_QFQ_LMAX={0x8, 0x2, 0xfffffe01}]}}, @tclass_kind_options=@c_qfq={{0x8}, {0x1c, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x1}, @TCA_QFQ_LMAX={0x8, 0x2, 0xffff8000}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x2}]}}]}, 0x13c}}, 0x40044) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x8, 0x8, {}, {}, {0x4, 0x0, 0x0, 0x1}, 0x1, @can={{0x3, 0x1, 0x1, 0x1}, 0x4, 0x1, 0x0, 0x0, "8187dc4bf6d0fd86"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x240400c6) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) close(0x4) 1m45.240533314s ago: executing program 4 (id=890): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f0000000180)=@delnexthop={0x28, 0x69, 0x100, 0x70bd2b, 0x9, {}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000040)={0x1d, r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@deltclass={0x13c, 0x29, 0x200, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xffe0, 0x7}, {0x4, 0x2}, {0xffea, 0xa}}, [@tclass_kind_options=@c_hfsc={{0x9}, {0xa4, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0x2, 0x6, 0x6}}, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x6, 0x3}}, @TCA_HFSC_USC={0x10, 0x3, {0xc, 0x8, 0x8}}, @TCA_HFSC_USC={0x10, 0x3, {0xffff7fff, 0x4, 0x7}}, @TCA_HFSC_RSC={0x10, 0x1, {0xc00000, 0x0, 0x9}}, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0xfffffffc, 0x3}}, @TCA_HFSC_FSC={0x10, 0x2, {0x0, 0x80, 0xc}}, @TCA_HFSC_FSC={0x10, 0x2, {0x6, 0x4}}, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x5, 0xfff}}, @TCA_HFSC_RSC={0x10, 0x1, {0x9, 0x1, 0x5db8}}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0xae}}, @TCA_RATE={0x6, 0x5, {0x5, 0x4}}, @tclass_kind_options=@c_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}, @tclass_kind_options=@c_qfq={{0x8}, {0x1c, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0xffffffff}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x10000}, @TCA_QFQ_LMAX={0x8, 0x2, 0xfffffe01}]}}, @tclass_kind_options=@c_qfq={{0x8}, {0x1c, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x1}, @TCA_QFQ_LMAX={0x8, 0x2, 0xffff8000}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x2}]}}]}, 0x13c}}, 0x40044) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x8, 0x8, {}, {}, {0x4, 0x0, 0x0, 0x1}, 0x1, @can={{0x3, 0x1, 0x1, 0x1}, 0x4, 0x1, 0x0, 0x0, "8187dc4bf6d0fd86"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x240400c6) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) close(0x4) 1m41.669511204s ago: executing program 3 (id=1204): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x1c) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @bcast, @rose={'rose', 0x0}, 0x40, 'syz0\x00', @null, 0x1, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) recvmmsg(r2, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}, 0xf}], 0x1, 0x20, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000020103000000000000000000000000000800048004000280080003400000200206001240000074222fac0f80"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1m26.534142926s ago: executing program 3 (id=1204): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x1c) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @bcast, @rose={'rose', 0x0}, 0x40, 'syz0\x00', @null, 0x1, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) recvmmsg(r2, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}, 0xf}], 0x1, 0x20, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000020103000000000000000000000000000800048004000280080003400000200206001240000074222fac0f80"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1m25.110626276s ago: executing program 4 (id=890): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f0000000180)=@delnexthop={0x28, 0x69, 0x100, 0x70bd2b, 0x9, {}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000040)={0x1d, r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@deltclass={0x13c, 0x29, 0x200, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xffe0, 0x7}, {0x4, 0x2}, {0xffea, 0xa}}, [@tclass_kind_options=@c_hfsc={{0x9}, {0xa4, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0x2, 0x6, 0x6}}, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x6, 0x3}}, @TCA_HFSC_USC={0x10, 0x3, {0xc, 0x8, 0x8}}, @TCA_HFSC_USC={0x10, 0x3, {0xffff7fff, 0x4, 0x7}}, @TCA_HFSC_RSC={0x10, 0x1, {0xc00000, 0x0, 0x9}}, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0xfffffffc, 0x3}}, @TCA_HFSC_FSC={0x10, 0x2, {0x0, 0x80, 0xc}}, @TCA_HFSC_FSC={0x10, 0x2, {0x6, 0x4}}, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x5, 0xfff}}, @TCA_HFSC_RSC={0x10, 0x1, {0x9, 0x1, 0x5db8}}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0xae}}, @TCA_RATE={0x6, 0x5, {0x5, 0x4}}, @tclass_kind_options=@c_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}, @tclass_kind_options=@c_qfq={{0x8}, {0x1c, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0xffffffff}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x10000}, @TCA_QFQ_LMAX={0x8, 0x2, 0xfffffe01}]}}, @tclass_kind_options=@c_qfq={{0x8}, {0x1c, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x1}, @TCA_QFQ_LMAX={0x8, 0x2, 0xffff8000}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x2}]}}]}, 0x13c}}, 0x40044) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x8, 0x8, {}, {}, {0x4, 0x0, 0x0, 0x1}, 0x1, @can={{0x3, 0x1, 0x1, 0x1}, 0x4, 0x1, 0x0, 0x0, "8187dc4bf6d0fd86"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x240400c6) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) close(0x4) 1m3.546357641s ago: executing program 3 (id=1204): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x1c) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @bcast, @rose={'rose', 0x0}, 0x40, 'syz0\x00', @null, 0x1, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) recvmmsg(r2, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}, 0xf}], 0x1, 0x20, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000020103000000000000000000000000000800048004000280080003400000200206001240000074222fac0f80"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1m2.139929522s ago: executing program 4 (id=890): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f0000000180)=@delnexthop={0x28, 0x69, 0x100, 0x70bd2b, 0x9, {}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000040)={0x1d, r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@deltclass={0x13c, 0x29, 0x200, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xffe0, 0x7}, {0x4, 0x2}, {0xffea, 0xa}}, [@tclass_kind_options=@c_hfsc={{0x9}, {0xa4, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0x2, 0x6, 0x6}}, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x6, 0x3}}, @TCA_HFSC_USC={0x10, 0x3, {0xc, 0x8, 0x8}}, @TCA_HFSC_USC={0x10, 0x3, {0xffff7fff, 0x4, 0x7}}, @TCA_HFSC_RSC={0x10, 0x1, {0xc00000, 0x0, 0x9}}, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0xfffffffc, 0x3}}, @TCA_HFSC_FSC={0x10, 0x2, {0x0, 0x80, 0xc}}, @TCA_HFSC_FSC={0x10, 0x2, {0x6, 0x4}}, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x5, 0xfff}}, @TCA_HFSC_RSC={0x10, 0x1, {0x9, 0x1, 0x5db8}}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0xae}}, @TCA_RATE={0x6, 0x5, {0x5, 0x4}}, @tclass_kind_options=@c_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}, @tclass_kind_options=@c_qfq={{0x8}, {0x1c, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0xffffffff}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x10000}, @TCA_QFQ_LMAX={0x8, 0x2, 0xfffffe01}]}}, @tclass_kind_options=@c_qfq={{0x8}, {0x1c, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x1}, @TCA_QFQ_LMAX={0x8, 0x2, 0xffff8000}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x2}]}}]}, 0x13c}}, 0x40044) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x8, 0x8, {}, {}, {0x4, 0x0, 0x0, 0x1}, 0x1, @can={{0x3, 0x1, 0x1, 0x1}, 0x4, 0x1, 0x0, 0x0, "8187dc4bf6d0fd86"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x240400c6) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) close(0x4) 46.229119899s ago: executing program 3 (id=1204): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x1c) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @bcast, @rose={'rose', 0x0}, 0x40, 'syz0\x00', @null, 0x1, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) recvmmsg(r2, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}, 0xf}], 0x1, 0x20, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000020103000000000000000000000000000800048004000280080003400000200206001240000074222fac0f80"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) 43.27246207s ago: executing program 4 (id=890): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f0000000180)=@delnexthop={0x28, 0x69, 0x100, 0x70bd2b, 0x9, {}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000040)={0x1d, r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@deltclass={0x13c, 0x29, 0x200, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xffe0, 0x7}, {0x4, 0x2}, {0xffea, 0xa}}, [@tclass_kind_options=@c_hfsc={{0x9}, {0xa4, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0x2, 0x6, 0x6}}, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x6, 0x3}}, @TCA_HFSC_USC={0x10, 0x3, {0xc, 0x8, 0x8}}, @TCA_HFSC_USC={0x10, 0x3, {0xffff7fff, 0x4, 0x7}}, @TCA_HFSC_RSC={0x10, 0x1, {0xc00000, 0x0, 0x9}}, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0xfffffffc, 0x3}}, @TCA_HFSC_FSC={0x10, 0x2, {0x0, 0x80, 0xc}}, @TCA_HFSC_FSC={0x10, 0x2, {0x6, 0x4}}, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x5, 0xfff}}, @TCA_HFSC_RSC={0x10, 0x1, {0x9, 0x1, 0x5db8}}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0xae}}, @TCA_RATE={0x6, 0x5, {0x5, 0x4}}, @tclass_kind_options=@c_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}, @tclass_kind_options=@c_qfq={{0x8}, {0x1c, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0xffffffff}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x10000}, @TCA_QFQ_LMAX={0x8, 0x2, 0xfffffe01}]}}, @tclass_kind_options=@c_qfq={{0x8}, {0x1c, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x1}, @TCA_QFQ_LMAX={0x8, 0x2, 0xffff8000}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x2}]}}]}, 0x13c}}, 0x40044) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x8, 0x8, {}, {}, {0x4, 0x0, 0x0, 0x1}, 0x1, @can={{0x3, 0x1, 0x1, 0x1}, 0x4, 0x1, 0x0, 0x0, "8187dc4bf6d0fd86"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x240400c6) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) close(0x4) 39.866556269s ago: executing program 1 (id=1573): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xe, &(0x7f0000003fc0)=ANY=[@ANYBLOB="b702000000010080bfa300000000000007020000fffeff7f7a03f0fff8ffffff79a4f0ff00000000b7060000d0b68af1de640300000000007502faff07cd10020404000003007d60b70700000d1000006a0a00fe000000188500000008000000b70000000604002995000000000000001da5ad3548ebb63d18db6a1c72821c9b767ac8328fbcd5c5e4a5ad1059b5725ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1aa503b8de7ab9a780001000000000000d4bf20c2bd152d814f01f2cd539e030b0000000000007f4133b08e6e497640000000aea5cac0ceafdb9a2eeb02a1f5104d16ddb64963d84d91004cd5817e0b7f005e6ee7a39e2f0b5a18ed786b783ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a62d79b4c03e53466fa4f22d8c19f958e8b34de3535e7dacf1b13f7e875d1843c2288e7ff949a7a48ce18799ee53de177a81ea67a8f84538a9a311c754e5ab59a43f56d2085786e7ec07d78917f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d34a442bc098f4fcc96623b7c373b0ef04d55b846b094b0d6c7a75a76d445e0dcdf72c7ef97e08200000007b6e09a6a7caffff0000141f65e7d9ebe3be70c4364333af9a9d91c3e41ac37a63f85ad8254479c12f7c84fa5df32b70a80cce69cf30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48eb19767e00b75041739952fe87fde27ce0172f497e251f5b102893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7686bc2e1b45577c205c70631e8ad585951950e851250540593e61860b69a521f4e210b6494e3ab2d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7f58bde38b44ab13d980c894e00009338923789a1edcd8043fe83919088383268324a25df14010c8ea79c0d93ca77fd6c7ee30ea3aad2c6d6b8c97c00eaa00ff9bc46e1cfecbdc0e4ffac53e8f76c8b556306b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404a0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37d2fe7a60b903d2d9fe9c151c2fcc8dc389671c2d08b6e2641500568445b00cee4585af04fa69e0380be0d66649dcf3bf8a9066e5961197332c5c9da52b573109ea8b308ff070000aab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628ebe757bae30b356521df06f995cb57f97052fc4158250ccecfb47ea8faf509593fadc76e5d3c6840ad05a57af1ede94d87590ce90a0a7579766f847ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6c9eb0dcca5303eed6689ea910900785f61278dde47e6672e93a314a5f60e7b682bf0cacde21f6090f4fb311afd7f8b48f3f0d8c66449d8687dcf2d0f76668b2b9bf8b32b518e01ffb985f8054d37959c529e99b7daf32acfed749d516d014cef5f98126324e202badc1e5c20d69e576a770000000000005addc0103756b894418e4591c624a9b2ccabbfb85ad413d923b0c901973cd7c9d197d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe84f483b15f45b9a1d3af087047c568aef1d8659c6146a793026ebfc0bb5ec10b6290dc757a4903a88fb2c035f9349b6d2f0c051b8b775152786118a1020000fc19928ccb713ff09e179c308fbe9bc543dcf43f731074d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad10e5e9d26631c2f1db3a2882f6e130a79517a88de7596429a20793e12616aa32b3e720c6521fbe933321adde8ca7dd99c0a0125ff8c18119a6926083f4a2c008a9f2a29e30823bf0ec3639cadaf9be9605a504bca38627df469cebb7db08358e1e5ab17eea477b1754f78f45468c9568471647f8bc03d11811ac6eec1741ceb39a3ecd043c325fcabbab3d12f6a759f7ce11dafa387a8077db8a2230d2014a57bc8dd47741270000008000000000b2eebd5e1626cab98499328ff024a240199993433ceb5be20427a32df7047d63010dfc6a461517ad48ff64042e84c85c899fd11c6320a8d8fc0e78c15a5a4dd567f91dd943f6c2b32d094a461a990000000000000000000000000000000000000000000200000000000000000000b385c644a4a170e6dc9e9e546bfa049d025b319abd87fd85481743db5d6c2cb6a204d4d888dd4140c8edb598a36e21ad132bf6b88c99c5a5ed047d6589c10a5f6633b01813fc5cd7d048469a966bbfb300fd772cbadf2cf26899bfd15e7d9408026a92f13f11d1c9832259b2f97227f84a3bb96253717a1f7ac091d0f4632f638b09a0307ff31729857f9e6fe9f19e481a3f77cead663f42456e080952636515c758f1047b2148944133a492ef20a1778088c42094903d6ece2497b99fc745c420b035ff7961484a0f62a2d957ae2e47ff1ea8a059f2d03bf9c3e8d2b16ab409de762522f6008de48bb70b698c5c9867437ac3127fad4bd699acaad78a5f66c7fc7d46e048082a0af61e6b052e473ed26b0309080ea10e985703b292c7336112b1f35c3b069363869dce725d8da75dcec76dcfa0c052feecee18c64c4600a0bc3d4945d4b918865bb7a8a726a500689cbd9a84d07846417796f2a85e7a41d27d64b10f8e970469cf495b4a1b4ea8b5322f78e9f3048351b550c59a634b47981420081ea4da18b9d318fa001ce660b28bbcf3c1a8893d130b26d25e491f478ae4f95f71ea8897b32858f78d6e25537b959b69a04c5507008b8453f08a5ae1b3b4d8c83053c57637a98ef57e5fa51971eba5e287e9d10cba734336703def181022cb9f1e62079c48c13fe1659b157e5d9de7bfb929e715ed1a9a505a04a8d8474482295afbb9de90de2e918522cac2d5b5ac09d1fdc4147d6393a684ad7234ecb65d0008000000000000560ad146e8b9e9cd9b050edb1f6735c90a76b1ba4dbdee34d0b6750f25ba7251944ada7766c301c65e56351d009a568c782f4438ecba9bee47f25286300e83bd1853076ad52eac84029335b86e7f21e39a1af3d070abef94bc0827db0046dcb7d63bf64bf801c836a40b0100d0961533737c57e9b7337b981a99f63f600f90647703f0640f6594dd9f26436024a1f90f174769bad5a283271e6d7f49dec90a05bd771dd0502dc2170ccf98ade27e858eb5686ac900000000ae1bc4246ae316c6af10bf02088b4bb2ac89c96e58578dc50eddbf01ece3cb8a363ecbeb8198997115d7151f691a2a755d8233e006dd38ed5ba350bd6aad3bf6f5108083f0100f8a20be455d16134d65ce69c4b906b76427224b69750b779d81eb6e37e1db62b1788ff918433787f8026ef5c518113d48419a14a2bd8d4afff527513a2efc8403be48e494b3de33b1deefd9d902e8dc868f30161c2cd13b21b0a20362181186ff8cf4c8d58d74822f92554287ee157e9f1597c3e2e238f382a91bf48b4de88363c841bd7a8cddae3344295bd3d434d9ecf74634ffc9539010f0d36e672b9d668cc6762c0b25e4a22afb4d184ba84498b1367e4b31faf75f1b3dcecfd80c57015d8cd16171507add30833865fc1a42780e9d57bb14a6ebea4018d26e18747546fc7a4a619753fd9ba9c18e746aa9ea132058eb90f9b80549473eea2fb9bc43d38d8719a1cca094bd933ceef87a3ec0c2ac70d5f843425100950000009e000000000008000018779600e4283095c203b1f2ae5ed34f5b7e77278f7ded9f030000002e050000009f95a59418f612dfa87c654043da1a59c3c43c7884ab65d4b34984afe30c67179c4f5a3ba0e491f2b942b754a3c0d5b878c4ad63591c3fc7d3a4d4296d4bab0a88e55ff9c2536654bb2f83e8015fac216119e8ce582698938c9a331a974087b71f07e50300f7ff00d03bf057b408c86a1165bd9a1bdbf3dff88c9b2173a75d5fc82dce6d8a3f297231e33588d7cf183109c1118d94a41d48f8efcf193ff2699a76973f3f1ec1cff64a1b912ededeb080f9a241e07709e6dd6a3a7e18200c9e80b9634e6f0c4d000000000000000000000000000000005e50e77d04fcf8931ad07b38a39957e6b3a3c909000000e9d694e483e848fe0d00ee7c7d6cc30932a9575aa8808d10a4963560250bb4e60e88c726f63662cb143daf4b9ebd0774998a59fbb42dc35f12452cca456a12b7d15cf3ce7ea350e9510e96527cde622998e83e65b235c284542d48052eb15e6600733ca32436f9e705dff00f08df1115175628a327876dea291480c2dde8a59d1856eed2b502965038af0d56e49e0e2e9cb0e25104805f386d460e212c27ac7bafe6a0078f8648ff9f1e0257338ae58457fb27b29430cc9ac6a33ea11b88ae8bc95dffa293aa69d6d47f89b28a25a7ec2fce6691549990f93d1f02e1b619813699303b6b1260d5537e85315551adabe00c98282795dc5547aab3dcbd82a06e7f00c8160af19f1fc456b5fc4f099814631024b734c0cd8843c5cb124a21092e6cdd8aa2f4d3f93e92c6d850898890d9449e3f499af92be74ba8ba7928feabbd99d6288dece7513c50b973bab87214415078857d18032ab5adb8d4bf32405cc5f63eba7e60bcd0098fd7957943b3c4cf13de4e049e06ad7ebc236d1088c99d35f40555364ff86cab4542261999bccd3269e51d10900a1c05696b47ff33a159abce6bb1d69193bd01f59f1d3f431b4e0868db623cb8375baa50785b8fcd37ce4c52abe43c1e3368735022e7cc7a9b397b494d0183cbd8dae2ba19b32adc91444f519ad33f7f2680e3cf7ecd3cfc67816eb66b1faa78dd8e3f7e233b6048c53813e6b508dfc713583d8ef8f9cfff5cdae59aa7aca654b1740c90eb75ca000000000000000000000000000000000000000000faa13c07b5f590ee4c8bfbd828e912b150dde95dafe80ee043a107bde9c0bb87155691d640fd000000e4a2d2aa0607b026f78417471e6ea0d10000309b29d0dae2d2c9c730ac21040000000000000009775f86a9e6d5b6c7b3c5d10177a873edb630fdf9b1e11005a1ce41d04a2ad3f5d25a1595e7609849033d2e86ac682f2f0cde376f50a88a3ab5e83f56e43a07641b82c077fa1479b79e85c71a9c00000000000000078ce7c4ab383dac0325fa7f4ffb201c479265ff572dd061679c0000000000000f4f6b4ef8eb757ac80dc44711ae17816e32e38d7c894ab51238b2d7051ee26121404c0ade6faea7e72449cf38be7173b066f3a7835a31f1516c4cb1fda57ec8c19bc2800e246c1b64cf278c7afb3c9a5e346bdb259ac6788eefd5086e45554c8e2bdde8a3ac990dd929277a6af1876940c7c012f4b7d3d7aa68f2f07d83e925b326b05f130000000000000000000000000000000003572023092306e73a16f4b362f725b22b32be04e53a2219e3b08d75537c158ea4c4821d17d3b844dbe87408c34bb0f26ba43bd4530000769d45b93b8f2b6c194afc197f77bfb136dfd38c265479bd4f74b9d0b5c2f37eaacb2894370ab02abe06b823a2753ca82ea8888f2a5063212212772dcc541de26c97c1312fc247b56a9cd3e05bcb8bc93363edfa05f9c76e94190f917c3af6884c8742371f25eb0000000000000000000000004ae9afd11c62a57a29a163acc55ca9fe6da9ce6d59bdd87adec5ba4052a5edcd9999720e8b2a08b69f79f78c78b9f720bcf6a2ab411d420db8231780cdf52d44985768353ce1bc587700adf3a307ff11be0ca772f1bcc565070ef9345c2d55f0506d9059fff65ca75c9809c8e5e423f6f210a195e9b59a08c43dab5b025b1dc33cfdafe62aa8f13c38341267a920fc0be4e61fe9d8bed61524ad62896e3dfba3091cf028cdb3fabb530f1d0d4bdf391c5dda4b8b248ea58cb56aed4d968d506a108626e2423c506cc11bc2ec9de3b793fec489d08085e8c582cf6fc06c20eb57f7a1ba7315c67bd0e50f529a01211f8add5f28fd65fcd373982ae902e67966990cf34be5ed5dcf39b9e44fb0165fa40fcc5643678bab244a3a76f43dd267db562efe5156b85f6e909066b8f37b81b756eeeeee4598195e70d74bd1e221c5e0cf111b816f8bd5c2ac451fabd160815b9e81b9c4abffef4b12d82e401a0cce36fbfedaec4ab6a89e128ef71e63f2239792338e87e4c7d571d6e4bc165ea1d476531b4ddfbb698101e8563f7c25b4d527240dafb074437aa96f66e293df5e132fa95aa09c08ee57f089afc0522b438480aa3dc9f41330dcd3b25703feb85777de8fd5ac57464a31ae5924745f797a0c852ddf67e01dd5736b4826e16f885afb91b6a7f226e0d0aaabd0c01a8262cb35e501ddb3c191797560c91717a2215012da9e717ec8d65887138e3bc3886e5b6f3058e58fb4320338d6413ce94012c293e0042a2f5dd86b78d05efd9e44bbbccfae8b9361072af38c1aa3c030196d72d01a160a19c0060900e8bb2f3613a7ddacf2b878aa6b2952556d79bd183ae195e14d32ffd398ae01dbd20b034da17f5a78ceb03a16e39181a07b14e54f4e2061049569046877b9f5478106f6ac76e56213ec2e85a4dcd5960ad486e7c05a21e52e5c688c1f315169452b1b6a795dd837867899c64a04ec08a4b2d5455d93f6d5baf14ffced8576bfde19de2903835607505b4af824a0a69aee28fe65683dc83c19f6d253a5824442530c85d354c05c8b95030e629fb817697f746b9dd02fb40edf4f9886a758e0741ca2711e425f2f5be70a7fa600718fa7af2eb416a2b774f5d36f5632d791e0ba01f58f2165e6d5e564aef11dbc558170cf47c5934d41f558b02dc04d3ae4aee08aa5ad7d1e5ad92cdb90db79e73524d97ca3ce0828513c74fb0a1543eba7d17d37cc1f1f2d937bfd5fafeb23f691b326554b92d8b97e76e2cbbcb858a16287c2090727334096e574b6bb937ec9f048e041f178e8d3a3543c6862fc8b63f968501fabd17cbc81db1ad47d37d3fe02190fde2af3ac5c9a2d64ec4db0c8b211dbdf4d7b7c01248de7269c0b8d4c374d9fecb9fdff846c4e57d7d976c3f571474e4f65a87954e31e67c8cf6ac7823451b448ec90ca0b36405f6d2eef4055b5d2f4dad1aa89216f6d89bd43c4de92d8f61781a9349626fb65952dfa3c68aada76c3105d65bde2bddb981f753407c7696b767aeb3707606d0d9930b79f449557d6c3088c740f2a08c68b67f8dbbf93da08544ca26db1b58baae17c091f9bc28042630d76248e4d9d326ee62fd6e5d9bedee38b0e8da3cff3ba22e92e800b28c26901cd1a32b7aae2d762e776d66f08d78666364a2fc154fadfd105b28495e8702400a53f5191908b98a4d109a9d44107369cdf864fa8be46f52d88b01bcd795025a90669e55fc634692e554fe3a73ae6db0a5aa706c83061ba3b99aa992947346327a2521d3d4294115d9c4b44f949ae465d5aa24e3911520658e542e85023552e91dd39d98065dabfec69691c868bfc45f5830de8089ae1074b6ff56b7dd8e9029b7e5ab8e500b970cb391b14302315f99ab3bc102fbcc8d911c931c662c2a53c7a7bce275bb76b4096ee6d21acb49b088c7b7e05f70e6ed4cade99d907717b43b958390caec36fdb71fb1a5f374e86d3181ae12d12ff6a279e2047d26803cf7b1684c561ee8ff8250230e5de4171803ec2f03615f231d51f8a005a1487fb51b657a7b7f352adbd86fe56bd9bd02063b2bad542ca2ca3b61b8946abb3012c87cfa11e6df516ae4f29577dfda12068197eafdf0e343738778335ea5491cdcd7fe699a075425c9a35a731d63c2f7d3260ca187e2959223dc1a70f55ce9d02ff56e0410e3bf5"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) socket$packet(0x11, 