last executing test programs: 1m57.965892188s ago: executing program 1 (id=1367): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x1d, &(0x7f0000000000)='/proc/\x00et/\x00\x00t4/\x06\x00aK\fX\a0\x04\x00\x00\a\x00\xee'}, 0x30) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000180)={@val={0x0, 0x6001}, @void, @eth={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x4000, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x88be, 0x8}}}}}}, 0x2e) 1m57.327221992s ago: executing program 1 (id=1372): r0 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x0, 0x12, 0x0, 0x8000, 0x23, @ipv4={'\x00', '\xff\xff', @empty}, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x8, 0x0, 0x0, 0x6}}) 1m56.614194321s ago: executing program 1 (id=1376): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x6}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x6}, 0x8) 1m56.133282597s ago: executing program 1 (id=1381): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c880}, 0x2404c8c0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$tipc(r0, 0x0, 0x0) 1m54.503920009s ago: executing program 1 (id=1390): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c00010062"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000021}, 0x4044080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 1m53.333848548s ago: executing program 1 (id=1398): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000c0000000b30000007f"], 0x50) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000660000007fffffff18000000f8ffffff0000000090ffffff9500000000000000360a00000000001018010000202078250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222}, 0x94) 1m50.605737296s ago: executing program 32 (id=1398): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000c0000000b30000007f"], 0x50) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000660000007fffffff18000000f8ffffff0000000090ffffff9500000000000000360a00000000001018010000202078250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222}, 0x94) 1m16.630442773s ago: executing program 4 (id=1533): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000600)={'vlan0\x00', &(0x7f0000000340)=@ethtool_cmd={0x1, 0xfffffff9, 0x10, 0xf, 0x10, 0xa, 0xe, 0x8, 0x4, 0x2, 0xa, 0x12, 0x8, 0xa, 0x1, 0x0, [0x4, 0xffffffff]}}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0000ff0206010200000000000000000000000a05000100070000000900020073797a30000000000500050005000000050004000000000012000300686173683a6e44742c706f727400000072136fde3952f83bde7e42f8567ff23fb387a5eaab2b7527bd6524d139c19332d25ae95f6243f720a6901775c3c493b293f8aaca6c9ab1a1172eebb5382c"], 0x4c}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0xd76}, 0x18) r2 = socket(0x10, 0x80003, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[], 0x18}}, 0x4001) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000000)={0x4, 0x8, "182b71", 0x5, 0xff}) 1m15.462332127s ago: executing program 4 (id=1536): pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) 1m15.035098081s ago: executing program 4 (id=1539): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000004c0)='sched_switch\x00', r0, 0x0, 0x7cf}, 0x18) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076655468315f6d6163767461700000000900010073797a31000000002c000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000014000000110001"], 0xc8}}, 0x0) close(r1) 1m14.400269939s ago: executing program 4 (id=1544): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c00068018"], 0x8c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) 1m13.751226405s ago: executing program 4 (id=1547): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x64, 0x10, 0x40d, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @random="063154a3e049"}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x64}}, 0x8000) 1m13.228432651s ago: executing program 4 (id=1552): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x14, 0x110, 0x1, 0xfffffffc}}], 0x18, 0x4c00}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r2, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4004441) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0xe429, @none, 0x401}, 0xe) socket(0x2b, 0x6, 0x8000) 57.945267931s ago: executing program 33 (id=1552): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x14, 0x110, 0x1, 0xfffffffc}}], 0x18, 0x4c00}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r2, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4004441) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0xe429, @none, 0x401}, 0xe) socket(0x2b, 0x6, 0x8000) 5.85892742s ago: executing program 0 (id=1930): sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200100000201010300000000000000000300800308001a4015079cf66c000e800c0002800500010001000000060003400004000006000340000100000c00028005000100880000002c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000bb0c000280050001002f00000006000340000000000800034000000004080008"], 0x120}, 0x1, 0x0, 0x0, 0x20008814}, 0x4000) 5.47405657s ago: executing program 0 (id=1934): shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={r0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={r0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x0, 0x81, 0x693fffd, 0x80, 0x9}, &(0x7f0000000380)=0x9c) 5.017534672s ago: executing program 0 (id=1939): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}, 0x10}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000e00)=ANY=[@ANYBLOB="000088f80180c2000001aaaaaaaaaaaa88a8a000"], 0x72) 4.673232272s ago: executing program 5 (id=1941): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001011ff00000000000000000000000000000000ff0200000000000000000000000000014f194e20001090"], 0x4a) 3.873185805s ago: executing program 0 (id=1945): syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[], 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="090000000800000004000000094000000a000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000003f71e6972d20df3aa81155093d8a9953aa4a3c427aa60a08692f8dd22994232d9619f08d818cb8106b77918d33fa558359c58ca93c6fd78b810ab2b68d36839e63d849afc284224cd8c766a9e6c9f555d7b41320dad88e84dee5fa4a0f49329201e687dc42a5b2fdfdce38886b300138eff8baa256edb83b936b8b2294aa496fe88e65bb632c1e1412e232affbd2ec9e81dfe4be721adcb18154bc2c9c0e6528f522583e5439a218d9ea9a656e7e40cbe0"], 0x48) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r3) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="5800000014001923fc834b80040d8c560a067f020000000000000000000058000b4824ca945f64009400ff03", 0x2c}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @local}, 0xc) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100010000001300000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000000000d0001007564703a73797a3200000000"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r8, &(0x7f0000000580)=ANY=[@ANYBLOB="5300030002"], 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) 3.436681957s ago: executing program 6 (id=1947): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(0x0, r0) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x0, 0x0, {0x3}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}]}, 0x3c}}, 0x0) 3.199243212s ago: executing program 5 (id=1949): shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={r0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={r0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x0, 0x81, 0x693fffd, 0x80, 0x9}, &(0x7f0000000380)=0x9c) 3.186445446s ago: executing program 2 (id=1950): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c00"], 0x8c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) 2.9126121s ago: executing program 2 (id=1951): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e00)={0x28, 0x0, 0xba960a2220112c19, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0x9, 0x14, '#).-!'}]}, 0x28}, 0x1, 0x0, 0x0, 0x100040c0}, 0x80) 2.897394414s ago: executing program 6 (id=1952): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x84, 0x22, 0x0, &(0x7f0000000400)) 2.76350761s ago: executing program 3 (id=1953): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x6) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000300)={'rose0\x00', 0x4000}) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @default, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r2, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc, 0x8}, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000015c0)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001580)={&(0x7f0000001380)=ANY=[@ANYBLOB="140000001000050000000000000000000100000a280000000b0a010200000000000000000a0000080900010073797a300000000008000c400000000914"], 0x50}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000080) socket$netlink(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r5 = accept4(r4, 0x0, 0x0, 0x80000) r6 = accept4(r5, 0x0, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="180000010700000000000000feffffff9500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000002c0)='snd_soc_dapm_connected\x00', r7}, 0x18) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x30, &(0x7f0000000000)=[{&(0x7f0000000800)=ANY=[@ANYBLOB="140100002e00010000000000fcdbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x80) sendmmsg$inet6(r6, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000300}}, {{0x0, 0x0, 0x0}, 0xff03}], 0x2, 0x8000) r9 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000200), 0x4) 2.655217128s ago: executing program 5 (id=1954): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty, 0x5}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in={{0x2, 0x4e23, @loopback}}, 0x0, 0x8dc, 0x800, 0x0, 0x54, 0x6}, 0x9c) 2.480194686s ago: executing program 6 (id=1955): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}, 0x10}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000e00)=ANY=[@ANYBLOB="000088f80180c2000001aaaaaaaaaaaa88a8a000"], 0x72) 2.407492347s ago: executing program 2 (id=1956): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000140)=0x7fc, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000300)="d5", 0x1}], 0x1}}], 0x1, 0x20080058) 2.185494958s ago: executing program 3 (id=1957): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, 0x0, 0x4000) 1.671470782s ago: executing program 3 (id=1958): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=ANY=[], 0x1618}], 0x1}, 0x0) 1.641074452s ago: executing program 2 (id=1959): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001011ff00000000000000000000000000000000ff0200000000000000000000000000014f194e20001090"], 0x4a) 1.353908139s ago: executing program 6 (id=1960): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r2 = syz_genetlink_get_family_id$tipc2(0x0, r1) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x108, r2, 0x100, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x92d7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3a0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5242}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x4000010}, 0x8001) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)={0x24, r5, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x44801}, 0x40) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000180)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0xc010}, 0x40) 1.302858824s ago: executing program 5 (id=1961): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c000680"], 0x8c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) 1.256490524s ago: executing program 3 (id=1962): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(0x0, r0) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x0, 0x0, {0x3}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}]}, 0x3c}}, 0x0) 1.244328633s ago: executing program 0 (id=1963): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@cswp={0x58, 0x114, 0x7, {{0x1, 0x3}, 0x0, 0x0, 0x2, 0x3ff, 0x7, 0x8000000000000000, 0x8, 0x2}}], 0x58}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r1], 0x40}}, 0x0) unshare(0x22020400) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 787.074453ms ago: executing program 6 (id=1964): shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={r0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={r0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x0, 0x81, 0x693fffd, 0x80, 0x9}, &(0x7f0000000380)=0x9c) 772.034607ms ago: executing program 3 (id=1965): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000c0000000b30000007f"], 