last executing test programs: 5.256873149s ago: executing program 4 (id=2588): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000006800e97800000000000000004a0000000000000004000b00f6a20e9c6f1f89eb401742054f1417ec67972acd124dca39a25f650877bac6f358c909808bd217a9d5ea798d4cb07c418d93dce7e9597cee353874c1e9e8eca79903665b558b0143adc670f64d75c45721ee99533ae9f62b53fd5b85"], 0x1c}}, 0x0) pipe(&(0x7f0000000080)) pipe(&(0x7f0000000000)) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b40)=@RTM_DELMDB={0x138, 0x55, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x2, {@in6_addr=@local, 0xcdb3}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x1, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x3, 0x2, {@in6_addr=@private0, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x1, {@ip4=@multicast2, 0xc00}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x5, 0x2, {@ip4=@private=0xa010101, 0xc00}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x1, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x4, {@ip4=@rand_addr=0x64010100, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x2, {@in6_addr=@ipv4={'\x00', '\xff\xff', @loopback}, 0x1000}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x0, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x1f}, 0x86dd}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)="88d8ce92d5ad3dd44a5bb374edbeca0340d4e4a988e635195bd364", 0x1b}, 0x1, 0x0, 0x0, 0x20000040}, 0x4c090) 5.055330473s ago: executing program 4 (id=2590): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r3}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0xfffc, @empty}, 0x10) r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0x101842, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000040)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x800c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x1) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendto$inet(r0, &(0x7f0000000300)="b3c3b389d7b8216eb78d58fb9cc12222e710b36d7210a5b4ff250fc33faee66878894e7abbf88b85b4d8cd80960131b98291370af84ddcdf2c37ea3ca239126964f31d6ef736310975819766f6e1c897c2ac885e4a1ba2db0822aab9048574fb9233a3696bd100c40954f29403f49e373a05f236c3d2950e329f0e71f26344c91ed7f336cd97fae39c190098d75674d88b322d1bf1f772bdac9ff33ade13c6de7d016ced7dc0063bcf8a0ba9184f8e7bbb86a75aac81ee7542eea62d176d5cf1cd202df5212c9aaf3c6ee25ff93985cff839509f771ece14b1bdefb52b19feaaf73df8e11f1bd88cb9e4b4caea18e5932f7e8dbed3bd83aaa083bd03c0fb040760776e52b8d8cf4b0acb0320e70da486c3e7762d982346f225c08ad8682b851f2380c4d1b0ce01010000000000009a5a84af6917d00784a10b86f32731700dd5e6586261ac22df045282fc42bef35786772db1605bd1dcf49ccfdf44eb1d2f2e4275205c13ac03dec624418b15e9c2eb7d8323a704e5d436c2f4df34", 0x17c, 0x24000840, 0x0, 0x0) 4.125493381s ago: executing program 4 (id=2601): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='qdisc_enqueue\x00', r0}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x13, 0x10, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r5}, 0x10) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) close(r7) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10) 3.959393769s ago: executing program 4 (id=2602): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0xc7) 3.787141279s ago: executing program 0 (id=2605): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x2) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x7d4165c9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) listen(0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 3.468339954s ago: executing program 0 (id=2608): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r2}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfffc, @empty}, 0x10) r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0x101842, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000040)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x800c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="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", 0x17c, 0x24000840, 0x0, 0x0) 3.088756286s ago: executing program 2 (id=2611): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000019300)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, [@map_fd={0x18, 0x7, 0x1, 0x0, r0}]}, &(0x7f0000000480)='syzkaller\x00', 0xfff, 0x0, 0x0, 0x41000, 0x25, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x10, 0x1, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000340)=ANY=[@ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f00000000c0)="9aba4eec2e4b13e5198e520b44817ee8cdf0321245a62f4a4b7f5f403137f9e40e0dd52d8dab5b17d2b76fce2bd8010873505e6e3bad5aab0f8601d1a6fda973029f81520b275f7767ecdebd8d46fa32b5d33514e491a488224e54b475110145066ff194513c7c5f60", 0x0, 0x2}, 0x20) 2.779651858s ago: executing program 2 (id=2614): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="15000000080000"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r2}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$kcm(0x10, 0x2, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16=0x0, @ANYBLOB="04002dbd7000f2dbdf254f0000000c00839ced540000680000004c007a8008000400000000181c000200134ecc4d908540c3c8630b918a29360800040004005111335ced5fd94e0800040009000000080004000300000048007a801400010003d869f47d8c428eaa74b31794b4b314b5000400000000000c0003004180081ee4f88f1a080004000c0000000c0003007858754e3c504054080004000800000004007a8020007a800800040005000000140002002929590c"], 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES16=r3], 0x48) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 2.68421287s ago: executing program 4 (id=2616): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 2.677047841s ago: executing program 3 (id=2617): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def1f", 0xe9}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffabb08ff67cb98266eeb1fbf81ec", 0xe7}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea8274a65901b", 0x39}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc866f0fbd8e936e8374a484f111919dc610e0a36a0ee3df2ab1dc34cea42a4292e2fbaa86875a506bdd81fbb3dc5ea", 0xf5}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb274efec9fc9995189ead7bf00148d091675fa045479985e4f644d258d0aa4a69618eb08ba045907a549ed83b88863c73d859acf", 0x51}], 0x6}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a86853c8c28797cd14c72c8", 0x27}, {&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22e", 0xca}, {&(0x7f0000000e80)="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", 0x1cb}], 0x3}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.578398596s ago: executing program 2 (id=2618): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x2) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x7d4165c9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) listen(0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 2.536375259s ago: executing program 0 (id=2619): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000000800000008"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r2}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$kcm(0x10, 0x2, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16=0x0, @ANYBLOB="04002dbd7000f2dbdf254f0000000c00839ced540000680000004c007a8008000400000000181c000200134ecc4d908540c3c8630b918a29360800040004005111335ced5fd94e0800040009000000080004000300000048007a801400010003d869f47d8c428eaa74b31794b4b314b5000400000000000c0003004180081ee4f88f1a080004000c0000000c0003007858754e3c504054080004000800000004007a8020007a800800040005000000140002002929590c"], 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES16=r3], 0x48) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 2.529890374s ago: executing program 3 (id=2620): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r5], 0x54}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r8, @ANYBLOB="01"], 0x20}}, 0x0) 2.35993732s ago: executing program 2 (id=2621): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454ce, 0xa) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r1, 0x400454cc, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) close(r2) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 2.270203736s ago: executing program 3 (id=2622): socket$inet6(0xa, 0x4, 0xb6) socket$inet(0xa, 0x801, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ff"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x50) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r4, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0) 2.208710381s ago: executing program 0 (id=2623): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080), &(0x7f0000000100)=0xe) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000680)=@assoc_value={0x0}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000002c0)={r1, 0x7}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="07000000040000000003", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000008825c2fd3215a192d3082c77be3df7cf39a169e8bae2c35300072e8babc8d237ab0f50911f8763685c06527b57e0344e40cdf57cca4ba1dc7290c729cec5aae53d3067669c429720f1240f8d67e030afd7f3e3ae92b696366459f8cfbbb51b6f1ddac19b2685166a0a6f84944d9073d821a5f6408a2c00da68780eb3594d1970325b3b287ab807739290a3f92aa59393d8803e9b444b198637629f5069819817d0710f184bce99d0e1f7017d71bdd91fff87ee63dbb3f7f39d011be879cf1d12e779da5455ad90cc0f12"], 0x48) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x0, @dev, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) sendmsg$kcm(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x4000800) close(r2) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x2400c000) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r4, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2.205307368s ago: executing program 4 (id=2624): socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket(0x1e, 0x5, 0x0) socket(0x1, 0x803, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = gettid() sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r0, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 2.082208268s ago: executing program 0 (id=2625): socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}}, 0x840) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x0, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x0, 0x0, {@ip4=@broadcast}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 1.958355626s ago: executing program 3 (id=2626): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYBLOB='6\x00', @ANYRES32, @ANYBLOB="addaced30a01a7fe46005a6cdee853229216446b411c8d9e63e3d3cdab8325cdc8faa5cb28989108c94e95a12489c73629f24aaef11a6cafca29547a05f362658b4964f4"], 0x20) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c", 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xfff3}}}, 0x24}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.775146494s ago: executing program 1 (id=2627): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='qdisc_enqueue\x00', r0}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x13, 0x10, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r5}, 0x10) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) close(r7) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10) 1.721078576s ago: executing program 1 (id=2628): socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000680)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 448.938537ms ago: executing program 1 (id=2629): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYBLOB='6\x00', @ANYRES32, @ANYBLOB="addaced30a01a7fe46005a6cdee853229216446b411c8d9e63e3d3cdab8325cdc8faa5cb28989108c94e95a12489c73629f24aaef11a"], 0x20) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c", 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xfff3}}}, 0x24}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 440.133027ms ago: executing program 0 (id=2630): socket$inet6(0xa, 0x4, 0xb6) socket$inet(0xa, 0x801, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r2, 0x1, 0x0, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cffb93b201}, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r3, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}}, 0x0) 415.689676ms ago: executing program 3 (id=2631): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x2) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x7d4165c9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) listen(0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 411.724642ms ago: executing program 2 (id=2632): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r5], 0x54}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r8, @ANYBLOB="01"], 0x20}}, 0x0) 192.137969ms ago: executing program 1 (id=2633): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x8, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r1, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r1, 0x0, 0x0}, 0x10) 141.399975ms ago: executing program 3 (id=2634): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 88.723556ms ago: executing program 1 (id=2635): socket$rds(0x15, 0x5, 0x0) socket(0x2, 0x80802, 0x0) epoll_create1(0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x0) 5.902228ms ago: executing program 2 (id=2636): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x8, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0xbb}, @generic={0xa7}, @initr0, @exit]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) recvfrom$netrom(r0, 0x0, 0x0, 0x2001, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r4, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000640)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x15, 0x10, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x1e, 0xc}, @mptcp=@syn={0x1e, 0xc}, @sack={0x5, 0x16, [0x0, 0x0, 0x0, 0x0, 0x0]}, @md5sig={0x13, 0x12, "a4bcbcee95c6179191d2675112a6689b"}]}}}}}}}, 