last executing test programs: 1m47.134170611s ago: executing program 3 (id=75): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f00000000c0)='syz1\x00', 0x1ff) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000200)='F', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$ax25_int(r2, 0x101, 0x6, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) write(r4, &(0x7f0000000780)="84433636d5d3979ed45ae12911780b2500c6a30ddf0024247b0990bf689097aac75455f7503f87e79b4156f3bd8bc4a4c309b7b222f0a2c344184194b82add86f8885e3c5c5916314e565d157aabd06a60850aa0db0af4b1f15b5a2942f89f2e5e0cff610cfc0c993da9ec7402db937b3ef03f54eff24da090f0cdc419b924b092cf35d7cd2012a6f6d57dd32e5158de2d711848afa3acdd93edbd7c20a8505246c4c87ab612c99d5dfbcf84055694930620804e7830f7214d96b51cff5ef96eef88c55438c7a51024ca7b13d5d4f8f4198e8c76b14b40", 0xd7) socket(0x40000000015, 0x5, 0x0) (async) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x1, 0x0, @local, 0xe7a}, 0x1c) (async) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x1, 0x0, @local, 0xe7a}, 0x1c) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000880)=ANY=[@ANYBLOB="000000e00000000002004e237f0000010000000000000000000000000000000000000000000000000000000000000000000000000000208d3b15a9000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000702000002004e210000000000000000000000000000000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e246401010100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d8e9d12b280c949e0c39932a5074f1f5ca90aca5426dc84fcafd4e15ded802bb9c49d1d15e63fca12ef2c4c5a754d9816725f1ab891445c6ed9c660b14b112e9cf78274b89ba6b7118305d80ad9f538af3b387aaf95398453ff6bc935d7c943d5d2e4425b946146ad8df9792c226403833f09e4d77f0122143f838e44cd7f809c75437670c76c0e2f49e829d8bb41a6f37406bc8f4264e13339d11d157e1529b4962d175bc2017e69149436d05544c880b32d6fbb68860b3ba311f4450707e0392d46b9a9bf2c7364ffe00"/1247], 0x410) 1m24.615681891s ago: executing program 3 (id=75): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f00000000c0)='syz1\x00', 0x1ff) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000200)='F', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$ax25_int(r2, 0x101, 0x6, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) write(r4, &(0x7f0000000780)="84433636d5d3979ed45ae12911780b2500c6a30ddf0024247b0990bf689097aac75455f7503f87e79b4156f3bd8bc4a4c309b7b222f0a2c344184194b82add86f8885e3c5c5916314e565d157aabd06a60850aa0db0af4b1f15b5a2942f89f2e5e0cff610cfc0c993da9ec7402db937b3ef03f54eff24da090f0cdc419b924b092cf35d7cd2012a6f6d57dd32e5158de2d711848afa3acdd93edbd7c20a8505246c4c87ab612c99d5dfbcf84055694930620804e7830f7214d96b51cff5ef96eef88c55438c7a51024ca7b13d5d4f8f4198e8c76b14b40", 0xd7) socket(0x40000000015, 0x5, 0x0) (async) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x1, 0x0, @local, 0xe7a}, 0x1c) (async) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x1, 0x0, @local, 0xe7a}, 0x1c) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000880)=ANY=[@ANYBLOB="000000e00000000002004e237f0000010000000000000000000000000000000000000000000000000000000000000000000000000000208d3b15a9000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000702000002004e210000000000000000000000000000000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e246401010100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d8e9d12b280c949e0c39932a5074f1f5ca90aca5426dc84fcafd4e15ded802bb9c49d1d15e63fca12ef2c4c5a754d9816725f1ab891445c6ed9c660b14b112e9cf78274b89ba6b7118305d80ad9f538af3b387aaf95398453ff6bc935d7c943d5d2e4425b946146ad8df9792c226403833f09e4d77f0122143f838e44cd7f809c75437670c76c0e2f49e829d8bb41a6f37406bc8f4264e13339d11d157e1529b4962d175bc2017e69149436d05544c880b32d6fbb68860b3ba311f4450707e0392d46b9a9bf2c7364ffe00"/1247], 0x410) 1m6.215151338s ago: executing program 3 (id=75): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f00000000c0)='syz1\x00', 0x1ff) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000200)='F', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$ax25_int(r2, 0x101, 0x6, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) write(r4, &(0x7f0000000780)="84433636d5d3979ed45ae12911780b2500c6a30ddf0024247b0990bf689097aac75455f7503f87e79b4156f3bd8bc4a4c309b7b222f0a2c344184194b82add86f8885e3c5c5916314e565d157aabd06a60850aa0db0af4b1f15b5a2942f89f2e5e0cff610cfc0c993da9ec7402db937b3ef03f54eff24da090f0cdc419b924b092cf35d7cd2012a6f6d57dd32e5158de2d711848afa3acdd93edbd7c20a8505246c4c87ab612c99d5dfbcf84055694930620804e7830f7214d96b51cff5ef96eef88c55438c7a51024ca7b13d5d4f8f4198e8c76b14b40", 0xd7) socket(0x40000000015, 0x5, 0x0) (async) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x1, 0x0, @local, 0xe7a}, 0x1c) (async) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x1, 0x0, @local, 0xe7a}, 0x1c) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000880)=ANY=[@ANYBLOB="000000e00000000002004e237f0000010000000000000000000000000000000000000000000000000000000000000000000000000000208d3b15a9000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000702000002004e210000000000000000000000000000000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e246401010100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d8e9d12b280c949e0c39932a5074f1f5ca90aca5426dc84fcafd4e15ded802bb9c49d1d15e63fca12ef2c4c5a754d9816725f1ab891445c6ed9c660b14b112e9cf78274b89ba6b7118305d80ad9f538af3b387aaf95398453ff6bc935d7c943d5d2e4425b946146ad8df9792c226403833f09e4d77f0122143f838e44cd7f809c75437670c76c0e2f49e829d8bb41a6f37406bc8f4264e13339d11d157e1529b4962d175bc2017e69149436d05544c880b32d6fbb68860b3ba311f4450707e0392d46b9a9bf2c7364ffe00"/1247], 0x410) 48.7480758s ago: executing program 3 (id=75): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f00000000c0)='syz1\x00', 0x1ff) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000200)='F', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$ax25_int(r2, 0x101, 0x6, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) write(r4, &(0x7f0000000780)="84433636d5d3979ed45ae12911780b2500c6a30ddf0024247b0990bf689097aac75455f7503f87e79b4156f3bd8bc4a4c309b7b222f0a2c344184194b82add86f8885e3c5c5916314e565d157aabd06a60850aa0db0af4b1f15b5a2942f89f2e5e0cff610cfc0c993da9ec7402db937b3ef03f54eff24da090f0cdc419b924b092cf35d7cd2012a6f6d57dd32e5158de2d711848afa3acdd93edbd7c20a8505246c4c87ab612c99d5dfbcf84055694930620804e7830f7214d96b51cff5ef96eef88c55438c7a51024ca7b13d5d4f8f4198e8c76b14b40", 0xd7) socket(0x40000000015, 0x5, 0x0) (async) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x1, 0x0, @local, 0xe7a}, 0x1c) (async) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x1, 0x0, @local, 0xe7a}, 0x1c) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000880)=ANY=[@ANYBLOB="000000e00000000002004e237f0000010000000000000000000000000000000000000000000000000000000000000000000000000000208d3b15a9000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000702000002004e210000000000000000000000000000000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e246401010100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d8e9d12b280c949e0c39932a5074f1f5ca90aca5426dc84fcafd4e15ded802bb9c49d1d15e63fca12ef2c4c5a754d9816725f1ab891445c6ed9c660b14b112e9cf78274b89ba6b7118305d80ad9f538af3b387aaf95398453ff6bc935d7c943d5d2e4425b946146ad8df9792c226403833f09e4d77f0122143f838e44cd7f809c75437670c76c0e2f49e829d8bb41a6f37406bc8f4264e13339d11d157e1529b4962d175bc2017e69149436d05544c880b32d6fbb68860b3ba311f4450707e0392d46b9a9bf2c7364ffe00"/1247], 0x410) 32.519941459s ago: executing program 3 (id=75): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f00000000c0)='syz1\x00', 0x1ff) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000200)='F', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$ax25_int(r2, 0x101, 0x6, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) write(r4, &(0x7f0000000780)="84433636d5d3979ed45ae12911780b2500c6a30ddf0024247b0990bf689097aac75455f7503f87e79b4156f3bd8bc4a4c309b7b222f0a2c344184194b82add86f8885e3c5c5916314e565d157aabd06a60850aa0db0af4b1f15b5a2942f89f2e5e0cff610cfc0c993da9ec7402db937b3ef03f54eff24da090f0cdc419b924b092cf35d7cd2012a6f6d57dd32e5158de2d711848afa3acdd93edbd7c20a8505246c4c87ab612c99d5dfbcf84055694930620804e7830f7214d96b51cff5ef96eef88c55438c7a51024ca7b13d5d4f8f4198e8c76b14b40", 0xd7) socket(0x40000000015, 0x5, 0x0) (async) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x1, 0x0, @local, 0xe7a}, 0x1c) (async) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x1, 0x0, @local, 0xe7a}, 0x1c) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000880)=ANY=[@ANYBLOB="000000e00000000002004e237f0000010000000000000000000000000000000000000000000000000000000000000000000000000000208d3b15a9000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000702000002004e210000000000000000000000000000000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e246401010100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d8e9d12b280c949e0c39932a5074f1f5ca90aca5426dc84fcafd4e15ded802bb9c49d1d15e63fca12ef2c4c5a754d9816725f1ab891445c6ed9c660b14b112e9cf78274b89ba6b7118305d80ad9f538af3b387aaf95398453ff6bc935d7c943d5d2e4425b946146ad8df9792c226403833f09e4d77f0122143f838e44cd7f809c75437670c76c0e2f49e829d8bb41a6f37406bc8f4264e13339d11d157e1529b4962d175bc2017e69149436d05544c880b32d6fbb68860b3ba311f4450707e0392d46b9a9bf2c7364ffe00"/1247], 0x410) 13.333248519s ago: executing program 3 (id=75): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f00000000c0)='syz1\x00', 0x1ff) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000200)='F', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$ax25_int(r2, 0x101, 0x6, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) write(r4, &(0x7f0000000780)="84433636d5d3979ed45ae12911780b2500c6a30ddf0024247b0990bf689097aac75455f7503f87e79b4156f3bd8bc4a4c309b7b222f0a2c344184194b82add86f8885e3c5c5916314e565d157aabd06a60850aa0db0af4b1f15b5a2942f89f2e5e0cff610cfc0c993da9ec7402db937b3ef03f54eff24da090f0cdc419b924b092cf35d7cd2012a6f6d57dd32e5158de2d711848afa3acdd93edbd7c20a8505246c4c87ab612c99d5dfbcf84055694930620804e7830f7214d96b51cff5ef96eef88c55438c7a51024ca7b13d5d4f8f4198e8c76b14b40", 0xd7) socket(0x40000000015, 0x5, 0x0) (async) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x1, 0x0, @local, 0xe7a}, 0x1c) (async) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x1, 0x0, @local, 0xe7a}, 0x1c) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000880)=ANY=[@ANYBLOB="000000e00000000002004e237f0000010000000000000000000000000000000000000000000000000000000000000000000000000000208d3b15a9000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000702000002004e210000000000000000000000000000000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e246401010100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d8e9d12b280c949e0c39932a5074f1f5ca90aca5426dc84fcafd4e15ded802bb9c49d1d15e63fca12ef2c4c5a754d9816725f1ab891445c6ed9c660b14b112e9cf78274b89ba6b7118305d80ad9f538af3b387aaf95398453ff6bc935d7c943d5d2e4425b946146ad8df9792c226403833f09e4d77f0122143f838e44cd7f809c75437670c76c0e2f49e829d8bb41a6f37406bc8f4264e13339d11d157e1529b4962d175bc2017e69149436d05544c880b32d6fbb68860b3ba311f4450707e0392d46b9a9bf2c7364ffe00"/1247], 0x410) 3.632362114s ago: executing program 1 (id=1402): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {}, {0x9, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x10}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xe8b, 0x93, 0x1, 0x3}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r6 = socket(0x1f, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'nr0\x00', 0x0}) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r7, @ANYRES32=r1], 0x7c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_TTL_INHERIT={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x58}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14}}, 0x28}}, 0x4000021) 3.085372442s ago: executing program 1 (id=1407): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffd}}}, 0x108) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0x6}, &(0x7f0000000200)=0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076655468315f6d6163767461700000000900010073797a31000000002c000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000014000000110001"], 0xc8}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000240)={r2, 0xb8, "85377738b1788b4e526adf9bb7c7d2be9e363f789d096222a3c5e1314b4897813cadc92281f0807045061ff596c881e9824cde2b8fd912e3d11b930f46d4872faa251ed02a69de6e0a01c22b2ca0ffd7b624145e338deb6b2f4f62cff967ea4f5ca1c19de987ecad92f68e69028f95c786e972f5b6e8566d2b31347803bd7b02a13a8d7e748eac829bd1797a8dc9ee14083bb9ce7e6697e8705505100fab7d97e627f8da0fdeab69ba00fac787010bba86c12b72952a32d4"}, &(0x7f0000000300)=0xc0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmsg$ETHTOOL_MSG_WOL_GET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x34, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}]}, 0x34}}, 0x8000) recvmsg$can_raw(r5, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000740)=""/45, 0x2d}, {&(0x7f0000000780)=""/152, 0x98}], 0x2}, 0x40000011) r6 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r6) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000180)="21c1179e5e021e73dae18977bb6bfe8f", 0x10}], 0x1, &(0x7f0000000780)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000005}], 0x1, 0x40044) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r7, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000fc0)={0x14, 0x3, 0x2, 0x301}, 0x14}}, 0x0) readv(r7, &(0x7f0000001740)=[{&(0x7f00000011c0)=""/253, 0xfd}], 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r8, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0xe, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 2.72252657s ago: executing program 4 (id=1409): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58) (async) close(r1) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000010085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 32) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 32) setsockopt$inet6_tcp_int(r2, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) (async) recvmmsg(r2, &(0x7f00000002c0), 0x220, 0x100, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r3, 0x400454c9, 0xba98575a95aeb70d) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x668443, 0x0) close(r4) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async, rerun: 32) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) (async, rerun: 32) close(0x3) (async) close(0x4) 2.514107921s ago: executing program 4 (id=1412): mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x71, 0xffffffffffffffff, 0x46e4c000) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x8}}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd70020500000005000000080009000200000008000c00ac0a0000060001000400000008000b000400000006001b004e210000050013"], 0x6c}}, 0x4000000) setsockopt$inet6_int(r0, 0x29, 0x13, &(0x7f0000000040)=0x1, 0x4) socket$igmp(0x2, 0x3, 0x2) 2.24465613s ago: executing program 4 (id=1415): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, &(0x7f00000000c0)="ffffffff", 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="040100001a0001000000000000000000fc0000000000000000000000000000002001000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa000000002b000000ff020000000000000000000000000001000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000100000000000000000014000e00"/188], 0x104}}, 0x0) 2.082102035s ago: executing program 1 (id=1417): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x23, {{0x2, 0x0, @private=0xa010101}}, {{0x2, 0x0, @multicast2}}}, 0x108) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x98, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x1}]}}]}, 0x98}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x23, {{0x2, 0x0, @private=0xa010101}}, {{0x2, 0x0, @multicast2}}}, 0x108) (async) socket$inet(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x98, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x1}]}}]}, 0x98}}, 0x0) (async) 1.947925143s ago: executing program 4 (id=1418): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f00000000c0)=0x80000000, 0xfffffd41) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x4f, 0x1, 0x0, 0x25dfdbfc, {}, [@typed={0x32, 0x1, 0x0, 0x0, @uid}]}, 0x1c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000001c0)={0x80000006}, 0x10) sendmsg$kcm(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) unshare(0x26020480) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, 0x0, 0x0) unshare(0x22020600) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r4, &(0x7f0000000180)={0x27}, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@union={0x3}]}, {0x0, [0x0, 0x61, 0x2e, 0x5f]}}, 0x0, 0x2a, 0x0, 0x1, 0x1c16, 0x0, @void, @value}, 0x20) unshare(0x8060400) 1.813488381s ago: executing program 1 (id=1419): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x9, 0x3, 0xab8c, &(0x7f0000000080)) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000340)={r2, r2, 0x8, 0x0, 0x0, 0x82, 0x47, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f0000000180)={@none}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x20, r0, 0x801, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000084}, 0x840) 1.509379363s ago: executing program 4 (id=1422): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x50, 0x3e, 0x1, 0x7fffc, 0x4, {}, [@typed={0x4}, @nested={0x2b, 0x1, 0x0, 0x1, [@generic="7694f52d83daf3dfa1c37aa0313de497cb2fff92c188ec4d9b0641db0edc5d4685cffab90fb51e"]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c805}, 0x4008095) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000180)=0x3, 0x4) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x14150, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000000100005ff000000000000000000add907", @ANYRES32=0x0, @ANYBLOB="1922000000000000140012800b0001006261746164760000040002800a000100bbbbbbbbbbbb0000"], 0x40}}, 0x0) 1.344029211s ago: executing program 1 (id=1423): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000711073000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0xc, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc004}, 0x4000000) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="070000000203010800000000000004000a0000050800010004000001"], 0x1c}, 0x1, 0x0, 0x0, 0x24048000}, 0x20004000) 1.343333309s ago: executing program 2 (id=1424): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x300, 0x0, 0x150}, [@IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r1, 0x0, 0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001700)={0x30, 0x0, 0xb, 0x5, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_NAME={0xc, 0x1, 'NFQUEUE\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x24040800) 1.190605415s ago: executing program 0 (id=1425): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f00000000c0)=0x1, 0x4) (async) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet_udp(0x2, 0x2, 0x0) 1.18901401s ago: executing program 1 (id=1426): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1cc667df99b5a8ddb041f01b97421c85017a270228c529a742de141bdda160d219a60e587c4b0c0f87a4b28feb68d2e602e9ac467e0a45a5ab73990c51cf0b27bd5e49d2c3cf2355c4466de35573cc8a598017ad1250c5b83e5ac2ff07000000000000b7471f6e2162171d9e788800"/124, @ANYRES16=r2, @ANYBLOB="02002bbd7000ffdbdf254500000008000300", @ANYRES32=r6, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x4081) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r7, 0x400442c8, &(0x7f0000000540)=ANY=[@ANYRES32=r1]) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r8, 0x810c9365, &(0x7f0000000580)={{}, 0x100, './file0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0xfffff000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, 0x0, 0x0) r10 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r10, 0x29, 0xd2, 0x0, 0x0) r11 = socket$inet(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r10, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x100, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x14004}, 0x20004004) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r13 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61154c00000000006113300000000000bfa00000000000001503000008004e002d35010000000000950000bc000000006916000000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4501000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a81426104000000000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546ccd3f1d5ab2af27546e7c0700000000000000b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4d08000000ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43000000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d0000000000000000b712c1e47be511fe32fbc90e2364a55e9bb609c64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd4722a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c835d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff5af657a67463d7dbf85ae9321fad16ee751cd7dde94ec97549c2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8bf377b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059a6cffb92e2a0cfd81434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5c4d188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a5cbb8be3f7741b18007dff12eb95066cc6bc256f0a12282224bb031bbee6d23cef7074f6d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873d0ecdf904c2bdbef81f246d26f4b40df949e12bdac18532f4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566fffffffffc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054e5deb27f7922fe6c14eba96c9af409da03290e4009f872d5aaca63dbe239efb1e02dd4fc07f8c5b070e2ddeb4b5afa6df2e7e162962e334d8553cc56008ddc8277fa9e8f6684513bfa827686b6fb71259743f55f46fa7e6379312e93213faf275f0441d46bc5690181244c44bea45854ed4ccd99f3fd328110ae22ef1504ec0566652d742ed8a7e202539c6531824f7399b486fbb906a91b77f2a6ba27bf97ebc7482cea32278a7acd9f2210e6ed2defcbd112f29a92401c5a37c58835f870b056186ef3971d3d9effa5661cabc2a059689dcfb030dd4ac0fe54db67510d3e9a5d36b900000000000000000000000000000000c9e484cf5f8c0955c11b285de46871d62f9d986e73658d228225b21f694dd2dc80e96ce476496973ee14e3d4fd03507c6f7c0c8ae809ddc9a36b4f30d15d08cc8e72d750f5e529cf4cec823b923d382f3f2c42dcb4b316eba77e7f767ae17d4d3427c9379eadbd040fbbe0c6dd8100f1558354bdd35626052c2e66cc34f4e266cc04218764824533cac2736e236b50ae4d800565910200af9cb11002791a91d834ffcc65a6226ecafe0372e3ace29c2441eca24371857aa9eb9b3910a2eb"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$nl_route_sched(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r12, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x2, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) setsockopt$MRT_DEL_VIF(r10, 0x0, 0xcb, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x4, @vifc_lcl_ifindex=r12, @rand_addr=0x64010101}, 0x10) 1.075387266s ago: executing program 2 (id=1427): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x200000100000011, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, 0x0, 0x4000) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000012c0), r2) sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x34, r3, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="540000001400b59500100000000000000a780000", @ANYRES32=r4, @ANYBLOB="14000200fe8000000000000000000000000000aa140006000000000101f0ffff000000000000000014000100fe8000000000000000000000000000bb7f978adea8bd6a2379a6c1d6dc43ba"], 0x54}}, 0x48010) socket(0x10, 0x803, 0x0) (async) socket(0x200000100000011, 0x3, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) (async) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, 0x0, 0x4000) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000012c0), r2) (async) sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x34, r3, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="540000001400b59500100000000000000a780000", @ANYRES32=r4, @ANYBLOB="14000200fe8000000000000000000000000000aa140006000000000101f0ffff000000000000000014000100fe8000000000000000000000000000bb7f978adea8bd6a2379a6c1d6dc43ba"], 0x54}}, 0x48010) (async) 1.026344834s ago: executing program 0 (id=1428): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) (async) vmsplice(r1, &(0x7f0000000380), 0x0, 0x1) splice(r0, &(0x7f0000000040)=0xfffffffffffffff9, r1, &(0x7f0000000080)=0x1, 0xbc, 0xa) (async) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8, r0}, 0x18) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000140)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000200)={{r1}, r3, 0x2e, @inherit={0x60, &(0x7f0000000180)={0x0, 0x3, 0x2, 0x1, {0x28, 0xfc4, 0x7, 0x5, 0x80000001}, [0x6, 0xbdf, 0x8000]}}, @subvolid=0x1}) 874.651057ms ago: executing program 0 (id=1429): unshare(0x20000400) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) write(r0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400400142603600e1208000b0000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 785.965446ms ago: executing program 2 (id=1430): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000050000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000020c0009800800011e0000f5d90800084000000001"], 0xc4}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xfffffffe}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0x11dc0, &(0x7f0000000d40)={@multicast, @remote, @void, {@ipv6={0x86dd, @tipc_packet={0x8, 0x6, "98ce9c", 0x10f4, 0x6, 0x1, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@hopopts={0x3b}, @hopopts={0x2b, 0x8, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @enc_lim={0x4, 0x1, 0x7}, @generic={0x13}, @enc_lim={0x4, 0x1, 0x94}, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x20, {0x3, 0x6, 0xb2, 0x0, [0xc5c31af, 0x8001, 0x0]}}, @jumbo={0xc2, 0x4, 0x1}]}, @routing={0x3c, 0x0, 0x1, 0x94}, @srh={0xff, 0xe, 0x4, 0x7, 0xe, 0x40, 0xfed9, [@local, @dev={0xfe, 0x80, '\x00', 0x42}, @private1, @mcast2, @mcast1, @empty, @empty]}, @dstopts={0x33, 0xa, '\x00', [@calipso={0x7, 0x28, {0x2, 0x8, 0x5, 0xc, [0x2, 0x9, 0xc8ac, 0x3c]}}, @calipso={0x7, 0x28, {0x0, 0x8, 0xc, 0xc, [0x5, 0x4403aad3, 0x7, 0x4]}}, @pad1]}, @hopopts={0x9, 0x1d8, '\x00', [@jumbo={0xc2, 0x4, 0x42}, @generic={0x81}, @enc_lim, @calipso={0x7, 0x48, {0x1, 0x10, 0x6, 0x4, [0x8, 0x8000, 0x1, 0x1, 0x9, 0x80000000, 0x7, 0x0]}}, @ra={0x5, 0x2, 0x8000}, @jumbo={0xc2, 0x4, 0x7}, @calipso={0x7, 0x28, {0x3, 0x8, 0x81, 0x0, [0x9, 0x5, 0x40, 0x3]}}, @generic={0x7, 0xe38, "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"}]}], @name_distributor={{0xec, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0x400, 0x0, 0x1, 0x6, 0x0, 0x2, 0x4e23, 0x4e22, 0x0, 0x3, 0x0, 0x0, 0x1}, [{0x3, 0xa, 0x4, 0x62, 0x7fff, 0x5, 0x6, 0x10001}, {0x4, 0x5, 0x40, 0x3, 0x8, 0x6, 0x0, 0x8}, {0x10000, 0x3, 0x0, 0xf8b0, 0x6, 0x400, 0x0, 0x6}, {0x4, 0x7, 0x0, 0x8, 0x10, 0x18000000, 0x6}, {0xf, 0x8001, 0x1, 0x80, 0x80000001, 0x800, 0x9, 0xfffff81}, {0x8, 0x8, 0x8, 0x400, 0x4cee1ac4, 0x1b97, 0x4, 0x1}, {0x1, 0x7, 0x2, 0x10001, 0xd3fb, 0x8, 0x1, 0x400}]}}}}}}, 0x0) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x10000, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x3f}, @empty}, 0x10) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500001c0000000080090000002000000000b351f348af4bc59bf90103ae4d10991436a39186e2de82e2460f5b38cb05c8395604507e0bc6caafea2bc086eaa7976667bdd96ae19895ac3600bfdd1c398e53e0970fe708460d63c6081a1e8e8c512c334ac14a0fd0ad021e4ab0e098deb54a2269425effd4397651d3ab5738a7a4c1e15f0d89be37be750f19343a855e39e4810c0e9b887c6821383052286acb83671565a78245286cc008b07af196a1332f1bf4b2d40c27458341966b27739c1ca60bf1366fb3211f98f1ed9ad57752730f9e1c0c069a8e12712a1fdb71dd178d2b3d63dcd789"], 0x0) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x204001, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000300)={'veth0_to_bridge\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}) r7 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYRESHEX=r5, @ANYRES32=r7], 0x90}}, 0x0) 575.34178ms ago: executing program 0 (id=1431): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x14, 0x5a, 0x113}, 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000007000000180100002020752500000000002020207b1af8ff00000000bfa101000000010007010000f8ffffffb702000008000000b703000000eb00edc3d8e5fd6530650095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 466.536859ms ago: executing program 2 (id=1432): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x55) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r7}, @IFLA_HSR_SLAVE2={0x8, 0x2, r8}]}}}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000140), &(0x7f0000000180)=r4}, 0x20) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="edff3ecdf9fd37a210381bda702290bf7c51b8b2157fa2c4568194bab72321d7f8c478328645cea2ae8807ff4754c5535edc0adde930934efe936d2af99964c8e4"], 0x14}}, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xcd) 464.902834ms ago: executing program 4 (id=1433): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x28, 0xc, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c894}, 0x49004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)}], 0x2) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b0f, &(0x7f0000000000)={'wlan0\x00'}) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000003c0)={0x6, 0x35, 0x8205, 0xc42a, 0xd, 0x9b45, 0x4, 0xfffffff8}, 0x20) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$pptp(r7, &(0x7f00000018c0)={0x18, 0x2, {0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x303}, "a95972fc5ec50719", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r8, 0x0, 0xffffffff004) 345.436465ms ago: executing program 0 (id=1434): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000d40)=""/4084, 0xff4}, {&(0x7f00000002c0)=""/136, 0x88}, {&(0x7f0000000380)=""/174, 0xae}], 0x3}, 0x8000}], 0x1, 0x12002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000c80)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x308, 0x308, 0x3f8, 0x118, 0x118, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback={0x6200000000000000}, @local, [], [], 'syzkaller1\x00', 'veth0_macvtap\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28}, {0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@empty, 'gretap0\x00', {0x5}}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @inet=@DSCP={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'netpci0\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28}}, {{@ipv6={@local, @private1, [], [], 'veth0_macvtap\x00', 'ip6gretap0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@loopback, @ipv4=@multicast1}}}, {{@ipv6={@private0, @local, [], [], 'vlan0\x00', 'bond_slave_0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000014000000240007800c00040000000000000000000c0003000000000000ed"], 0x38}}, 0x0) 211.559953ms ago: executing program 2 (id=1435): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x3) (async) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r1, 0x604ab000) (async) r2 = socket(0x2c, 0x4, 0x9) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="0c0002"], 0x24}}, 0x0) (async, rerun: 64) sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)=@bridge_setlink={0x144, 0x13, 0x0, 0x70bd27, 0x25dfdbfc, {0x7, 0x0, 0x0, r5, 0x200, 0x1200}, [@IFLA_PHYS_PORT_ID={0xe, 0x22, "afb20cb77b33c8234aef"}, @IFLA_VF_PORTS={0x114, 0x18, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "c6c163d8dcc5dc3cd728c4f8602825b1"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "ee1a7b7a4807ef42d2c28813bc137098"}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "c7fa2776b372a0630106689c91523d41"}, @IFLA_PORT_VF={0x8, 0x1, 0x6}]}, {0x38, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "a15c77330ac9dbe89cae74151b5aad8d"}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x3}, @IFLA_PORT_VF={0x8, 0x1, 0x6}]}, {0x88, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x9, 0x2, ':]}#\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x7}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x9}, @IFLA_PORT_VF={0x8, 0x1, 0x4}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "8d1f901e66b5dfa6179747c6421594d7"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "410c954be3bc49c13f4d176d9e18cd32"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x6}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "549cd878addb1d97b4782edc951da6cc"}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "3fa4a660e078a4a8dfebfab827fc3845"}]}]}]}, 0x144}}, 0x4040800) (rerun: 64) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff2, 0x1, 0x0}, &(0x7f00000002c0)=0x40) 90.586013ms ago: executing program 0 (id=1436): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x68002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00'}) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0}, &(0x7f00000000c0)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@getchain={0x4c, 0x66, 0x8, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x10, 0xfff9}, {0xb}, {0xf, 0xa}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x3ff}, {0x8, 0xb, 0x81}, {0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) 0s ago: executing program 2 (id=1437): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x11, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$pppoe(0x18, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x15) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$kcm(0x10, 0x2, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@getqdisc={0x4c, 0x26, 0x20, 0x72bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0xffe0, 0xe}, {0x6, 0xa}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280050016000300000008000400000000004ed54082be2feac88a2b33c4da41359919362d30fd8424931c9e8433ae669ceeaa6e352963d2c87ae8320336312911c48260779b9407b9b8ac92e1f05f33c26382ce572f127af07f0b701b731d2355356a1d2e790ce4cabc603bc8dccea4ae2e6d3d21f61fe3889c450c125e1cc00db112a9a29031a1ecf2b0b048d2e348db01f40e6e6d57fb1d68a9d5e823fcdb050000002fd5"], 0x44}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) kernel console output (not intermixed with test programs): d_slave_0): Releasing backup interface [ 120.169624][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.181751][ T1145] bond0 (unregistering): Released all slaves [ 120.347102][ T6853] netlink: 12 bytes leftover after parsing attributes in process `syz.4.224'. [ 120.528806][ T6862] netlink: 68 bytes leftover after parsing attributes in process `syz.1.226'. [ 120.665204][ T51] Bluetooth: hci2: command tx timeout [ 121.060270][ T6801] chnl_net:caif_netlink_parms(): no params data found [ 121.144868][ T1145] hsr_slave_0: left promiscuous mode [ 121.173321][ T1145] hsr_slave_1: left promiscuous mode [ 121.195747][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.215662][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.234456][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.255105][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.286208][ T1145] veth1_macvtap: left promiscuous mode [ 121.291905][ T1145] veth0_macvtap: left promiscuous mode [ 121.300882][ T1145] veth1_vlan: left promiscuous mode [ 121.312597][ T1145] veth0_vlan: left promiscuous mode [ 122.175334][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 122.215172][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 122.745144][ T51] Bluetooth: hci2: command tx timeout [ 122.905674][ T6944] netlink: 24 bytes leftover after parsing attributes in process `syz.1.240'. [ 122.951203][ T6950] netlink: 48 bytes leftover after parsing attributes in process `syz.0.239'. [ 123.170634][ T6801] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.193328][ T6956] netlink: 12 bytes leftover after parsing attributes in process `syz.4.242'. [ 123.225183][ T6801] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.232515][ T6801] bridge_slave_0: entered allmulticast mode [ 123.278588][ T6801] bridge_slave_0: entered promiscuous mode [ 123.299777][ T6960] netlink: 'syz.2.243': attribute type 33 has an invalid length. [ 123.324131][ T6801] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.375142][ T6801] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.399957][ T6801] bridge_slave_1: entered allmulticast mode [ 123.435676][ T6801] bridge_slave_1: entered promiscuous mode [ 123.729170][ T6973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.247'. [ 123.738813][ T6801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.781000][ T6801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.787214][ T6982] netlink: 'syz.1.247': attribute type 2 has an invalid length. [ 123.803233][ T6983] netlink: 'syz.0.249': attribute type 1 has an invalid length. [ 124.048688][ T6996] netlink: 'syz.2.252': attribute type 4 has an invalid length. [ 124.081515][ T6983] bond2: entered promiscuous mode [ 124.093043][ T6983] 8021q: adding VLAN 0 to HW filter on device bond2 [ 124.121619][ T6801] team0: Port device team_slave_0 added [ 124.159628][ T6801] team0: Port device team_slave_1 added [ 124.473326][ T6801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.488597][ T7016] netlink: 'syz.2.256': attribute type 13 has an invalid length. [ 124.511904][ T6801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.620464][ T6801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.798482][ T6801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.820839][ T7032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.257'. [ 124.841141][ T51] Bluetooth: hci2: command tx timeout [ 124.846759][ T6801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.881948][ T6801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.890702][ T7032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.257'. [ 124.918367][ T7032] netlink: 'syz.0.257': attribute type 14 has an invalid length. [ 125.061407][ T6801] hsr_slave_0: entered promiscuous mode [ 125.074069][ T6801] hsr_slave_1: entered promiscuous mode [ 125.083920][ T6801] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.104194][ T6801] Cannot create hsr debugfs directory [ 125.528129][ T7057] wg2: entered promiscuous mode [ 125.534094][ T7057] wg2: entered allmulticast mode [ 125.624132][ T7062] netlink: 12 bytes leftover after parsing attributes in process `syz.0.264'. [ 125.882910][ T7070] netlink: 668 bytes leftover after parsing attributes in process `syz.0.266'. [ 125.905813][ T7070] netlink: 668 bytes leftover after parsing attributes in process `syz.0.266'. [ 125.991920][ T7074] IPv6: Can't replace route, no match found [ 126.191526][ T7080] Cannot find del_set index 4 as target [ 126.312541][ T7087] IPVS: length: 227 != 24 [ 126.353172][ T7088] netlink: 24 bytes leftover after parsing attributes in process `syz.2.271'. [ 126.612712][ T7097] netlink: 28 bytes leftover after parsing attributes in process `syz.2.274'. [ 126.615848][ T7095] netlink: 'syz.4.273': attribute type 28 has an invalid length. [ 126.689743][ T7095] netlink: 'syz.4.273': attribute type 3 has an invalid length. [ 126.730161][ T7095] netlink: 132 bytes leftover after parsing attributes in process `syz.4.273'. [ 126.907384][ T51] Bluetooth: hci2: command tx timeout [ 127.124335][ T7117] Cannot find add_set index 2 as target [ 127.144848][ T7117] netlink: zone id is out of range [ 127.224221][ T7117] netlink: zone id is out of range [ 127.270736][ T7120] netlink: 96 bytes leftover after parsing attributes in process `syz.2.277'. [ 127.300960][ T7117] netlink: zone id is out of range [ 127.857596][ T7135] netlink: 480 bytes leftover after parsing attributes in process `syz.1.281'. [ 127.887268][ T6801] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 127.934203][ T6801] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 128.011439][ T6801] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 128.089152][ T6801] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 128.188388][ T7141] syzkaller1: entered promiscuous mode [ 128.205515][ T7141] syzkaller1: entered allmulticast mode [ 128.582393][ T6801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.689696][ T6801] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.746631][ T4474] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.753878][ T4474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.849510][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.856766][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.028743][ T6801] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 129.944232][ T6801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.042744][ T7222] __nla_validate_parse: 4 callbacks suppressed [ 130.042763][ T7222] netlink: 12 bytes leftover after parsing attributes in process `syz.1.303'. [ 130.088130][ T6801] veth0_vlan: entered promiscuous mode [ 130.113759][ T7230] netlink: 12 bytes leftover after parsing attributes in process `syz.1.303'. [ 130.148336][ T6801] veth1_vlan: entered promiscuous mode [ 130.360575][ T6801] veth0_macvtap: entered promiscuous mode [ 130.419820][ T6801] veth1_macvtap: entered promiscuous mode [ 130.512149][ T6801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.568997][ T6801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.613700][ T6801] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.634834][ T6801] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.661987][ T6801] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.681769][ T6801] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.698146][ T7240] netlink: 4 bytes leftover after parsing attributes in process `syz.4.305'. [ 130.782138][ T7248] netlink: 56 bytes leftover after parsing attributes in process `syz.1.308'. [ 131.069257][ T7260] netlink: 48 bytes leftover after parsing attributes in process `syz.4.311'. [ 131.116926][ T7258] vlan2: entered promiscuous mode [ 131.142938][ T7258] bridge0: entered promiscuous mode [ 131.189494][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.245107][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.372660][ T7266] netlink: 165 bytes leftover after parsing attributes in process `syz.0.313'. [ 131.410062][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.415042][ T7268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.314'. [ 131.430116][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.444036][ T7268] netlink: 244 bytes leftover after parsing attributes in process `syz.1.314'. [ 131.474573][ T7269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.314'. [ 131.508629][ T7269] netlink: 244 bytes leftover after parsing attributes in process `syz.1.314'. [ 132.074206][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.317784][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.519718][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.700359][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.914409][ T7311] IPVS: Error joining to the multicast group [ 132.925712][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.011970][ T7313] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 133.096310][ T7317] IPVS: length: 241 != 8 [ 133.304802][ T7325] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}z [ 133.853691][ T49] bridge_slave_1: left allmulticast mode [ 133.900225][ T49] bridge_slave_1: left promiscuous mode [ 133.938030][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.974106][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 133.983107][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 133.996073][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 134.005400][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 134.010295][ T7328] syz.1.329 (7328) used greatest stack depth: 17080 bytes left [ 134.032749][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 134.090686][ T49] bridge_slave_0: left allmulticast mode [ 134.096577][ T49] bridge_slave_0: left promiscuous mode [ 134.102513][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.411870][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.433243][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.450659][ T49] bond0 (unregistering): Released all slaves [ 135.534377][ T7362] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 135.583954][ T7335] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 135.646755][ T7387] vlan0: entered promiscuous mode [ 135.706237][ T5841] Bluetooth: hci4: command 0x0401 tx timeout [ 135.759658][ T7387] team0: Port device vlan0 added [ 136.001909][ T7392] bridge_slave_0: left allmulticast mode [ 136.030671][ T7392] bridge_slave_0: left promiscuous mode [ 136.055336][ T7392] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.097953][ T7392] bridge_slave_1: left allmulticast mode [ 136.108663][ T5841] Bluetooth: hci2: command tx timeout [ 136.125763][ T7392] bridge_slave_1: left promiscuous mode [ 136.131762][ T7392] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.257565][ T7392] bond0: (slave bond_slave_0): Releasing backup interface [ 136.313496][ T7392] bond0: (slave bond_slave_1): Releasing backup interface [ 136.413137][ T7392] team0: Port device team_slave_0 removed [ 136.446701][ T7392] team0: Port device team_slave_1 removed [ 136.453684][ T7392] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.478462][ T7392] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.492147][ T7392] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.493860][ T7421] __nla_validate_parse: 3 callbacks suppressed [ 136.493881][ T7421] netlink: 260 bytes leftover after parsing attributes in process `syz.4.345'. [ 136.500311][ T7392] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.577550][ T7425] netlink: 'syz.1.346': attribute type 1 has an invalid length. [ 136.593183][ T7425] netlink: 224 bytes leftover after parsing attributes in process `syz.1.346'. [ 136.617179][ T7401] bridge0: port 1(vlan2) entered blocking state [ 136.625636][ T7401] bridge0: port 1(vlan2) entered disabled state [ 136.646835][ T7425] workqueue: Failed to create a rescuer kthread for wq "phy2-mac-cmds": -EINTR [ 136.674367][ T7401] vlan2: entered allmulticast mode [ 136.698728][ T7401] bond0: entered allmulticast mode [ 136.724394][ T7409] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 136.738779][ T7409] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 136.758130][ T7409] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 137.138438][ T7453] netlink: 'syz.2.352': attribute type 5 has an invalid length. [ 137.156477][ T7455] netlink: zone id is out of range [ 137.190063][ T7449] netlink: 'syz.1.351': attribute type 1 has an invalid length. [ 137.211049][ T7453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.352'. [ 137.239674][ T7453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.352'. [ 137.260490][ T7453] netlink: 36 bytes leftover after parsing attributes in process `syz.2.352'. [ 137.396969][ T7462] netlink: 'syz.2.355': attribute type 10 has an invalid length. [ 137.398673][ T7449] netlink: 36 bytes leftover after parsing attributes in process `syz.1.351'. [ 137.420025][ T7449] netlink: 16 bytes leftover after parsing attributes in process `syz.1.351'. [ 137.429394][ T7449] netlink: 36 bytes leftover after parsing attributes in process `syz.1.351'. [ 137.439376][ T7449] netlink: 36 bytes leftover after parsing attributes in process `syz.1.351'. [ 137.454489][ T7462] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 137.470639][ T7462] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 137.481004][ T7462] netlink: 'syz.2.355': attribute type 10 has an invalid length. [ 137.494231][ T7454] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 137.518107][ T49] hsr_slave_0: left promiscuous mode [ 137.524808][ T49] hsr_slave_1: left promiscuous mode [ 137.537403][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.548810][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.562958][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.582395][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.656709][ T49] veth1_macvtap: left promiscuous mode [ 137.671862][ T49] veth0_macvtap: left promiscuous mode [ 137.680958][ T49] veth1_vlan: left promiscuous mode [ 137.702107][ T49] veth0_vlan: left promiscuous mode [ 137.860155][ T7477] xt_l2tp: missing protocol rule (udp|l2tpip) [ 138.011204][ T7480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.358'. [ 138.195870][ T5841] Bluetooth: hci2: command tx timeout [ 138.612976][ T49] team0 (unregistering): Port device team_slave_1 removed [ 138.655490][ T49] team0 (unregistering): Port device team_slave_0 removed [ 139.731211][ T7521] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20002 [ 139.733609][ T7348] chnl_net:caif_netlink_parms(): no params data found [ 140.265175][ T5841] Bluetooth: hci2: command tx timeout [ 140.391134][ T7348] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.435216][ T7348] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.463231][ T7348] bridge_slave_0: entered allmulticast mode [ 140.504100][ T7348] bridge_slave_0: entered promiscuous mode [ 140.568174][ T7348] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.593325][ T7348] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.623080][ T7348] bridge_slave_1: entered allmulticast mode [ 140.657362][ T7348] bridge_slave_1: entered promiscuous mode [ 140.667428][ T7568] netlink: 'syz.0.374': attribute type 18 has an invalid length. [ 140.968074][ T7348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.010973][ T7348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.422090][ T7603] netlink: 'syz.1.383': attribute type 10 has an invalid length. [ 141.435588][ T7348] team0: Port device team_slave_0 added [ 141.456967][ T7603] dummy0: entered promiscuous mode [ 141.485822][ T7603] bridge0: port 3(dummy0) entered blocking state [ 141.493121][ T7603] bridge0: port 3(dummy0) entered disabled state [ 141.514069][ T7603] dummy0: entered allmulticast mode [ 141.554035][ T7603] bridge0: port 3(dummy0) entered blocking state [ 141.560763][ T7603] bridge0: port 3(dummy0) entered forwarding state [ 141.599733][ T7601] __nla_validate_parse: 5 callbacks suppressed [ 141.599769][ T7601] netlink: 24 bytes leftover after parsing attributes in process `syz.4.382'. [ 141.745779][ T7620] netlink: 12 bytes leftover after parsing attributes in process `syz.4.382'. [ 141.770674][ T7348] team0: Port device team_slave_1 added [ 141.783008][ T7620] netlink: 20 bytes leftover after parsing attributes in process `syz.4.382'. [ 141.837477][ T7629] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 141.932005][ T7348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.963746][ T7348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.009968][ T7348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.051457][ T7348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.086506][ T7348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.212099][ T7348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.345239][ T5841] Bluetooth: hci2: command tx timeout [ 142.532481][ T7657] netlink: 112 bytes leftover after parsing attributes in process `syz.0.392'. [ 142.570862][ T7661] netlink: 88 bytes leftover after parsing attributes in process `syz.1.395'. [ 142.628945][ T7661] netlink: 24 bytes leftover after parsing attributes in process `syz.1.395'. [ 142.659798][ T7348] hsr_slave_0: entered promiscuous mode [ 142.666148][ T7643] netlink: 224 bytes leftover after parsing attributes in process `syz.0.392'. [ 142.700748][ T7348] hsr_slave_1: entered promiscuous mode [ 142.721861][ T7348] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 142.749048][ T7348] Cannot create hsr debugfs directory [ 142.967739][ T7674] netlink: 'syz.1.397': attribute type 1 has an invalid length. [ 143.000914][ T7676] ip6t_srh: unknown srh match flags 4001 [ 143.009074][ T7674] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.397'. [ 143.363552][ T7691] netlink: 28 bytes leftover after parsing attributes in process `syz.2.400'. [ 143.461869][ T7690] netlink: 666 bytes leftover after parsing attributes in process `syz.2.400'. [ 144.013196][ T7708] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 144.300140][ T5944] IPVS: starting estimator thread 0... [ 144.416839][ T7723] IPVS: using max 25 ests per chain, 60000 per kthread [ 144.795954][ T7741] Driver unsupported XDP return value 0 on prog (id 84) dev N/A, expect packet loss! [ 145.079607][ T7749] tipc: Started in network mode [ 145.084551][ T7749] tipc: Node identity 7f000001, cluster identity 4711 [ 145.107185][ T7749] tipc: Enabling of bearer rejected, failed to enable media [ 145.146411][ T7754] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 145.627811][ T7766] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 145.629654][ T7348] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 145.693444][ T7348] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 145.739504][ T7348] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 145.799316][ T7348] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 146.121883][ T7801] net veth1_virt_wifi .: renamed from virt_wifi0 [ 146.270117][ T7804] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.380598][ T7804] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.489431][ T7804] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.559772][ T7348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.617158][ T7804] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.673809][ T7348] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.695151][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.702448][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.733714][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.741001][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.886615][ T7804] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.942230][ T7804] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.013473][ T7804] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.149372][ T7804] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.280283][ T7847] __nla_validate_parse: 8 callbacks suppressed [ 147.280308][ T7847] netlink: 24 bytes leftover after parsing attributes in process `syz.1.437'. [ 147.519081][ T7859] xt_l2tp: v2 doesn't support IP mode [ 147.705277][ T5841] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 147.715618][ T7808] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 147.974594][ T7348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.188008][ T7348] veth0_vlan: entered promiscuous mode [ 148.220120][ T7348] veth1_vlan: entered promiscuous mode [ 148.422769][ T7348] veth0_macvtap: entered promiscuous mode [ 148.492478][ T7348] veth1_macvtap: entered promiscuous mode [ 148.829729][ T7348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.900659][ T7348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.987851][ T7918] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.144549][ T7348] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.172108][ T7348] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.200385][ T7348] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.233349][ T7348] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.638618][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.667546][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.803227][ T7945] netlink: 20 bytes leftover after parsing attributes in process `syz.4.456'. [ 149.867433][ T7235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.900568][ T7235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.970141][ T7953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.457'. [ 150.979392][ T7235] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.061372][ T7982] netlink: 'syz.1.465': attribute type 1 has an invalid length. [ 151.075404][ T7985] netlink: 'syz.1.465': attribute type 1 has an invalid length. [ 151.169009][ T7983] veth5: entered promiscuous mode [ 151.175244][ T7983] veth5: entered allmulticast mode [ 151.257242][ T7235] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.394715][ T7235] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.496272][ T7235] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.736986][ T7235] bridge_slave_1: left allmulticast mode [ 151.742991][ T7235] bridge_slave_1: left promiscuous mode [ 151.751201][ T7235] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.764594][ T7235] bridge_slave_0: left allmulticast mode [ 151.780168][ T7235] bridge_slave_0: left promiscuous mode [ 151.825475][ T7235] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.874532][ T8005] netlink: 4 bytes leftover after parsing attributes in process `syz.0.466'. [ 152.519086][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 152.530981][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 152.544212][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 152.573349][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 152.596964][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 152.793347][ T7235] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.822580][ T7235] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.842932][ T7235] bond0 (unregistering): Released all slaves [ 153.126642][ T8041] netlink: 'syz.4.472': attribute type 21 has an invalid length. [ 153.450487][ T8041] netlink: 4 bytes leftover after parsing attributes in process `syz.4.472'. [ 153.495550][ T8054] netlink: 'syz.1.475': attribute type 12 has an invalid length. [ 153.583958][ T8044] netlink: 28 bytes leftover after parsing attributes in process `syz.4.472'. [ 153.645221][ T8041] x_tables: unsorted entry at hook 2 [ 154.136907][ T7235] hsr_slave_0: left promiscuous mode [ 154.165202][ T7235] hsr_slave_1: left promiscuous mode [ 154.181924][ T7235] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.184301][ T8082] netlink: 165 bytes leftover after parsing attributes in process `syz.0.480'. [ 154.219274][ T7235] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.269172][ T7235] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.296321][ T7235] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.345443][ T8089] openvswitch: netlink: IP tunnel dst address not specified [ 154.360853][ T7235] veth1_macvtap: left promiscuous mode [ 154.377596][ T7235] veth0_macvtap: left promiscuous mode [ 154.384220][ T7235] veth1_vlan: left promiscuous mode [ 154.434152][ T7235] veth0_vlan: left promiscuous mode [ 154.666895][ T51] Bluetooth: hci2: command tx timeout [ 155.332736][ T7235] team0 (unregistering): Port device team_slave_1 removed [ 155.414651][ T7235] team0 (unregistering): Port device team_slave_0 removed [ 156.279788][ T8076] vlan0: entered promiscuous mode [ 156.323297][ T8076] team0: Port device vlan0 added [ 156.351191][ T8094] netlink: 666 bytes leftover after parsing attributes in process `syz.4.483'. [ 156.652584][ T8136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.485'. [ 156.721597][ T8138] netlink: 'syz.2.486': attribute type 8 has an invalid length. [ 156.745917][ T51] Bluetooth: hci2: command tx timeout [ 156.791115][ T8144] netlink: 12 bytes leftover after parsing attributes in process `syz.0.485'. [ 157.263013][ T8026] chnl_net:caif_netlink_parms(): no params data found [ 157.288633][ T8164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.490'. [ 157.341527][ T8164] netlink: 12 bytes leftover after parsing attributes in process `syz.2.490'. [ 157.724243][ T8026] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.735335][ T8026] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.744123][ T8026] bridge_slave_0: entered allmulticast mode [ 157.759354][ T8026] bridge_slave_0: entered promiscuous mode [ 157.970884][ T8026] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.986987][ T8187] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 158.019595][ T8026] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.071425][ T8026] bridge_slave_1: entered allmulticast mode [ 158.159901][ T8026] bridge_slave_1: entered promiscuous mode [ 158.250949][ T8197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.498'. [ 158.285309][ T8200] netlink: 4 bytes leftover after parsing attributes in process `syz.1.498'. [ 158.619617][ T8026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.669395][ T8026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.828578][ T51] Bluetooth: hci2: command tx timeout [ 159.177127][ T8026] team0: Port device team_slave_0 added [ 159.194602][ T8026] team0: Port device team_slave_1 added [ 159.475729][ T8026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.482857][ T8026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.592125][ T8026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.632402][ T8246] syz_tun: entered allmulticast mode [ 159.703960][ T8026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.724446][ T8263] netlink: 'syz.0.511': attribute type 10 has an invalid length. [ 159.739825][ T8026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.778663][ T8026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.821431][ T8240] syz_tun: left allmulticast mode [ 159.830778][ T8261] veth0: entered promiscuous mode [ 159.838337][ T8263] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.847477][ T8263] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.877006][ T8261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.512'. [ 159.890553][ T8263] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.898690][ T8263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.906583][ T8263] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.914711][ T8263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.007237][ T8263] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 160.043330][ T8260] veth0: left promiscuous mode [ 160.069949][ T8270] netlink: 20 bytes leftover after parsing attributes in process `syz.2.513'. [ 160.319344][ T8282] netlink: set zone limit has 8 unknown bytes [ 160.365314][ T8285] netlink: 260 bytes leftover after parsing attributes in process `syz.0.515'. [ 160.579102][ T8278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.515'. [ 160.700854][ T8026] hsr_slave_0: entered promiscuous mode [ 160.709832][ T8026] hsr_slave_1: entered promiscuous mode [ 160.718770][ T8026] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 160.731392][ T8026] Cannot create hsr debugfs directory [ 160.905080][ T51] Bluetooth: hci2: command tx timeout [ 161.310067][ T51] block nbd0: Receive control failed (result -32) [ 161.554744][ T8321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.524'. [ 161.590206][ T8321] netlink: 12 bytes leftover after parsing attributes in process `syz.2.524'. [ 161.700465][ T8316] delete_channel: no stack [ 161.864269][ T8335] netlink: 76 bytes leftover after parsing attributes in process `syz.0.528'. [ 161.912792][ T8335] netlink: 76 bytes leftover after parsing attributes in process `syz.0.528'. [ 161.999725][ T8338] netlink: 52 bytes leftover after parsing attributes in process `syz.1.529'. [ 162.007711][ T8342] netlink: 16 bytes leftover after parsing attributes in process `syz.4.530'. [ 162.575942][ T8362] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 162.873053][ T8368] delete_channel: no stack [ 162.874116][ T8026] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 162.959175][ T8026] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 162.995036][ T51] Bluetooth: hci2: command tx timeout [ 163.003463][ T8026] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 163.058806][ T8026] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 163.094902][ T8367] delete_channel: no stack [ 163.291851][ T8386] netlink: 'syz.4.538': attribute type 1 has an invalid length. [ 163.723809][ T8026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.963062][ T8026] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.054103][ T8406] vlan2: entered promiscuous mode [ 164.098271][ T8406] bridge0: entered promiscuous mode [ 164.116932][ T8406] vlan2: entered allmulticast mode [ 164.138485][ T8406] bridge0: entered allmulticast mode [ 164.288250][ T7235] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.297407][ T7235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.469201][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.478585][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.894283][ T8440] __nla_validate_parse: 8 callbacks suppressed [ 164.894304][ T8440] netlink: 60 bytes leftover after parsing attributes in process `syz.1.551'. [ 165.155378][ T8447] netlink: 'syz.2.549': attribute type 39 has an invalid length. [ 165.476047][ T8456] netlink: 36 bytes leftover after parsing attributes in process `syz.1.553'. [ 165.504070][ T8457] netlink: 'syz.4.552': attribute type 32 has an invalid length. [ 165.556795][ T8457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.552'. [ 165.615511][ T8457] (unnamed net_device) (uninitialized): option coupled_control: invalid value (16) [ 165.975835][ T8026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.039096][ T8477] nbd: couldn't find a device at index 27392 [ 166.448746][ T8487] bridge1: entered promiscuous mode [ 166.466728][ T8487] bridge1: entered allmulticast mode [ 166.568091][ T8487] tipc: Started in network mode [ 166.574636][ T8487] tipc: Node identity 96673db7d94a, cluster identity 4711 [ 166.636059][ T8487] tipc: Enabled bearer , priority 0 [ 166.666338][ T8490] tipc: Enabling of bearer rejected, already enabled [ 166.696507][ T8026] veth0_vlan: entered promiscuous mode [ 166.743073][ T8026] veth1_vlan: entered promiscuous mode [ 166.752332][ T8500] xt_hashlimit: size too large, truncated to 1048576 [ 166.907180][ T8508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.562'. [ 166.968826][ T8487] tipc: Disabling bearer [ 167.032143][ T8514] netlink: 12 bytes leftover after parsing attributes in process `syz.0.562'. [ 167.177608][ T8514] 8021q: adding VLAN 0 to HW filter on device bond3 [ 167.354365][ T8026] veth0_macvtap: entered promiscuous mode [ 167.448800][ T8026] veth1_macvtap: entered promiscuous mode [ 167.464177][ T8523] netlink: 20 bytes leftover after parsing attributes in process `syz.2.567'. [ 167.645954][ T8529] syz.1.568 uses old SIOCAX25GETINFO [ 168.063143][ T8026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.317901][ T8546] pimreg: entered allmulticast mode [ 168.330828][ T8546] netlink: 44 bytes leftover after parsing attributes in process `syz.1.572'. [ 168.367695][ T8026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.399275][ T8546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.572'. [ 168.413739][ T8026] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.455362][ T8026] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.455567][ T8550] netlink: 12 bytes leftover after parsing attributes in process `syz.1.572'. [ 168.490324][ T8026] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.515094][ T8026] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.696052][ T8562] netlink: 72 bytes leftover after parsing attributes in process `syz.0.574'. [ 168.819793][ T8546] bridge2: entered promiscuous mode [ 168.845557][ T8546] bridge2: entered allmulticast mode [ 169.115853][ T8575] xt_CT: You must specify a L4 protocol and not use inversions on it [ 169.147897][ T8581] xt_policy: too many policy elements [ 169.379908][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.441684][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.658359][ T8601] pimreg: entered allmulticast mode [ 169.834455][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.876014][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.974208][ T8617] __nla_validate_parse: 3 callbacks suppressed [ 169.974230][ T8617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.586'. [ 170.150954][ T8624] delete_channel: no stack [ 170.253588][ T8619] team0: Port device vlan0 removed [ 170.433017][ T8631] netlink: 24 bytes leftover after parsing attributes in process `syz.4.590'. [ 170.499227][ T8631] vlan3: entered allmulticast mode [ 170.942752][ T8651] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.594'. [ 170.946576][ T4474] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.981190][ T8648] netlink: 32 bytes leftover after parsing attributes in process `syz.1.595'. [ 170.993155][ T8652] netlink: 32 bytes leftover after parsing attributes in process `syz.1.595'. [ 171.269410][ T4474] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.398117][ T4474] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.478555][ T4474] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.650523][ T4474] bridge_slave_1: left allmulticast mode [ 171.665904][ T4474] bridge_slave_1: left promiscuous mode [ 171.673719][ T4474] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.686476][ T4474] bridge_slave_0: left allmulticast mode [ 171.694017][ T4474] bridge_slave_0: left promiscuous mode [ 171.703567][ T4474] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.958803][ T8665] sctp: [Deprecated]: syz.1.597 (pid 8665) Use of struct sctp_assoc_value in delayed_ack socket option. [ 171.958803][ T8665] Use struct sctp_sack_info instead [ 172.262109][ T8679] netlink: 'syz.1.600': attribute type 1 has an invalid length. [ 172.577847][ T4474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.605859][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 172.622529][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 172.634371][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 172.634668][ T4474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.653373][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 172.664718][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 172.667666][ T4474] bond0 (unregistering): Released all slaves [ 173.590405][ T8709] tipc: Started in network mode [ 173.644584][ T8709] tipc: Node identity ee0631ad20a, cluster identity 4711 [ 173.666799][ T8709] tipc: Enabled bearer , priority 0 [ 173.692495][ T8704] netlink: 256 bytes leftover after parsing attributes in process `syz.0.607'. [ 173.803934][ T4474] hsr_slave_0: left promiscuous mode [ 173.844307][ T4474] hsr_slave_1: left promiscuous mode [ 173.878835][ T4474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.911601][ T4474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.925153][ T4474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.945925][ T4474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.981580][ T4474] veth1_macvtap: left promiscuous mode [ 173.996523][ T4474] veth0_macvtap: left promiscuous mode [ 174.004394][ T4474] veth1_vlan: left promiscuous mode [ 174.017479][ T4474] veth0_vlan: left promiscuous mode [ 174.755407][ T51] Bluetooth: hci2: command tx timeout [ 174.786985][ T43] tipc: Node number set to 3466998189 [ 174.905410][ T4474] team0 (unregistering): Port device team_slave_1 removed [ 174.960094][ T4474] team0 (unregistering): Port device team_slave_0 removed [ 175.652813][ T8713] syzkaller0: entered promiscuous mode [ 175.659861][ T8713] syzkaller0: entered allmulticast mode [ 175.669645][ T8713] tipc: Resetting bearer [ 175.691923][ T8698] tipc: Resetting bearer [ 175.878228][ T8754] netlink: 36 bytes leftover after parsing attributes in process `syz.4.613'. [ 176.829915][ T51] Bluetooth: hci2: command tx timeout [ 178.134866][ T8698] tipc: Disabling bearer [ 178.146374][ T8737] pim6reg1: entered promiscuous mode [ 178.154025][ T8737] pim6reg1: entered allmulticast mode [ 178.580808][ T8767] : renamed from bridge_slave_0 (while UP) [ 178.716067][ T8774] netlink: 4 bytes leftover after parsing attributes in process `syz.2.615'. [ 178.866822][ T8784] sctp: [Deprecated]: syz.0.618 (pid 8784) Use of int in maxseg socket option. [ 178.866822][ T8784] Use struct sctp_assoc_value instead [ 178.922173][ T51] Bluetooth: hci2: command tx timeout [ 179.067059][ T8788] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 179.286389][ T8684] chnl_net:caif_netlink_parms(): no params data found [ 179.410660][ T8800] netlink: 'syz.0.622': attribute type 21 has an invalid length. [ 179.429556][ T8800] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 179.513792][ T8807] netlink: 'syz.4.623': attribute type 1 has an invalid length. [ 179.595723][ T8807] netlink: 12 bytes leftover after parsing attributes in process `syz.4.623'. [ 179.911461][ T8821] netlink: 'syz.1.625': attribute type 64 has an invalid length. [ 179.916510][ T8826] netlink: 13370 bytes leftover after parsing attributes in process `syz.4.623'. [ 179.941224][ T8821] netlink: 20 bytes leftover after parsing attributes in process `syz.1.625'. [ 179.968657][ T8826] netlink: 13370 bytes leftover after parsing attributes in process `syz.4.623'. [ 180.785472][ T8684] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.819171][ T8684] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.866805][ T8684] bridge_slave_0: entered allmulticast mode [ 180.874633][ T8854] x_tables: duplicate underflow at hook 2 [ 180.918750][ T8684] bridge_slave_0: entered promiscuous mode [ 180.991896][ T51] Bluetooth: hci2: command tx timeout [ 181.064288][ T8684] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.080390][ T8863] netlink: 'syz.2.632': attribute type 21 has an invalid length. [ 181.097704][ T8863] netlink: 128 bytes leftover after parsing attributes in process `syz.2.632'. [ 181.110497][ T8684] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.120151][ T8684] bridge_slave_1: entered allmulticast mode [ 181.130464][ T8684] bridge_slave_1: entered promiscuous mode [ 181.139477][ T8864] netlink: 'syz.2.632': attribute type 21 has an invalid length. [ 181.244077][ T8864] netlink: 128 bytes leftover after parsing attributes in process `syz.2.632'. [ 181.397110][ T8863] netlink: 'syz.2.632': attribute type 4 has an invalid length. [ 181.412977][ T8863] netlink: 'syz.2.632': attribute type 5 has an invalid length. [ 181.423727][ T8863] netlink: 3 bytes leftover after parsing attributes in process `syz.2.632'. [ 181.438912][ T8864] netlink: 'syz.2.632': attribute type 4 has an invalid length. [ 181.449909][ T8864] netlink: 'syz.2.632': attribute type 5 has an invalid length. [ 181.460148][ T8864] netlink: 3 bytes leftover after parsing attributes in process `syz.2.632'. [ 181.509853][ T8684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.590316][ T8684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.693204][ T8875] netlink: 'syz.4.635': attribute type 1 has an invalid length. [ 181.775628][ T8888] netlink: 76 bytes leftover after parsing attributes in process `syz.4.635'. [ 181.807786][ T8684] team0: Port device team_slave_0 added [ 181.829866][ T8875] netlink: 28 bytes leftover after parsing attributes in process `syz.4.635'. [ 181.920702][ T8684] team0: Port device team_slave_1 added [ 182.023821][ T8894] sit0: entered promiscuous mode [ 182.065319][ T8894] netlink: 1 bytes leftover after parsing attributes in process `syz.0.640'. [ 182.113918][ T8894] netlink: 20 bytes leftover after parsing attributes in process `syz.0.640'. [ 182.170116][ T8684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.185279][ T8684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.222539][ T8684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.256399][ T8895] xt_hashlimit: size too large, truncated to 1048576 [ 182.442692][ T8898] bond1: entered promiscuous mode [ 182.458438][ T8898] bond1: entered allmulticast mode [ 182.465835][ T8898] 8021q: adding VLAN 0 to HW filter on device bond1 [ 182.533629][ T8684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.575123][ T8684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.685780][ T8684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.942133][ T8684] hsr_slave_0: entered promiscuous mode [ 182.979311][ T8684] hsr_slave_1: entered promiscuous mode [ 182.980584][ T8917] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 183.000367][ T8684] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 183.067246][ T51] Bluetooth: hci2: command tx timeout [ 183.089626][ T8684] Cannot create hsr debugfs directory [ 183.099890][ T8914] batadv0: entered promiscuous mode [ 183.179912][ T8914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.643'. [ 183.832411][ T8913] batadv0: left promiscuous mode [ 184.297128][ T8959] netlink: 40 bytes leftover after parsing attributes in process `syz.0.653'. [ 185.000271][ T8975] vlan3: entered promiscuous mode [ 185.024261][ T8975] vlan3: entered allmulticast mode [ 185.035476][ T8975] bridge0: entered allmulticast mode [ 185.582606][ T9001] xt_hashlimit: size too large, truncated to 1048576 [ 185.626218][ T9004] xt_hashlimit: size too large, truncated to 1048576 [ 186.113948][ T9019] nbd: must specify at least one socket [ 186.300910][ T8684] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 186.398229][ T8684] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 186.461731][ T9031] openvswitch: netlink: Actions may not be safe on all matching packets [ 186.478260][ T8684] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 186.543435][ T8684] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 187.097839][ T8684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.134172][ T9054] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 187.181909][ T8684] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.274232][ T4474] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.283516][ T4474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.310562][ T9068] __nla_validate_parse: 2 callbacks suppressed [ 187.310586][ T9068] netlink: 20 bytes leftover after parsing attributes in process `syz.1.676'. [ 187.432008][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.441595][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.582627][ T9078] netlink: 16 bytes leftover after parsing attributes in process `syz.4.680'. [ 187.766698][ T9075] bond4: entered promiscuous mode [ 187.794585][ T9075] bond4: entered allmulticast mode [ 187.805940][ T9075] 8021q: adding VLAN 0 to HW filter on device bond4 [ 187.831642][ T9086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.681'. [ 188.120320][ T9093] Cannot find add_set index 0 as target [ 188.151992][ T9097] netlink: 24 bytes leftover after parsing attributes in process `syz.1.684'. [ 188.418576][ T9097] ipvlan0: entered promiscuous mode [ 188.446971][ T9097] ipvlan0: entered allmulticast mode [ 188.466062][ T9097] veth0_vlan: entered allmulticast mode [ 188.531106][ T9117] netlink: 20 bytes leftover after parsing attributes in process `syz.2.687'. [ 188.941083][ T9125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.688'. [ 189.159190][ T8684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.398874][ T8684] veth0_vlan: entered promiscuous mode [ 189.492499][ T8684] veth1_vlan: entered promiscuous mode [ 189.555362][ T9147] validate_nla: 1 callbacks suppressed [ 189.555417][ T9147] netlink: 'syz.2.692': attribute type 10 has an invalid length. [ 189.605295][ T9147] netlink: 40 bytes leftover after parsing attributes in process `syz.2.692'. [ 189.633551][ T9156] netlink: 28 bytes leftover after parsing attributes in process `syz.4.696'. [ 189.704672][ T9147] dummy0: entered promiscuous mode [ 189.741593][ T9147] bridge0: port 2(dummy0) entered blocking state [ 189.794210][ T9147] bridge0: port 2(dummy0) entered disabled state [ 189.865428][ T9147] dummy0: entered allmulticast mode [ 189.905535][ T9147] vlan2: entered promiscuous mode [ 189.912164][ T9147] bond0: entered promiscuous mode [ 189.944300][ T9147] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 189.958370][ T9168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.698'. [ 189.972425][ T9147] bridge0: port 2(dummy0) entered blocking state [ 189.980001][ T9147] bridge0: port 2(dummy0) entered forwarding state [ 190.010833][ T9170] netlink: 12 bytes leftover after parsing attributes in process `syz.1.698'. [ 190.030151][ T8684] veth0_macvtap: entered promiscuous mode [ 190.337726][ T8684] veth1_macvtap: entered promiscuous mode [ 190.490109][ T8684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.571651][ T8684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.690185][ T8684] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.759288][ T8684] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.778754][ T8684] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.803773][ T8684] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.078291][ T9201] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 191.569174][ T7235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.600736][ T7235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.765824][ T7235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.784378][ T9224] netlink: 'syz.1.709': attribute type 1 has an invalid length. [ 191.823799][ T7235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.949174][ T9234] sch_fq: defrate 0 ignored. [ 192.193506][ T9244] netlink: 'syz.2.713': attribute type 28 has an invalid length. [ 192.255282][ T9244] netlink: 'syz.2.713': attribute type 3 has an invalid length. [ 192.739329][ T9259] __nla_validate_parse: 5 callbacks suppressed [ 192.739354][ T9259] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.715'. [ 192.837536][ T59] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.070264][ T59] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.252949][ T59] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.366246][ T59] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.555834][ T59] bridge_slave_1: left allmulticast mode [ 193.565840][ T59] bridge_slave_1: left promiscuous mode [ 193.574276][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.587987][ T59] bridge_slave_0: left allmulticast mode [ 193.594409][ T59] bridge_slave_0: left promiscuous mode [ 193.607079][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.076201][ T9289] netlink: 44 bytes leftover after parsing attributes in process `syz.1.719'. [ 194.235382][ T9296] netlink: 16 bytes leftover after parsing attributes in process `syz.4.722'. [ 194.275412][ T9296] netlink: 16 bytes leftover after parsing attributes in process `syz.4.722'. [ 194.363523][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.566153][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.602813][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.627574][ T59] bond0 (unregistering): Released all slaves [ 194.832110][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 194.850610][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 194.865393][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 194.906436][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 194.929526][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 195.329821][ T9324] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 195.359870][ T9323] netlink: 'syz.1.730': attribute type 32 has an invalid length. [ 195.383295][ T9325] netlink: 'syz.2.728': attribute type 3 has an invalid length. [ 195.442993][ T9323] netlink: 'syz.1.730': attribute type 32 has an invalid length. [ 195.570691][ T9325] netlink: 28 bytes leftover after parsing attributes in process `syz.2.728'. [ 195.635210][ T9325] netlink: 28 bytes leftover after parsing attributes in process `syz.2.728'. [ 196.091444][ T9355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.736'. [ 196.147535][ T9355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.736'. [ 196.243780][ T59] hsr_slave_0: left promiscuous mode [ 196.274146][ T59] hsr_slave_1: left promiscuous mode [ 196.283243][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.305182][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.358367][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.368045][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.435759][ T59] veth1_macvtap: left promiscuous mode [ 196.452622][ T59] veth0_macvtap: left promiscuous mode [ 196.462879][ T59] veth1_vlan: left promiscuous mode [ 196.480165][ T59] veth0_vlan: left promiscuous mode [ 197.065628][ T51] Bluetooth: hci2: command tx timeout [ 197.630853][ T59] team0 (unregistering): Port device team_slave_1 removed [ 197.709552][ T59] team0 (unregistering): Port device team_slave_0 removed [ 198.361093][ T9422] netlink: 12 bytes leftover after parsing attributes in process `syz.2.745'. [ 199.027790][ T9430] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 199.059519][ T9430] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 199.095670][ T9437] netlink: 'syz.4.747': attribute type 4 has an invalid length. [ 199.126424][ T9439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.748'. [ 199.145968][ T51] Bluetooth: hci2: command tx timeout [ 199.239100][ T9305] chnl_net:caif_netlink_parms(): no params data found [ 199.530266][ T9448] netlink: 'syz.2.751': attribute type 8 has an invalid length. [ 199.551702][ T9448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.751'. [ 200.025904][ T9474] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 200.204112][ T9305] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.263004][ T9305] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.311944][ T9305] bridge_slave_0: entered allmulticast mode [ 200.333908][ T9484] netlink: 28 bytes leftover after parsing attributes in process `syz.4.757'. [ 200.356817][ T9305] bridge_slave_0: entered promiscuous mode [ 200.415395][ T9490] x_tables: duplicate entry at hook 3 [ 200.547417][ T9305] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.600545][ T9305] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.635453][ T9305] bridge_slave_1: entered allmulticast mode [ 200.677832][ T9305] bridge_slave_1: entered promiscuous mode [ 200.984609][ T9503] netlink: 'syz.1.763': attribute type 11 has an invalid length. [ 201.002185][ T9305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.003657][ T9503] netlink: 224 bytes leftover after parsing attributes in process `syz.1.763'. [ 201.125920][ T9305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.142191][ T9507] netlink: 232 bytes leftover after parsing attributes in process `syz.2.764'. [ 201.227000][ T51] Bluetooth: hci2: command tx timeout [ 201.616038][ T9521] delete_channel: no stack [ 201.642340][ T9518] netlink: 'syz.2.765': attribute type 7 has an invalid length. [ 202.043097][ T9535] netlink: 'syz.2.768': attribute type 13 has an invalid length. [ 202.080566][ T9535] netlink: 'syz.2.768': attribute type 17 has an invalid length. [ 203.309638][ T51] Bluetooth: hci2: command tx timeout [ 204.307598][ T9305] team0: Port device team_slave_0 added [ 204.319210][ T9305] team0: Port device team_slave_1 added [ 204.476525][ T9542] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.770'. [ 204.544208][ T9535] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 204.788335][ T9305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.810040][ T9305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.897220][ T9305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.993423][ T9305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.002328][ T9557] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 205.020943][ T9557] netlink: 28 bytes leftover after parsing attributes in process `syz.1.773'. [ 205.050523][ T9305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.174195][ T9305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.225845][ T9562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.774'. [ 205.286220][ T9562] netlink: 32 bytes leftover after parsing attributes in process `syz.0.774'. [ 205.478528][ T9305] hsr_slave_0: entered promiscuous mode [ 205.509688][ T9570] delete_channel: no stack [ 205.540984][ T9305] hsr_slave_1: entered promiscuous mode [ 205.585944][ T9305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.617066][ T9305] Cannot create hsr debugfs directory [ 205.647032][ T9576] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 206.001154][ T9592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.782'. [ 206.567493][ T9611] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 206.592216][ T5957] IPVS: starting estimator thread 0... [ 206.673010][ T9614] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.786'. [ 206.693494][ T9618] netlink: 28 bytes leftover after parsing attributes in process `syz.2.787'. [ 206.717496][ T9615] IPVS: using max 27 ests per chain, 64800 per kthread [ 206.809153][ T9621] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.788'. [ 207.502313][ T9639] netlink: 28 bytes leftover after parsing attributes in process `syz.0.794'. [ 207.863157][ T9305] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 207.969518][ T9305] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 207.999538][ T9660] netlink: 104 bytes leftover after parsing attributes in process `syz.0.799'. [ 208.049777][ T9305] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 208.112828][ T9305] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 208.516574][ T9684] netlink: 'syz.0.802': attribute type 10 has an invalid length. [ 208.616250][ T9684] dummy0: entered promiscuous mode [ 208.626105][ T9684] bridge0: port 3(dummy0) entered blocking state [ 208.685255][ T9684] bridge0: port 3(dummy0) entered disabled state [ 208.756369][ T9684] dummy0: entered allmulticast mode [ 208.807561][ T9684] bridge0: port 3(dummy0) entered blocking state [ 208.818831][ T9684] bridge0: port 3(dummy0) entered forwarding state [ 208.908533][ T9698] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 208.918156][ T9698] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 209.148795][ T9305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.273048][ T9305] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.364402][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.376833][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.763518][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.776006][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.829405][ T9727] __nla_validate_parse: 10 callbacks suppressed [ 209.829436][ T9727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.814'. [ 210.230903][ T9738] netlink: 224 bytes leftover after parsing attributes in process `syz.2.817'. [ 210.316051][ T9743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.819'. [ 210.686914][ T9755] netlink: 20 bytes leftover after parsing attributes in process `syz.1.820'. [ 211.073529][ T9305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.346952][ T9780] openvswitch: netlink: Tunnel attr 303 out of range max 16 [ 211.419127][ T9305] veth0_vlan: entered promiscuous mode [ 211.526467][ T9305] veth1_vlan: entered promiscuous mode [ 211.545634][ T9784] openvswitch: netlink: Tunnel attr 303 out of range max 16 [ 211.792751][ T5153] Bluetooth: hci1: command 0x0406 tx timeout [ 211.802573][ T5153] Bluetooth: hci3: command 0x0406 tx timeout [ 212.067384][ T9802] xt_recent: Unsupported userspace flags (00000061) [ 212.161782][ T9305] veth0_macvtap: entered promiscuous mode [ 212.252844][ T9305] veth1_macvtap: entered promiscuous mode [ 212.391842][ T9305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.524317][ T9305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.603043][ T9305] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.725216][ T9305] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.791391][ T9305] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.825182][ T9305] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.469280][ T9858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.847'. [ 213.768479][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.845102][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.907501][ T30] audit: type=1107 audit(1749312325.857:2): pid=9861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='¤â‚ÇI0ö@^(NY…À2ôø=Ôãc¦=å—_ðº6—Çc«:—?ÁTµ¨¥?Ò„Œê÷`W²·'“î”Ëâím µ›6ÞÿXÔL büL]|•­5“’ç±äåsõ$è&…Fg=dÖ*º?¦ï½lŸ2Ó€9ÊLÐO¤™»RIÕ¬®.Ÿv«_׊[—!/„' [ 214.084831][ T9878] netlink: 24 bytes leftover after parsing attributes in process `syz.4.851'. [ 214.142438][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.389296][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.433333][ T9887] netlink: 'syz.0.853': attribute type 1 has an invalid length. [ 214.480001][ T9887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.853'. [ 214.510831][ T9890] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.852'. [ 214.557483][ T9884] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.852'. [ 214.888598][ T9890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.852'. [ 214.964347][ T9898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.855'. [ 215.007637][ T9884] netlink: 28 bytes leftover after parsing attributes in process `syz.2.852'. [ 215.301417][ T9914] netlink: 44 bytes leftover after parsing attributes in process `syz.4.859'. [ 215.410291][ T9912] tipc: Trying to set illegal importance in message [ 215.420728][ T9912] tipc: Trying to set illegal importance in message [ 215.646840][ T1145] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.874154][ T1145] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.026526][ T1145] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.144145][ T1145] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.337721][ T1145] bridge_slave_1: left allmulticast mode [ 216.348407][ T1145] bridge_slave_1: left promiscuous mode [ 216.363266][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.380145][ T1145] bridge_slave_0: left allmulticast mode [ 216.390556][ T1145] bridge_slave_0: left promiscuous mode [ 216.399104][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.777983][ T9929] netlink: 28 bytes leftover after parsing attributes in process `syz.4.863'. [ 217.270448][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.290481][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.302642][ T1145] bond0 (unregistering): Released all slaves [ 217.674406][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 217.687691][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 217.701076][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 217.722660][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 217.742001][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 217.881753][ T9958] veth0: entered promiscuous mode [ 217.960477][ T9953] veth0: left promiscuous mode [ 218.508456][ T9988] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.629983][ T1145] hsr_slave_0: left promiscuous mode [ 218.669537][ T1145] hsr_slave_1: left promiscuous mode [ 218.698203][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.712051][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.748691][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.783265][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.854466][ T1145] veth1_macvtap: left promiscuous mode [ 218.872417][ T1145] veth0_macvtap: left promiscuous mode [ 218.883447][T10004] netlink: 'syz.1.880': attribute type 11 has an invalid length. [ 218.896798][ T1145] veth1_vlan: left promiscuous mode [ 218.908938][T10004] netlink: 224 bytes leftover after parsing attributes in process `syz.1.880'. [ 218.919021][ T1145] veth0_vlan: left promiscuous mode [ 219.719613][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 219.778522][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 219.795029][ T5841] Bluetooth: hci2: command tx timeout [ 220.724114][T10017] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.055844][T10026] netlink: 24 bytes leftover after parsing attributes in process `syz.0.886'. [ 221.276891][T10035] netlink: 'syz.4.889': attribute type 1 has an invalid length. [ 221.315538][ T9948] chnl_net:caif_netlink_parms(): no params data found [ 221.351750][T10035] netlink: 'syz.4.889': attribute type 2 has an invalid length. [ 221.420947][T10035] netlink: 'syz.4.889': attribute type 1 has an invalid length. [ 