0x50) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000a10000000000000000000010851000000600000018180000", @ANYRES32=r0, @ANYBLOB="0000000000000000660000007fffffff18000000f8ffffff00000000100002019500000000000000360a00000000000018010000202078250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222}, 0x94) 714.500499ms ago: executing program 5 (id=1966): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x20, r0, 0x7, 0x0, 0x25dfdbfd, {{0x8}, {@void, @void, @val={0xc, 0x99, {0x5, 0x2}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4844}, 0x0) 510.843309ms ago: executing program 0 (id=1967): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x6) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000300)={'rose0\x00', 0x4000}) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @default, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r2, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc, 0x8}, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000015c0)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001580)={&(0x7f0000001380)=ANY=[@ANYBLOB="140000001000050000000000000000000100000a280000000b0a010200000000000000000a0000080900010073797a300000000008000c400000000914"], 0x50}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000080) socket$netlink(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r5 = accept4(r4, 0x0, 0x0, 0x80000) r6 = accept4(r5, 0x0, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="180000010700000000000000feffffff9500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000002c0)='snd_soc_dapm_connected\x00', r7}, 0x18) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x30, &(0x7f0000000000)=[{&(0x7f0000000800)=ANY=[@ANYBLOB="140100002e00010000000000fcdbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x80) sendmmsg$inet6(r6, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000300}}, {{0x0, 0x0, 0x0}, 0xff03}], 0x2, 0x8000) r9 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000200), 0x4) 434.903686ms ago: executing program 2 (id=1968): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, 0x0, 0x4000) 303.425589ms ago: executing program 5 (id=1969): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000140)=0x7fc, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000440)={0xa, 0x4e20, 0x2, @empty, 0x6}, 0x1c, 0x0}}], 0x1, 0x20080058) 202.849101ms ago: executing program 6 (id=1970): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) 102.28489ms ago: executing program 3 (id=1971): r0 = socket(0x15, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}, 0x1c) 0s ago: executing program 2 (id=1972): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x1618}], 0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.225' (ED25519) to the list of known hosts. [ 192.296875][ T5795] cgroup: Unknown subsys name 'net' [ 192.415142][ T5795] cgroup: Unknown subsys name 'cpuset' [ 192.432114][ T5795] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 199.125614][ T5795] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 203.558652][ T5813] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 203.568091][ T5813] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 203.576955][ T5813] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 203.589345][ T5813] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 203.599917][ T5813] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 203.752304][ T5820] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 203.802644][ T49] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 203.811610][ T49] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 203.820467][ T49] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 203.834819][ T5821] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 203.846168][ T5821] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 203.855446][ T5821] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 203.869061][ T5821] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 203.881928][ T5821] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 203.892563][ T5821] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 203.911901][ T5813] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 203.925915][ T5813] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 203.937956][ T5813] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 203.973829][ T5827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 203.984529][ T5827] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 204.000034][ T5813] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 204.012020][ T5813] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 204.020560][ T5827] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 204.099819][ T5110] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 204.159382][ T5110] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 204.865058][ T5811] chnl_net:caif_netlink_parms(): no params data found [ 205.628195][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 205.710953][ T5110] Bluetooth: hci0: command tx timeout [ 205.992462][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 206.032151][ T5110] Bluetooth: hci3: command tx timeout [ 206.108249][ T5110] Bluetooth: hci1: command tx timeout [ 206.192832][ T5110] Bluetooth: hci4: command tx timeout [ 206.199004][ T5110] Bluetooth: hci2: command tx timeout [ 206.338330][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 206.555928][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.567170][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.577206][ T5811] bridge_slave_0: entered allmulticast mode [ 206.587739][ T5811] bridge_slave_0: entered promiscuous mode [ 206.623962][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.631644][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.639582][ T5811] bridge_slave_1: entered allmulticast mode [ 206.649558][ T5811] bridge_slave_1: entered promiscuous mode [ 206.821959][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.832386][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.840308][ T5819] bridge_slave_0: entered allmulticast mode [ 206.850247][ T5819] bridge_slave_0: entered promiscuous mode [ 206.896365][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 207.089610][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.097199][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.107852][ T5819] bridge_slave_1: entered allmulticast mode [ 207.119408][ T5819] bridge_slave_1: entered promiscuous mode [ 207.143701][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.256009][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.375273][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.382994][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.391079][ T5817] bridge_slave_0: entered allmulticast mode [ 207.401245][ T5817] bridge_slave_0: entered promiscuous mode [ 207.597151][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.605910][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.613927][ T5817] bridge_slave_1: entered allmulticast mode [ 207.623811][ T5817] bridge_slave_1: entered promiscuous mode [ 207.712348][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.794911][ T5811] team0: Port device team_slave_0 added [ 207.803522][ T49] Bluetooth: hci0: command tx timeout [ 207.817896][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.838236][ T5811] team0: Port device team_slave_1 added [ 208.000400][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.026504][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.107978][ T49] Bluetooth: hci3: command tx timeout [ 208.188597][ T49] Bluetooth: hci1: command tx timeout [ 208.272628][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.274525][ T49] Bluetooth: hci2: command tx timeout [ 208.279945][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.285546][ T5110] Bluetooth: hci4: command tx timeout [ 208.312151][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.330176][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.341689][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.351744][ T5815] bridge_slave_0: entered allmulticast mode [ 208.361626][ T5815] bridge_slave_0: entered promiscuous mode [ 208.381779][ T5819] team0: Port device team_slave_0 added [ 208.441626][ T5819] team0: Port device team_slave_1 added [ 208.450935][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.458625][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.466290][ T5815] bridge_slave_1: entered allmulticast mode [ 208.476099][ T5815] bridge_slave_1: entered promiscuous mode [ 208.530458][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.537798][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.564166][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.583140][ T5817] team0: Port device team_slave_0 added [ 208.772177][ T5817] team0: Port device team_slave_1 added [ 208.780517][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.788416][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.796121][ T5825] bridge_slave_0: entered allmulticast mode [ 208.805498][ T5825] bridge_slave_0: entered promiscuous mode [ 208.862794][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.870228][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.896834][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.958914][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.966496][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.974318][ T5825] bridge_slave_1: entered allmulticast mode [ 208.984687][ T5825] bridge_slave_1: entered promiscuous mode [ 209.004820][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.056037][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.063465][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.089991][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.186566][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.199023][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.206161][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.232580][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.439995][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.447140][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.473878][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.498915][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.597512][ T5811] hsr_slave_0: entered promiscuous mode [ 209.606834][ T5811] hsr_slave_1: entered promiscuous mode [ 209.626177][ T5815] team0: Port device team_slave_0 added [ 209.713516][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.810115][ T5815] team0: Port device team_slave_1 added [ 209.867980][ T49] Bluetooth: hci0: command tx timeout [ 209.935272][ T5819] hsr_slave_0: entered promiscuous mode [ 209.946710][ T5819] hsr_slave_1: entered promiscuous mode [ 209.956210][ T5819] debugfs: 'hsr0' already exists in 'hsr' [ 209.962333][ T5819] Cannot create hsr debugfs directory [ 210.143806][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.151392][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.177921][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.189788][ T49] Bluetooth: hci3: command tx timeout [ 210.196089][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.203656][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.230108][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.254356][ T5825] team0: Port device team_slave_0 added [ 210.268098][ T49] Bluetooth: hci1: command tx timeout [ 210.274044][ T5825] team0: Port device team_slave_1 added [ 210.316238][ T5817] hsr_slave_0: entered promiscuous mode [ 210.327075][ T5817] hsr_slave_1: entered promiscuous mode [ 210.336400][ T5817] debugfs: 'hsr0' already exists in 'hsr' [ 210.342757][ T5817] Cannot create hsr debugfs directory [ 210.348706][ T49] Bluetooth: hci4: command tx timeout [ 210.374035][ T49] Bluetooth: hci2: command tx timeout [ 210.778961][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.786140][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.812842][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.931661][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.939095][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.965432][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.186904][ T5815] hsr_slave_0: entered promiscuous mode [ 211.196517][ T5815] hsr_slave_1: entered promiscuous mode [ 211.205206][ T5815] debugfs: 'hsr0' already exists in 'hsr' [ 211.211402][ T5815] Cannot create hsr debugfs directory [ 211.606845][ T5825] hsr_slave_0: entered promiscuous mode [ 211.619777][ T5825] hsr_slave_1: entered promiscuous mode [ 211.628449][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 