last executing test programs: 1m47.473047246s ago: executing program 3 (id=25): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x4c000000, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000400142603600e120800060000000401a800080008000a400400000004000461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="04000000", @ANYRES16=r3, @ANYBLOB="0100000000000000000002000000"], 0x14}}, 0x0) 1m32.396555369s ago: executing program 3 (id=25): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x4c000000, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000400142603600e120800060000000401a800080008000a400400000004000461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="04000000", @ANYRES16=r3, @ANYBLOB="0100000000000000000002000000"], 0x14}}, 0x0) 1m26.243259215s ago: executing program 1 (id=348): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @ipv4={'\x00', '\xff\xff', @broadcast}}]}}]}, 0x48}}, 0x8c000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000040)={0x2b, 0x3, '\x00', [@hao={0xc9, 0x10, @loopback}, @jumbo={0xc2, 0x4, 0x8f}]}, 0x20) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000012c0)=0x3, 0x4) sendmmsg$inet6(r0, &(0x7f0000005740)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x8, @empty, 0x9}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e20, 0xc, @loopback, 0x7}, 0x1c, &(0x7f0000000500), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="24000000000000002900000032000000fc000000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="000000002800000000000000290000000400000000010000000000000708000000000009010000000000000024000000000000002900fcb043550f00"/76, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x78}}], 0x2, 0x20044000) 1m25.717040409s ago: executing program 1 (id=352): r0 = socket$inet6(0xa, 0x80002, 0x88) socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000000)=0x14000, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@loopback}, {@in=@empty, 0x0, 0x32}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xaf}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x2, [0x0]}}]}, 0x158}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f00000021c0)=0x95) ppoll(&(0x7f0000000040)=[{r4, 0x858f}], 0x1, 0x0, 0x0, 0x0) close(r3) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x4, 0x4) sendmmsg$inet(r0, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x0) 1m13.19332574s ago: executing program 3 (id=25): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x4c000000, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000400142603600e120800060000000401a800080008000a400400000004000461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="04000000", @ANYRES16=r3, @ANYBLOB="0100000000000000000002000000"], 0x14}}, 0x0) 1m11.782945538s ago: executing program 1 (id=352): r0 = socket$inet6(0xa, 0x80002, 0x88) socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000000)=0x14000, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@loopback}, {@in=@empty, 0x0, 0x32}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xaf}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x2, [0x0]}}]}, 0x158}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f00000021c0)=0x95) ppoll(&(0x7f0000000040)=[{r4, 0x858f}], 0x1, 0x0, 0x0, 0x0) close(r3) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x4, 0x4) sendmmsg$inet(r0, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x0) 54.286793122s ago: executing program 3 (id=25): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x4c000000, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000400142603600e120800060000000401a800080008000a400400000004000461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="04000000", @ANYRES16=r3, @ANYBLOB="0100000000000000000002000000"], 0x14}}, 0x0) 53.112835021s ago: executing program 1 (id=352): r0 = socket$inet6(0xa, 0x80002, 0x88) socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000000)=0x14000, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@loopback}, {@in=@empty, 0x0, 0x32}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xaf}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x2, [0x0]}}]}, 0x158}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f00000021c0)=0x95) ppoll(&(0x7f0000000040)=[{r4, 0x858f}], 0x1, 0x0, 0x0, 0x0) close(r3) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x4, 0x4) sendmmsg$inet(r0, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x0) 35.326503745s ago: executing program 3 (id=25): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x4c000000, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000400142603600e120800060000000401a800080008000a400400000004000461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="04000000", @ANYRES16=r3, @ANYBLOB="0100000000000000000002000000"], 0x14}}, 0x0) 34.239011275s ago: executing program 1 (id=352): r0 = socket$inet6(0xa, 0x80002, 0x88) socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000000)=0x14000, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@loopback}, {@in=@empty, 0x0, 0x32}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xaf}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x2, [0x0]}}]}, 0x158}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f00000021c0)=0x95) ppoll(&(0x7f0000000040)=[{r4, 0x858f}], 0x1, 0x0, 0x0, 0x0) close(r3) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x4, 0x4) sendmmsg$inet(r0, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x0) 16.634951279s ago: executing program 3 (id=25): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x4c000000, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000400142603600e120800060000000401a800080008000a400400000004000461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="04000000", @ANYRES16=r3, @ANYBLOB="0100000000000000000002000000"], 0x14}}, 0x0) 15.436612423s ago: executing program 1 (id=352): r0 = socket$inet6(0xa, 0x80002, 0x88) socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000000)=0x14000, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@loopback}, {@in=@empty, 0x0, 0x32}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xaf}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x2, [0x0]}}]}, 0x158}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f00000021c0)=0x95) ppoll(&(0x7f0000000040)=[{r4, 0x858f}], 0x1, 0x0, 0x0, 0x0) close(r3) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x4, 0x4) sendmmsg$inet(r0, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x0) 1.764317412s ago: executing program 0 (id=892): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_ext={0x1c, 0x11, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ldst={0x0, 0x1, 0x1, 0xa, 0x8, 0x18}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='GPL\x00', 0x8, 0x49, &(0x7f0000000480)=""/73, 0x1f00, 0x8, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0xe, 0x2d47, 0x10001}, 0x10, 0x1292d, r2, 0x8, &(0x7f0000000540)=[0x1], &(0x7f0000000580)=[{0x4, 0x2, 0x6, 0x6}, {0x2, 0xd, 0xb, 0x7}, {0x2, 0x4, 0x8, 0x6}, {0x1, 0x2, 0xe, 0x2}, {0x1, 0x1, 0x4, 0x5}, {0x1, 0x1, 0xc, 0x3}, {0x2, 0x3, 0x9, 0xb}, {0x5, 0x2, 0x7}], 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64) socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000007f00010200000000feffffff0a0000000000000006000700030000001800088014000300fe8000b8a9dfa5eb4d62e80028b03afe9b948eb21b8fc2e139f4965fdd10bbd94ddd063fbeae269a5912b083017d11684be88a61374e609acfa8770ea66562c21b4e5f3f96181e103e4a5c2bf8dac44efda6de34d24211c06d6bc17d801313c964b52cae77abbd8ed26b6168477cb54f72066c31cb7b52489e4c53436534f345e080ca83e0b8f05bae2a38f0b9cfe3845e722b17aca7ebcc275af1e51249928ba856d06c5c7745ded073fbb439520c1605597b0a1ab7d76f3a9cbe3a4570523dfcff", @ANYRES32=r1, @ANYBLOB], 0x40}}, 0x40094) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, r7, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20004044) 1.628688747s ago: executing program 2 (id=893): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x17, 0x0, 0x8400, 0xfffffffd, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4000, 0xfffffffd, @loopback, 0x6}, 0x6e) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000), 0x4) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000080)={0x0, 0xd6a}, 0x8) (async) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000080)={0x0, 0xd6a}, 0x8) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000140)={0x6, 0x0}, 0x8) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={r4, 0x1cc4d}, 0xc) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000040)={r5, 0x0, 0x20000000}, 0x20) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000500)={r1, 0x0, 0x20000000}, 0x20) ioctl$PPPOEIOCSFWD(r0, 0x40047459, 0x0) (async) ioctl$PPPOEIOCSFWD(r0, 0x40047459, 0x0) 1.561370187s ago: executing program 4 (id=894): r0 = socket(0x2a, 0x2, 0x0) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$netlink(0x10, 0x3, 0x4) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x5c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x200}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0xf, "cd50054ef52a3ab0b05477f31001932f"}}}]}, 0x5c}}, 0x80) (async) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/net\x00') ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) (async, rerun: 64) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x58, 0x0, 0x1, 0x405, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0x4}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0x58}}, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.452003072s ago: executing program 2 (id=895): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f00000004c0)=@in6={0x21, 0x0, 0xa, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f00000003c0)=0x1) syz_emit_ethernet(0x42, &(0x7f00000006c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@generic={0x44, 0x2}]}}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x10, 0x0, 0x0, 0xd0a, 0x2c, 0x1, 0x0, @multicast1, @loopback}}}}}}, 0x0) 1.322430805s ago: executing program 0 (id=896): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x0, 0x1, [0x10]}, &(0x7f0000000080)=0xa) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)={r1, 0x6}, &(0x7f0000000100)=0x8) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000280)=0x200, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10) connect$inet(r2, &(0x7f0000000300)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0x4) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000100, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5421, &(0x7f00000000c0)=0x7) write$cgroup_int(r4, &(0x7f0000000140), 0xfffffdef) write$cgroup_subtree(r4, 0x0, 0x12) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f00000000c0)=r5, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x8, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff720af0fff8ffffff71a4f0ff000000002d040000000000003d400300000000006504000001ed000079110000000000006c440000000000007a0ab0fe000000007b13000000000000c500f9ffffff00009500000000000000023bc065b7a379d17cf9333379fc9e94af05000000f1a864a710aad58db6a693002e6b3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a715bc5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7a29aa0d7d600c095199fe3ff3128c4e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d0800af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d390dd65be2467b373eafd9aa58f2077184b6a89adaf17b0a6041bdef728d236619074d6ebdf098bc908f523d228a40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c5da18ec0ae564162a27afea62d84f3a10746443d64364f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b93d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6ffc3a15d96c2ea3e2e04cfe0e669e51731b2875353193f82ade69d0540059fe6c7fe7cd86975023cb08cc7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c5538a294270a1ad10c80fef7c24c87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e17fb1c1ca571380d7b4ead35a655e0b4a26b702396df7e0cbe02b6e4314f244a94aa8e98b0b263f0083bf93f05beb72f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba5823a34a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208165b9cdbae2ed9dc06000000000000008fe26e37037f27f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e05000000d03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d0a874c74b777df005c55fc30511d00000000c85265b2bd83d64a532869d708000000000000007baa5b6a682b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a56edbd287eba77f35c35d91f3c62a0ca74836a640224de85f2b4a5fee500bbc584328a6a7a4628c4378c9b71dff64075b74a6520adb187b40d2cccbcb08c0634ee74658d3e23bf2871ed2aa2a05e319374511c8b0bf1b69d2b3782b3f481c314e7bd4615dbbf24c06ac95bd639e68d0e6aa7f0d07bf69a93365f803f0144af37236ea133c2255b0613bf8ba1d538e06c2411e8d70053b712084fd0e313de9bb19266e49a3a2190cb039c6f89610acd896319b9c8d1b8aac2eaa5a4f8be7419a09e3fb5be3be2fcdadd2299839cc40e684e6e2b4e1385fde7a0babcb0be672110268a34dad364fddee69e564119cebb6940c6356ff83ca527c573d700000000000000c6299263e6d9097f225de969485bce3d7dc471c0669bb6a467cf0de54dfcc1857048fe22a19dbb1b3cb9babaa839f1f6e817a62d95a5b971ff96a5c66c338c6f2a2da4644519f40761402e9c81013d76c7152c95ba5efa24ce1930f23a2277f057ffb6b0144f3b434a2adc456ef4d2fbdf7c6238c2bb00ffcf2d23d68cb9b027f3b22589f7956b66c5692b46ea03abb6a404c8ccceaa4ba4161409fcb54b86eaca26b24464e0ff504b87c90697ec2a82bbfd1c31713190d3e6e502c434909d6ba06cd0361a0fd90552272f24519ea9938413947edd3a0a7aa780c1dcdddf13b46ca94f37c89664c9cc1857d64ca371fa1b6131"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x1d, r4, 0x8, &(0x7f0000000000)={0x9}, 0x8, 0x10, &(0x7f0000000000)={0x2, 0xffffffff}, 0x10, 0x0, r5, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x0, 0x1, [0x10]}, &(0x7f0000000080)=0xa) (async) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)={r1, 0x6}, &(0x7f0000000100)=0x8) (async) socket$inet(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) (async) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000280)=0x200, 0x4) (async) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10) (async) connect$inet(r2, &(0x7f0000000300)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0x4) (async) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000100, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) (async) pipe(&(0x7f0000000180)) (async) ioctl$int_in(r4, 0x5421, &(0x7f00000000c0)=0x7) (async) write$cgroup_int(r4, &(0x7f0000000140), 0xfffffdef) (async) write$cgroup_subtree(r4, 0x0, 0x12) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f00000000c0)=r5, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x8, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x1d, r4, 0x8, &(0x7f0000000000)={0x9}, 0x8, 0x10, &(0x7f0000000000)={0x2, 0xffffffff}, 0x10, 0x0, r5, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) 1.169190881s ago: executing program 0 (id=897): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_deladdr={0x2c, 0x15, 0x1, 0x70bd25, 0x25dfdbfc, {0xa, 0x3f, 0xa5, 0x1, r3}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x40000) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0x7fffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40021}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 1.04447704s ago: executing program 2 (id=898): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086602, &(0x7f0000000000)={0xfff}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000080)='wg0\x00', 0x4) connect$phonet_pipe(r1, &(0x7f0000000000)={0x23, 0xb, 0x8, 0x40}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="180000002d00010000000000bb0e00e304000080040019"], 0x18}], 0x10000075}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x8c, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'netdevsim0\x00'}}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf0}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x401, @remote, 0x8000}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7, @loopback}}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x9}, 0x40801) 924.670405ms ago: executing program 4 (id=899): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x9, &(0x7f0000000040)=0x6, 0x4) getsockopt$inet_tcp_int(r1, 0x6, 0x9, 0x0, &(0x7f00000002c0)) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x100000}, 0xc) unshare(0x12000800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x238}}, 0x0) socket$netlink(0x10, 0x3, 0xc) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x9, &(0x7f0000000040)=0x6, 0x4) (async) getsockopt$inet_tcp_int(r1, 0x6, 0x9, 0x0, &(0x7f00000002c0)) (async) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x100000}, 0xc) (async) unshare(0x12000800) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x238}}, 0x0) (async) 823.210496ms ago: executing program 2 (id=900): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r3, 0xfe12482fe0801d67, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc}, {0x8f}}]}, 0x54}}, 0x0) r4 = accept4(r1, &(0x7f0000000000)=@can, &(0x7f0000000080)=0x80, 0x80000) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff03c}, {0x6}]}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x34, r7, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x44}, 0x20000000) recvmmsg(r1, &(0x7f00000008c0)=[{{&(0x7f0000000200)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000300)=""/91, 0x5b}], 0x1, &(0x7f00000003c0)=""/210, 0xd2}, 0x7}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/100, 0x64}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/198, 0xc6}, {&(0x7f0000000740)=""/168, 0xa8}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000000800)=""/50, 0x32}, {&(0x7f0000002300)=""/4096, 0x1000}], 0x7, &(0x7f0000003300)=""/4096, 0x1000}, 0x200}], 0x2, 0x40000041, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r7, 0x100, 0x70bf25, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0xfffffffffffffecf}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_ACK_FILTER={0x8}]}}]}, 0x44}}, 0x0) 783.247809ms ago: executing program 4 (id=901): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xba}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x8000, 0x105, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 