221.858660][T10054] xt_CT: You must specify a L4 protocol and not use inversions on it [ 221.880400][ T51] Bluetooth: hci2: command tx timeout [ 222.114454][ T9948] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.131835][ T9948] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.156476][ T9948] bridge_slave_0: entered allmulticast mode [ 222.179252][ T9948] bridge_slave_0: entered promiscuous mode [ 222.227168][ T9948] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.295619][ T9948] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.341582][ T9948] bridge_slave_1: entered allmulticast mode [ 222.511192][ T9948] bridge_slave_1: entered promiscuous mode [ 222.638881][T10084] lo: MTU too low for tipc bearer [ 222.706958][T10084] tipc: Enabling of bearer rejected, failed to enable media [ 222.930459][T10095] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 222.989424][T10100] netlink: 'syz.2.904': attribute type 2 has an invalid length. [ 222.993803][ T9948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.014349][T10100] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.904'. [ 223.071246][T10100] netlink: 16 bytes leftover after parsing attributes in process `syz.2.904'. [ 223.186852][T10106] Cannot find del_set index 128 as target [ 223.225861][ T9948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.364059][T10111] virt_wifi0: mtu less than device minimum [ 223.475409][T10123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.906'. [ 223.515476][ T9948] team0: Port device team_slave_0 added [ 223.548152][T10123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.906'. [ 223.643243][ T9948] team0: Port device team_slave_1 added [ 223.906824][T10133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.912'. [ 223.934488][T10135] netlink: 52 bytes leftover after parsing attributes in process `syz.0.913'. [ 223.948755][ T51] Bluetooth: hci2: command 0x040f tx timeout [ 223.968200][T10140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.912'. [ 223.990551][T10140] netlink: 24 bytes leftover after parsing attributes in process `syz.1.912'. [ 224.407136][ T9948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.430821][ T9948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.525483][ T9948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.645821][ T9948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.654003][ T9948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.773306][ T9948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.927454][T10165] netlink: 20 bytes leftover after parsing attributes in process `syz.0.920'. [ 225.021496][T10165] pim6reg: entered allmulticast mode [ 225.089062][ T9948] hsr_slave_0: entered promiscuous mode [ 225.119783][ T9948] hsr_slave_1: entered promiscuous mode [ 225.178517][ T9948] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.203793][ T9948] Cannot create hsr debugfs directory [ 226.025758][ T51] Bluetooth: hci2: command 0x040f tx timeout [ 226.109548][T10198] __nla_validate_parse: 1 callbacks suppressed [ 226.109586][T10198] netlink: 12 bytes leftover after parsing attributes in process `syz.2.927'. [ 226.710930][T10218] vlan3: entered promiscuous mode [ 226.725695][T10218] bridge0: entered promiscuous mode [ 227.063779][T10236] IPVS: length: 197 != 24 [ 227.146455][ T51] Bluetooth: hci4: command 0x0401 tx timeout [ 227.247312][T10242] x_tables: duplicate underflow at hook 1 [ 227.541982][ T9948] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 227.581530][T10253] netlink: 'syz.4.939': attribute type 1 has an invalid length. [ 227.631657][ T9948] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 227.720603][ T9948] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 227.782477][ T9948] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 228.106392][ T5841] Bluetooth: hci2: command 0x040f tx timeout [ 228.247573][ T9948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.318100][T10279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.945'. [ 228.341057][T10276] netlink: 12 bytes leftover after parsing attributes in process `syz.4.944'. [ 228.349052][ T9948] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.390063][T10279] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 228.424228][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.433451][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.468793][T10279] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.521899][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.541982][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.618131][T10290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.947'. [ 228.910333][T10303] netlink: 4 bytes leftover after parsing attributes in process `syz.4.950'. [ 229.199053][T10312] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 229.250376][T10313] netlink: 'syz.2.951': attribute type 1 has an invalid length. [ 229.810662][T10335] dummy0: left allmulticast mode [ 229.833307][T10335] bridge0: port 3(dummy0) entered disabled state [ 229.990655][T10335] bridge_slave_0: left allmulticast mode [ 230.043377][T10335] bridge_slave_0: left promiscuous mode [ 230.142693][T10335] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.247998][T10335] bridge_slave_1: left allmulticast mode [ 230.257083][T10335] bridge_slave_1: left promiscuous mode [ 230.285328][T10335] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.315576][T10335] bond0: (slave bond_slave_0): Releasing backup interface [ 230.328555][T10357] netlink: 40 bytes leftover after parsing attributes in process `syz.2.959'. [ 230.353078][T10335] bond0: (slave bond_slave_1): Releasing backup interface [ 230.395974][T10335] team0: Port device team_slave_0 removed [ 230.436484][T10335] team0: Port device team_slave_1 removed [ 230.445785][T10335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.456337][T10335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.469809][T10335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.479662][T10335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.499808][T10335] bond0: (slave bond1): Releasing backup interface [ 230.530225][T10335] bond2: (slave ip6gretap1): Releasing backup interface [ 230.893893][ T9948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.133778][ T9948] veth0_vlan: entered promiscuous mode [ 231.230250][ T9948] veth1_vlan: entered promiscuous mode [ 231.381903][ T9948] veth0_macvtap: entered promiscuous mode [ 231.449167][ T9948] veth1_macvtap: entered promiscuous mode [ 231.548137][ T9948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.617240][T10401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.969'. [ 231.679770][ T9948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.709746][T10406] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 231.886146][ T9948] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.922583][ T9948] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.976194][ T9948] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.002960][ T9948] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.147981][T10427] ieee802154 phy1 wpan1: encryption failed: -22 [ 232.236923][T10428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.974'. [ 232.509908][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.550841][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.674418][T10440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.980'. [ 232.692973][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.757532][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.417467][T10477] netlink: 56 bytes leftover after parsing attributes in process `syz.1.988'. [ 233.619644][T10486] netlink: 24 bytes leftover after parsing attributes in process `syz.2.990'. [ 233.648301][T10487] netlink: 68 bytes leftover after parsing attributes in process `syz.4.991'. [ 233.725787][T10491] netlink: 108 bytes leftover after parsing attributes in process `syz.1.992'. [ 233.931321][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.098623][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.204141][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.326623][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.553430][ T13] bridge_slave_1: left allmulticast mode [ 234.565798][ T13] bridge_slave_1: left promiscuous mode [ 234.574000][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.594512][ T13] bridge_slave_0: left allmulticast mode [ 234.603610][ T13] bridge_slave_0: left promiscuous mode [ 234.613682][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.062643][T10519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.995'. [ 235.145244][T10517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.995'. [ 235.204404][T10519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.995'. [ 235.341138][T10533] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 235.615517][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 235.637141][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 235.649074][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 235.674713][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 235.697030][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 235.748806][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.767730][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.784125][ T13] bond0 (unregistering): Released all slaves [ 235.804595][T10524] tipc: Enabling of bearer rejected, failed to enable media [ 235.834164][T10523] tipc: Enabling of bearer rejected, failed to enable media [ 236.118007][T10544] netlink: 'syz.2.999': attribute type 5 has an invalid length. [ 236.832311][T10575] netlink: 'syz.1.1005': attribute type 13 has an invalid length. [ 236.915872][ T13] hsr_slave_0: left promiscuous mode [ 236.957269][ T13] hsr_slave_1: left promiscuous mode [ 236.979730][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.016811][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.036903][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.054019][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.096927][ T13] veth1_macvtap: left promiscuous mode [ 237.116098][ T13] veth0_macvtap: left promiscuous mode [ 237.122786][ T13] veth1_vlan: left promiscuous mode [ 237.136252][ T13] veth0_vlan: left promiscuous mode [ 237.788332][ T51] Bluetooth: hci2: command tx timeout [ 238.058174][ T13] team0 (unregistering): Port device team_slave_1 removed [ 238.117649][ T13] team0 (unregistering): Port device team_slave_0 removed [ 238.747466][T10578] C: renamed from lo (while UP) [ 239.365202][T10575] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.379703][T10575] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.392177][T10575] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.410829][T10575] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.680027][T10617] tun0: tun_chr_ioctl cmd 1074025675 [ 239.695826][T10617] tun0: persist disabled [ 239.865672][ T51] Bluetooth: hci2: command tx timeout [ 240.380295][T10646] netlink: 'syz.1.1017': attribute type 11 has an invalid length. [ 240.608346][T10656] __nla_validate_parse: 2 callbacks suppressed [ 240.608370][T10656] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1020'. [ 240.724728][T10537] chnl_net:caif_netlink_parms(): no params data found [ 240.916768][T10663] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1023'. [ 241.358082][T10683] netlink: 'syz.1.1024': attribute type 1 has an invalid length. [ 241.387865][T10537] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.415268][T10537] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.442878][T10537] bridge_slave_0: entered allmulticast mode [ 241.457401][T10685] netlink: 'syz.0.1025': attribute type 11 has an invalid length. [ 241.462843][T10537] bridge_slave_0: entered promiscuous mode [ 241.485232][T10685] netlink: 'syz.0.1025': attribute type 11 has an invalid length. [ 241.538479][T10685] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1025'. [ 241.574039][T10537] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.592483][T10537] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.610314][T10537] bridge_slave_1: entered allmulticast mode [ 241.623075][T10537] bridge_slave_1: entered promiscuous mode [ 241.701714][T10690] bond4: (slave gretap1): making interface the new active one [ 241.713747][T10690] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 241.845283][T10695] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1027'. [ 241.870300][T10537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.945259][ T5841] Bluetooth: hci2: command tx timeout [ 241.960796][T10537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.217886][T10537] team0: Port device team_slave_0 added [ 242.245753][T10537] team0: Port device team_slave_1 added [ 242.404228][T10708] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1032'. [ 242.565890][T10537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.584149][T10537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.620193][T10716] netlink: 'syz.4.1034': attribute type 1 has an invalid length. [ 242.661910][T10716] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1034'. [ 242.696910][T10716] netlink: 'syz.4.1034': attribute type 1 has an invalid length. [ 242.715081][T10537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.847205][T10537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.895874][T10537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.012045][T10537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.077520][T10723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1036'. [ 243.329901][T10537] hsr_slave_0: entered promiscuous mode [ 243.353300][T10537] hsr_slave_1: entered promiscuous mode [ 243.378620][T10537] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 243.397129][T10537] Cannot create hsr debugfs directory [ 243.776483][T10743] netlink: 'syz.4.1038': attribute type 1 has an invalid length. [ 243.815179][T10743] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1038'. [ 243.845255][T10743] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1038'. [ 244.025173][ T5841] Bluetooth: hci2: command 0x0419 tx timeout [ 244.297059][T10752] syz_tun: entered allmulticast mode [ 244.308231][T10752] delete_channel: no stack [ 244.323760][T10751] syz_tun: left allmulticast mode [ 244.760312][T10772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1045'. [ 245.303365][T10787] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 245.522003][T10537] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 245.622392][T10537] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 245.682201][T10537] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 245.789017][T10807] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1054'. [ 245.855311][T10537] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 246.334272][T10537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.424195][T10828] netlink: 'syz.1.1060': attribute type 11 has an invalid length. [ 246.472690][T10828] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1060'. [ 246.488132][T10537] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.513382][T10835] netlink: 'syz.2.1061': attribute type 1 has an invalid length. [ 246.520540][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.535263][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.565126][T10835] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1061'. [ 246.649326][ T3482] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.657954][ T3482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.685338][T10898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1071'. [ 247.745466][T10898] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1071'. [ 247.885147][T10903] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1072'. [ 248.133409][T10537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.237220][T10917] netlink: 'syz.2.1076': attribute type 7 has an invalid length. [ 248.289618][T10926] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1076'. [ 248.332952][T10926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1076'. [ 248.359123][T10926] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1076'. [ 248.448608][T10917] : entered promiscuous mode [ 248.553123][T10537] veth0_vlan: entered promiscuous mode [ 248.631832][T10537] veth1_vlan: entered promiscuous mode [ 248.832102][T10537] veth0_macvtap: entered promiscuous mode [ 248.889030][T10537] veth1_macvtap: entered promiscuous mode [ 249.024712][T10537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.081883][T10946] xt_CT: No such helper "pptp" [ 249.104132][T10949] xt_CT: No such helper "pptp" [ 249.122750][T10537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.231846][T10957] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1085'. [ 249.583804][T10537] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.610284][T10537] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.631169][T10537] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.652850][T10537] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.920257][T10977] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 250.055726][ T7235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.103995][ T7235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.221676][T10332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.276164][T10332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.828506][T11006] openvswitch: netlink: Missing key (keys=40, expected=80) [ 250.933659][T11006] Cannot find del_set index 4 as target [ 250.969738][T11012] bridge0: port 2(dummy0) entered disabled state [ 251.017127][T11012] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 251.216475][T10332] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.399034][T10332] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.510139][T10332] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.604429][T10332] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.846643][T10332] bridge_slave_1: left allmulticast mode [ 251.857572][T10332] bridge_slave_1: left promiscuous mode [ 251.872702][T10332] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.897313][T10332] bridge_slave_0: left allmulticast mode [ 251.908762][T10332] bridge_slave_0: left promiscuous mode [ 251.916284][T10332] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.480059][T11045] Cannot find del_set index 4 as target [ 252.799648][T10332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.825614][T10332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.847764][T10332] bond0 (unregistering): Released all slaves [ 253.168419][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 253.181783][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 253.193212][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 253.210418][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 253.221591][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 253.442774][T11077] openvswitch: netlink: VXLAN extension 173 out of range max 1 [ 253.629339][T11089] __nla_validate_parse: 