211.634659][ T5825] Cannot create hsr debugfs directory [ 211.835135][ T5811] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 211.954494][ T49] Bluetooth: hci0: command tx timeout [ 211.991225][ T5811] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 212.167860][ T5811] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 212.208898][ T5811] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 212.272066][ T49] Bluetooth: hci3: command tx timeout [ 212.347865][ T49] Bluetooth: hci1: command tx timeout [ 212.428128][ T49] Bluetooth: hci2: command tx timeout [ 212.432050][ T5110] Bluetooth: hci4: command tx timeout [ 212.542983][ T5819] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 212.608882][ T5819] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 212.676943][ T5819] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 212.762414][ T5819] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 212.981884][ T5817] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 213.009793][ T5817] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 213.100258][ T5817] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 213.191785][ T5817] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 213.400709][ T5815] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 213.426863][ T5825] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 213.504120][ T5815] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 213.534157][ T5815] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 213.575010][ T5815] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 213.599921][ T5825] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 213.683414][ T5825] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 213.754787][ T5825] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 214.263016][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.479395][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.512640][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.611506][ T3567] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.619146][ T3567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.676043][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.705793][ T3567] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.713451][ T3567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.944518][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.993299][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.112868][ T3567] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.120533][ T3567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.238731][ T3567] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.246288][ T3567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.262759][ T3567] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.270404][ T3567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.311556][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.494879][ T3567] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.502541][ T3567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.654405][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.880171][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.930763][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.045095][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.052798][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.162282][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.170048][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.191888][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.199716][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.401351][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.409117][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.826887][ T5815] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 216.986613][ T5825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 217.818199][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.224319][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.445415][ T5811] veth0_vlan: entered promiscuous mode [ 218.611867][ T5811] veth1_vlan: entered promiscuous mode [ 218.639141][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.121198][ T5811] veth0_macvtap: entered promiscuous mode [ 219.221870][ T5811] veth1_macvtap: entered promiscuous mode [ 219.296468][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.321368][ T5819] veth0_vlan: entered promiscuous mode [ 219.358226][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.511284][ T5819] veth1_vlan: entered promiscuous mode [ 219.530552][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.653562][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.919575][ T4109] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.992521][ T3593] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.011827][ T5819] veth0_macvtap: entered promiscuous mode [ 220.038353][ T3593] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.047885][ T3593] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.093756][ T5815] veth0_vlan: entered promiscuous mode [ 220.154716][ T5819] veth1_macvtap: entered promiscuous mode [ 220.210068][ T5825] veth0_vlan: entered promiscuous mode [ 220.283008][ T5815] veth1_vlan: entered promiscuous mode [ 220.335951][ T5825] veth1_vlan: entered promiscuous mode [ 220.408759][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.530398][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.637277][ T4109] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.739962][ T5815] veth0_macvtap: entered promiscuous mode [ 220.754770][ T4109] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.800129][ T5815] veth1_macvtap: entered promiscuous mode [ 220.848184][ T78] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.857310][ T78] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.884893][ T5825] veth0_macvtap: entered promiscuous mode [ 220.973656][ T5825] veth1_macvtap: entered promiscuous mode [ 221.082900][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.206378][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.235171][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.337479][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.359362][ T1139] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.408917][ T1139] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.479774][ T3672] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.542067][ T3672] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.654613][ T3672] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.704262][ T4109] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.805105][ T3549] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.901726][ T5817] veth0_vlan: entered promiscuous mode [ 221.919103][ T3549] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.022582][ T5817] veth1_vlan: entered promiscuous mode [ 222.520695][ T5817] veth0_macvtap: entered promiscuous mode [ 222.613032][ T5817] veth1_macvtap: entered promiscuous mode [ 222.822964][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.952880][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.094900][ T78] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.162564][ T78] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.244305][ T78] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.310442][ T78] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.274312][ T3790] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.282992][ T3790] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.416568][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.425824][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.639301][ T3690] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.647443][ T3690] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.648004][ T3790] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.663880][ T3790] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.052903][ T5811] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 229.563145][ T3567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.571921][ T3567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.642820][ T4109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.651189][ T4109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.954609][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.963718][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.083873][ T3593] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.092656][ T3593] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.917100][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.926101][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.284781][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.293915][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.971220][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 234.978915][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 243.269618][ T6146] Zero length message leads to an empty skb [ 259.007759][ C0] hrtimer: interrupt took 287619 ns [ 269.167054][ T6472] tipc: Started in network mode [ 269.172662][ T6472] tipc: Node identity f2320f1ff7e6, cluster identity 4711 [ 269.181877][ T6472] tipc: Enabled bearer , priority 0 [ 269.255324][ T6475] syzkaller0: entered promiscuous mode [ 269.261671][ T6475] syzkaller0: entered allmulticast mode [ 269.377462][ T6472] tipc: Resetting bearer [ 269.402849][ T6471] tipc: Resetting bearer [ 269.477429][ T6471] tipc: Disabling bearer [ 274.128639][ T6531] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.139260][ T6531] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.478718][ T6531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.511120][ T6531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.459123][ T78] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.505374][ T6552] netlink: 48 bytes leftover after parsing attributes in process `syz.0.245'. [ 275.596718][ T78] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.664221][ T78] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.701337][ T78] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.759712][ T6550] tipc: Started in network mode [ 275.765161][ T6550] tipc: Node identity da5dca6ffa11, cluster identity 4711 [ 275.774090][ T6550] tipc: Enabled bearer , priority 0 [ 275.838555][ T6554] syzkaller0: entered promiscuous mode [ 275.844304][ T6554] syzkaller0: entered allmulticast mode [ 275.936641][ T6550] tipc: Resetting bearer [ 276.030597][ T6548] tipc: Resetting bearer [ 276.085892][ T6548] tipc: Disabling bearer [ 276.205251][ T6560] netlink: 40 bytes leftover after parsing attributes in process `syz.0.247'. [ 277.459004][ T6579] netlink: 48 bytes leftover after parsing attributes in process `syz.4.257'. [ 278.020013][ T6580] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.030226][ T6580] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.353612][ T6580] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.384450][ T6580] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.312766][ T6597] tipc: Started in network mode [ 279.318135][ T6597] tipc: Node identity 4234d4c384a6, cluster identity 4711 [ 279.326435][ T6597] tipc: Enabled bearer , priority 0 [ 279.333740][ T3549] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.352725][ T3549] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.379623][ T6603] netlink: 40 bytes leftover after parsing attributes in process `syz.1.263'. [ 279.405185][ T6595] tipc: Resetting bearer [ 279.421874][ T3549] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.455469][ T3549] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.602047][ T6594] tipc: Disabling bearer [ 280.655653][ T6621] netlink: 48 bytes leftover after parsing attributes in process `syz.0.270'. [ 280.979624][ T6625] netlink: 20 bytes leftover after parsing attributes in process `syz.4.273'. [ 281.752747][ T6635] netlink: 40 bytes leftover after parsing attributes in process `syz.4.277'. [ 282.177975][ T6638] netlink: 256 bytes leftover after parsing attributes in process `syz.0.279'. [ 282.550784][ T6645] tipc: Enabled bearer , priority 0 [ 282.624915][ T6645] syzkaller0: entered promiscuous mode [ 282.631208][ T6645] syzkaller0: entered allmulticast mode [ 282.837362][ T6645] tipc: Resetting bearer [ 282.921691][ T6643] tipc: Resetting bearer [ 282.970289][ T6643] tipc: Disabling bearer [ 283.542819][ T6663] netlink: 20 bytes leftover after parsing attributes in process `syz.1.286'. [ 284.298368][ T6668] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.308685][ T6668] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.419022][ T6676] netlink: 40 bytes leftover after parsing attributes in process `syz.3.292'. [ 284.712796][ T6668] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.745962][ T6668] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.722590][ T6686] netlink: 256 bytes leftover after parsing attributes in process `syz.1.295'. [ 285.757285][ T3790] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.808240][ T3790] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.860835][ T3790] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.895636][ T3790] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.280392][ T6694] tipc: Enabled bearer , priority 0 [ 286.327769][ T6694] syzkaller0: entered promiscuous mode [ 286.335332][ T6694] syzkaller0: entered allmulticast mode [ 286.440080][ T6694] tipc: Resetting bearer [ 286.474621][ T6693] tipc: Resetting bearer [ 286.526346][ T6693] tipc: Disabling bearer [ 286.865024][ T6706] syz.4.303 uses obsolete (PF_INET,SOCK_PACKET) [ 287.759692][ T6717] netlink: 40 bytes leftover after parsing attributes in process `syz.1.308'. [ 288.139627][ T6724] netlink: 256 bytes leftover after parsing attributes in process `syz.3.311'. [ 288.651371][ T6732] tipc: Enabled bearer , priority 0 [ 288.689572][ T6732] syzkaller0: entered promiscuous mode [ 288.695388][ T6732] syzkaller0: entered allmulticast mode [ 288.823175][ T6732] tipc: Resetting bearer [ 288.879336][ T6731] tipc: Resetting bearer [ 288.940094][ T6731] tipc: Disabling bearer [ 290.410798][ T6759] netlink: 40 bytes leftover after parsing attributes in process `syz.4.324'. [ 291.179259][ T6771] tipc: Started in network mode [ 291.184536][ T6771] tipc: Node identity 82b8397893c1, cluster identity 4711 [ 291.193369][ T6771] tipc: Enabled bearer , priority 0 [ 291.270534][ T6775] syzkaller0: entered promiscuous mode [ 291.276280][ T6775] syzkaller0: entered allmulticast mode [ 291.395990][ T6771] tipc: Resetting bearer [ 291.493064][ T6769] tipc: Resetting bearer [ 291.529223][ T6769] tipc: Disabling bearer [ 292.931910][ T6794] netlink: 20 bytes leftover after parsing attributes in process `syz.0.338'. [ 295.478825][ T6841] netlink: 12 bytes leftover after parsing attributes in process `syz.4.355'. [ 296.377164][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 296.384403][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 296.579260][ T6854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.359'. [ 297.089291][ T6859] netlink: 20 bytes leftover after parsing attributes in process `syz.2.361'. [ 297.229173][ T6861] netlink: 40 bytes leftover after parsing attributes in process `syz.4.362'. [ 299.157951][ T6885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.372'. [ 299.651860][ T6887] tipc: Enabled bearer , priority 0 [ 299.741123][ T6888] syzkaller0: entered promiscuous mode [ 299.749823][ T6888] syzkaller0: entered allmulticast mode [ 299.888725][ T6887] tipc: Resetting bearer [ 299.938979][ T6892] netlink: 20 bytes leftover after parsing attributes in process `syz.2.375'. [ 300.420774][ T6884] tipc: Resetting bearer [ 300.531221][ T6884] tipc: Disabling bearer [ 300.705616][ T6897] netlink: 40 bytes leftover after parsing attributes in process `syz.0.376'. [ 301.877217][ T6913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.384'. [ 302.607842][ T6919] netlink: 20 bytes leftover after parsing attributes in process `syz.2.387'. [ 302.895249][ T6921] tipc: Enabled bearer , priority 0 [ 302.929759][ T6921] syzkaller0: entered promiscuous mode [ 302.935484][ T6921] syzkaller0: entered allmulticast mode [ 303.044631][ T6921] tipc: Resetting bearer [ 303.064938][ T6924] netlink: 40 bytes leftover after parsing attributes in process `syz.3.389'. [ 303.119162][ T6920] tipc: Resetting bearer [ 303.175506][ T6920] tipc: Disabling bearer [ 303.665862][ T6931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.393'. [ 304.267246][ T6941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.397'. [ 305.348573][ T6956] netlink: 40 bytes leftover after parsing attributes in process `syz.2.403'. [ 306.065792][ T6962] tipc: Enabled bearer , priority 0 [ 306.095377][ T6962] syzkaller0: entered promiscuous mode [ 306.101377][ T6962] syzkaller0: entered allmulticast mode [ 306.183295][ T6961] tipc: Resetting bearer [ 306.206239][ T6961] tipc: Disabling bearer [ 306.424256][ T6964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.407'. [ 307.031120][ T6970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.410'. [ 307.148805][ T6977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.411'. [ 308.016713][ T6985] netlink: 40 bytes leftover after parsing attributes in process `syz.1.416'. [ 308.756774][ T6994] tipc: Enabled bearer , priority 0 [ 308.837942][ T6994] syzkaller0: entered promiscuous mode [ 308.843769][ T6994] syzkaller0: entered allmulticast mode [ 308.917717][ T6991] tipc: Resetting bearer [ 308.930363][ T6998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.422'. [ 308.973071][ T6991] tipc: Disabling bearer [ 309.341259][ T7002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.424'. [ 309.648388][ T7005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.425'. [ 310.269125][ T7018] netlink: 40 bytes leftover after parsing attributes in process `syz.2.430'. [ 311.133304][ T7029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.435'. [ 311.305431][ T7035] tipc: Enabled bearer , priority 0 [ 311.483243][ T7034] syzkaller0: entered promiscuous mode [ 311.489312][ T7034] syzkaller0: entered allmulticast mode [ 311.627332][ T7032] tipc: Resetting bearer [ 311.692362][ T7032] tipc: Disabling bearer [ 311.888809][ T7041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.439'. [ 312.625312][ T7050] netlink: 24 bytes leftover after parsing attributes in process `syz.3.443'. [ 313.863891][ T7062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.449'. [ 314.513820][ T7067] tipc: Enabled bearer , priority 0 [ 314.593250][ T7070] syzkaller0: entered promiscuous mode [ 314.599481][ T7070] syzkaller0: entered allmulticast mode [ 314.677133][ T7066] tipc: Resetting bearer [ 314.730744][ T7066] tipc: Disabling bearer [ 314.738116][ T7073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.453'. [ 315.028957][ T7077] netlink: 24 bytes leftover after parsing attributes in process `syz.3.455'. [ 316.186535][ T7089] netlink: 24 bytes leftover after parsing attributes in process `syz.4.460'. [ 316.268250][ T7091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.461'. [ 317.081117][ T7103] tipc: Enabled bearer , priority 0 [ 317.112069][ T7103] syzkaller0: entered promiscuous mode [ 317.118072][ T7103] syzkaller0: entered allmulticast mode [ 317.133163][ T7105] netlink: 4 bytes leftover after parsing attributes in process `syz.4.467'. [ 317.219411][ T7101] tipc: Resetting bearer [ 317.285746][ T7101] tipc: Disabling bearer [ 317.603841][ T7110] netlink: 24 bytes leftover after parsing attributes in process `syz.1.469'. [ 318.249272][ T7121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.474'. [ 318.989694][ T7128] netlink: 24 bytes leftover after parsing attributes in process `syz.4.477'. [ 319.704586][ T7140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.480'. [ 320.092454][ T7145] tipc: Enabled bearer , priority 0 [ 320.128624][ T7145] syzkaller0: entered promiscuous mode [ 320.134462][ T7145] syzkaller0: entered allmulticast mode [ 320.220421][ T7144] tipc: Resetting bearer [ 320.283314][ T7144] tipc: Disabling bearer [ 320.842037][ T7153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.485'. [ 321.141149][ T7158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.487'. [ 321.931585][ T7167] netlink: 24 bytes leftover after parsing attributes in process `syz.1.491'. [ 322.606849][ T7175] tipc: Enabled bearer , priority 0 [ 322.650138][ T7175] tipc: Resetting bearer [ 322.710916][ T7174] tipc: Disabling bearer [ 323.439007][ T7193] netlink: 8 bytes leftover after parsing attributes in process `syz.4.501'. [ 324.543666][ T7205] netlink: 24 bytes leftover after parsing attributes in process `syz.3.507'. [ 325.441735][ T7217] tipc: Enabled bearer , priority 0 [ 325.519633][ T7217] tipc: Resetting bearer [ 325.534943][ T7215] tipc: Disabling bearer [ 326.400286][ T5110] Bluetooth: hci4: link tx timeout [ 326.405634][ T5110] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 326.414144][ T5110] Bluetooth: hci4: link tx timeout [ 326.419599][ T5110] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 327.259966][ T7239] netlink: 24 bytes leftover after parsing attributes in process `syz.3.521'. [ 327.732240][ T7245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.524'. [ 327.782550][ T7247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.525'. [ 328.522842][ T5821] Bluetooth: hci4: command 0x0406 tx timeout [ 328.739302][ T7252] syzkaller0: entered promiscuous mode [ 328.745046][ T7252] syzkaller0: entered allmulticast mode [ 329.148662][ T5821] Bluetooth: hci0: command 0x0406 tx timeout [ 329.156485][ T5821] Bluetooth: hci1: command 0x0406 tx timeout [ 329.159563][ T5828] Bluetooth: hci2: command 0x0406 tx timeout [ 329.163226][ T5821] Bluetooth: hci3: command 0x0406 tx timeout [ 330.173344][ T7276] netlink: 24 bytes leftover after parsing attributes in process `syz.0.536'. [ 330.678534][ T5827] Bluetooth: hci4: command 0x0406 tx timeout [ 331.965636][ T7300] netlink: 12 bytes leftover after parsing attributes in process `syz.4.545'. [ 333.372192][ T7310] warning: `syz.4.550' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 333.547942][ T5827] Bluetooth: hci4: command 0x0406 tx timeout [ 333.751542][ T7321] netlink: 'syz.2.554': attribute type 13 has an invalid length. [ 336.349303][ T7355] netlink: 12 bytes leftover after parsing attributes in process `syz.3.569'. [ 338.455338][ T7389] netlink: 12 bytes leftover after parsing attributes in process `syz.4.584'. [ 339.629951][ T7407] syzkaller0: entered promiscuous mode [ 339.635670][ T7407] syzkaller0: entered allmulticast mode [ 341.584886][ T7442] syzkaller0: entered promiscuous mode [ 341.593932][ T7442] syzkaller0: entered allmulticast mode [ 343.866938][ T7476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.620'. [ 344.586359][ T7484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.623'. [ 347.038860][ T7518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.638'. [ 349.698376][ T7561] netlink: 4 bytes leftover after parsing attributes in process `syz.0.653'. [ 350.911338][ T7578] netlink: 80 bytes leftover after parsing attributes in process `syz.1.658'. [ 350.976393][ T7581] lo speed is unknown, defaulting to 1000 [ 350.986108][ T7581] lo speed is unknown, defaulting to 1000 [ 350.993805][ T7581] lo speed is unknown, defaulting to 1000 [ 351.802430][ T7581] infiniband syz0: set down [ 351.807178][ T7581] infiniband syz0: added lo [ 351.818490][ T5864] lo speed is unknown, defaulting to 1000 [ 352.040072][ T7595] netlink: 24 bytes leftover after parsing attributes in process `syz.4.664'. [ 352.153499][ T7581] RDS/IB: syz0: added [ 352.160496][ T7581] smc: adding ib device syz0 with port count 1 [ 352.166875][ T7581] smc: ib device syz0 port 1 has pnetid [ 352.254845][ T7581] lo speed is unknown, defaulting to 1000 [ 352.411814][ T5864] lo speed is unknown, defaulting to 1000 [ 352.860085][ T7581] lo speed is unknown, defaulting to 1000 [ 353.861670][ T7581] lo speed is unknown, defaulting to 1000 [ 353.928129][ T7617] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 354.645822][ T7581] lo speed is unknown, defaulting to 1000 [ 355.183124][ T7581] lo speed is unknown, defaulting to 1000 [ 357.698610][ T7669] netlink: 24 bytes leftover after parsing attributes in process `syz.0.690'. [ 357.848735][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 357.855414][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 358.398842][ T7681] netlink: 12 bytes leftover after parsing attributes in process `syz.1.694'. [ 360.380626][ T7714] netlink: 24 bytes leftover after parsing attributes in process `syz.3.706'. [ 361.311237][ T7730] netlink: 12 bytes leftover after parsing attributes in process `syz.3.710'. [ 363.029734][ T7755] netlink: 24 bytes leftover after parsing attributes in process `syz.1.720'. [ 363.820450][ T7770] netlink: 12 bytes leftover after parsing attributes in process `syz.4.725'. [ 365.388834][ T7786] syz.1.733 (7786) used obsolete PPPIOCDETACH