0x2, 0x300) 39.720914247s ago: executing program 1 (id=1575): r0 = socket(0x1, 0x803, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x30, 0x2, 0x1, 0x3, 0x0, 0x0, {}, [@CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x4}}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2002}, @CTA_ZONE={0x6}, @CTA_SEQ_ADJ_ORIG={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, r2) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[], 0x6c}}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r6, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r7, r8, 0x2, 0x2, 0x0, @void, @value}, 0x10) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r9, r10, 0x2, 0x2, 0x0, @void, @value}, 0x10) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r11, r12, 0x2, 0x2, 0x0, @void, @value}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r11, 0x2, 0x0, 0x5, &(0x7f0000000180)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$NL802154_CMD_SET_CCA_MODE(r2, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r3, 0x10, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000000)=@rose={'rose', 0x0}, 0x10) 39.386027054s ago: executing program 1 (id=1577): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r2, 0x0) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000506010200000000000000000a00000109006e"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="002cbd7000040000000500000006001d0002"], 0x2c}, 0x1, 0x0, 0x0, 0x2000c900}, 0x0) write$tun(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000540)={0x3b, 0x3c, '\x00', [@generic={0x5, 0x58, "4e2587b2ce97625086323555d8d18af508bf530d13a1e8460a159a9670eba00a4165af3ebfc3815bdc032848c365cd6b992c283b8146571ae70256cfa93ee0c631419391978035abb2b5c3485963db14de3f9af21a693b19"}, @calipso={0x7, 0x50, {0x1, 0x12, 0x4, 0x9, [0x101, 0xb, 0x6, 0xa4ab, 0x3bc2, 0x4, 0x8, 0x6, 0x9]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra, @hao={0xc9, 0x10, @private0}, @generic={0x2, 0xc3, "a2d5ab4d9fe31b2c251eb775360d770d7c7ce2f660686b6b330d76407ce9e7b629825d69be45a2574da8f20d267e346234132350b0a70cbb13457a4190231da489c1350283d6ce18feccbeda699ca1eca25ded2cb9626a198c3dd1f40c89c8081b35560f849186eea04a5f5a5eac55b9ce2d579121c99b273eac7718232356d22b01f2fd73b19c5e60e9392e0e8ce1182c2b2390d2c9ba52c71f8360c1b021bf263b6c0c6c104be2c7c19c84e115ae2f517a7aa7bb64d37565f98621cc540e9cc227db"}, @generic={0xe, 0x22, "b553f9e3413c75e10264650073e01436bc5aa882117228cb0ab092ac432a10e6ee55"}, @enc_lim={0x4, 0x1, 0xfd}, @calipso={0x7, 0x30, {0x3, 0xa, 0x7, 0x9, [0x0, 0x0, 0x2, 0x7, 0x90]}}]}, 0x1f0) connect$x25(r2, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3, 0x2}}, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711734000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r6, 0x89e1, &(0x7f0000003280)={'vxcan1\x00'}) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmmsg$sock(r0, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x150) 39.133128743s ago: executing program 1 (id=1578): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2720, 0x0, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r1, 0x0, 0xffffffac, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg(r1, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000280)}}], 0x1, 0x24000080) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x11, 0x15}, [@call={0x45}]}, &(0x7f0000000140)='GPL\x00', 0x8, 0x8c, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) 24.979066054s ago: executing program 3 (id=1204): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x1c) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @bcast, @rose={'rose', 0x0}, 0x40, 'syz0\x00', @null, 0x1, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) recvmmsg(r2, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}, 0xf}], 0x1, 0x20, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000020103000000000000000000000000000800048004000280080003400000200206001240000074222fac0f80"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) 22.863230488s ago: executing program 4 (id=890): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f0000000180)=@delnexthop={0x28, 0x69, 0x100, 0x70bd2b, 0x9, {}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000040)={0x1d, r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@deltclass={0x13c, 0x29, 0x200, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xffe0, 0x7}, {0x4, 0x2}, {0xffea, 0xa}}, [@tclass_kind_options=@c_hfsc={{0x9}, {0xa4, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0x2, 0x6, 0x6}}, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x6, 0x3}}, @TCA_HFSC_USC={0x10, 0x3, {0xc, 0x8, 0x8}}, @TCA_HFSC_USC={0x10, 0x3, {0xffff7fff, 0x4, 0x7}}, @TCA_HFSC_RSC={0x10, 0x1, {0xc00000, 0x0, 0x9}}, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0xfffffffc, 0x3}}, @TCA_HFSC_FSC={0x10, 0x2, {0x0, 0x80, 0xc}}, @TCA_HFSC_FSC={0x10, 0x2, {0x6, 0x4}}, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x5, 0xfff}}, @TCA_HFSC_RSC={0x10, 0x1, {0x9, 0x1, 0x5db8}}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0xae}}, @TCA_RATE={0x6, 0x5, {0x5, 0x4}}, @tclass_kind_options=@c_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}, @tclass_kind_options=@c_qfq={{0x8}, {0x1c, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0xffffffff}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x10000}, @TCA_QFQ_LMAX={0x8, 0x2, 0xfffffe01}]}}, @tclass_kind_options=@c_qfq={{0x8}, {0x1c, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x1}, @TCA_QFQ_LMAX={0x8, 0x2, 0xffff8000}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x2}]}}]}, 0x13c}}, 0x40044) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x8, 0x8, {}, {}, {0x4, 0x0, 0x0, 0x1}, 0x1, @can={{0x3, 0x1, 0x1, 0x1}, 0x4, 0x1, 0x0, 0x0, "8187dc4bf6d0fd86"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x240400c6) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) close(0x4) 22.822445419s ago: executing program 1 (id=1578): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2720, 0x0, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r1, 0x0, 0xffffffac, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg(r1, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000280)}}], 0x1, 0x24000080) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x11, 0x15}, [@call={0x45}]}, &(0x7f0000000140)='GPL\x00', 0x8, 0x8c, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) 5.874650443s ago: executing program 3 (id=1204): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x1c) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @bcast, @rose={'rose', 0x0}, 0x40, 'syz0\x00', @null, 0x1, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) recvmmsg(r2, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}, 0xf}], 0x1, 0x20, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000020103000000000000000000000000000800048004000280080003400000200206001240000074222fac0f80"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) 3.607766089s ago: executing program 1 (id=1578): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2720, 0x0, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r1, 0x0, 0xffffffac, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg(r1, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000280)}}], 0x1, 0x24000080) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x11, 0x15}, [@call={0x45}]}, &(0x7f0000000140)='GPL\x00', 0x8, 0x8c, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) 2.8768753s ago: executing program 2 (id=1739): ioctl$sock_rose_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x4000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r1, &(0x7f0000000280), 0x0}, 0x20) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) r2 = socket(0x10, 0x3, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4004011, 0x0, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) write(r2, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) r6 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff00000003", 0x47}, {&(0x7f0000000500)="624c1a401812fde315e0cd7bf34e2aa8ef5ab04e9f0455658db3c15c2f9c5044835787709972069a8ac71b0eb7bd8809e656669bac4168e2cce4c8e737ea3b5befdfc125a4aea5f3c9ae5e01b79d8b14c40267d77603cc2293c1e23cca7f372596b25ab6fc0e676fb1428f0093136150551ad3bb384155135a97221122d2d0e1fb3c84fa0ff55d1c1ca8ff019189c97e5df6ddd14e7b08288168caacca03a2810533b8d8513ec67c000000", 0xab}, {&(0x7f0000000340)="7614c248c766b09f6d61baf945a4df8cf2657066f75300", 0x17}, {&(0x7f0000000480)="ec5efaad65b096ce0f307aef3a56ca3cf1319806a5cdffca7e2037c55af5b6952d60246b5db684f9fed3c9909ef62812f7f11efe966607217750267a04bceec4f941f7d02ab847d4180118cc747e521838f9fb961c83fbc4149b67985f", 0x5d}], 0x4) 1.688784915s ago: executing program 0 (id=1740): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000001040)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000001880)={r0}) 1.687918573s ago: executing program 2 (id=1741): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'virt_wifi0\x00', 0x8000}) ioctl$TUNSETOFFLOAD(r1, 0x400454ce, 0xa) (async) ioctl$TUNSETOFFLOAD(r1, 0x400454ce, 0xa) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r2, 0x400454cc, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) close(r3) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x0, 0x7, 0x3, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x28}}, 0x0) 1.495209907s ago: executing program 0 (id=1742): r0 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ipvlan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newqdisc={0x6c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xffff}, {0xfff2, 0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x4, 0x5, 0x0, 0x5, 0x9, 0x8}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x1, 0x44a57f01}}, @TCA_NETEM_RATE={0x14, 0x6, {0x2, 0xfffffffe, 0x1e9d, 0xd7}}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80d1}, 0x10040000) 1.319057247s ago: executing program 0 (id=1743): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x150, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@multicast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3, 0x4e24, 0x0, 0xa, 0x0, 0x20}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, @in=@private=0xa010100, {0x0, 0x7, 0x0, 0x7, 0xffffffffffffffff, 0x0, 0x7f}, {0x0, 0x8, 0xcf, 0x80ffffff}, {0xf6}, 0x0, 0x200000, 0x2, 0x1, 0x1}, [@algo_aead={0x5f, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x98, 0x60, "629e189e0c9a1441983efec42b494c21dc4216"}}]}, 0x150}}, 0x804) 1.212827328s ago: executing program 0 (id=1744): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_emit_ethernet(0x42, &(0x7f00000010c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004500003400000000000190780a010100ac1414aa0b00907801000000460000000000000800110000ac1414bbe000000244040801"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x1e, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000980)={'syztnl2\x00', &(0x7f0000000900)={'ip6tnl0\x00', 0x0, 0x29, 0x3a, 0x4f, 0x7, 0x0, @mcast2, @mcast1, 0x700, 0xc6, 0x4, 0x2}}) getpeername$packet(r3, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000a00)=0x14) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000400)="8839facc21cd86d3e417d65539392d4a57c5dc0d63c1fc32390a1da250e407f06674aa9e8430511c0a9a5ad34b749957af859633aeed0e96da91e372ce301df941e7504ed5c37184ab1c41d114a86023092f9e7ba25709597c7b25bac1eedab386f6c26362cab660c42486543bf59bc650c2d7c0a25027631ac8556e38c630d32d6a25139a65e28fb1e515a6d8b0c9765fd0904c", 0x94}, {&(0x7f0000001140)="47ca3a0bff8eec09f7b459f765c119ead08b2df4ef144ba44f629b9edd46da937fa547cc4a5a7078076cdb5a663a93e722cc763589e635fba2d223cfb84f3440b7dcdd6d5b85bdf54b237f3e0788151c5b9960e4c2b9fd4ba732b749e2b0dfff48d9eeeb3c3507b49ccb96cd0d83d4d1cae6cb0b9ba9ca7cbcb790606853625c0797e80c9914229153f51a6d374dca1f8935f61222b147234f56fd622b985c4bdc174f5cb83fecb4d4d51e58ad2f017bc94549817509da5ef7861dc21413425ae71fc6c2cb121d8ba24add204ad581ed20537d643699513eb39c2b006060fc594ba358a1d3ec424496b3a4db149f58d62aad51d34439d3e5652bd5dbf888459639541452ff107526f9a864f5d923e5007311a8551bbf048d843e6627cf59ec404ecef034ca7dabe1d14c5317b745f27c328bdaf8d6a2cf42afc1341b4591372bcd5bf8e5e411126be3783c3da2959b4e928d594b4383d5463c70e99b3a552aaf7d26a8f730b5458638251e6500e7b50d7b366a0b46fc35d8f438c781f3b08fdafe77cf13147e69aac8ab0173050fa1378b6d6e5588783f04810a42541a39b536514b9acf95d932c91a6381ba42561130f7e7f259c7d3229032a9a82b01f4a5b718613f62e801176fe63080e9e3e19a163ffff51bfb044068e26827ea830bd2b4262b7120b51ba141a42746c98591b21863e6fd2bec478599f41c4ad88902adefb1bb91c4a17557cc264d7c24b0bcfac9425696e667a870982f2847df98312d3e7cef3662170a99b7137b00ca89990f4c0472544470bf197132932314ba086d5696fae049319dd3a26f1ae747b6ab73c7dcb3719ebd95da88cab408899740f9e218cc9959da2f8dcdfb96684e5d5440fa3baa1a970c7c5994e8d4c4fbacda7b34b2c203b565b7743c45d0922dbc8797b2a674ac58f9497a0b7deb7bb9c3394f591368dbc9da466e8b2701484add305510d0b1305d899224d9fbd1ad646b21565a09e5d32e8ece88be5bc876b5aed6c56f9de46ddb0bb37ed3277691e93d463ea1ad270b8f301d95935dfdd55e384e2b5be91d3d93d2fc3ef098a1897261e1dc8e2fb243b66bd9fb5a6f1374f7078b7d7734fa3c06cd7cd34e53440f9038f316e1e8081861f8843313e30c4991b51a1e4d92fa546dfc69484c543f7b612a85f25bf05d132830b203af25d66e38b312df9703e8ce2582048338ce45f5dfd0fb42ad1cf10571ae33bbd4312fa9e2ad7c406df4c122b418debd110b61bd37a849948ec82bdfe415b75d2be13ceb7c419f57adc08cbada5834f924fe79ecd8bff4b2650e9e5a916a0bb45e83ba281e4e5f88e1e66db41e4cb08dabfb109c829f07dfd23679a96113ce185cff1937ad4b202ed19174f11a2bc4a77df6224a6a653db0c3e66cf7815a745d467f28ea96f8df7dca0f1b7d93086f21179ea051f097ee857ca784ecd26d04c558541a5ccbc97312d376220c0b898d692e03173e76ebac4296d9745d2508e5ecba7fd32ef372d20955e1de24136539ed167c0af7cc9d87ce4578041a09899dabec739b0800f2dc9e5541ee88006fb64cf8cb6faef83b6101905294ac6f9adad1a9864a6aa59bcac48403b2d76c191fcbebfd780e4213dabbbd5c2a2339bfb196d18d0c2b47d0b79699011d6f4fa32e2990be0550a584aef5eda7a0d6eb772bd7693ee6c0a28432bc8f197f3d182745937f128c43bf5e4741a1ae7fc68f4ed97e8841635ffad7df011a7d5110b5dd6d630130c315e387c655e193942a56d19f01ec4d895006f1fdf0573893c5f0cbd580db32fae2aed048389133eae558da76fa4918e7ea2e20edfe552ed8e1766591dec12a017ec8ec1fcd1bb949509ad9124cc5f77acded4db11cdf7a464f68d887b8133110bd6b39b074b67dec6d5531fbcc4a135269301bc8e2b862b698ed05c78e438dfc0e6ae2cf6bce0885a4f3da6b11bc0b4067b683b8d8368b8f9b7aeb6e2824ee96dba298b2acad8d1b13d0f14d33aff8460ac45c31274db8b0981fa307fdeb10096d56ccc21386f61445a002a7de4e672d3e04b86346f9d675c558f0fb64a5ae33c6919dc6dfd8801ff1ec4be219c5afbc6ef03c9eb53662d134de6e0beb89e9ff9a07436b6ec9465d35266d3b98453e1c3f5683de73156e4d6e828bcac3ff6639610ffba363fef692252ffb803303955b18300d582a1ffee80931086721f65ab56a8a3500bf35ced739f5447deedddb61aecae91bf15f90aa647b5f818f43e741e4322bfd75034b71c7a9dd36cd373b1ba7b54bb77b83d2fa8075c453126bea6542001ea0458a3d4f8805f1cb20e25eeac8d7ddf4a3e1f014902e80449915d44ab75362c54eb1aae8b5a35fd728a8f81c8a4d75a2088d8cb12f7909de64afbaef13a74b2b769f52d2b921bd4ef4708719095f326a1855747f15b5574ea0a9be16257965b9f3988e83e56032c1a5eaf019d9625b624be28a588b0b0b17ce163dbdfe81cbf75c1161860bf38f04dd789615466bbfd9056fe7b6acd95496cb564a8fc1c30479cc1bb64439e6ad623302e626dce542b7327c7e33ab4c758f004590d81b76784ffad99fc477570a86ef625abaaf416a361b3d86df8d1762a77f1fa1f04536903efc84f3ba01351b606dddcc3848d5301b54ad961161937f5d1200311dca77fe8448ae6eb7535bebbf9d2a52d49363ed1df673621fc5ed96d08d4be4dcb2b5f7ab105d2b41af6a40cd09908fa13704057fa4c9f7f9518e2a18eb59b8b588c4fee958857af9066174d628770123202e702ee4d955eac0bfe94b92816d9583ec2f9d3820da1972ef20680bacea26cca8323def7f2829fdd1ce5be69381cbbb72140810d8fe9e287d583ec6c65c48825bb3f24514c1f9a6aefb8df0ed81036b132ed360fc842d56ae8132e53383899379274b72a3917b9c29e11107e235acb879ac218fb39b6f1ff62f8e54af01fec957152d855daad4a3e663f610d961f5c2f2add800619abc05fa52faecbd3be046c91504546ad2613c8c00df60d3172e474479941a4a40bb405d13b261a75b494ed8d028a3479677e85bc20db6f7dfbd5fc963ad52c54b9c140a6b85ae68ac92a69cd0e80aa0078fbc0eebd010f0d274d462017a82f03abfa32fc5f84f26755f6ad37b796d2b80fb6fcbb4864213dc44243ecfb6b82129deefb18a0a2df06c356d61e1d27f29356a47f333ba7ddff7a1792f6d81ee9a67ddcc5ca9f703deaf0b1830141c959c8a2d17325cbced80b670f0cd872a9297e77b1b63fceffd77078b639e7d4628d57b99e2aefd22dca349a802f8331be3012676dccfeb86fcf8fc0e0e13dcf7041a0b277a2a0dfda5926d0080944e713fe7e3b5c732eb416fa6efa86081ccb247e81747965a901e51374cfca44b42e21f0aae0b48eaef34e146faf31489fbac11987eeb07b5ed14f8f17f77c0c728ca01430c0ecff3e2b26f10b28efec9007febd8a5d8b376b2eaa44f58f2c937dacd6dfd5b09c4d86e59addc291b49057e562818019c53228dd7f8814440d76858c427dbe3d3565b8b51b195e870a7115bc6291b41eecc8682175511cd1fea640cf12faa6ae4d587c03d4a0d802ea57eae124ae693b96bf6759451bc9437cf171a6da21096918e8c098534efa4d69f60fb6b04e881a73a04ae8e716b0c8a77923cb66602eeed89021608cec6ca16513535239a0c2a2347ab2bd2197dc3b780221becd002b934a5d369d4c402daef5b3487938501e08963c3c0db2ef0aa5abb8e552daecc156ef5178d7651d4c0df76cb96b585b0864b3529fbf71616f2b26dc0ab8b5fad089de2374442c3f9f049ced5f5ad27ab17aff433eaf38bd1057481aca101e18694abd305719fa8df309fbbdf3b2f373f5f9895c5b7ce2dc50b705fc39998a169d442fa67d5ee7e54cb9319a791fb0cbe53cc2f18684249915247390bbfad8c75b755f8370b308001a473bbba4d1792373927f3c058d02e1d815591a7f9300384a637e830efc4bac71cfe0b4b908798230b055c43134b981133c8156e16b48d2dc67159c50edc7edda07aeb5964bbe09c6d35e1bdbc94e7c5684345bfb624bd02e9f680f0a32fb1c989dbe8943fb1885a30d166019057547a72cabce35e192a6c7cfbec5fb3bd52367c0df839d47d022965f71cf33a69199a7dc3d8aae67ab6ab27621b21b0f8ef122500c649b8afa66ad483c8ef34e9d530fa71de1c4734940b60dee2df74599a7a7a66f64e5ee9e9f9cd2a066423c2d6f4dcd5eafdc15b39e64ba78285f9991527b81ff95a6faa311f55dcf8e77bcde0fecb8b5a4172923e18cc23bf12cad752fb1f5010398aab86314e6accaa22af7fd8f46eab9588ba15ee40feff621a05ad5738cb5a10fe21490521fa5a7507e846ff08f3676310b8627bf76160e895c4e08081dbd9713540cfcf1b93f7dbdd63ee4bfc8adff84a93654a8043bda1fa07a268f40dc2f3d1000b51bb55edf584f4eb450059f20301e2c11eebbf5d7086c446f851112bb84f6201ac14b7009bee24285fc0f49f35f03b80f017effa33fb0830e4b0cef80ecd8186e0cf6e0e47f3c976b2caa623e23588b25f9f7a5732c3f8ebaf1f56a565b0cc357595c4a2a2baa34a44d535f44b7b0db5fe67c34293da759797d452a081b3460bc03281d17e7c10b007da25e0a5e6ce573abd37133d293ec6d1479a614fee993e56c8c056aa0656a95870a1fcb23b6c311bdd21703d49ca8fb077af4de6c5c0fa7486d6c3b73147cab8c7978ef3a89f8a1d471b612f64853c1192219af95f1c76b647277ac82ade5532c7bbe6991fc1b5872514cb030b5d6592bfb7452c10ddcb9f7173031572282424bd86b5bb24d485b289a486dcba3fbc07440ca5838a9a05cd24480271bb1ed57ac06680426ddc8fc81e6d7d0e776c02c9d9ac4d03f0d0d7ee25f8acb7c8e3ce9827f68dae338b8370d74f5fb176a493ff8eb33b6394bee3e230057be78918735d7adc39037fdb39b271822455600dd9c651ce6fc9c87d371bf684b77cfdf410155aacfc87fc6af232234ea281766b23d508a16e99548c392cbd86274726ff6fc14225b7a88483a59f34aa9fcb03a0d123be67ef5b9b2465ff45e385940020bf6b8562ad0e41fea6461c095bbc50466e83d7c1f2fe9edabfdff94003dcfc4584089ded620c8c9e3443d9073a44a07dda7583d8f57144a5f303f2f1bfedb38b3659016a4dcde725cc0b9d70d51d1b1f7f5cf01897b3dd6ddaa7ace31a8ec4003fc4fbab70b53ced16fd2e843097369c9f57559ad7b5833dacab5c16485a7265b8ff53b8a59897561a5831e39aa7be6a4bc3a6eaea5faf3edc3ec6c445e4a662e9935981b63d4556ddcea28e7601abd011c46fa695886680884d69711d127a896c9abaf1035f05496d4f0af0b7b2852ed8c0e353bbca08824ac1a13195964bed1ded7b2c83a42207ebd8a715b8eb4012ae8f17e78b6775baf93a63d74d5a6f4de5a659b3b26a695123ccc38877600997b893be26e460554dbed8c7ed87d7cd004e49a8b866d8ccf6147d160c7d2d1bc316cba2ff3d51a6caf4fc0330b1409b4ad54b17808a30dd76c0d125622f09b8423bad094e51128de29a52e161280665e5d747f47f0b3f52678b21c20e127e130112d1e595a5d0d1b3a35d24a84d5b768cce67123c34f67738c4d1c0271953b8d8f877b799e5b57663f58bcc34f80dd0e38e094a5ba60e3435f165e34ca1ff23626a2da0fe0441d74b230117a4ff3120814bd22befe80365f649a6bbe780957e7c52464708f5f42fdd379348b7a8809554c600b77102ee558cf322", 