last executing test programs: 1m15.213523004s ago: executing program 3 (id=676): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500009883"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1801"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500009883"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) (async) socket$packet(0x11, 0x3, 0x300) (async) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) (async) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1801"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) 1m1.865085603s ago: executing program 3 (id=676): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500009883"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1801"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500009883"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) (async) socket$packet(0x11, 0x3, 0x300) (async) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) (async) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1801"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) 1m0.905294588s ago: executing program 0 (id=179): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)=@can={{0x4, 0x1}, 0xfc, 0x2, 0x0, 0x0, "33ee736ec0420be4"}, 0x10}}, 0x4004800) syz_emit_ethernet(0x1016, &(0x7f00000010c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa81004000001142027f62ef"], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r2 = socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$xdp(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x1, r3, 0x3b}, 0x10, &(0x7f0000000240)=[{&(0x7f00000001c0)="fa48f2ccddbf31256bde425127a60812177b5ea1cdc5655b57dc6b7a06d591198508bbcf802e7a101394ad98407227965266ca83f20cedadcc4bd9129225f27689e62b583551b18d9f6200"/88, 0x58}], 0x1, 0x0, 0x0, 0x1}, 0x80) 47.862141588s ago: executing program 3 (id=676): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500009883"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1801"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500009883"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) (async) socket$packet(0x11, 0x3, 0x300) (async) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) (async) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1801"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) 46.590024309s ago: executing program 0 (id=179): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)=@can={{0x4, 0x1}, 0xfc, 0x2, 0x0, 0x0, "33ee736ec0420be4"}, 0x10}}, 0x4004800) syz_emit_ethernet(0x1016, &(0x7f00000010c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa81004000001142027f62ef"], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r2 = socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$xdp(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x1, r3, 0x3b}, 0x10, &(0x7f0000000240)=[{&(0x7f00000001c0)="fa48f2ccddbf31256bde425127a60812177b5ea1cdc5655b57dc6b7a06d591198508bbcf802e7a101394ad98407227965266ca83f20cedadcc4bd9129225f27689e62b583551b18d9f6200"/88, 0x58}], 0x1, 0x0, 0x0, 0x1}, 0x80) 34.160560604s ago: executing program 3 (id=676): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500009883"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1801"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500009883"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) (async) socket$packet(0x11, 0x3, 0x300) (async) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) (async) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1801"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) 32.906362586s ago: executing program 0 (id=179): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)=@can={{0x4, 0x1}, 0xfc, 0x2, 0x0, 0x0, "33ee736ec0420be4"}, 0x10}}, 0x4004800) syz_emit_ethernet(0x1016, &(0x7f00000010c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa81004000001142027f62ef"], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r2 = socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$xdp(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x1, r3, 0x3b}, 0x10, &(0x7f0000000240)=[{&(0x7f00000001c0)="fa48f2ccddbf31256bde425127a60812177b5ea1cdc5655b57dc6b7a06d591198508bbcf802e7a101394ad98407227965266ca83f20cedadcc4bd9129225f27689e62b583551b18d9f6200"/88, 0x58}], 0x1, 0x0, 0x0, 0x1}, 0x80) 20.024374149s ago: executing program 3 (id=676): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500009883"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1801"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500009883"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) (async) socket$packet(0x11, 0x3, 0x300) (async) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) (async) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1801"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) 18.972017461s ago: executing program 0 (id=179): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)=@can={{0x4, 0x1}, 0xfc, 0x2, 0x0, 0x0, "33ee736ec0420be4"}, 0x10}}, 0x4004800) syz_emit_ethernet(0x1016, &(0x7f00000010c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa81004000001142027f62ef"], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r2 = socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$xdp(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x1, r3, 0x3b}, 0x10, &(0x7f0000000240)=[{&(0x7f00000001c0)="fa48f2ccddbf31256bde425127a60812177b5ea1cdc5655b57dc6b7a06d591198508bbcf802e7a101394ad98407227965266ca83f20cedadcc4bd9129225f27689e62b583551b18d9f6200"/88, 0x58}], 0x1, 0x0, 0x0, 0x1}, 0x80) 7.81533637s ago: executing program 4 (id=1838): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r1, &(0x7f0000000300)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null]}, 0x40) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x28, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0x4, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x34000}}}]}, 0x28}}, 0x0) 7.56779164s ago: executing program 4 (id=1840): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x1e0, 0x20a, 0x278, 0x1e0, 0x278, 0x3, 0x0, {[{{@ipv6={@mcast1, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @dev, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64) r2 = socket(0x2, 0x3, 0xff) (rerun: 64) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) (async) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000240)={0x5, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e23, @rand_addr=0x64010102}}}, 0x108) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x43, &(0x7f0000000640)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x4}]}], {0x14}}, 0x70}}, 0x4040004) 7.201468948s ago: executing program 4 (id=1844): ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f00000010c0)={'hsr0\x00', {0x2, 0x0, @remote}}) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000001080)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01f71800000000000000240000002400000002000000000000000000000400000003000000000000000000000000000000000000000d0200000000000006"], 0xffffffffffffffff, 0x3e, 0x0, 0xa}, 0x28) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1100000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB=',\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2}, &(0x7f0000000280), &(0x7f0000000340)}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x0, 0x5}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e0030000280080006"], 0x68}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r3) sendmsg$IEEE802154_START_REQ(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x2c}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 7.012317796s ago: executing program 4 (id=1847): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0xf) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket(0x15, 0x5, 0x0) getsockopt$nfc_llcp(r3, 0x114, 0x271a, 0x0, 0x20000008) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000680)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3f}]}, 0x108) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x1c, r6, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24000041}, 0x4c0c0) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r6, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x5, 0x3}, {0x7, 0x2}, {0x3, 0x6}, {0x7}, {0x1, 0x2}, {0x1}, {0xc9, 0x7}, {0x2, 0x7}, {0x0, 0x2}, {0x81, 0x6}, {0x7}, {0xc, 0x5}, {0x9, 0x6}, {0x8, 0x1}, {0x7}, {0x4, 0x3}, {0x7, 0x4}, {0x6, 0x1}, {0x6, 0x7}, {0x6, 0x5}, {0x5, 0x5}], "49c615abf44c74f0"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x6, 0x4}, {0xc, 0x3}, {0x4, 0x1}, {0x2}, {0x6, 0x6}, {0x0, 0x7}, {}], "b3f90f97000a902f"}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x4000081) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa1}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f0000000440)=""/195, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x63}, 0x94) sendfile(r0, r5, &(0x7f00000001c0)=0x101, 0x7fff) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) sendmsg$inet(r0, &(0x7f0000001d40)={&(0x7f00000018c0)={0x2, 0x4e20, @dev}, 0x10, 0x0, 0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="1c00000000000000000000000700000001890b04000000000a0101000000000000b2a2ea7255fddda57a21deed386870f436efead273c89bad45e30423"], 0x20}, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r4) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x9c, r8, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x7}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x5}, @ETHTOOL_A_COALESCE_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0xd7b5}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x6}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x2}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0xd18}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000001}, 0x204c010) 6.459374119s ago: executing program 3 (id=676): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500009883"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1801"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500009883"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) (async) socket$packet(0x11, 0x3, 0x300) (async) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) (async) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1801"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) 5.606129104s ago: executing program 0 (id=179): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)=@can={{0x4, 0x1}, 0xfc, 0x2, 0x0, 0x0, "33ee736ec0420be4"}, 0x10}}, 0x4004800) syz_emit_ethernet(0x1016, &(0x7f00000010c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa81004000001142027f62ef"], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r2 = socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$xdp(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x1, r3, 0x3b}, 0x10, &(0x7f0000000240)=[{&(0x7f00000001c0)="fa48f2ccddbf31256bde425127a60812177b5ea1cdc5655b57dc6b7a06d591198508bbcf802e7a101394ad98407227965266ca83f20cedadcc4bd9129225f27689e62b583551b18d9f6200"/88, 0x58}], 0x1, 0x0, 0x0, 0x1}, 0x80) 3.891817494s ago: executing program 2 (id=1855): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x38}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) socketpair(0xf, 0x6, 0xb, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'tunl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x40, 0x700, 0x0, 0x0, {{0xa, 0x4, 0x0, 0x8, 0x28, 0x65, 0x0, 0x4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@ssrr={0x89, 0x13, 0xfc, [@broadcast, @multicast2, @loopback, @broadcast]}]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@getchain={0x3c, 0x66, 0x100, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x8, 0xffff}, {0xffff, 0xc}, {0xb, 0x10}}, [{0x8, 0xb, 0xce06}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 3.890976259s ago: executing program 4 (id=1856): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x18) poll(0x0, 0x0, 0x7f) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000300)=0x2) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) pwritev(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)="1832", 0x2}], 0x1, 0xa, 0x10) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x190) read(r0, 0x0, 0x300) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, 0x0, 0x0, 0xba5a, 0x0, 0x0, 0x40f00, 0x11}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)='%-010d \x00'}, 0x20) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640), 0x4) pipe(&(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@bloom_filter={0x1e, 0xfff, 0x7, 0x1, 0x12602, r6, 0x0, '\x00', 0x0, r7, 0x1, 0x2, 0x1, 0x9, @void, @value, @value=r8}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r9}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r9, &(0x7f0000000340)="a9", &(0x7f0000000200)=""/31}, 0x20) setsockopt$sock_attach_bpf(r5, 0x1, 0x34, &(0x7f0000000040)=r4, 0x4) setsockopt$sock_attach_bpf(r5, 0x1, 0x44, &(0x7f00000000c0), 0x4) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r10, 0x112, 0x4, 0x0, &(0x7f00000000c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newtaction={0x124, 0x30, 0x51b, 0x0, 0x0, {}, [{0x110, 0x1, [@m_skbmod={0xe0, 0x1, 0x0, 0x0, {{0xb}, {0xb4, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x4}}}, @TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x3, 0x29, 0x7, 0x5, 0x4}, 0x10}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x9}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7}, @TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="b426cc26a287"}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="a8246770ad35"}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x124}}, 0x0) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250801f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 3.757551699s ago: executing program 2 (id=1857): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000280)={r2}, &(0x7f0000000340)=0x8) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) setsockopt$inet6_mreq(r3, 0x29, 0x1d, &(0x7f0000000200)={@empty}, 0x14) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) syz_emit_ethernet(0x66, &(0x7f00000068c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd6007000000303a00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x0) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r4, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001500190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 3.519449469s ago: executing program 2 (id=1858): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b35, &(0x7f0000000000)={'wlan1\x00'}) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r3, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0xd1383000) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e20, @empty}, 0x0, 0x4, 0x1, 0x4}}, 0x2e) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r4, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x1000) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0xfffff000) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="0c00990000000000000000000800a0008a16000008009f000d000000080026000816"], 0x40}, 0x1, 0x0, 0x0, 0x2040010}, 0x200040b4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f000015b000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r8, 0x0) mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x2000) socket$can_j1939(0x1d, 0x2, 0x7) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) 3.178729693s ago: executing program 0 (id=179): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)=@can={{0x4, 0x1}, 0xfc, 0x2, 0x0, 0x0, "33ee736ec0420be4"}, 0x10}}, 0x4004800) syz_emit_ethernet(0x1016, &(0x7f00000010c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa81004000001142027f62ef"], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r2 = socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$xdp(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x1, r3, 0x3b}, 0x10, &(0x7f0000000240)=[{&(0x7f00000001c0)="fa48f2ccddbf31256bde425127a60812177b5ea1cdc5655b57dc6b7a06d591198508bbcf802e7a101394ad98407227965266ca83f20cedadcc4bd9129225f27689e62b583551b18d9f6200"/88, 0x58}], 0x1, 0x0, 0x0, 0x1}, 0x80) 1.009873281s ago: executing program 2 (id=1860): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000050000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000040c00098008000140f5"], 0x98}}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000004c0)) r2 = socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2400}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x2d, 0x4}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x59}, 0x94) sendmmsg(r2, &(0x7f0000000c80)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=']', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[{0x30, 0x84, 0x1, "59766fe282f0381b5cc7a195cb5ade0d64bc2d9ad30419f432"}], 0x30}}], 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000000)=0x1020000, 0x4) 1.007553937s ago: executing program 4 (id=1861): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1}, {0xfffffffffffffffa, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x1, 0x0, 0xb7}}, 0xe8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5008010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=@flushpolicy={0x11bc, 0x1d, 0x8, 0x70bd2d, 0x25dfdbff, "", [@coaddr={0x14, 0xe, @in=@loopback}, @sec_ctx={0xd2, 0x8, {0xce, 0x8, 0x1, 0x8, 0xc6, "e213a589a9e8e704b525740902e6f0f8518b3003004b2fa83cb022af6175cb87c72cea24522880f3b354e55a807a7214857f8bc1eb34fc76bda02b1d7a086ab948f7f64d4dd36500d18ba352cf021266040eea09c278d621f5026a6fcb74c44b53a3ac65c697ff3e712fc12da77efdcf961e525ea5863f8bc6e9456430d10efdc6acd10a465dccc9ddccc851049b0777fc921014d915ba694360c7efef190ce868e836a91fb55d2f53dc1f634648099b776266556261d31dd8625e00586f007b5c4fabce38e2"}}, @lastused={0xc, 0xf, 0xe4}, @mark={0xc, 0x15, {0x350759, 0x68}}, @algo_auth_trunc={0x104c, 0x14, {{'poly1305-arm\x00'}, 0x8000, 