644.596273ms ago: executing program 0 (id=902): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004001000040122000b00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r1}, 0x38) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000e00)={'sit0\x00', {0x2, 0x0, @multicast2}}) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x3c, r2, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}}, 0x0) 532.621861ms ago: executing program 4 (id=903): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000000e40)=[{{0x0, 0xffffffffffffff72, &(0x7f00000000c0)=[{&(0x7f0000002740)=""/4097, 0x1001}, {&(0x7f00000001c0)=""/189, 0xbd}, {&(0x7f0000000000)=""/97, 0x56}, {&(0x7f0000000440)=""/223, 0xe2}, {&(0x7f0000000280)=""/140}], 0x1027}, 0x3}, {{0x0, 0x0, 0x0}, 0x1000}, {{0x0, 0x0, 0x0}, 0x50003}, {{&(0x7f0000000d40)=@nfc_llcp, 0x80, 0x0}, 0x80}], 0x4, 0x10160, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x8c, r1, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x78, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xf279}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x1, 0x1, 0x1, 0xdea5]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x46e}, @NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0x9, 0x8, 0x5, 0x947b, 0x3, 0x3, 0x6, 0x0, 0x100, 0x630]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x5, 0x96d]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3fc}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20008040}, 0x4044) 471.967472ms ago: executing program 2 (id=904): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0) (async) pipe(&(0x7f0000000140)) socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 302.708925ms ago: executing program 4 (id=905): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000340)={0x14, r1, 0x313, 0x0, 0x0, {0x2f}}, 0x14}}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x100) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x20, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004000) (async) syz_emit_ethernet(0xc0, &(0x7f00000001c0)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @dccp={{0x25, 0x4, 0x2, 0x15, 0xb2, 0x67, 0x0, 0x2, 0x21, 0x0, @private=0xa010101, @empty, {[@end, @lsrr={0x83, 0xb, 0xaa, [@broadcast, @multicast2]}, @generic={0x82, 0xa, "247b1ccfc445ebbb"}, @cipso={0x86, 0x5e, 0x2, [{0x0, 0xe, "0d795b81ffce51ed7b2e889f"}, {0x6, 0xd, "33bdaf3fd6ba204582f0e3"}, {0x2, 0xd, "16e41ef7101adf263c2e64"}, {0x5, 0xc, "9dc1389348f560de065e"}, {0x1, 0x9, "ac2b60c580adc2"}, {0x7, 0x2}, {0x2, 0x8, "3c4a143070fa"}, {0x1, 0x11, "f615ff597005fa3431f0667e59dfd5"}]}, @noop, @rr={0x7, 0xb, 0x6a, [@private=0xa010101, @loopback]}]}}, {{0x4e21, 0x4e21, 0x4, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, "a648cd", 0x8, "8a3194"}, "c54e5fa8e5efbca7ad65bb98a0f6"}}}}}, 0x0) (async) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r5, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x8000) (async) close(r5) (async, rerun: 32) sendmmsg$inet6(r2, &(0x7f0000000940)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x28}}], 0x1, 0x0) (rerun: 32) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) (async) sendmsg$nl_route(r6, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="240000001e000100000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="00000000060005"], 0x24}}, 0x0) (async, rerun: 32) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f00000000c0)=0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x2cb}, 0x0) (async, rerun: 32) r9 = socket(0x2d, 0x2, 0x0) (rerun: 32) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000000000)={r9}) (async, rerun: 32) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffb, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c) (async, rerun: 32) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000280)=r8) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x6}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x5c}}, 0x8000) 175.918634ms ago: executing program 0 (id=906): r0 = syz_init_net_socket$x25(0x3, 0x5, 0x3) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r2 = getpid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='signal_generate\x00', r3}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000200)=[{&(0x7f0000000080)='/', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r2, r4, 0x0, 0x2, &(0x7f00000000c0)='\xff\xff'}, 0x30) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000100)={r7, 0x671a}, 0x8) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e00010000000000"], 0xb8}}, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000001c0)={r7, 0xdd82, 0xd4}, &(0x7f0000000240)=0x8) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000180)) 173.659021ms ago: executing program 2 (id=907): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000012000501000000000000000028001a00000000000000000700000000000000007f000001000000000000000000000000000000d8"], 0x38}}, 0x0) syz_emit_ethernet(0x1d, &(0x7f0000000140)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @multicast, @void, {@llc={0x4, {@snap={0x1, 0x1, "6b80", "bea23e", 0x15, "d094514e2654"}}}}}, &(0x7f0000000180)={0x0, 0x3, [0x8b0, 0x94e, 0x9de, 0xda4]}) syz_emit_ethernet(0x46, &(0x7f0000000800)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cedd00", 0x10, 0x3a, 0xff, @remote={0xfe, 0xe0}, @mcast2, {[], @ndisc_ra={0x89}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="171c000000000000080020000200000008000500", @ANYRES32=r4, @ANYBLOB="0800795a3d000000b39591094118711bcfce2a9757b9c611f01eac30292b6af9b23bc513e30572b8c933533e5daa47f43b6f50bfd65cb39791804ede9d2f5da66eddcd50957aedce426a62f53a37bde396fa77bd9916f36d6d9a5bfd564e5757e7e4"], 0x38}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000004f00010000000000000000080001"], 0x1c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x1410, 0x200, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) 98.092441ms ago: executing program 4 (id=908): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000540)=""/72, 0x48}], 0x1, 0x9, 0x0) r2 = socket(0x11, 0xa, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180), r2) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000000)="240000001e005f80004000000000000002000000000000000000080008000100000000ff", 0x24) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000004000000000000000", @ANYRES32, @ANYBLOB="09000000000000000000000000000000000000002832b4ccd3573618d20154ca3ac8f3a861d68db96cdab76aa60900afcd1abbccfacbff7fcbdf7eca71b20fb77eb3f994b87f78cbdeaa4d9f282a711f758f19d5d0dc9fb8d1a7621a2e969b126683ba9e5661f830980e94b5", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000010000000500"/28], 0x50) 0s ago: executing program 0 (id=909): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000000c0)={@rand_addr=0x64010100, @broadcast, 0x1, 0x5, [@rand_addr=0x64010102, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x19}, @rand_addr=0x64010100, @rand_addr=0x64010101]}, 0x24) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r2, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x9}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) (async) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000000000000e92f", @ANYRES32=r3, @ANYBLOB], 0x28}}, 0x0) (async) socket$unix(0x1, 0x4, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xe0000000}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) (async) sendto$inet(r0, &(0x7f0000001040)="8932ed209b230927", 0x8, 0x6000c804, 0x0, 0x0) kernel console output (not intermixed with test programs): wg1: Could not create IPv4 socket [ 95.308660][ T2906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.364407][ T2906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.469815][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.495217][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.564170][ T2906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.585496][ T2906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.684903][ T1131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.720232][ T1131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.828198][ T5840] Bluetooth: hci2: command tx timeout [ 95.907715][ T5840] Bluetooth: hci3: command tx timeout [ 95.909793][ T55] Bluetooth: hci4: command tx timeout [ 95.913160][ T5840] Bluetooth: hci1: command tx timeout [ 95.989349][ T5840] Bluetooth: hci0: command tx timeout [ 96.174356][ T5975] netlink: 'syz.2.14': attribute type 11 has an invalid length. [ 96.195341][ T5979] netlink: 52 bytes leftover after parsing attributes in process `syz.0.16'. [ 96.358773][ T5989] Zero length message leads to an empty skb [ 96.810726][ T6009] netlink: 'syz.2.23': attribute type 10 has an invalid length. [ 96.884707][ T6009] vlan0: entered allmulticast mode [ 96.901215][ T6009] veth0_vlan: entered allmulticast mode [ 96.943195][ T6009] team0: Port device vlan0 added [ 97.259734][ T2208] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.362291][ T2208] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.513574][ T6026] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.659752][ T2208] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.825714][ T6036] syz.0.31 uses obsolete (PF_INET,SOCK_PACKET) [ 97.908500][ T30] audit: type=1107 audit(1747372452.231:2): pid=6038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='f#Gvf"בXM:Gİ`}Gg#T}Gg`' [ 97.980158][ T2208] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.206437][ T6036] syzkaller1: entered promiscuous mode [ 98.216677][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.225843][ T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.232941][ T6036] syzkaller1: entered allmulticast mode [ 98.243252][ T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.252673][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.261557][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.523992][ T2208] bridge_slave_1: left allmulticast mode [ 98.561331][ T2208] bridge_slave_1: left promiscuous mode [ 98.588150][ T2208] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.628617][ T2208] bridge_slave_0: left allmulticast mode [ 98.634317][ T2208] bridge_slave_0: left promiscuous mode [ 98.664973][ T2208] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.726589][ T6065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.35'. [ 98.740207][ T6064] netlink: 28 bytes leftover after parsing attributes in process `syz.4.36'. [ 98.766306][ T6065] netlink: 368 bytes leftover after parsing attributes in process `syz.0.35'. [ 99.251577][ T2208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.262975][ T2208] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.275926][ T2208] bond0 (unregistering): Released all slaves [ 99.292986][ T2208] bond1 (unregistering): Released all slaves [ 99.319438][ T6075] [H: renamed from veth0_vlan (while UP) [ 100.003196][ T6101] netlink: 52 bytes leftover after parsing attributes in process `syz.2.46'. [ 100.310036][ T5840] Bluetooth: hci1: command tx timeout [ 100.326343][ T6117] netlink: 12 bytes leftover after parsing attributes in process `syz.1.50'. [ 100.381027][ T6117] sch_tbf: burst 1458 is lower than device veth1 mtu (1514) ! [ 100.531623][ T6131] netlink: zone id is out of range [ 100.606306][ T2208] hsr_slave_0: left promiscuous mode [ 100.624656][ T2208] hsr_slave_1: left promiscuous mode [ 100.635956][ T2208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.667427][ T2208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.704462][ T6139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.53'. [ 100.715518][ T2208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.739930][ T2208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.781426][ T2208] veth1_macvtap: left promiscuous mode [ 100.787170][ T2208] veth0_macvtap: left promiscuous mode [ 100.793540][ T2208] veth1_vlan: left promiscuous mode [ 100.803662][ T2208] veth0_vlan: left promiscuous mode [ 101.237545][ T2208] team0 (unregistering): Port device team_slave_1 removed [ 101.265894][ T2208] team0 (unregistering): Port device team_slave_0 removed [ 101.441720][ T6154] netlink: 'syz.2.59': attribute type 1 has an invalid length. [ 101.457055][ T6154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.59'. [ 101.882369][ T6166] netlink: 36 bytes leftover after parsing attributes in process `syz.4.62'. [ 102.120839][ T6178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.61'. [ 102.202096][ T6160] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 102.387895][ T5840] Bluetooth: hci1: command tx timeout [ 102.545037][ T6194] netlink: 36 bytes leftover after parsing attributes in process `syz.0.67'. [ 102.683522][ T6050] chnl_net:caif_netlink_parms(): no params data found [ 102.864060][ T6210] netlink: 24 bytes leftover after parsing attributes in process `syz.2.70'. [ 103.135321][ T5840] block nbd0: Receive control failed (result -32) [ 103.327445][ T6050] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.359086][ T6231] netlink: 'syz.0.77': attribute type 10 has an invalid length. [ 103.377586][ T6050] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.379631][ T6235] netlink: 24 bytes leftover after parsing attributes in process `syz.4.76'. [ 103.387109][ T6231] netlink: 40 bytes leftover after parsing attributes in process `syz.0.77'. [ 103.415907][ T6050] bridge_slave_0: entered allmulticast mode [ 103.442609][ T6050] bridge_slave_0: entered promiscuous mode [ 103.464654][ T6234] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 103.620072][ T6231] team0: Port device geneve0 added [ 103.645171][ T6050] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.670033][ T6050] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.680452][ T6050] bridge_slave_1: entered allmulticast mode [ 103.688790][ T6050] bridge_slave_1: entered promiscuous mode [ 103.816112][ T6253] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.998110][ T6050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.185592][ T6050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.376066][ T6050] team0: Port device team_slave_0 added [ 104.406308][ T6050] team0: Port device team_slave_1 added [ 104.467335][ T5840] Bluetooth: hci1: command tx timeout [ 104.658190][ T6050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.667827][ T6050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.695205][ T6050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.726796][ T6050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.738392][ T6050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.771827][ T6050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.946351][ T6050] hsr_slave_0: entered promiscuous mode [ 104.955578][ T6050] hsr_slave_1: entered promiscuous mode [ 105.013598][ T6297] __nla_validate_parse: 1 callbacks suppressed [ 105.013617][ T6297] netlink: 36 bytes leftover after parsing attributes in process `syz.0.94'. [ 105.151507][ T6308] netlink: 20 bytes leftover after parsing attributes in process `syz.1.96'. [ 105.277013][ T6308] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 105.298333][ T6308] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.306882][ T6308] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.567971][ T6321] netlink: 16 bytes leftover after parsing attributes in process `syz.2.99'. [ 105.655002][ T6323] tipc: Enabling of bearer rejected, failed to enable media [ 105.682239][ T6316] netlink: 14528 bytes leftover after parsing attributes in process `syz.0.97'. [ 106.113852][ T6341] netlink: 16 bytes leftover after parsing attributes in process `syz.1.105'. [ 106.123830][ T6341] netlink: 6 bytes leftover after parsing attributes in process `syz.1.105'. [ 106.235872][ T6350] netlink: 'syz.0.108': attribute type 1 has an invalid length. [ 106.245192][ T6352] netlink: 'syz.1.109': attribute type 33 has an invalid length. [ 106.253641][ T6350] netlink: 'syz.0.108': attribute type 3 has an invalid length. [ 106.264564][ T6350] netlink: 224 bytes leftover after parsing attributes in process `syz.0.108'. [ 106.326730][ T6354] warning: `syz.1.109' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 106.547373][ T5840] Bluetooth: hci1: command tx timeout [ 106.713390][ T6367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.115'. [ 107.020134][ T6050] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 107.052102][ T6050] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 107.101618][ T6050] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 107.186201][ T6050] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 107.256940][ T6388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.119'. [ 107.299343][ T6394] trusted_key: syz.2.121 sent an empty control message without MSG_MORE. [ 107.340597][ T6388] macsec1: entered allmulticast mode [ 107.345961][ T6388] macvlan0: entered allmulticast mode [ 107.383592][ T6388] veth1_vlan: entered allmulticast mode [ 107.415827][ T6399] IPVS: stopping master sync thread 6402 ... [ 107.422477][ T6402] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 108.112911][ T6423] xt_TPROXY: Can be used only with -p tcp or -p udp [ 108.245983][ T6050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.268718][ T6050] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.291365][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.298555][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.363010][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.370289][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.540498][ T6432] netlink: 'syz.4.123': attribute type 5 has an invalid length. [ 108.934022][ T6454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.131'. [ 109.598638][ T6449] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 109.744161][ T6050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.989617][ T6050] veth0_vlan: entered promiscuous mode [ 110.065913][ T6485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.137'. [ 110.070379][ T6050] veth1_vlan: entered