ioctl [ 367.233772][ T7806] netlink: 28 bytes leftover after parsing attributes in process `syz.1.741'. [ 367.401979][ T7810] tap0: tun_chr_ioctl cmd 1074025677 [ 367.408601][ T7810] tap0: linktype set to 0 [ 368.406471][ T7815] netlink: 256 bytes leftover after parsing attributes in process `syz.3.745'. [ 370.611086][ T7835] netlink: 40 bytes leftover after parsing attributes in process `syz.1.752'. [ 371.645403][ T7847] netlink: 256 bytes leftover after parsing attributes in process `syz.1.757'. [ 372.998126][ T7868] netlink: 40 bytes leftover after parsing attributes in process `syz.1.767'. [ 373.957905][ T7879] netlink: 256 bytes leftover after parsing attributes in process `syz.3.772'. [ 375.486954][ T7900] netlink: 40 bytes leftover after parsing attributes in process `syz.0.781'. [ 375.988508][ T7906] netlink: 24 bytes leftover after parsing attributes in process `syz.1.785'. [ 376.965240][ T7914] netlink: 256 bytes leftover after parsing attributes in process `syz.3.787'. [ 378.112908][ T7933] netlink: 40 bytes leftover after parsing attributes in process `syz.1.796'. [ 378.276247][ T7938] netlink: 24 bytes leftover after parsing attributes in process `syz.3.798'. [ 379.426708][ T7951] netlink: 256 bytes leftover after parsing attributes in process `syz.3.803'. [ 380.637919][ T7967] netlink: 40 bytes leftover after parsing attributes in process `syz.2.810'. [ 381.269181][ T7973] netlink: 24 bytes leftover after parsing attributes in process `syz.2.813'. [ 382.075056][ T7983] netlink: 256 bytes leftover after parsing attributes in process `syz.0.818'. [ 383.840542][ T8012] netlink: 24 bytes leftover after parsing attributes in process `syz.0.830'. [ 384.497095][ T8020] netlink: 256 bytes leftover after parsing attributes in process `syz.1.833'. [ 386.385246][ T8046] netlink: 24 bytes leftover after parsing attributes in process `syz.2.844'. [ 386.995647][ T8053] netlink: 256 bytes leftover after parsing attributes in process `syz.0.847'. [ 389.308616][ T8086] netlink: 12 bytes leftover after parsing attributes in process `syz.3.861'. [ 389.378006][ T8087] netlink: 24 bytes leftover after parsing attributes in process `syz.4.860'. [ 389.700173][ T8089] netlink: 256 bytes leftover after parsing attributes in process `syz.0.862'. [ 391.922729][ T8127] netlink: 24 bytes leftover after parsing attributes in process `syz.0.876'. [ 392.511742][ T8133] netlink: 256 bytes leftover after parsing attributes in process `syz.2.877'. [ 395.102909][ T8161] netlink: 24 bytes leftover after parsing attributes in process `syz.4.889'. [ 395.377679][ T8166] geneve2: entered promiscuous mode [ 395.398325][ T1139] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.415826][ T4109] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.490667][ T4109] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.512249][ T4109] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.883874][ T8170] tipc: Started in network mode [ 395.889265][ T8170] tipc: Node identity 2610d4ef8248, cluster identity 4711 [ 395.901155][ T8170] tipc: Enabled bearer , priority 0 [ 395.980621][ T8177] syzkaller0: entered promiscuous mode [ 395.986474][ T8177] syzkaller0: entered allmulticast mode [ 396.120438][ T8170] tipc: Resetting bearer [ 396.149180][ T8167] tipc: Resetting bearer [ 396.212852][ T8167] tipc: Disabling bearer [ 397.385750][ T8197] vxcan2: entered allmulticast mode [ 398.731844][ T8217] netlink: 40 bytes leftover after parsing attributes in process `syz.1.911'. [ 400.102251][ T8234] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.112539][ T8234] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.409233][ T8234] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.440666][ T8234] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 401.445942][ T78] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.486625][ T78] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.538418][ T78] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.577763][ T78] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.855850][ T8271] tipc: Enabling of bearer rejected, failed to enable media [ 404.025166][ T8291] netlink: 12 bytes leftover after parsing attributes in process `syz.3.940'. [ 404.370944][ T8298] syzkaller1: entered promiscuous mode [ 404.376803][ T8298] syzkaller1: entered allmulticast mode [ 406.059486][ T8323] tipc: Enabling of bearer rejected, failed to enable media [ 406.956474][ T8341] netlink: 12 bytes leftover after parsing attributes in process `syz.3.957'. [ 407.864928][ T8354] netlink: 'syz.4.964': attribute type 1 has an invalid length. [ 408.472234][ T8364] tipc: Enabled bearer , priority 0 [ 408.520717][ T8364] tipc: Resetting bearer [ 408.599750][ T8361] tipc: Disabling bearer [ 408.891515][ T8371] netlink: 12 bytes leftover after parsing attributes in process `syz.3.971'. [ 410.576172][ T8393] lo speed is unknown, defaulting to 1000 [ 411.021573][ T8401] tipc: Enabled bearer , priority 0 [ 411.172519][ T8401] tipc: Resetting bearer [ 411.294729][ T8400] tipc: Disabling bearer [ 411.357011][ T8406] netlink: 12 bytes leftover after parsing attributes in process `syz.1.984'. [ 414.048573][ T8445] netlink: 12 bytes leftover after parsing attributes in process `syz.1.997'. [ 414.321383][ T8447] tipc: Enabled bearer , priority 0 [ 414.412416][ T8451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.999'. [ 414.432917][ T8447] tipc: Resetting bearer [ 414.544383][ T8446] tipc: Disabling bearer [ 415.003580][ T8461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1003'. [ 415.066948][ T8461] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 415.076055][ T8461] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 415.689244][ T8468] tipc: Enabled bearer , priority 0 [ 415.730760][ T8471] syzkaller0: entered promiscuous mode [ 415.736691][ T8471] syzkaller0: entered allmulticast mode [ 415.875768][ T8468] tipc: Resetting bearer [ 415.974699][ T8466] tipc: Resetting bearer [ 416.030140][ T8466] tipc: Disabling bearer [ 416.713497][ T8487] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1012'. [ 417.643063][ T8495] syzkaller0: entered promiscuous mode [ 417.649359][ T8495] syzkaller0: entered allmulticast mode [ 418.105926][ T8505] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1018'. [ 418.419976][ T8511] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 418.946549][ T8519] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1025'. [ 419.258503][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 419.265574][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 420.023912][ T8533] syzkaller0: entered promiscuous mode [ 420.030305][ T8533] syzkaller0: entered allmulticast mode [ 422.198653][ T8572] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1044'. [ 422.702424][ T8578] syzkaller0: entered promiscuous mode [ 422.708515][ T8578] syzkaller0: entered allmulticast mode [ 425.140473][ T8616] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1060'. [ 426.381038][ T8634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1067'. [ 426.748340][ T8639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1067'. [ 430.293771][ T8700] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.305310][ T8700] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 431.419838][ T8716] nbd0: detected capacity change from 0 to 63 [ 431.516222][ T49] block nbd0: Receive control failed (result -32) [ 431.543834][ T5986] block nbd0: Dead connection, failed to find a fallback [ 431.551547][ T5986] block nbd0: shutting down sockets [ 431.556946][ T5986] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 431.567570][ T5986] Buffer I/O error on dev nbd0, logical block 0, async page read [ 431.575763][ T5986] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 431.585313][ T5986] Buffer I/O error on dev nbd0, logical block 1, async page read [ 431.593628][ T5986] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 431.603174][ T5986] Buffer I/O error on dev nbd0, logical block 2, async page read [ 431.611507][ T5986] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 431.621034][ T5986] Buffer I/O error on dev nbd0, logical block 3, async page read [ 431.629411][ T5986] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 431.640533][ T5986] Buffer I/O error on dev nbd0, logical block 0, async page read [ 431.649319][ T5986] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 431.658839][ T5986] Buffer I/O error on dev nbd0, logical block 1, async page read [ 431.666996][ T5986] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 431.676546][ T5986] Buffer I/O error on dev nbd0, logical block 2, async page read [ 431.684829][ T5986] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 431.694272][ T5986] Buffer I/O error on dev nbd0, logical block 3, async page read [ 431.703129][ T5986] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 431.712706][ T5986] Buffer I/O error on dev nbd0, logical block 0, async page read [ 431.721031][ T5986] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 431.730533][ T5986] Buffer I/O error on dev nbd0, logical block 1, async page read [ 431.744106][ T5986] ldm_validate_partition_table(): Disk read failed. [ 431.754270][ T5986] Dev nbd0: unable to read RDB block 0 [ 431.763224][ T5986] nbd0: unable to read partition table [ 431.793879][ T5986] ldm_validate_partition_table(): Disk read failed. [ 431.803537][ T5986] Dev nbd0: unable to read RDB block 0 [ 431.812441][ T5986] nbd0: unable to read partition table [ 431.850317][ T5986] block nbd0: NBD_DISCONNECT [ 431.855213][ T5986] block nbd0: Send disconnect failed -32 [ 440.423004][ T8844] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.601071][ T8844] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.738261][ T8844] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.889201][ T8844] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.088547][ T3567] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.170193][ T3549] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.278812][ T3549] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.308089][ T3549] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.345705][ T8859] netlink: 'syz.4.1155': attribute type 3 has an invalid length. [ 449.232535][ T8980] !: renamed from dummy0 [ 449.617031][ T8982] lo speed is unknown, defaulting to 1000 [ 450.769316][ T8999] netlink: 'syz.0.1207': attribute type 21 has an invalid length. [ 450.777384][ T8999] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1207'. [ 455.620011][ T9055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1228'. [ 455.649234][ T9055] syz_tun: entered promiscuous mode [ 455.663220][ T9055] syz_tun: left promiscuous mode [ 456.015268][ T9060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1230'. [ 456.729742][ T9065] syzkaller1: entered promiscuous mode [ 456.735469][ T9065] syzkaller1: entered allmulticast mode [ 457.070040][ T9070] syzkaller0: entered promiscuous mode [ 457.075772][ T9070] syzkaller0: entered allmulticast mode [ 459.024269][ T9095] tipc: Enabled bearer , priority 0 [ 459.057706][ T9095] syzkaller0: entered promiscuous mode [ 459.063422][ T9095] syzkaller0: entered allmulticast mode [ 459.165232][ T9095] tipc: Resetting bearer [ 459.249878][ T9093] tipc: Resetting bearer [ 459.276324][ T9093] tipc: Disabling bearer [ 459.550330][ T9101] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1248'. [ 459.612481][ T9104] syzkaller0: entered promiscuous mode [ 459.619581][ T9104] syzkaller0: entered allmulticast mode [ 461.947235][ T9137] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1263'. [ 462.115327][ T9141] syzkaller0: entered promiscuous mode [ 462.121217][ T9141] syzkaller0: entered allmulticast mode [ 463.545628][ T9161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 463.922459][ T1139] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 463.932392][ T1139] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 463.952556][ T5867] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 464.039313][ T5867] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 464.838514][ T5867] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 464.880163][ T9181] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1279'. [ 465.247066][ T9187] syzkaller0: entered promiscuous mode [ 465.253194][ T9187] syzkaller0: entered allmulticast mode [ 466.772480][ T9211] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1290'. [ 467.419811][ T9215] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1292'. [ 