0x0) 0s ago: executing program 1 (id=2637): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0xc7) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.150' (ED25519) to the list of known hosts. [ 82.174600][ T5818] cgroup: Unknown subsys name 'net' [ 82.370616][ T5818] cgroup: Unknown subsys name 'cpuset' [ 82.381607][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.080141][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.561781][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.575979][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.583743][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.592012][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.599880][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.655793][ T5141] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.665830][ T5141] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.673470][ T5141] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.681558][ T5141] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.689815][ T5141] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.804002][ T5141] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.823578][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.831818][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.839936][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.848180][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.856676][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.864428][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.873331][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.880764][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.889346][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.923273][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.930779][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.939443][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.939463][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.969622][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.452875][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 87.762791][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 87.858624][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 87.872611][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.882740][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.890661][ T5828] bridge_slave_0: entered allmulticast mode [ 87.898420][ T5828] bridge_slave_0: entered promiscuous mode [ 87.932586][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.942461][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.950097][ T5828] bridge_slave_1: entered allmulticast mode [ 87.957394][ T5828] bridge_slave_1: entered promiscuous mode [ 88.029416][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 88.069917][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 88.098198][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.113753][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.272012][ T5828] team0: Port device team_slave_0 added [ 88.292304][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.299842][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.307258][ T5833] bridge_slave_0: entered allmulticast mode [ 88.314563][ T5833] bridge_slave_0: entered promiscuous mode [ 88.346234][ T5828] team0: Port device team_slave_1 added [ 88.364379][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.371723][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.379492][ T5833] bridge_slave_1: entered allmulticast mode [ 88.387243][ T5833] bridge_slave_1: entered promiscuous mode [ 88.400708][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.408058][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.415423][ T5839] bridge_slave_0: entered allmulticast mode [ 88.423156][ T5839] bridge_slave_0: entered promiscuous mode [ 88.502025][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.510347][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.520433][ T5839] bridge_slave_1: entered allmulticast mode [ 88.528040][ T5839] bridge_slave_1: entered promiscuous mode [ 88.551612][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.558695][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.586041][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.627293][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.634582][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.642000][ T5838] bridge_slave_0: entered allmulticast mode [ 88.649579][ T5838] bridge_slave_0: entered promiscuous mode [ 88.666300][ T5844] Bluetooth: hci0: command tx timeout [ 88.674491][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.681822][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.708246][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.738361][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.755091][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.755520][ T5844] Bluetooth: hci1: command tx timeout [ 88.782189][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.792011][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.799405][ T5838] bridge_slave_1: entered allmulticast mode [ 88.807603][ T5838] bridge_slave_1: entered promiscuous mode [ 88.830634][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.849242][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.856682][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.864243][ T5837] bridge_slave_0: entered allmulticast mode [ 88.873504][ T5837] bridge_slave_0: entered promiscuous mode [ 88.912487][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.937816][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.945165][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.952711][ T5837] bridge_slave_1: entered allmulticast mode [ 88.960491][ T5837] bridge_slave_1: entered promiscuous mode [ 88.970193][ T5833] team0: Port device team_slave_0 added [ 88.980056][ T5833] team0: Port device team_slave_1 added [ 88.985829][ T5844] Bluetooth: hci4: command tx timeout [ 88.995752][ T5844] Bluetooth: hci2: command tx timeout [ 89.065388][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.066209][ T5844] Bluetooth: hci3: command tx timeout [ 89.079689][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.106027][ T5839] team0: Port device team_slave_0 added [ 89.173555][ T5828] hsr_slave_0: entered promiscuous mode [ 89.181258][ T5828] hsr_slave_1: entered promiscuous mode [ 89.191149][ T5839] team0: Port device team_slave_1 added [ 89.217822][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.228143][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.235848][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.262453][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.277189][ T5838] team0: Port device team_slave_0 added [ 89.286563][ T5838] team0: Port device team_slave_1 added [ 89.308561][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.332080][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.339224][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.366568][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.392968][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.400081][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.426547][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.440538][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.447654][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.474045][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.550697][ T5837] team0: Port device team_slave_0 added [ 89.562109][ T5837] team0: Port device team_slave_1 added [ 89.603851][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.610977][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.637934][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.650930][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.658111][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.684461][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.713742][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.721422][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.747888][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.824550][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.831709][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.862290][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.911798][ T5839] hsr_slave_0: entered promiscuous mode [ 89.919712][ T5839] hsr_slave_1: entered promiscuous mode [ 89.926363][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.934091][ T5839] Cannot create hsr debugfs directory [ 89.946529][ T5833] hsr_slave_0: entered promiscuous mode [ 89.953160][ T5833] hsr_slave_1: entered promiscuous mode [ 89.960014][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.967773][ T5833] Cannot create hsr debugfs directory [ 90.007456][ T5838] hsr_slave_0: entered promiscuous mode [ 90.013936][ T5838] hsr_slave_1: entered promiscuous mode [ 90.020983][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.028790][ T5838] Cannot create hsr debugfs directory [ 90.113306][ T5837] hsr_slave_0: entered promiscuous mode [ 90.120267][ T5837] hsr_slave_1: entered promiscuous mode [ 90.127415][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.135103][ T5837] Cannot create hsr debugfs directory [ 90.681722][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.697070][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.732838][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.745742][ T5844] Bluetooth: hci0: command tx timeout [ 90.754430][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.816685][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.830011][ T5844] Bluetooth: hci1: command tx timeout [ 90.839560][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.867970][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.889077][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.964367][ T5833] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.986512][ T5833] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.998995][ T5833] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.032817][ T5833] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.066142][ T5141] Bluetooth: hci4: command tx timeout [ 91.071786][ T5844] Bluetooth: hci2: command tx timeout [ 91.123960][ T5838] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.155469][ T5844] Bluetooth: hci3: command tx timeout [ 91.160325][ T5838] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.174450][ T5838] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.189420][ T5838] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.239319][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.352887][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.364291][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.379190][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.392164][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.416724][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.434608][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.442021][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.463779][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.471061][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.598116][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.613033][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.688944][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.710767][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.727593][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.751592][ T2945] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.759139][ T2945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.790108][ T2945] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.797292][ T2945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.810909][ T2945] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.818114][ T2945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.834740][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.841975][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.873686][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.949607][ T24] cfg80211: failed to load regulatory.db [ 91.963994][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.971224][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.983117][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.990373][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.090605][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.249320][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.294693][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.327143][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.334331][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.388591][ T2970] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.395802][ T2970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.599222][ T5828] veth0_vlan: entered promiscuous mode [ 92.647565][ T5828] veth1_vlan: entered promiscuous mode [ 92.761952][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.828355][ T5844] Bluetooth: hci0: command tx timeout [ 92.838330][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.861044][ T5828] veth0_macvtap: entered promiscuous mode [ 92.913494][ T5844] Bluetooth: hci1: command tx timeout [ 92.923171][ T5828] veth1_macvtap: entered promiscuous mode [ 93.022716][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.050192][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.108625][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.138514][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.156623][ T5844] Bluetooth: hci2: command tx timeout [ 93.162111][ T5844] Bluetooth: hci4: command tx timeout [ 93.200134][ T5828] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.209915][ T5828] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.225725][ T5844] Bluetooth: hci3: command tx timeout [ 93.236002][ T5828] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.244736][ T5828] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.267108][ T5839] veth0_vlan: entered promiscuous mode [ 93.332209][ T5839] veth1_vlan: entered promiscuous mode [ 93.399841][ T5838] veth0_vlan: entered promiscuous mode [ 93.419096][ T5838] veth1_vlan: entered promiscuous mode [ 93.429530][ T5837] veth0_vlan: entered promiscuous mode [ 93.480166][ T5837] veth1_vlan: entered promiscuous mode [ 93.565456][ T5839] veth0_macvtap: entered promiscuous mode [ 93.579144][ T5838] veth0_macvtap: entered promiscuous mode [ 93.596635][ T5839] veth1_macvtap: entered promiscuous mode [ 93.604046][ T5833] veth0_vlan: entered promiscuous mode [ 93.619232][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.633169][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.652629][ T5833] veth1_vlan: entered promiscuous mode [ 93.663942][ T5838] veth1_macvtap: entered promiscuous mode [ 93.690177][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.701816][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.714533][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.732603][ T5837] veth0_macvtap: entered promiscuous mode [ 93.770682][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.782258][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.794822][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.804489][ T5837] veth1_macvtap: entered promiscuous mode [ 93.818796][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.827064][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.832807][ T5839] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.844615][ T5839] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.857086][ T5839] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.866795][ T5839] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.910405][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.925051][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.938011][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.949053][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.961505][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.977894][ T5833] veth0_macvtap: entered promiscuous mode [ 93.996805][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.017436][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.028776][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.038742][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.049259][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.060810][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.071208][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.081788][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.091748][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.103404][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.114015][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.124926][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.137848][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.149101][ T5833] veth1_macvtap: entered promiscuous mode [ 94.169487][ T5838] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.178528][ T5838] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.188752][ T5838] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.197799][ T5838] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.256123][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.285974][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.296428][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.308343][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.321002][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.333363][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.346005][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.353477][ T5918] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.361661][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.377361][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.388694][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.399428][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.409695][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.420233][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.431898][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.442409][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.453747][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.497487][ T5837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.516596][ T5837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.536473][ T5837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.555374][ T5837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.602824][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.617117][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.629828][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.640717][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.651242][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.662194][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.673128][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.684438][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.702870][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.794546][ T5833] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.804297][ T5833] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.817945][ T5833] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.827612][ T5833] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.879050][ T2970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.900046][ T2970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.918186][ T5844] Bluetooth: hci0: command tx timeout [ 94.996941][ T5844] Bluetooth: hci1: command tx timeout [ 95.035484][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.043359][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.113215][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.158695][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.209009][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.219178][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.226755][ T5844] Bluetooth: hci2: command tx timeout [ 95.236005][ T5844] Bluetooth: hci4: command tx timeout [ 95.305918][ T5844] Bluetooth: hci3: command tx timeout [ 95.345910][ T2945] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.391315][ T2945] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.432492][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.448381][ T5932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11'. [ 95.464355][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.493551][ T5932] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11'. [ 95.604093][ T5938] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.618947][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.644492][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.757426][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.790330][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.965953][ T5945] xt_connbytes: Forcing CT accounting to be enabled [ 95.996039][ T5944] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 96.599028][ T5960] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 96.625834][ C0] Illegal XDP return value 16128 on prog (id 3) dev veth0, expect packet loss! [ 97.084498][ T5981] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 97.471564][ T5994] warning: `syz.4.32' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 98.027726][ T6017] netlink: 40 bytes leftover after parsing attributes in process `syz.0.41'. [ 98.072440][ T6016] syz.2.40 uses obsolete (PF_INET,SOCK_PACKET) [ 98.433087][ T6030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.764783][ T6037] netlink: 28 bytes leftover after parsing attributes in process `syz.1.49'. [ 98.786598][ T6037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.49'. [ 98.850773][ T6038] bridge_slave_0: left allmulticast mode [ 98.866772][ T6038] bridge_slave_0: left promiscuous mode [ 98.872903][ T6038] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.893418][ T6038] bridge_slave_1: left allmulticast mode [ 98.899515][ T6038] bridge_slave_1: left promiscuous mode [ 98.906096][ T6038] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.908610][ T6001] infiniband syz0: set active [ 98.922300][ T6001] infiniband syz0: added veth1_vlan [ 98.932788][ T6001] syz0: rxe_create_cq: returned err = -12 [ 98.942244][ T6001] infiniband syz0: Couldn't create ib_mad CQ [ 98.944632][ T6038] bond0: (slave bond_slave_0): Releasing backup interface [ 98.948702][ T6001] infiniband syz0: Couldn't open port 1 [ 98.989344][ T6038] bond0: (slave bond_slave_1): Releasing backup interface [ 99.055924][ T6001] RDS/IB: syz0: added [ 99.060814][ T6001] smc: adding ib device syz0 with port count 1 [ 99.070489][ T6001] smc: ib device syz0 port 1 has pnetid [ 99.081241][ T6038] team0: Port device team_slave_0 removed [ 99.099409][ T6038] team0: Port device team_slave_1 removed [ 99.116331][ T6038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.124474][ T6038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.140520][ T6038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.163976][ T6038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.280988][ T6038] syz.1.49 (6038) used greatest stack depth: 20168 bytes left [ 99.332516][ T6042] tipc: Started in network mode [ 99.369157][ T6042] tipc: Node identity 1a5f6e2ddf4c, cluster identity 4711 [ 99.396512][ T6042] tipc: Enabled bearer , priority 0 [ 99.414806][ T6049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.52'. [ 99.444858][ T6040] tipc: Resetting bearer [ 99.641335][ T6049] hsr_slave_1 (unregistering): left promiscuous mode [ 99.659787][ T6046] syzkaller0: entered promiscuous mode [ 99.667824][ T6046] syzkaller0: entered allmulticast mode [ 99.676421][ T6052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.53'. [ 99.750132][ T6039] tipc: Resetting bearer [ 99.856418][ T6039] tipc: Disabling bearer [ 100.379659][ T6074] netlink: 108 bytes leftover after parsing attributes in process `syz.4.61'. [ 100.414346][ T6074] netlink: 108 bytes leftover after parsing attributes in process `syz.4.61'. [ 100.457569][ T6074] netlink: 108 bytes leftover after parsing attributes in process `syz.4.61'. [ 100.846507][ T6094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.69'. [ 100.949051][ T6098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.71'. [ 101.682584][ T6093] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 101.963418][ T6127] bridge_slave_0: left allmulticast mode [ 101.980058][ T6127] bridge_slave_0: left promiscuous mode [ 102.002501][ T6127] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.043036][ T6127] bridge_slave_1: left allmulticast mode [ 102.065279][ T6127] bridge_slave_1: left promiscuous mode [ 102.071121][ T6127] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.146507][ T6127] bond0: (slave bond_slave_0): Releasing backup interface [ 102.166452][ T6133] netlink: 'syz.0.87': attribute type 10 has an invalid length. [ 102.178909][ T6133] netlink: 40 bytes leftover after parsing attributes in process `syz.0.87'. [ 102.225156][ T6127] bond0: (slave bond_slave_1): Releasing backup interface [ 102.250982][ T6127] team0: Port device team_slave_0 removed [ 102.292492][ T6127] team0: Port device team_slave_1 removed [ 102.346633][ T6127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.362320][ T6127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.373356][ T6127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.382497][ T6127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.526405][ T6133] team0: Port device geneve0 added [ 102.539565][ T6143] netlink: 12 bytes leftover after parsing attributes in process `syz.1.90'. [ 102.666175][ T6143] veth3: entered promiscuous mode [ 102.718618][ T6146] netlink: 'syz.0.91': attribute type 1 has an invalid length. [ 102.799827][ T6144] vlan2: entered allmulticast mode [ 102.809271][ T6144] hsr_slave_1: entered allmulticast mode [ 102.925446][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 103.060116][ T6154] netlink: 'syz.1.93': attribute type 4 has an invalid length. [ 103.132659][ T6152] netlink: 'syz.1.93': attribute type 4 has an invalid length. [ 103.198345][ T6157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.233515][ T6157] batadv_slave_0: entered promiscuous mode [ 103.457728][ T6165] Bluetooth: MGMT ver 1.23 [ 103.501402][ T6165] netlink: 12 bytes leftover after parsing attributes in process `syz.1.100'. [ 103.798119][ T6173] netlink: 14 bytes leftover after parsing attributes in process `syz.1.103'. [ 103.982380][ T6173] bond0 (unregistering): Released all slaves [ 104.204018][ T6185] netlink: 'syz.2.108': attribute type 1 has an invalid length. [ 104.238961][ T6185] ip6erspan0: entered promiscuous mode [ 105.545531][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 105.670245][ T6230] netlink: 92 bytes leftover after parsing attributes in process `syz.2.131'. [ 105.766546][ T6232] IPv6: Can't replace route, no match found [ 106.406261][ T6256] netdevsim netdevsim2: Direct firmware load for +. failed with error -2 [ 106.458571][ T6256] netdevsim netdevsim2: Falling back to sysfs fallback for: +. [ 106.564101][ T6264] netlink: 'syz.0.146': attribute type 1 has an invalid