promiscuous mode [ 110.105285][ T6485] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 110.144427][ T6485] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.177113][ T6495] netlink: 12 bytes leftover after parsing attributes in process `syz.4.140'. [ 110.186462][ T5906] IPVS: starting estimator thread 0... [ 110.204145][ T6490] IPVS: ip_vs_edit_dest(): server weight less than zero [ 110.225048][ T6050] veth0_macvtap: entered promiscuous mode [ 110.241961][ T6496] netlink: 12 bytes leftover after parsing attributes in process `syz.4.140'. [ 110.273118][ T6050] veth1_macvtap: entered promiscuous mode [ 110.280917][ T6497] IPVS: using max 26 ests per chain, 62400 per kthread [ 110.398918][ T6050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.452188][ T6503] bridge_slave_0: default FDB implementation only supports local addresses [ 110.469417][ T6050] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.532846][ T6050] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.541705][ T6050] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.556454][ T6050] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.565489][ T6050] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.812822][ T6518] sit0: entered promiscuous mode [ 110.850441][ T6518] netlink: 'syz.1.144': attribute type 1 has an invalid length. [ 110.885061][ T6518] netlink: 1 bytes leftover after parsing attributes in process `syz.1.144'. [ 111.019744][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 111.073453][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.102588][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.161587][ T6530] netlink: 'syz.0.148': attribute type 10 has an invalid length. [ 111.208794][ T6530] bridge0: port 3(team0) entered blocking state [ 111.221874][ T6530] bridge0: port 3(team0) entered disabled state [ 111.228824][ T6530] team0: entered allmulticast mode [ 111.234523][ T6530] team_slave_0: entered allmulticast mode [ 111.266668][ T6530] team_slave_1: entered allmulticast mode [ 111.287394][ T6530] geneve0: entered allmulticast mode [ 111.295755][ T6530] team0: entered promiscuous mode [ 111.302852][ T6530] team_slave_0: entered promiscuous mode [ 111.319270][ T6530] team_slave_1: entered promiscuous mode [ 111.325333][ T6530] geneve0: entered promiscuous mode [ 111.378258][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.405153][ T6541] netlink: 'syz.0.150': attribute type 39 has an invalid length. [ 111.417382][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.564911][ T6541] veth0_macvtap: left promiscuous mode [ 111.742485][ T6542] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 111.768130][ T6547] net veth1_virt_wifi : renamed from virt_wifi0 [ 112.121622][ T6567] netlink: 44 bytes leftover after parsing attributes in process `syz.2.155'. [ 112.190507][ T6569] netlink: 12 bytes leftover after parsing attributes in process `syz.2.155'. [ 112.246678][ T2906] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.319790][ T6572] netlink: 32 bytes leftover after parsing attributes in process `syz.4.157'. [ 112.494001][ T2906] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.622458][ T6586] xt_TPROXY: Can be used only with -p tcp or -p udp [ 113.208834][ T2906] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.511110][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 113.519926][ T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 113.529131][ T6621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.167'. [ 113.538558][ T6628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.167'. [ 113.538629][ T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 113.560743][ T6621] netlink: 12 bytes leftover after parsing attributes in process `syz.0.167'. [ 113.574780][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 113.583034][ T2906] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.583814][ T6621] netlink: 'syz.0.167': attribute type 13 has an invalid length. [ 113.601942][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 113.610436][ T6628] netlink: 'syz.0.167': attribute type 13 has an invalid length. [ 113.815957][ T6639] xt_CT: You must specify a L4 protocol and not use inversions on it [ 114.002394][ T6650] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 114.433247][ T6656] bond1: entered promiscuous mode [ 114.447630][ T6656] bond1: entered allmulticast mode [ 114.455579][ T6656] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.733719][ T2906] bridge_slave_1: left allmulticast mode [ 114.772600][ T2906] bridge_slave_1: left promiscuous mode [ 114.799406][ T2906] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.842139][ T2906] bridge_slave_0: left allmulticast mode [ 114.872879][ T2906] bridge_slave_0: left promiscuous mode [ 114.890325][ T2906] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.230332][ T6709] __nla_validate_parse: 3 callbacks suppressed [ 115.230351][ T6709] netlink: 12 bytes leftover after parsing attributes in process `syz.4.186'. [ 115.376842][ T2906] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.388549][ T2906] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.402385][ T2906] bond0 (unregistering): Released all slaves [ 115.435868][ T6696] netlink: 'syz.2.183': attribute type 1 has an invalid length. [ 115.454031][ T6696] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 115.461667][ T6696] IPv6: NLM_F_CREATE should be set when creating new route [ 115.492289][ T6695] netlink: 'syz.2.183': attribute type 1 has an invalid length. [ 115.527482][ T6695] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 115.575688][ T6701] 8021q: adding VLAN 0 to HW filter on device bond2 [ 115.609451][ T6701] bond0: (slave bond2): Enslaving as an active interface with an up link [ 115.667909][ T5840] Bluetooth: hci1: command tx timeout [ 115.742680][ T6695] delete_channel: no stack [ 116.055430][ T6624] chnl_net:caif_netlink_parms(): no params data found [ 116.371371][ T2906] hsr_slave_0: left promiscuous mode [ 116.395069][ T2906] hsr_slave_1: left promiscuous mode [ 116.412872][ T2906] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.422157][ T2906] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.434486][ T2906] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.444383][ T2906] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.473583][ T2906] veth1_macvtap: left promiscuous mode [ 116.479415][ T2906] veth0_macvtap: left promiscuous mode [ 116.485121][ T2906] veth1_vlan: left promiscuous mode [ 116.490891][ T2906] veth0_vlan: left promiscuous mode [ 117.103866][ T2906] team0 (unregistering): Port device team_slave_1 removed [ 117.138089][ T2906] team0 (unregistering): Port device team_slave_0 removed [ 117.476509][ T6748] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 117.512057][ T6748] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.519959][ T6748] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.747484][ T5840] Bluetooth: hci1: command tx timeout [ 117.793870][ T6775] netlink: 28 bytes leftover after parsing attributes in process `syz.4.203'. [ 118.039183][ T6624] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.050055][ T6624] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.064454][ T6624] bridge_slave_0: entered allmulticast mode [ 118.082796][ T6786] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 118.102262][ T6624] bridge_slave_0: entered promiscuous mode [ 118.156149][ T6624] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.184229][ T6624] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.199900][ T6624] bridge_slave_1: entered allmulticast mode [ 118.208206][ T6624] bridge_slave_1: entered promiscuous mode [ 118.215671][ T6763] netlink: 'syz.1.200': attribute type 4 has an invalid length. [ 118.359587][ T6802] netlink: 'syz.2.209': attribute type 10 has an invalid length. [ 118.416928][ T6624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.428533][ T6799] netlink: 4 bytes leftover after parsing attributes in process `syz.4.210'. [ 118.561879][ T6802] team0: Device veth0_macvtap failed to register rx_handler [ 118.599215][ T6624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.825033][ T6810] netlink: 'syz.4.211': attribute type 4 has an invalid length. [ 118.940791][ T6624] team0: Port device team_slave_0 added [ 119.016353][ T6624] team0: Port device team_slave_1 added [ 119.242630][ T6624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.261767][ T6624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.330940][ T6624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.408029][ T6624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.431914][ T6624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.475334][ T6624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.589184][ T6624] hsr_slave_0: entered promiscuous mode [ 119.623805][ T6624] hsr_slave_1: entered promiscuous mode [ 119.664134][ T6844] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 119.692321][ T6846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.222'. [ 119.724253][ T6846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.222'. [ 119.745390][ T6846] netlink: 4 bytes leftover after parsing attributes in process `syz.1.222'. [ 119.827369][ T5840] Bluetooth: hci1: command tx timeout [ 120.149911][ T6856] netlink: 12 bytes leftover after parsing attributes in process `syz.0.226'. [ 120.656595][ T6879] geneve1: entered promiscuous mode [ 120.658002][ T6886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.234'. [ 120.680945][ T6879] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 120.716851][ T6885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.234'. [ 121.439858][ T6920] tipc: Started in network mode [ 121.477437][ T6920] tipc: Node identity , cluster identity 4711 [ 121.535240][ T6925] netlink: 'syz.2.240': attribute type 10 has an invalid length. [ 121.640139][ T6925] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 121.668082][ T6925] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 121.741579][ T6624] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 121.907626][ T5840] Bluetooth: hci1: command tx timeout [ 122.401003][ T6624] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 122.562601][ T6947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.246'. [ 122.620285][ T6953] vti0: entered promiscuous mode [ 122.649271][ T6957] netlink: 12 bytes leftover after parsing attributes in process `syz.0.248'. [ 122.690813][ T6624] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 122.772803][ T6624] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 123.096846][ T6981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.254'. [ 123.179022][ T6981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.254'. [ 123.784532][ T6624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.880450][ T6624] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.934410][ T3492] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.942093][ T3492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.003558][ T2208] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.010797][ T2208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.040984][ T7021] tipc: Started in network mode [ 124.050654][ T7021] tipc: Node identity a21a92b6799, cluster identity 4711 [ 124.060118][ T7021] tipc: Enabled bearer , priority 0 [ 124.076047][ T7022] syzkaller0: entered promiscuous mode [ 124.090748][ T7024] netlink: 156 bytes leftover after parsing attributes in process `syz.0.264'. [ 124.091167][ T7022] syzkaller0: entered allmulticast mode [ 124.154255][ T7022] tipc: Resetting bearer [ 124.259638][ T7028] tipc: Resetting bearer [ 124.311203][ T7028] tipc: Disabling bearer [ 124.609089][ T7040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.267'. [ 124.677620][ T7040] netlink: 21 bytes leftover after parsing attributes in process `syz.0.267'. [ 124.806756][ T7047] netlink: 4 bytes leftover after parsing attributes in process `syz.4.269'. [ 124.844917][ T6624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.869052][ T7047] netlink: 'syz.4.269': attribute type 29 has an invalid length. [ 125.193172][ T6624] veth0_vlan: entered promiscuous mode [ 125.240734][ T6624] veth1_vlan: entered promiscuous mode [ 125.401321][ T6624] veth0_macvtap: entered promiscuous mode [ 125.467612][ T6624] veth1_macvtap: entered promiscuous mode [ 125.516804][ T6624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.532835][ T6624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.625152][ T6624] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.665429][ T6624] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.707359][ T6624] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.732988][ T6624] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.944917][ T7096] netlink: 64 bytes leftover after parsing attributes in process `syz.1.283'. [ 125.993616][ T7098] xt_cluster: you have exceeded the maximum number of cluster nodes (257 > 32) [ 126.137533][ T7107] openvswitch: netlink: Duplicate or invalid key (type 0). [ 126.144836][ T7107] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.178521][ T2208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.215651][ T2208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.348833][ T1131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.367595][ T7114] tls_set_device_offload: netdev not found [ 126.375130][ T1131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.242751][ T7149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.296'. [ 127.314216][ T3492] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.506667][ T3492] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.630301][ T3492] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.873537][ T3492] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.949575][ T7179] netlink: 'syz.0.303': attribute type 13 has an invalid length. [ 128.069177][ T7186] netlink: 'syz.1.306': attribute type 11 has an invalid length. [ 128.077004][ T7186] netlink: 'syz.1.306': attribute type 11 has an invalid length. [ 128.117762][ T7186] netlink: 224 bytes leftover after parsing attributes in process `syz.1.306'. [ 128.319608][ T7193] x_tables: duplicate underflow at hook 3 [ 128.399653][ T7195] netlink: 'syz.4.308': attribute type 2 has an invalid length. [ 128.447881][ T7195] netlink: 'syz.4.308': attribute type 1 has an invalid length. [ 128.455587][ T7195] netlink: 'syz.4.308': attribute type 2 has an invalid length. [ 128.542403][ T3492] bridge_slave_1: left allmulticast mode [ 128.573422][ T3492] bridge_slave_1: left promiscuous mode [ 128.594949][ T3492] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.658181][ T3492] bridge_slave_0: left allmulticast mode [ 128.697441][ T3492] bridge_slave_0: left promiscuous mode [ 128.717554][ T3492] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.798466][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 128.815482][ T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 128.827569][ T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 128.840271][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 128.850996][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 129.018965][ T10] IPVS: starting estimator thread 0... [ 129.117525][ T7229] IPVS: using max 29 ests per chain, 69600 per kthread [ 129.529380][ T3492] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.541261][ T3492] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.555370][ T3492] bond0 (unregistering): Released all slaves [ 129.585127][ T7219] netlink: 2 bytes leftover after parsing attributes in process `syz.1.314'. [ 129.676330][ T7236] netlink: 156 bytes leftover after parsing attributes in process `syz.2.318'. [ 129.726653][ T7236] netlink: 156 bytes leftover after parsing attributes in process `syz.2.318'. [ 129.861793][ T7249] bridge0: port 4(veth1_vlan) entered blocking state [ 129.888160][ T7249] bridge0: port 4(veth1_vlan) entered disabled state [ 130.194291][ T7261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.324'. [ 130.304209][ T3492] hsr_slave_0: left promiscuous mode [ 130.351001][ T3492] hsr_slave_1: left promiscuous mode [ 130.367161][ T3492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.375288][ T3492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.390332][ T3492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.399028][ T3492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.488085][ T3492] veth1_macvtap: left promiscuous mode [ 130.514158][ T3492] veth0_macvtap: left promiscuous mode [ 130.524407][ T3492] veth1_vlan: left promiscuous mode [ 130.541364][ T3492] veth0_vlan: left promiscuous mode [ 130.953337][ T5840] Bluetooth: hci1: command tx timeout [ 131.462943][ T3492] team0 (unregistering): Port device team_slave_1 removed [ 131.501935][ T3492] team0 (unregistering): Port device team_slave_0 removed [ 131.822269][ T7277] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.909745][ T7294] netlink: 24 bytes leftover after parsing attributes in process `syz.4.332'. [ 131.926490][ T7277] bridge_slave_0 (unregistering): left allmulticast mode [ 131.936419][ T7277] bridge_slave_0 (unregistering): left promiscuous mode [ 131.947131][ T7277] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.147695][ T7300] Bluetooth: MGMT ver 1.23 [ 132.212269][ T7305] netlink: 256 bytes leftover after parsing attributes in process `syz.4.334'. [ 132.632472][ T7322] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 132.713050][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.738134][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.947544][ T7212] chnl_net:caif_netlink_parms(): no params data found [ 133.033279][ T5840] Bluetooth: hci1: command tx timeout [ 133.074498][ T7343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.343'. [ 133.695952][ T7362] netlink: 12 bytes leftover after parsing attributes in process `syz.4.349'. [ 133.730194][ T7212] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.746076][ T7212] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.762532][ T7212] bridge_slave_0: entered allmulticast mode [ 133.779602][ T7212] bridge_slave_0: entered promiscuous mode [ 133.821622][ T7212] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.840495][ T7212] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.891128][ T7212] bridge_slave_1: entered allmulticast mode [ 133.928952][ T7212] bridge_slave_1: entered promiscuous mode [ 133.945876][ T7375] delete_channel: no stack [ 133.995262][ T7212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.052866][ T64] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.113690][ T7212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.124746][ T7375] netlink: 'syz.4.353': attribute type 1 has an invalid length. [ 134.147725][ T7375] netlink: 'syz.4.353': attribute type 3 has an invalid length. [ 134.167703][ T7375] netlink: 224 bytes leftover after parsing attributes in process `syz.4.353'. [ 134.350374][ T64] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.410411][ T7212] team0: Port device team_slave_0 added [ 134.446419][ T7212] team0: Port device team_slave_1 added [ 134.538081][ T64] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.619350][ T7393] netlink: 8 bytes leftover after parsing attributes in process `syz.4.356'. [ 134.637768][ T7393] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.658678][ T7393] netlink: 'syz.4.356': attribute type 7 has an invalid length. [ 134.707027][ T64] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.758301][ T7393] : entered promiscuous mode [ 134.771024][ T7212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.783750][ T7212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.811334][ T7399] netlink: 40 bytes leftover after parsing attributes in process `syz.0.358'. [ 134.816693][ T7212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.835072][ T7212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.842516][ T7212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.876868][ T7212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.002945][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 135.012395][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 135.021414][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 135.039560][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 135.058808][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 135.069024][ T7212] hsr_slave_0: entered promiscuous mode [ 135.085397][ T7212] hsr_slave_1: entered promiscuous mode [ 135.107874][ T5840] Bluetooth: hci1: command tx timeout [ 135.350063][ T7416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.360'. [ 135.378482][ T7416] netlink: 20 bytes leftover after parsing attributes in process `syz.2.360'. [ 135.481100][ T64] bridge_slave_1: left allmulticast mode [ 135.489296][ T64] bridge_slave_1: left promiscuous mode [ 135.497273][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.513114][ T64] bridge_slave_0: left allmulticast mode [ 135.520890][ T64] bridge_slave_0: left promiscuous mode [ 135.526725][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.988164][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.004775][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.015428][ T64] bond0 (unregistering): Released all slaves [ 136.101361][ T64] bond1 (unregistering): Released all slaves [ 136.142094][ T7423] lo: entered promiscuous mode [ 136.159857][ T7423] tunl0: entered promiscuous mode [ 136.186632][ T7423] gre0: entered promiscuous mode [ 136.249530][ T7423] gretap0: entered promiscuous mode [ 136.458287][ T7423] erspan0: entered promiscuous mode [ 136.466453][ T7423] ip_vti0: entered promiscuous mode [ 136.695591][ T64] tipc: Left network mode [ 136.832860][ T7448] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 136.845889][ T7448] netlink: 'syz.4.367': attribute type 13 has an invalid length. [ 136.854509][ T7448] netlink: 40 bytes leftover after parsing attributes in process `syz.4.367'. [ 136.906144][ T7448] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len [ 137.075943][ T7458] netlink: 28 bytes leftover after parsing attributes in process `syz.4.369'. [ 137.107688][ T5840] Bluetooth: hci0: command tx timeout [ 137.187751][ T5840] Bluetooth: hci1: command tx timeout [ 137.478475][ T64] hsr_slave_0: left promiscuous mode [ 137.507636][ T64] hsr_slave_1: left promiscuous mode [ 137.513616][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.553533][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.598511][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.626334][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.709923][ T64] veth1_macvtap: left promiscuous mode [ 137.736545][ T64] veth0_macvtap: left promiscuous mode [ 137.762514][ T64] veth1_vlan: left promiscuous mode [ 137.777593][ T64] veth0_vlan: left promiscuous mode [ 138.307132][ T7498] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 138.586886][ T64] team0 (unregistering): Port device team_slave_1 removed [ 138.622204][ T64] team0 (unregistering): Port device team_slave_0 removed [ 139.027074][ T7497] vxcan1 speed is unknown, defaulting to 1000 [ 139.095413][ T7497] vxcan1 speed is unknown, defaulting to 1000 [ 139.197676][ T5840] Bluetooth: hci0: command tx timeout [ 139.245945][ T7510] netlink: 156 bytes leftover after parsing attributes in process `syz.0.378'. [ 139.274625][ T7497] vxcan1 speed is unknown, defaulting to 1000 [ 139.291770][ T7401] chnl_net:caif_netlink_parms(): no params data found [ 139.428190][ T7510] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-xor(2) [ 139.552495][ T7515] netem: incorrect ge model size [ 139.558486][ T7515] netem: change failed [ 139.785070][ T7497] infiniband syz2: set active [ 139.794881][ T7497] infiniband syz2: added vxcan1 [ 139.802035][ T7497] syz2: rxe_create_cq: returned err = -12 [ 139.808410][ T7497] infiniband syz2: Couldn't create ib_mad CQ [ 139.814639][ T7497] infiniband syz2: Couldn't open port 1 [ 139.935531][ T7497] RDS/IB: syz2: added [ 139.951747][ T7497] smc: adding ib device syz2 with port count 1 [ 139.958840][ T5925] vxcan1 speed is unknown, defaulting to 1000 [ 139.959024][ T7401] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.976276][ T7497] smc: ib device syz2 port 1 has pnetid [ 139.985941][ T7401] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.035771][ T7401] bridge_slave_0: entered allmulticast mode [ 140.049811][ T7401] bridge_slave_0: entered promiscuous mode [ 140.072142][ T5925] vxcan1 speed is unknown, defaulting to 1000 [ 140.075702][ T7401] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.094226][ T7401] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.114668][ T7401] bridge_slave_1: entered allmulticast mode [ 140.123343][ T7401] bridge_slave_1: entered promiscuous mode [ 140.164504][ T7497] vxcan1 speed is unknown, defaulting to 1000 [ 140.331800][ T7401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.359468][ T7401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.563629][ T7549] netlink: 'syz.0.386': attribute type 11 has an invalid length. [ 140.576382][ T7401] team0: Port device team_slave_0 added [ 140.601956][ T7401] team0: Port device team_slave_1 added [ 140.618042][ T7212] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 140.692990][ T7212] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 140.711266][ T7401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.737807][ T7401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.787596][ T7401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.807927][ T7212] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 140.830844][ T7212] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 140.857558][ T7401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.864571][ T7401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.890771][ T7401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.912912][ T7497] vxcan1 speed is unknown, defaulting to 1000 [ 141.022012][ T7554] syzkaller1: entered promiscuous mode [ 141.068353][ T7401] hsr_slave_0: entered promiscuous mode [ 141.075283][ T7401] hsr_slave_1: entered promiscuous mode [ 141.082982][ T7401] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.091489][ T7401] Cannot create hsr debugfs directory [ 141.103130][ T7558] netlink: 'syz.4.388': attribute type 1 has an invalid length. [ 141.120899][ T7558] netlink: 220 bytes leftover after parsing attributes in process `syz.4.388'. [ 141.157931][ T7554] IPv6: Can't replace route, no match found [ 141.267887][ T5840] Bluetooth: hci0: command tx timeout [ 141.491486][ T7497] vxcan1 speed is unknown, defaulting to 1000 [ 141.958554][ T7212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.136519][ T7212] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.173293][ T3492] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.180526][ T3492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.235998][ T7497] vxcan1 speed is unknown, defaulting to 1000 [ 142.304660][ T3492] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.311949][ T3492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.372179][ T7585] netlink: 'syz.0.394': attribute type 62 has an invalid length. [ 142.527643][ T7401] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 142.620582][ T7401] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 142.663595][ T7574] syzkaller1: entered promiscuous mode [ 142.669351][ T7574] syzkaller1: entered allmulticast mode [ 142.686970][ T7583] netlink: 16 bytes leftover after parsing attributes in process `syz.4.393'. [ 142.708727][ T7401] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 142.845083][ T7401] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 142.878260][ T7497] vxcan1 speed is unknown, defaulting to 1000 [ 143.273344][ T7401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.339026][ T7401] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.348309][ T5840] Bluetooth: hci0: command tx timeout [ 143.356823][ T7607] IPVS: set_ctl: invalid protocol: 92 10.1.1.1:20004 [ 143.403230][ T2208] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.410503][ T2208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.480704][ T2208] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.487980][ T2208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.531528][ T7610] netlink: 'syz.4.398': attribute type 1 has an invalid length. [ 143.613624][ T7610] 8021q: adding VLAN 0 to HW filter on device bond2 [ 143.639050][ T7497] vxcan1 speed is unknown, defaulting to 1000 [ 143.672551][ T7612] bond2: (slave veth3): Enslaving as an active interface with a down link [ 143.721330][ T7610] bond2: (slave veth0_to_bond): making interface the new active one [ 143.732237][ T7610] veth0_to_bond: entered promiscuous mode [ 143.738509][ T7610] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 143.760389][ T7212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.800735][ T7612] bond2: (slave veth5): Enslaving as an active interface with a down link [ 144.121049][ T7212] veth0_vlan: entered promiscuous mode [ 144.171092][ T7212] veth1_vlan: entered promiscuous mode [ 144.281865][ T7212] veth0_macvtap: entered promiscuous mode [ 144.323849][ T7212] veth1_macvtap: entered promiscuous mode [ 144.396200][ T7212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.459488][ T7212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.500999][ T7212] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.528291][ T7212] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.557892][ T7212] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.572488][ T7631] netlink: 'syz.4.401': attribute type 1 has an invalid length. [ 144.577462][ T7212] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.603836][ T7631] netlink: 'syz.4.401': attribute type 10 has an invalid length. [ 144.628044][ T7631] netlink: 236 bytes leftover after parsing attributes in process `syz.4.401'. [ 144.752830][ T7634] netlink: 'syz.2.403': attribute type 30 has an invalid length. [ 144.774839][ T7634] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.784033][ T7634] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.793749][ T7634] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.803659][ T7634] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.841433][ T7634] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.850511][ T7634] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.859741][ T7634] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.869164][ T7634] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.041167][ T7401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.378056][ T3492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.392492][ T7401] veth0_vlan: entered promiscuous mode [ 145.406905][ T3492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.493372][ T7401] veth1_vlan: entered promiscuous mode [ 145.589999][ T3492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.627527][ T3492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.668926][ T7401] veth0_macvtap: entered promiscuous mode [ 145.731825][ T7401] veth1_macvtap: entered promiscuous mode [ 145.796289][ T7401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.843039][ T7401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.877163][ T7401] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.896010][ T7401] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.947295][ T7401] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.956053][ T7401] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.004501][ T7673] netlink: 'syz.4.412': attribute type 1 has an invalid length. [ 146.124142][ T7673] 8021q: adding VLAN 0 to HW filter on device bond3 [ 146.256509][ T7673] veth7: entered promiscuous mode [ 146.312342][ T7673] bond3: (slave veth7): Enslaving as an active interface with a down link [ 146.395763][ T7675] bond3: (slave geneve2): making interface the new active one [ 146.446699][ T7675] geneve2: entered promiscuous mode [ 146.477045][ T7675] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 146.545044][ T7679] vlan1: entered allmulticast mode [ 146.558495][ T7679] bond3: entered allmulticast mode [ 146.563684][ T7679] geneve2: entered allmulticast mode [ 146.597409][ T7679] bond3: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 146.742203][ T53] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.862459][ T53] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.943096][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.966765][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.007827][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.015713][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.052866][ T53] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.228696][ T7705] netlink: 'syz.4.418': attribute type 21 has an invalid length. [ 147.248969][ T7706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.416'. [ 147.342592][ T53] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.413394][ T7713] netlink: 'syz.0.416': attribute type 4 has an invalid length. [ 147.432470][ T7705] netlink: 132 bytes leftover after parsing attributes in process `syz.4.418'. [ 147.454356][ T7714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.419'. [ 147.799942][ T7720] xt_CT: You must specify a L4 protocol and not use inversions on it [ 147.811064][ T7722] netlink: 'syz.0.422': attribute type 10 has an invalid length. [ 147.901098][ T7722] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 148.051220][ T53] bridge_slave_1: left allmulticast mode [ 148.056968][ T53] bridge_slave_1: left promiscuous mode [ 148.079821][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.132428][ T53] bridge_slave_0: left allmulticast mode [ 148.138327][ T53] bridge_slave_0: left promiscuous mode [ 148.144201][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.191288][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 148.202120][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 148.210638][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 148.220872][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 148.232175][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 148.771311][ T7749] netlink: 14 bytes leftover after parsing attributes in process `syz.4.424'. [ 149.246303][ T7767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.427'. [ 149.383386][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 149.394568][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 149.405709][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 149.424726][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 149.435129][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 149.446681][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.481496][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.493162][ T53] bond0 (unregistering): Released all slaves [ 149.662547][ T7776] netlink: 12 bytes leftover after parsing attributes in process `syz.0.428'. [ 149.775820][ T7749] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.793294][ T7749] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.810890][ T7749] bond0 (unregistering): Released all slaves [ 150.039207][ T64] bond2: (slave veth0_to_bond): link status definitely down, disabling slave [ 150.063726][ T64] veth0_to_bond: left promiscuous mode [ 150.083230][ T64] bond2: now running without any active interface! [ 150.186438][ T7733] vxcan1 speed is unknown, defaulting to 1000 [ 150.317371][ T5840] Bluetooth: hci0: command tx timeout [ 150.647451][ T7813] netem: change failed [ 150.836900][ T7770] vxcan1 speed is unknown, defaulting to 1000 [ 150.944227][ T7828] netlink: 'syz.2.438': attribute type 29 has an invalid length. [ 151.016665][ T7834] netlink: 'syz.2.438': attribute type 29 has an invalid length. [ 151.041404][ T7828] netlink: 492 bytes leftover after parsing attributes in process `syz.2.438'. [ 151.223214][ T7844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.441'. [ 151.284527][ T7850] netlink: 12 bytes leftover after parsing attributes in process `syz.4.441'. [ 151.507394][ T5840] Bluetooth: hci1: command tx timeout [ 151.641742][ T7860] netlink: 76 bytes leftover after parsing attributes in process `syz.2.442'. [ 151.941039][ T7875] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 152.153400][ T53] hsr_slave_0: left promiscuous mode [ 152.163256][ T7886] netlink: 12 bytes leftover after parsing attributes in process `syz.2.445'. [ 152.174232][ T53] hsr_slave_1: left promiscuous mode [ 152.178609][ T7886] netlink: 216 bytes leftover after parsing attributes in process `syz.2.445'. [ 152.181793][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.195962][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.207907][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.215514][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.248345][ T53] veth1_macvtap: left promiscuous mode [ 152.253951][ T53] veth0_macvtap: left promiscuous mode [ 152.264470][ T53] veth1_vlan: left promiscuous mode [ 152.270721][ T53] veth0_vlan: left promiscuous mode [ 152.387623][ T5840] Bluetooth: hci0: command tx timeout [ 152.682671][ T53] team0 (unregistering): Port device team_slave_1 removed [ 152.720780][ T53] team0 (unregistering): Port device team_slave_0 removed [ 153.032376][ T7733] chnl_net:caif_netlink_parms(): no params data found [ 153.362671][ T7903] macvlan0: mtu less than device minimum [ 153.586024][ T7733] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.594066][ T5840] Bluetooth: hci1: command tx timeout [ 153.616481][ T7733] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.637002][ T7733] bridge_slave_0: entered allmulticast mode [ 153.648908][ T7733] bridge_slave_0: entered promiscuous mode [ 153.691025][ T7923] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 153.726757][ T7733] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.734364][ T7733] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.742069][ T7733] bridge_slave_1: entered allmulticast mode [ 153.750542][ T7733] bridge_slave_1: entered promiscuous mode [ 153.857097][ T7928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.455'. [ 153.919692][ T7932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.455'. [ 153.963224][ T7733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.006259][ T7932] netlink: 'syz.0.455': attribute type 1 has an invalid length. [ 154.029953][ T7932] netlink: 'syz.0.455': attribute type 2 has an invalid length. [ 154.067988][ T7733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.178211][ T7770] chnl_net:caif_netlink_parms(): no params data found [ 154.344372][ T7733] team0: Port device team_slave_0 added [ 154.371018][ T7947] xfrm0 speed is unknown, defaulting to 1000 [ 154.424955][ T7949] dvmrp0: entered allmulticast mode [ 154.435065][ T7733] team0: Port device team_slave_1 added [ 154.442670][ T7947] xfrm0 speed is unknown, defaulting to 1000 [ 154.468993][ T5840] Bluetooth: hci0: command tx timeout [ 154.493077][ T53] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.669912][ T7947] xfrm0 speed is unknown, defaulting to 1000 [ 154.705791][ T7947] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 154.729586][ T7947] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 154.781624][ T53] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.841761][ T7770] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.861581][ T7770] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.872036][ T7770] bridge_slave_0: entered allmulticast mode [ 154.882338][ T7770] bridge_slave_0: entered promiscuous mode [ 154.900571][ T7733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.914464][ T7733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.946938][ T7733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.963055][ T7947] xfrm0 speed is unknown, defaulting to 1000 [ 154.986042][ T53] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.002770][ T7770] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.010447][ T7770] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.018398][ T7770] bridge_slave_1: entered allmulticast mode [ 155.026383][ T7770] bridge_slave_1: entered promiscuous mode [ 155.049692][ T53] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.070818][ T7733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.078474][ T7733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.111245][ T7733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.151617][ T7947] xfrm0 speed is unknown, defaulting to 1000 [ 155.188124][ T7947] xfrm0 speed is unknown, defaulting to 1000 [ 155.234387][ T7770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.246683][ T7947] xfrm0 speed is unknown, defaulting to 1000 [ 155.251906][ T7770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.332401][ T7947] xfrm0 speed is unknown, defaulting to 1000 [ 155.359900][ T7733] hsr_slave_0: entered promiscuous mode [ 155.366747][ T7733] hsr_slave_1: entered promiscuous mode [ 155.429725][ T7947] xfrm0 speed is unknown, defaulting to 1000 [ 155.434869][ T7770] team0: Port device team_slave_0 added [ 155.598532][ T7770] team0: Port device team_slave_1 added [ 155.667308][ T5840] Bluetooth: hci1: command tx timeout [ 155.892937][ T7985] netlink: 104 bytes leftover after parsing attributes in process `syz.0.470'. [ 155.902694][ T7770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.902715][ T7770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.902768][ T7770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.904967][ T7770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.965716][ T7770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.997657][ T7770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.013990][ T7985] netlink: 12 bytes leftover after parsing attributes in process `syz.0.470'. [ 156.082989][ T7986] netlink: 132 bytes leftover after parsing attributes in process `syz.0.470'. [ 156.098422][ T53] bridge_slave_1: left allmulticast mode [ 156.104141][ T53] bridge_slave_1: left promiscuous mode [ 156.120233][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.180027][ T53] bridge_slave_0: left allmulticast mode [ 156.185758][ T53] bridge_slave_0: left promiscuous mode [ 156.225136][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.298836][ T7994] netlink: 16 bytes leftover after parsing attributes in process `syz.2.471'. [ 156.550820][ T5840] Bluetooth: hci0: command tx timeout [ 156.874424][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.890039][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.902794][ T53] bond0 (unregistering): Released all slaves [ 157.223602][ T8023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.477'. [ 157.237607][ T8023] netlink: 'syz.0.477': attribute type 3 has an invalid length. [ 157.300653][ T7770] hsr_slave_0: entered promiscuous mode [ 157.315841][ T7770] hsr_slave_1: entered promiscuous mode [ 157.316433][ T8029] netlink: 'syz.2.478': attribute type 21 has an invalid length. [ 157.333090][ T7770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.358101][ T7770] Cannot create hsr debugfs directory [ 157.392132][ T8036] sctp: [Deprecated]: syz.0.479 (pid 8036) Use of int in max_burst socket option. [ 157.392132][ T8036] Use struct sctp_assoc_value instead [ 157.613687][ T8042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.481'. [ 157.688286][ T8045] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.481'. [ 157.753648][ T5840] Bluetooth: hci1: command tx timeout [ 158.093864][ T8056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.121433][ T8056] batadv_slave_0: entered promiscuous mode [ 158.583620][ T8080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.488'. [ 158.601063][ T53] hsr_slave_0: left promiscuous mode [ 158.622573][ T53] hsr_slave_1: left promiscuous mode [ 158.652591][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.682755][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.707682][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.723602][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.790638][ T53] veth1_macvtap: left promiscuous mode [ 158.797082][ T53] veth0_macvtap: left promiscuous mode [ 158.827915][ T53] veth1_vlan: left promiscuous mode [ 158.833506][ T53] veth0_vlan: left promiscuous mode [ 159.003544][ T8097] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.418537][ T53] team0 (unregistering): Port device team_slave_1 removed [ 159.456387][ T53] team0 (unregistering): Port device team_slave_0 removed [ 159.802276][ T3492] geneve2: left promiscuous mode [ 160.081043][ T7733] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 160.082985][ T8109] xt_hashlimit: overflow, try lower: 4294967295/0 [ 160.119485][ T7733] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 160.262938][ T8114] netlink: 32 bytes leftover after parsing attributes in process `syz.2.496'. [ 160.274097][ T7733] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 160.288033][ T8116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.496'. [ 160.327988][ T7733] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 160.635840][ T8126] netlink: 20 bytes leftover after parsing attributes in process `syz.0.498'. [ 160.746046][ T8132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.500'. [ 160.893492][ T8136] netlink: 12 bytes leftover after parsing attributes in process `syz.0.502'. [ 161.010908][ T8146] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 161.015985][ T8136] 8021q: adding VLAN 0 to HW filter on device bond3 [ 161.101395][ T7733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.184476][ T8142] 8021q: adding VLAN 0 to HW filter on device bond3 [ 161.238259][ T8142] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 161.279433][ T8142] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 161.356369][ T8156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.505'. [ 161.385275][ T8156] netlink: 12 bytes leftover after parsing attributes in process `syz.4.505'. [ 161.473966][ T7770] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 161.544623][ T7770] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 161.601465][ T8161] netlink: 'syz.2.506': attribute type 1 has an invalid length. [ 161.610821][ T8161] netlink: 232 bytes leftover after parsing attributes in process `syz.2.506'. [ 161.619802][ T7733] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.626641][ T7770] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 161.642651][ T7770] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 161.794770][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.801990][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.849202][ T8171] netlink: 48 bytes leftover after parsing attributes in process `syz.2.510'. [ 161.892536][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.899779][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.900493][ T8171] netlink: 48 bytes leftover after parsing attributes in process `syz.2.510'. [ 162.025477][ T8175] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 162.031707][ T7733] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 162.172402][ T7770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.220539][ T8181] netlink: 'syz.0.513': attribute type 1 has an invalid length. [ 162.401120][ T8190] lo: MTU too low for tipc bearer [ 162.409943][ T8190] tipc: Enabling of bearer rejected, failed to enable media [ 162.465718][ T7770] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.527124][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.534366][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.642819][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.650078][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.666126][ T8198] tipc: Started in network mode [ 162.671299][ T8198] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 162.684397][ T8198] tipc: New replicast peer: fc00:0000:0000:0000:0000:0000:0000:0001 [ 162.695454][ T8198] tipc: Enabled bearer , priority 10 [ 163.162233][ T7733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.223452][ T7770] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 163.481478][ T7733] veth0_vlan: entered promiscuous mode [ 163.552759][ T7733] veth1_vlan: entered promiscuous mode [ 163.688796][ T5852] tipc: Node number set to 1 [ 163.702219][ T7733] veth0_macvtap: entered promiscuous mode [ 163.732151][ T7733] veth1_macvtap: entered promiscuous mode [ 163.813719][ T7733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.868316][ T7733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.895757][ T7733] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.910554][ T7733] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.919913][ T7733] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.929212][ T7733] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.006365][ T7770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.297623][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.318466][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.415128][ T7770] veth0_vlan: entered promiscuous mode [ 164.501369][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.535759][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.582590][ T7770] veth1_vlan: entered promiscuous mode [ 164.733937][ T7770] veth0_macvtap: entered promiscuous mode [ 164.782950][ T7770] veth1_macvtap: entered promiscuous mode [ 164.887838][ T8265] netlink: 'syz.4.532': attribute type 8 has an invalid length. [ 164.912168][ T7770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.943918][ T7770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.967032][ T8265] syzkaller0: entered allmulticast mode [ 165.033719][ T7770] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.052540][ T7770] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.089927][ T7770] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.113688][ T7770] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.458350][ T2906] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.530888][ T8295] __nla_validate_parse: 7 callbacks suppressed [ 165.530907][ T8295] netlink: 256 bytes leftover after parsing attributes in process `syz.2.538'. [ 165.649726][ T2906] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.693534][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.716326][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.804779][ T2906] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.843079][ T1131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.851782][ T1131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.884416][ T2906] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.265963][ T2906] bridge_slave_1: left allmulticast mode [ 166.291297][ T2906] bridge_slave_1: left promiscuous mode [ 166.297120][ T2906] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.320959][ T2906] bridge_slave_0: left allmulticast mode [ 166.369705][ T2906] bridge_slave_0: left promiscuous mode [ 166.377300][ T2906] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.470354][ T8316] openvswitch: netlink: Actions may not be safe on all matching packets [ 166.947618][ T5840] Bluetooth: hci2: command tx timeout [ 167.134854][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 167.145367][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 167.159102][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 167.171392][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 167.185898][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 167.325834][ T2906] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.341670][ T2906] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.352749][ T2906] bond0 (unregistering): Released all slaves [ 167.381753][ T8335] netlink: 830 bytes leftover after parsing attributes in process `syz.4.543'. [ 167.544907][ T8336] vxcan1 speed is unknown, defaulting to 1000 [ 167.608419][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 167.621169][ T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 167.629175][ T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 167.639265][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 167.652158][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 167.996356][ T8357] netlink: 'syz.2.548': attribute type 1 has an invalid length. [ 168.009826][ T8357] netlink: 224 bytes leftover after parsing attributes in process `syz.2.548'. [ 168.371692][ T8341] vxcan1 speed is unknown, defaulting to 1000 [ 168.392337][ T8370] netlink: 20 bytes leftover after parsing attributes in process `syz.4.551'. [ 168.814776][ T5892] hid-generic 0005:15C2:0A0E.0001: unknown main item tag 0x0 [ 168.880071][ T5892] hid-generic 0005:15C2:0A0E.