467.703472][ T9223] syzkaller0: entered promiscuous mode [ 467.710058][ T9223] syzkaller0: entered allmulticast mode [ 467.788324][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 468.674916][ T9239] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1303'. [ 469.824376][ T9251] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1308'. [ 470.130369][ T9259] syzkaller0: entered promiscuous mode [ 470.137894][ T9259] syzkaller0: entered allmulticast mode [ 470.893846][ T9272] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1317'. [ 472.129163][ T9289] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1324'. [ 472.399904][ T9295] syzkaller0: entered promiscuous mode [ 472.405984][ T9295] syzkaller0: entered allmulticast mode [ 472.600333][ T9300] lo speed is unknown, defaulting to 1000 [ 473.779796][ T9312] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1332'. [ 475.071998][ T9328] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1339'. [ 475.463009][ T9333] syzkaller0: entered promiscuous mode [ 475.469352][ T9333] syzkaller0: entered allmulticast mode [ 475.550178][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 476.471507][ T9350] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1346'. [ 477.759103][ T9363] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1352'. [ 478.455540][ T9370] syzkaller0: entered promiscuous mode [ 478.461622][ T9370] syzkaller0: entered allmulticast mode [ 478.711773][ T9376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1357'. [ 479.172988][ T9380] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1359'. [ 480.320857][ T9392] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1365'. [ 480.720907][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 480.728488][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 480.999536][ T9407] syzkaller0: entered promiscuous mode [ 481.005376][ T9407] syzkaller0: entered allmulticast mode [ 481.365299][ T9413] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1373'. [ 482.385531][ T9429] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1379'. [ 483.394867][ T9442] syzkaller0: entered promiscuous mode [ 483.401120][ T9442] syzkaller0: entered allmulticast mode [ 484.223727][ T9455] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1390'. [ 485.045496][ T9468] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1395'. [ 485.621377][ T3790] bridge_slave_1: left allmulticast mode [ 485.627851][ T3790] bridge_slave_1: left promiscuous mode [ 485.634735][ T3790] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.675580][ T3790] bridge_slave_0: left allmulticast mode [ 485.682210][ T3790] bridge_slave_0: left promiscuous mode [ 485.689330][ T3790] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.547086][ T3790] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 486.595050][ T3790] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 486.621248][ T3790] bond0 (unregistering): Released all slaves [ 487.235850][ T3790] tipc: Left network mode [ 487.887611][ T3790] hsr_slave_0: left promiscuous mode [ 487.928311][ T3790] hsr_slave_1: left promiscuous mode [ 487.949115][ T3790] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 488.025055][ T3790] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.480228][ T3790] team0 (unregistering): Port device team_slave_1 removed [ 489.640892][ T9511] netlink: 'syz.3.1403': attribute type 10 has an invalid length. [ 489.660518][ T3790] team0 (unregistering): Port device team_slave_0 removed [ 489.984706][ T5827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 490.005433][ T5827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 490.019698][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 490.128409][ T5827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 490.176885][ T5827] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 490.864956][ T9517] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 491.011952][ T9512] lo speed is unknown, defaulting to 1000 [ 491.548172][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 491.806427][ T9531] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1408'. [ 492.335847][ T5827] Bluetooth: hci2: command tx timeout [ 493.102788][ T9547] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1411'. [ 493.231110][ T9550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1413'. [ 493.240682][ T9550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1413'. [ 493.250064][ T9550] netlink: 'syz.0.1413': attribute type 1 has an invalid length. [ 493.258223][ T9550] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1413'. [ 493.405523][ T9550] nbd: socks must be embedded in a SOCK_ITEM attr [ 493.412644][ T9550] block nbd0: shutting down sockets [ 494.205302][ T9512] chnl_net:caif_netlink_parms(): no params data found [ 494.348310][ T5827] Bluetooth: hci2: command tx timeout [ 495.222933][ T9579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1421'. [ 495.805093][ T9589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1423'. [ 495.878087][ T9589] netlink: 'syz.2.1423': attribute type 14 has an invalid length. [ 495.886276][ T9589] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1423'. [ 496.069997][ T9592] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.429807][ T5827] Bluetooth: hci2: command tx timeout [ 496.475012][ T9592] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.589588][ T9600] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1425'. [ 496.785321][ T9592] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.823938][ T9512] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.835566][ T9512] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.846323][ T9512] bridge_slave_0: entered allmulticast mode [ 496.861406][ T9512] bridge_slave_0: entered promiscuous mode [ 496.902933][ T9512] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.911676][ T9512] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.919705][ T9512] bridge_slave_1: entered allmulticast mode [ 496.929989][ T9512] bridge_slave_1: entered promiscuous mode [ 497.003390][ T9592] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.353078][ T9512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.528530][ T3567] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.564582][ T9512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 497.623679][ T3567] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.659754][ T3567] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.767978][ T3567] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.850425][ T9512] team0: Port device team_slave_0 added [ 497.926150][ T9512] team0: Port device team_slave_1 added [ 498.315238][ T9512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.322671][ T9512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.349323][ T9512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.486035][ T9620] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1434'. [ 498.509280][ T5827] Bluetooth: hci2: command tx timeout [ 498.523630][ T9512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.531790][ T9512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.558300][ T9512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.833371][ T9512] hsr_slave_0: entered promiscuous mode [ 498.844308][ T9512] hsr_slave_1: entered promiscuous mode [ 498.853585][ T9512] debugfs: 'hsr0' already exists in 'hsr' [ 498.860062][ T9512] Cannot create hsr debugfs directory [ 499.840509][ T9635] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1439'. [ 500.221317][ T9644] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.383843][ T9644] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.521604][ T9650] dummy0: entered promiscuous mode [ 500.563330][ T9644] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.816436][ T9644] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.938035][ T9512] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 501.041143][ T9512] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 501.119588][ T9512] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 501.225159][ T35] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.239208][ T9512] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 501.367082][ T4109] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.391975][ T4109] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.429500][ T4109] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.686210][ T9663] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1448'. [ 502.965961][ T9512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 503.173989][ T9512] 8021q: adding VLAN 0 to HW filter on device team0 [ 503.293305][ T4109] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.300946][ T4109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 503.381524][ T9683] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1453'. [ 503.433716][ T4109] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.441356][ T4109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 504.124281][ T9692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1456'. [ 504.133779][ T9692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1456'. [ 504.143472][ T9692] netlink: 46 bytes leftover after parsing attributes in process `syz.3.1456'. [ 504.664258][ T9699] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.843308][ T9699] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.019175][ T9705] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1461'. [ 505.027075][ T9699] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.268353][ T9699] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.574090][ T3567] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.810928][ T35] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.858275][ T35] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.913523][ T35] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.168503][ T9512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 506.688772][ T9724] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1466'. [ 507.430363][ T9739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1470'. [ 507.439855][ T9739] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1470'. [ 507.449270][ T9739] netlink: 46 bytes leftover after parsing attributes in process `syz.3.1470'. [ 507.460180][ T9739] nbd: socks must be embedded in a SOCK_ITEM attr [ 508.217120][ T9755] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1474'. [ 509.631144][ T9512] veth0_vlan: entered promiscuous mode [ 509.767570][ T9512] veth1_vlan: entered promiscuous mode [ 509.922541][ T9778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1482'. [ 509.932773][ T9778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1482'. [ 509.942373][ T9778] netlink: 46 bytes leftover after parsing attributes in process `syz.0.1482'. [ 509.951709][ T9778] nbd: socks must be embedded in a SOCK_ITEM attr [ 510.214521][ T9512] veth0_macvtap: entered promiscuous mode [ 510.266957][ T9512] veth1_macvtap: entered promiscuous mode [ 510.544187][ T9512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 510.686853][ T9512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 510.862084][ T3593] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.907150][ T3593] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.969150][ T3593] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.039927][ T3593] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.708243][ T9800] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1489'. [ 512.663253][ T9815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1494'. [ 512.971554][ T9821] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1495'. [ 512.981618][ T9821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1495'. [ 512.991036][ T9821] netlink: 46 bytes leftover after parsing attributes in process `syz.0.1495'. [ 513.000493][ T9821] nbd: socks must be embedded in a SOCK_ITEM attr [ 514.185457][ T9844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1497'. [ 515.518093][ T9861] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1504'. [ 517.257694][ T9887] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 518.569744][ T9907] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1518'. [ 518.684640][ T3690] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.693033][ T3690] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.021266][ T9914] tipc: Enabling of bearer rejected, failed to