0xc0, "11e476faf599c69e118cd92c8ead82e7569690b1abee280bcc55448ff073f4c084e4b597c28efdbb167eafdb5bd7f68bf30f5d5a19cf635ae9dfa365b09bdcb796f6cfdd1d2ddeaa04145298696b7db0c9b4c60178cb22248e9d4c80ed7fef78596137287e7f9e8f12724459267270dd9b44fe3d5b4516b19bbdde84d5f880fc9f2520b5d9b777708de8e4582476ddfd9f182a39b6301c42f7fc587a87897d4a6a995f86583c7d1956091366c198db2d6becf951bd4b25e8c9fee8bbd8311af157a89253e50657b5c421bcca6e63031e2b8ed0d2111f81ba5563b685c09f040cfa9eafd7edae346b987e7d6f34a7291210d03073b0d49154858a8a565f4a8b9f39e47f21b67c23fbdb470349d49f3e5b08bd5fb58e36b6a397f6071c035c51576eb42567552c73918804ecea5200b147884ac68969eeda6427b70b1558724b8e73082e73ef99a6c62a94e8323e4e37f27529f9a45982ecee614faa6067c9b3575bf2b4361f9b1f2ca3eb45a4d93d544dbaa323fd0a92252739fa59490e4be779e08235f78ee67519b2e6ed86c0861b2f5d15f0a77c05a29cc3b569d70c795b387e1a8a3ebe36bcde2e2cf9cf3827b59bc5720318ce5032ca662a6e13374d3c2dfd6dfe5f55cc362eab41d40ab1db9c8abdcc6cdea789b2bd7c5c21fa3c9d2531c5a98b9f692f72e060dba3424caae4683dcbadad9e99803fb2f64b474c016f7b17abd8a76f42e4a52e9a44f39ac0117b8f52f1688a9fb2cc1b91a4329cb0bea1a251c6fb2cf09c0c05f8c925f566ba52b0ddb5a0c3a5d841ca6ab9e6a46c95f8996a5392aac9d18f614323d994174e2bfbd48fe23b1cee66d3fe7adef4158f48d7ec24ee3e2020fd7a3a7b390ee9b109eeeba35f2547a6eb82e87b3518cefed8316f3ae58c074e3ca5e9d6b52005d7da893ddd4ec7f2415ff9554c9e229c3db1262cf20ed55aafa6b0164dd2428a2925ec451c030ae15a4a7b7aace74e279f0ffcfd9a82986cdf443dab839486a82ad771fcaa59a56c7ed1eb8ac6aa0331d73bafdd8145951ffa40a560b54571199bc449f0e242d085726adcb8552accc9f44e029c5105ea1bb3d649c55c0ddf272eda6710fd95f2942bada417561d25b5b2692322a6d76ee15476edd75c1396a0cfea307224d81aadabf16fbc7e8ac4fa73b4f060b5a24ff81171c048daee8ece7fa6c9cadd04663c1e5619eb99832320b687107af5465e5e17caadd6474e7d3271980536a1b224f5c3b8f482577e9560411fbe1352f88c98d92ef06ed3cd35ca158622f7f8a4d4676b75f3b1ff2e286b934ae3b8b0cce76eb86cf3e2888aec598fb2db1fd14c91c14811f55a76b49bf6e28517a17b3c9e290dfe36c01f8624a37459b21ffaa415be93193f96f492e06d210a5aa6f339401a8630b7d91186301e613550a085fe4b37bbbef50e38c1becc521adfd42ea1788c63a196d5878e518264b9c006b51f551de51a01b7d9945b1b542c486670536229c3d6ef782107f8c23f6f3590004d60209ed1d20ed298b1bbd19594bc118d088c8e0bcc13ffca35a862b0809e0d533ccf38c3670b8f26effd499652a1714d464be14cf15edf3344359b46da01e27fe5112a335b5209e3ff3cd413eacc31cea3c101c9b1bea74de44fb2f1fd73b4169e65d9a399aa55773acbc2aff07689a36ea6f6ccb8178a944577968e1e729aece8d6d48b6a6ec07ca07ca2669fff0e0f6cb2bfc34c7193849e4dffd071bb01a084441590e6b1f63754227ba5c8ed0587ac63fa3902154c1498b748ab4838f5bb2b82797f86037733226dd0886143ae5a58fbde6bd443e07b4ce8f23f5ffcd73882d3d7df1c43bdd6b5f09161b65a884e8c356123c6854c5f3c85f3c628f3c015c0e0faaf61b5232539d0feef4db7d5966c5b604332875343b24c801b8577fee1137af76bc3223dcb9329f7654dd1a3f76fefa68189c3196e4e1dd8b1a64f3664e272f88664477b05e9f69ebf6880d850613a88170ab8659f83ce2604850ea44c7c4eb271862f486b475804a351b315030eafd69aeb7398e345ba718b79ce7af0df8cfd0fb8529aaeb4fcfea70814b9f94a00a08162b1bc3daf1215a89c41b23304306ab345a3ef28e4e06cbde4c4b48e385d7306feb97f2c016aa99e9dc192daee18d9edeb0143757f2b012b63f904dd29e4ee6d620e8e648db220aba732903f1ca10cd4c54af87c712f6d09e0db38756290d10e9f3bc9e1792a4a4481b1ff9e0c204ea1b9ba182ccc5e904e6d1b2d00304611b288723c53439a054f8fd3b520ce271a56526b49120f05675fefb418776e761c8d414bb08f4ef8e3b86b02f1f814540aa7386257748aa349211717a2998da549e8fe864f74c72866d44f69ce3971ff0c5b26dd51165a5563bac1979bacd90a597e8486f97e14aa0884415f0652d247733ea67b9a87e18e50c32ceb1bc13bc1d9ee6e9886dfe35042d9a8eb949e0b7534fcd46c95bc798325ff74ce0f55f406fa1b71edf0d47897d16a3098da52f312010db05431baf7c319991427640080e4e59204759689ec16ba209efee5edb3fd7058db228b2fe03018bfaab542fcf2db65584559cf97c97100dec5e17bbcba7820b8bf96721e04f4d012318739ab02065951b706cfb0e31509d98662d75983aac697b600a65fc0142267923e2e0e1bac93ee9a32e696fa0244c75cc6ed9b4b465538d0fe216680df5a9a13f4517e2d7677d02c84c294fa7e6a7214d72c63798854aa9e21ab8845c617b38b24ff3b95d2433ee37a200463da70e931c078ae27d0751da1c2518da70b0f5556e457754178c8fc01bfeae9a4b940f713634ffd3334473d36ea9d6fd5820faa59803bf5d9938d3fb4390b188aa088ab0d181a8ba4a677804bba58372d7c3a231d469be901caaced8048377674694f93678f17448c7ef49de59f234a85eabdc23457f730ee537fd20a985f3a41f5d8b5015ce9462d5c8fabfc3582b477362ee4a2796fb41a2d7e1f723fc27388ad936ed3c46127c4dcf44453fb7b4fdbe4406cd28a3f003d711828a644643411e1bfca9a227e4ab02880583992af58c6670b24a2953c502b1c54f5739adf9a90ca24dc4b12925e9e7c18318b45b18ef28accd78d41d85ca98b3adc1dda75ef234b15a7874145cd63af2895a92d8c3009ca3a5f9d4a37e725435db6685251a0868bc47a5848dd6cca4c20015f5933748deeda570eb6fcdda27c1c46c4865e65983b565e1428b9adf4e5efb31c054f666dee5a4942a8c5f396fe25fb0644386de235017c8324986e30750853681bcf1805c42c7b7e83505306666d62356b7e069ac8c366aec9f503a5224f533f9f54d9be66f44c8410b2dd4c27780198ec0afa4b49a15f7c7dcc63c61c3b2f73a3f9b937a247a79538c4e20ca96ef9bae98467669505de6ab878f2feaecaf44b317344642aa16a80dc1f70261580c6b2082979c9c646d1061e52f6c84cd5148be5b8e48f60dc566385be9464f7cdcf385bf594a4fb64523a659a5b077022f0dcc33a360445b2a8e5b550617af69dc2c890c386324d9197268ae5832d7b7b2eb58ab8d180e125d76eaac60be3421d4d8621ed2df2f760ee2e3b197665f626bb686f0fa42bb0efe28213634e7f3723d22e3d0ab241ddd78c0abb57ecc40b1bc6bd58d2e079f18b5761db99dae7f9710a12520574d145bc3fdfce8083874ea3a34dd3db5489a9731de6e9becf973362038d4ab7df79471202659e9c5683c4a7c3bbf1243777866dbfa61866ce2d7309bb77ab196d228635af36ad7d516101465399dd330a522358393562e867467e81d48cab6cb5393ce0a2c769234cccb5c07cfb34bca1aff8aae94a76d26c24476c47534d59409223ceb01ac5ac8270593c20cab4aad078e46837dd7965d8cc1f98c93540f84b17c3104dcb63ff0089fb4fd65577e889ee3e72342c63da11a08270eec89524489ba4bd71ea01086488fb74a99237b0e0b8bfceee300698c2019fd34496dd5f32ef41577624c8e1c6fda8cdcdffba6d137d7c3d75d741a37c2f22c284180ff8596b3d6be4a03e47642707fbd16346c79263ac9ccaf5dbab23ffa495672aac38748fdf088745a096b3b486e67e09dcb125ced49155ab2b923255a8bfae08f45e076c7802f0e33f86974336c671d747c31f324f02b432870184b7ce647cbf18e4ced2168a06032b658e8995d2c073e1842a1b2e8964b37946707444b65869052e08ea5158276617d998885f77e0ea4c0790e2d9ca64e9dea8b92bdf52f7094f1c10667ec3d3ef566c64869713e4fba9855c76b82e902aead326150ac101de7ff0b250350f79527e5aa35e7596fcd48079b4a978fa20f6a8966d5c55cbad0487cb54dc1d110853ca629f332490af08d0146378a2e93c2b742a5bbd9b6b955dc341a0610f136400bdc5d1f7ab50770ed1e0793a9114da8e664a2aa7445481f25174ba89c49bcb060f5211192660fdd7395064247ec28b9ba9ef16ebd75815bb138ff203a6619b100218563e716f7d07dad4d7f8f8d064cb7d1a6d90b540d9c4dcbc9564ee8fe182b20a88d25b72b1509b6c6d78463471f0c1fafcc1eb995f0a2bc1fe712e30ef024fd0ca341b0772498e3ca68e5710fe3fcde5070c921bef8b04ba2a1618880112673009bb7233ebd43d596e34beb8f836d8bdb2e2076ba08f675ebf99565bf6f94e37a0dcd687bc359b20a0abfa1f5aef24ea7eebcbbcea4a2dc10cd7782914e6a32b06c699769661af5844384554ef82b9a22fbeccedc5f0001c2b2788efb4a02b74b3560c71c00c454d30ded4433fc7dbcf6553689a190d331a7c1df702fedb97cad2261bede6b9a3322c7958b2cbd29ed153b1ec6af6db366b40a57bf4e6537c70edbeb8a458cf29270d6e411b38ddb47f487801f5888c0033401564dc70a313e241758b86a41f8b6f204201b985bd2ed50a2c68c29c5d880ffc4d80cd7a118775af83a86aa23cbc508fd20283dc1b95822572f4ca0f66a895a81e9148f33ec664283dd303f3364f23ec7918ccba8913ebe7d720eff304b90c2b85bec5bb249c674748b5c7de8213927aed23ba0e7040beabe4932ff1c164a40bf103218571c9bd73de62aba73751bda4e5a2dd13f38e5d57e6199080e57dbfbec2fb184345ef1d29c6d2b0e86f755c92e455181a9f73518abe170d503ffdf89d66ee4d95bd227e2ddaea646e9a86e7c3f51818f8a771042728f2c8f26e85f70e498b610696343d0477419c73c7ef99e3e28fb8205a7dd72d89294d021b11c9881c81a51bf6a28576f3c97804596d796ed12a3e6bd6ed3e8985c90d79f69346f8e4ddccbf940f3fef318c659ad5aeed337a0f0c6823019d6086dbbd25b6ccae5335349d94de33ecc097e272d1ea3b808ea1eef514715834f5dd7dacc8d0f3e587db09fa4f6d939bbe4249d23f8f70278472b92fb57c1f992933e115d209431103a81e13bd5e400af3c7ec05797ffd0a33630102615356d1c905fa5137abf17cd4bc6ea4ef7b239818ca1a0565bd3eecf47d7bf44e1c03a2003031723f4fcd34f6e93f4b1268d7142d6045d443ec609da39785493dbaa8a16af897d4ae9b5b92bf3c1e2cfe9bd378cbc09e8829a1c6c930539d7be4c03964fcd065078c73e41bc06bd243584bcf312e39faea5a486842a75c5fc16df6c507d9df8de2853773ea9666d3291903a1c064a473b0c61c28c0bf5097a99f5d6562f0dc9c8341d041ee93af6ff65fe593ef5b192b338d4eddd91d94506d7b485d7b65c18c6affd21e7b95f27e5e98275399a9806322cc543f132789948eb7"}}, @mark={0xc, 0x15, {0x35075a, 0xa}}, @lifetime_val={0x24, 0x9, {0x9, 0x4, 0x0, 0x2}}, @coaddr={0x14, 0xe, @in=@dev={0xac, 0x14, 0x14, 0x28}}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e21, 0x4e24, @in6=@private0={0xfc, 0x0, '\x00', 0x1}}}]}, 0x11bc}, 0x1, 0x0, 0x0, 0xc0}, 0xc800) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000004000000000000000000000a02000000000000000000000d03000000020000000000000c0200000000007100"], 0x0, 0x40}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000004000000000000000000000a02000000000000000000000d03000000020000000000000c0200000000007100"], 0x0, 0x40}, 0x28) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x1c, {[@window={0xa, 0x3}, @generic={0x0, 0x6, "d5883806"}]}}}}}}, 0x42) 768.452132ms ago: executing program 2 (id=1863): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x54, r1, 0x1, 0x70bd2a, 0xfffffffe, {0x6}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x958}, {0x6, 0x16, 0x794}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x24008004) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 595.793841ms ago: executing program 2 (id=1864): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x7d}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x38}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}, {0x20, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0xac}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5ac}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x34}}, 0x0) 496.011448ms ago: executing program 1 (id=1865): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a0b040000000000000000020000003c000480380001800e000100627974656f726465720000002400028008000540000000008000044000000000080002400000000008000140000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a214974fdf17440faaf0a12d51152788903bec4bea1337ba8c4857a0791558ebffc12baf0cd"], 0x90}}, 0x0) 307.744625ms ago: executing program 1 (id=1866): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x6}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x4}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYBLOB="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", @ANYRES8=r1], 0x158}, 0x1, 0xba01, 0x0, 0x80c4}, 0x44) 225.807809ms ago: executing program 1 (id=1867): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=ANY=[@ANYRESDEC=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 108.829764ms ago: executing program 1 (id=1868): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newae={0x5c, 0x1e, 0x1, 0x70bd29, 0x25dfdbfe, {{@in6=@rand_addr=' \x01\x00', 0x4d6, 0x2, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x1e}, 0x4}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd27, 0x70bd2a, 0x70bd28, 0x70bd2c, 0x5}}]}, 0x5c}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000005c0)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @dev, {[@cipso={0x86, 0x3e, 0x0, [{0x0, 0x5, "66d281"}, {0x0, 0x11, "6f03057a91f875ccf5bd5d0a5b319a"}, {0x0, 0x10, "6253659c41d7d6a461f45f9d37fa"}, {0x0, 0x3, "91"}, {0x0, 0x7, "ccb3e82d2e"}, {0x0, 0x8, "a33b7a6b9500"}]}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private}, {@private}, {}, {@remote}, {@private}, {@remote}, {@private}]}]}}}}}}}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x360, 0xa, 0x148, 0x360, 0x60, 0x3f8, 0x2a8, 0x2a8, 0x3f8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x360, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x4, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x20, 0x8601, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x6, 0x3, 0x81, 'snmp_trap\x00', 'syz0\x00', {0x30f6a663}}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x19}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x80) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000102c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000094000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f00000103c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8, 0xffffff85}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r2}, {}, {0x15, 0x0, 0x0, 0xffffff85}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 73.835453ms ago: executing program 1 (id=1869): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x19, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r2, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0x11, 0x148, 0x0, 0x10, 0x368, 0x2a8, 0x2a8, 0x368, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x70, 0xd8, 0x1c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev, 'macsec0\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x288) (async) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0x11, 0x148, 0x0, 0x10, 0x368, 0x2a8, 0x2a8, 0x368, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x70, 0xd8, 0x1c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev, 'macsec0\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x288) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x1, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_256={{0x304}, "4772507cbe3d7826", "a200c1a19549c55ab4d93fb750dac8ae286eb70d8b069276f8385b53069bc694", "0600", "8ecb156f4fd9e229"}, 0x38) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_256={{0x304}, "4772507cbe3d7826", "a200c1a19549c55ab4d93fb750dac8ae286eb70d8b069276f8385b53069bc694", "0600", "8ecb156f4fd9e229"}, 0x38) sendto$inet6(r0, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) (async) sendto$inet6(r0, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r4, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x10) connect$llc(r4, &(0x7f0000000000)={0x1a, 0x7, 0x7, 0xf7, 0x10, 0x6, @random="2017f2c71cc2"}, 0x10) r5 = epoll_create1(0x80000) epoll_create1(0x0) (async) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, 0x0) close(0x4) 0s ago: executing program 1 (id=1870): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1d, 0x2, 0x6) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x6a, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'macsec0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r2], 0x54}}, 0x800) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r4, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="84", 0x1}, {&(0x7f0000000180)="ca701a", 0x3}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r4, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x5, &(0x7f0000000080)=@framed={{}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x5}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) kernel console output (not intermixed with test programs): ] type 2 family 0 port 6081 - 0 [ 261.319798][T11026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.339973][T11026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.379635][T11026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.467776][T11124] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.553860][ T5862] Bluetooth: hci1: command tx timeout [ 261.597400][T11133] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.681019][T11135] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1235'. [ 261.877934][T11026] hsr_slave_0: entered promiscuous mode [ 261.891952][T11026] hsr_slave_1: entered promiscuous mode [ 261.920308][T11043] chnl_net:caif_netlink_parms(): no params data found [ 261.932538][T11140] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1239'. [ 262.054069][T11140] nbd: must specify a size in bytes for the device [ 262.391703][ T6103] bridge_slave_1: left allmulticast mode [ 262.398234][ T6103] bridge_slave_1: left promiscuous mode [ 262.407425][ T6103] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.439580][ T6103] bridge_slave_0: left allmulticast mode [ 262.454024][ T6103] bridge_slave_0: left promiscuous mode [ 262.462001][ T6103] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.594595][ T5862] Bluetooth: hci2: command tx timeout [ 262.658866][T11172] x_tables: ip6_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 262.692872][T11172] netlink: 'syz.1.1244': attribute type 1 has an invalid length. [ 262.720674][T11172] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1244'. [ 263.038820][ T6103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.049941][ T6103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.060780][ T6103] bond0 (unregistering): Released all slaves [ 263.195978][T11043] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.214684][T11043] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.236835][T11043] bridge_slave_0: entered allmulticast mode [ 263.248830][T11043] bridge_slave_0: entered promiscuous mode [ 263.285019][T11190] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1251'. [ 263.334575][T11043] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.341995][T11043] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.357060][T11043] bridge_slave_1: entered allmulticast mode [ 263.368781][T11043] bridge_slave_1: entered promiscuous mode [ 263.463113][T11194] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1252'. [ 263.567120][T11043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.595226][T11043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.633832][ T5862] Bluetooth: hci1: command tx timeout [ 263.950418][T11043] team0: Port device team_slave_0 added [ 264.010760][T11043] team0: Port device team_slave_1 added [ 264.159184][ T6103] hsr_slave_0: left promiscuous mode [ 264.171130][ T6103] hsr_slave_1: left promiscuous mode [ 264.179747][ T6103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.187837][ T6103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.196876][ T6103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.205381][ T6103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.227803][ T6103] veth1_macvtap: left promiscuous mode [ 264.233408][ T6103] veth0_macvtap: left promiscuous mode [ 264.240992][ T6103] veth1_vlan: left promiscuous mode [ 264.246613][ T6103] veth0_vlan: left promiscuous mode [ 264.683908][ T5862] Bluetooth: hci2: command tx timeout [ 264.908780][ T6103] team0 (unregistering): Port device team_slave_1 removed [ 264.957077][ T6103] team0 (unregistering): Port device team_slave_0 removed [ 265.433351][T11043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.470935][T11043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.510373][T11043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.566638][T11227] vlan0: entered promiscuous mode [ 265.572129][T11227] vlan0: entered allmulticast mode [ 265.582124][T11227] hsr_slave_1: entered allmulticast mode [ 265.630357][T11043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.648105][T11043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.691444][T11043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.716896][ T5862] Bluetooth: hci1: command tx timeout [ 265.992588][T11043] hsr_slave_0: entered promiscuous mode [ 266.000289][T11043] hsr_slave_1: entered promiscuous mode [ 266.016025][T11043] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.024202][T11043] Cannot create hsr debugfs directory [ 266.042576][T11247] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1268'. [ 266.240774][T11026] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 266.283833][T11026] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 266.310432][T11026] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 266.369501][T11026] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 266.753961][ T5862] Bluetooth: hci2: command tx timeout [ 268.274418][ T6103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.282333][ T6103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.501557][T11297] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1278'. [ 268.579549][T11026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.617921][T11026] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.650092][ T6109] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.657364][ T6109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.692811][ T6109] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.700173][ T6109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.710554][T11299] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1280'. [ 268.761079][T11300] netlink: 'syz.2.1280': attribute type 2 has an invalid length. [ 268.779208][T11300] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1280'. [ 268.874857][T11304] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1281'. [ 268.902942][T11026] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 268.980630][T11043] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 269.012672][T11043] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 269.090499][T11043] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 269.133243][T11043] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 269.163963][T11316] C: renamed from team_slave_0 [ 269.175976][T11316] netlink: 'syz.1.1285': attribute type 1 has an invalid length. [ 269.187909][T11316] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 269.221946][T11317] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (65485) ! [ 