0x1000}, {&(0x7f00000004c0)="0b3bdeedaca1b68f186205ea1bde22fc4203b36f296c50eb0a43af6c6abc872dae6748143675c87c7be8a16c19517a05745419ac1240bbade0ca4780e1276a6ffe43f0d656ea1751bb640623d2033e54a42c8a8459f15aa8c1d54b6929a7a3fbb5e16c6d93b206dc2654427606b4aaf62f2977aec010b65d93113428b75b3d1e794dd369af08e77daa1a12478462c6ea0ec4980ab0bf48a2316f06f67d655eededd85002523f07ad799c6b3cb6c27f14cddeee32fae20567ccdb426e93fca252132c4f407f21e10e837c0edc9e49fdda6600632765d911b3412fed485286473b36cd", 0xe2}], 0x3, &(0x7f0000000340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @rand_addr=0x64010102}}}, @ip_tos_u8={{0x11}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x50}}, {{&(0x7f0000000200)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000880)=[{&(0x7f00000005c0)="2572462d58f3d46e3fd48caa5424a8131578dfcf01d8528bcbfdd6dcd99aa737d4e3ce27782782c455f0770a092c8ba22cda9066fb85b66315082213bc01baeb60dd52826ebb73c250decae7bc2994b6db1a9b417cc11d7bce85cd01f5fd6b02c613c74664714577780f398f2b0b", 0x6e}, {&(0x7f0000000640)="0a6ce7f417b3e1d00df0a5e314eb799b1d11676ebf4aa02f8f5d90dff306d2db63adaffc9949fb6303faad169e8938ad9c19d3ca388af05c3c6119f288cc0f1a9c3b493418f5ae769450f425a8b7f9049734fe2d2161eb07309fac5b7cee6712340dfa7fe185f4d24b6cfbd3a2b2c29c26eadca1f91ca405e262ccd657facbf3ae3340e5a216f040d6029d6ff02f4a79ea62c891b005e71f97ae06885508ebd8521244319acb209240eb30a98645295ee7a3ceb8053d48d471b8bd5c6e18248a1b2ad71c6d575ffbe9392fb289c2e0692d910268eadb4256371923f6c83c98d80c", 0xe1}, {&(0x7f0000000740)="871d78ac6cbdede4ff2c47260486eb2d8605", 0x12}, {&(0x7f0000000780)="41552ea365b416fd888fc3e059e7e39160b494a05f1a74f44b2895d4e2fa62b2345b14e157db50f10829b92a2450c401939ce4832090563455", 0x39}, {&(0x7f00000007c0)="6e94658daa9ea9cc7ff5a5414e1faff08dcd6663f00c0f22b244bedbadf2a6c8292ad72df08d129ef58b62b49f1b7bd73b73328b9265976a408671c3f4559db0508ceb50b0cbe8c17b03c4ef66f28a1b9587e1bba5e1e1a336e8fded9138a7b27d585ed4d2a4ef831d7f8af80b44d6142c14c3bde0abe0ee556b133d2c23f872c9b968e4c6326ce0530401ff54a57323454fea7a2ebbff4f694fa0301b1777a9b7a19663601c8e1973a3f8d71833d31a170d0d101e6f087f36610a1f39", 0xbd}], 0x5, &(0x7f0000000a40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xe}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3ff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_ttl={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @remote, @broadcast}}}], 0xa0}}, {{&(0x7f0000000b00)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000e80)=[{&(0x7f0000000b40)="b350853936c6509d61f3edafc8f84da77c2216bff6396537003444626a3c28ce5568a02038ab057e679b04d5df9ad51ea2f02becdbf69e90c84a314c470412f91a5cfed47100b98e99f8779800d00cbd64ed8d5b9fa9e3d90236a5bc16a6c4116b0eb41d646b72c807879d3769c09756b5702962d38c8d02c8e742817b718a08f96455c1bc416e0fa5a098108a4ff3a300adb98607c431898e8e301ca8bbb99967a6c538ab86fe02a598e0ec7ccd", 0xae}, {&(0x7f0000000c00)="600031dda358ce4221755c89bc4301c8e54392fd4b93eadc4b973d5487bd772a5e899a535776ec540cac6c23e6b6fad96882b19dd53800163d6c962c01f5792e93513f26cbae5d7b11413a83a793e9689f69edfd7120b8e37155b44fe5ba1df2712b322cdd8e7ac73821de3cdb964333ded6b5db7210a1ab32c0d7c801a76855c72b9576d55b550a52ebb5a0c85b502167df91df66113417a906d72e29a749e2184a900c19b237e7f8cc4a3cf053293ceee5999f76be10edc5f48667f6941a7d7e", 0xc1}, {&(0x7f0000000d00)="5dde3b816f6c646ad6a0eb5bb66f7d0847b0d351b261713d7ac1f3589a9570d834eb26b13b04f92d18696647f984d1b9dadf49979c9e4e8bb03aeffb72c5ff10a8", 0x41}, {&(0x7f0000000d80)="f1d1f7fe8e5961338165d4baa2226b9f0cdf8b7778921d3b5fcb6893b4903899b4a633a735a801041f63e5e101a3aee45790715d80b583b2920bf7288201247545cc55e6f17a2f75d985c711ef41e79a9545d0da20bb6230710cf1a18e6687bd", 0x60}, {&(0x7f0000000e00)="d167f5a5b2419cedd436363874ff00f3b2dfd9aed3dc52f3c4b738890cadc3dc49229fe4853fe69f8565bc070a9a38e97c0a3a5579c144a2c10a7b1c26dbecdb6f98d85b99675280", 0x48}], 0x5, &(0x7f0000000f00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffffff}}], 0x30}}], 0x3, 0x2004001) setsockopt$sock_int(r3, 0x1, 0x2d, &(0x7f0000000180), 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c0021791e83ffa975507300"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000003900000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) accept4$unix(r2, 0x0, 0x0, 0x800) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000000a0605d4290000001b0000000000000005000100070000000900020073797a3000000000040007"], 0x2c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.162224144s ago: executing program 2 (id=1745): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f00000006c0)=""/4096, &(0x7f0000000040)=0x1000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000017c0)=@newtaction={0x8dc, 0x30, 0x12f, 0x0, 0x0, {}, [{0x8c8, 0x1, [@m_police={0x8c4, 0x1, 0x0, 0x0, {{0xb}, {0x898, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1ff, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x1, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x8, 0xfffffffd, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x3, 0x0, 0x4, 0xfffeffff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x400, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x0, 0x0, 0xf327, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8000000000000000}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x1, 0x60, 0xfff, 0x4, 0x80000000, 0x1, 0xa, 0x8, 0xfff, 0x4, 0x3, 0x78e, 0xfffffffc, 0x9, 0x1, 0x1, 0xffffffff, 0x1, 0x1, 0x1, 0x40, 0x2, 0x1, 0xba0e, 0x3, 0x200, 0x8048, 0x1, 0x0, 0x2, 0xe8, 0x40, 0x6, 0x200, 0xdb3e, 0x993, 0x4, 0x800, 0x846, 0x5, 0x7, 0x8000, 0x30, 0x284, 0x4, 0x7, 0x6, 0x3, 0x2, 0x66eb, 0x2, 0x74, 0x7ff, 0xea4c, 0x1, 0x24, 0xfffffffc, 0x4, 0x100, 0x7, 0x8, 0x0, 0x94, 0x2, 0x1, 0xfff, 0x0, 0x5, 0x9, 0x7fff, 0x1, 0x30, 0x9f9, 0x5, 0x7fff, 0x8, 0x2, 0x1, 0x8, 0xf5, 0x10000, 0x9, 0x9, 0xe, 0x5, 0x0, 0x6, 0x1ff, 0x6, 0x5, 0x9, 0x5, 0x14, 0x58, 0x2, 0x3, 0x800, 0x3, 0xfffffff7, 0xd9, 0x101, 0x2, 0x6, 0x8, 0x10001, 0x2, 0x0, 0xfffffeff, 0x8, 0x9, 0xffffffff, 0x9, 0x5, 0x1e2c, 0x401, 0x5, 0x800005, 0x1, 0x7924, 0x0, 0x7, 0x9, 0x4, 0x9, 0xfffffffd, 0x8, 0x82d, 0x4, 0x7, 0x0, 0x35e80000, 0x1, 0x1, 0xa26, 0x0, 0x2c, 0xfff, 0x7, 0x6, 0x7ede, 0x8000, 0x1, 0x4, 0x5, 0x0, 0x5, 0x3, 0x8, 0x4, 0xa21, 0x0, 0x7, 0x7, 0xfffffffc, 0x2, 0x6, 0x54ed5172, 0x6, 0x5, 0x0, 0xf, 0x20001, 0x9, 0x9e, 0x6, 0xbb42da9, 0x25, 0x6, 0x3, 0xd, 0x7, 0x2, 0x3, 0x5, 0xd, 0x4, 0x203, 0x9, 0x6, 0x6, 0x8, 0x40, 0x5, 0x9, 0xff, 0x5, 0x40, 0x0, 0x7, 0xfffffff5, 0x5, 0x8001, 0xdb1, 0x8, 0x81, 0x40000, 0xfff, 0xce, 0x10, 0x5, 0x5, 0xffffffff, 0x63c, 0x9, 0xdc1b, 0xf2c, 0x10000, 0x4d, 0xe8b3, 0x6, 0x9, 0x2, 0x4, 0x2, 0xc, 0x1, 0x6, 0x896, 0x3, 0x0, 0x8cc6, 0x8, 0x10000, 0x4, 0x9, 0x8, 0x7, 0x8, 0x80000001, 0x80000000, 0x101, 0x17f, 0x1, 0x9, 0x5, 0x4, 0xb1c0, 0x7, 0x7fffffff, 0x80, 0x8, 0xffffffff, 0xffffffff, 0x40, 0x8001, 0x101, 0x8, 0x8, 0x1ff, 0xfc51c64, 0x10000, 0xffffffff, 0x400, 0x7, 0x2]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffca}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0xe}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffff1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8dc}}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) syz_emit_ethernet(0x32, &(0x7f0000000340)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x35}, {[@ssrr={0x89, 0x7, 0xef, [@broadcast]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x60000063) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x2, @rand_addr=0x64010102}]}, &(0x7f0000000280)=0x10) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000000c0)={r6, @in={{0x2, 0x1000, @empty}}, 0x7fff, 0x0, 0xd78e, 0x0, 0x5a1, 0x0, 0x7}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000002c0)={r8, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0xd, 0x4, 0x12, 0x2}, &(0x7f00000003c0)=0x9c) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000020c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="080027bd7000fbdbdf08000000080005000004000010"], 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x20008094) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYRES64=0x0, @ANYRES16=r4, @ANYBLOB="050000000000000200000200000008000300", @ANYRES32=r9], 0x80}, 0x1, 0x0, 0x0, 0x8001001}, 0x24008094) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DONE(r10, 0x0, 0xc9, 0x0, 0x0) r11 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r3, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r13 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(r11, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002180)=0x14) r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r13, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r13, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000021c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010000000000000000001200000005002a000000000008000300", @ANYRES32=r11, @ANYBLOB="0ef3272e1beeee7e2d34f137703e2893c658fbac94dd5e14c6ac221f8530ae7ec7f538c7864fa9e7b13006f63a1c3f5c682bb3eeb2b797fe4317590c217e3c2e90c77be53045925953d2b127071cc4708502cfdf6ee8928935dac3c65568a42e02d25323f213573fc01166f51fee3ff05b8e4ce34a6b394284367751be9fa5da71ab11bc09768cbc9a7b8c587f1cf759b5613594687fc60807a7d147413047a214d3cdb617e2f246224e475ab71638fcce4bc1e461d8c592ff75a9e85e2c3cfe7dbee7f3bdd64703aba1d68952b21e2a87a5f867a25e132f53a99a1b03e417cf73de32d5"], 0x2c}}, 0x0) sendmsg$inet(r10, &(0x7f0000000580)={&(0x7f00000000c0)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000240)="3ea22b24830bc5af0cdcad1764f67d4b0d218333e192d17f1e7a502a4303a517519594bd6a71", 0x26}, {&(0x7f0000000280)="18c1399599008ce9eb680b34719baf04640c6611d40f80654bc4896e870f9e7635d158194f71ca5c38f5ced113bcf9ba08ee5457dfcfc79cf28c20cfeead8bf19b7f5ba681daf7ae38d767d7db14d9f443fe049b0fecccb73cf19111e1eedc827abeb56605ee902d29cdf6f4c0c8e605f094e945836e26187defa9cbf6cb376c9d9b06545c7223c44d2006fa660cf573649ab5a5413b16c028e1b6c23999a8c79c372caa440a4bbc4a2a8b50cc890b4da44b721944179d2a43bf7055ea20fb5b74c08c3bf2b5339923873ce6", 0xcc}, {&(0x7f0000000380)="dcc1a334d06722e8523c243e82", 0xd}, {&(0x7f00000003c0)="94e06f1979ee6b6dcfdfc61c8ed40c9a0f63e5be862fa1f5d23093a821862afb0cfbaae1339592b3183b7456542f67dfeaf3b1c6f94c6b9d2f6e7edea7fb22dc410da01cf1e136f6c4365dc6c9ce0d42b37195213854d78a6657737bfae855924fd98df006503ddca10f8644897af244a418d4397088afc19e08846b45b3031950811c3eded7a2a1637b8cc14f4361ce6d7632da34acea8c1ec949138fa4656b0e6503ed5d04", 0xa6}], 0x4, &(0x7f0000002300)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1ff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xb}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2f}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @dev={0xac, 0x14, 0x14, 0x27}, @dev={0xac, 0x14, 0x14, 0x1b}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r15, @multicast2, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xa}}], 0xf8}, 0x200000c4) 911.660175ms ago: executing program 0 (id=1746): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x746, 0x0, 0x3}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0) write(r0, &(0x7f00000003c0)="24f3", 0x2) shutdown(r0, 0x1) 888.648375ms ago: executing program 2 (id=1747): r0 = socket(0x11, 0x800000002, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x0) close(r7) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd7000fbdbdf2505000000200001800d0001007564703a73797a32000000000c00028008000300630008"], 0x34}, 0x1, 0x0, 0x0, 0x40404}, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r9, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) listen(r9, 0x0) recvfrom$inet(r9, 0x0, 0x0, 0x40024040, 0x0, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r10, &(0x7f0000000000)={0x1f, 0x74, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x100}, 0xe) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) ioctl(r0, 0x8b2c, 0x0) 278.351367ms ago: executing program 0 (id=1748): r0 = socket(0x6, 0x5, 0x40) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x6, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000c00)={0x2, {{0x2, 0x0, @multicast2}}}, 0x90) r2 = accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffd55, 0xc00) sendfile(r0, r2, &(0x7f0000000080)=0xffffffff, 0x21) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x2a, 0x2, 0x0) r5 = socket(0x11, 0x2, 0x0) setsockopt(r5, 0x107, 0x1, &(0x7f00000001c0)="010000000200060000071a80010061cc", 0x10) close(r5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0xfffffd7c}}]}, 0x34}}, 0x8c000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRESOCT], 0xfc}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket(0x6, 0x5, 0x40) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x6, {{0x2, 0x0, @multicast2}}}, 0x88) (async) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000c00)={0x2, {{0x2, 0x0, @multicast2}}}, 0x90) (async) accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffd55, 0xc00) (async) sendfile(r0, r2, &(0x7f0000000080)=0xffffffff, 0x21) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x2a, 0x2, 0x0) (async) socket(0x11, 0x2, 0x0) (async) setsockopt(r5, 0x107, 0x1, &(0x7f00000001c0)="010000000200060000071a80010061cc", 0x10) (async) close(r5) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0xfffffd7c}}]}, 0x34}}, 0x8c000) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRESOCT], 0xfc}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) 113.044557ms ago: executing program 2 (id=1749): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x238}}, 0x0) 0s ago: executing program 2 (id=1750): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x4, 0xfa, &(0x7f00000007c0)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0x9c, 0x30, 0x25, 0x0, 0x0, {}, [{0x88, 0x1, [@m_pedit={0x84, 0x1, 0x0, 0x0, {{0xa}, {0x4}, {0x58, 0x6, "f1bab4f58dde0db8ae9e985b268d435033d06ad27287953e761716c3cc83c44507a6bfaa00d672a061813ac830c02389f7d71ec21c92d63c8df48f33a62d9c73a6a602bb9953fdd212131b6b36db76c084bc3bf4"}, {0xc}, {0xc}}}]}]}, 0x9c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x77359400}, &(0x7f00000004c0)={0x0}) connect$inet(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0xe1}, 0x8) r3 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000000020500010006000000050004000000fe000900020073797a3100000000050005000200000012000300686173683a6e65742c706f7274000000ff5b3b87675a"], 0x4c}}, 0x2) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="6a0e6435f82b96e120e95ef657c67f3804ab3fd20f854380e05a23b6758439b1bcc2af4612a9ffbedef954ca796197b2ad54eb4aa5e40f7e0679b02c55444cd757567b124e1c78808a05eac11e93d4de3287", 0x52) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000002050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) kernel console output (not intermixed with test programs): 201.559822][T10211] 0ªî{X¹¦: left promiscuous mode [ 201.681754][T10097] chnl_net:caif_netlink_parms(): no params data found [ 201.805606][T10232] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1216'. [ 201.989366][T10236] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1217'. [ 202.465579][ T5840] Bluetooth: hci1: command tx timeout [ 202.498004][T10097] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.507651][T10097] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.522617][T10097] bridge_slave_0: entered allmulticast mode [ 202.533167][T10097] bridge_slave_0: entered promiscuous mode [ 202.682740][T10097] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.709840][T10097] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.731004][T10097] bridge_slave_1: entered allmulticast mode [ 202.767734][T10097] bridge_slave_1: entered promiscuous mode [ 203.070285][T10204] chnl_net:caif_netlink_parms(): no params data found [ 203.159784][T10097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.188812][T10097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.232349][T10285] syzkaller1: entered promiscuous mode [ 203.241239][T10285] syzkaller1: entered allmulticast mode [ 203.410499][T10097] team0: Port device team_slave_0 added [ 203.513425][T10097] team0: Port device team_slave_1 added [ 203.585428][ T5840] Bluetooth: hci2: command 0x041b tx timeout [ 203.701818][T10097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.709419][T10097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.736775][T10097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.751444][T10097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.759150][T10097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.785489][T10097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.806205][T10204] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.813703][T10204] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.846620][T10204] bridge_slave_0: entered allmulticast mode [ 203.874018][T10204] bridge_slave_0: entered promiscuous mode [ 203.897022][T10204] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.911464][T10204] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.934695][T10204] bridge_slave_1: entered allmulticast mode [ 203.945117][T10204] bridge_slave_1: entered promiscuous mode [ 204.283350][T10204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.379127][T10338] validate_nla: 1 callbacks suppressed [ 204.379147][T10338] netlink: 'syz.0.1243': attribute type 32 has an invalid length. [ 204.425053][T10097] hsr_slave_0: entered promiscuous mode [ 204.432019][T10097] hsr_slave_1: entered promiscuous mode [ 204.480690][T10204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.546519][ T5840] Bluetooth: hci1: command tx timeout [ 204.826511][T10204] team0: Port device team_slave_0 added [ 204.867975][T10204] team0: Port device team_slave_1 added [ 205.023593][T10360] tipc: Started in network mode [ 205.031791][T10360] tipc: Node identity ac14140f, cluster identity 4711 [ 205.050243][T10360] tipc: New replicast peer: 255.255.255.255 [ 205.060070][T10360] tipc: Enabled bearer , priority 10 [ 205.072311][T10204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.089660][T10204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.141677][T10204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.164474][T10204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.184916][T10204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.216378][T10368] xt_ipcomp: unknown flags B [ 205.226008][T10368] netlink: 'syz.1.1248': attribute type 10 has an invalid length. [ 205.242905][T10204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.324403][T10368] mac80211_hwsim hwsim10 wlan1: left promiscuous mode [ 205.339743][T10368] mac80211_hwsim hwsim10 wlan1: left allmulticast mode [ 205.362552][T10368] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 205.665503][ T5840] Bluetooth: hci2: command 0x041b tx timeout [ 205.837039][T10204] hsr_slave_0: entered promiscuous mode [ 205.903338][T10204] hsr_slave_1: entered promiscuous mode [ 205.932697][T10204] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.974569][T10204] Cannot create hsr debugfs directory [ 206.056067][ T975] tipc: Node number set to 2886997007 [ 206.624754][ T5840] Bluetooth: hci1: command tx timeout [ 206.829497][T10421] SET target dimension over the limit! [ 206.902206][T10423] SET target dimension over the limit! [ 207.232025][T10431] netlink: 'syz.2.1262': attribute type 1 has an invalid length. [ 207.247318][T10431] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1262'. [ 207.262666][T10431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1262'. [ 207.439666][T10097] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 207.461431][T10097] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 207.499410][T10097] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 207.510171][T10435] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1264'. [ 207.598064][T10436] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1264'. [ 207.609946][T10204] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.642729][T10097] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 207.744845][ T5840] Bluetooth: hci2: command 0x041b tx timeout [ 207.750554][T10204] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.913508][T10204] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.057546][T10204] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.063967][T10453] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1267'. [ 208.141996][T10453] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1267'. [ 