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 169.018529][ T8390] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.558'. [ 169.101361][ T8336] xfrm0 speed is unknown, defaulting to 1000 [ 169.151059][ T8341] xfrm0 speed is unknown, defaulting to 1000 [ 169.231419][ T8398] netlink: 'syz.4.561': attribute type 10 has an invalid length. [ 169.267975][ T5840] Bluetooth: hci0: command tx timeout [ 169.309682][ T8398] lo: entered promiscuous mode [ 169.748011][ T5840] Bluetooth: hci1: command tx timeout [ 169.815612][ T2906] hsr_slave_0: left promiscuous mode [ 169.863113][ T2906] hsr_slave_1: left promiscuous mode [ 169.881670][ T2906] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.907605][ T2906] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.969120][ T2906] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.987378][ T2906] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.124060][ T2906] veth1_macvtap: left promiscuous mode [ 170.138923][ T2906] veth0_macvtap: left promiscuous mode [ 170.154099][ T2906] veth1_vlan: left promiscuous mode [ 170.168984][ T2906] veth0_vlan: left promiscuous mode [ 170.652003][ T8451] x_tables: duplicate underflow at hook 1 [ 171.056043][ T8467] ip6t_rpfilter: unknown options [ 171.131561][ T2906] team0 (unregistering): Port device team_slave_1 removed [ 171.165657][ T2906] team0 (unregistering): Port device team_slave_0 removed [ 171.347519][ T5840] Bluetooth: hci0: command tx timeout [ 171.838026][ T5840] Bluetooth: hci1: command tx timeout [ 172.174163][ T8500] netlink: 'syz.0.583': attribute type 10 has an invalid length. [ 172.216087][ T8500] netlink: 40 bytes leftover after parsing attributes in process `syz.0.583'. [ 172.306013][ T8500] batadv0: entered promiscuous mode [ 172.325214][ T8500] batadv0: entered allmulticast mode [ 172.335573][ T8500] bridge0: port 4(batadv0) entered blocking state [ 172.345181][ T8500] bridge0: port 4(batadv0) entered disabled state [ 172.361851][ T8336] chnl_net:caif_netlink_parms(): no params data found [ 172.699754][ T8341] chnl_net:caif_netlink_parms(): no params data found [ 172.737805][ T3513] batman_adv: batadv0: IGMP Querier appeared [ 172.744094][ T3513] batman_adv: batadv0: MLD Querier appeared [ 172.939296][ T8336] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.951648][ T8336] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.966935][ T8336] bridge_slave_0: entered allmulticast mode [ 172.980869][ T8336] bridge_slave_0: entered promiscuous mode [ 173.021469][ T2906] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.078141][ T8336] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.112738][ T8336] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.135439][ T8336] bridge_slave_1: entered allmulticast mode [ 173.166537][ T8336] bridge_slave_1: entered promiscuous mode [ 173.221541][ T2906] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.271033][ T8548] netlink: 104 bytes leftover after parsing attributes in process `syz.0.594'. [ 173.393986][ T2906] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.426659][ T8341] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.435176][ T8341] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.437356][ T5840] Bluetooth: hci0: command tx timeout [ 173.444500][ T8341] bridge_slave_0: entered allmulticast mode [ 173.463605][ T8341] bridge_slave_0: entered promiscuous mode [ 173.476842][ T8336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.494194][ T8336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.563709][ T2906] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.586694][ T8341] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.611707][ T8341] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.625559][ T8554] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5 [ 173.643085][ T8341] bridge_slave_1: entered allmulticast mode [ 173.663363][ T8341] bridge_slave_1: entered promiscuous mode [ 173.729073][ T8336] team0: Port device team_slave_0 added [ 173.742118][ T8336] team0: Port device team_slave_1 added [ 173.842272][ T8561] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 173.908123][ T5840] Bluetooth: hci1: command tx timeout [ 174.076553][ T8341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.121351][ T8341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.146769][ T8336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.161719][ T8336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.195298][ T8336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.216871][ T8336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.225068][ T8336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.291020][ T8336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.558260][ T8341] team0: Port device team_slave_0 added [ 174.600455][ T5891] IPVS: starting estimator thread 0... [ 174.616481][ T8589] netlink: 20 bytes leftover after parsing attributes in process `syz.4.606'. [ 174.678520][ T8590] netlink: 'syz.4.606': attribute type 12 has an invalid length. [ 174.686315][ T8590] netlink: 132 bytes leftover after parsing attributes in process `syz.4.606'. [ 174.697820][ T8591] IPVS: using max 26 ests per chain, 62400 per kthread [ 174.747890][ T8341] team0: Port device team_slave_1 added [ 174.753959][ T8589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.606'. [ 174.769807][ T8589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.606'. [ 174.841381][ T8596] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 175.082068][ T8336] hsr_slave_0: entered promiscuous mode [ 175.104551][ T8336] hsr_slave_1: entered promiscuous mode [ 175.188048][ T8341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.195056][ T8341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.243955][ T8341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.342802][ T8341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.360119][ T8341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.395023][ T8341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.512217][ T2906] bridge_slave_1: left allmulticast mode [ 175.517403][ T5840] Bluetooth: hci0: command tx timeout [ 175.528273][ T2906] bridge_slave_1: left promiscuous mode [ 175.534111][ T2906] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.613678][ T2906] bridge_slave_0: left allmulticast mode [ 175.634560][ T2906] bridge_slave_0: left promiscuous mode [ 175.640817][ T2906] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.724915][ T8632] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 175.997658][ T5840] Bluetooth: hci1: command tx timeout [ 176.024200][ T8640] netlink: 60 bytes leftover after parsing attributes in process `syz.4.618'. [ 176.226515][ T2906] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.241957][ T2906] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.252833][ T2906] bond0 (unregistering): Released all slaves [ 176.690096][ T8341] hsr_slave_0: entered promiscuous mode [ 176.701995][ T8341] hsr_slave_1: entered promiscuous mode [ 176.709854][ T8341] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.718658][ T8341] Cannot create hsr debugfs directory [ 176.929284][ T8660] netlink: 60 bytes leftover after parsing attributes in process `syz.0.625'. [ 177.674323][ T2906] hsr_slave_0: left promiscuous mode [ 177.693295][ T2906] hsr_slave_1: left promiscuous mode [ 177.708461][ T2906] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.742260][ T2906] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.771705][ T2906] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.786647][ T2906] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.865652][ T2906] veth1_macvtap: left promiscuous mode [ 177.872282][ T2906] veth0_macvtap: left promiscuous mode [ 177.879119][ T2906] veth1_vlan: left promiscuous mode [ 177.884608][ T2906] veth0_vlan: left promiscuous mode [ 178.524555][ T2906] team0 (unregistering): Port device team_slave_1 removed [ 178.571818][ T2906] team0 (unregistering): Port device team_slave_0 removed [ 179.166595][ T8706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.636'. [ 179.262298][ T8708] wireguard: wg1: Could not create IPv4 socket [ 179.795864][ T8726] netlink: 4 bytes leftover after parsing attributes in process `syz.2.643'. [ 179.824186][ T8336] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 179.864227][ T8336] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 179.952776][ T8730] netlink: 16 bytes leftover after parsing attributes in process `syz.4.644'. [ 180.010198][ T8336] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 180.044439][ T8336] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 180.047711][ T8730] netlink: 24 bytes leftover after parsing attributes in process `syz.4.644'. [ 180.382006][ T8749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.648'. [ 180.525707][ T8336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.623540][ T8756] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 180.654269][ T8756] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 180.686409][ T8756] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 180.743780][ T8336] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.811299][ T8341] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 180.893389][ T8341] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 180.969407][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.976642][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.036400][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.043719][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.061316][ T8341] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 181.091034][ T8341] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 181.510836][ T8783] netlink: 12 bytes leftover after parsing attributes in process `syz.2.655'. [ 181.665047][ T8341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.750821][ T8341] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.800365][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.807596][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.900226][ T2906] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.907452][ T2906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.984596][ T8336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.212746][ T8803] x_tables: duplicate underflow at hook 2 [ 182.323265][ T8336] veth0_vlan: entered promiscuous mode [ 182.383292][ T8336] veth1_vlan: entered promiscuous mode [ 182.524348][ T8336] veth0_macvtap: entered promiscuous mode [ 182.611005][ T8336] veth1_macvtap: entered promiscuous mode [ 182.706676][ T8336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.755219][ T8336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.774516][ T8827] IPVS: set_ctl: invalid protocol: 255 10.1.1.1:20004 [ 182.788358][ T8829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.664'. [ 182.802240][ T8336] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.877289][ T8336] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.917265][ T8336] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.936427][ T8336] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.101564][ T8341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.152605][ T5839] block nbd3: Receive control failed (result -32) [ 183.152974][ T55] block nbd2: Receive control failed (result -32) [ 183.175416][ T8842] smc: net device bond0 applied user defined pnetid SYZ2 [ 183.314453][ T2906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.347736][ T55] Bluetooth: hci1: command 0x0405 tx timeout [ 183.371319][ T2906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.457531][ T8341] veth0_vlan: entered promiscuous mode [ 183.488940][ T8341] veth1_vlan: entered promiscuous mode [ 183.497121][ T1131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.537421][ T1131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.599464][ T8341] veth0_macvtap: entered promiscuous mode [ 183.626205][ T8862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.668'. [ 183.632530][ T8341] veth1_macvtap: entered promiscuous mode [ 183.688481][ T8854] netlink: 'syz.4.669': attribute type 1 has an invalid length. [ 183.704374][ T8857] xt_CT: No such helper "netbios-ns" [ 183.721305][ T8854] netlink: 24 bytes leftover after parsing attributes in process `syz.4.669'. [ 183.723778][ T8341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.906059][ T8341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.970613][ T8341] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.990510][ T8341] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.023802][ T8341] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.047573][ T8341] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.291698][ T3513] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.414695][ T3513] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.521522][ T3513] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.631980][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.657900][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.805799][ T3513] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.855263][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.867320][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.070248][ T3513] bridge_slave_1: left allmulticast mode [ 185.076036][ T3513] bridge_slave_1: left promiscuous mode [ 185.091945][ T3513] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.194388][ T3513] bridge_slave_0: left allmulticast mode [ 185.206944][ T3513] bridge_slave_0: left promiscuous mode [ 185.216342][ T3513] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.445912][ T8913] netlink: 28 bytes leftover after parsing attributes in process `syz.4.679'. [ 185.461119][ T8913] openvswitch: netlink: Flow key attr not present in new flow. [ 185.906250][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 185.922168][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 185.933096][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 185.944336][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 185.955767][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 186.059638][ T3513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.072306][ T3513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.082785][ T3513] bond0 (unregistering): Released all slaves [ 186.108567][ T8909] dvmrp0: entered allmulticast mode [ 186.422451][ T8932] ?H: renamed from lo [ 186.432084][ T8937] netlink: 144 bytes leftover after parsing attributes in process `syz.2.684'. [ 186.464267][ T8932] netlink: 12 bytes leftover after parsing attributes in process `syz.0.681'. [ 186.467387][ T8921] vxcan1 speed is unknown, defaulting to 1000 [ 186.685919][ T8943] netlink: 146872 bytes leftover after parsing attributes in process `syz.2.686'. [ 186.994980][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 187.009112][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 187.017005][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 187.025547][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 187.035902][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 187.090860][ T8921] xfrm0 speed is unknown, defaulting to 1000 [ 187.134526][ T8951] vxcan1 speed is unknown, defaulting to 1000 [ 187.826625][ T3513] hsr_slave_0: left promiscuous mode [ 187.840308][ T3513] hsr_slave_1: left promiscuous mode [ 187.846426][ T3513] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.864774][ T3513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.883103][ T3513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.897277][ T3513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.956876][ T3513] veth1_macvtap: left promiscuous mode [ 187.970566][ T3513] veth0_macvtap: left promiscuous mode [ 187.977652][ T3513] veth1_vlan: left promiscuous mode [ 187.983183][ T3513] veth0_vlan: left promiscuous mode [ 187.989510][ T5840] Bluetooth: hci0: command tx timeout [ 188.028332][ T8984] netlink: 14 bytes leftover after parsing attributes in process `syz.0.695'. [ 188.692460][ T3513] team0 (unregistering): Port device team_slave_1 removed [ 188.750742][ T3513] team0 (unregistering): Port device team_slave_0 removed [ 189.111149][ T5840] Bluetooth: hci1: command tx timeout [ 189.393048][ T8975] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 189.422530][ T8982] bond0: (slave bond2): Error -95 calling ndo_bpf [ 189.653697][ T8984] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.679654][ T8984] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.696216][ T8984] bond0 (unregistering): (slave bond2): Releasing backup interface [ 189.717814][ T8984] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 189.734057][ T8984] bond0 (unregistering): Released all slaves [ 189.785832][ T8972] vxcan1 speed is unknown, defaulting to 1000 [ 189.806019][ T8951] xfrm0 speed is unknown, defaulting to 1000 [ 190.034283][ T8921] chnl_net:caif_netlink_parms(): no params data found [ 190.060607][ T9038] Bluetooth: MGMT ver 1.23 [ 190.067444][ T5840] Bluetooth: hci0: command tx timeout [ 190.438152][ T8921] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.445498][ T8921] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.452937][ T8921] bridge_slave_0: entered allmulticast mode [ 190.461948][ T8921] bridge_slave_0: entered promiscuous mode [ 190.561615][ T8921] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.569272][ T8921] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.577161][ T8921] bridge_slave_1: entered allmulticast mode [ 190.591080][ T8921] bridge_slave_1: entered promiscuous mode [ 190.620319][ T8972] xfrm0 speed is unknown, defaulting to 1000 [ 190.849163][ T8921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.876770][ T8921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.974777][ T64] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.156014][ T8951] chnl_net:caif_netlink_parms(): no params data found [ 191.184537][ T8921] team0: Port device team_slave_0 added [ 191.195138][ T8921] team0: Port device team_slave_1 added [ 191.197668][ T5840] Bluetooth: hci1: command tx timeout [ 191.271720][ T64] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.338122][ T9085] netlink: 'syz.2.707': attribute type 4 has an invalid length. [ 191.355089][ T9088] netlink: 'syz.2.707': attribute type 4 has an invalid length. [ 191.474903][ T8921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.485787][ T8921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.518757][ T8921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.638652][ T64] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.729663][ T8921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.736676][ T8921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.741251][ T9100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.709'. [ 191.780561][ T9100] netlink: 16 bytes leftover after parsing attributes in process `syz.0.709'. [ 191.788275][ T8921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.814509][ T9101] netlink: 592 bytes leftover after parsing attributes in process `syz.0.709'. [ 191.976069][ T64] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.148628][ T5840] Bluetooth: hci0: command tx timeout [ 192.156106][ T9110] netlink: 36 bytes leftover after parsing attributes in process `syz.2.710'. [ 192.256696][ T9114] netlink: 'syz.0.712': attribute type 11 has an invalid length. [ 192.264973][ T9116] netlink: 16 bytes leftover after parsing attributes in process `syz.2.713'. [ 192.285486][ T9114] netlink: 224 bytes leftover after parsing attributes in process `syz.0.712'. [ 192.317455][ T8951] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.328721][ T8951] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.336083][ T8951] bridge_slave_0: entered allmulticast mode [ 192.349761][ T8951] bridge_slave_0: entered promiscuous mode [ 192.490368][ T8921] hsr_slave_0: entered promiscuous mode [ 192.500000][ T8921] hsr_slave_1: entered promiscuous mode [ 192.509665][ T8951] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.533702][ T8951] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.550886][ T8951] bridge_slave_1: entered allmulticast mode [ 192.578043][ T9121] netlink: 256 bytes leftover after parsing attributes in process `syz.2.715'. [ 192.579935][ T8951] bridge_slave_1: entered promiscuous mode [ 192.589214][ T9121] unsupported nlmsg_type 40 [ 192.636699][ T9124] batadv_slave_0: entered allmulticast mode [ 192.892837][ T8951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.955980][ T8951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.202075][ T9152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.720'. [ 193.211153][ T9152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.720'. [ 193.267399][ T5840] Bluetooth: hci1: command tx timeout [ 193.403770][ T8951] team0: Port device team_slave_0 added [ 193.425228][ T8951] team0: Port device team_slave_1 added [ 193.488306][ T64] bridge_slave_1: left allmulticast mode [ 193.494017][ T64] bridge_slave_1: left promiscuous mode [ 193.501905][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.558622][ T64] bridge_slave_0: left allmulticast mode [ 193.564333][ T64] bridge_slave_0: left promiscuous mode [ 193.580926][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.917076][ T9180] netlink: 'syz.4.728': attribute type 23 has an invalid length. [ 193.943661][ T9180] TCP: TCP_TX_DELAY enabled [ 194.151984][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.227507][ T5840] Bluetooth: hci0: command tx timeout [ 194.241507][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.254231][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.265917][ T64] bond0 (unregistering): Released all slaves [ 194.374387][ T9192] netlink: 'syz.2.731': attribute type 1 has an invalid length. [ 194.494695][ T8951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.539057][ T8951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.596840][ T8951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.722295][ T8951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.751832][ T8951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.823255][ T8951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.886585][ T9202] syzkaller1: entered allmulticast mode [ 194.912403][ T9212] netlink: 24 bytes leftover after parsing attributes in process `syz.0.735'. [ 195.277316][ T8951] hsr_slave_0: entered promiscuous mode [ 195.284215][ T8951] hsr_slave_1: entered promiscuous mode [ 195.301389][ T8951] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 195.309495][ T8951] Cannot create hsr debugfs directory [ 195.347756][ T5840] Bluetooth: hci1: command tx timeout [ 195.372772][ T9222] tipc: Invalid UDP bearer configuration [ 195.372852][ T9222] tipc: Enabling of bearer rejected, failed to enable media [ 195.406688][ T9236] netlink: 'syz.4.741': attribute type 1 has an invalid length. [ 195.495348][ T9227] netlink: 'syz.0.738': attribute type 10 has an invalid length. [ 195.686043][ T9236] bond0: entered promiscuous mode [ 195.721386][ T9236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.876214][ T9227] batadv0: left allmulticast mode [ 195.890753][ T9227] batadv0: left promiscuous mode [ 195.909516][ T9227] bridge0: port 4(batadv0) entered disabled state [ 196.071692][ T64] hsr_slave_0: left promiscuous mode [ 196.117837][ T64] hsr_slave_1: left promiscuous mode [ 196.124086][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.153309][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.172715][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.190719][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.253892][ T64] veth1_macvtap: left promiscuous mode [ 196.267319][ T64] veth0_macvtap: left promiscuous mode [ 196.273079][ T64] veth1_vlan: left promiscuous mode [ 196.297391][ T64] veth0_vlan: left promiscuous mode [ 196.736729][ T64] team0 (unregistering): Port device team_slave_1 removed [ 196.782153][ T64] team0 (unregistering): Port device team_slave_0 removed [ 197.134857][ T9259] tipc: Started in network mode [ 197.144541][ T9259] tipc: Node identity , cluster identity 4711 [ 197.152064][ T9259] tipc: Failed to set node id, please configure manually [ 197.164433][ T9259] tipc: Enabling of bearer rejected, failed to enable media [ 197.174313][ T9261] netlink: 'syz.4.743': attribute type 3 has an invalid length. [ 197.203105][ T9261] netlink: 201372 bytes leftover after parsing attributes in process `syz.4.743'. [ 197.534700][ T9282] netlink: 'syz.2.750': attribute type 16 has an invalid length. [ 197.568147][ T9282] netlink: 'syz.2.750': attribute type 17 has an invalid length. [ 197.708328][ T9288] netlink: 'syz.0.751': attribute type 4 has an invalid length. [ 197.778627][ T5852] vxcan1 speed is unknown, defaulting to 1000 [ 198.027748][ T9295] netlink: 'syz.0.754': attribute type 29 has an invalid length. [ 198.045512][ T9295] netlink: 'syz.0.754': attribute type 29 has an invalid length. [ 198.084197][ T9295] netlink: 596 bytes leftover after parsing attributes in process `syz.0.754'. [ 198.119264][ T9296] netlink: 596 bytes leftover after parsing attributes in process `syz.0.754'. [ 198.181810][ T8921] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 198.207017][ T8921] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 198.290840][ T9303] netlink: 72 bytes leftover after parsing attributes in process `syz.2.758'. [ 198.308329][ T9303] netlink: 72 bytes leftover after parsing attributes in process `syz.2.758'. [ 198.320168][ T8921] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 198.391691][ T8921] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 198.484700][ T9311] netlink: 28 bytes leftover after parsing attributes in process `syz.0.759'. [ 198.501530][ T9318] netlink: 28 bytes leftover after parsing attributes in process `syz.4.760'. [ 198.523575][ T9318] netlink: 28 bytes leftover after parsing attributes in process `syz.4.760'. [ 198.662678][ T9326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.762'. [ 199.242926][ T8921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.337405][ T8951] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 199.389362][ T8951] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 199.414478][ T8951] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 199.441917][ T8921] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.459073][ T8951] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 199.493730][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.500943][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.512437][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.519647][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.769881][ T9357] xt_CT: You must specify a L4 protocol and not use inversions on it [ 199.805924][ T8951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.855989][ T9359] netlink: 16 bytes leftover after parsing attributes in process `syz.4.768'. [ 199.922599][ T8951] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.985805][ T1131] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.993115][ T1131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.069244][ T1131] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.076427][ T1131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.310796][ T8921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.586394][ T8921] veth0_vlan: entered promiscuous mode [ 200.674151][ T8921] veth1_vlan: entered promiscuous mode [ 200.832914][ T8921] veth0_macvtap: entered promiscuous mode [ 200.874069][ T8921] veth1_macvtap: entered promiscuous mode [ 200.936914][ T8921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.993140][ T8921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.054000][ T8921] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.083683][ T8921] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.104285][ T8921] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.122059][ T8921] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.207138][ T8951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.542814][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.598714][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.717719][ T8951] veth0_vlan: entered promiscuous mode [ 201.800278][ T8951] veth1_vlan: entered promiscuous mode [ 201.854176][ T2906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.929042][ T2906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.979563][ T9437] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 202.069825][ T8951] veth0_macvtap: entered promiscuous mode [ 202.138166][ T8951] veth1_macvtap: entered promiscuous mode [ 202.247010][ T9445] __nla_validate_parse: 4 callbacks suppressed [ 202.247029][ T9445] netlink: 16 bytes leftover after parsing attributes in process `syz.4.785'. [ 202.251214][ T8951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.300225][ T9449] netlink: 'syz.4.785': attribute type 16 has an invalid length. [ 202.302604][ T8951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.335303][ T8951] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.346209][ T9449] netlink: 'syz.4.785': attribute type 17 has an invalid length. [ 202.367542][ T9451] netlink: 'syz.0.786': attribute type 1 has an invalid length. [ 202.373708][ T8951] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.380926][ T9451] netlink: 'syz.0.786': attribute type 2 has an invalid length. [ 202.406422][ T8951] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.408369][ T9452] netlink: 'syz.0.786': attribute type 1 has an invalid length. [ 202.424469][ T9452] netlink: 'syz.0.786': attribute type 2 has an invalid length. [ 202.434438][ T8951] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.470753][ T9454] netlink: 40 bytes leftover after parsing attributes in process `syz.2.787'. [ 202.583045][ T9451] netlink: 132 bytes leftover after parsing attributes in process `syz.0.786'. [ 202.613307][ T10] xfrm0 speed is unknown, defaulting to 1000 [ 202.841459][ T9464] Bluetooth: MGMT ver 1.23 [ 202.931140][ T9471] netlink: 5 bytes leftover after parsing attributes in process `syz.2.789'. [ 203.054030][ T2906] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.139405][ T9471] 0FN: renamed from bond_slave_0 (while UP) [ 203.155663][ T9471] 0FN: entered allmulticast mode [ 203.205114][ T2906] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.233770][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.247769][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.335409][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.353804][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.370372][ T2906] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.466115][ T2906] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.727817][ T2906] bridge_slave_1: left allmulticast mode [ 203.733523][ T2906] bridge_slave_1: left promiscuous mode [ 203.750673][ T2906] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.771864][ T2906] bridge_slave_0: left allmulticast mode [ 203.780061][ T2906] bridge_slave_0: left promiscuous mode [ 203.795179][ T2906] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.427568][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 204.441777][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 204.450969][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 204.459057][ T2906] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.459526][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 204.476392][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 204.484431][ T2906] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.505021][ T2906] bond0 (unregistering): Released all slaves [ 204.615569][ T9496] vxcan1 speed is unknown, defaulting to 1000 [ 204.898770][ T9512] netlink: 28 bytes leftover after parsing attributes in process `syz.0.795'. [ 204.969714][ T9514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.795'. [ 205.374176][ T9496] xfrm0 speed is unknown, defaulting to 1000 [ 205.580358][ T9535] 8021q: VLANs not supported on lo [ 205.683839][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 205.700193][ T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 205.717861][ T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 205.730946][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 205.746594][ T9540] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:0 [ 205.757389][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 205.927149][ T9542] netlink: 'syz.2.799': attribute type 10 has an invalid length. [ 205.986309][ T2906] hsr_slave_0: left promiscuous mode [ 206.016719][ T2906] hsr_slave_1: left promiscuous mode [ 206.044660][ T2906] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.082784][ T2906] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.131901][ T2906] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.152853][ T9552] netlink: 'syz.0.802': attribute type 1 has an invalid length. [ 206.153594][ T2906] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.165636][ T9552] netlink: 44 bytes leftover after parsing attributes in process `syz.0.802'. [ 206.178700][ T9554] netlink: 'syz.4.801': attribute type 1 has an invalid length. [ 206.191075][ T9552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.802'. [ 206.220338][ T2906] veth1_macvtap: left promiscuous mode [ 206.226043][ T2906] veth0_macvtap: left promiscuous mode [ 206.235857][ T2906] veth1_vlan: left promiscuous mode [ 206.245008][ T2906] veth0_vlan: left promiscuous mode [ 206.548091][ T55] Bluetooth: hci0: command tx timeout [ 206.766973][ T2906] team0 (unregistering): Port device team_slave_1 removed [ 206.804577][ T2906] team0 (unregistering): Port device team_slave_0 removed [ 207.142205][ T9542] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 207.164921][ T9554] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 207.290800][ T9537] vxcan1 speed is unknown, defaulting to 1000 [ 207.442278][ T9579] netlink: 12 bytes leftover after parsing attributes in process `syz.4.805'. [ 207.827447][ T55] Bluetooth: hci1: command tx timeout [ 207.897520][ T9595] netlink: 'syz.2.808': attribute type 10 has an invalid length. [ 208.007848][ T9595] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 208.016589][ T9496] chnl_net:caif_netlink_parms(): no params data found [ 208.066161][ T9606] netlink: 'syz.0.811': attribute type 1 has an invalid length. [ 208.089262][ T9606] netlink: 172 bytes leftover after parsing attributes in process `syz.0.811'. [ 208.157767][ T9537] xfrm0 speed is unknown, defaulting to 1000 [ 208.215329][ T9611] netlink: 164 bytes leftover after parsing attributes in process `syz.2.813'. [ 208.395426][ T9622] netlink: 'syz.4.815': attribute type 1 has an invalid length. [ 208.510843][ T9622] bond4: entered promiscuous mode [ 208.516519][ T9622] 8021q: adding VLAN 0 to HW filter on device bond4 [ 208.627947][ T55] Bluetooth: hci0: command tx timeout [ 208.692092][ T9496] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.712381][ T9496] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.739176][ T9630] netlink: 12 bytes leftover after parsing attributes in process `syz.0.816'. [ 208.749240][ T9496] bridge_slave_0: entered allmulticast mode [ 208.759205][ T9496] bridge_slave_0: entered promiscuous mode [ 208.782682][ T9634] netlink: 16 bytes leftover after parsing attributes in process `syz.4.817'. [ 208.793361][ T9630] netlink: 12 bytes leftover after parsing attributes in process `syz.0.816'. [ 208.809266][ T9634] netlink: 32 bytes leftover after parsing attributes in process `syz.4.817'. [ 208.814301][ T9614] vxcan1 speed is unknown, defaulting to 1000 [ 208.827073][ T9630] netlink: 12 bytes leftover after parsing attributes in process `syz.0.816'. [ 208.841861][ T9634] gretap1: entered promiscuous mode [ 208.847721][ T9630] netlink: 12 bytes leftover after parsing attributes in process `syz.0.816'. [ 208.856689][ T9634] gretap1: entered allmulticast mode [ 208.866007][ T9630] netlink: 12 bytes leftover after parsing attributes in process `syz.0.816'. [ 208.920478][ T2906] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.961798][ T9496] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.971572][ T9496] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.985809][ T9496] bridge_slave_1: entered allmulticast mode [ 208.996843][ T9496] bridge_slave_1: entered promiscuous mode [ 209.022980][ T9635] batadv0: entered promiscuous mode [ 209.069206][ T9635] team0: entered promiscuous mode [ 209.074388][ T9635] team_slave_0: entered promiscuous mode [ 209.088643][ T9635] team_slave_1: entered promiscuous mode [ 209.110664][ T9635] hsr1: entered promiscuous mode [ 209.126042][ T9635] hsr1: entered allmulticast mode [ 209.138114][ T9635] batadv0: entered allmulticast mode [ 209.146807][ T9635] team0: entered allmulticast mode [ 209.152094][ T9635] team_slave_0: entered allmulticast