3 callbacks suppressed [ 253.629359][T11089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1112'. [ 253.675565][T11089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1112'. [ 253.747404][T10332] hsr_slave_0: left promiscuous mode [ 253.777946][T10332] hsr_slave_1: left promiscuous mode [ 253.795974][T11088] x_tables: duplicate underflow at hook 2 [ 253.803991][T10332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.828957][T10332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.849694][T10332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.862627][T10332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.907841][T10332] veth1_macvtap: left promiscuous mode [ 253.914706][T10332] veth0_macvtap: left promiscuous mode [ 253.921430][T10332] veth1_vlan: left promiscuous mode [ 253.932962][T10332] veth0_vlan: left promiscuous mode [ 254.628074][T10332] team0 (unregistering): Port device team_slave_1 removed [ 254.682435][T10332] team0 (unregistering): Port device team_slave_0 removed [ 255.223431][T11089] netlink: 'syz.2.1112': attribute type 2 has an invalid length. [ 255.305402][ T51] Bluetooth: hci2: command tx timeout [ 255.461548][T11107] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 255.804635][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.560403][T11142] x_tables: duplicate underflow at hook 1 [ 256.616793][T11140] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1124'. [ 256.668836][T11150] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1124'. [ 256.868606][T11160] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1129'. [ 256.919793][T11068] chnl_net:caif_netlink_parms(): no params data found [ 256.977199][T11163] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1129'. [ 257.040939][T11163] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.052040][T11163] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.141377][T11171] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1132'. [ 257.385204][ T51] Bluetooth: hci2: command tx timeout [ 257.500898][T11181] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 257.515689][T11188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1137'. [ 257.554443][T11188] netlink: 'syz.2.1137': attribute type 3 has an invalid length. [ 257.767573][T11200] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 257.828882][T11068] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.838830][T11068] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.848785][T11068] bridge_slave_0: entered allmulticast mode [ 257.868271][T11068] bridge_slave_0: entered promiscuous mode [ 257.908501][T11068] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.927864][T11068] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.937106][T11068] bridge_slave_1: entered allmulticast mode [ 257.947350][T11068] bridge_slave_1: entered promiscuous mode [ 258.168296][T11068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.227175][T11068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.590458][T11068] team0: Port device team_slave_0 added [ 258.663118][T11068] team0: Port device team_slave_1 added [ 258.683261][T11235] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1147'. [ 258.683291][T11232] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1147'. [ 258.914784][T11246] sctp: [Deprecated]: syz.1.1150 (pid 11246) Use of int in max_burst socket option. [ 258.914784][T11246] Use struct sctp_assoc_value instead [ 258.975452][T11246] x_tables: duplicate underflow at hook 3 [ 259.040362][T11068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.066628][T11068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.204553][T11068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.242209][T11068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.261194][T11068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.299134][T11068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.443198][T11257] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 259.465995][ T51] Bluetooth: hci2: command tx timeout [ 259.633597][T11068] hsr_slave_0: entered promiscuous mode [ 259.643275][T11068] hsr_slave_1: entered promiscuous mode [ 259.652199][T11068] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.661553][T11068] Cannot create hsr debugfs directory [ 259.673013][T11281] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1159'. [ 259.729344][T11281] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1159'. [ 260.190213][T11298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1163'. [ 260.437405][T11308] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1166'. [ 260.470053][T11308] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1166'. [ 260.569230][T11311] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1167'. [ 260.702008][T11319] netlink: 'syz.1.1167': attribute type 32 has an invalid length. [ 261.545322][ T51] Bluetooth: hci2: command tx timeout [ 262.044116][T11068] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 262.078168][T11351] No such timeout policy "syz0" [ 262.473256][T11068] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 262.522982][T11068] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 262.561035][T11068] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 262.806279][T11361] 8021q: VLANs not supported on sit0 [ 262.829962][T11366] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 262.986297][T11068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.064640][T11068] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.103871][T11376] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1183'. [ 263.161912][ T5927] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.174847][ T5927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.273351][ T5927] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.281668][ T5927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.297924][T11382] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1184'. [ 263.423074][T11388] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 263.626436][ T5841] Bluetooth: hci2: command tx timeout [ 264.033001][T11407] xt_CT: You must specify a L4 protocol and not use inversions on it [ 264.083619][T11411] sctp: [Deprecated]: syz.1.1190 (pid 11411) Use of struct sctp_assoc_value in delayed_ack socket option. [ 264.083619][T11411] Use struct sctp_sack_info instead [ 264.174499][T11411] __nla_validate_parse: 2 callbacks suppressed [ 264.174518][T11411] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1190'. [ 264.391582][T11426] netlink: 'syz.2.1194': attribute type 11 has an invalid length. [ 264.410920][T11426] netlink: 'syz.2.1194': attribute type 11 has an invalid length. [ 264.439176][T11426] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1194'. [ 264.503475][T11411] macvtap1: entered promiscuous mode [ 264.510727][T11411] vlan0: entered promiscuous mode [ 264.516496][T11411] gretap0: entered promiscuous mode [ 264.528834][T11411] macvtap1: entered allmulticast mode [ 264.551566][T11411] vlan0: entered allmulticast mode [ 264.563683][T11411] gretap0: entered allmulticast mode [ 264.756783][T11068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.183634][T11068] veth0_vlan: entered promiscuous mode [ 265.223109][T11068] veth1_vlan: entered promiscuous mode [ 265.378631][T11068] veth0_macvtap: entered promiscuous mode [ 265.418430][T11068] veth1_macvtap: entered promiscuous mode [ 265.425825][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805794d400: rx timeout, send abort [ 265.437060][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ae64400: rx timeout, send abort [ 265.447965][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805ae64400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 265.467139][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805794d400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 265.517989][T11460] tipc: Started in network mode [ 265.524015][T11460] tipc: Node identity ac14140f, cluster identity 4711 [ 265.565816][T11460] tipc: New replicast peer: 255.255.255.255 [ 265.589889][T11460] tipc: Enabled bearer , priority 10 [ 265.653023][T11068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.703124][T11068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.789450][T11469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1203'. [ 265.792455][T11068] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.830588][T11469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1203'. [ 265.871566][T11068] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.917475][T11068] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.949150][T11068] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.967330][T11477] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1206'. [ 266.358644][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.393817][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.452921][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.501092][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.715576][ T5917] tipc: Node number set to 2886997007 [ 266.890617][T11514] netlink: 'syz.2.1214': attribute type 1 has an invalid length. [ 266.978820][T11521] netlink: 'syz.2.1214': attribute type 1 has an invalid length. [ 267.017001][T11524] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1217'. [ 267.520242][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.728337][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.872038][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.958736][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.118542][ T36] bridge_slave_1: left allmulticast mode [ 268.127251][ T36] bridge_slave_1: left promiscuous mode [ 268.134811][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.148545][ T36] bridge_slave_0: left allmulticast mode [ 268.155880][ T36] bridge_slave_0: left promiscuous mode [ 268.162375][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.604513][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.621206][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.634591][ T36] bond0 (unregistering): Released all slaves [ 268.927103][T11556] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1124 [ 269.321590][ T36] hsr_slave_0: left promiscuous mode [ 269.348505][ T36] hsr_slave_1: left promiscuous mode [ 269.377318][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.425574][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.459576][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.495052][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.600939][ T36] veth1_macvtap: left promiscuous mode [ 269.622273][ T36] veth0_macvtap: left promiscuous mode [ 269.644764][ T36] veth1_vlan: left promiscuous mode [ 269.670748][ T36] veth0_vlan: left promiscuous mode [ 269.742962][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 269.756884][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 269.773211][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 269.794873][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 269.807767][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 270.658831][ T36] team0 (unregistering): Port device team_slave_1 removed [ 270.718710][ T36] team0 (unregistering): Port device team_slave_0 removed [ 271.389572][T11598] tipc: Enabling of bearer rejected, failed to enable media [ 271.635380][T11607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1232'. [ 271.693115][T11609] netlink: 'syz.2.1233': attribute type 1 has an invalid length. [ 271.720130][T11609] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1233'. [ 271.865207][ T5841] Bluetooth: hci2: command tx timeout [ 271.969690][T11619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1235'. [ 272.035462][T11619] netlink: 'syz.0.1235': attribute type 30 has an invalid length. [ 272.480658][T11619] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.494252][T11619] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.505790][T11619] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.516279][T11619] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.594403][T11619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1235'. [ 272.724467][T11619] netlink: 'syz.0.1235': attribute type 30 has an invalid length. [ 272.772467][T11641] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1240'. [ 273.179941][T11656] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1244'. [ 273.329455][T11664] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1246'. [ 273.412699][T11664] bond0: entered allmulticast mode [ 273.508765][T11664] bond_slave_0: entered allmulticast mode [ 273.552487][T11664] bond_slave_1: entered allmulticast mode [ 273.675721][T11591] chnl_net:caif_netlink_parms(): no params data found [ 273.945579][ T5841] Bluetooth: hci2: command tx timeout [ 274.225521][T11591] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.255641][T11591] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.267670][T11702] netlink: 'syz.4.1254': attribute type 10 has an invalid length. [ 274.313880][T11591] bridge_slave_0: entered allmulticast mode [ 274.376412][T11591] bridge_slave_0: entered promiscuous mode [ 274.446397][T11702] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.460575][T11715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1256'. [ 274.482820][T11702] team0: entered allmulticast mode [ 274.492873][T11702] team_slave_0: entered allmulticast mode [ 274.505788][T11702] team_slave_1: entered allmulticast mode [ 274.542651][T11702] vlan0: entered allmulticast mode [ 274.562353][T11702] veth0_vlan: entered allmulticast mode [ 274.596918][T11702] bond0: (slave team0): Enslaving as an active interface with an up link [ 274.626815][T11591] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.667177][T11591] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.688654][T11591] bridge_slave_1: entered allmulticast mode [ 274.716002][T11591] bridge_slave_1: entered promiscuous mode [ 275.059237][T11591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.068236][T11733] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1259'. [ 275.140257][T11591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.383652][T11591] team0: Port device team_slave_0 added [ 275.406435][T11747] sctp: [Deprecated]: syz.0.1262 (pid 11747) Use of int in max_burst socket option. [ 275.406435][T11747] Use struct sctp_assoc_value instead [ 275.463342][T11745] team0: entered promiscuous mode [ 275.486577][T11745] team_slave_0: entered promiscuous mode [ 275.516653][T11745] team_slave_1: entered promiscuous mode [ 275.543689][T11591] team0: Port device team_slave_1 added [ 275.560528][T11739] team0: left promiscuous mode [ 275.596729][T11739] team_slave_0: left promiscuous mode [ 275.621775][T11739] team_slave_1: left promiscuous mode [ 275.741427][T11757] tipc: Enabled bearer , priority 0 [ 275.819925][T11591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.837356][T11591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.873160][T11591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.874527][T11758] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1264'. [ 275.894239][T11591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.909235][T11591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.943046][T11591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.959778][T11752] syzkaller0: entered promiscuous mode [ 275.968016][T11752] syzkaller0: entered allmulticast mode [ 275.988716][T11757] tipc: Resetting bearer [ 276.020965][T11751] tipc: Resetting bearer [ 276.035341][ T5841] Bluetooth: hci2: command tx timeout [ 276.086354][T11751] tipc: Disabling bearer [ 276.320155][T11591] hsr_slave_0: entered promiscuous mode [ 276.345516][T11591] hsr_slave_1: entered promiscuous mode [ 276.370618][T11591] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.403663][T11591] Cannot create hsr debugfs directory [ 277.040509][T11811] __nla_validate_parse: 1 callbacks suppressed [ 277.040533][T11811] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1276'. [ 277.219338][T11806] bond_slave_0: entered promiscuous mode [ 277.581097][T11823] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1278'. [ 277.592307][T11823] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1278'. [ 278.115381][ T5841] Bluetooth: hci2: command tx timeout [ 278.332388][T11843] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1282'. [ 278.367258][T11843] openvswitch: netlink: Flow key attr not present in new flow. [ 278.433243][T11849] tipc: Enabled bearer , priority 0 [ 278.652858][T11843] syzkaller0: entered promiscuous mode [ 278.659553][T11843] syzkaller0: entered allmulticast mode [ 278.667904][T11843] tipc: Resetting bearer [ 278.695771][T11864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1287'. [ 278.715271][T11864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1287'. [ 278.725639][T11866] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1289'. [ 278.752121][ T13] tipc: Resetting bearer [ 278.985824][T11870] netlink: 'syz.0.1290': attribute type 3 has an invalid length. [ 279.011972][T11842] tipc: Resetting bearer [ 279.183868][T11885] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.1296'. [ 279.201930][T11885] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.1296'. [ 279.234567][T11883] openvswitch: netlink: Flow actions attr not present in new flow. [ 279.269629][T11883] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 279.465698][ T5890] tipc: Node number set to 1328364983 [ 281.588662][T11842] tipc: Disabling bearer [ 281.601568][T11591] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 281.613251][T11591] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 281.662893][T11591] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 281.890755][T11591] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 282.188741][T11927] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 282.624798][T11940] netlink: 'syz.0.1310': attribute type 29 has an invalid length. [ 282.646203][T11940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1310'. [ 282.875942][T11591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.997101][T11591] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.111652][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.120164][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.283631][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.292074][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.967169][T11994] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1322'. [ 283.999544][T11995] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1322'. [ 284.030215][T11996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1321'. [ 284.293682][T12004] tipc: Enabling of bearer rejected, media not registered [ 284.409512][T11591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.520367][T12014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1325'. [ 284.690964][T11591] veth0_vlan: entered promiscuous mode [ 284.734110][T11591] veth1_vlan: entered promiscuous mode [ 