length. [ 106.719949][ T6264] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.745871][ T6267] ip6erspan0: entered promiscuous mode [ 106.786080][ T6267] bond1: (slave ip6erspan0): making interface the new active one [ 106.801554][ T6267] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 106.827475][ T6268] IPv6: Can't replace route, no match found [ 109.269321][ T6361] netlink: 'syz.3.198': attribute type 10 has an invalid length. [ 109.298660][ T6361] netlink: 40 bytes leftover after parsing attributes in process `syz.3.198'. [ 109.466302][ T6361] team0: Port device geneve0 added [ 109.703947][ T6381] bridge_slave_0: left allmulticast mode [ 109.741155][ T6381] bridge_slave_0: left promiscuous mode [ 109.783440][ T6381] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.822190][ T6381] bridge_slave_1: left allmulticast mode [ 109.835476][ T6381] bridge_slave_1: left promiscuous mode [ 109.841456][ T6381] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.881138][ T6381] bond0: (slave bond_slave_0): Releasing backup interface [ 109.934890][ T6381] bond0: (slave bond_slave_1): Releasing backup interface [ 110.000196][ T6381] team0: Port device team_slave_0 removed [ 110.039154][ T6381] team0: Port device team_slave_1 removed [ 110.066480][ T6381] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.073977][ T6381] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.095114][ T6381] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.104236][ T6381] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.157190][ T6381] team0: Port device geneve0 removed [ 111.515185][ T6425] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 111.538051][ T6430] wireguard: wg1: Could not create IPv4 socket [ 111.845782][ T6441] netlink: 'syz.3.220': attribute type 10 has an invalid length. [ 111.901872][ T6441] netlink: 40 bytes leftover after parsing attributes in process `syz.3.220'. [ 111.960598][ T6441] team0: Port device geneve0 added [ 112.246121][ T6454] bridge_slave_0: left allmulticast mode [ 112.263068][ T6454] bridge_slave_0: left promiscuous mode [ 112.300684][ T6454] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.345729][ T6454] bridge_slave_1: left allmulticast mode [ 112.352314][ T6454] bridge_slave_1: left promiscuous mode [ 112.363171][ T6454] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.392638][ T6454] bond0: (slave bond_slave_0): Releasing backup interface [ 112.411294][ T6454] bond0: (slave bond_slave_1): Releasing backup interface [ 112.438836][ T6454] team0: Port device team_slave_0 removed [ 112.452039][ T6454] team0: Port device team_slave_1 removed [ 112.459528][ T6454] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.469062][ T6454] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.477950][ T6454] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.501435][ T6454] team0: Port device geneve0 removed [ 112.512284][ T6454] bond1: (slave ip6erspan0): Releasing active interface [ 113.788269][ T6510] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 114.046274][ T6519] wireguard: wg1: Could not create IPv4 socket [ 115.886663][ T6580] tap0: tun_chr_ioctl cmd 1074025676 [ 115.909175][ T6580] tap0: owner set to 0 [ 116.464980][ T6599] bridge_slave_0: left allmulticast mode [ 116.498521][ T6599] bridge_slave_0: left promiscuous mode [ 116.505588][ T6599] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.536460][ T6599] bridge_slave_1: left allmulticast mode [ 116.547473][ T6599] bridge_slave_1: left promiscuous mode [ 116.564170][ T6599] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.610777][ T6599] bond0: (slave bond_slave_0): Releasing backup interface [ 116.639519][ T6599] bond0: (slave bond_slave_1): Releasing backup interface [ 116.704501][ T6599] team0: Port device team_slave_0 removed [ 116.737960][ T6599] team0: Port device team_slave_1 removed [ 116.747401][ T6599] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.754937][ T6599] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.774107][ T6599] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.795421][ T6599] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.007498][ T47] hid-generic 0005:10CF:0009.0001: unknown main item tag 0x0 [ 118.108541][ T47] hid-generic 0005:10CF:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 118.841368][ T6682] xt_connbytes: Forcing CT accounting to be enabled [ 119.353067][ T6696] netem: change failed [ 119.772305][ T6713] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 120.426557][ T6735] netlink: 'syz.3.362': attribute type 10 has an invalid length. [ 120.457591][ T6735] netlink: 40 bytes leftover after parsing attributes in process `syz.3.362'. [ 122.583151][ T6808] netlink: 'syz.0.393': attribute type 10 has an invalid length. [ 122.642162][ T6808] netlink: 40 bytes leftover after parsing attributes in process `syz.0.393'. [ 122.749957][ T6808] team0: Port device geneve0 added [ 123.201969][ T6831] netlink: 108 bytes leftover after parsing attributes in process `syz.0.401'. [ 123.231517][ T6831] netlink: 108 bytes leftover after parsing attributes in process `syz.0.401'. [ 123.247324][ T6831] netlink: 108 bytes leftover after parsing attributes in process `syz.0.401'. [ 123.619282][ T6842] netlink: 16 bytes leftover after parsing attributes in process `syz.2.407'. [ 123.734641][ T6845] netlink: 'syz.1.409': attribute type 10 has an invalid length. [ 123.766801][ T6845] netlink: 40 bytes leftover after parsing attributes in process `syz.1.409'. [ 123.988036][ T6845] team0: Port device geneve0 added [ 124.481086][ T6868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.665531][ T6874] netlink: 232 bytes leftover after parsing attributes in process `syz.0.418'. [ 124.708818][ T6872] team0: Port device geneve0 removed [ 125.481002][ T6904] netlink: 'syz.1.434': attribute type 10 has an invalid length. [ 125.512067][ T6904] netlink: 40 bytes leftover after parsing attributes in process `syz.1.434'. [ 125.588749][ T6902] team0: Port device geneve0 removed [ 125.662457][ T6904] team0: Port device geneve0 added [ 125.822475][ T6913] netlink: 232 bytes leftover after parsing attributes in process `syz.2.438'. [ 125.849127][ T6915] netlink: 4 bytes leftover after parsing attributes in process `syz.0.448'. [ 126.084713][ T6926] netlink: 'syz.4.443': attribute type 1 has an invalid length. [ 126.163322][ T6932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.445'. [ 126.225110][ T6934] bond0: entered promiscuous mode [ 126.231234][ T6934] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 126.241179][ T6934] bond1: (slave macvlan2): Enslaving as a backup interface with a down link [ 126.459368][ T6932] hsr_slave_1 (unregistering): left promiscuous mode [ 126.909662][ T6956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.455'. [ 127.217434][ T6971] netlink: 16 bytes leftover after parsing attributes in process `syz.1.462'. [ 127.766352][ T6992] netlink: 24 bytes leftover after parsing attributes in process `syz.3.473'. [ 127.889341][ T6995] netlink: 4 bytes leftover after parsing attributes in process `syz.4.474'. [ 128.057482][ T6995] hsr_slave_1 (unregistering): left promiscuous mode [ 128.561781][ T7010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.481'. [ 128.705692][ T7021] netlink: 'syz.0.485': attribute type 10 has an invalid length. [ 128.745450][ T7021] netlink: 40 bytes leftover after parsing attributes in process `syz.0.485'. [ 128.793998][ T7021] team0: Port device geneve0 added [ 129.229970][ T7034] bond1: (slave macvlan2): Releasing backup interface [ 129.248680][ T7034] bond0: left promiscuous mode [ 129.563690][ T7054] netlink: 'syz.2.499': attribute type 10 has an invalid length. [ 129.797387][ T7055] team0: Port device geneve0 removed [ 129.883171][ T7054] team0: Port device geneve0 added [ 130.477598][ T7074] team0: Port device geneve0 removed [ 131.381055][ T7114] __nla_validate_parse: 6 callbacks suppressed [ 131.381076][ T7114] netlink: 28 bytes leftover after parsing attributes in process `syz.4.527'. [ 131.425378][ T7114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.527'. [ 131.677128][ T7119] team0: Port device geneve0 removed [ 131.946345][ T7133] veth0_to_hsr: invalid flags given to default FDB implementation [ 132.197574][ T7142] netlink: 'syz.2.540': attribute type 10 has an invalid length. [ 132.243950][ T7142] netlink: 40 bytes leftover after parsing attributes in process `syz.2.540'. [ 132.290524][ T7142] team0: Port device geneve0 added [ 132.354457][ T7146] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 132.354889][ T7151] netlink: 28 bytes leftover after parsing attributes in process `syz.0.544'. [ 132.391682][ T7151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.544'. [ 132.600821][ T7160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.546'. [ 132.915918][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.977802][ T7171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.550'. [ 133.194606][ T7183] netlink: 'syz.2.556': attribute type 10 has an invalid length. [ 133.210110][ T7184] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 133.224269][ T7183] netlink: 40 bytes leftover after parsing attributes in process `syz.2.556'. [ 133.519504][ T7194] netlink: 28 bytes leftover after parsing attributes in process `syz.2.560'. [ 133.575606][ T7194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.560'. [ 133.706612][ T5141] Bluetooth: hci4: command 0x0405 tx timeout [ 133.719847][ T7194] team0: Port device geneve0 removed [ 133.900237][ T5844] Bluetooth: hci4: link tx timeout [ 133.906119][ T5844] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 133.915113][ T5141] Bluetooth: hci4: link tx timeout [ 133.921208][ T5141] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 134.482817][ T7223] hsr_slave_1 (unregistering): left promiscuous mode [ 135.031743][ T7249] IPVS: Error connecting to the multicast addr [ 135.946619][ T5141] Bluetooth: hci4: command 0x0405 tx timeout [ 136.513280][ T7307] __nla_validate_parse: 8 callbacks suppressed [ 136.513303][ T7307] netlink: 28 bytes leftover after parsing attributes in process `syz.0.611'. [ 136.532219][ T7307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.611'. [ 136.675847][ T7311] netlink: 'syz.1.613': attribute type 10 has an invalid length. [ 136.697343][ T7311] netlink: 40 bytes leftover after parsing attributes in process `syz.1.613'. [ 136.722322][ T7311] team0: Port device geneve0 added [ 136.762437][ T7316] netlink: 12 bytes leftover after parsing attributes in process `syz.0.615'. [ 136.768037][ T7313] batman_adv: batadv0: Adding interface: gretap1 [ 136.779140][ T7313] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 137.749158][ T7350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.632'. [ 137.834591][ T7354] netlink: 276 bytes leftover after parsing attributes in process `syz.4.634'. [ 138.025395][ T5844] Bluetooth: hci4: command 0x0405 tx timeout [ 138.384785][ T7369] netlink: 68 bytes leftover after parsing attributes in process `syz.0.641'. [ 138.440337][ T7365] team0: Port device geneve0 removed [ 139.149172][ T7399] netlink: 28 bytes leftover after parsing attributes in process `syz.1.656'. [ 139.185506][ T7399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.656'. [ 139.591942][ T7407] team0: Mode "roundrobiN" not found [ 139.743360][ T7416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.664'. [ 139.954477][ T7430] Zero length message leads to an empty skb [ 140.167908][ T7438] netlink: 'syz.0.671': attribute type 10 has an invalid length. [ 140.257710][ T7438] team0: Port device geneve0 added [ 140.355003][ T7441] team0: Port device geneve0 removed [ 140.369997][ T7441] batman_adv: batadv0: Removing interface: gretap1 [ 140.422900][ T7447] xt_CT: You must specify a L4 protocol and not use inversions on it [ 140.723473][ T7455] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 141.547173][ T7486] team0: Port device geneve0 removed [ 141.591500][ T7493] __nla_validate_parse: 5 callbacks suppressed [ 141.591519][ T7493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.692'. [ 142.302018][ T7513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.701'. [ 142.530878][ T7523] netlink: 64 bytes leftover after parsing attributes in process `syz.3.704'. [ 142.696494][ T7527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.707'. [ 142.995905][ T7540] sock: sock_set_timeout: `syz.1.712' (pid 7540) tries to set negative timeout [ 143.017301][ T7527] hsr_slave_1 (unregistering): left promiscuous mode [ 143.361373][ T7548] syzkaller1: entered promiscuous mode [ 143.370754][ T7548] syzkaller1: entered allmulticast mode [ 143.506595][ T7554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.716'. [ 144.021567][ T7570] syzkaller1: entered promiscuous mode [ 144.040703][ T7570] syzkaller1: entered allmulticast mode [ 144.478814][ T7579] netlink: 'syz.0.729': attribute type 10 has an invalid length. [ 144.526227][ T7581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.730'. [ 144.560386][ T7579] netlink: 40 bytes leftover after parsing attributes in process `syz.0.729'. [ 144.597464][ T7579] team0: Port device geneve0 added [ 145.108239][ T7600] macvlan2: entered promiscuous mode [ 145.268767][ T7605] netlink: 9 bytes leftover after parsing attributes in process `syz.1.739'. [ 145.287242][ T7591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.734'. [ 145.318371][ T7605] gretap0: entered promiscuous mode [ 145.349562][ T7611] netlink: 5 bytes leftover after parsing attributes in process `syz.1.739'. [ 145.374722][ T7611] 0ªî{X¹¦: renamed from gretap0 [ 145.413941][ T7611] 0ªî{X¹¦: left