208.208904][T10097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.301620][T10097] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.349560][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.356856][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.401549][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.408779][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.533376][T10204] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 208.615778][T10467] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1270'. [ 208.641631][T10467] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1270'. [ 208.684635][T10204] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 208.704666][ T5840] Bluetooth: hci1: command tx timeout [ 208.709596][T10204] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 208.818088][T10204] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 209.262624][T10204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.393682][T10204] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.448854][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.456154][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.520417][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.527720][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.750641][T10097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.186393][T10524] netlink: 340 bytes leftover after parsing attributes in process `syz.0.1281'. [ 210.244873][T10524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1281'. [ 210.496447][T10536] pimreg: entered allmulticast mode [ 210.794970][T10204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.090502][T10204] veth0_vlan: entered promiscuous mode [ 211.182136][T10204] veth1_vlan: entered promiscuous mode [ 211.228037][T10561] netlink: 'syz.0.1288': attribute type 5 has an invalid length. [ 211.275872][T10097] veth0_vlan: entered promiscuous mode [ 211.385515][T10097] veth1_vlan: entered promiscuous mode [ 211.487972][T10204] veth0_macvtap: entered promiscuous mode [ 211.535742][T10204] veth1_macvtap: entered promiscuous mode [ 211.653939][T10097] veth0_macvtap: entered promiscuous mode [ 211.666737][ T5834] Bluetooth: hci3: command 0x0406 tx timeout [ 211.697615][T10204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.754580][T10204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.764444][T10204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.801151][T10204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.817973][T10204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.832753][T10204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.847485][T10204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.863251][T10204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.880927][T10204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.917068][T10097] veth1_macvtap: entered promiscuous mode [ 211.942341][T10204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.959569][T10204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.972605][T10204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.011685][T10204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.022899][T10204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.052294][T10204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.081592][T10204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.150641][T10097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.177254][T10097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.194580][T10097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.218174][T10097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.250314][T10097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.293640][T10097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.311035][T10097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.321601][T10097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.343518][T10097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.362259][T10097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.392916][T10097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.452066][T10204] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.468490][T10204] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.484585][T10204] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.493346][T10204] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.510946][T10585] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1293'. [ 212.547978][T10097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.622242][T10097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.645643][T10097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.674573][T10097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.704736][T10097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.733704][T10097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.753943][T10097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.764807][T10097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.776627][T10097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.896802][T10097] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.931075][T10097] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.951632][T10097] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.961005][T10097] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.990490][T10603] sit0: entered promiscuous mode [ 213.014175][T10603] netlink: 'syz.1.1299': attribute type 1 has an invalid length. [ 213.026589][T10603] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1299'. [ 213.480537][ T6452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.520809][ T6452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.633709][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.673872][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.786330][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.814414][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.868320][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.900246][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.106803][ T6194] IPVS: starting estimator thread 0... [ 214.122163][T10655] Bluetooth: MGMT ver 1.23 [ 214.206040][T10658] IPVS: using max 26 ests per chain, 62400 per kthread [ 214.841181][ T5908] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.161953][ T5908] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.403058][ T5908] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.511797][ T5908] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.796314][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 215.805920][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 215.813817][T10705] netlink: 'syz.2.1319': attribute type 1 has an invalid length. [ 215.823081][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 215.832292][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 215.841686][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 215.881858][T10705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1319'. [ 215.905042][ T5908] bridge_slave_1: left allmulticast mode [ 215.910763][ T5908] bridge_slave_1: left promiscuous mode [ 215.934977][ T5908] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.968858][ T5908] bridge_slave_0: left allmulticast mode [ 215.999887][ T5908] bridge_slave_0: left promiscuous mode [ 216.013526][ T5908] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.465247][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 216.476783][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 216.499318][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 216.516103][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 216.537264][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 216.611606][T10727] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1324'. [ 216.769960][ T5908] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.783630][ T5908] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.803197][ T5908] bond0 (unregistering): Released all slaves [ 216.981997][T10705] hsr_slave_1 (unregistering): left promiscuous mode [ 217.160492][T10732] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1325'. [ 217.513477][ T5908] hsr_slave_0: left promiscuous mode [ 217.565923][ T5908] hsr_slave_1: left promiscuous mode [ 217.573286][ T5908] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.583407][ T5908] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.592413][ T5908] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.600740][ T5908] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.633784][ T5908] veth1_macvtap: left promiscuous mode [ 217.646338][ T5908] veth0_macvtap: left promiscuous mode [ 217.659496][ T5908] veth1_vlan: left promiscuous mode [ 217.669642][ T5908] veth0_vlan: left promiscuous mode [ 217.829402][T10755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1329'. [ 217.845507][T10755] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 217.863321][T10755] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.905782][ T5840] Bluetooth: hci1: command tx timeout [ 218.149140][T10763] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 218.630514][ T5840] Bluetooth: hci2: command tx timeout [ 218.722251][ T5908] team0 (unregistering): Port device team_slave_1 removed [ 218.768367][ T5908] team0 (unregistering): Port device team_slave_0 removed [ 219.932358][T10795] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1338'. [ 220.021447][T10696] chnl_net:caif_netlink_parms(): no params data found [ 220.128071][ T5840] Bluetooth: hci1: command tx timeout [ 220.451553][T10724] chnl_net:caif_netlink_parms(): no params data found [ 220.709013][ T5840] Bluetooth: hci2: command tx timeout [ 220.721543][ T5908] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.980935][T10696] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.003297][T10696] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.011875][T10696] bridge_slave_0: entered allmulticast mode [ 221.025162][T10696] bridge_slave_0: entered promiscuous mode [ 221.118101][ T5908] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.180623][T10848] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1346'. [ 221.249127][T10696] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.261138][T10696] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.268859][T10696] bridge_slave_1: entered allmulticast mode [ 221.276854][T10696] bridge_slave_1: entered promiscuous mode [ 221.336099][T10855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1347'. [ 221.362662][ T5908] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.434371][T10696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.547501][ T5908] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.593333][T10696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.730561][T10724] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.740555][T10724] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.761674][T10724] bridge_slave_0: entered allmulticast mode [ 221.770553][T10724] bridge_slave_0: entered promiscuous mode [ 221.966955][T10696] team0: Port device team_slave_0 added [ 221.990617][T10724] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.004181][T10724] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.012201][T10724] bridge_slave_1: entered allmulticast mode [ 222.021589][T10724] bridge_slave_1: entered promiscuous mode [ 222.041160][T10696] team0: Port device team_slave_1 added [ 222.144910][ T5840] Bluetooth: hci1: command tx timeout [ 222.169996][T10884] xt_TPROXY: Can be used only with -p tcp or -p udp [ 222.198420][T10884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1353'. [ 222.219721][T10884] netlink: 'syz.1.1353': attribute type 8 has an invalid length. [ 222.295913][T10724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.303122][T10886] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1354'. [ 222.323528][T10886] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1354'. [ 222.345204][T10696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.352231][T10696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.379797][T10696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.402365][T10696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.409511][T10696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.442823][T10696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.492433][T10724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.585050][T10894] x_tables: duplicate underflow at hook 1 [ 222.779303][T10904] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1359'. [ 222.795081][ T5840] Bluetooth: hci2: command tx timeout [ 222.806626][T10904] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1359'. [ 222.819384][ T5908] bridge_slave_1: left allmulticast mode [ 222.821324][T10904] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1359'. [ 222.825746][ T5908] bridge_slave_1: left promiscuous mode [ 222.842961][ T5908] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.857727][ T5908] bridge_slave_0: left allmulticast mode [ 222.865199][ T5908] bridge_slave_0: left promiscuous mode [ 222.871004][ T5908] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.896813][T10903] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1360'. [ 223.352065][ T5908] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.363611][ T5908] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.374453][ T5908] bond0 (unregistering): Released all slaves [ 223.407268][T10724] team0: Port device team_slave_0 added [ 223.423083][T10696] hsr_slave_0: entered promiscuous mode [ 223.451635][T10696] hsr_slave_1: entered promiscuous mode [ 223.475642][T10696] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 223.484307][T10696] Cannot create hsr debugfs directory [ 223.502325][T10909] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1360'. [ 223.509113][T10724] team0: Port device team_slave_1 added [ 223.730875][T10724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.738655][T10724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.767521][T10724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.784889][T10724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.792495][T10724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.806092][T10927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1362'. [ 223.829363][T10724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.228927][ T5840] Bluetooth: hci1: command tx timeout [ 224.311843][T10724] hsr_slave_0: entered promiscuous mode [ 224.343309][T10724] hsr_slave_1: entered promiscuous mode [ 224.374406][T10724] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.401846][T10724] Cannot create hsr debugfs directory [ 224.693425][ T5908] hsr_slave_0: left promiscuous mode [ 224.720203][ T5908] hsr_slave_1: left promiscuous mode [ 224.761980][ T5908] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.793362][ T5908] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.821222][ T5908] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.831045][ T5908] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.865212][ T5840] Bluetooth: hci2: command tx timeout [ 224.913064][T10965] netlink: 'syz.1.1372': attribute type 1 has an invalid length. [ 224.938004][ T5908] veth1_macvtap: left promiscuous mode [ 224.950230][ T5908] veth0_macvtap: left promiscuous mode [ 224.956151][ T5908] veth1_vlan: left promiscuous mode [ 224.961693][ T5908] veth0_vlan: left promiscuous mode [ 225.379023][T10977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1376'. [ 225.660924][ T5908] team0 (unregistering): Port device team_slave_1 removed [ 225.709319][ T5908] team0 (unregistering): Port device team_slave_0 removed [ 226.999727][T11003] pim6reg: entered allmulticast mode [ 227.060957][T11004] pim6reg: left allmulticast mode [ 228.107948][T11051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1389'. [ 228.251095][T11055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1390'. [ 228.275545][T11055] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1390'. [ 228.474365][T11060] openvswitch: netlink: Message has 4 unknown bytes. [ 228.891213][T11076] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1398'. [ 228.918418][T11079] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1398'. [ 228.949366][T11080] ip6t_srh: unknown srh invflags 4449 [ 229.414137][T10724] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 229.488657][T10724] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 229.622431][T10724] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 229.755588][T11116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1404'. [ 229.790308][T10724] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 229.964653][T10696] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 230.037023][T10696] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 230.084007][T10696] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 230.098329][T11127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1409'. [ 230.212763][T11127] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.231245][T10696] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 230.352941][T11130] xfrm1: entered allmulticast mode [ 230.395206][T11136] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1411'. [ 230.532736][T10724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.582011][T10724] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.625246][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.632617][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.669089][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.676788][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.803063][T10696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.853015][T10724] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 230.913409][T10696] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.973805][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.981070][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.042351][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.049566][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.338509][T11159] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 231.366677][T10696] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 231.790976][T11178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1419'. [ 231.830220][T10724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.420313][T11208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1423'. [ 232.433282][T10696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.456908][T11213] netlink: 'syz.2.1424': attribute type 4 has an invalid length. [ 232.523316][T11213] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.669977][T10696] veth0_vlan: entered promiscuous mode [ 232.743752][T10696] veth1_vlan: entered promiscuous mode [ 232.826978][T11225] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 232.835115][T11225] IPv6: NLM_F_CREATE should be set when creating new route [ 232.955928][T11225] lo: entered allmulticast mode [ 233.006587][T11225] tunl0: entered allmulticast mode [ 233.047132][T11225] gre0: entered allmulticast mode [ 233.193726][T11225] erspan0: entered allmulticast mode [ 233.222498][T11225] ip_vti0: entered allmulticast mode [ 233.238714][T11225] ip6_vti0: entered allmulticast mode [ 233.264152][T11225] sit0: entered allmulticast mode [ 233.300176][T11225] ip6tnl0: entered allmulticast mode [ 233.328866][T11225] ip6gre0: entered allmulticast mode [ 233.342994][T11225] syz_tun: entered allmulticast mode [ 233.354088][T11225] ip6gretap0: entered allmulticast mode [ 233.365798][T11225] bridge0: entered allmulticast mode [ 233.371968][T11225] vcan0: entered allmulticast mode [ 233.390061][T11225] nlmon0: entered allmulticast mode [ 233.407574][T11225] caif0: entered allmulticast mode [ 233.413705][T11225] batadv0: entered allmulticast mode [ 233.436021][T11225] vxcan0: entered allmulticast mode [ 233.448849][T11225] vxcan1: entered allmulticast mode [ 233.474612][T11225] veth0: entered allmulticast mode [ 233.491294][T11225] veth1: entered allmulticast mode [ 233.515997][T11225] wg0: entered allmulticast mode [ 233.533053][T11225] wg1: entered allmulticast mode [ 233.544095][T11225] wg2: entered allmulticast mode [ 233.559333][T11225] veth0_to_bridge: entered allmulticast mode [ 233.649998][T11225] veth1_to_bridge: entered allmulticast mode [ 233.700299][T11225] veth0_to_bond: entered