enable media [ 519.076300][ T9917] syzkaller0: entered promiscuous mode [ 519.082319][ T9917] syzkaller0: entered allmulticast mode [ 519.115114][ T3690] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.123606][ T3690] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.637790][ T9935] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1527'. [ 521.198224][ T9940] lo speed is unknown, defaulting to 1000 [ 521.394190][ T9948] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1532'. [ 522.163157][ T9952] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 522.268715][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 523.010123][ T9955] tipc: Enabling of bearer rejected, failed to enable media [ 523.079654][ T9961] syzkaller0: entered promiscuous mode [ 523.085454][ T9961] syzkaller0: entered allmulticast mode [ 524.038436][ T9974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1542'. [ 524.238055][ T9977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1543'. [ 524.248152][ T9977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1543'. [ 524.257226][ T9977] netlink: 'syz.0.1543': attribute type 1 has an invalid length. [ 524.265311][ T9977] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1543'. [ 524.285003][ T5827] Bluetooth: hci4: command 0x0406 tx timeout [ 524.319712][ T5827] block nbd0: Receive control failed (result -107) [ 524.411743][ T9981] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1545'. [ 525.344245][ T9992] tipc: Enabling of bearer rejected, failed to enable media [ 525.389319][ T9992] syzkaller0: entered promiscuous mode [ 525.395019][ T9992] syzkaller0: entered allmulticast mode [ 526.699295][T10013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1558'. [ 526.709437][T10013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1558'. [ 526.718815][T10013] netlink: 'syz.3.1558': attribute type 1 has an invalid length. [ 526.726851][T10013] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1558'. [ 526.829673][ T5827] block nbd1: Receive control failed (result -107) [ 528.216776][T10033] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 529.081606][T10046] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1573'. [ 529.092435][T10046] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1573'. [ 529.105865][T10046] netlink: 'syz.5.1573': attribute type 1 has an invalid length. [ 529.114012][T10046] netlink: 10 bytes leftover after parsing attributes in process `syz.5.1573'. [ 529.206784][ T5827] block nbd2: Receive control failed (result -107) [ 530.267912][ T5827] Bluetooth: hci4: command 0x0406 tx timeout [ 530.315096][T10064] Illegal XDP return value 4294967262 on prog (id 204) dev N/A, expect packet loss! [ 530.704850][T10064] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1581'. [ 531.750159][T10082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1588'. [ 531.761039][T10082] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1588'. [ 531.770948][T10082] netlink: 'syz.3.1588': attribute type 1 has an invalid length. [ 531.779193][T10082] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1588'. [ 531.840432][T10082] nbd: socks must be embedded in a SOCK_ITEM attr [ 531.847948][T10082] block nbd3: shutting down sockets [ 532.296864][T10093] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1593'. [ 533.979066][T10120] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1605'. [ 534.519709][T10129] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1609'. [ 535.815313][T10151] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1618'. [ 536.801206][T10167] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1626'. [ 537.131016][T10172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1628'. [ 537.297787][T10178] netlink: 5636 bytes leftover after parsing attributes in process `syz.2.1630'. [ 537.347908][T10178] syz_tun: entered allmulticast mode [ 537.401144][T10176] syz_tun: left allmulticast mode [ 537.596197][T10181] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1632'. [ 538.817016][T10200] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1640'. [ 539.065004][T10206] tipc: Enabled bearer , priority 10 [ 539.110241][T10206] Bluetooth: MGMT ver 1.23 [ 539.614540][T10212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1644'. [ 539.844239][T10214] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1645'. [ 540.179880][ T5868] tipc: Node number set to 3331511491 [ 541.160868][T10232] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1653'. [ 541.597226][ T49] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 541.608850][ T49] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 541.619561][ T49] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 541.634417][ T49] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 541.646957][ T49] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 541.763732][T10239] lo speed is unknown, defaulting to 1000 [ 541.912230][T10245] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 541.935160][T10245] netdevsim netdevsim5 netdevsim0: refused to change device tx_queue_len [ 542.157639][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 542.164550][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 542.979489][T10256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1662'. [ 543.271237][T10239] chnl_net:caif_netlink_parms(): no params data found [ 543.707770][ T49] Bluetooth: hci5: command tx timeout [ 544.679531][T10305] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1666'. [ 545.787733][ T49] Bluetooth: hci5: command tx timeout [ 547.475952][T10239] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.484056][T10239] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.492002][T10239] bridge_slave_0: entered allmulticast mode [ 547.502158][T10239] bridge_slave_0: entered promiscuous mode [ 547.600468][T10239] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.608727][T10239] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.616531][T10239] bridge_slave_1: entered allmulticast mode [ 547.626695][T10239] bridge_slave_1: entered promiscuous mode [ 547.867769][ T49] Bluetooth: hci5: command tx timeout [ 548.103216][T10239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 548.165179][T10368] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1674'. [ 548.200659][T10239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.670235][T10239] team0: Port device team_slave_0 added [ 548.729724][T10239] team0: Port device team_slave_1 added [ 549.106700][T10239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 549.114042][T10239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.140601][T10239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 549.370832][T10239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 549.378401][T10239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.405615][T10239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 549.950022][ T49] Bluetooth: hci5: command tx timeout [ 549.998021][T10239] hsr_slave_0: entered promiscuous mode [ 550.012040][T10239] hsr_slave_1: entered promiscuous mode [ 550.021485][T10239] debugfs: 'hsr0' already exists in 'hsr' [ 550.028413][T10239] Cannot create hsr debugfs directory [ 551.245060][T10403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1686'. [ 551.515228][T10239] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 551.591321][T10239] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 551.710296][T10239] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 551.784650][T10239] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 551.889067][T10409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1689'. [ 553.152329][T10239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 553.433542][T10239] 8021q: adding VLAN 0 to HW filter on device team0 [ 553.663649][T10304] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.671451][T10304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 553.799339][T10304] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.806909][T10304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 554.484015][T10441] netlink: 'syz.0.1702': attribute type 4 has an invalid length. [ 555.917327][T10239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 558.724842][T10239] veth0_vlan: entered promiscuous mode [ 558.862280][T10239] veth1_vlan: entered promiscuous mode [ 559.353460][T10511] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1730'. [ 559.422738][T10239] veth0_macvtap: entered promiscuous mode [ 559.506501][T10239] veth1_macvtap: entered promiscuous mode [ 559.714339][T10239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 559.814314][T10239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 559.952733][T10320] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.017756][T10320] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.161781][T10320] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.226236][T10320] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.720342][T10527] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1737'. [ 561.426631][T10542] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1743'. [ 563.096379][T10563] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1749'. [ 563.135691][T10565] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1750'. [ 564.054950][T10580] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1755'. [ 564.750918][T10589] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1759'. [ 564.763064][T10589] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1759'. [ 564.772484][T10589] netlink: 'syz.5.1759': attribute type 1 has an invalid length. [ 564.780607][T10589] netlink: 10 bytes leftover after parsing attributes in process `syz.5.1759'. [ 564.875688][T10589] nbd: socks must be embedded in a SOCK_ITEM attr [ 564.882827][T10589] block nbd3: shutting down sockets [ 565.329064][T10596] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1762'. [ 565.491827][T10600] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1763'. [ 566.069906][T10610] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1767'. [ 566.774427][T10304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.782896][T10304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.063963][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.076239][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.208246][T10622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1772'. [ 567.220579][T10622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1772'. [ 567.232263][T10622] netlink: 38 bytes leftover after parsing attributes in process `syz.2.1772'. [ 567.243084][T10622] nbd: socks must be embedded in a SOCK_ITEM attr [ 567.817055][T10628] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1775'. [ 568.997843][ T78] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.022578][ T78] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.048021][ T78] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.118528][ T78] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.500270][T10654] nbd: socks must be embedded in a SOCK_ITEM attr [ 570.099327][T10666] __nla_validate_parse: 5 callbacks suppressed [ 570.099414][T10666] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1792'. [ 570.209104][T10669] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1793'. [ 570.321436][T10668] tipc: Enabling of bearer rejected, already enabled [ 571.793276][T10692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1801'. [ 571.802704][T10692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1801'. [ 571.815855][T10692] netlink: 38 bytes leftover after parsing attributes in process `syz.2.1801'. [ 571.826915][T10692] nbd: socks must be embedded in a SOCK_ITEM attr [ 572.683291][T10701] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1806'. [ 572.709585][T10704] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1807'. [ 574.042265][T10720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1815'. [ 574.052160][T10720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1815'. [ 574.061501][T10720] netlink: 38 bytes leftover after parsing attributes in process `syz.2.1815'. [ 574.070850][T10720] nbd: socks must be embedded in a SOCK_ITEM attr [ 574.389267][T10729] tipc: Enabled bearer , priority 10 [ 575.507730][ T5864] tipc: Node number set to 2757285103 [ 576.531305][T10755] __nla_validate_parse: 2 callbacks suppressed [ 576.531401][T10755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1830'. [ 