promiscuous mode [ 145.436414][ T7611] 0ªî{X¹¦: entered allmulticast mode [ 145.444100][ T7611] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 145.673902][ T7622] sch_tbf: burst 0 is lower than device team_slave_0 mtu (1514) ! [ 147.897792][ T7669] __nla_validate_parse: 3 callbacks suppressed [ 147.897813][ T7669] netlink: 28 bytes leftover after parsing attributes in process `syz.2.763'. [ 147.929333][ T7669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.763'. [ 148.230441][ T7686] tipc: Started in network mode [ 148.236876][ T7686] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 148.253931][ T7686] tipc: Enabling of bearer rejected, failed to enable media [ 148.448789][ T7694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.771'. [ 148.698729][ T7704] netlink: 'syz.4.777': attribute type 29 has an invalid length. [ 148.791073][ T7706] netlink: 500 bytes leftover after parsing attributes in process `syz.4.777'. [ 148.867669][ T7706] unsupported nla_type 58 [ 148.915077][ T7704] netlink: 'syz.4.777': attribute type 29 has an invalid length. [ 149.245942][ T7719] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 149.286889][ T7716] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 149.928178][ T7746] netlink: 4 bytes leftover after parsing attributes in process `syz.3.795'. [ 150.182431][ T7752] syzkaller1: entered promiscuous mode [ 150.224135][ T7752] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 150.602451][ T7760] syzkaller1: entered promiscuous mode [ 150.614760][ T7760] syzkaller1: entered allmulticast mode [ 150.996503][ T7784] netlink: 132 bytes leftover after parsing attributes in process `syz.3.809'. [ 152.701019][ T7835] netlink: 128 bytes leftover after parsing attributes in process `syz.1.827'. [ 152.943012][ T7847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.830'. [ 153.765783][ T7880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.846'. [ 154.233843][ T7896] team0: Port device geneve0 removed [ 154.727450][ T7913] veth0: entered promiscuous mode [ 154.756563][ T7911] veth0: left promiscuous mode [ 154.841620][ T7918] netlink: 16 bytes leftover after parsing attributes in process `syz.3.863'. [ 154.905923][ T7920] syzkaller1: entered promiscuous mode [ 154.911480][ T7920] syzkaller1: entered allmulticast mode [ 154.989137][ T7922] syzkaller1: entered promiscuous mode [ 154.994689][ T7922] syzkaller1: entered allmulticast mode [ 155.177202][ T7933] syzkaller1: entered promiscuous mode [ 155.198652][ T7933] syzkaller1: entered allmulticast mode [ 155.283847][ T7940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.870'. [ 155.570080][ T7950] netlink: 24 bytes leftover after parsing attributes in process `syz.3.876'. [ 156.503736][ T7985] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 156.518769][ T918] IPVS: starting estimator thread 0... [ 156.629939][ T7992] IPVS: using max 28 ests per chain, 67200 per kthread [ 156.928155][ T8009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.900'. [ 157.675842][ T8036] netlink: 12 bytes leftover after parsing attributes in process `syz.3.912'. [ 157.721724][ T8036] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.731327][ T8036] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.740365][ T8036] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.749501][ T8036] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.854782][ T8036] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.864129][ T8036] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.875121][ T8036] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.884912][ T8036] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.143474][ T8049] syzkaller1: entered promiscuous mode [ 158.156183][ T8049] syzkaller1: entered allmulticast mode [ 158.457686][ T8065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.923'. [ 158.589249][ T8068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.919'. [ 159.908932][ T8117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.940'. [ 160.052606][ T8137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.944'. [ 160.546488][ T8155] netlink: 'syz.2.954': attribute type 4 has an invalid length. [ 160.555027][ T8155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.954'. [ 161.153932][ T8180] netlink: 36 bytes leftover after parsing attributes in process `syz.0.962'. [ 161.186129][ T8163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.959'. [ 161.431770][ T8192] netlink: 56 bytes leftover after parsing attributes in process `syz.4.966'. [ 161.739422][ T8205] netlink: 4 bytes leftover after parsing attributes in process `syz.4.970'. [ 162.155741][ T8224] netlink: 28 bytes leftover after parsing attributes in process `syz.3.978'. [ 163.965344][ T8307] __nla_validate_parse: 2 callbacks suppressed [ 163.965364][ T8307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1008'. [ 164.126899][ T8313] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1013'. [ 164.150908][ T8313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1013'. [ 164.600428][ T8332] IPVS: sed: UDP 224.0.0.2:20004 - no destination available [ 164.608063][ T3080] IPVS: starting estimator thread 0... [ 164.639675][ T8336] syzkaller1: entered promiscuous mode [ 164.654765][ T8336] syzkaller1: entered allmulticast mode [ 164.716820][ T8338] IPVS: using max 25 ests per chain, 60000 per kthread [ 164.983765][ T8358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1029'. [ 165.243819][ T8369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1033'. [ 165.333382][ T8373] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1036'. [ 165.360295][ T8373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1036'. [ 166.121756][ T8408] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1046'. [ 166.166534][ T8408] netlink: 'syz.0.1046': attribute type 7 has an invalid length. [ 166.195856][ T8408] netlink: 'syz.0.1046': attribute type 8 has an invalid length. [ 166.210595][ T8408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1046'. [ 166.291707][ T8416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1047'. [ 166.658016][ T8432] netlink: 'syz.2.1057': attribute type 1 has an invalid length. [ 166.778977][ T8433] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 166.907546][ T8432] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 166.936706][ T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 166.939659][ T8441] 8021q: adding VLAN 0 to HW filter on device bond1 [ 167.086672][ T53] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 167.136145][ T8444] veth3: entered promiscuous mode [ 167.172868][ T8444] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 167.680734][ T8474] netlink: 'syz.4.1068': attribute type 1 has an invalid length. [ 168.553520][ T8514] syzkaller1: entered promiscuous mode [ 168.563498][ T8514] syzkaller1: entered allmulticast mode [ 168.919263][ T8528] netlink: 'syz.3.1091': attribute type 4 has an invalid length. [ 170.062154][ T918] IPVS: starting estimator thread 0... [ 170.068002][ T8567] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 170.165284][ T8571] IPVS: using max 27 ests per chain, 64800 per kthread [ 170.211859][ T8578] __nla_validate_parse: 10 callbacks suppressed [ 170.211878][ T8578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1106'. [ 170.461145][ T8587] netlink: 'syz.4.1109': attribute type 1 has an invalid length. [ 170.478750][ T8587] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1109'. [ 171.688142][ T8627] netlink: 'syz.1.1126': attribute type 39 has an invalid length. [ 171.927411][ T8631] syz.4.1128 (8631) used greatest stack depth: 18168 bytes left [ 173.654392][ T8705] bond1: (slave ip6gretap1): Removing an active aggregator [ 173.697085][ T13] bond1: Warning: Found an uninitialized port [ 173.712067][ T8705] bond1: (slave ip6gretap1): Releasing backup interface [ 173.721484][ T8705] bond1: (slave ip6gretap1): the permanent HWaddr of slave - 12:b2:a3:4c:e6:d8 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 173.759144][ T8705] bond1: (slave veth3): Releasing backup interface [ 175.006448][ T8763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1180'. [ 175.018739][ T8763] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1180'. [ 175.064388][ T8763] bond2: entered promiscuous mode [ 175.070360][ T8763] bond2: entered allmulticast mode [ 175.077202][ T8763] 8021q: adding VLAN 0 to HW filter on device bond2 [ 175.108595][ T8770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1181'. [ 175.416017][ T8781] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1187'. [ 175.454590][ T8786] xt_hashlimit: size too large, truncated to 1048576 [ 175.570432][ T8791] ÿ: renamed from dummy0 (while UP) [ 176.250028][ T8813] netlink: 'syz.0.1198': attribute type 1 has an invalid length. [ 176.321877][ T8817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1199'. [ 176.354814][ T8813] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 176.383241][ T8813] 8021q: adding VLAN 0 to HW filter on device bond3 [ 176.395803][ T63] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 176.497184][ T8813] veth3: entered promiscuous mode [ 176.557174][ T12] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 176.713940][ T8830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1202'. [ 177.352372][ T8853] netlink: 'syz.4.1212': attribute type 1 has an invalid length. [ 177.463851][ T8859] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 177.563226][ T63] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 177.607443][ T8853] 8021q: adding VLAN 0 to HW filter on device bond2 [ 177.686695][ T8853] veth3: entered promiscuous mode [ 177.750345][ T36] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 177.924291][ T8876] team0: Mode changed to "roundrobin" [ 177.987026][ T8880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1220'. [ 178.048678][ T8881] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1223'. [ 178.061742][ T8881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1223'. [ 178.109157][ T8886] netlink: 'syz.3.1225': attribute type 1 has an invalid length. [ 178.169492][ T8881] bond3: (slave ip6gretap1): Removing an active aggregator [ 178.187065][ T36] bond3: Warning: Found an uninitialized port [ 178.194423][ T8881] bond3: (slave ip6gretap1): Releasing backup interface [ 178.291611][ T8886] 8021q: adding VLAN 0 to HW filter on device bond1 [ 178.381650][ T8901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1229'. [ 178.412519][ T8893] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 178.603544][ T8907] bond1: (slave veth0_to_bond): Releasing active interface [ 179.423749][ T8935] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1242'. [ 179.442308][ T8935] netlink: 'syz.4.1242': attribute type 7 has an invalid length. [ 179.451690][ T8935] netlink: 'syz.4.1242': attribute type 8 has an invalid length. [ 179.464392][ T8935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1242'. [ 179.491288][ T8937] netlink: 'syz.3.1243': attribute type 1 has an invalid length. [ 180.055459][ T8954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1249'. [ 180.729445][ T8981] netlink: 'syz.2.1259': attribute type 10 has an invalid length. [ 180.921082][ T8988] trusted_key: syz.2.1262 sent an empty control message without MSG_MORE. [ 181.831435][ T9029] netlink: 'syz.2.1279': attribute type 33 has an invalid length. [ 181.839809][ T9029] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1279'. [ 181.852779][ T9029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1279'. [ 182.163790][ T9042] ip6gre1: entered promiscuous mode [ 182.189147][ T9044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1284'. [ 183.260792][ T9077] xt_CT: No such helper "snmp" [ 183.552918][ T9097] netlink: 'syz.0.1307': attribute type 1 has an invalid length. [ 183.736195][ T9107] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1311'. [ 183.740345][ T9105] 8021q: adding VLAN 0 to HW filter on device bond4 [ 184.011150][ T9120] netlink: 'syz.1.1314': attribute type 1 has an invalid length. [ 184.101236][ T13] smc: removing ib device syz0 [ 184.133710][ T9097] veth5: entered promiscuous mode [ 184.146866][ T5905] syz0: Port: 1 Link DOWN [ 184.293849][ T9115] syzkaller1: entered promiscuous mode [ 184.308225][ T9115] syzkaller1: entered allmulticast mode [ 184.361088][ T9121] bond0: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 185.581397][ T9165] netlink: 'syz.1.1328': attribute type 1 has an invalid length. [ 185.645397][ T9170] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1327'. [ 185.669202][ T9170] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1327'. [ 186.038483][ T9179] bond2: (slave ip6gretap1): Removing an active aggregator [ 186.080099][ T9179] bond2: (slave ip6gretap1): Releasing backup interface [ 186.257946][ T9185] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1335'. [ 186.285761][ T9185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1335'. [ 187.040221][ T9213] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1349'. [ 187.061998][ T9216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1350'. [ 187.314013][ T9227] lo: entered allmulticast mode [ 187.323333][ T9225] lo: left allmulticast mode [ 187.332567][ T9228] netlink: 'syz.0.1355': attribute type 29 has an invalid length. [ 187.350485][ T9228] netlink: 'syz.0.1355': attribute type 29 has an invalid length. [ 187.379391][ T9228] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1355'. [ 187.504388][ T9234] openvswitch: netlink: IP tunnel TTL not specified. [ 188.112890][ T9262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1368'. [ 