allmulticast mode [ 233.717613][T11225] bond_slave_0: entered allmulticast mode [ 233.733989][T11225] veth1_to_bond: entered allmulticast mode [ 233.746355][T11225] bond_slave_1: entered allmulticast mode [ 233.773098][T11225] veth0_to_team: entered allmulticast mode [ 233.786501][T11225] team_slave_0: entered allmulticast mode [ 233.802944][T11225] veth1_to_team: entered allmulticast mode [ 233.823945][T11225] team_slave_1: entered allmulticast mode [ 233.843960][T11225] veth0_to_batadv: entered allmulticast mode [ 233.865145][T11225] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.873070][T11225] batadv_slave_0: entered allmulticast mode [ 233.900526][T11225] veth1_to_batadv: entered allmulticast mode [ 233.925459][T11225] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.943614][T11225] batadv_slave_1: entered allmulticast mode [ 233.963242][T11225] xfrm0: entered allmulticast mode [ 233.990062][T11225] veth0_to_hsr: entered allmulticast mode [ 234.020952][T11225] hsr_slave_0: entered allmulticast mode [ 234.054887][T11225] ï‰Oܼ: left promiscuous mode [ 234.059854][T11225] ï‰Oܼ: entered allmulticast mode [ 234.076758][T11225] veth1_virt_wifi: entered allmulticast mode [ 234.102074][T11225] veth0_virt_wifi: entered allmulticast mode [ 234.118851][T11225] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 234.135462][T11225] veth1_vlan: entered allmulticast mode [ 234.155980][T11225] [H: entered allmulticast mode [ 234.219053][T11225] vlan0: entered allmulticast mode [ 234.235125][T11225] vlan1: entered allmulticast mode [ 234.240920][T11225] macvlan0: entered allmulticast mode [ 234.264574][T11225] macvlan1: entered allmulticast mode [ 234.283426][T11225] ipvlan0: entered allmulticast mode [ 234.301173][T11225] veth1_macvtap: entered allmulticast mode [ 234.322744][T11225] veth0_macvtap: entered allmulticast mode [ 234.353323][T11225] macvtap0: entered allmulticast mode [ 234.381668][T11225] macsec0: entered allmulticast mode [ 234.413451][T11225] geneve0: entered allmulticast mode [ 234.436301][T11225] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.454563][T11225] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.471427][T11225] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.480506][T11225] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.489713][T11225] geneve1: entered allmulticast mode [ 234.504357][T11225] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 234.526581][T11225] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 234.558641][T11225] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 234.584841][T11225] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 234.610413][T11225] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 234.640823][T11225] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 234.663636][T11225] : entered allmulticast mode [ 234.679471][T11225] bond0: entered allmulticast mode [ 234.694783][T11225] batadv0.5: entered allmulticast mode [ 234.702533][T11225] geneve2: entered allmulticast mode [ 234.708682][T11225] vti60: entered allmulticast mode [ 234.714036][T11225] ip6tnl1: entered allmulticast mode [ 234.719620][T11225] bond1: entered allmulticast mode [ 234.725279][T11225] hsr1: entered allmulticast mode [ 234.730506][T11225] bridge1: entered allmulticast mode [ 234.736214][T11225] syztnl0: entered allmulticast mode [ 234.741623][T11225] vlan2: left promiscuous mode [ 234.746849][T11225] bridge0: left promiscuous mode [ 234.752079][T11225] vlan2: entered allmulticast mode [ 234.757755][T11225] ip6tnl2: entered allmulticast mode [ 234.763354][T11225] rose0: entered allmulticast mode [ 234.769092][T11225] veth2: entered allmulticast mode [ 234.774456][T11225] veth3: entered allmulticast mode [ 234.788406][T11225] veth4: entered allmulticast mode [ 234.793786][T11225] veth5: entered allmulticast mode [ 234.803395][T11225] vxlan0: entered allmulticast mode [ 234.809077][T11225] bond3: entered allmulticast mode [ 234.816638][T11225] team0: entered allmulticast mode [ 234.951271][T10696] veth0_macvtap: entered promiscuous mode [ 235.034233][T10696] veth1_macvtap: entered promiscuous mode [ 235.293247][T10696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.320368][T10696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.332135][T10696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.349519][T10696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.361366][T10696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.378306][T10696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.391166][T11262] __nla_validate_parse: 1 callbacks suppressed [ 235.391189][T11262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1434'. [ 235.415618][T10696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.495759][T10724] veth0_vlan: entered promiscuous mode [ 235.517689][T10696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.564707][T10696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.581338][T10696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.592675][T10696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.610781][T10696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.658885][T10724] veth1_vlan: entered promiscuous mode [ 235.690381][T10696] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.721112][T10696] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.748255][T10696] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.766249][T10696] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.021839][T10724] veth0_macvtap: entered promiscuous mode [ 236.112937][T10724] veth1_macvtap: entered promiscuous mode [ 236.148585][ T5908] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.178992][ T5908] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.278911][ T6442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.307728][ T6442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.313561][T10724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.354812][T10724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.370857][T10724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.383954][T10724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.407524][T10724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.423142][T10724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.442813][T10724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.453700][T10724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.478957][T10724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.575479][T11293] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1443'. [ 236.602406][T10724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.639014][T10724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.670918][T10724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.700283][T10724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.726109][T10724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.732155][T11303] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1444'. [ 236.752883][T11303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1444'. [ 236.753535][T10724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.790648][T10724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.844020][T10724] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.885010][T10724] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.920988][T10724] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.941922][T11309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1445'. [ 236.963223][T10724] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.322738][T11315] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1446'. [ 237.544101][ T6451] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.622472][ T6453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.660922][ T6453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.831081][ T6451] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.041900][ T6451] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.129796][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.171928][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.239314][T11350] netlink: 'syz.2.1453': attribute type 41 has an invalid length. [ 238.356009][ T6451] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.895414][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 238.911083][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 238.920471][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 238.939076][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 238.949871][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 239.163965][T11365] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1456'. [ 239.236241][ T6451] bridge_slave_1: left allmulticast mode [ 239.242054][ T6451] bridge_slave_1: left promiscuous mode [ 239.248805][ T6451] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.271674][ T6451] bridge_slave_0: left allmulticast mode [ 239.282797][ T6451] bridge_slave_0: left promiscuous mode [ 239.289915][ T6451] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.683335][ T6451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.711241][ T6451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.733070][ T6451] bond0 (unregistering): Released all slaves [ 240.199407][T11386] tipc: Enabling of bearer rejected, failed to enable media [ 240.294166][T11391] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 240.336239][T11391] x_tables: duplicate underflow at hook 1 [ 240.415749][T11391] x_tables: duplicate underflow at hook 1 [ 240.540257][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 240.549936][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 240.561396][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 240.571630][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 240.580041][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 240.696222][T11404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1462'. [ 240.792236][ T6451] hsr_slave_0: left promiscuous mode [ 240.806177][T11409] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1464'. [ 240.817201][T11412] netlink: 'syz.2.1463': attribute type 32 has an invalid length. [ 240.831122][ T6451] hsr_slave_1: left promiscuous mode [ 240.839503][ T6451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.849518][T11412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1463'. [ 240.850632][ T6451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.871179][ T6451] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.881070][ T6451] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.945569][ T6451] veth1_macvtap: left promiscuous mode [ 240.951198][ T6451] veth0_macvtap: left promiscuous mode [ 240.974899][ T6451] veth1_vlan: left promiscuous mode [ 240.980273][ T6451] veth0_vlan: left promiscuous mode [ 241.003269][T11416] can: request_module (can-proto-3) failed. [ 241.025448][ T5834] Bluetooth: hci1: command tx timeout [ 241.541768][ T6451] team0 (unregistering): Port device team_slave_1 removed [ 241.583739][ T6451] team0 (unregistering): Port device team_slave_0 removed [ 242.059642][T11412] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 242.077070][T11412] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 242.308328][T11429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1468'. [ 242.455600][T11435] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1467'. [ 242.626524][ T5834] Bluetooth: hci2: command tx timeout [ 242.778531][T11362] chnl_net:caif_netlink_parms(): no params data found [ 243.105015][ T5834] Bluetooth: hci1: command tx timeout [ 243.162284][T11474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1474'. [ 243.200385][T11466] xt_CT: No such helper "snmp_trap" [ 243.282989][T11471] pim6reg: entered allmulticast mode [ 243.448029][T11362] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.480521][T11362] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.513786][T11362] bridge_slave_0: entered allmulticast mode [ 243.525615][T11362] bridge_slave_0: entered promiscuous mode [ 243.580558][T11362] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.598937][T11362] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.608558][T11362] bridge_slave_1: entered allmulticast mode [ 243.620235][T11490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1475'. [ 243.621209][T11362] bridge_slave_1: entered promiscuous mode [ 243.780872][T11362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.847182][ T6451] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.859451][T11494] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1476'. [ 243.948839][T11362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.201347][ T6451] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.302742][T11362] team0: Port device team_slave_0 added [ 244.319854][T11504] xt_CT: No such helper "snmp_trap" [ 244.358987][T11401] chnl_net:caif_netlink_parms(): no params data found [ 244.444337][T11362] team0: Port device team_slave_1 added [ 244.633615][ T6451] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.705347][ T5834] Bluetooth: hci2: command tx timeout [ 244.747243][T11362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.754351][T11362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.787763][T11362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.800929][T11527] x_tables: unsorted entry at hook 2 [ 244.959166][ T6451] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.992702][T11362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.024699][T11362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.126721][T11362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.184875][ T5834] Bluetooth: hci1: command tx timeout [ 245.293182][T11550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1486'. [ 245.334980][T11554] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1488'. [ 245.369065][T11401] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.381267][T11401] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.401797][T11401] bridge_slave_0: entered allmulticast mode [ 245.431621][T11401] bridge_slave_0: entered promiscuous mode [ 245.447129][T11401] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.455293][T11401] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.463013][T11401] bridge_slave_1: entered allmulticast mode [ 245.471454][T11401] bridge_slave_1: entered promiscuous mode [ 245.720881][T11401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.735636][T11401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.796718][T11569] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1491'. [ 245.821350][T11362] hsr_slave_0: entered promiscuous mode [ 245.834466][T11362] hsr_slave_1: entered promiscuous mode [ 245.950211][T11401] team0: Port device team_slave_0 added [ 246.022563][T11574] syz.0.1492: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 246.041675][ T6451] bridge_slave_1: left allmulticast mode [ 246.049702][ T6451] bridge_slave_1: left promiscuous mode [ 246.056628][ T6451] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.065765][T11574] CPU: 0 UID: 0 PID: 11574 Comm: syz.0.1492 Not tainted 6.15.0-rc5-syzkaller-00130-g12f4ee312c95 #0 PREEMPT(full) [ 246.065797][T11574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 246.065820][T11574] Call Trace: [ 246.065829][T11574] [ 246.065839][T11574] dump_stack_lvl+0x189/0x250 [ 246.065880][T11574] ? __pfx_dump_stack_lvl+0x10/0x10 [ 246.065910][T11574] ? __pfx__printk+0x10/0x10 [ 246.065930][T11574] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 246.065964][T11574] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 246.066000][T11574] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 246.066037][T11574] warn_alloc+0x214/0x310 [ 246.066067][T11574] ? __pfx___schedule+0x10/0x10 [ 246.066093][T11574] ? __pfx_warn_alloc+0x10/0x10 [ 246.066121][T11574] ? kasan_save_track+0x4f/0x80 [ 246.066144][T11574] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 246.066167][T11574] ? xskq_create+0x56/0x170 [ 246.066192][T11574] ? __x64_sys_setsockopt+0x18b/0x220 [ 246.066216][T11574] ? do_syscall_64+0xf6/0x210 [ 246.066239][T11574] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.066272][T11574] __vmalloc_node_range_noprof+0x125/0x12c0 [ 246.066346][T11574] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 246.066372][T11574] ? xskq_create+0x56/0x170 [ 246.066397][T11574] ? __kasan_kmalloc+0x93/0xb0 [ 246.066428][T11574] vmalloc_user_noprof+0x74/0x80 [ 246.066460][T11574] ? xskq_create+0xbf/0x170 [ 246.066481][T11574] xskq_create+0xbf/0x170 [ 246.066507][T11574] xsk_init_queue+0xb0/0x110 [ 246.066533][T11574] xsk_setsockopt+0x43f/0x710 [ 246.066556][T11574] ? __pfx_xsk_setsockopt+0x10/0x10 [ 246.066591][T11574] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 246.066614][T11574] ? __pfx_xsk_setsockopt+0x10/0x10 [ 246.066636][T11574] do_sock_setsockopt+0x257/0x3e0 [ 246.066665][T11574] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 246.066687][T11574] ? __fget_files+0x2a/0x420 [ 246.066717][T11574] ? __fget_files+0x3a0/0x420 [ 246.066740][T11574] ? __fget_files+0x2a/0x420 [ 246.066774][T11574] __x64_sys_setsockopt+0x18b/0x220 [ 246.066808][T11574] do_syscall_64+0xf6/0x210 [ 246.066832][T11574] ? clear_bhb_loop+0x45/0xa0 [ 246.066858][T11574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.066877][T11574] RIP: 0033:0x7fb96438e969 [ 246.066896][T11574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.066915][T11574] RSP: 002b:00007fb96517d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 246.066937][T11574] RAX: ffffffffffffffda RBX: 00007fb9645b5fa0 RCX: 00007fb96438e969 [ 246.066952][T11574] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 246.066965][T11574] RBP: 00007fb964410ab1 R08: 0000000000000004 R09: 0000000000000000 [ 246.066978][T11574] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.066991][T11574] R13: 0000000000000000 R14: 00007fb9645b5fa0 R15: 00007fff395169e8 [ 246.067025][T11574] [ 246.067122][T11574] Mem-Info: [ 246.365499][T11574] active_anon:5413 inactive_anon:0 isolated_anon:0 [ 246.365499][T11574] active_file:1467 inactive_file:39905 isolated_file:0 [ 246.365499][T11574] unevictable:768 dirty:51 writeback:0 [ 246.365499][T11574] slab_reclaimable:10763 slab_unreclaimable:105670 [ 246.365499][T11574] mapped:29549 shmem:1386 pagetables:890 [ 246.365499][T11574] sec_pagetables:0 bounce:0 [ 246.365499][T11574] kernel_misc_reclaimable:0 [ 246.365499][T11574] free:1341342 free_pcp:567 free_cma:0 [ 246.416533][ T6451] bridge_slave_0: left allmulticast mode [ 246.422428][T11574] Node 0 active_anon:21752kB inactive_anon:0kB active_file:5868kB inactive_file:159416kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118196kB dirty:200kB writeback:0kB shmem:4008kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12572kB pagetables:3660kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 246.426618][ T6451] bridge_slave_0: left promiscuous mode [ 246.463891][ T6451] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.468961][T11574] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 246.512395][T11574] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 246.554810][T11574] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 246.606048][T11574] Node 0 DMA32 free:1440692kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:21644kB inactive_anon:0kB active_file:5868kB inactive_file:159316kB unevictable:1536kB writepending:196kB present:3129332kB managed:2564140kB mlocked:0kB bounce:0kB free_pcp:1704kB local_pcp:924kB free_cma:0kB [ 246.670420][T11574] lowmem_reserve[]: 0 0 0 0 0 [ 246.680777][T11574] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:4kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 246.714801][T11574] lowmem_reserve[]: 0 0 0 0 0 [ 246.719729][T11574] Node 1 Normal free:3910292kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 246.756316][T11574] lowmem_reserve[]: 0 0 0 0 0 [ 246.761738][T11574] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 246.782610][T11574] Node 0 DMA32: 2*4kB (ME) 6*8kB (ME) 17*16kB (UME) 157*32kB (UME) 127*64kB (UME) 46*128kB (UME) 15*256kB (UME) 5*512kB (UM) 17*1024kB (UME) 10*2048kB (UM) 336*4096kB (UM) = 1439912kB [ 246.814584][ T5834] Bluetooth: hci2: command tx timeout [ 246.819987][T11574] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 246.894762][T11574] Node 1 Normal: 231*4kB (UME) 39*8kB (UME) 32*16kB (UME) 228*32kB (UME) 91*64kB (UME) 41*128kB (UME) 16*256kB (UME) 