mode [ 209.156085][ T9640] netlink: 'syz.0.819': attribute type 1 has an invalid length. [ 209.158196][ T9635] team_slave_1: entered allmulticast mode [ 209.203075][ T2906] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.284576][ T9614] xfrm0 speed is unknown, defaulting to 1000 [ 209.389236][ T2906] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.576543][ T9496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.646759][ T9496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.809983][ T2906] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.908048][ T5848] Bluetooth: hci1: command tx timeout [ 209.949523][ T9665] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 210.056725][ T9496] team0: Port device team_slave_0 added [ 210.080256][ T9496] team0: Port device team_slave_1 added [ 210.343738][ T9537] chnl_net:caif_netlink_parms(): no params data found [ 210.420380][ T9496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.434263][ T9496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.469094][ T9496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.708011][ T5848] Bluetooth: hci0: command tx timeout [ 210.735652][ T9496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.759605][ T9496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.792112][ T9496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.111110][ T9537] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.118975][ T9537] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.126167][ T9537] bridge_slave_0: entered allmulticast mode [ 211.133591][ T9537] bridge_slave_0: entered promiscuous mode [ 211.160769][ T9496] hsr_slave_0: entered promiscuous mode [ 211.172481][ T9496] hsr_slave_1: entered promiscuous mode [ 211.180847][ T9537] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.191749][ T9537] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.203529][ T9537] bridge_slave_1: entered allmulticast mode [ 211.211376][ T9537] bridge_slave_1: entered promiscuous mode [ 211.234442][ T2906] bridge_slave_1: left allmulticast mode [ 211.242147][ T2906] bridge_slave_1: left promiscuous mode [ 211.248168][ T2906] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.266405][ T2906] bridge_slave_0: left allmulticast mode [ 211.273271][ T2906] bridge_slave_0: left promiscuous mode [ 211.284961][ T2906] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.566939][ T2906] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.578520][ T2906] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.590296][ T5841] Bluetooth: hci4: command 0x0406 tx timeout [ 211.590400][ T5850] Bluetooth: hci3: command 0x0406 tx timeout [ 211.596376][ T5848] Bluetooth: hci2: command 0x0406 tx timeout [ 211.611184][ T2906] bond0 (unregistering): Released all slaves [ 211.685628][ T9537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.749596][ T9537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.928822][ T9537] team0: Port device team_slave_0 added [ 211.958361][ T9537] team0: Port device team_slave_1 added [ 211.992317][ T5840] Bluetooth: hci1: command tx timeout [ 212.278500][ T9537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.286120][ T9537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.320162][ T9537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.375264][ T9728] IPv6: Can't replace route, no match found [ 212.421690][ T9537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.447268][ T9537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.481567][ T9537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.788096][ T5840] Bluetooth: hci0: command tx timeout [ 212.895560][ T9753] Bluetooth: MGMT ver 1.23 [ 212.938413][ T2906] hsr_slave_0: left promiscuous mode [ 212.982955][ T2906] hsr_slave_1: left promiscuous mode [ 213.013737][ T2906] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.038689][ T2906] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.054373][ T2906] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.064187][ T2906] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.111807][ T2906] veth1_macvtap: left promiscuous mode [ 213.128062][ T2906] veth0_macvtap: left promiscuous mode [ 213.135867][ T2906] veth1_vlan: left promiscuous mode [ 213.142219][ T2906] veth0_vlan: left promiscuous mode [ 213.552420][ T2906] team0 (unregistering): Port device team_slave_1 removed [ 213.586228][ T2906] team0 (unregistering): Port device team_slave_0 removed [ 213.922168][ T9537] hsr_slave_0: entered promiscuous mode [ 213.929105][ T9537] hsr_slave_1: entered promiscuous mode [ 213.935209][ T9537] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.944029][ T9537] Cannot create hsr debugfs directory [ 214.067534][ T5840] Bluetooth: hci1: command tx timeout [ 214.097414][ T9771] netlink: 'syz.4.856': attribute type 1 has an invalid length. [ 214.215322][ T9771] bond5: entered promiscuous mode [ 214.224939][ T9771] 8021q: adding VLAN 0 to HW filter on device bond5 [ 214.398969][ T9785] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 214.470658][ T9784] __nla_validate_parse: 34 callbacks suppressed [ 214.470678][ T9784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.860'. [ 214.524532][ T9790] : renamed from vlan0 (while UP) [ 214.943486][ T9805] bond0: entered promiscuous mode [ 214.953383][ T9805] bond0: entered allmulticast mode [ 214.970700][ T9805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.972886][ T9813] netlink: 32 bytes leftover after parsing attributes in process `syz.4.868'. [ 215.122491][ T9805] bond0 (unregistering): Released all slaves [ 215.396689][ T9496] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 215.398168][ T9821] netlink: 'syz.2.871': attribute type 1 has an invalid length. [ 215.450037][ T9496] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 215.461648][ T9823] netlink: 32 bytes leftover after parsing attributes in process `syz.0.872'. [ 215.499335][ T9496] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 215.523347][ T9496] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 215.953808][ T9496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.160316][ T9496] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.221405][ T2906] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.228661][ T2906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.278357][ T9537] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 216.336371][ T2906] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.343616][ T2906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.381887][ T9537] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 216.428112][ T9537] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 216.484724][ T9537] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 216.754706][ T9861] raw_sendmsg: syz.2.883 forgot to set AF_INET. Fix it! [ 216.940092][ T9537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.026877][ T9537] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.044668][ T9871] netlink: 'syz.0.886': attribute type 1 has an invalid length. [ 217.078886][ T9867] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.088775][ T9867] bridge0: entered promiscuous mode [ 217.146835][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.154092][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.214733][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.221954][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.244386][ T9875] virt_wifi0 speed is unknown, defaulting to 1000 [ 217.288209][ T9875] virt_wifi0 speed is unknown, defaulting to 1000 [ 217.343847][ T9875] virt_wifi0 speed is unknown, defaulting to 1000 [ 217.428468][ T9875] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 217.593117][ T9875] virt_wifi0 speed is unknown, defaulting to 1000 [ 217.615914][ T9496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.642536][ T9875] virt_wifi0 speed is unknown, defaulting to 1000 [ 217.661663][ T9875] virt_wifi0 speed is unknown, defaulting to 1000 [ 217.711280][ T9875] virt_wifi0 speed is unknown, defaulting to 1000 [ 217.746952][ T9875] virt_wifi0 speed is unknown, defaulting to 1000 [ 217.790280][ T9496] veth0_vlan: entered promiscuous mode [ 217.831213][ T9496] veth1_vlan: entered promiscuous mode [ 217.966604][ T9496] veth0_macvtap: entered promiscuous mode [ 218.043308][ T9496] veth1_macvtap: entered promiscuous mode [ 218.126040][ T9537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.153837][ T9496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.196543][ T9496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.299346][ T9496] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.322865][ T9496] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.343283][ T9496] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.354121][ T9496] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.767120][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.783138][ T9537] veth0_vlan: entered promiscuous mode [ 218.791477][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.856235][ T9537] veth1_vlan: entered promiscuous mode [ 218.976726][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.981357][ T9537] veth0_macvtap: entered promiscuous mode [ 218.996603][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.060755][ T9537] veth1_macvtap: entered promiscuous mode [ 219.146695][ T9537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.234185][ T9537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.283632][ T9537] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.350914][ T9537] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.372723][ T9537] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.407342][ T9537] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.492021][ T9511] ------------[ cut here ]------------ [ 219.497690][ T9511] refcount_t: underflow; use-after-free. [ 219.503829][ T9511] WARNING: CPU: 0 PID: 9511 at lib/refcount.c:28 refcount_warn_saturate+0x11a/0x1d0 [ 219.513259][ T9511] Modules linked in: [ 219.517337][ T9511] CPU: 0 UID: 0 PID: 9511 Comm: kbnepd bnep0 Not tainted 6.15.0-rc6-syzkaller-00157-gef935650e044 #0 PREEMPT(full) [ 219.529498][ T9511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 219.539949][ T9511] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0 [ 219.546106][ T9511] Code: 20 8e c1 8b e8 57 8f cb fc 90 0f 0b 90 90 eb d7 e8 bb 32 07 fd c6 05 b8 41 b0 0a 01 90 48 c7 c7 80 8e c1 8b e8 37 8f cb fc 90 <0f> 0b 90 90 eb b7 e8 9b 32 07 fd c6 05 95 41 b0 0a 01 90 48 c7 c7 [ 219.565887][ T9511] RSP: 0018:ffffc9000447f740 EFLAGS: 00010246 [ 219.572104][ T9511] RAX: 2e159e19f3ea8200 RBX: 0000000000000003 RCX: ffff888030e23c00 [ 219.580086][ T9511] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 219.588071][ T9511] RBP: 0000000000000000 R08: ffff8880b8823e93 R09: 1ffff110171047d2 [ 219.596040][ T9511] R10: dffffc0000000000 R11: ffffed10171047d3 R12: dffffc0000000000 [ 219.604427][ T9511] R13: ffff888028019c60 R14: ffff888028019c78 R15: ffffffff85eb7de0 [ 219.612416][ T9511] FS: 0000000000000000(0000) GS:ffff8881260c7000(0000) knlGS:0000000000000000 [ 219.621358][ T9511] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 219.627951][ T9511] CR2: 00007fb5c6dd5d58 CR3: 000000005f6fe000 CR4: 00000000003526f0 [ 219.635921][ T9511] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 219.643913][ T9511] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 219.651995][ T9511] Call Trace: [ 219.655435][ T9511] [ 219.658490][ T9511] klist_dec_and_del+0x3c7/0x3d0 [ 219.663453][ T9511] ? __pfx_klist_children_put+0x10/0x10 [ 219.669048][ T9511] klist_del+0xa6/0x110 [ 219.673220][ T9511] device_del+0x280/0x8e0 [ 219.677660][ T9511] ? _raw_spin_unlock_irq+0x2e/0x50 [ 219.682867][ T9511] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 219.688965][ T9511] ? __pfx_device_del+0x10/0x10 [ 219.693855][ T9511] ? netdev_unregister_kobject+0x344/0x450 [ 219.700058][ T9511] unregister_netdevice_many_notify+0x1d5d/0x2330 [ 219.706485][ T9511] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 219.713275][ T9511] ? rcu_is_watching+0x15/0xb0 [ 219.718063][ T9511] ? __mutex_lock+0xa6d/0xe80 [ 219.722758][ T9511] ? __mutex_lock+0x51b/0xe80 [ 219.727502][ T9511] unregister_netdevice_queue+0x33c/0x380 [ 219.733248][ T9511] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 219.739553][ T9511] ? rtnl_net_dev_lock+0x36/0x2f0 [ 219.744599][ T9511] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 219.753421][ T9511] unregister_netdev+0x1f/0x60 [ 219.759430][ T9511] bnep_session+0x294d/0x2b40 [ 219.764124][ T9511] ? trace_sched_exit_tp+0x38/0x120 [ 219.769510][ T9511] ? __schedule+0x1700/0x4cd0 [ 219.774188][ T9511] ? __lock_acquire+0xaac/0xd20 [ 219.779072][ T9511] ? __pfx_bnep_session+0x10/0x10 [ 219.784101][ T9511] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 219.790022][ T9511] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 219.796356][ T9511] ? __pfx_woken_wake_function+0x10/0x10 [ 219.802079][ T9511] ? __kthread_parkme+0x7b/0x200 [ 219.807025][ T9511] ? __kthread_parkme+0x1a1/0x200 [ 219.812090][ T9511] kthread+0x711/0x8a0 [ 219.816170][ T9511] ? __pfx_bnep_session+0x10/0x10 [ 219.821213][ T9511] ? __pfx_kthread+0x10/0x10 [ 219.825804][ T9511] ? __pfx_kthread+0x10/0x10 [ 219.830416][ T9511] ? _raw_spin_unlock_irq+0x23/0x50 [ 219.835617][ T9511] ? lockdep_hardirqs_on+0x9c/0x150 [ 219.840858][ T9511] ? __pfx_kthread+0x10/0x10 [ 219.845455][ T9511] ret_from_fork+0x4b/0x80 [ 219.849960][ T9511] ? __pfx_kthread+0x10/0x10 [ 219.854595][ T9511] ret_from_fork_asm+0x1a/0x30 [ 219.859501][ T9511] [ 219.862671][ T9511] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 219.869956][ T9511] CPU: 0 UID: 0 PID: 9511 Comm: kbnepd bnep0 Not tainted 6.15.0-rc6-syzkaller-00157-gef935650e044 #0 PREEMPT(full) [ 219.882097][ T9511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 219.892157][ T9511] Call Trace: [ 219.895434][ T9511] [ 219.898362][ T9511] dump_stack_lvl+0x99/0x250 [ 219.902963][ T9511] ? __asan_memcpy+0x40/0x70 [ 219.907555][ T9511] ? __pfx_dump_stack_lvl+0x10/0x10 [ 219.912758][ T9511] ? __pfx__printk+0x10/0x10 [ 219.917358][ T9511] panic+0x2db/0x790 [ 219.921260][ T9511] ? __pfx_panic+0x10/0x10 [ 219.925675][ T9511] ? show_trace_log_lvl+0x4fb/0x550 [ 219.930898][ T9511] ? ret_from_fork_asm+0x1a/0x30 [ 219.935834][ T9511] __warn+0x31b/0x4b0 [ 219.939817][ T9511] ? refcount_warn_saturate+0x11a/0x1d0 [ 219.945370][ T9511] ? refcount_warn_saturate+0x11a/0x1d0 [ 219.950918][ T9511] report_bug+0x2be/0x4f0 [ 219.955245][ T9511] ? refcount_warn_saturate+0x11a/0x1d0 [ 219.960794][ T9511] ? refcount_warn_saturate+0x11a/0x1d0 [ 219.966360][ T9511] ? refcount_warn_saturate+0x11c/0x1d0 [ 219.971906][ T9511] handle_bug+0x84/0x160 [ 219.976155][ T9511] exc_invalid_op+0x1a/0x50 [ 219.980682][ T9511] asm_exc_invalid_op+0x1a/0x20 [ 219.985528][ T9511] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0 [ 219.991693][ T9511] Code: 20 8e c1 8b e8 57 8f cb fc 90 0f 0b 90 90 eb d7 e8 bb 32 07 fd c6 05 b8 41 b0 0a 01 90 48 c7 c7 80 8e c1 8b e8 37 8f cb fc 90 <0f> 0b 90 90 eb b7 e8 9b 32 07 fd c6 05 95 41 b0 0a 01 90 48 c7 c7 [ 220.011301][ T9511] RSP: 0018:ffffc9000447f740 EFLAGS: 00010246 [ 220.017371][ T9511] RAX: 2e159e19f3ea8200 RBX: 0000000000000003 RCX: ffff888030e23c00 [ 220.025341][ T9511] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 220.033309][ T9511] RBP: 0000000000000000 R08: ffff8880b8823e93 R09: 1ffff110171047d2 [ 220.041276][ T9511] R10: dffffc0000000000 R11: ffffed10171047d3 R12: dffffc0000000000 [ 220.049246][ T9511] R13: ffff888028019c60 R14: ffff888028019c78 R15: ffffffff85eb7de0 [ 220.057218][ T9511] ? __pfx_klist_children_put+0x10/0x10 [ 220.062790][ T9511] klist_dec_and_del+0x3c7/0x3d0 [ 220.067736][ T9511] ? __pfx_klist_children_put+0x10/0x10 [ 220.073286][ T9511] klist_del+0xa6/0x110 [ 220.077444][ T9511] device_del+0x280/0x8e0 [ 220.081778][ T9511] ? _raw_spin_unlock_irq+0x2e/0x50 [ 220.086991][ T9511] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 220.093083][ T9511] ? __pfx_device_del+0x10/0x10 [ 220.097933][ T9511] ? netdev_unregister_kobject+0x344/0x450 [ 220.103758][ T9511] unregister_netdevice_many_notify+0x1d5d/0x2330 [ 220.110181][ T9511] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 220.116951][ T9511] ? rcu_is_watching+0x15/0xb0 [ 220.121715][ T9511] ? __mutex_lock+0xa6d/0xe80 [ 220.126396][ T9511] ? __mutex_lock+0x51b/0xe80 [ 220.131088][ T9511] unregister_netdevice_queue+0x33c/0x380 [ 220.136816][ T9511] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 220.143069][ T9511] ? rtnl_net_dev_lock+0x36/0x2f0 [ 220.148094][ T9511] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 220.153210][ T9511] unregister_netdev+0x1f/0x60 [ 220.157966][ T9511] bnep_session+0x294d/0x2b40 [ 220.162645][ T9511] ? trace_sched_exit_tp+0x38/0x120 [ 220.167847][ T9511] ? __schedule+0x1700/0x4cd0 [ 220.172531][ T9511] ? __lock_acquire+0xaac/0xd20 [ 220.177400][ T9511] ? __pfx_bnep_session+0x10/0x10 [ 220.182429][ T9511] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 220.188321][ T9511] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 220.194653][ T9511] ? __pfx_woken_wake_function+0x10/0x10 [ 220.200294][ T9511] ? __kthread_parkme+0x7b/0x200 [ 220.205231][ T9511] ? __kthread_parkme+0x1a1/0x200 [ 220.210257][ T9511] kthread+0x711/0x8a0 [ 220.214332][ T9511] ? __pfx_bnep_session+0x10/0x10 [ 220.219358][ T9511] ? __pfx_kthread+0x10/0x10 [ 220.223953][ T9511] ? __pfx_kthread+0x10/0x10 [ 220.228630][ T9511] ? _raw_spin_unlock_irq+0x23/0x50 [ 220.233830][ T9511] ? lockdep_hardirqs_on+0x9c/0x150 [ 220.239031][ T9511] ? __pfx_kthread+0x10/0x10 [ 220.243620][ T9511] ret_from_fork+0x4b/0x80 [ 220.248035][ T9511] ? __pfx_kthread+0x10/0x10 [ 220.252624][ T9511] ret_from_fork_asm+0x1a/0x30 [ 220.257396][ T9511] [ 221.413843][ T9511] Shutting down cpus with NMI [ 221.418842][ T9511] Kernel Offset: disabled [ 221.423179][ T9511] Rebooting in 86400 seconds..