188.131112][ T9262] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1368'. [ 189.379249][ T9306] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1382'. [ 191.259386][ T9370] syzkaller1: entered promiscuous mode [ 191.264948][ T9370] syzkaller1: entered allmulticast mode [ 191.345645][ T9375] netlink: 'syz.4.1410': attribute type 10 has an invalid length. [ 191.385801][ T9377] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 191.393795][ T9375] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1410'. [ 191.528321][ T9375] team0: Port device geneve0 added [ 191.829259][ T9398] netlink: 'syz.0.1418': attribute type 4 has an invalid length. [ 192.213824][ T9413] netlink: 'syz.4.1424': attribute type 4 has an invalid length. [ 193.385472][ T5844] Bluetooth: hci0: command tx timeout [ 193.892798][ T9476] netlink: 'syz.2.1448': attribute type 10 has an invalid length. [ 193.908234][ T9476] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1448'. [ 193.942817][ T9476] team0: Port device geneve0 added [ 194.159394][ T9482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1451'. [ 195.211754][ T9521] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1466'. [ 195.923906][ T9545] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1476'. [ 196.415110][ T9568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1486'. [ 196.720915][ T9576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1490'. [ 196.733794][ T9576] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1490'. [ 197.193256][ T9594] netlink: 'syz.2.1498': attribute type 1 has an invalid length. [ 197.384995][ T9594] 8021q: adding VLAN 0 to HW filter on device bond2 [ 197.424937][ T9609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1503'. [ 199.141696][ T9681] netlink: 'syz.4.1535': attribute type 10 has an invalid length. [ 199.150297][ T9681] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1535'. [ 199.274144][ T9684] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1536'. [ 199.434168][ T9694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1539'. [ 200.062241][ T9718] tipc: Started in network mode [ 200.089679][ T9718] tipc: Node identity 8a5d4ff27676, cluster identity 4711 [ 200.125561][ T9721] netlink: 'syz.1.1552': attribute type 1 has an invalid length. [ 200.140813][ T9718] tipc: Enabled bearer , priority 0 [ 200.284343][ T9723] syzkaller0: entered promiscuous mode [ 200.290088][ T9723] syzkaller0: entered allmulticast mode [ 200.297024][ T9723] tipc: Resetting bearer [ 200.303386][ T9729] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1553'. [ 200.346148][ T9721] 8021q: adding VLAN 0 to HW filter on device bond2 [ 200.429891][ T9714] tipc: Resetting bearer [ 200.876126][ T9756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1562'. [ 201.177286][ T5905] tipc: Node number set to 4230696946 [ 202.011732][ T9714] tipc: Disabling bearer [ 202.043443][ T9746] tipc: Enabling of bearer rejected, failed to enable media [ 202.351382][ T9772] netlink: 'syz.3.1569': attribute type 1 has an invalid length. [ 202.522556][ T9780] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1571'. [ 202.548471][ T9779] 8021q: adding VLAN 0 to HW filter on device bond3 [ 202.555045][ T9782] netlink: 'syz.0.1573': attribute type 1 has an invalid length. [ 202.698812][ T9782] 8021q: adding VLAN 0 to HW filter on device bond5 [ 202.800777][ T9787] bond5: (slave veth7): Enslaving as an active interface with a down link [ 202.889179][ T9798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1576'. [ 202.896236][ T9790] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 202.898458][ T9798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1576'. [ 202.935585][ T9798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1576'. [ 202.982362][ T9782] bond5: (slave veth9): Enslaving as an active interface with a down link [ 203.116085][ T9802] bond0: (slave ip6gretap1): Releasing backup interface [ 203.210275][ T9810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1581'. [ 203.262154][ T9811] dummy0: renamed from team0 (while UP) [ 203.460341][ T9820] netlink: 'syz.2.1585': attribute type 1 has an invalid length. [ 203.599700][ T9825] 8021q: adding VLAN 0 to HW filter on device bond3 [ 203.655517][ T9832] netlink: 'syz.3.1587': attribute type 4 has an invalid length. [ 203.678201][ T9832] netlink: 'syz.3.1587': attribute type 4 has an invalid length. [ 204.174468][ T9853] team0: Port device geneve0 removed [ 204.494240][ T9869] netlink: 'syz.4.1601': attribute type 1 has an invalid length. [ 204.549742][ T9869] 8021q: adding VLAN 0 to HW filter on device bond3 [ 205.989778][ T9923] tipc: Enabled bearer , priority 0 [ 206.155559][ T9923] syzkaller0: entered promiscuous mode [ 206.161118][ T9923] syzkaller0: entered allmulticast mode [ 206.220200][ T9923] tipc: Resetting bearer [ 206.230564][ T9928] tipc: Started in network mode [ 206.262393][ T9928] tipc: Node identity 4, cluster identity 4711 [ 206.279506][ T9928] tipc: Node number set to 4 [ 206.482455][ T13] tipc: Resetting bearer [ 206.501303][ T9921] tipc: Resetting bearer [ 207.075373][ T47] tipc: Node number set to 3306384941 [ 207.846266][ T9921] tipc: Disabling bearer [ 208.114131][ T9965] __nla_validate_parse: 1 callbacks suppressed [ 208.114151][ T9965] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1631'. [ 208.177046][ T9968] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1631'. [ 208.613542][ T9976] syzkaller0: entered promiscuous mode [ 208.619975][ T9976] syzkaller0: entered allmulticast mode [ 208.630835][ T9984] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 208.638166][ T9984] IPv6: NLM_F_CREATE should be set when creating new route [ 209.390663][T10005] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1642'. [ 209.457723][T10006] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1642'. [ 211.062076][T10034] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1650'. [ 211.120481][T10034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1650'. [ 211.411028][T10050] batman_adv: batadv0: Adding interface: dummy0 [ 211.430884][T10050] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.476516][T10050] batman_adv: batadv0: Interface activated: dummy0 [ 211.625969][T10053] batadv0: mtu less than device minimum [ 211.677156][T10053] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 211.689497][T10053] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 211.701668][T10053] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 211.713776][T10053] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 211.725860][T10053] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 211.737799][T10053] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 211.749654][T10053] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 211.761618][T10053] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 211.773580][T10053] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 211.802130][ T5845] Bluetooth: hci1: command 0x0406 tx timeout [ 211.808844][ T5845] Bluetooth: hci2: command 0x0406 tx timeout [ 211.814956][ T5845] Bluetooth: hci3: command 0x0406 tx timeout [ 212.470346][T10084] tipc: Enabled bearer , priority 0 [ 212.699356][T10084] syzkaller0: entered promiscuous mode [ 212.705292][T10084] syzkaller0: entered allmulticast mode [ 212.711643][T10084] tipc: Resetting bearer [ 212.832663][T10081] tipc: Resetting bearer [ 213.232351][T10114] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1670'. [ 213.557330][ T47] tipc: Node number set to 4269801488 [ 214.473644][T10081] tipc: Disabling bearer [ 215.082914][T10142] syzkaller0: entered promiscuous mode [ 215.086925][T10147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1681'. [ 215.090195][T10142] syzkaller0: entered allmulticast mode [ 218.325105][T10174] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.390934][T10182] tipc: Enabled bearer , priority 0 [ 218.429819][T10182] syzkaller0: entered promiscuous mode [ 218.458362][T10182] syzkaller0: entered allmulticast mode [ 218.550767][T10174] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.584652][T10189] netlink: 'syz.3.1694': attribute type 1 has an invalid length. [ 218.605920][T10182] tipc: Resetting bearer [ 218.640561][T10181] tipc: Resetting bearer [ 218.668699][T10181] tipc: Disabling bearer [ 218.740957][T10174] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.984460][ T1038] syzkaller0: tun_net_xmit 76 [ 218.992694][ T1038] syzkaller0: tun_net_xmit 48 [ 219.005779][ T5905] syzkaller0: tun_net_xmit 76 [ 219.036062][T10174] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.549271][T10144] net_ratelimit: 10 callbacks suppressed [ 219.549293][T10144] Set syz1 is full, maxelem 65536 reached [ 220.648542][T10206] tipc: Enabling of bearer rejected, failed to enable media [ 220.751955][T10174] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.818930][T10174] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.867459][T10174] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.891486][T10174] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.061866][T10227] netlink: 'syz.0.1706': attribute type 1 has an invalid length. [ 221.242151][T10239] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 221.249550][T10239] IPv6: NLM_F_CREATE should be set when creating new route [ 221.321909][T10245] netlink: 'syz.0.1710': attribute type 39 has an invalid length. [ 222.406972][T10286] netlink: 'syz.2.1720': attribute type 1 has an invalid length. [ 222.759742][T10296] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1723'. [ 223.242587][T10320] netlink: 'syz.2.1734': attribute type 1 has an invalid length. [ 223.853669][T10355] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1740'. [ 224.144984][T10362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1743'. [ 224.391450][T10370] gtp0: entered promiscuous mode [ 224.398354][T10374] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1746'. [ 224.830023][T10388] netlink: 'syz.0.1749': attribute type 1 has an invalid length. [ 225.042881][T10396] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1751'. [ 225.420364][T10406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1755'. [ 225.846864][T10432] netlink: 'syz.4.1762': attribute type 1 has an invalid length. [ 225.917850][T10436] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1761'. [ 225.944263][T10436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1761'. [ 226.110171][T10446] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1766'. [ 226.175083][T10452] geneve0: entered promiscuous mode [ 226.264887][T10456] IPVS: set_ctl: invalid protocol: 43 172.20.20.33:20000 [ 226.552905][T10470] netlink: 'syz.2.1775': attribute type 1 has an invalid length. [ 226.693151][T10476] netlink: 'syz.0.1777': attribute type 1 has an invalid length. [ 226.736839][T10476] 8021q: adding VLAN 0 to HW filter on device bond7 [ 226.821468][T10476] veth11: entered promiscuous mode [ 226.869933][T10476] bond7: (slave veth11): Enslaving as a backup interface with a down link [ 227.339969][T10503] x_tables: ip6_tables: rpfilter.0 match: invalid size 8 (kernel) != (user) 48 [ 228.176135][T10547] netlink: 'syz.2.1811': attribute type 10 has an invalid length. [ 228.190978][T10547] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1811'. [ 228.204775][T10547] geneve0: left promiscuous mode [ 228.206745][T10549] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1812'. [ 228.269364][T10549] batman_adv: batadv0: Interface deactivated: dummy0 [ 228.292532][T10549] batman_adv: batadv0: Removing interface: dummy0 [ 228.516289][T10557] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 228.523615][T10557] IPv6: NLM_F_CREATE should be set when creating new route [ 228.548617][T10557] lo: entered allmulticast mode [ 228.570354][T10557] tunl0: entered allmulticast mode [ 228.607663][T10557] gre0: entered allmulticast mode [ 228.680304][T10557] erspan0: entered allmulticast mode [ 228.718667][T10557] ip_vti0: entered allmulticast mode [ 228.750000][T10557] ip6_vti0: entered allmulticast mode [ 228.783033][T10557] sit0: entered allmulticast mode [ 228.836025][T10557] ip6tnl0: entered allmulticast mode [ 228.856521][T10557] ip6gre0: entered allmulticast mode [ 228.896002][T10557] ip6gretap0: entered allmulticast mode [ 228.934615][T10557] bridge0: entered allmulticast mode [ 228.945688][T10557] team0: entered allmulticast mode [ 228.966731][T10557] ÿ: entered allmulticast mode [ 228.988744][T10557] nlmon0: entered allmulticast mode [ 229.006247][T10557] caif0: entered allmulticast mode [ 229.020317][T10557] batadv0: entered allmulticast mode [ 229.043405][T10557] veth0: entered allmulticast mode [ 229.075097][T10557] veth1: entered allmulticast mode [ 229.098521][T10583] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1827'. [ 229.119931][T10557] wg0: entered allmulticast mode [ 229.141657][T10557] wg1: entered allmulticast mode [ 229.165966][T10557] wg2: entered allmulticast mode [ 229.185633][T10557] veth0_to_bridge: entered allmulticast mode [ 229.202422][T10557] bridge_slave_0: entered allmulticast mode [ 229.227792][T10557] veth1_to_bridge: entered allmulticast mode [ 229.249722][T10557] bridge_slave_1: entered allmulticast mode [ 229.268238][T10557] veth0_to_bond: entered allmulticast mode [ 229.285659][T10557] bond_slave_0: entered allmulticast mode [ 229.308724][T10557] veth1_to_bond: entered allmulticast mode [ 229.327711][T10557] bond_slave_1: entered allmulticast mode [ 229.334833][T10557] veth0_to_team: entered allmulticast mode [ 229.369035][T10557] team_slave_0: entered allmulticast mode [ 229.398811][T10557] veth1_to_team: entered allmulticast mode [ 229.423984][T10557] team_slave_1: entered allmulticast mode [ 229.434468][T10557] veth0_to_batadv: entered allmulticast mode [ 229.454112][T10557] batadv_slave_0: entered allmulticast mode [ 229.478612][T10557] xfrm0: entered allmulticast mode [ 229.507138][T10557] veth0_to_hsr: entered allmulticast mode [ 229.524822][T10557] hsr_slave_0: entered allmulticast mode [ 229.534692][T10557] hsr0: entered allmulticast mode [ 229.550280][T10557] veth1_virt_wifi: entered allmulticast mode [ 229.564954][T10557] veth0_virt_wifi: entered allmulticast mode [ 229.574297][T10557] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 229.597397][T10557] veth1_vlan: entered allmulticast mode [ 229.615825][T10557] veth0_vlan: entered allmulticast mode [ 229.659616][T10557] vlan0: entered allmulticast mode [ 229.666234][T10557] vlan1: entered allmulticast mode [ 229.672668][T10557] macvlan0: entered allmulticast mode [ 229.684046][T10557] macvlan1: entered allmulticast mode [ 229.698070][T10557] ipvlan0: entered allmulticast mode [ 229.711189][T10557] veth1_macvtap: entered allmulticast mode [ 229.725049][T10557] veth0_macvtap: entered allmulticast mode [ 229.744981][T10557] macvtap0: entered allmulticast mode [ 229.762109][T10557] macsec0: entered allmulticast mode [ 229.771213][T10557] geneve0: entered allmulticast mode [ 229.780460][T10557] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.790649][T10557] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.805320][T10557] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.824470][T10557] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.844388][T10557] geneve1: entered allmulticast mode [ 229.861645][T10557] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 229.873769][T10557] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 229.892667][T10557] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 229.904713][T10557] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 229.940241][T10557] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 229.982614][T10557] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 229.994537][T10557] macsec1: entered allmulticast mode [ 230.002433][T10557] macvlan2: entered allmulticast mode [ 230.008118][T10557] macsec2: entered allmulticast mode [ 230.014525][T10557] ipip0: entered allmulticast mode [ 230.021111][T10557] bond0: entered allmulticast mode [ 230.055539][T10557] ip6gretap1: entered allmulticast mode [ 230.063836][T10557] bond1: entered allmulticast mode [ 230.115728][T10557] veth2: entered allmulticast mode [ 230.121206][T10557] veth3: entered allmulticast mode [ 230.136387][T10557] bond2: entered allmulticast mode [ 230.156303][T10557] gre1: entered allmulticast mode [ 230.165465][T10557] veth4: entered allmulticast mode [ 230.189585][T10557] veth5: entered allmulticast mode [ 230.193835][T10608] netlink: 'syz.4.1831': attribute type 2 has an invalid length. [ 230.195103][T10557] veth6: entered allmulticast mode [ 230.204014][T10608] netlink: 'syz.4.1831': attribute type 2 has an invalid length. [ 230.229651][T10557] veth7: entered allmulticast mode [ 230.246338][T10557] bridge1: entered allmulticast mode [ 230.266288][T10557] ip6erspan0: entered allmulticast mode [ 230.307021][T10588] bond5: (slave veth0_to_bond): Releasing active interface [ 230.392035][T10588] bond5: (slave veth7): Releasing active interface [ 230.409747][T10588] bond5: (slave veth7): the permanent HWaddr of slave - 7e:0e:cb:cf:29:d1 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 230.471964][T10588] bond5: (slave veth9): Releasing active interface [ 230.673023][T10588] bond7: (slave veth11): Releasing backup interface [ 231.200667][T10644] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 231.208024][T10644] IPv6: NLM_F_CREATE should be set when creating new route [ 231.255837][T10648] lo: entered allmulticast mode [ 231.261881][T10648] tunl0: entered allmulticast mode [ 231.278968][T10648] gre0: entered allmulticast mode [ 231.311977][T10648] gretap0: entered allmulticast mode [ 231.332250][T10648] erspan0: entered allmulticast mode [ 231.352780][T10648] ip_vti0: entered allmulticast mode [ 231.384467][T10648] ip6_vti0: entered allmulticast mode [ 231.408181][T10648] sit0: entered allmulticast mode [ 231.430271][T10648] ip6tnl0: entered allmulticast mode [ 231.454240][T10648] ip6gre0: entered allmulticast mode [ 231.497532][T10648] syz_tun: entered allmulticast mode [ 231.537354][T10648] ip6gretap0: entered allmulticast mode [ 231.564098][T10648] bridge0: entered allmulticast mode [ 231.589655][T10648] vcan0: entered allmulticast mode [ 231.605646][T10648] bond0: entered allmulticast mode [ 231.620556][T10648] team0: entered allmulticast mode [ 231.643711][T10648] dummy0: entered allmulticast mode [ 231.657361][T10648] nlmon0: entered allmulticast mode [ 231.665030][T10648] caif0: entered allmulticast mode [ 231.677668][T10648] batadv0: entered allmulticast mode [ 231.693291][T10648] vxcan0: entered allmulticast mode [ 231.704227][T10648] vxcan1: entered allmulticast mode [ 231.718340][T10648] veth0: entered allmulticast mode [ 231.730844][T10648] veth1: entered allmulticast mode [ 231.753485][T10648] wg1: entered allmulticast mode [ 231.781464][T10648] wg2: entered allmulticast mode [ 231.791032][T10648] veth0_to_bridge: entered allmulticast mode [ 231.803480][T10648] bridge_slave_0: entered allmulticast mode [ 231.813016][T10648] veth1_to_bridge: entered allmulticast mode [ 231.826977][T10648] bridge_slave_1: entered allmulticast mode [ 231.836970][T10648] veth0_to_bond: entered allmulticast mode [ 231.843297][T10648] bond_slave_0: entered allmulticast mode [ 231.850706][T10648] veth1_to_bond: entered allmulticast mode [ 231.861064][T10648] bond_slave_1: entered allmulticast mode [ 231.876538][T10648] veth1_to_team: entered allmulticast mode [ 231.892990][T10648] team_slave_1: entered allmulticast mode [ 231.899368][T10648] veth0_to_batadv: entered allmulticast mode [ 231.909566][T10648] batadv_slave_0: left promiscuous mode [ 231.915291][T10648] batadv_slave_0: entered allmulticast mode [ 231.922046][T10648] xfrm0: entered allmulticast mode [ 231.933002][T10648] veth0_to_hsr: entered allmulticast mode [ 231.958602][T10648] hsr_slave_0: entered allmulticast mode [ 231.988670][T10648] hsr0: entered allmulticast mode [ 232.027266][T10648] veth1_virt_wifi: entered allmulticast mode [ 232.052849][T10648] veth0_virt_wifi: entered allmulticast mode [ 232.062740][T10648] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 232.086277][T10648] veth1_macvtap: entered allmulticast mode [ 232.104188][T10648] veth0_macvtap: entered allmulticast mode [ 232.124524][T10648] macvtap0: entered allmulticast mode [ 232.137643][T10648] macsec0: entered allmulticast mode [ 232.148367][T10648] geneve0: entered allmulticast mode [ 232.154675][T10648] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.163216][T10648] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.172222][T10648] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.187037][T10648] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.196154][T10648] geneve1: entered allmulticast mode [ 232.210781][T10648] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 232.229815][T10648] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 232.246920][T10648] bond1: entered allmulticast mode [ 232.263592][T10648] ip6erspan0: left promiscuous mode [ 232.285315][T10648] ip6erspan0: entered allmulticast mode [ 232.305667][T10648] bond2: left promiscuous mode [ 232.320001][T10648] bond3: entered allmulticast mode [ 232.329004][T10648] ip6gretap1: entered allmulticast mode [ 232.349673][T10648] veth2: entered allmulticast mode [ 232.354965][T10648] veth3: left promiscuous mode [ 232.362696][T10648] veth3: entered allmulticast mode [ 232.375711][T10648] bond4: entered allmulticast mode [ 232.382348][T10648] veth4: entered allmulticast mode [ 232.392599][T10648] veth5: left promiscuous mode [ 232.397721][T10648] veth5: entered allmulticast mode [ 232.403282][T10648] sit1: entered allmulticast mode [ 232.415986][T10648] bridge1: entered allmulticast mode [ 232.435618][T10648] bond5: entered allmulticast mode [ 232.441607][T10648] veth6: entered allmulticast mode [ 232.466134][T10648] veth7: entered allmulticast mode [ 232.471496][T10648] veth8: entered allmulticast mode [ 232.484491][T10648] veth9: entered allmulticast mode [ 232.491405][T10648] bridge2: entered allmulticast mode [ 232.503245][T10648] netdevsim netdevsim0 eth0: entered allmulticast mode [ 232.520956][T10648] netdevsim netdevsim0 eth1: entered allmulticast mode [ 232.545656][T10648] netdevsim netdevsim0 eth2: entered allmulticast mode [ 232.553062][T10648] netdevsim netdevsim0 eth3: entered allmulticast mode [ 232.578146][T10648] bond6: entered allmulticast mode [ 232.584062][T10648] bridge3: entered allmulticast mode [ 232.597071][T10648] ip6tnl1: entered allmulticast mode [ 232.612684][T10648] bond7: entered allmulticast mode [ 232.618555][T10648] veth10: entered allmulticast mode [ 232.623925][T10648] veth11: left promiscuous mode [ 232.635313][T10648] veth11: entered allmulticast mode [ 233.124429][T10685] netlink: 'syz.1.1861': attribute type 1 has an invalid length. [ 233.222645][T10685] veth9: entered promiscuous mode [ 234.846937][T10769] netlink: 'syz.0.1899': attribute type 10 has an invalid length. [ 234.890334][T10769] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1899'. [ 234.939906][T10769] geneve0: left allmulticast mode [ 234.967254][T10769] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.979908][T10769] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.988914][T10769] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.000440][T10769] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.013218][T10769] geneve0: entered allmulticast mode [ 235.028077][T10769] team0: Port device geneve0 added [ 235.228018][T10785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1905'. [ 235.679183][T10813] netlink: 'syz.3.1914': attribute type 10 has an invalid length. [ 235.718737][T10813] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1914'. [ 235.773239][T10813] team0: Port device geneve0 added [ 236.383469][T10840] xt_CT: You must specify a L4 protocol and not use inversions on it [ 236.671476][T10593] hid-generic 0005:0458:0009.0002: unknown main item tag 0x0 [ 236.738527][T10593] hid-generic 0005:0458:0009.0002: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 238.230070][T10916] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1951'. [ 238.297540][T10921] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1951'. [ 238.334636][T10920] gre0: left allmulticast mode [ 238.471986][T10924] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1955'. [ 238.483190][T10924] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1955'. [ 238.498211][T10924] bridge0: left allmulticast mode [ 238.704367][T10926] xt_CT: No such helper "pptp" [ 239.338210][T10958] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1968'. [ 239.362177][T10958] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1968'. [ 239.715563][T10976] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 240.238827][T11003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1986'. [ 240.576117][T11011] netlink: 'syz.2.1989': attribute type 1 has an invalid length. [ 240.595684][T11011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1989'. [ 240.740377][T11022] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 240.820259][T11025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1996'. [ 240.845336][ T5888] hid (null): unknown global tag 0xdf [ 240.861327][ T5888] hid (null): unknown global tag 0xc [ 240.875478][T11031] netlink: 'syz.1.1998': attribute type 1 has an invalid length. [ 240.896952][ T5888] hid-generic 0005:046D:0A0A.0003: unknown main item tag 0x0 [ 240.904439][ T5888] hid-generic 0005:046D:0A0A.0003: unexpected long global item [ 240.968252][ T5888] hid-generic 0005:046D:0A0A.0003: probe with driver hid-generic failed with error -22 [ 240.998384][T11031] veth11: entered promiscuous mode [ 241.030119][T11036] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2000'. [ 241.055340][T11036] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2000'. [ 241.111348][T11036] dummy0: Port device geneve0 removed [ 241.175687][T11042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2002'. [ 241.739212][T11062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2010'. [ 241.777613][T11064] netlink: 'syz.2.2012': attribute type 1 has an invalid length. [ 241.873781][T11064] veth5: entered promiscuous mode [ 241.958801][T11073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2014'. [ 242.635586][T11104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2024'. [ 242.654510][T11110] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2025'. [ 242.672768][T11109] netlink: 'syz.4.2028': attribute type 1 has an invalid length. [ 242.814227][T11109] veth5: entered promiscuous mode [ 244.654068][T11199] veth7: entered promiscuous mode [ 244.851772][T11208] netlink: 'syz.4.2063': attribute type 1 has an invalid length. [ 245.576719][T11237] team0: No ports can be present during mode change [ 245.716238][T11244] netlink: 'syz.3.2076': attribute type 1 has an invalid length. [ 245.727651][T11245] __nla_validate_parse: 4 callbacks suppressed [ 245.727669][T11245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2077'. [ 247.087554][T11313] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 247.164016][T11315] netlink: 'syz.3.2104': attribute type 4 has an invalid length. [ 