10*512kB (UME) 2*1024kB (ME) 2*2048kB (U) 946*4096kB (M) = 3910292kB [ 246.926706][T11574] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 246.950118][T11574] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 246.961738][T11574] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 246.971836][T11574] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 247.021929][T11574] 42756 total pagecache pages [ 247.031297][T11574] 0 pages in swap cache [ 247.047453][T11574] Free swap = 124996kB [ 247.055374][T11574] Total swap = 124996kB [ 247.070009][T11574] 2097051 pages RAM [ 247.073989][T11574] 0 pages HighMem/MovableOnly [ 247.098586][T11574] 424358 pages reserved [ 247.104684][T11574] 0 pages cma reserved [ 247.270093][ T6451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.274808][ T5834] Bluetooth: hci1: command tx timeout [ 247.287611][ T6451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.298312][ T6451] bond0 (unregistering): Released all slaves [ 247.316681][T11401] team0: Port device team_slave_1 added [ 247.581910][T11401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.590495][T11401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.626164][T11401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.673166][T11401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.689482][T11401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.717722][T11401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.818133][T11598] tipc: Enabled bearer , priority 0 [ 247.883966][ T6451] hsr_slave_0: left promiscuous mode [ 247.890029][ T6451] hsr_slave_1: left promiscuous mode [ 247.897492][ T6451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.905935][ T6451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.913797][ T6451] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.922013][ T6451] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.944166][ T6451] veth1_macvtap: left promiscuous mode [ 247.950005][ T6451] veth0_macvtap: left promiscuous mode [ 247.955843][ T6451] veth1_vlan: left promiscuous mode [ 247.961194][ T6451] veth0_vlan: left promiscuous mode [ 248.441657][ T6451] team0 (unregistering): Port device team_slave_1 removed [ 248.497700][ T6451] team0 (unregistering): Port device team_slave_0 removed [ 248.875059][ T5834] Bluetooth: hci2: command tx timeout [ 248.899544][T11598] syzkaller0: entered promiscuous mode [ 248.905188][T11598] syzkaller0: entered allmulticast mode [ 248.964948][T11401] hsr_slave_0: entered promiscuous mode [ 248.971380][T11401] hsr_slave_1: entered promiscuous mode [ 248.977719][T11401] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 248.985376][T11401] Cannot create hsr debugfs directory [ 249.000433][T11602] tipc: Resetting bearer [ 249.016513][T11597] tipc: Resetting bearer [ 249.032109][T11597] tipc: Disabling bearer [ 249.540495][T11612] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1500'. [ 249.693911][T11613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1499'. [ 250.389888][T11362] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 250.487544][T11362] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 250.495465][T11643] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1506'. [ 250.518880][T11362] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 250.526337][T11643] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1506'. [ 250.555410][T11641] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 250.666389][T11362] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 250.852074][T11658] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1511'. [ 251.073504][T11666] netlink: 'syz.1.1514': attribute type 24 has an invalid length. [ 251.182239][T11362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.220179][T11672] sctp: [Deprecated]: syz.0.1515 (pid 11672) Use of struct sctp_assoc_value in delayed_ack socket option. [ 251.220179][T11672] Use struct sctp_sack_info instead [ 251.244166][T11670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1512'. [ 251.333240][T11362] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.341824][T11666] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1514'. [ 251.400835][ T6451] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.408203][ T6451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.514339][ T6451] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.521635][ T6451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.680051][T11401] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 251.732896][T11401] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 251.774609][T11690] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 251.840825][T11401] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 251.899948][T11401] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 252.017428][T11362] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 252.132294][T11713] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1524'. [ 252.390905][T11401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.477458][T11401] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.523817][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.531096][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.567520][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.574770][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.594109][T11362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.826663][T11362] veth0_vlan: entered promiscuous mode [ 252.872088][T11362] veth1_vlan: entered promiscuous mode [ 252.985711][T11738] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1529'. [ 253.013448][T11362] veth0_macvtap: entered promiscuous mode [ 253.053602][T11362] veth1_macvtap: entered promiscuous mode [ 253.118280][T11362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.162684][T11362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.189424][T11362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.208702][T11745] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1531'. [ 253.213953][T11362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.240712][T11362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.258018][T11362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.271987][T11362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.316912][T11362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.337789][T11362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.352291][T11362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.364465][T11362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.395848][T11362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.438743][T11362] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.449356][T11362] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.459939][T11362] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.477077][T11362] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.556956][T11401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.782482][T11761] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1536'. [ 253.884928][T11766] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1538'. [ 253.930227][ T3507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.956321][ T3507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.047470][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.060257][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.577701][T11787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1542'. [ 254.600730][T11788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1543'. [ 254.631748][T11401] veth0_vlan: entered promiscuous mode [ 254.751402][T11401] veth1_vlan: entered promiscuous mode [ 254.902021][T11801] netlink: 'syz.0.1545': attribute type 24 has an invalid length. [ 254.921671][ T6451] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.062316][ T6451] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.134312][T11401] veth0_macvtap: entered promiscuous mode [ 255.221174][ T6451] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.252571][T11401] veth1_macvtap: entered promiscuous mode [ 255.281352][T11401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.292334][T11401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.302433][T11401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.312936][T11401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.322972][T11401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.333843][T11401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.344315][T11401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.355496][T11401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.367053][T11401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.378400][T11401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.389014][T11401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.400050][T11401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.410562][T11401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.420724][T11401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.431484][T11401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.445062][T11401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.463183][T11401] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.472433][T11401] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.481344][T11401] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.491645][T11401] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.527156][ T6451] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.671306][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.677761][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.765953][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.774843][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.985421][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.993325][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.091683][T11823] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 256.136065][ T6451] bridge_slave_1: left allmulticast mode [ 256.141767][ T6451] bridge_slave_1: left promiscuous mode [ 256.181326][ T6451] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.268387][ T6451] bridge_slave_0: left allmulticast mode [ 256.288628][ T6451] bridge_slave_0: left promiscuous mode [ 256.306146][ T6451] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.312847][T11832] xt_bpf: check failed: parse error [ 256.471935][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 256.481797][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 256.490710][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 256.508428][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 256.516289][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 256.911928][ T6451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.923753][ T6451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.937037][ T6451] bond0 (unregistering): Released all slaves [ 256.979467][T11836] __nla_validate_parse: 1 callbacks suppressed [ 256.979490][T11836] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1556'. [ 257.258757][T11853] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1558'. [ 257.304175][T11853] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1558'. [ 258.625397][ T5834] Bluetooth: hci1: command tx timeout [ 258.885746][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 258.908664][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 258.930864][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 258.947752][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 258.956330][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 259.087679][T11866] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 259.352176][T11881] sctp: [Deprecated]: syz.0.1564 (pid 11881) Use of struct sctp_assoc_value in delayed_ack socket option. [ 259.352176][T11881] Use struct sctp_sack_info instead [ 259.379017][T11880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1563'. [ 259.395062][T11880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1563'. [ 259.404024][T11880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1563'. [ 259.445163][ T6451] hsr_slave_0: left promiscuous mode [ 259.457854][ T6451] hsr_slave_1: left promiscuous mode [ 259.470902][ T6451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.481723][ T6451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.493183][T11886] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1566'. [ 259.494345][ T6451] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.524863][ T6451] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.549955][ T6451] veth1_macvtap: left promiscuous mode [ 259.556312][ T6451] veth0_macvtap: left promiscuous mode [ 259.562327][ T6451] veth1_vlan: left promiscuous mode [ 259.569457][ T6451] veth0_vlan: left promiscuous mode [ 259.573268][T11890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1567'. [ 259.625143][T11891] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1567'. [ 260.181257][ T6451] team0 (unregistering): Port device team_slave_1 removed [ 260.231469][ T6451] team0 (unregistering): Port device team_slave_0 removed [ 260.650163][T11888] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1567'. [ 260.667378][T11890] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 260.708969][ T5840] Bluetooth: hci1: command tx timeout [ 260.894866][T11907] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 260.894872][T11909] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 261.025467][ T5840] Bluetooth: hci2: command tx timeout [ 261.504659][T11837] chnl_net:caif_netlink_parms(): no params data found [ 261.640917][ T6451] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.743919][T11869] chnl_net:caif_netlink_parms(): no params data found [ 261.803840][T11937] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 261.990494][ T6451] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.132078][T11948] __nla_validate_parse: 2 callbacks suppressed [ 262.132100][T11948] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1580'. [ 262.150533][ T6451] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.268200][T11954] netlink: 'syz.0.1582': attribute type 9 has an invalid length. [ 262.302503][T11954] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1582'. [ 262.396342][ T6451] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.465768][T11837] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.483194][T11837] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.493404][T11837] bridge_slave_0: entered allmulticast mode [ 262.517839][T11837] bridge_slave_0: entered promiscuous mode [ 262.558957][T11962] IPv6: sit1: Disabled Multicast RS [ 262.566203][T11837] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.577794][T11837] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.585318][T11837] bridge_slave_1: entered allmulticast mode [ 262.593168][T11837] bridge_slave_1: entered promiscuous mode [ 262.689771][T11968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1584'. [ 262.701753][T11968] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1584'. [ 262.762787][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 262.776538][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 262.795987][ T5834] Bluetooth: hci1: command tx timeout [ 262.801528][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 262.814581][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 262.823318][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 262.885960][T11869] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.924851][T11869] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.932183][T11869] bridge_slave_0: entered allmulticast mode [ 263.006628][T11869] bridge_slave_0: entered promiscuous mode [ 263.037283][T11837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.091721][T11869] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.109125][T11869] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.109382][ T5840] Bluetooth: hci2: command tx timeout [ 263.116772][T11869] bridge_slave_1: entered allmulticast mode [ 263.129989][T11869] bridge_slave_1: entered promiscuous mode [ 263.147383][T11837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.163653][T11980] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 263.404919][T11987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1588'. [ 263.546875][T11837] team0: Port device team_slave_0 added [ 263.573151][T11869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.609516][T11869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.721966][T11837] team0: Port device team_slave_1 added [ 263.966835][T11869] team0: Port device team_slave_0 added [ 263.990323][T11869] team0: Port device team_slave_1 added [ 264.008212][T12005] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.018474][T11837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.028267][T11837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.055936][T11837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.087699][ T6451] bridge_slave_1: left allmulticast mode [ 264.093414][ T6451] bridge_slave_1: left promiscuous mode [ 264.114091][ T6451] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.133282][ T6451] bridge_slave_0: left allmulticast mode [ 264.141664][ T6451] bridge_slave_0: left promiscuous mode [ 264.154002][ T6451] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.167209][T12013] netlink: 'syz.2.1592': attribute type 39 has an invalid length. [ 264.790739][ T6451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.808239][ T6451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.828661][ T6451] bond0 (unregistering): Released all slaves [ 264.866844][ T5840] Bluetooth: hci4: command tx timeout [ 264.873058][ T5840] Bluetooth: hci1: command tx timeout [ 264.959474][T11837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.974669][T11837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.010901][T11837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.184939][ T5840] Bluetooth: hci2: command tx timeout [ 265.227063][T12040] FAULT_INJECTION: forcing a failure. [ 265.227063][T12040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.287535][T12040] CPU: 1 UID: 0 PID: 12040 Comm: syz.0.1593 Not tainted 6.15.0-rc5-syzkaller-00130-g12f4ee312c95 #0 PREEMPT(full) [ 265.287565][T12040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 265.287579][T12040] Call Trace: [ 265.287586][T12040] [ 265.287595][T12040] dump_stack_lvl+0x189/0x250 [ 265.287629][T12040] ? __lock_acquire+0xaac/0xd20 [ 265.287661][T12040] ? __pfx_dump_stack_lvl+0x10/0x10 [ 265.287689][T12040] ? __pfx__printk+0x10/0x10 [ 265.287710][T12040] ? __might_fault+0xb0/0x130 [ 265.287749][T12040] should_fail_ex+0x414/0x560 [ 265.287776][T12040] _copy_from_user+0x2d/0xb0 [ 265.287804][T12040] kstrtouint_from_user+0xc4/0x170 [ 265.287831][T12040] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 265.287880][T12040] proc_fail_nth_write+0x88/0x240 [ 265.287908][T12040] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 265.287943][T12040] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 265.287973][T12040] vfs_write+0x27b/0xa90 [ 265.288008][T12040] ? __pfx_vfs_write+0x10/0x10 [ 265.288032][T12040] ? __fget_files+0x2a/0x420 [ 265.288064][T12040] ? __fget_files+0x3a0/0x420 [ 265.288088][T12040] ? __fget_files+0x2a/0x420 [ 265.288123][T12040] ksys_write+0x145/0x250 [ 265.288144][T12040] ? rcu_is_watching+0x15/0xb0 [ 265.288176][T12040] ? __pfx_ksys_write+0x10/0x10 [ 265.288203][T12040] ? do_syscall_64+0xba/0x210 [ 265.288232][T12040] do_syscall_64+0xf6/0x210 [ 265.288258][T12040] ? clear_bhb_loop+0x45/0xa0 [ 265.288283][T12040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.288302][T12040] RIP: 0033:0x7fb96438d41f [ 265.288320][T12040] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 265.288338][T12040] RSP: 002b:00007fb96513b030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 265.288360][T12040] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb96438d41f [ 265.288373][T12040] RDX: 0000000000000001 RSI: 00007fb96513b0a0 RDI: 0000000000000007 [ 265.288386][T12040] RBP: 00007fb96513b090 R08: 0000000000000000 R09: 000000000000001c [ 265.288398][T12040] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 265.288410][T12040] R13: 0000000000000000 R14: 00007fb9645b6160 R15: 00007fff395169e8 [ 265.288443][T12040] [ 265.333948][T12045] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1594'. [ 