576.548052][T10755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1830'. [ 576.557105][T10755] netlink: 38 bytes leftover after parsing attributes in process `syz.3.1830'. [ 576.566528][T10755] nbd: socks must be embedded in a SOCK_ITEM attr [ 577.055830][T10763] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1833'. [ 577.121921][T10765] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1834'. [ 578.023003][T10780] tipc: Enabling of bearer rejected, already enabled [ 578.706734][T10790] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1843'. [ 579.205525][T10796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1844'. [ 579.215260][T10796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1844'. [ 579.224762][T10796] netlink: 38 bytes leftover after parsing attributes in process `syz.3.1844'. [ 579.234218][T10796] nbd: socks must be embedded in a SOCK_ITEM attr [ 579.534170][T10802] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1848'. [ 580.784360][T10823] tipc: Enabling of bearer rejected, already enabled [ 581.562100][T10834] __nla_validate_parse: 3 callbacks suppressed [ 581.562188][T10834] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1859'. [ 581.578430][T10834] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1859'. [ 581.587578][T10834] netlink: 'syz.5.1859': attribute type 1 has an invalid length. [ 581.595481][T10834] netlink: 10 bytes leftover after parsing attributes in process `syz.5.1859'. [ 582.037613][T10838] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1861'. [ 582.530877][T10845] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1864'. [ 583.068219][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 583.153899][T10853] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1868'. [ 583.683374][T10862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1872'. [ 583.693042][T10862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1872'. [ 583.705243][T10862] netlink: 'syz.0.1872': attribute type 1 has an invalid length. [ 583.715617][T10862] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1872'. [ 583.802834][T10867] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1874'. [ 584.278972][T10873] tipc: Enabled bearer , priority 10 [ 585.408304][ T5868] tipc: Node number set to 97783583 [ 585.843395][T10896] netlink: 'syz.0.1887': attribute type 1 has an invalid length. [ 587.811674][T10929] __nla_validate_parse: 6 callbacks suppressed [ 587.811760][T10929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1902'. [ 587.828912][T10929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1902'. [ 587.838326][T10929] netlink: 38 bytes leftover after parsing attributes in process `syz.2.1902'. [ 587.847779][T10929] nbd: socks must be embedded in a SOCK_ITEM attr [ 588.289858][T10938] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1905'. [ 588.449818][T10942] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1907'. [ 589.289957][T10953] lo speed is unknown, defaulting to 1000 [ 589.346622][T10955] Bluetooth: MGMT ver 1.23 [ 590.626713][T10969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1917'. [ 590.638147][T10969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1917'. [ 590.647322][T10969] netlink: 38 bytes leftover after parsing attributes in process `syz.3.1917'. [ 590.656854][T10969] nbd: socks must be embedded in a SOCK_ITEM attr [ 591.022346][T10976] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1921'. [ 591.059638][T10977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1920'. [ 591.770685][T10992] tipc: Started in network mode [ 591.775887][T10992] tipc: Node identity ac1414aa, cluster identity 4711 [ 591.785884][T10992] tipc: Enabled bearer , priority 10 [ 592.908103][ T5868] tipc: Node number set to 2886997162 [ 592.911195][T11005] __nla_validate_parse: 2 callbacks suppressed [ 592.911287][T11005] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1932'. [ 592.932007][T11005] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1932'. [ 592.941400][T11005] netlink: 38 bytes leftover after parsing attributes in process `syz.5.1932'. [ 592.950775][T11005] nbd: socks must be embedded in a SOCK_ITEM attr [ 593.377642][T11015] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1936'. [ 595.005145][T11045] tipc: Enabling of bearer rejected, already enabled [ 595.226768][T11049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1948'. [ 595.237774][T11049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1948'. [ 595.246925][T11049] netlink: 38 bytes leftover after parsing attributes in process `syz.3.1948'. [ 595.256193][T11049] nbd: socks must be embedded in a SOCK_ITEM attr [ 595.844832][T11059] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1953'. [ 598.107097][T11093] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1967'. [ 598.309691][T11099] ===================================================== [ 598.317081][T11099] BUG: KMSAN: uninit-value in eth_type_trans+0x69d/0x9a0 [ 598.324660][T11099] eth_type_trans+0x69d/0x9a0 [ 598.329774][T11099] __dev_forward_skb2+0x4b1/0x950 [ 598.335013][T11099] dev_forward_skb_nomtu+0x3b/0xe0 [ 598.340474][T11099] __bpf_redirect+0x14d6/0x1760 [ 598.345590][T11099] bpf_clone_redirect+0x366/0x530 [ 598.351083][T11099] ___bpf_prog_run+0x1294/0xeba0 [ 598.356305][T11099] __bpf_prog_run512+0xc5/0x100 [ 598.361521][T11099] bpf_test_run+0x353/0xab0 [ 598.366238][T11099] bpf_prog_test_run_skb+0x19f8/0x26c0 [ 598.372086][T11099] bpf_prog_test_run+0x5c2/0xa40 [ 598.377212][T11099] __sys_bpf+0x89a/0xed0 [ 598.381800][T11099] __ia32_sys_bpf+0xa4/0xf0 [ 598.386530][T11099] ia32_sys_call+0xadf/0x4310 [ 598.391578][T11099] __do_fast_syscall_32+0xb0/0x150 [ 598.396892][T11099] do_fast_syscall_32+0x38/0x80 [ 598.402075][T11099] do_SYSENTER_32+0x1f/0x30 [ 598.406763][T11099] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 598.413533][T11099] [ 598.415960][T11099] Uninit was created at: [ 598.420644][T11099] kmem_cache_alloc_node_noprof+0x818/0xf00 [ 598.426820][T11099] kmalloc_reserve+0x13c/0x4b0 [ 598.431973][T11099] pskb_expand_head+0x1fc/0x1610 [ 598.437154][T11099] skb_ensure_writable+0x44e/0x510 [ 598.442632][T11099] bpf_clone_redirect+0x1c1/0x530 [ 598.448071][T11099] ___bpf_prog_run+0x1294/0xeba0 [ 598.453209][T11099] __bpf_prog_run512+0xc5/0x100 [ 598.458404][T11099] bpf_test_run+0x353/0xab0 [ 598.463142][T11099] bpf_prog_test_run_skb+0x19f8/0x26c0 [ 598.468990][T11099] bpf_prog_test_run+0x5c2/0xa40 [ 598.474120][T11099] __sys_bpf+0x89a/0xed0 [ 598.478684][T11099] __ia32_sys_bpf+0xa4/0xf0 [ 598.483430][T11099] ia32_sys_call+0xadf/0x4310 [ 598.488486][T11099] __do_fast_syscall_32+0xb0/0x150 [ 598.493794][T11099] do_fast_syscall_32+0x38/0x80 [ 598.498993][T11099] do_SYSENTER_32+0x1f/0x30 [ 598.503679][T11099] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 598.510409][T11099] [ 598.512880][T11099] CPU: 1 UID: 0 PID: 11099 Comm: syz.6.1970 Not tainted syzkaller #0 PREEMPT(none) [ 598.522619][T11099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 598.533099][T11099] ===================================================== [ 598.540336][T11099] Disabling lock debugging due to kernel taint [ 598.546644][T11099] Kernel panic - not syncing: kmsan.panic set ... [ 598.553238][T11099] CPU: 1 UID: 0 PID: 11099 Comm: syz.6.1970 Tainted: G B syzkaller #0 PREEMPT(none) [ 598.564509][T11099] Tainted: [B]=BAD_PAGE [ 598.568795][T11099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 598.579048][T11099] Call Trace: [ 598.582473][T11099] [ 598.585541][T11099] __dump_stack+0x26/0x30 [ 598.590268][T11099] dump_stack_lvl+0x53/0x270 [ 598.595200][T11099] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 598.601261][T11099] dump_stack+0x1e/0x25 [ 598.605653][T11099] vpanic+0x361/0xc50 [ 598.609891][T11099] panic+0x15d/0x160 [ 598.614076][T11099] kmsan_report+0x31c/0x320 [ 598.618813][T11099] ? bpf_prog_test_run+0x5c2/0xa40 [ 598.624144][T11099] ? __msan_warning+0x1b/0x30 [ 598.629134][T11099] ? eth_type_trans+0x69d/0x9a0 [ 598.634344][T11099] ? __dev_forward_skb2+0x4b1/0x950 [ 598.639799][T11099] ? dev_forward_skb_nomtu+0x3b/0xe0 [ 598.645302][T11099] ? __bpf_redirect+0x14d6/0x1760 [ 598.650620][T11099] ? bpf_clone_redirect+0x366/0x530 [ 598.656171][T11099] ? ___bpf_prog_run+0x1294/0xeba0 [ 598.661483][T11099] ? __bpf_prog_run512+0xc5/0x100 [ 598.666909][T11099] ? bpf_test_run+0x353/0xab0 [ 598.671903][T11099] ? bpf_prog_test_run_skb+0x19f8/0x26c0 [ 598.677778][T11099] ? bpf_prog_test_run+0x5c2/0xa40 [ 598.683094][T11099] ? __sys_bpf+0x89a/0xed0 [ 598.687694][T11099] ? __ia32_sys_bpf+0xa4/0xf0 [ 598.692625][T11099] ? ia32_sys_call+0xadf/0x4310 [ 598.697679][T11099] ? __do_fast_syscall_32+0xb0/0x150 [ 598.703172][T11099] ? do_fast_syscall_32+0x38/0x80 [ 598.708473][T11099] ? do_SYSENTER_32+0x1f/0x30 [ 598.713311][T11099] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 598.720015][T11099] ? kmem_cache_charge+0x991/0x9d0 [ 598.725345][T11099] ? kmsan_get_metadata+0xfb/0x160 [ 598.730718][T11099] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 598.736740][T11099] ? eth_get_headlen+0x141/0x1e0 [ 598.741882][T11099] ? filter_irq_stacks+0x49/0x190 [ 598.747070][T11099] ? stack_depot_save_flags+0x35/0x7b0 [ 598.752710][T11099] ? kmsan_get_metadata+0xfb/0x160 [ 598.758065][T11099] ? kmsan_get_metadata+0xfb/0x160 [ 598.763395][T11099] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 598.769921][T11099] ? kmsan_get_metadata+0xfb/0x160 [ 598.775407][T11099] __msan_warning+0x1b/0x30 [ 598.780072][T11099] eth_type_trans+0x69d/0x9a0 [ 598.784995][T11099] __dev_forward_skb2+0x4b1/0x950 [ 598.790198][T11099] ? pskb_expand_head+0x1268/0x1610 [ 598.795633][T11099] dev_forward_skb_nomtu+0x3b/0xe0 [ 598.801039][T11099] __bpf_redirect+0x14d6/0x1760 [ 598.806124][T11099] ? kmsan_get_metadata+0xfb/0x160 [ 598.811458][T11099] bpf_clone_redirect+0x366/0x530 [ 598.816743][T11099] ___bpf_prog_run+0x1294/0xeba0 [ 598.821988][T11099] __bpf_prog_run512+0xc5/0x100 [ 598.827030][T11099] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 598.833561][T11099] ? kmsan_get_metadata+0xfb/0x160 [ 598.838883][T11099] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 598.844900][T11099] ? __local_bh_enable_ip+0x91/0xb0 [ 598.850288][T11099] ? filter_irq_stacks+0x49/0x190 [ 598.855562][T11099] ? stack_depot_save_flags+0x35/0x7b0 [ 598.861258][T11099] ? kmsan_get_metadata+0xfb/0x160 [ 598.866668][T11099] ? kmsan_get_metadata+0xfb/0x160 [ 598.871989][T11099] ? kmsan_get_metadata+0xfb/0x160 [ 598.877295][T11099] ? kmsan_get_metadata+0xfb/0x160 [ 598.882705][T11099] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 598.889251][T11099] ? kmsan_get_metadata+0x150/0x160 [ 598.894652][T11099] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 598.900677][T11099] ? __pfx___bpf_prog_run512+0x10/0x10 [ 598.906348][T11099] ? __pfx___bpf_prog_run512+0x10/0x10 [ 598.911989][T11099] bpf_test_run+0x353/0xab0 [ 598.916688][T11099] ? kmsan_get_metadata+0xfb/0x160 [ 598.922004][T11099] ? kmsan_get_metadata+0xfb/0x160 [ 598.927424][T11099] ? kmsan_get_metadata+0xfb/0x160 [ 598.932820][T11099] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 598.938826][T11099] ? bpf_test_run+0x1b0/0xab0 [ 598.943736][T11099] bpf_prog_test_run_skb+0x19f8/0x26c0 [ 598.949466][T11099] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 598.955512][T11099] bpf_prog_test_run+0x5c2/0xa40 [ 598.960672][T11099] __sys_bpf+0x89a/0xed0 [ 598.965119][T11099] __ia32_sys_bpf+0xa4/0xf0 [ 598.969860][T11099] ia32_sys_call+0xadf/0x4310 [ 598.974713][T11099] __do_fast_syscall_32+0xb0/0x150 [ 598.980110][T11099] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 598.986051][T11099] do_fast_syscall_32+0x38/0x80 [ 598.991066][T11099] do_SYSENTER_32+0x1f/0x30 [ 598.995909][T11099] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 599.002447][T11099] RIP: 0023:0xf7fa7539 [ 599.006664][T11099] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 599.026448][T11099] RSP: 002b:00000000f54a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 599.035144][T11099] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000240 [ 599.043427][T11099] RDX: 0000000000000023 RSI: 0000000000000000 RDI: 0000000000000000 [ 599.051627][T11099] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 599.059823][T11099] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 599.067976][T11099] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 599.076131][T11099] [ 599.079635][T11099] Kernel Offset: disabled [ 599.084048][T11099] Rebooting in 86400 seconds..