269.292389][T11328] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1287'. [ 269.315888][T11328] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1287'. [ 269.503044][T11026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.526820][T11340] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1290'. [ 269.552769][T11043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.621166][T11043] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.647562][ T6097] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.654816][ T6097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.656527][T11344] netlink: 'syz.2.1291': attribute type 10 has an invalid length. [ 269.687551][ T6096] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.694896][ T6096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.711543][T11026] veth0_vlan: entered promiscuous mode [ 269.782354][T11026] veth1_vlan: entered promiscuous mode [ 269.823249][T11346] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1292'. [ 269.876587][T11026] veth0_macvtap: entered promiscuous mode [ 269.908540][T11026] veth1_macvtap: entered promiscuous mode [ 269.961291][T11026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.003297][T11026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.049249][T11026] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.062941][T11026] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.075288][T11026] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.088682][T11026] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.309908][ T6103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.330151][ T6103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.408476][ T6097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.460827][ T6097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.473450][T11043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.572510][T11043] veth0_vlan: entered promiscuous mode [ 270.587609][T11043] veth1_vlan: entered promiscuous mode [ 270.720619][T11043] veth0_macvtap: entered promiscuous mode [ 270.748061][T11043] veth1_macvtap: entered promiscuous mode [ 270.913470][T11043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.976200][T11043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.020292][T11043] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.063638][T11043] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.072428][T11043] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.103669][T11043] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.435904][ T6097] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.585644][ T6097] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.759032][ T6097] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.805242][ T6103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.824655][ T6103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.903868][ T6097] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.968077][ T6110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.994334][ T6110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.333896][ T6097] bridge_slave_1: left allmulticast mode [ 272.339620][ T6097] bridge_slave_1: left promiscuous mode [ 272.353933][ T6097] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.412625][ T6097] bridge_slave_0: left allmulticast mode [ 272.469498][ T6097] bridge_slave_0: left promiscuous mode [ 272.483989][ T6097] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.994363][ T5865] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 273.010962][ T5865] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 273.021912][ T5865] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 273.032690][ T5865] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 273.044028][ T5865] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 273.190476][ T6097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.202008][ T6097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.212598][ T6097] bond0 (unregistering): Released all slaves [ 273.231200][T11395] IPv6: sit1: Disabled Multicast RS [ 273.238530][T11395] sit1: entered allmulticast mode [ 273.319303][ T5865] Bluetooth: hci4: command 0x0405 tx timeout [ 273.828735][ T6097] hsr_slave_0: left promiscuous mode [ 273.834911][ T6097] hsr_slave_1: left promiscuous mode [ 273.840777][ T6097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.862046][ T6097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.870237][ T6097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.878152][ T6097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.899656][ T6097] veth1_macvtap: left promiscuous mode [ 273.905373][ T6097] veth0_macvtap: left promiscuous mode [ 273.911058][ T6097] veth1_vlan: left promiscuous mode [ 273.916908][ T6097] veth0_vlan: left promiscuous mode [ 274.194205][T11409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1310'. [ 274.364157][T11418] netlink: 'syz.4.1311': attribute type 3 has an invalid length. [ 274.549844][T11425] netlink: 'syz.2.1310': attribute type 1 has an invalid length. [ 274.630720][ T5862] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 274.640163][ T5862] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 274.649238][ T5862] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 274.690309][ T5862] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 274.698374][ T5862] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 274.725060][T11432] netlink: 'syz.1.1314': attribute type 2 has an invalid length. [ 275.078708][ T5862] Bluetooth: hci1: command tx timeout [ 275.216744][T11439] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1316'. [ 275.253054][ T6097] team0 (unregistering): Port device team_slave_1 removed [ 275.315836][ T6097] team0 (unregistering): Port device team_slave_0 removed [ 275.779363][T11415] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 276.048127][T11404] chnl_net:caif_netlink_parms(): no params data found [ 276.097575][T11453] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1320'. [ 276.120286][T11453] openvswitch: netlink: Flow actions attr not present in new flow. [ 276.148797][T11453] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1320'. [ 276.566245][T11404] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.573483][T11404] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.609140][T11404] bridge_slave_0: entered allmulticast mode [ 276.617671][T11404] bridge_slave_0: entered promiscuous mode [ 276.693791][T11404] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.724005][T11404] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.731328][T11404] bridge_slave_1: entered allmulticast mode [ 276.746866][T11404] bridge_slave_1: entered promiscuous mode [ 276.766488][ T5862] Bluetooth: hci2: command tx timeout [ 276.830005][T11404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.848874][T11404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.051297][T11490] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1326'. [ 277.070667][T11404] team0: Port device team_slave_0 added [ 277.081835][T11490] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 277.145652][ T6097] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.160986][ T5862] Bluetooth: hci1: command tx timeout [ 277.182346][T11404] team0: Port device team_slave_1 added [ 277.338366][ T6097] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.365902][T11503] netlink: 'syz.1.1330': attribute type 1 has an invalid length. [ 277.378758][T11404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.389063][T11404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.420497][T11404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.433924][T11404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.440918][T11404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.468834][T11404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.570755][T11505] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 277.599520][T11506] veth5: entered promiscuous mode [ 277.608776][T11506] bond5: (slave veth5): Enslaving as a backup interface with a down link [ 277.679864][ T6097] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.867857][T11523] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1334'. [ 277.881004][T11523] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.908284][T11524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1334'. [ 278.009198][ T6097] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.115963][T11536] bridge_slave_0: left allmulticast mode [ 278.121689][T11536] bridge_slave_0: left promiscuous mode [ 278.131204][T11536] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.142700][T11536] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.150657][T11536] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.177315][T11404] hsr_slave_0: entered promiscuous mode [ 278.185224][T11404] hsr_slave_1: entered promiscuous mode [ 278.476500][T11429] chnl_net:caif_netlink_parms(): no params data found [ 278.522048][T11558] netlink: 'syz.4.1343': attribute type 1 has an invalid length. [ 278.548152][T11555] netlink: zone id is out of range [ 278.556317][T11555] netlink: zone id is out of range [ 278.561709][T11555] netlink: zone id is out of range [ 278.567348][T11555] netlink: zone id is out of range [ 278.573007][T11555] netlink: zone id is out of range [ 278.614272][T11555] netlink: zone id is out of range [ 278.635401][ T6097] bridge_slave_1: left allmulticast mode [ 278.650017][ T6097] bridge_slave_1: left promiscuous mode [ 278.663028][ T6097] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.679984][ T6097] bridge_slave_0: left allmulticast mode [ 278.686419][ T6097] bridge_slave_0: left promiscuous mode [ 278.692225][ T6097] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.728075][T11568] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1345'. [ 278.835355][ T5862] Bluetooth: hci2: command tx timeout [ 279.071596][ T6097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.084004][ T6097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.094904][ T6097] bond0 (unregistering): Released all slaves [ 279.235427][ T5862] Bluetooth: hci1: command tx timeout [ 279.387739][T11578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1348'. [ 279.408903][T11429] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.418592][T11429] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.429225][T11429] bridge_slave_0: entered allmulticast mode [ 279.450167][T11429] bridge_slave_0: entered promiscuous mode [ 279.524297][T11429] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.531919][T11429] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.571308][T11429] bridge_slave_1: entered allmulticast mode [ 279.588809][T11429] bridge_slave_1: entered promiscuous mode [ 279.601213][T11588] sctp: [Deprecated]: syz.1.1349 (pid 11588) Use of int in max_burst socket option. [ 279.601213][T11588] Use struct sctp_assoc_value instead [ 279.743428][T11429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.790536][T11429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.141650][T11429] team0: Port device team_slave_0 added [ 280.193707][T11599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1354'. [ 280.220932][T11429] team0: Port device team_slave_1 added [ 280.373256][ T6097] hsr_slave_0: left promiscuous mode [ 280.389823][ T6097] hsr_slave_1: left promiscuous mode [ 280.407293][ T6097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.426227][ T6097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.454693][ T6097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.462201][ T6097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.502449][ T6097] veth1_macvtap: left promiscuous mode [ 280.513320][ T6097] veth0_macvtap: left promiscuous mode [ 280.519548][ T6097] veth1_vlan: left promiscuous mode [ 280.525444][ T6097] veth0_vlan: left promiscuous mode [ 280.913855][ T5865] Bluetooth: hci2: command tx timeout [ 281.080778][ T6097] team0 (unregistering): Port device team_slave_1 removed [ 281.122547][ T6097] team0 (unregistering): Port device team_slave_0 removed [ 281.318935][ T5865] Bluetooth: hci1: command tx timeout [ 281.659795][T11429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.674279][T11429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.700875][T11429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.793342][T11429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.808829][T11429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.852018][T11429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.896770][T11613] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1357'. [ 282.113223][T11404] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 282.135908][T11429] hsr_slave_0: entered promiscuous mode [ 282.143068][T11429] hsr_slave_1: entered promiscuous mode [ 282.150170][T11429] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 282.158829][T11429] Cannot create hsr debugfs directory [ 282.213502][T11404] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 282.236952][T11404] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 282.261273][T11404] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 282.348345][T11630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1360'. [ 282.711453][T11638] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1362'. [ 282.869349][T11404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.920095][T11641] batadv_slave_1: entered promiscuous mode [ 282.942730][T11404] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.975629][ T6408] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.983363][ T6408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.999805][ T5865] Bluetooth: hci2: command 0x0419 tx timeout [ 283.022325][ T6408] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.029571][ T6408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.055469][T11645] batadv_slave_1: left promiscuous mode [ 283.237325][T11648] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1365'. [ 283.250175][T11648] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1365'. [ 283.339734][T11429] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 283.414727][T11429] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 283.447586][T11429] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 283.475199][T11663] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1370'. [ 283.508714][T11429] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 283.537070][T11663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1370'. [ 283.546706][T11663] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1370'. [ 283.857239][T11429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.882087][T11404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.921514][T11429] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.965928][T11688] netlink: 'syz.4.1376': attribute type 2 has an invalid length. [ 283.990803][ T6103] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.998036][ T6103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.062032][ T6109] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.069316][ T6109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.149458][T11404] veth0_vlan: entered promiscuous mode [ 284.206052][T11404] veth1_vlan: entered promiscuous mode [ 284.334577][T11404] veth0_macvtap: entered promiscuous mode [ 284.364992][T11404] veth1_macvtap: entered promiscuous mode [ 284.416326][T11404] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.439564][T11404] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.472345][T11404] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.501200][T11404] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.510678][T11404] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.519785][T11404] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.731314][ T6408] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.758790][ T6408] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.802082][T11429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.823024][ T6099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.837656][ T6099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.883273][T11722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1386'. [ 284.957682][T11429] veth0_vlan: entered promiscuous mode [ 285.002967][T11429] veth1_vlan: entered promiscuous mode [ 285.078125][ T5865] Bluetooth: hci2: command 0x0419 tx timeout [ 285.102848][T11724] netlink: 'syz.1.1387': attribute type 4 has an invalid length. [ 285.172083][T11429] veth0_macvtap: entered promiscuous mode [ 285.176145][T11732] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1390'. [ 285.191845][T11730] net_ratelimit: 7 callbacks suppressed [ 285.191865][T11730] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 285.205478][T11429] veth1_macvtap: entered promiscuous mode [ 285.225278][T11732] x_tables: duplicate entry at hook 3 [ 285.239659][T11429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.255004][T11429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.340050][T11429] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.353836][T11429] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.362623][T11429] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.394284][T11429] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.424554][T11743] netlink: 'syz.4.1393': attribute type 21 has an invalid length. [ 285.435495][T11744] netlink: 'syz.4.1393': attribute type 11 has an invalid length. [ 285.448941][T11744] netlink: 'syz.4.1393': attribute type 11 has an invalid length. [ 285.467462][T11744] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1393'. [ 285.513058][T11748] x_tables: duplicate underflow at hook 2 [ 285.534564][T11743] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1393'. [ 285.629089][ T6096] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.788654][ T6096] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.843678][ T6109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.851561][ T6109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.900062][ T6109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.909118][ T6109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.950236][ T6096] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.049981][ T6096] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.155616][ T6096] bridge_slave_1: left allmulticast mode [ 286.161338][ T6096] bridge_slave_1: left promiscuous mode [ 286.167555][ T6096] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.178307][ T6096] bridge_slave_0: left allmulticast mode [ 286.184174][ T6096] bridge_slave_0: left promiscuous mode [ 286.189930][ T6096] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.576896][ T6096] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.602818][ T6096] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.629649][ T6096] bond0 (unregistering): Released all slaves [ 286.968139][ T5862] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 286.978296][ T5862] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 286.987614][ T5862] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 287.002319][ T5862] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 287.014432][ T5862] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 287.167627][ T6096] hsr_slave_0: left promiscuous mode [ 287.183939][ T6096] hsr_slave_1: left promiscuous mode [ 287.189950][ T6096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.197891][ T6096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.212893][ T6096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.220798][ T6096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.254825][ T6096] veth1_macvtap: left promiscuous mode [ 287.260452][ T6096] veth0_macvtap: left promiscuous mode [ 287.271553][ T6096] veth1_vlan: left promiscuous mode [ 287.277676][ T6096] veth0_vlan: left promiscuous mode [ 287.790784][ T6096] team0 (unregistering): Port device team_slave_1 removed [ 287.833683][ T6096] team0 (unregistering): Port device team_slave_0 removed [ 288.079779][T11767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1396'. [ 288.177921][T11772] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1398'. [ 288.302018][ T5865] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 288.316172][ T5865] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 288.326262][ T5865] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 288.335013][ T5865] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 288.345464][ T5865] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 288.729674][T11765] team0: vlans aren't supported yet for dev_uc|mc_add() [ 288.892913][T11782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1401'. [ 288.929049][T11782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1401'. [ 289.059682][T11782] sch_fq: defrate 0 ignored. [ 289.078377][ T5865] Bluetooth: hci1: command tx timeout [ 289.247963][T11795] netlink: 'syz.4.1405': attribute type 10 has an invalid length. [ 289.328304][T11753] chnl_net:caif_netlink_parms(): no params data found [ 289.744063][T11753] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.751375][T11753] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.789761][T11753] bridge_slave_0: entered allmulticast mode [ 289.805845][T11823] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1411'. [ 289.828176][T11753] bridge_slave_0: entered promiscuous mode [ 289.860863][T11753] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.885143][T11753] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.892461][T11753] bridge_slave_1: entered allmulticast mode [ 289.932960][T11753] bridge_slave_1: entered promiscuous mode [ 290.020993][T11831] veth11: entered promiscuous mode [ 290.061575][T11833] gretap0: entered promiscuous mode [ 290.071012][T11833] vlan3: entered promiscuous mode [ 290.141269][T11843] netlink: 'syz.1.1416': attribute type 1 has an invalid length. [ 290.149272][T11843] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1416'. [ 290.228843][ T6096] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.247435][T11850] netlink: 4388 bytes leftover after parsing attributes in process `syz.1.1418'. [ 290.299737][T11753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.398546][ T6096] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.434757][ T5865] Bluetooth: hci2: command tx timeout [ 290.472683][T11753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.548614][T11864] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1420'. [ 290.554615][ T6096] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.658973][T11871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1422'. [ 290.739264][ T6096] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.822963][T11753] team0: Port device team_slave_0 added [ 290.844745][T11753] team0: Port device team_slave_1 added [ 290.941808][T11876] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1423'. [ 291.007909][T11753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.033861][T11753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.089012][T11753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.122791][T11753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.150975][T11753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.154304][ T5865] Bluetooth: hci1: command tx timeout [ 291.205720][T11753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.229307][T11885] tipc: Enabling of bearer rejected, failed to enable media [ 291.390393][T11753] hsr_slave_0: entered promiscuous mode [ 291.399753][T11753] hsr_slave_1: entered promiscuous mode [ 291.427739][T11773] chnl_net:caif_netlink_parms(): no params data found [ 291.658483][ T6096] bridge_slave_1: left allmulticast mode [ 291.666735][ T6096] bridge_slave_1: left promiscuous mode [ 291.672663][ T6096] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.684599][ T6096] bridge_slave_0: left allmulticast mode [ 291.690395][ T6096] bridge_slave_0: left promiscuous mode [ 291.696500][ T6096] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.146162][ T6096] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 292.160449][ T6096] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 292.170889][ T6096] bond0 (unregistering): Released all slaves [ 292.198143][T11906] geneve3: entered promiscuous mode [ 292.203842][T11906] geneve3: entered allmulticast mode [ 292.455974][T11773] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.469099][T11930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1437'. [ 292.477480][T11773] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.490870][T11773] bridge_slave_0: entered allmulticast mode [ 292.499698][T11773] bridge_slave_0: entered promiscuous mode [ 292.509360][T11773] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.521907][ T5865] Bluetooth: hci2: command tx timeout [ 292.522719][T11773] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.534952][T11773] bridge_slave_1: entered allmulticast mode [ 292.542974][T11773] bridge_slave_1: entered promiscuous mode [ 292.604532][T11934] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1440'. [ 292.802494][T11773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.826118][T11941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1442'. [ 292.830743][T11773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.854016][T11941] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1442'. [ 292.863092][T11941] netlink: 'syz.1.1442': attribute type 14 has an invalid length. [ 293.142112][T11773] team0: Port device team_slave_0 added [ 293.185919][T11773] team0: Port device team_slave_1 added [ 293.233792][ T5865] Bluetooth: hci1: command tx timeout [ 293.289594][ T6096] hsr_slave_0: left promiscuous mode [ 293.304602][ T6096] hsr_slave_1: left promiscuous mode [ 293.310601][ T6096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.332745][ T6096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.346487][ T6096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.356570][ T6096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.387881][ T6096] veth1_macvtap: left promiscuous mode [ 293.394531][ T6096] veth0_macvtap: left promiscuous mode [ 293.400391][ T6096] veth1_vlan: left promiscuous mode [ 293.409238][ T6096] veth0_vlan: left promiscuous mode [ 293.950542][ T6096] team0 (unregistering): Port device team_slave_1 removed [ 294.004576][ T6096] team0 (unregistering): Port device team_slave_0 removed [ 294.236688][T11970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1451'. [ 294.532964][T11773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.553766][T11773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.580605][T11773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.593792][ T5865] Bluetooth: hci2: command tx timeout [ 294.651613][T11773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.661190][T11773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.688274][T11773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.835166][T11773] hsr_slave_0: entered promiscuous mode [ 294.841974][T11773] hsr_slave_1: entered promiscuous mode [ 294.852768][T11773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 294.860898][T11773] Cannot create hsr debugfs directory [ 295.155751][T11983] __nla_validate_parse: 1 callbacks suppressed [ 295.155772][T11983] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1457'. [ 295.313787][ T5865] Bluetooth: hci1: command tx timeout [ 295.343695][T11991] netlink: 'syz.1.1460': attribute type 1 has an invalid length. [ 295.351664][T11991] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 295.392676][T11997] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1461'. [ 295.403347][T11753] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 295.421899][T11753] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 295.466144][T11753] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 295.491741][T11753] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 295.631610][T12011] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1462'. [ 295.642520][T12011] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.709780][T12013] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1464'. [ 295.904998][T11753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.942940][T11773] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 295.996088][T11753] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.017704][T11773] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 296.050200][T11773] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 296.071286][T11773] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 296.107970][ T6096] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.115232][ T6096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.194435][ T6096] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.201678][ T6096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.251572][T12033] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 296.571659][T11773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.679121][ T5862] Bluetooth: hci2: command tx timeout [ 296.717627][T11773] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.746448][ T6103] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.753740][ T6103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.807780][ T6103] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.815066][ T6103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.951475][T11753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.006059][T11773] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 297.150223][T11753] veth0_vlan: entered promiscuous mode [ 297.188767][T12068] can: request_module (can-proto-5) failed. [ 297.199040][T11753] veth1_vlan: entered promiscuous mode [ 297.298319][T11753] veth0_macvtap: entered promiscuous mode [ 297.331906][T11753] veth1_macvtap: entered promiscuous mode [ 297.399360][T11753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.426142][T11753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.442812][T11753] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.453177][T11753] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.468683][T11753] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.478798][T11753] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.576330][T11773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.716713][ T6097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.739903][ T6097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.788088][T12088] raw_sendmsg: syz.1.1483 forgot to set AF_INET. Fix it! [ 297.810415][T11773] veth0_vlan: entered promiscuous mode [ 297.843471][T11773] veth1_vlan: entered promiscuous mode [ 297.853199][ T6097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.874255][ T6097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.982854][T11773] veth0_macvtap: entered promiscuous mode [ 298.024665][T11773] veth1_macvtap: entered promiscuous mode [ 298.103320][T11773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.128848][T11773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.185938][T11773] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.200114][T11773] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.213236][T11773] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.240697][T11773] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.287031][T12103] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1486'. [ 298.351176][T12106] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.1487'. [ 298.623862][T12113] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 298.691763][T12117] bridge: RTM_NEWNEIGH with invalid ether address [ 298.713000][ T6109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.735797][ T6109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.764504][ T5862] Bluetooth: hci2: command 0x0405 tx timeout [ 298.800182][ T6093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.829111][ T6093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.000593][ T6110] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.163953][T12135] netlink: 'syz.2.1496': attribute type 10 has an invalid length. [ 299.182829][T12137] bond0: (slave bridge0): Releasing backup interface [ 299.211787][T12137] bond0: (slave batadv0): Releasing backup interface [ 299.226525][T12136] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1496'. [ 299.336252][T12135] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 299.354068][T12135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.365414][T12135] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 299.407538][ T6110] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.520871][ T6110] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.737684][ T6110] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.903960][ T6110] bridge_slave_1: left allmulticast mode [ 299.909725][ T6110] bridge_slave_1: left promiscuous mode [ 299.920172][ T6110] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.932461][ T6110] bridge_slave_0: left allmulticast mode [ 299.941426][ T6110] bridge_slave_0: left promiscuous mode [ 299.947798][ T6110] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.191870][ T5862] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 300.218591][ T5862] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 300.227864][ T5862] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 300.236127][ T5862] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 300.245615][ T5862] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 300.359266][ T6110] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 300.370817][ T6110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 300.385492][ T6110] bond0 (unregistering): Released all slaves [ 300.908360][ T6110] hsr_slave_0: left promiscuous mode [ 300.916430][ T6110] hsr_slave_1: left promiscuous mode [ 300.922711][ T6110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.933019][ T6110] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.948337][ T6110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.955964][ T6110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.977632][ T6110] veth1_macvtap: left promiscuous mode [ 300.983206][ T6110] veth0_macvtap: left promiscuous mode [ 300.989192][ T6110] veth1_vlan: left promiscuous mode [ 300.995580][ T6110] veth0_vlan: left promiscuous mode [ 301.571236][ T5862] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 301.590037][ T5862] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 301.612156][ T5862] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 301.622266][ T5862] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 301.645873][ T5862] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 301.737976][ T6110] team0 (unregistering): Port device team_slave_1 removed [ 301.786794][ T6110] team0 (unregistering): Port device team_slave_0 removed [ 302.250804][T12139] chnl_net:caif_netlink_parms(): no params data found [ 302.266043][T12146] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1497'. [ 302.275671][ T5865] Bluetooth: hci1: command tx timeout [ 302.415326][T12164] x_tables: ip6_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 302.427656][T12165] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1500'. [ 302.672187][T12170] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 302.793028][T12139] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.817345][T12139] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.834382][T12139] bridge_slave_0: entered allmulticast mode [ 302.851427][T12139] bridge_slave_0: entered promiscuous mode [ 302.873246][T12139] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.893628][T12139] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.901071][T12139] bridge_slave_1: entered allmulticast mode [ 302.917734][T12139] bridge_slave_1: entered promiscuous mode [ 303.069742][T12139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.111086][T12139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.226188][T12139] team0: Port device team_slave_0 added [ 303.266421][T12139] team0: Port device team_slave_1 added [ 303.483386][T12139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.501324][T12139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.535679][T12139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.585416][ T6110] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.612645][T12139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.620044][T12139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.649981][T12139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.717614][ T5865] Bluetooth: hci2: command tx timeout [ 303.718552][ T6110] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.796762][T12218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1515'. [ 303.871607][ T6110] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.986805][T12225] tipc: Cannot configure node identity twice [ 303.993339][T12225] tipc: Cannot configure node identity twice [ 304.000933][T12226] tipc: Cannot configure node identity twice [ 304.008457][T12226] tipc: Cannot configure node identity twice [ 304.118266][T12139] hsr_slave_0: entered promiscuous mode [ 304.136750][T12139] hsr_slave_1: entered promiscuous mode [ 304.179596][ T6110] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.189937][T12240] netlink: 'syz.1.1521': attribute type 6 has an invalid length. [ 304.189987][T12240] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1521'. [ 304.242600][T12240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1521'. [ 304.356590][ T5865] Bluetooth: hci1: command tx timeout [ 304.443364][T12159] chnl_net:caif_netlink_parms(): no params data found [ 304.776695][T12262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1526'. [ 304.883098][T12159] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.890641][T12159] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.898049][T12159] bridge_slave_0: entered allmulticast mode [ 304.906417][T12159] bridge_slave_0: entered promiscuous mode [ 305.046124][T12159] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.054767][T12159] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.062472][T12159] bridge_slave_1: entered allmulticast mode [ 305.080288][T12159] bridge_slave_1: entered promiscuous mode [ 305.102603][ T6110] bridge_slave_1: left allmulticast mode [ 305.113867][ T6110] bridge_slave_1: left promiscuous mode [ 305.122221][ T6110] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.147451][ T6110] bridge_slave_0: left allmulticast mode [ 305.164048][ T6110] bridge_slave_0: left promiscuous mode [ 305.170017][ T6110] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.579033][ T6110] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.590446][ T6110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.601430][ T6110] bond0 (unregistering): Released all slaves [ 305.640997][T12277] netlink: 'syz.4.1529': attribute type 4 has an invalid length. [ 305.790153][T12283] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1533'. [ 305.794184][ T5865] Bluetooth: hci2: command tx timeout [ 305.809374][T12159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.860321][T12159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.123191][T12159] team0: Port device team_slave_0 added [ 306.155936][T12159] team0: Port device team_slave_1 added [ 306.338896][T12159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.363771][T12159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.425874][T12159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.444437][ T5862] Bluetooth: hci1: command tx timeout [ 306.562766][T12159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.570036][T12159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.597263][T12159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.632032][ T6110] hsr_slave_0: left promiscuous mode [ 306.642052][ T6110] hsr_slave_1: left promiscuous mode [ 306.649399][ T6110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.657478][ T6110] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.666337][ T6110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.675331][ T6110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.702255][ T6110] veth1_macvtap: left promiscuous mode [ 306.708376][ T6110] veth0_macvtap: left promiscuous mode [ 306.714744][ T6110] veth1_vlan: left promiscuous mode [ 306.720415][ T6110] veth0_vlan: left promiscuous mode [ 306.821216][ T5865] block nbd0: Receive control failed (result -32) [ 307.061186][T12309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1540'. [ 307.669657][ T6110] team0 (unregistering): Port device team_slave_1 removed [ 307.714250][ T6110] team0 (unregistering): Port device team_slave_0 removed [ 307.876934][ T5865] Bluetooth: hci2: command tx timeout [ 308.196930][T12309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1540'. [ 308.225377][T12309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1540'. [ 308.301723][T12309] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.311054][T12309] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.320822][T12309] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.329910][T12309] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.402372][T12340] netlink: 'syz.2.1546': attribute type 18 has an invalid length. [ 308.437629][T12159] hsr_slave_0: entered promiscuous mode [ 308.469723][T12159] hsr_slave_1: entered promiscuous mode [ 308.492670][T12159] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 308.501012][T12159] Cannot create hsr debugfs directory [ 308.513930][ T5865] Bluetooth: hci1: command tx timeout [ 308.619745][T12346] netlink: 'syz.4.1550': attribute type 13 has an invalid length. [ 308.639625][T12139] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 308.677142][T12139] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 308.700557][T12346] lo: entered promiscuous mode [ 308.726874][T12354] netlink: 'syz.2.1552': attribute type 4 has an invalid length. [ 308.738202][T12346] tunl0: entered promiscuous mode [ 308.764007][T12346] tunl0: entered allmulticast mode [ 308.774685][T12346] gre0: entered promiscuous mode [ 308.780455][T12346] gre0: entered allmulticast mode [ 308.811732][T12346] gretap0: entered promiscuous mode [ 308.817962][T12346] gretap0: entered allmulticast mode [ 308.827491][T12346] gretap0: refused to change device tx_queue_len [ 308.834199][T12346] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 308.902733][T12139] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 308.981157][T12139] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 309.089167][T12370] netlink: 'syz.2.1556': attribute type 1 has an invalid length. [ 309.105272][T12375] IPv6: NLM_F_CREATE should be specified when creating new route [ 309.127538][T12375] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1555'. [ 309.181381][T12370] netlink: 'syz.2.1556': attribute type 11 has an invalid length. [ 309.194365][T12370] netlink: 'syz.2.1556': attribute type 11 has an invalid length. [ 309.207789][T12370] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1556'. [ 309.652966][T12384] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 309.696116][T12382] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒžóúz [ 309.875786][T12139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.959910][T12139] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.964472][ T5865] Bluetooth: hci2: command tx timeout [ 310.009423][ T6100] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.016768][ T6100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.060006][ T6100] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.067344][ T6100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.292769][T12401] veth1_macvtap: entered promiscuous mode [ 310.321240][T12400] veth1_macvtap: left promiscuous mode [ 310.430188][T12159] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 310.468100][T12159] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 310.527914][T12159] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 310.559583][T12159] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 310.815420][T12433] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1566'. [ 310.909881][T12436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1568'. [ 310.953844][T12436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1568'. [ 310.974166][T12139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.102467][T12159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.178242][T12159] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.212366][T12139] veth0_vlan: entered promiscuous mode [ 311.252403][T12139] veth1_vlan: entered promiscuous mode [ 311.293318][ T6110] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.300736][ T6110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.327780][T12451] lo speed is unknown, defaulting to 1000 [ 311.329750][T12446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1571'. [ 311.368934][T12451] lo speed is unknown, defaulting to 1000 [ 311.375305][ T6100] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.382486][ T6100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.428711][T12139] veth0_macvtap: entered promiscuous mode [ 311.459277][T12452] tipc: Enabling of bearer rejected, failed to enable media [ 311.486400][T12451] lo speed is unknown, defaulting to 1000 [ 311.496676][T12139] veth1_macvtap: entered promiscuous mode [ 311.507973][T12451] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 311.520488][T12464] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1574'. [ 311.545219][T12464] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1574'. [ 311.557990][T12451] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 311.640454][T12451] lo speed is unknown, defaulting to 1000 [ 311.646731][T12139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.661343][T12139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.688689][T12451] lo speed is unknown, defaulting to 1000 [ 311.747602][T12139] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.762008][T12139] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.773720][T12139] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.782581][T12139] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.796272][T12451] lo speed is unknown, defaulting to 1000 [ 311.810978][T12451] lo speed is unknown, defaulting to 1000 [ 311.833179][T12451] lo speed is unknown, defaulting to 1000 [ 311.904974][T12472] netlink: 'syz.2.1576': attribute type 10 has an invalid length. [ 312.011128][T12472] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 312.023136][T12472] team0: Failed to send options change via netlink (err -105) [ 312.031357][T12472] team0: Port device geneve0 added [ 312.078930][ T6096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.104203][ T6096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.224166][ T6100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.232237][ T6100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.320872][T12159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.537291][T12497] veth1_to_bond: mtu less than device minimum [ 312.605940][T12159] veth0_vlan: entered promiscuous mode [ 312.616572][T12499] netlink: 'syz.2.1583': attribute type 4 has an invalid length. [ 312.636187][T12159] veth1_vlan: entered promiscuous mode [ 312.659949][T12499] netlink: 'syz.2.1583': attribute type 4 has an invalid length. [ 312.745619][T12159] veth0_macvtap: entered promiscuous mode [ 312.759696][T12159] veth1_macvtap: entered promiscuous mode [ 312.814969][T12159] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.932958][ T6096] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.977373][T12159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.090256][ T6096] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.117906][T12159] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.131728][T12159] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.146862][T12159] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.158994][T12159] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.209246][ T6096] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.297544][ T6096] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.347164][ T6110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.367023][ T6110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.397951][ T6097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.411649][ T6097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.625474][ T6096] bridge_slave_1: left allmulticast mode [ 313.631176][ T6096] bridge_slave_1: left promiscuous mode [ 313.638059][ T6096] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.649980][ T6096] bridge_slave_0: left allmulticast mode [ 313.656255][ T6096] bridge_slave_0: left promiscuous mode [ 313.663483][ T6096] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.140780][ T6096] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.156519][ T6096] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.167670][ T6096] bond0 (unregistering): Released all slaves [ 314.439495][ T5862] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 314.459502][ T5862] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 314.467779][ T5862] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 314.482209][ T5862] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 314.491998][ T5862] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 314.651365][ T6096] hsr_slave_0: left promiscuous mode [ 314.657751][ T6096] hsr_slave_1: left promiscuous mode [ 314.668577][ T6096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.677000][ T6096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.692897][ T6096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.701021][ T6096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.747128][ T6096] veth1_macvtap: left promiscuous mode [ 314.752769][ T6096] veth0_macvtap: left promiscuous mode [ 314.767125][ T6096] veth1_vlan: left promiscuous mode [ 314.772595][ T6096] veth0_vlan: left promiscuous mode [ 315.260722][ T6096] team0 (unregistering): Port device team_slave_1 removed [ 315.306664][ T6096] team0 (unregistering): Port device team_slave_0 removed [ 315.654905][T12527] __nla_validate_parse: 3 callbacks suppressed [ 315.654926][T12527] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1590'. [ 315.676910][T12532] netlink: 'syz.4.1591': attribute type 1 has an invalid length. [ 315.689665][T12528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1590'. [ 315.954621][ T5865] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 315.966494][ T5865] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 315.974848][T12518] lo speed is unknown, defaulting to 1000 [ 315.980936][ T5865] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 315.992790][ T5865] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 316.009063][ T5865] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 316.215949][T12540] netlink: 'syz.4.1594': attribute type 1 has an invalid length. [ 316.247960][T12540] netlink: 'syz.4.1594': attribute type 2 has an invalid length. [ 316.257694][T12540] netlink: 'syz.4.1594': attribute type 1 has an invalid length. [ 316.267794][T12540] netlink: 'syz.4.1594': attribute type 1 has an invalid length. [ 316.276749][T12540] netlink: 'syz.4.1594': attribute type 2 has an invalid length. [ 316.285105][T12540] netlink: 'syz.4.1594': attribute type 2 has an invalid length. [ 316.526436][T12518] chnl_net:caif_netlink_parms(): no params data found [ 316.556940][T12553] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1596'. [ 316.597853][ T5865] Bluetooth: hci1: command tx timeout [ 316.855375][T12533] lo speed is unknown, defaulting to 1000 [ 317.072938][T12518] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.091500][T12518] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.099430][T12518] bridge_slave_0: entered allmulticast mode [ 317.147639][T12518] bridge_slave_0: entered promiscuous mode [ 317.226584][T12585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1603'. [ 317.249511][T12518] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.259175][T12585] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1603'. [ 317.274522][T12518] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.285986][T12585] validate_nla: 1 callbacks suppressed [ 317.286004][T12585] netlink: 'syz.4.1603': attribute type 14 has an invalid length. [ 317.289100][T12518] bridge_slave_1: entered allmulticast mode [ 317.299351][T12585] netlink: 'syz.4.1603': attribute type 13 has an invalid length. [ 317.318940][T12518] bridge_slave_1: entered promiscuous mode [ 317.358098][T12590] macsec0: entered promiscuous mode [ 317.369903][T12590] macsec0: entered allmulticast mode [ 317.508832][ T6096] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.543144][T12585] veth1_macvtap: entered promiscuous mode [ 317.552785][T12585] veth1_macvtap: entered allmulticast mode [ 317.573084][T12585] macsec0: left promiscuous mode [ 317.579161][T12585] macsec0: left allmulticast mode [ 317.584533][T12585] veth1_macvtap: left allmulticast mode [ 317.602509][T12518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.623399][T12518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.694172][ T6096] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.908531][ T6096] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.972312][T12518] team0: Port device team_slave_0 added [ 318.023430][ T6096] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.104786][T12518] team0: Port device team_slave_1 added [ 318.114368][ T5865] Bluetooth: hci2: command tx timeout [ 318.150328][T12625] netlink: 'syz.1.1608': attribute type 10 has an invalid length. [ 318.238215][T12627] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1608'. [ 318.339921][T12518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.352339][T12518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.380152][T12518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.424832][T12518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.431825][T12518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.538314][T12518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.586220][T12533] chnl_net:caif_netlink_parms(): no params data found [ 318.674092][ T5865] Bluetooth: hci1: command tx timeout [ 318.828172][T12651] netlink: 'syz.1.1616': attribute type 24 has an invalid length. [ 318.842151][T12648] pim6reg1: entered promiscuous mode [ 318.849160][T12648] pim6reg1: entered allmulticast mode [ 318.860757][T12518] hsr_slave_0: entered promiscuous mode [ 318.867964][T12518] hsr_slave_1: entered promiscuous mode [ 318.953405][ T6096] bridge_slave_1: left allmulticast mode [ 318.967222][ T6096] bridge_slave_1: left promiscuous mode [ 318.974122][ T6096] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.988265][ T6096] bridge_slave_0: left allmulticast mode [ 318.994575][ T6096] bridge_slave_0: left promiscuous mode [ 319.007093][ T6096] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.299510][T12663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1621'. [ 319.557052][ T6096] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.568862][ T6096] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.579374][ T6096] bond0 (unregistering): Released all slaves [ 319.595159][T12533] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.603156][T12533] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.612847][T12533] bridge_slave_0: entered allmulticast mode [ 319.621491][T12533] bridge_slave_0: entered promiscuous mode [ 319.637904][T12668] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1623'. [ 319.662096][T12533] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.691037][T12533] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.698524][T12533] bridge_slave_1: entered allmulticast mode [ 319.707372][T12533] bridge_slave_1: entered promiscuous mode [ 319.835797][T12670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1624'. [ 319.894159][T12533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.911471][T12678] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1625'. [ 319.924736][T12533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.187653][T12685] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 320.204037][ T5865] Bluetooth: hci2: command tx timeout [ 320.283776][T12533] team0: Port device team_slave_0 added [ 320.380810][T12533] team0: Port device team_slave_1 added [ 320.387849][T12693] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 320.404140][T12694] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 320.518150][T12691] sch_tbf: burst 0 is lower than device lo mtu (65499) ! [ 320.602405][ T6096] hsr_slave_0: left promiscuous mode [ 320.628439][ T6096] hsr_slave_1: left promiscuous mode [ 320.640996][ T6096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.649447][ T6096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.658645][ T6096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.666456][ T6096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.687433][ T6096] veth1_macvtap: left promiscuous mode [ 320.693020][ T6096] veth0_macvtap: left promiscuous mode [ 320.698906][ T6096] veth1_vlan: left promiscuous mode [ 320.705161][ T6096] veth0_vlan: left promiscuous mode [ 320.754631][ T5865] Bluetooth: hci1: command tx timeout [ 320.775766][T12713] netlink: 'syz.1.1635': attribute type 1 has an invalid length. [ 320.795929][T12713] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1635'. [ 320.833040][T12713] nbd: couldn't find device at index 1048576 [ 321.309732][ T6096] team0 (unregistering): Port device team_slave_1 removed [ 321.355654][ T6096] team0 (unregistering): Port device team_slave_0 removed [ 321.848529][T12533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.858009][T12533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.907184][T12533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.970917][T12533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.986658][T12533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.039678][T12533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.237865][T12533] hsr_slave_0: entered promiscuous mode [ 322.249145][T12533] hsr_slave_1: entered promiscuous mode [ 322.260156][T12533] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 322.268496][T12533] Cannot create hsr debugfs directory [ 322.284876][ T5865] Bluetooth: hci2: command tx timeout [ 322.285402][T12727] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1639'. [ 322.439683][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.630167][T12741] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 322.637373][T12743] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1643'. [ 322.808288][T12747] bond3 (unregistering): Released all slaves [ 322.812957][T12741] xt_TCPMSS: Only works on TCP SYN packets [ 322.835653][ T5865] Bluetooth: hci1: command tx timeout [ 323.014342][T12756] netlink: 'syz.1.1646': attribute type 10 has an invalid length. [ 323.036697][T12756] team0: Device hsr_slave_0 failed to register rx_handler [ 323.208727][T12518] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 323.231765][T12518] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 323.290211][T12518] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 323.334451][T12518] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 323.402266][T12756] lo speed is unknown, defaulting to 1000 [ 323.529248][T12773] netlink: 'syz.4.1650': attribute type 1 has an invalid length. [ 323.544664][T12773] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1650'. [ 323.657689][T12533] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 323.693828][T12533] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 323.737436][T12533] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 323.794296][T12533] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 323.934414][T12795] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1655'. [ 324.168683][T12518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.221278][T12518] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.257832][ T6096] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.265221][ T6096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.277508][ T6096] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.284928][ T6096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.337412][T12533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.354057][ T5865] Bluetooth: hci2: command tx timeout [ 324.390984][T12809] netlink: 'syz.4.1658': attribute type 28 has an invalid length. [ 324.399751][T12809] netlink: 'syz.4.1658': attribute type 3 has an invalid length. [ 324.408443][T12809] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1658'. [ 324.412115][T12533] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.442906][ T6096] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.450198][ T6096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.468452][ T6097] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.475768][ T6097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.886313][T12822] delete_channel: no stack [ 324.920982][T12518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.051478][T12518] veth0_vlan: entered promiscuous mode [ 325.069320][T12533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.076561][T12827] xt_CT: You must specify a L4 protocol and not use inversions on it [ 325.102808][T12518] veth1_vlan: entered promiscuous mode [ 325.182535][T12518] veth0_macvtap: entered promiscuous mode [ 325.213551][T12518] veth1_macvtap: entered promiscuous mode [ 325.286588][T12533] veth0_vlan: entered promiscuous mode [ 325.301953][T12518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.328456][T12533] veth1_vlan: entered promiscuous mode [ 325.349906][T12518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.387506][T12518] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.407658][T12518] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.430722][T12518] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.453613][T12518] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.510102][T12836] tap0: tun_chr_ioctl cmd 1074025677 [ 325.516756][T12836] tap0: linktype set to 65534 [ 325.641332][T12533] veth0_macvtap: entered promiscuous mode [ 325.740907][T12533] veth1_macvtap: entered promiscuous mode [ 325.760564][ T6100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.800632][ T6100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.846751][T12533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.926658][ T6408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.934956][T12860] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1673'. [ 325.962603][ T6408] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.989673][T12533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.066756][T12533] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.084344][T12533] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.093155][T12533] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.123615][T12533] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.200618][T12866] netlink: 'syz.4.1675': attribute type 11 has an invalid length. [ 326.212772][T12866] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1675'. [ 326.296363][T12869] netlink: 'syz.1.1677': attribute type 1 has an invalid length. [ 326.317526][T12873] x_tables: ip6_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 326.494554][ T6093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.526824][ T6093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.940678][T12881] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 326.950951][T12881] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 326.960275][T12881] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 326.969220][T12881] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 326.996600][T12881] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.005766][T12881] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.015049][T12881] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.024262][T12881] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.074001][ T6096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.094311][ T6096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.134748][ T6100] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.247689][ T6100] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.492011][ T6100] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.734382][ T6100] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.902344][ T6100] bridge_slave_1: left allmulticast mode [ 327.912881][ T6100] bridge_slave_1: left promiscuous mode [ 327.919170][ T6100] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.936651][ T6100] bridge_slave_0: left allmulticast mode [ 327.942387][ T6100] bridge_slave_0: left promiscuous mode [ 327.953302][ T6100] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.121928][ T5862] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 328.133730][ T5862] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 328.142161][ T5862] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 328.158315][ T5862] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 328.167402][ T5862] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 328.417605][ T6100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.429096][ T6100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.440001][ T6100] bond0 (unregistering): Released all slaves [ 328.700649][T12893] lo speed is unknown, defaulting to 1000 [ 328.972549][ T6100] hsr_slave_0: left promiscuous mode [ 328.978611][ T6100] hsr_slave_1: left promiscuous mode [ 328.991953][ T6100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.003360][ T6100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.012982][ T6100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.021250][ T6100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.042441][ T6100] veth1_macvtap: left promiscuous mode [ 329.048303][ T6100] veth0_macvtap: left promiscuous mode [ 329.054101][ T6100] veth1_vlan: left promiscuous mode [ 329.059402][ T6100] veth0_vlan: left promiscuous mode [ 329.388888][T12899] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1685'. [ 329.398579][T12903] netlink: 'syz.1.1683': attribute type 1 has an invalid length. [ 329.813061][ T6100] team0 (unregistering): Port device team_slave_1 removed [ 329.867495][ T6100] team0 (unregistering): Port device team_slave_0 removed [ 329.922223][ T5865] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 329.946774][ T5865] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 329.956207][ T5865] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 329.979210][ T5865] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 330.000721][ T5865] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 330.195175][ T5862] Bluetooth: hci1: command tx timeout [ 330.406745][T12903] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 330.420382][T12905] gretap2: entered promiscuous mode [ 330.462902][T12914] tipc: Enabling of bearer rejected, failed to enable media [ 330.508973][T12893] chnl_net:caif_netlink_parms(): no params data found [ 330.608455][T12925] netlink: 'syz.4.1689': attribute type 1 has an invalid length. [ 330.632608][T12927] TCP: TCP_TX_DELAY enabled [ 330.645114][T12925] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1689'. [ 330.659051][T12925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1689'. [ 330.936952][T12893] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.963788][T12893] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.971678][T12893] bridge_slave_0: entered allmulticast mode [ 330.998138][T12893] bridge_slave_0: entered promiscuous mode [ 331.034250][T12893] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.042398][T12893] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.055302][T12893] bridge_slave_1: entered allmulticast mode [ 331.063399][T12893] bridge_slave_1: entered promiscuous mode [ 331.195834][T12893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.212898][T12917] lo speed is unknown, defaulting to 1000 [ 331.227677][T12893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.309282][T12893] team0: Port device team_slave_0 added [ 331.337445][T12893] team0: Port device team_slave_1 added [ 331.430830][ T6093] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.507311][T12893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.528560][T12893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.562039][T12893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.622993][ T6093] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.713275][T12893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.737705][T12893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.779146][T12893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.835368][T12968] 8021q: adding VLAN 0 to HW filter on device bond6 [ 331.847117][T12968] bond0: (slave bond6): Enslaving as an active interface with a down link [ 331.921296][ T6093] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.972348][T12893] hsr_slave_0: entered promiscuous mode [ 331.983181][T12893] hsr_slave_1: entered promiscuous mode [ 332.034387][ T5862] Bluetooth: hci2: command tx timeout [ 332.039230][ T6093] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.274188][ T5862] Bluetooth: hci1: command tx timeout [ 332.355370][T12917] chnl_net:caif_netlink_parms(): no params data found [ 332.518156][ T6093] bridge_slave_1: left allmulticast mode [ 332.527875][ T6093] bridge_slave_1: left promiscuous mode [ 332.537130][ T6093] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.549178][ T6093] bridge_slave_0: left allmulticast mode [ 332.555341][ T6093] bridge_slave_0: left promiscuous mode [ 332.561187][ T6093] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.672550][T12992] netlink: 'syz.4.1703': attribute type 17 has an invalid length. [ 333.341233][ T6093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 333.358114][ T6093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 333.377728][ T6093] bond0 (unregistering): Released all slaves [ 333.430568][T12988] team0: Device xfrm1 is of different type [ 333.550315][T12990] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1703'. [ 333.607714][T12992] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 333.843418][T12917] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.853464][T12917] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.871130][T12917] bridge_slave_0: entered allmulticast mode [ 333.880634][T12917] bridge_slave_0: entered promiscuous mode [ 333.930272][T12917] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.960845][T12917] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.991809][T12917] bridge_slave_1: entered allmulticast mode [ 334.015128][T12917] bridge_slave_1: entered promiscuous mode [ 334.119696][ T5862] Bluetooth: hci2: command tx timeout [ 334.208485][T12917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.243390][T12917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.360334][ T5862] Bluetooth: hci1: command tx timeout [ 334.612425][T12917] team0: Port device team_slave_0 added [ 334.629563][T12917] team0: Port device team_slave_1 added [ 334.718167][ T6093] hsr_slave_0: left promiscuous mode [ 334.735621][ T6093] hsr_slave_1: left promiscuous mode [ 334.741664][ T6093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.751639][ T6093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.764796][ T6093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.772296][ T6093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.797228][ T6093] veth1_macvtap: left promiscuous mode [ 334.802868][ T6093] veth0_macvtap: left promiscuous mode [ 334.808779][ T6093] veth1_vlan: left promiscuous mode [ 334.814664][ T6093] veth0_vlan: left promiscuous mode [ 335.308727][ T6093] team0 (unregistering): Port device team_slave_1 removed [ 335.357736][ T6093] team0 (unregistering): Port device team_slave_0 removed [ 335.829676][T12917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.837497][T12917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.867333][T12917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.882574][T12917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.890224][T12917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.933722][T12917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.194480][ T5862] Bluetooth: hci2: command tx timeout [ 336.206091][T13045] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1718'. [ 336.446357][ T5862] Bluetooth: hci1: command tx timeout [ 336.460560][T12917] hsr_slave_0: entered promiscuous mode [ 336.470971][T12917] hsr_slave_1: entered promiscuous mode [ 336.479684][T12917] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 336.487852][T12917] Cannot create hsr debugfs directory [ 336.500284][T12893] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 336.518443][T12893] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 336.620540][T12893] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 336.682821][T12893] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 336.695140][T13061] netlink: 'syz.4.1722': attribute type 1 has an invalid length. [ 336.718663][T13062] smc: net device erspan0 erased user defined pnetid SYZ0 [ 336.840981][T13061] 8021q: adding VLAN 0 to HW filter on device bond4 [ 337.051693][T13080] netlink: 360 bytes leftover after parsing attributes in process `syz.2.1725'. [ 337.418314][T13104] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1730'. [ 337.432957][T12893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.502034][T12893] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.558330][ T6103] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.565589][ T6103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.638350][ T6099] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.645633][ T6099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.763047][T12917] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 337.780670][T13118] netlink: 'syz.1.1734': attribute type 2 has an invalid length. [ 337.798412][T12917] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 337.807569][T13118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1734'. [ 337.836075][T12917] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 337.871012][T12917] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 337.985646][T13128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1736'. [ 338.049125][T13133] netlink: 388 bytes leftover after parsing attributes in process `syz.4.1736'. [ 338.086003][T13131] tipc: Enabled bearer , priority 0 [ 338.097375][T13131] syzkaller0: entered promiscuous mode [ 338.102994][T13131] syzkaller0: entered allmulticast mode [ 338.269813][T12917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.277082][ T5865] Bluetooth: hci2: command tx timeout [ 338.308389][T13136] tipc: Resetting bearer [ 338.438684][T13136] tipc: Disabling bearer [ 338.521827][T13153] gtp1: entered promiscuous mode [ 338.527679][T13153] gtp1: entered allmulticast mode [ 338.562128][T12917] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.593918][ T5862] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 338.600209][ T6109] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.607544][ T6109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.665842][T12893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.705530][ T6109] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.712799][ T6109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.905634][T13164] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1743'. [ 338.992493][T12893] veth0_vlan: entered promiscuous mode [ 339.060801][T12893] veth1_vlan: entered promiscuous mode [ 339.206239][T12893] veth0_macvtap: entered promiscuous mode [ 339.233537][T12893] veth1_macvtap: entered promiscuous mode [ 339.313112][T12893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.360243][T12893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.440663][T12893] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.472014][T12893] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.498255][T12893] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.510792][T12893] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.510846][T13189] netlink: 'syz.4.1752': attribute type 1 has an invalid length. [ 339.567958][T12917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.587912][T13193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1753'. [ 339.608366][T13187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1751'. [ 339.658594][T13195] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1751'. [ 339.769581][ T6109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.804820][ T6109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.900858][T12917] veth0_vlan: entered promiscuous mode [ 339.921798][ T6103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.922324][T12917] veth1_vlan: entered promiscuous mode [ 339.960686][ T6103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.065012][T12917] veth0_macvtap: entered promiscuous mode [ 340.090167][T12917] veth1_macvtap: entered promiscuous mode [ 