284.789800][T12022] tipc: MTU too low for tipc bearer [ 284.893917][T11591] veth0_macvtap: entered promiscuous mode [ 284.909602][T12028] netlink: 'syz.4.1330': attribute type 13 has an invalid length. [ 284.928050][T11591] veth1_macvtap: entered promiscuous mode [ 284.951541][T12028] gretap0: refused to change device tx_queue_len [ 284.963120][T12028] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 285.030968][T12035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1329'. [ 285.057525][T11591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.089246][T11591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.150087][T11591] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.178137][T11591] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.203360][T11591] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.218445][T12039] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.229806][T11591] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.255999][T12042] nft_compat: unsupported protocol 0 [ 285.282165][T12041] unknown channel width for channel at 909000KHz? [ 285.301423][T12041] unknown channel width for channel at 909000KHz? [ 285.530007][T12049] netlink: 'syz.1.1334': attribute type 21 has an invalid length. [ 285.531696][T12050] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1335'. [ 285.570647][T12051] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1336'. [ 285.580217][T12049] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1334'. [ 285.600575][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.622091][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.791674][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.814652][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.452158][T12087] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1345'. [ 286.596144][T12096] netlink: 'syz.4.1345': attribute type 16 has an invalid length. [ 286.614195][ T5927] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.638507][T12096] netlink: 'syz.4.1345': attribute type 17 has an invalid length. [ 286.748683][T12087] 8021q: adding VLAN 0 to HW filter on device bond2 [ 287.202794][ T5927] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.342822][ T5927] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.733352][ T5927] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.014038][ T5927] bridge_slave_1: left allmulticast mode [ 288.023440][ T5927] bridge_slave_1: left promiscuous mode [ 288.031078][ T5927] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.048656][ T5927] bridge_slave_0: left allmulticast mode [ 288.059747][ T5927] bridge_slave_0: left promiscuous mode [ 288.067817][ T5927] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.510831][T12144] __nla_validate_parse: 1 callbacks suppressed [ 288.510852][T12144] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1347'. [ 288.585812][T12145] openvswitch: netlink: Message has -1 unknown bytes. [ 288.649462][T12145] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1347'. [ 288.694655][T12147] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1347'. [ 288.808121][T12155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.306645][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 289.328176][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 289.350336][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 289.365678][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 289.378329][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 289.391951][ T5927] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.456874][ T5927] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.482049][ T5927] bond0 (unregistering): Released all slaves [ 290.384026][T12214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1362'. [ 290.986909][ T5927] hsr_slave_0: left promiscuous mode [ 291.002787][ T5927] hsr_slave_1: left promiscuous mode [ 291.010544][ T5927] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.026159][ T5927] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.044467][ T5927] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.061290][ T5927] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.137034][ T5927] veth1_macvtap: left promiscuous mode [ 291.143451][ T5927] veth0_macvtap: left promiscuous mode [ 291.163820][ T5927] veth1_vlan: left promiscuous mode [ 291.182069][ T5927] veth0_vlan: left promiscuous mode [ 291.281801][T12240] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1368'. [ 291.465316][ T5841] Bluetooth: hci2: command tx timeout [ 291.832934][ T5927] team0 (unregistering): Port device team_slave_1 removed [ 291.891693][ T5927] team0 (unregistering): Port device team_slave_0 removed [ 292.629107][T12242] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 292.951714][T12249] veth7: entered promiscuous mode [ 293.054232][T12169] chnl_net:caif_netlink_parms(): no params data found [ 293.352931][T12258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.545595][ T5841] Bluetooth: hci2: command tx timeout [ 293.612771][T12169] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.631355][T12169] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.650553][T12169] bridge_slave_0: entered allmulticast mode [ 293.667136][T12169] bridge_slave_0: entered promiscuous mode [ 293.739639][T12169] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.757065][T12169] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.771303][T12169] bridge_slave_1: entered allmulticast mode [ 293.799270][T12169] bridge_slave_1: entered promiscuous mode [ 293.834471][T12285] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1378'. [ 293.856658][T12280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.104367][T12169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.181766][T12295] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1380'. [ 294.222898][T12169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.459797][T12169] team0: Port device team_slave_0 added [ 294.497549][T12169] team0: Port device team_slave_1 added [ 294.570769][T12308] openvswitch: netlink: Message has 199 unknown bytes. [ 294.606016][T12308] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.748322][T12169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.786808][T12169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.831499][T12169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.961117][T12169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.015053][T12169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.053685][T12169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.240690][T12327] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1388'. [ 295.478822][T12169] hsr_slave_0: entered promiscuous mode [ 295.506544][T12169] hsr_slave_1: entered promiscuous mode [ 295.513605][T12169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 295.543870][T12169] Cannot create hsr debugfs directory [ 295.625495][ T5841] Bluetooth: hci2: command tx timeout [ 295.802933][T12360] netlink: zone id is out of range [ 295.824697][T12360] netlink: set zone limit has 8 unknown bytes [ 295.915386][T12363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1399'. [ 296.016519][T12369] netlink: 'syz.0.1400': attribute type 1 has an invalid length. [ 296.046020][T12369] netlink: 'syz.0.1400': attribute type 2 has an invalid length. [ 296.170790][T12376] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1400'. [ 296.603195][T12392] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1405'. [ 296.757002][T12397] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1405'. [ 296.803510][T12169] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 296.818550][T12169] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 296.840020][T12169] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 296.862087][T12169] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 297.129095][T12169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.199366][T12169] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.237009][ T3482] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.245511][ T3482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.292635][ T3482] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.301518][ T3482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.705199][ T5841] Bluetooth: hci2: command tx timeout [ 297.727745][T12441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1417'. [ 297.938639][T12169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.948606][T12450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1418'. [ 298.031155][T12452] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 298.128125][T12169] veth0_vlan: entered promiscuous mode [ 298.163741][T12457] sctp: [Deprecated]: syz.2.1420 (pid 12457) Use of int in max_burst socket option. [ 298.163741][T12457] Use struct sctp_assoc_value instead [ 298.194341][T12169] veth1_vlan: entered promiscuous mode [ 298.232028][T12459] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1421'. [ 298.409384][T12169] veth0_macvtap: entered promiscuous mode [ 298.458218][T12169] veth1_macvtap: entered promiscuous mode [ 298.484082][T12470] lo: entered promiscuous mode [ 298.512911][T12470] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 298.573778][T12169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.584693][T12473] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 298.616927][T12169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.671005][T12169] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.691967][T12169] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.704729][T12169] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.721844][T12169] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.933216][T12490] netlink: 'syz.0.1429': attribute type 21 has an invalid length. [ 299.000090][T12490] netlink: 'syz.0.1429': attribute type 1 has an invalid length. [ 299.031250][T12492] batadv_slave_1: entered allmulticast mode [ 299.059051][T12492] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1430'. [ 299.081713][T12492] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1430'. [ 299.110150][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.148373][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.279126][ T5927] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.312070][ T5927] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.472056][T12501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1434'. [ 299.713334][T12169] ------------[ cut here ]------------ [ 299.720079][T12169] refcount_t: underflow; use-after-free. [ 299.728323][T12169] WARNING: CPU: 0 PID: 12169 at lib/refcount.c:28 refcount_warn_saturate+0x11a/0x1d0 [ 299.739807][T12169] Modules linked in: [ 299.744573][T12169] CPU: 0 UID: 0 PID: 12169 Comm: syz-executor Not tainted 6.15.0-syzkaller-12425-g82cbd06f327f #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 299.759141][T12169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 299.771604][T12169] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0 [ 299.780135][T12169] Code: c0 38 e2 8b e8 17 db c2 fc 90 0f 0b 90 90 eb d7 e8 db 2c ff fc c6 05 04 cb c9 0a 01 90 48 c7 c7 20 39 e2 8b e8 f7 da c2 fc 90 <0f> 0b 90 90 eb b7 e8 bb 2c ff fc c6 05 e1 ca c9 0a 01 90 48 c7 c7 [ 299.803371][T12169] RSP: 0018:ffffc9000b9877d8 EFLAGS: 00010246 [ 299.811216][T12169] RAX: 50124e4db1aba500 RBX: 0000000000000003 RCX: ffff88802f595a00 [ 299.821449][T12169] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 299.830660][T12169] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 299.839793][T12169] R10: dffffc0000000000 R11: fffffbfff1bfaa44 R12: ffff88802ef0b800 [ 299.848606][T12169] R13: ffff888052d92860 R14: ffff888052d92878 R15: dffffc0000000000 [ 299.857237][T12169] FS: 0000000000000000(0000) GS:ffff888125c55000(0000) knlGS:0000000000000000 [ 299.867979][T12169] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 299.876012][T12169] CR2: 00007f8c93f7e2d8 CR3: 00000000312d0000 CR4: 00000000003526f0 [ 299.884706][T12169] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 299.894213][T12169] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 299.904379][T12169] Call Trace: [ 299.908089][T12169] [ 299.911290][T12169] klist_dec_and_del+0x3c7/0x3d0 [ 299.917122][T12169] klist_remove+0x1bd/0x340 [ 299.922069][T12169] ? __pfx_klist_children_put+0x10/0x10 [ 299.928433][T12169] ? __pfx_klist_remove+0x10/0x10 [ 299.933745][T12169] ? __pfx_kobject_move+0x10/0x10 [ 299.939394][T12169] ? get_device_parent+0x366/0x3a0 [ 299.946332][T12169] device_move+0x193/0x700 [ 299.951493][T12169] hci_conn_del_sysfs+0xb8/0x170 [ 299.957685][T12169] hci_conn_del+0x8ff/0xcb0 [ 299.963364][T12169] hci_conn_hash_flush+0x191/0x230 [ 299.969677][T12169] hci_dev_close_sync+0xaef/0x1330 [ 299.975722][T12169] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 299.981970][T12169] ? up_write+0x1c4/0x420 [ 299.986832][T12169] hci_unregister_dev+0x206/0x500 [ 299.992041][T12169] vhci_release+0x80/0xd0 [ 299.996638][T12169] ? __pfx_vhci_release+0x10/0x10 [ 300.002047][T12169] __fput+0x449/0xa70 [ 300.006475][T12169] task_work_run+0x1d1/0x260 [ 300.011876][T12169] ? __pfx_task_work_run+0x10/0x10 [ 300.017990][T12169] ? kmem_cache_free+0x18f/0x400 [ 300.023706][T12169] do_exit+0x6ad/0x22e0 [ 300.028865][T12169] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 300.035540][T12169] ? __pfx_do_exit+0x10/0x10 [ 300.042053][T12169] ? _raw_spin_unlock_irq+0x23/0x50 [ 300.048324][T12169] ? lockdep_hardirqs_on+0x9c/0x150 [ 300.054071][T12169] do_group_exit+0x21c/0x2d0 [ 300.059298][T12169] __x64_sys_exit_group+0x3f/0x40 [ 300.065849][T12169] x64_sys_call+0x21ba/0x21c0 [ 300.071126][T12169] do_syscall_64+0xfa/0x3b0 [ 300.077318][T12169] ? lockdep_hardirqs_on+0x9c/0x150 [ 300.083266][T12169] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.089836][T12169] ? clear_bhb_loop+0x60/0xb0 [ 300.095364][T12169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.102063][T12169] RIP: 0033:0x7f5a0078e929 [ 300.107215][T12169] Code: Unable to access opcode bytes at 0x7f5a0078e8ff. [ 300.115353][T12169] RSP: 002b:00007fff62b6ec98 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 300.124738][T12169] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5a0078e929 [ 300.134184][T12169] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 300.143974][T12169] RBP: 00007f5a007ee8f0 R08: 00007fff62b6ca37 R09: 0000000000000003 [ 300.154354][T12169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.163842][T12169] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007fff62b6ee50 [ 300.173881][T12169] [ 300.177805][T12169] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 300.185783][T12169] CPU: 0 UID: 0 PID: 12169 Comm: syz-executor Not tainted 6.15.0-syzkaller-12425-g82cbd06f327f #0 PREEMPT(full) [ 300.199918][T12169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 300.211224][T12169] Call Trace: [ 300.214887][T12169] [ 300.218218][T12169] dump_stack_lvl+0x99/0x250 [ 300.223496][T12169] ? __asan_memcpy+0x40/0x70 [ 300.228561][T12169] ? __pfx_dump_stack_lvl+0x10/0x10 [ 300.234318][T12169] ? __pfx__printk+0x10/0x10 [ 300.239230][T12169] panic+0x2db/0x790 [ 300.243544][T12169] ? __pfx_panic+0x10/0x10 [ 300.248615][T12169] __warn+0x31b/0x4b0 [ 300.253533][T12169] ? refcount_warn_saturate+0x11a/0x1d0 [ 300.259904][T12169] ? refcount_warn_saturate+0x11a/0x1d0 [ 300.266065][T12169] report_bug+0x2be/0x4f0 [ 300.271050][T12169] ? refcount_warn_saturate+0x11a/0x1d0 [ 300.277167][T12169] ? refcount_warn_saturate+0x11a/0x1d0 [ 300.283476][T12169] ? refcount_warn_saturate+0x11c/0x1d0 [ 300.289847][T12169] handle_bug+0x84/0x160 [ 300.294771][T12169] exc_invalid_op+0x1a/0x50 [ 300.300133][T12169] asm_exc_invalid_op+0x1a/0x20 [ 300.305915][T12169] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0 [ 300.312759][T12169] Code: c0 38 e2 8b e8 17 db c2 fc 90 0f 0b 90 90 eb d7 e8 db 2c ff fc c6 05 04 cb c9 0a 01 90 48 c7 c7 20 39 e2 8b e8 f7 da c2 fc 90 <0f> 0b 90 90 eb b7 e8 bb 2c ff fc c6 05 e1 ca c9 0a 01 90 48 c7 c7 [ 300.335394][T12169] RSP: 0018:ffffc9000b9877d8 EFLAGS: 00010246 [ 300.342305][T12169] RAX: 50124e4db1aba500 RBX: 0000000000000003 RCX: ffff88802f595a00 [ 300.350671][T12169] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 300.359317][T12169] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 300.368427][T12169] R10: dffffc0000000000 R11: fffffbfff1bfaa44 R12: ffff88802ef0b800 [ 300.376796][T12169] R13: ffff888052d92860 R14: ffff888052d92878 R15: dffffc0000000000 [ 300.385872][T12169] ? refcount_warn_saturate+0x119/0x1d0 [ 300.391474][T12169] klist_dec_and_del+0x3c7/0x3d0 [ 300.397028][T12169] klist_remove+0x1bd/0x340 [ 300.401946][T12169] ? __pfx_klist_children_put+0x10/0x10 [ 300.407794][T12169] ? __pfx_klist_remove+0x10/0x10 [ 300.413406][T12169] ? __pfx_kobject_move+0x10/0x10 [ 300.418628][T12169] ? get_device_parent+0x366/0x3a0 [ 300.424212][T12169] device_move+0x193/0x700 [ 300.428947][T12169] hci_conn_del_sysfs+0xb8/0x170 [ 300.434206][T12169] hci_conn_del+0x8ff/0xcb0 [ 300.438741][T12169] hci_conn_hash_flush+0x191/0x230 [ 300.443975][T12169] hci_dev_close_sync+0xaef/0x1330 [ 300.449235][T12169] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 300.454923][T12169] ? up_write+0x1c4/0x420 [ 300.459368][T12169] hci_unregister_dev+0x206/0x500 [ 300.464783][T12169] vhci_release+0x80/0xd0 [ 300.469412][T12169] ? __pfx_vhci_release+0x10/0x10 [ 300.474744][T12169] __fput+0x449/0xa70 [ 300.479043][T12169] task_work_run+0x1d1/0x260 [ 300.484262][T12169] ? __pfx_task_work_run+0x10/0x10 [ 300.489676][T12169] ? kmem_cache_free+0x18f/0x400 [ 300.494662][T12169] do_exit+0x6ad/0x22e0 [ 300.499428][T12169] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 300.505178][T12169] ? __pfx_do_exit+0x10/0x10 [ 300.510250][T12169] ? _raw_spin_unlock_irq+0x23/0x50 [ 300.515736][T12169] ? lockdep_hardirqs_on+0x9c/0x150 [ 300.521418][T12169] do_group_exit+0x21c/0x2d0 [ 300.526335][T12169] __x64_sys_exit_group+0x3f/0x40 [ 300.531999][T12169] x64_sys_call+0x21ba/0x21c0 [ 300.536874][T12169] do_syscall_64+0xfa/0x3b0 [ 300.541546][T12169] ? lockdep_hardirqs_on+0x9c/0x150 [ 300.547294][T12169] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.554459][T12169] ? clear_bhb_loop+0x60/0xb0 [ 300.560008][T12169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.566441][T12169] RIP: 0033:0x7f5a0078e929 [ 300.571690][T12169] Code: Unable to access opcode bytes at 0x7f5a0078e8ff. [ 300.580230][T12169] RSP: 002b:00007fff62b6ec98 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 300.589798][T12169] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5a0078e929 [ 300.598496][T12169] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 300.607110][T12169] RBP: 00007f5a007ee8f0 R08: 00007fff62b6ca37 R09: 0000000000000003 [ 300.615823][T12169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.624013][T12169] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007fff62b6ee50 [ 300.633016][T12169] [ 300.637041][T12169] Kernel Offset: disabled [ 300.642223][T12169] Rebooting in 86400 seconds..