265.350626][T11869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.535497][T11869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.564350][T11869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.583882][T11869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.591318][T11869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.617525][T11869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.851042][T11837] hsr_slave_0: entered promiscuous mode [ 265.858875][T11837] hsr_slave_1: entered promiscuous mode [ 265.962342][T11869] hsr_slave_0: entered promiscuous mode [ 265.977321][T11869] hsr_slave_1: entered promiscuous mode [ 265.986058][T11869] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 265.994205][T11869] Cannot create hsr debugfs directory [ 266.059330][ T6451] hsr_slave_0: left promiscuous mode [ 266.065657][ T6451] hsr_slave_1: left promiscuous mode [ 266.071649][ T6451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.085028][ T6451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.093497][ T6451] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.109378][ T6451] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.159510][ T6451] veth1_macvtap: left promiscuous mode [ 266.165374][ T6451] veth0_macvtap: left promiscuous mode [ 266.171073][ T6451] veth1_vlan: left promiscuous mode [ 266.177146][ T6451] veth0_vlan: left promiscuous mode [ 266.457405][T12060] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1598'. [ 266.718242][ T6451] team0 (unregistering): Port device team_slave_1 removed [ 266.766971][ T6451] team0 (unregistering): Port device team_slave_0 removed [ 266.948200][ T5840] Bluetooth: hci4: command tx timeout [ 267.256603][T12056] netlink: 'syz.2.1598': attribute type 29 has an invalid length. [ 267.264788][ T5840] Bluetooth: hci2: command tx timeout [ 267.521296][T12065] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1599'. [ 267.921606][T12077] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.114716][T11971] chnl_net:caif_netlink_parms(): no params data found [ 268.732136][T11971] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.757049][T11971] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.764407][T11971] bridge_slave_0: entered allmulticast mode [ 268.779647][T11971] bridge_slave_0: entered promiscuous mode [ 268.795643][T11971] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.803021][T11971] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.830741][T11971] bridge_slave_1: entered allmulticast mode [ 268.846945][T11971] bridge_slave_1: entered promiscuous mode [ 268.985235][T11971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.003598][T12116] syzkaller1: entered promiscuous mode [ 269.025765][ T5840] Bluetooth: hci4: command tx timeout [ 269.027636][T12116] syzkaller1: entered allmulticast mode [ 269.057934][T11971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.206444][T11971] team0: Port device team_slave_0 added [ 269.304151][T11971] team0: Port device team_slave_1 added [ 269.406152][T11971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.421248][T11971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.486023][T11971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.513229][T11869] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 269.544102][T11971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.551724][T11971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.578402][T11971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.579175][T12140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1617'. [ 269.644446][T12140] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 269.682990][T11869] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 269.818745][T11869] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 269.839330][T11869] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 269.973953][T11971] hsr_slave_0: entered promiscuous mode [ 269.988883][T11971] hsr_slave_1: entered promiscuous mode [ 269.996611][T11971] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 270.024019][T11971] Cannot create hsr debugfs directory [ 270.102384][T12158] netlink: 'syz.0.1621': attribute type 6 has an invalid length. [ 270.525959][T11837] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 270.542527][T11837] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 270.593091][T11971] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.623099][T11837] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 270.637745][T11837] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 270.692552][T11971] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.730482][T11869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.794191][T11971] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.840451][T11869] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.898340][T11971] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.943773][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.951032][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.991799][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.999111][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.106576][ T5840] Bluetooth: hci4: command tx timeout [ 271.381597][T11837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.532916][T11837] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.616200][T11971] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 271.667143][T11971] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 271.729930][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.737189][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.762805][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.770066][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.807884][T11971] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 271.901788][T11971] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 272.345727][T11869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.372614][T11971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.509654][T11971] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.569835][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.577450][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.656728][ T6438] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.663973][ T6438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.808717][T12212] unknown channel width for channel at 909000KHz? [ 272.816197][T12212] unknown channel width for channel at 909000KHz? [ 272.821384][T12214] netlink: 'syz.2.1633': attribute type 1 has an invalid length. [ 272.915249][T12214] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1633'. [ 273.079964][T11837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.119452][T12223] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 273.307808][T11837] veth0_vlan: entered promiscuous mode [ 273.380060][T11837] veth1_vlan: entered promiscuous mode [ 273.512948][T12234] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.536186][T12234] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.552340][T12234] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.787428][T11971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.811073][T11837] veth0_macvtap: entered promiscuous mode [ 273.856652][T11837] veth1_macvtap: entered promiscuous mode [ 274.025773][T11869] veth0_vlan: entered promiscuous mode [ 274.106885][T11837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.134787][T11837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.160922][T11837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.188302][T11837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.217384][T11837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.271118][T11837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.293652][T11837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.314943][T11837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.334634][T11837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.359312][T11837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.379440][T11971] veth0_vlan: entered promiscuous mode [ 274.421922][T11971] veth1_vlan: entered promiscuous mode [ 274.439983][T11869] veth1_vlan: entered promiscuous mode [ 274.463394][T11837] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.483857][T11837] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.492990][T11837] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.506627][T11837] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.812121][T11971] veth0_macvtap: entered promiscuous mode [ 274.829112][ T6451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.831157][T11869] veth0_macvtap: entered promiscuous mode [ 274.849824][ T6451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.872638][T11869] veth1_macvtap: entered promiscuous mode [ 274.885732][T11971] veth1_macvtap: entered promiscuous mode [ 274.924334][T12282] netlink: 'syz.2.1641': attribute type 11 has an invalid length. [ 274.941538][T11869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.963753][T11869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.973768][T11869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.984421][T11869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.994903][T11869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.005689][T11869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.017137][T11869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.081511][T11869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.123480][T11869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.148136][T11869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.161540][T11869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.171620][T11869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.187331][T11869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.200821][T11869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.217119][T11971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.234294][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.243108][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.251939][T11971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.273747][T11971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.287877][T11971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.300425][T11971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.313021][T11971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.334627][T11971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.354634][T11971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.369628][T11971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.432941][T11869] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.445530][T11869] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.458509][T11869] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.467498][T11869] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.493751][T11971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.526388][T11971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.536928][T11971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.547660][T11971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.557646][T11971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.568563][T11971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.578461][T11971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.589331][T11971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.603033][T11971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.649761][T11971] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.667355][T11971] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.678785][T11971] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.688543][T11971] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.799506][T12299] tipc: Started in network mode [ 275.806489][T12299] tipc: Node identity 08, cluster identity 4711 [ 275.812879][T12299] tipc: Enabled bearer , priority 10 [ 276.076988][ T6451] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.178541][ T6451] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.326896][ T6451] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.362159][ T6438] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.386030][ T6438] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.438036][ T6451] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.455391][ T6438] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.476337][ T6438] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.523373][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.554968][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.563143][ T6438] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.588035][ T6438] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.758446][ T6451] bridge_slave_1: left allmulticast mode [ 276.764185][ T6451] bridge_slave_1: left promiscuous mode [ 276.798244][ T6451] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.839425][ T6451] bridge_slave_0: left allmulticast mode [ 276.874765][ T6451] bridge_slave_0: left promiscuous mode [ 276.880658][ T6451] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.934920][ T6193] tipc: Node number set to 134217728 [ 277.065925][T12315] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1648'. [ 277.563813][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 277.573904][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 277.582606][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 277.593728][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 277.606758][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 277.749990][ T6451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.762558][ T6451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.773887][ T6451] bond0 (unregistering): Released all slaves [ 278.470514][ T6451] hsr_slave_0: left promiscuous mode [ 278.480799][ T6451] hsr_slave_1: left promiscuous mode [ 278.494833][ T6451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.503679][ T6451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.542955][ T6451] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.565211][ T6451] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.623132][T12342] xt_CT: You must specify a L4 protocol and not use inversions on it [ 278.660024][ T6451] veth1_macvtap: left promiscuous mode [ 278.674625][ T6451] veth0_macvtap: left promiscuous mode [ 278.681057][ T6451] veth1_vlan: left promiscuous mode [ 278.704313][ T6451] veth0_vlan: left promiscuous mode [ 279.089557][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 279.102031][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 279.111080][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 279.138646][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 279.166362][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 279.236490][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 279.248805][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 279.261997][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 279.273294][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 279.293136][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 279.548950][ T6451] team0 (unregistering): Port device team_slave_1 removed [ 279.591945][ T6451] team0 (unregistering): Port device team_slave_0 removed [ 279.667041][ T5834] Bluetooth: hci1: command tx timeout [ 280.259158][T12358] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1657'. [ 280.901733][T12330] chnl_net:caif_netlink_parms(): no params data found [ 281.266109][ T5834] Bluetooth: hci2: command tx timeout [ 281.346219][ T5834] Bluetooth: hci4: command tx timeout [ 281.457464][ T6451] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.587271][T12353] chnl_net:caif_netlink_parms(): no params data found [ 281.682993][T12350] chnl_net:caif_netlink_parms(): no params data found [ 281.754933][ T5834] Bluetooth: hci1: command tx timeout [ 281.775734][ T6451] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.888462][ T6451] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.972439][T12330] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.995315][T12330] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.002869][T12330] bridge_slave_0: entered allmulticast mode [ 282.014408][T12330] bridge_slave_0: entered promiscuous mode [ 282.056024][ T6451] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.158267][T12330] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.166799][T12330] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.176234][T12330] bridge_slave_1: entered allmulticast mode [ 282.184427][T12330] bridge_slave_1: entered promiscuous mode [ 282.219629][T12434] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 282.456084][T12353] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.495589][T12353] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.502867][T12353] bridge_slave_0: entered allmulticast mode [ 282.510951][T12353] bridge_slave_0: entered promiscuous mode [ 282.553364][T12353] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.561102][T12353] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.608761][T12353] bridge_slave_1: entered allmulticast mode [ 282.657518][T12353] bridge_slave_1: entered promiscuous mode [ 282.667626][T12330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.776916][T12350] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.796635][T12350] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.803972][T12350] bridge_slave_0: entered allmulticast mode [ 282.813619][T12350] bridge_slave_0: entered promiscuous mode [ 282.886138][T12330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.015977][T12350] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.023265][T12350] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.038804][T12350] bridge_slave_1: entered allmulticast mode [ 283.047595][T12350] bridge_slave_1: entered promiscuous mode [ 283.058147][T12353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.073201][T12330] team0: Port device team_slave_0 added [ 283.082507][T12330] team0: Port device team_slave_1 added [ 283.149165][T12353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.242995][T12350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.289479][T12330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.308543][T12330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.343985][T12330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.355680][ T5834] Bluetooth: hci2: command tx timeout [ 283.367774][T12350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.425962][ T5834] Bluetooth: hci4: command tx timeout [ 283.447227][T12353] team0: Port device team_slave_0 added [ 283.459299][T12353] team0: Port device team_slave_1 added [ 283.471034][T12330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.481908][T12330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.509811][T12330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.589585][ T6451] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.666828][T12350] team0: Port device team_slave_0 added [ 283.693671][T12353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.710139][T12353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.736914][T12353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.761269][T12350] team0: Port device team_slave_1 added [ 283.767694][T12471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1680'. [ 283.793409][T12353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.802636][T12353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.829612][ T5834] Bluetooth: hci1: command tx timeout [ 283.842781][T12353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.890662][ T6451] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.117531][T12350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.125326][T12350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.179577][T12350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.211775][ T6451] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.251877][T12330] hsr_slave_0: entered promiscuous mode [ 284.259360][T12330] hsr_slave_1: entered promiscuous mode [ 284.268525][T12350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.281415][T12350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.310222][T12350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.441651][ T6451] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.472341][T12353] hsr_slave_0: entered promiscuous mode [ 284.485122][T12353] hsr_slave_1: entered promiscuous mode [ 284.491453][T12353] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 284.499863][T12353] Cannot create hsr debugfs directory [ 284.738917][T12350] hsr_slave_0: entered promiscuous mode [ 284.747592][T12350] hsr_slave_1: entered promiscuous mode [ 284.754026][T12350] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 284.762915][T12350] Cannot create hsr debugfs directory [ 284.794252][T12492] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20000 [ 285.426011][ T5834] Bluetooth: hci2: command tx timeout [ 285.477836][T12513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1690'. [ 285.505202][ T5834] Bluetooth: hci4: command tx timeout [ 285.662050][ T6451] bridge_slave_1: left allmulticast mode [ 285.685380][ T6451] bridge_slave_1: left promiscuous mode [ 285.702224][T12519] sctp: [Deprecated]: syz.2.1692 (pid 12519) Use of int in max_burst socket option deprecated. [ 285.702224][T12519] Use struct sctp_assoc_value instead [ 285.715108][ T6451] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.755678][ T6451] bridge_slave_0: left allmulticast mode [ 285.774900][ T6451] bridge_slave_0: left promiscuous mode [ 285.780744][ T6451] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.812284][ T6451] bridge_slave_1: left allmulticast mode [ 285.825209][ T6451] bridge_slave_1: left promiscuous mode [ 285.841282][ T6451] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.867681][ T6451] bridge_slave_0: left allmulticast mode [ 285.873384][ T6451] bridge_slave_0: left promiscuous mode [ 285.884156][ T6451] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.906524][ T5834] Bluetooth: hci1: command tx timeout [ 286.529992][T12544] netlink: 'syz.0.1698': attribute type 1 has an invalid length. [ 286.545770][T12544] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1698'. [ 286.901218][ T6451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.912848][ T6451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.923724][ T6451] bond0 (unregistering): Released all slaves [ 287.042065][ T6451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.053376][ T6451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.065958][ T6451] bond0 (unregistering): Released all slaves [ 287.507540][ T5834] Bluetooth: hci2: command tx timeout [ 287.586169][ T5834] Bluetooth: hci4: command tx timeout [ 288.218164][ T6451] hsr_slave_0: left promiscuous mode [ 288.225950][ T6451] hsr_slave_1: left promiscuous mode [ 288.235332][ T6451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.242840][ T6451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.251794][ T6451] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.274040][ T6451] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.288624][ T6451] hsr_slave_0: left promiscuous mode [ 288.297505][ T6451] hsr_slave_1: left promiscuous mode [ 288.303659][ T6451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.312370][ T6451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.323433][ T6451] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.331818][ T6451] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.399756][ T6451] veth1_macvtap: left promiscuous mode [ 288.405994][ T6451] veth0_macvtap: left promiscuous mode [ 288.411784][ T6451] veth1_vlan: left promiscuous mode [ 288.417355][ T6451] veth0_vlan: left promiscuous mode [ 288.424206][ T6451] veth1_macvtap: left promiscuous mode [ 288.430264][ T6451] veth0_macvtap: left promiscuous mode [ 288.439254][ T6451] veth1_vlan: left promiscuous mode [ 288.444833][ T6451] veth0_vlan: left promiscuous mode [ 288.490681][T12578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1703'. [ 289.092569][ T6451] team0 (unregistering): Port device team_slave_1 removed [ 289.141546][ T6451] team0 (unregistering): Port device team_slave_0 removed [ 289.950245][ T6451] team0 (unregistering): Port device team_slave_1 removed [ 289.992109][ T6451] team0 (unregistering): Port device team_slave_0 removed [ 290.417490][T12330] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 290.434114][T12330] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 290.554599][T12330] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 290.628516][T12330] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 291.069942][T12330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.230207][T12330] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.265859][ T6442] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.273168][ T6442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.496372][ T5908] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.504194][ T5908] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.554317][T12353] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 291.601217][T12609] sctp: [Deprecated]: syz.0.1708 (pid 12609) Use of int in maxseg socket option. [ 291.601217][T12609] Use struct sctp_assoc_value instead [ 291.628079][T12353] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 291.643013][T12353] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 291.780325][T12353] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 291.793039][T12615] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1709'. [ 291.802670][T12615] NCSI netlink: No device for ifindex 0 [ 292.172697][T12624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1712'. [ 292.174116][T12622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1711'. [ 292.290007][T12353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.391883][T12353] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.521939][ T6442] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.529169][ T6442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.557941][ T6442] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.565312][ T6442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.613149][T12635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1714'. [ 292.617524][T12350] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 292.673325][T12350] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 292.708161][T12330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.733749][T12350] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 292.781174][T12350] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 293.095732][T12330] veth0_vlan: entered promiscuous mode [ 293.136582][T12330] veth1_vlan: entered promiscuous mode [ 293.224406][T12350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.289709][T12330] veth0_macvtap: entered promiscuous mode [ 293.327642][T12330] veth1_macvtap: entered promiscuous mode [ 293.338563][T12657] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1717'. [ 293.377580][T12350] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.423789][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.431570][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.491275][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.498761][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.633383][T12330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.664549][T12330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.684538][T12330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.702288][T12330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.717034][T12330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.721728][T12667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1719'. [ 293.738577][T12330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.765115][T12330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.785965][T12330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.810203][T12330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.822066][T12330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.870914][T12330] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.889868][T12330] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.899091][T12330] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.908694][T12330] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.007544][T12353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.275891][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.305334][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.403409][T12353] veth0_vlan: entered promiscuous mode [ 294.418623][T12685] netlink: 'syz.0.1722': attribute type 1 has an invalid length. [ 294.433109][T12686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1723'. [ 294.460435][ T6438] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.490682][ T6438] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.539436][T12350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.555262][T12353] veth1_vlan: entered promiscuous mode [ 294.615770][T12688] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 294.628080][T12688] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 294.743901][T12353] veth0_macvtap: entered promiscuous mode [ 294.873836][T12353] veth1_macvtap: entered promiscuous mode [ 294.909780][T12699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1725'. [ 294.997714][T12353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.040607][T12353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.094568][T12353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.128473][T12353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.149312][T12353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.185032][T12353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.206237][T12353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.344426][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.418687][T12353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.464396][T12353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.491718][T12353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.505563][T12353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.516690][T12353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.545461][T12353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.582311][T12353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.671435][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.726292][T12353] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.739018][T12353] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.748983][T12353] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.758750][T12353] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.851343][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.889364][T12350] veth0_vlan: entered promiscuous mode [ 295.952738][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.020686][ T5908] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.032470][ T5908] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.068413][T12350] veth1_vlan: entered promiscuous mode [ 296.121570][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.130444][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.373912][T12350] veth0_macvtap: entered promiscuous mode [ 296.409911][ T36] bridge_slave_1: left allmulticast mode [ 296.420636][ T36] bridge_slave_1: left promiscuous mode [ 296.434806][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.468919][ T36] bridge_slave_0: left allmulticast mode [ 296.484771][ T36] bridge_slave_0: left promiscuous mode [ 296.504334][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.793359][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 296.826730][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 296.845732][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 296.863490][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 296.879382][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 297.049054][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.060894][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.071934][ T36] bond0 (unregistering): Released all slaves [ 297.181865][T12350] veth1_macvtap: entered promiscuous mode [ 297.534929][ T36] hsr_slave_0: left promiscuous mode [ 297.555302][ T36] hsr_slave_1: left promiscuous mode [ 297.565419][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.572906][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.588665][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.601740][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.648921][ T36] veth1_macvtap: left promiscuous mode [ 297.663328][ T36] veth0_macvtap: left promiscuous mode [ 297.682648][ T36] veth1_vlan: left promiscuous mode [ 297.697967][ T36] veth0_vlan: left promiscuous mode [ 298.147370][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 298.158574][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 298.182033][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 298.192668][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 298.207567][T12759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1739'. [ 298.217276][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 298.552030][ T36] team0 (unregistering): Port device team_slave_1 removed [ 298.594414][ T36] team0 (unregistering): Port device team_slave_0 removed [ 298.960434][ T5831] Bluetooth: hci1: command tx timeout [ 299.107027][T12350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.136458][T12350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.154735][T12350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.184106][T12350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.202368][T12350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.213547][T12350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.233427][T12350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.342580][T12350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.364880][T12350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.374878][T12350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.393278][T12350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.410273][T12350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.421647][T12350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.442442][T12350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.592131][T12350] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.619403][T12350] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.629014][T12350] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.638674][T12350] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.765648][T12784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1744'. [ 299.793633][T12784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1744'. [ 299.903570][T12792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1745'. [ 300.163730][T12736] chnl_net:caif_netlink_parms(): no params data found [ 300.315144][ T5831] Bluetooth: hci4: command tx timeout [ 300.750571][ T6451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.785048][ T6451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.804288][T12811] lo: entered allmulticast mode [ 300.819270][T12811] lo: left allmulticast mode [ 300.831408][T12755] chnl_net:caif_netlink_parms(): no params data found [ 300.939074][T12736] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.946459][ T5885] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004b: 0000 [#1] SMP KASAN PTI [ 300.946486][ T5885] KASAN: null-ptr-deref in range [0x0000000000000258-0x000000000000025f] [ 300.946509][ T5885] CPU: 0 UID: 0 PID: 5885 Comm: kworker/0:4 Not tainted 6.15.0-rc5-syzkaller-00130-g12f4ee312c95 #0 PREEMPT(full) [ 300.960439][T12736] bridge0: port 1(bridge_slave_0) entered disabled state SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 300.967790][ T5885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 300.967810][ T5885] Workqueue: events l2cap_info_timeout [ 300.967847][ T5885] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 300.980445][T12736] bridge_slave_0: entered allmulticast mode [ 300.987051][ T5885] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 300.987073][ T5885] RSP: 0018:ffffc9000423f848 EFLAGS: 00010206 [ 300.987092][ T5885] RAX: dffffc0000000000 RBX: ffffffff8937d918 RCX: f46fca33cb959a00 [ 301.048855][ T5885] RDX: 0000000000000000 RSI: ffffffff8937d918 RDI: 000000000000004b [ 301.056837][ T5885] RBP: ffffffff8a6268d5 R08: 0000000000000001 R09: 0000000000000000 [ 301.064813][ T5885] R10: dffffc0000000000 R11: ffffffff8a626890 R12: 0000000000000000 [ 301.072789][ T5885] R13: 0000000000000258 R14: 0000000000000258 R15: 0000000000000001 [ 301.080789][ T5885] FS: 0000000000000000(0000) GS:ffff8881260cc000(0000) knlGS:0000000000000000 [ 301.089723][ T5885] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 301.096749][ T5885] CR2: 000055557d453588 CR3: 000000005ecda000 CR4: 00000000003526f0 [ 301.104735][ T5885] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 301.112730][ T5885] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 301.121329][ T5885] Call Trace: [ 301.124619][ T5885] [ 301.127639][ T5885] __kasan_check_byte+0x12/0x40 [ 301.132620][ T5885] lock_acquire+0x8d/0x360 [ 301.137049][ T5885] ? lockdep_hardirqs_on+0x9c/0x150 [ 301.142252][ T5885] ? __cancel_work+0x254/0x2e0 [ 301.147030][ T5885] lock_sock_nested+0x48/0x100 [ 301.151801][ T5885] ? l2cap_sock_ready_cb+0x45/0x140 [ 301.157007][ T5885] l2cap_sock_ready_cb+0x45/0x140 [ 301.162043][ T5885] l2cap_conn_start+0x750/0xe40 [ 301.166912][ T5885] ? __pfx_l2cap_conn_start+0x10/0x10 [ 301.172294][ T5885] ? l2cap_info_timeout+0x60/0xa0 [ 301.177347][ T5885] ? __pfx___mutex_lock+0x10/0x10 [ 301.182382][ T5885] ? process_scheduled_works+0x9ec/0x17a0 [ 301.188117][ T5885] l2cap_info_timeout+0x68/0xa0 [ 301.193039][ T5885] ? process_scheduled_works+0x9ec/0x17a0 [ 301.198825][ T5885] process_scheduled_works+0xadb/0x17a0 [ 301.204415][ T5885] ? __pfx_process_scheduled_works+0x10/0x10 [ 301.210446][ T5885] worker_thread+0x8a0/0xda0 [ 301.215059][ T5885] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 301.221405][ T5885] ? __kthread_parkme+0x7b/0x200 [ 301.226353][ T5885] kthread+0x70e/0x8a0 [ 301.230430][ T5885] ? __pfx_worker_thread+0x10/0x10 [ 301.235550][ T5885] ? __pfx_kthread+0x10/0x10 [ 301.240157][ T5885] ? __pfx_kthread+0x10/0x10 [ 301.244756][ T5885] ? _raw_spin_unlock_irq+0x23/0x50 [ 301.249965][ T5885] ? lockdep_hardirqs_on+0x9c/0x150 [ 301.255170][ T5885] ? __pfx_kthread+0x10/0x10 [ 301.259763][ T5885] ret_from_fork+0x4b/0x80 [ 301.264187][ T5885] ? __pfx_kthread+0x10/0x10 [ 301.268784][ T5885] ret_from_fork_asm+0x1a/0x30 [ 301.273560][ T5885] [ 301.276580][ T5885] Modules linked in: [ 301.282879][ T5885] ---[ end trace 0000000000000000 ]--- [ 301.286222][T12736] bridge_slave_0: entered promiscuous mode [ 301.296187][T12736] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.303320][T12736] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.307273][ T5831] Bluetooth: hci1: command tx timeout [ 301.310970][T12736] bridge_slave_1: entered allmulticast mode [ 301.321964][ T5885] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 301.322822][T12736] bridge_slave_1: entered promiscuous mode [ 301.327996][ T5885] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 301.357334][ T5885] RSP: 0018:ffffc9000423f848 EFLAGS: 00010206 [ 301.366314][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.386295][ T5885] RAX: dffffc0000000000 RBX: ffffffff8937d918 RCX: f46fca33cb959a00 [ 301.394433][ T5885] RDX: 0000000000000000 RSI: ffffffff8937d918 RDI: 000000000000004b [ 301.402684][ T5885] RBP: ffffffff8a6268d5 R08: 0000000000000001 R09: 0000000000000000 [ 301.419976][ T5885] R10: dffffc0000000000 R11: ffffffff8a626890 R12: 0000000000000000 [ 301.429306][ T5885] R13: 0000000000000258 R14: 0000000000000258 R15: 0000000000000001 [ 301.464093][ T6438] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.477358][ T5885] FS: 0000000000000000(0000) GS:ffff8881260cc000(0000) knlGS:0000000000000000 [ 301.483719][ T6438] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.522294][ T5885] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 301.549603][ T5885] CR2: 00007fb9650e7d60 CR3: 0000000063d8c000 CR4: 00000000003526f0 [ 301.568446][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.607729][ T5885] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 301.665003][ T5885] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 301.673146][ T5885] Kernel panic - not syncing: Fatal exception [ 301.679531][ T5885] Kernel Offset: disabled [ 301.683870][ T5885] Rebooting in 86400 seconds..