340.163089][T12917] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.210420][T12917] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.281612][T12917] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.296745][T12917] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.336018][T12917] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.359697][T12917] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.615554][ T6096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.652922][ T6096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.810302][ T6093] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.953688][ T6093] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.981918][ T6097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.990657][ T6097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.123458][ T6093] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.332271][ T6093] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.486145][ T6093] bridge_slave_1: left allmulticast mode [ 341.491881][ T6093] bridge_slave_1: left promiscuous mode [ 341.502536][ T6093] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.525315][ T6093] bridge_slave_0: left allmulticast mode [ 341.531042][ T6093] bridge_slave_0: left promiscuous mode [ 341.537244][ T6093] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.070661][ T6093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.085219][ T6093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 342.096811][ T5865] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 342.107678][ T5865] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 342.108120][ T6093] bond0 (unregistering): Released all slaves [ 342.116649][ T5865] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 342.131207][ T5865] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 342.139326][ T5865] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 342.398747][T13233] lo speed is unknown, defaulting to 1000 [ 342.683461][ T6093] hsr_slave_0: left promiscuous mode [ 342.692772][ T6093] hsr_slave_1: left promiscuous mode [ 342.699091][ T6093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.713593][ T6093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.721675][ T6093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.731421][ T6093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.755240][ T6093] veth1_macvtap: left promiscuous mode [ 342.760874][ T6093] veth0_macvtap: left promiscuous mode [ 342.766911][ T6093] veth1_vlan: left promiscuous mode [ 342.772258][ T6093] veth0_vlan: left promiscuous mode [ 343.260342][ T6093] team0 (unregistering): Port device team_slave_1 removed [ 343.308789][ T6093] team0 (unregistering): Port device team_slave_0 removed [ 343.859630][ T5862] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 343.873245][ T5862] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 343.881696][ T5862] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 343.895885][ T5862] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 343.904198][ T5862] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 344.101012][T13252] netlink: 'syz.2.1766': attribute type 11 has an invalid length. [ 344.134446][T13257] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1766'. [ 344.165922][T13252] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1766'. [ 344.194700][ T5862] Bluetooth: hci1: command tx timeout [ 344.213278][T13233] chnl_net:caif_netlink_parms(): no params data found [ 344.559016][T13280] openvswitch: netlink: Flow actions attr not present in new flow. [ 344.622218][T13280] openvswitch: netlink: Flow actions attr not present in new flow. [ 344.673963][T13280] openvswitch: netlink: Flow actions attr not present in new flow. [ 344.685713][T13280] openvswitch: netlink: Flow actions attr not present in new flow. [ 344.727656][T13280] openvswitch: netlink: Flow actions attr not present in new flow. [ 344.737717][T13280] openvswitch: netlink: Flow actions attr not present in new flow. [ 344.748697][T13233] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.761148][T13233] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.772071][T13280] openvswitch: netlink: Flow actions attr not present in new flow. [ 344.780696][T13233] bridge_slave_0: entered allmulticast mode [ 344.794412][T13280] openvswitch: netlink: Flow actions attr not present in new flow. [ 344.803083][T13233] bridge_slave_0: entered promiscuous mode [ 344.809741][T13280] openvswitch: netlink: Flow actions attr not present in new flow. [ 344.835305][T13258] lo speed is unknown, defaulting to 1000 [ 344.836301][T13233] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.849276][T13280] openvswitch: netlink: Flow actions attr not present in new flow. [ 344.868625][T13233] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.890108][T13233] bridge_slave_1: entered allmulticast mode [ 344.915879][T13233] bridge_slave_1: entered promiscuous mode [ 345.076648][T13293] IPv6: sit2: Disabled Multicast RS [ 345.083061][T13293] sit2: entered allmulticast mode [ 345.099860][T13300] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1779'. [ 345.228889][T13233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.267968][T13233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.385334][T13233] team0: Port device team_slave_0 added [ 345.412848][T13233] team0: Port device team_slave_1 added [ 345.464082][T13314] ieee802154 phy1 wpan1: encryption failed: -22 [ 345.482091][T13316] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1781'. [ 345.524574][T13233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.531599][T13233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.563245][T13233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.706034][ T6103] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.743293][T13233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.752501][T13233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.787914][T13233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.896403][ T6103] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.953921][ T5862] Bluetooth: hci2: command tx timeout [ 345.964117][T13336] xt_hashlimit: max too large, truncated to 1048576 [ 346.192803][ T6103] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.228411][T13233] hsr_slave_0: entered promiscuous mode [ 346.244181][T13347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1792'. [ 346.253290][T13346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1792'. [ 346.269870][T13233] hsr_slave_1: entered promiscuous mode [ 346.275984][ T5862] Bluetooth: hci1: command tx timeout [ 346.343167][ T6103] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.408087][T13353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1794'. [ 346.537245][T13258] chnl_net:caif_netlink_parms(): no params data found [ 346.775598][T13361] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1796'. [ 346.875319][T13258] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.884195][T13258] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.891598][T13258] bridge_slave_0: entered allmulticast mode [ 346.905827][T13258] bridge_slave_0: entered promiscuous mode [ 346.934504][ T6103] bridge_slave_1: left allmulticast mode [ 346.940225][ T6103] bridge_slave_1: left promiscuous mode [ 346.951351][ T6103] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.961984][ T6103] bridge_slave_0: left allmulticast mode [ 346.968756][ T6103] bridge_slave_0: left promiscuous mode [ 346.974917][ T6103] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.363267][ T6103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.375229][ T6103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 347.387566][ T6103] bond0 (unregistering): Released all slaves [ 347.403344][T13258] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.413155][T13258] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.421783][T13258] bridge_slave_1: entered allmulticast mode [ 347.432394][T13258] bridge_slave_1: entered promiscuous mode [ 347.630580][T13373] netlink: 15986 bytes leftover after parsing attributes in process `syz.2.1800'. [ 347.659397][T13258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.708978][T13258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.862957][T13384] netlink: 'syz.2.1804': attribute type 11 has an invalid length. [ 347.901745][T13384] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1804'. [ 347.931428][T13258] team0: Port device team_slave_0 added [ 347.941767][T13258] team0: Port device team_slave_1 added [ 348.035405][ T5862] Bluetooth: hci2: command tx timeout [ 348.067507][T13258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.113725][T13258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.191971][T13258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.240929][T13258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.274241][T13258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.353778][ T5862] Bluetooth: hci1: command tx timeout [ 348.360703][T13258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.492579][ T6103] hsr_slave_0: left promiscuous mode [ 348.503211][ T6103] hsr_slave_1: left promiscuous mode [ 348.510074][ T6103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.517995][ T6103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.530429][ T6103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.538912][ T6103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.573017][ T6103] veth1_macvtap: left promiscuous mode [ 348.579432][ T6103] veth0_macvtap: left promiscuous mode [ 348.585727][ T6103] veth1_vlan: left promiscuous mode [ 348.591464][ T6103] veth0_vlan: left promiscuous mode [ 348.612112][T13418] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 349.181873][ T6103] team0 (unregistering): Port device team_slave_1 removed [ 349.236689][ T6103] team0 (unregistering): Port device team_slave_0 removed [ 349.891138][T13427] __nla_validate_parse: 3 callbacks suppressed [ 349.891158][T13427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1814'. [ 349.911723][T13427] netlink: 'syz.4.1814': attribute type 5 has an invalid length. [ 349.920772][T13427] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1814'. [ 349.948470][T13430] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1814'. [ 349.955995][T13258] hsr_slave_0: entered promiscuous mode [ 349.967752][T13258] hsr_slave_1: entered promiscuous mode [ 349.993485][T13258] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 350.009831][T13258] Cannot create hsr debugfs directory [ 350.021553][T13427] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 350.053491][T13427] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 350.073628][T13427] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 350.082338][T13427] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 350.115998][ T5862] Bluetooth: hci2: command tx timeout [ 350.124031][T13427] geneve2: entered promiscuous mode [ 350.130996][T13427] geneve2: entered allmulticast mode [ 350.288195][T13233] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 350.331973][T13233] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 350.367268][T13440] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1818'. [ 350.422085][T13233] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 350.434469][ T5862] Bluetooth: hci1: command tx timeout [ 350.448552][T13233] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 350.546175][T13445] netlink: 'syz.2.1816': attribute type 1 has an invalid length. [ 350.579393][T13445] netlink: 'syz.2.1816': attribute type 1 has an invalid length. [ 350.939311][T13233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.025076][T13233] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.040657][ T6110] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.047979][ T6110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.099175][ T6103] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.106411][ T6103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.342033][T13472] netlink: 252 bytes leftover after parsing attributes in process `syz.2.1824'. [ 351.352822][T13473] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1823'. [ 351.453828][T13476] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 351.467717][T13258] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 351.505939][T13258] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 351.528415][T13258] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 351.541059][T13258] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 351.827353][T13233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.848639][T13492] lo: left promiscuous mode [ 351.855965][T13492] net_ratelimit: 24 callbacks suppressed [ 351.855983][T13492] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 351.975357][T13258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.061703][T13258] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.067248][T13498] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 352.088830][T13233] veth0_vlan: entered promiscuous mode [ 352.111337][ T6103] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.118638][ T6103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.159131][ T6103] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.166410][ T6103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.194134][ T5862] Bluetooth: hci2: command tx timeout [ 352.243182][T13233] veth1_vlan: entered promiscuous mode [ 352.329654][T13502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1831'. [ 352.401973][T13505] tipc: Enabled bearer , priority 0 [ 352.432520][T13233] veth0_macvtap: entered promiscuous mode [ 352.470151][T13233] veth1_macvtap: entered promiscuous mode [ 352.482712][T13505] tipc: Resetting bearer [ 352.518391][T13504] tipc: Disabling bearer [ 352.568403][T13514] netlink: 'syz.2.1834': attribute type 1 has an invalid length. [ 352.571095][T13233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.666484][T13514] 8021q: adding VLAN 0 to HW filter on device bond3 [ 352.780746][T13233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.885453][T13233] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.926674][T13233] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.936107][T13233] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.953067][T13233] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.046912][T13533] bridge0: port 1(gretap0) entered blocking state [ 353.057248][T13533] bridge0: port 1(gretap0) entered disabled state [ 353.065294][T13533] gretap0: entered allmulticast mode [ 353.071235][T13534] netlink: 'syz.2.1839': attribute type 1 has an invalid length. [ 353.084705][T13534] netlink: 'syz.2.1839': attribute type 3 has an invalid length. [ 353.094120][T13534] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1839'. [ 353.187292][T13258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.209726][T13536] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 353.330381][ T6103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.360822][ T6103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.416268][T13258] veth0_vlan: entered promiscuous mode [ 353.460202][T13258] veth1_vlan: entered promiscuous mode [ 353.487674][ T6099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.502925][ T6099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.558484][T13549] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1844'. [ 353.641351][T13258] veth0_macvtap: entered promiscuous mode [ 353.689040][T13258] veth1_macvtap: entered promiscuous mode [ 353.827358][T13258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.867280][T13258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.900914][T13258] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.927810][T13258] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.940200][T13258] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.970405][T13258] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.079025][T13567] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1849'. [ 354.169963][ T6093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.185863][ T6093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.287899][ T6096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.300238][ T6096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.397164][ T6109] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.645302][ T6109] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.733143][ T6109] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.878849][ T6109] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.065699][ T6109] bridge_slave_1: left allmulticast mode [ 355.071441][ T6109] bridge_slave_1: left promiscuous mode [ 355.081972][ T6109] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.100455][ T6109] bridge_slave_0: left allmulticast mode [ 355.106445][ T6109] bridge_slave_0: left promiscuous mode [ 355.112613][ T6109] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.433106][ T5865] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 355.450553][ T5865] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 355.460887][ T5865] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 355.471352][ T5865] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 355.479941][ T5865] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 355.604744][ T6109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.618911][ T6109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.629113][ T6109] bond0 (unregistering): Released all slaves [ 355.912738][T13579] lo speed is unknown, defaulting to 1000 [ 356.132122][ T6109] hsr_slave_0: left promiscuous mode [ 356.142751][ T6109] hsr_slave_1: left promiscuous mode [ 356.150551][ T6109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.158678][ T6109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.166933][ T6109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.176075][ T6109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.198403][ T6109] veth1_macvtap: left promiscuous mode [ 356.204333][ T6109] veth0_macvtap: left promiscuous mode [ 356.209984][ T6109] veth1_vlan: left promiscuous mode [ 356.215801][ T6109] veth0_vlan: left promiscuous mode [ 356.691602][ T6109] team0 (unregistering): Port device team_slave_1 removed [ 356.742628][ T6109] team0 (unregistering): Port device team_slave_0 removed [ 357.282116][T13597] netlink: 'syz.4.1856': attribute type 1 has an invalid length. [ 357.291053][T13597] __nla_validate_parse: 2 callbacks suppressed [ 357.291071][T13597] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1856'. [ 357.396156][ T5865] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 357.422977][ T5865] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 357.439054][ T5865] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 357.458374][ T5865] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 357.474774][ T5865] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 357.485968][T13599] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 357.558508][ T5862] Bluetooth: hci1: command tx timeout [ 357.655018][T13586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1854'. [ 357.970412][T13579] chnl_net:caif_netlink_parms(): no params data found [ 358.063148][T13579] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.070987][T13579] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.078857][T13579] bridge_slave_0: entered allmulticast mode [ 358.086261][T13579] bridge_slave_0: entered promiscuous mode [ 358.094745][T13579] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.102009][T13579] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.109978][T13579] bridge_slave_1: entered allmulticast mode [ 358.118135][T13579] bridge_slave_1: entered promiscuous mode [ 358.159772][T13579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.172993][T13579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.217593][T13579] team0: Port device team_slave_0 added [ 358.227329][T13579] team0: Port device team_slave_1 added [ 358.291423][ T6109] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.311473][T13579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.319730][T13579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.346396][T13579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.359391][T13579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.368728][T13579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.395260][T13579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.428905][ T6109] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.478349][T13579] hsr_slave_0: entered promiscuous mode [ 358.486329][T13579] hsr_slave_1: entered promiscuous mode [ 358.508675][ T6109] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.591350][ T6109] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.737495][ T6109] bridge_slave_1: left allmulticast mode [ 358.743224][ T6109] bridge_slave_1: left promiscuous mode [ 358.749093][ T6109] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.759334][ T6109] bridge_slave_0: left allmulticast mode [ 358.765472][ T6109] bridge_slave_0: left promiscuous mode [ 358.771358][ T6109] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.125021][ T6109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 359.137129][ T6109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 359.147950][ T6109] bond0 (unregistering): Released all slaves [ 359.472405][T13579] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 359.489226][T13579] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 359.503195][T13579] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 359.522596][T13579] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 359.631681][ T6109] hsr_slave_0: left promiscuous mode [ 359.637165][ T5862] Bluetooth: hci1: command tx timeout [ 359.657025][ T6109] hsr_slave_1: left promiscuous mode [ 359.662982][ T6109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.671272][ T6109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.679515][ T6109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.687813][ T6109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.762851][T13617] netlink: 592 bytes leftover after parsing attributes in process `syz.1.1859'. [ 359.770444][ T6109] veth1_macvtap: left promiscuous mode [ 359.788069][ T6109] veth0_macvtap: left promiscuous mode [ 359.804075][ T6109] veth1_vlan: left promiscuous mode [ 359.809637][T13615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1860'. [ 359.820938][ T6109] veth0_vlan: left promiscuous mode [ 360.262731][T13635] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1865'. [ 360.292002][ T5865] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 360.309121][ T5865] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 360.318874][ T5865] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 360.337635][ T5865] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 360.355918][ T5865] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 360.591748][T13643] xt_bpf: check failed: parse error [ 360.760787][ T6109] team0 (unregistering): Port device team_slave_1 removed [ 360.784890][T13650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1870'. [ 360.823213][ T6109] team0 (unregistering): Port device team_slave_0 removed [ 361.290325][T13650] macsec0: entered promiscuous mode [ 361.296006][T13650] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:579 [ 361.305386][T13650] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 13650, name: syz.1.1870 [ 361.314583][T13650] preempt_count: 201, expected: 0 [ 361.319833][T13650] RCU nest depth: 0, expected: 0 [ 361.324855][T13650] 3 locks held by syz.1.1870/13650: [ 361.330110][T13650] #0: ffffffff8fa230b8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 361.339870][T13650] #1: ffffffff8f51d808 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 361.349135][T13650] #2: ffff888063f6a368 (&macsec_netdev_addr_lock_key/1){+...}-{3:3}, at: dev_uc_add+0x67/0x120 [ 361.359752][T13650] Preemption disabled at: [ 361.359775][T13650] [] dev_uc_add+0x56/0x120 [ 361.370250][T13650] CPU: 0 UID: 0 PID: 13650 Comm: syz.1.1870 Not tainted 6.16.0-rc5-syzkaller-00182-g7727ec1523d7 #0 PREEMPT(full) [ 361.370281][T13650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 361.370302][T13650] Call Trace: [ 361.370312][T13650] [ 361.370322][T13650] dump_stack_lvl+0x189/0x250 [ 361.370358][T13650] ? __pfx_dump_stack_lvl+0x10/0x10 [ 361.370385][T13650] ? __pfx__printk+0x10/0x10 [ 361.370423][T13650] ? print_lock_name+0xde/0x100 [ 361.370451][T13650] ? dev_uc_add+0x56/0x120 [ 361.370483][T13650] __might_resched+0x495/0x610 [ 361.370508][T13650] ? stack_depot_save_flags+0x40/0x900 [ 361.370546][T13650] ? dev_uc_add+0x56/0x120 [ 361.370574][T13650] ? __pfx___might_resched+0x10/0x10 [ 361.370611][T13650] ? kasan_save_track+0x4f/0x80 [ 361.370650][T13650] __mutex_lock+0x106/0xe80 [ 361.370686][T13650] ? dev_set_promiscuity+0x10e/0x260 [ 361.370717][T13650] ? __pfx___mutex_lock+0x10/0x10 [ 361.370735][T13650] ? netdev_info+0x10a/0x160 [ 361.370782][T13650] ? __pfx_netdev_info+0x10/0x10 [ 361.370826][T13650] dev_set_promiscuity+0x10e/0x260 [ 361.370856][T13650] ? __pfx_macsec_dev_change_rx_flags+0x10/0x10 [ 361.370880][T13650] __dev_set_promiscuity+0x534/0x740 [ 361.370909][T13650] ? __hw_addr_add_ex+0x3c5/0x770 [ 361.370939][T13650] __dev_set_rx_mode+0x17c/0x260 [ 361.370970][T13650] dev_uc_add+0xc8/0x120 [ 361.371003][T13650] macsec_dev_open+0xd9/0x530 [ 361.371027][T13650] ? ib_device_get_by_netdev+0x46b/0x4d0 [ 361.371048][T13650] ? __pfx_macsec_dev_open+0x10/0x10 [ 361.371072][T13650] ? ib_device_get_by_netdev+0x84/0x4d0 [ 361.371091][T13650] ? hsr_netdev_notify+0x29e/0xcf0 [ 361.371117][T13650] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 361.371140][T13650] ? udp_tunnel_nic_netdevice_event+0x1b6/0x1500 [ 361.371175][T13650] ? ip6_route_dev_notify+0x9a/0x5b0 [ 361.371205][T13650] ? notifier_call_chain+0x3bf/0x3e0 [ 361.371242][T13650] __dev_open+0x470/0x880 [ 361.371271][T13650] ? __pfx___dev_open+0x10/0x10 [ 361.371306][T13650] __dev_change_flags+0x1ea/0x6d0 [ 361.371335][T13650] ? validate_linkmsg+0x765/0x950 [ 361.371381][T13650] ? __pfx___dev_change_flags+0x10/0x10 [ 361.371420][T13650] rtnl_newlink_create+0x555/0xb00 [ 361.371466][T13650] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 361.371492][T13650] ? rtnl_newlink+0x8db/0x1c70 [ 361.371526][T13650] ? __pfx___mutex_lock+0x10/0x10 [ 361.371562][T13650] ? ns_capable+0x8a/0xf0 [ 361.371591][T13650] rtnl_newlink+0x16d6/0x1c70 [ 361.371618][T13650] ? netlink_sendmsg+0x805/0xb30 [ 361.371661][T13650] ? __pfx_rtnl_newlink+0x10/0x10 [ 361.371715][T13650] ? kasan_quarantine_put+0xdd/0x220 [ 361.371739][T13650] ? lockdep_hardirqs_on+0x9c/0x150 [ 361.371788][T13650] ? nlmon_xmit+0xb0/0x100 [ 361.371810][T13650] ? kmem_cache_free+0x18f/0x400 [ 361.371847][T13650] ? __local_bh_enable_ip+0x12d/0x1c0 [ 361.371873][T13650] ? lockdep_hardirqs_on+0x9c/0x150 [ 361.371907][T13650] ? __local_bh_enable_ip+0x12d/0x1c0 [ 361.371932][T13650] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 361.371963][T13650] ? __dev_queue_xmit+0x27e/0x3a70 [ 361.372011][T13650] ? __lock_acquire+0xab9/0xd20 [ 361.372066][T13650] ? __pfx_rtnl_newlink+0x10/0x10 [ 361.372088][T13650] rtnetlink_rcv_msg+0x7cc/0xb70 [ 361.372118][T13650] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 361.372140][T13650] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 361.372161][T13650] ? ref_tracker_free+0x63a/0x7d0 [ 361.372193][T13650] ? __copy_skb_header+0xa7/0x550 [ 361.372225][T13650] ? __pfx_ref_tracker_free+0x10/0x10 [ 361.372272][T13650] netlink_rcv_skb+0x208/0x470 [ 361.372302][T13650] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 361.372328][T13650] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 361.372372][T13650] ? netlink_deliver_tap+0x2e/0x1b0 [ 361.372399][T13650] ? netlink_deliver_tap+0x2e/0x1b0 [ 361.372432][T13650] netlink_unicast+0x75c/0x8e0 [ 361.372471][T13650] netlink_sendmsg+0x805/0xb30 [ 361.372511][T13650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 361.372544][T13650] ? aa_sock_msg_perm+0x94/0x160 [ 361.372580][T13650] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 361.372613][T13650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 361.372642][T13650] __sock_sendmsg+0x219/0x270 [ 361.372667][T13650] ____sys_sendmsg+0x505/0x830 [ 361.372704][T13650] ? __pfx_____sys_sendmsg+0x10/0x10 [ 361.372746][T13650] ? import_iovec+0x74/0xa0 [ 361.372791][T13650] ___sys_sendmsg+0x21f/0x2a0 [ 361.372824][T13650] ? __pfx____sys_sendmsg+0x10/0x10 [ 361.372902][T13650] ? __fget_files+0x2a/0x420 [ 361.372931][T13650] ? __fget_files+0x3a0/0x420 [ 361.372974][T13650] __x64_sys_sendmsg+0x19b/0x260 [ 361.373007][T13650] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 361.373051][T13650] ? rcu_is_watching+0x15/0xb0 [ 361.373083][T13650] ? do_syscall_64+0xbe/0x3b0 [ 361.373111][T13650] do_syscall_64+0xfa/0x3b0 [ 361.373131][T13650] ? lockdep_hardirqs_on+0x9c/0x150 [ 361.373165][T13650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.373186][T13650] ? clear_bhb_loop+0x60/0xb0 [ 361.373214][T13650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.373236][T13650] RIP: 0033:0x7f83f8f8e929 [ 361.373256][T13650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.373275][T13650] RSP: 002b:00007f83f9d98038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 361.373298][T13650] RAX: ffffffffffffffda RBX: 00007f83f91b5fa0 RCX: 00007f83f8f8e929 [ 361.373315][T13650] RDX: 0000000000000800 RSI: 0000200000000280 RDI: 0000000000000005 [ 361.373330][T13650] RBP: 00007f83f9010b39 R08: 0000000000000000 R09: 0000000000000000 [ 361.373344][T13650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 361.373357][T13650] R13: 0000000000000000 R14: 00007f83f91b5fa0 R15: 00007fffc5d52d98 [ 361.373395][T13650] [ 361.373430][T13650] [ 361.925014][T13650] ============================= [ 361.929874][T13650] [ BUG: Invalid wait context ] [ 361.934732][T13650] 6.16.0-rc5-syzkaller-00182-g7727ec1523d7 #0 Tainted: G W [ 361.943437][T13650] ----------------------------- [ 361.948303][T13650] syz.1.1870/13650 is trying to lock: [ 361.953688][T13650] ffff8880570d4d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_set_promiscuity+0x10e/0x260 [ 361.964301][T13650] other info that might help us debug this: [ 361.970408][T13650] context-{5:5} [ 361.973884][T13650] 3 locks held by syz.1.1870/13650: [ 361.979093][T13650] #0: ffffffff8fa230b8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 361.988634][T13650] #1: ffffffff8f51d808 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 361.997814][T13650] #2: ffff888063f6a368 (&macsec_netdev_addr_lock_key/1){+...}-{3:3}, at: dev_uc_add+0x67/0x120 [ 362.008313][T13650] stack backtrace: [ 362.012061][T13650] CPU: 0 UID: 0 PID: 13650 Comm: syz.1.1870 Tainted: G W 6.16.0-rc5-syzkaller-00182-g7727ec1523d7 #0 PREEMPT(full) [ 362.012089][T13650] Tainted: [W]=WARN [ 362.012096][T13650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 362.012107][T13650] Call Trace: [ 362.012116][T13650] [ 362.012126][T13650] dump_stack_lvl+0x189/0x250 [ 362.012152][T13650] ? __pfx_dump_stack_lvl+0x10/0x10 [ 362.012174][T13650] ? __pfx__printk+0x10/0x10 [ 362.012201][T13650] ? print_lock_name+0xde/0x100 [ 362.012227][T13650] __lock_acquire+0xbcb/0xd20 [ 362.012249][T13650] ? dev_set_promiscuity+0x10e/0x260 [ 362.012270][T13650] lock_acquire+0x120/0x360 [ 362.012287][T13650] ? dev_set_promiscuity+0x10e/0x260 [ 362.012316][T13650] __mutex_lock+0x182/0xe80 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 362.012333][T13650] ? dev_set_promiscuity+0x10e/0x260 [ 362.012359][T13650] ? dev_set_promiscuity+0x10e/0x260 [ 362.012382][T13650] ? __pfx___mutex_lock+0x10/0x10 [ 362.012398][T13650] ? netdev_info+0x10a/0x160 [ 362.012427][T13650] ? __pfx_netdev_info+0x10/0x10 [ 362.012465][T13650] dev_set_promiscuity+0x10e/0x260 [ 362.012488][T13650] ? __pfx_macsec_dev_change_rx_flags+0x10/0x10 [ 362.012510][T13650] __dev_set_promiscuity+0x534/0x740 [ 362.012534][T13650] ? __hw_addr_add_ex+0x3c5/0x770 [ 362.012558][T13650] __dev_set_rx_mode+0x17c/0x260 [ 362.012581][T13650] dev_uc_add+0xc8/0x120 [ 362.012605][T13650] macsec_dev_open+0xd9/0x530 [ 362.012624][T13650] ? ib_device_get_by_netdev+0x46b/0x4d0 [ 362.012641][T13650] ? __pfx_macsec_dev_open+0x10/0x10 [ 362.012660][T13650] ? ib_device_get_by_netdev+0x84/0x4d0 [ 362.012675][T13650] ? hsr_netdev_notify+0x29e/0xcf0 [ 362.012697][T13650] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 362.012716][T13650] ? udp_tunnel_nic_netdevice_event+0x1b6/0x1500 [ 362.012740][T13650] ? ip6_route_dev_notify+0x9a/0x5b0 [ 362.012762][T13650] ? notifier_call_chain+0x3bf/0x3e0 [ 362.012787][T13650] __dev_open+0x470/0x880 [ 362.012811][T13650] ? __pfx___dev_open+0x10/0x10 [ 362.012834][T13650] __dev_change_flags+0x1ea/0x6d0 [ 362.012856][T13650] ? validate_linkmsg+0x765/0x950 [ 362.012884][T13650] ? __pfx___dev_change_flags+0x10/0x10 [ 362.012913][T13650] rtnl_newlink_create+0x555/0xb00 [ 362.012942][T13650] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 362.012963][T13650] ? rtnl_newlink+0x8db/0x1c70 [ 362.012982][T13650] ? __pfx___mutex_lock+0x10/0x10 [ 362.013005][T13650] ? ns_capable+0x8a/0xf0 [ 362.013026][T13650] rtnl_newlink+0x16d6/0x1c70 [ 362.013046][T13650] ? netlink_sendmsg+0x805/0xb30 [ 362.013074][T13650] ? __pfx_rtnl_newlink+0x10/0x10 [ 362.013104][T13650] ? kasan_quarantine_put+0xdd/0x220 [ 362.013123][T13650] ? lockdep_hardirqs_on+0x9c/0x150 [ 362.013154][T13650] ? nlmon_xmit+0xb0/0x100 [ 362.013172][T13650] ? kmem_cache_free+0x18f/0x400 [ 362.013197][T13650] ? __local_bh_enable_ip+0x12d/0x1c0 [ 362.013218][T13650] ? lockdep_hardirqs_on+0x9c/0x150 [ 362.013245][T13650] ? __local_bh_enable_ip+0x12d/0x1c0 [ 362.013265][T13650] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 362.013288][T13650] ? __dev_queue_xmit+0x27e/0x3a70 [ 362.013320][T13650] ? __lock_acquire+0xab9/0xd20 [ 362.013349][T13650] ? __pfx_rtnl_newlink+0x10/0x10 [ 362.013368][T13650] rtnetlink_rcv_msg+0x7cc/0xb70 [ 362.013388][T13650] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 362.013406][T13650] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 362.013423][T13650] ? ref_tracker_free+0x63a/0x7d0 [ 362.013459][T13650] ? __copy_skb_header+0xa7/0x550 [ 362.013484][T13650] ? __pfx_ref_tracker_free+0x10/0x10 [ 362.013523][T13650] netlink_rcv_skb+0x208/0x470 [ 362.013550][T13650] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 362.013573][T13650] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 362.013607][T13650] ? netlink_deliver_tap+0x2e/0x1b0 [ 362.013633][T13650] ? netlink_deliver_tap+0x2e/0x1b0 [ 362.013662][T13650] netlink_unicast+0x75c/0x8e0 [ 362.013692][T13650] netlink_sendmsg+0x805/0xb30 [ 362.013725][T13650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 362.013754][T13650] ? aa_sock_msg_perm+0x94/0x160 [ 362.013787][T13650] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 362.013829][T13650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 362.013857][T13650] __sock_sendmsg+0x219/0x270 [ 362.013875][T13650] ____sys_sendmsg+0x505/0x830 [ 362.013901][T13650] ? __pfx_____sys_sendmsg+0x10/0x10 [ 362.013928][T13650] ? import_iovec+0x74/0xa0 [ 362.013950][T13650] ___sys_sendmsg+0x21f/0x2a0 [ 362.013974][T13650] ? __pfx____sys_sendmsg+0x10/0x10 [ 362.014015][T13650] ? __fget_files+0x2a/0x420 [ 362.014039][T13650] ? __fget_files+0x3a0/0x420 [ 362.014068][T13650] __x64_sys_sendmsg+0x19b/0x260 [ 362.014092][T13650] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 362.014121][T13650] ? rcu_is_watching+0x15/0xb0 [ 362.014145][T13650] ? do_syscall_64+0xbe/0x3b0 [ 362.014164][T13650] do_syscall_64+0xfa/0x3b0 [ 362.014180][T13650] ? lockdep_hardirqs_on+0x9c/0x150 [ 362.014208][T13650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.014225][T13650] ? clear_bhb_loop+0x60/0xb0 [ 362.014247][T13650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.014264][T13650] RIP: 0033:0x7f83f8f8e929 [ 362.014281][T13650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.014297][T13650] RSP: 002b:00007f83f9d98038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 362.014316][T13650] RAX: ffffffffffffffda RBX: 00007f83f91b5fa0 RCX: 00007f83f8f8e929 [ 362.014330][T13650] RDX: 0000000000000800 RSI: 0000200000000280 RDI: 0000000000000005 [ 362.014342][T13650] RBP: 00007f83f9010b39 R08: 0000000000000000 R09: 0000000000000000 [ 362.014353][T13650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 362.014364][T13650] R13: 0000000000000000 R14: 00007f83f91b5fa0 R15: 00007fffc5d52d98 [ 362.014384][T13650] [ 362.120139][T13655] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1871'. [ 362.127673][ T5862] Bluetooth: hci1: command tx timeout [ 362.437571][ T5865] Bluetooth: hci2: command tx timeout [ 363.180803][ T6109] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.191747][ T6109] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 363.267890][ T6109] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.278258][ T6109] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 363.318393][ T6109] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.328988][ T6109] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 363.383159][ T6109] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.395084][ T6109] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 363.958532][ T6109] bond0 (unregistering): Released all slaves [ 363.968612][ T6109] bond1 (unregistering): Released all slaves [ 364.063661][ T6109] bond2 (unregistering): Released all slaves [ 364.074119][ T6109] bond3 (unregistering): Released all slaves [ 364.174900][ T6109] bond4 (unregistering): Released all slaves [ 364.241759][ T6109] tipc: Left network mode [ 364.450816][ T6109] hsr_slave_0: left promiscuous mode [ 364.458548][ T6109] veth1_macvtap: left promiscuous mode [ 364.471188][ T6109] veth0_macvtap: left promiscuous mode [ 364.643700][ T6096] smc: removing ib device syz! [ 364.827116][ T6109] lo (unregistering): left allmulticast mode [ 365.362353][ T6109] bridge_slave_1: left allmulticast mode [ 365.368440][ T6109] bridge_slave_1: left promiscuous mode [ 365.374541][ T6109] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.382750][ T6109] bridge_slave_0: left allmulticast mode [ 365.389451][ T6109] bridge_slave_0: left promiscuous mode [ 365.395642][ T6109] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.464909][ T6109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 365.475436][ T6109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 365.485117][ T6109] bond0 (unregistering): Released all slaves [ 365.568394][ T6109] hsr_slave_0: left promiscuous mode [ 365.574371][ T6109] hsr_slave_1: left promiscuous mode [ 365.580168][ T6109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.588390][ T6109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.687409][ T6109] team0 (unregistering): Port device team_slave_1 removed [ 365.710777][ T6109] team0 (unregistering): Port device team_slave_0 removed