247.379796][T11322] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2108'. [ 247.564146][T11331] bridge0: port 1(veth0_to_bridge) entered blocking state [ 247.571832][T11331] bridge0: port 1(veth0_to_bridge) entered disabled state [ 247.581660][T11331] veth0_to_bridge: entered allmulticast mode [ 247.590349][T11331] veth0_to_bridge: entered promiscuous mode [ 247.609125][T11331] bridge0: port 1(veth0_to_bridge) entered blocking state [ 247.616711][T11331] bridge0: port 1(veth0_to_bridge) entered forwarding state [ 247.753488][T11342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2113'. [ 248.243607][T11328] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 249.041277][T11395] lo speed is unknown, defaulting to 1000 [ 249.085342][T11395] lo speed is unknown, defaulting to 1000 [ 249.092585][T11395] lo speed is unknown, defaulting to 1000 [ 249.147442][T11397] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2133'. [ 249.153450][T11395] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 249.187595][T11397] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 249.253589][T11395] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 249.273457][T11401] policy can only be matched on NF_INET_PRE_ROUTING [ 249.273481][T11401] unable to load match [ 249.409695][T11395] lo speed is unknown, defaulting to 1000 [ 249.439686][T11395] lo speed is unknown, defaulting to 1000 [ 249.452796][T11395] lo speed is unknown, defaulting to 1000 [ 249.464997][T11395] lo speed is unknown, defaulting to 1000 [ 249.477205][T11395] lo speed is unknown, defaulting to 1000 [ 249.762492][T11421] syzkaller0: entered promiscuous mode [ 249.773309][T11421] syzkaller0: entered allmulticast mode [ 249.784659][T11421] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 249.866490][T11427] netlink: 788 bytes leftover after parsing attributes in process `syz.3.2148'. [ 249.939951][T11427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2148'. [ 250.151522][T11441] netlink: 'syz.3.2153': attribute type 10 has an invalid length. [ 250.661674][T11463] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 252.046437][T11524] netlink: 'syz.2.2178': attribute type 1 has an invalid length. [ 252.209677][T11531] veth7: entered promiscuous mode [ 252.277077][T11538] syzkaller1: entered promiscuous mode [ 252.282833][T11538] syzkaller1: entered allmulticast mode [ 253.028917][T11570] netlink: 'syz.4.2195': attribute type 1 has an invalid length. [ 253.146009][T11576] veth7: entered promiscuous mode [ 253.343635][T11585] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2198'. [ 253.369484][T11585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2198'. [ 253.382190][T11585] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping [ 254.072558][T11613] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2207'. [ 254.176899][T11620] netlink: 'syz.1.2210': attribute type 1 has an invalid length. [ 254.263022][T11624] tipc: Enabled bearer , priority 0 [ 254.332787][T11625] bond3: (slave gretap0): making interface the new active one [ 254.343485][T11625] bond3: (slave gretap0): Enslaving as an active interface with an up link [ 254.479038][T11618] syzkaller0: entered promiscuous mode [ 254.485100][T11618] syzkaller0: entered allmulticast mode [ 254.501840][T11618] tipc: Resetting bearer [ 254.505605][T11636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2216'. [ 254.562883][T11617] tipc: Resetting bearer [ 256.244667][T11617] tipc: Disabling bearer [ 256.872570][T11690] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2233'. [ 257.183637][T11697] syzkaller0: entered promiscuous mode [ 257.194661][T11697] syzkaller0: entered allmulticast mode [ 258.955832][T11734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2242'. [ 259.011076][T11736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2245'. [ 259.043887][T11736] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2245'. [ 259.242537][T11750] netlink: 'syz.1.2249': attribute type 1 has an invalid length. [ 259.273967][T11753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2250'. [ 259.411862][T11750] veth13: entered promiscuous mode [ 259.489020][T11756] lo speed is unknown, defaulting to 1000 [ 259.819742][ T36] af_packet: tpacket_rcv: packet too big, clamped from 76 to 4294967272. macoff=96 [ 260.095731][T11782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2259'. [ 260.364704][T11792] syzkaller0: create flow: hash 2362316488 index 2 [ 260.398279][ T2990] syzkaller0: tun_net_xmit 76 [ 260.403505][ T2990] syzkaller0: tun_net_xmit 48 [ 260.425517][T10593] syzkaller0: tun_net_xmit 76 [ 260.506558][ T5888] syzkaller0: tun_net_xmit 76 [ 260.511629][T11787] syzkaller0: delete flow: hash 2362316488 index 2 [ 260.531094][T11795] tipc: Enabled bearer , priority 0 [ 260.555760][T10593] syzkaller0: tun_net_xmit 76 [ 261.904998][T11791] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 261.912780][T11791] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 261.921035][T11791] tipc: Resetting bearer [ 261.929512][T11799] tipc: Resetting bearer [ 261.949143][ T12] tipc: Resetting bearer [ 262.373100][T11821] syzkaller1: entered promiscuous mode [ 262.381710][T11821] syzkaller1: entered allmulticast mode [ 262.409588][T11825] netlink: 'syz.0.2278': attribute type 1 has an invalid length. [ 262.468414][T11825] veth13: entered promiscuous mode [ 262.663402][T11836] tipc: Enabled bearer , priority 0 [ 262.701590][T11840] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2284'. [ 262.762347][T11836] syzkaller0: entered promiscuous mode [ 262.768594][T11836] syzkaller0: entered allmulticast mode [ 262.774825][T11836] tipc: Resetting bearer [ 262.804857][T11844] geneve0: entered promiscuous mode [ 262.816522][T11835] tipc: Resetting bearer [ 263.605997][T11862] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2291'. [ 264.390662][T11835] tipc: Disabling bearer [ 264.599027][T11871] netlink: 'syz.3.2292': attribute type 1 has an invalid length. [ 264.662684][T11871] veth5: entered promiscuous mode [ 265.023827][T11894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2304'. [ 265.152303][T11905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.293847][T11910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.412871][T11917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.594635][T11928] netlink: 'syz.1.2315': attribute type 1 has an invalid length. [ 265.617772][T11928] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2315'. [ 265.789111][T11936] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2319'. [ 265.819294][T11936] netlink: zone id is out of range [ 265.824539][T11936] netlink: get zone limit has 8 unknown bytes [ 265.995274][T11943] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2324'. [ 266.269874][T11963] vlan0: entered promiscuous mode [ 266.285301][T11963] bridge0: entered promiscuous mode [ 266.648425][T11979] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2336'. [ 267.213998][T12012] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2352'. [ 267.336063][T12021] netlink: 'syz.2.2355': attribute type 1 has an invalid length. [ 267.376801][T12021] veth9: entered promiscuous mode [ 267.999954][T12056] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2374'. [ 268.372914][T12062] team0: Port device geneve0 removed [ 268.546374][T12068] lo speed is unknown, defaulting to 1000 [ 269.010445][T12097] xt_CT: You must specify a L4 protocol and not use inversions on it [ 269.392358][T12116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2394'. [ 269.549846][T12121] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2398'. [ 269.921085][T12138] lo speed is unknown, defaulting to 1000 [ 270.079666][T12151] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2409'. [ 270.577249][T12171] xt_hashlimit: size too large, truncated to 1048576 [ 271.354318][T12189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2423'. [ 272.068741][T12214] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2435'. [ 272.083506][T12214] geneve0: left allmulticast mode [ 272.110007][T12214] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.121121][T12214] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.134329][T12214] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.143659][T12214] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.158465][T12217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2436'. [ 272.170754][T12214] team0: Port device geneve0 removed [ 272.177494][T12214] tipc: Resetting bearer [ 272.369335][T12228] netlink: 'syz.0.2441': attribute type 3 has an invalid length. [ 272.567269][T12238] team0: Mode changed to "roundrobin" [ 272.786509][T12249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2449'. [ 272.863368][T12252] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2450'. [ 272.959543][T12257] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2452'. [ 272.993044][T12257] veth11: entered allmulticast mode [ 273.073912][T12261] lo speed is unknown, defaulting to 1000 [ 273.476061][T12276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2460'. [ 274.446510][T12309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2472'. [ 274.518686][T12315] veth13: entered promiscuous mode [ 274.603741][T12319] lo speed is unknown, defaulting to 1000 [ 274.834030][T12329] netlink: 788 bytes leftover after parsing attributes in process `syz.0.2479'. [ 275.128550][T12333] 8021q: adding VLAN 0 to HW filter on device bond7 [ 275.708479][T12353] __nla_validate_parse: 1 callbacks suppressed [ 275.708500][T12353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2485'. [ 275.952958][T12368] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2490'. [ 276.053438][T12368] bond8: entered promiscuous mode [ 276.060024][T12368] 8021q: adding VLAN 0 to HW filter on device bond8 [ 276.302644][ T5141] Bluetooth: hci4: link tx timeout [ 276.309898][ T5141] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 277.621685][T12442] lo speed is unknown, defaulting to 1000 [ 278.345485][ T5141] Bluetooth: hci4: command 0x0405 tx timeout [ 278.747600][T12482] sock: sock_set_timeout: `syz.2.2523' (pid 12482) tries to set negative timeout [ 279.806216][T12533] tipc: Enabled bearer , priority 0 [ 279.892324][T12533] syzkaller0: entered promiscuous mode [ 279.914937][T12533] syzkaller0: entered allmulticast mode [ 279.932582][T12533] tipc: Resetting bearer [ 279.997654][T12531] tipc: Resetting bearer [ 281.784914][T12531] tipc: Disabling bearer [ 282.218774][T12597] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2552'. [ 282.516720][T12614] netlink: 'syz.2.2556': attribute type 4 has an invalid length. [ 282.580548][T12618] netlink: 'syz.2.2556': attribute type 4 has an invalid length. [ 283.929333][T12617] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 284.272251][T12635] 8021q: adding VLAN 0 to HW filter on device bond5 [ 284.649803][T12667] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2567'. [ 284.689439][T12659] lo speed is unknown, defaulting to 1000 [ 285.386682][T12696] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2575'. [ 285.446290][T12696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2575'. [ 285.498594][T12696] bridge0: left allmulticast mode [ 285.610999][T12706] netlink: 'syz.1.2577': attribute type 1 has an invalid length. [ 285.818502][T12659] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 285.866941][T12706] 8021q: adding VLAN 0 to HW filter on device bond5 [ 285.886079][ T5888] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 286.030982][T12723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2582'. [ 286.391540][T12741] netlink: 'syz.1.2586': attribute type 10 has an invalid length. [ 286.400192][T12741] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2586'. [ 286.435718][T12741] geneve0: left allmulticast mode [ 286.474186][T12741] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.499181][T12741] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.499678][T12745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2587'. [ 286.533217][T12741] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.573688][T12741] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.611097][T12741] geneve0: entered allmulticast mode [ 286.618906][T12741] team0: Port device geneve0 added [ 286.685550][T12754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2590'. [ 286.866391][T12763] netlink: 'syz.1.2592': attribute type 1 has an invalid length. [ 286.967697][T12763] 8021q: adding VLAN 0 to HW filter on device bond6 [ 286.984046][T12770] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2594'. [ 287.032918][T12770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2594'. [ 287.242336][T12785] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2597'. [ 287.282556][T12785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2597'. [ 287.341828][T12785] tipc: Resetting bearer [ 287.562319][T12794] tipc: Resetting bearer [ 287.628532][T12802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2599'. [ 287.733545][T12807] tipc: Resetting bearer [ 288.022962][T12816] netlink: 'syz.3.2606': attribute type 1 has an invalid length. [ 288.178609][T12816] 8021q: adding VLAN 0 to HW filter on device bond4 [ 288.254875][T12829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2608'. [ 288.621862][T12843] netlink: 'syz.2.2611': attribute type 10 has an invalid length. [ 288.659163][T12843] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2611'. [ 288.694697][T12843] dummy0: Port device geneve0 added [ 289.038646][T12862] veth0_to_bridge: left allmulticast mode [ 289.063159][T12862] veth0_to_bridge: left promiscuous mode [ 289.095789][T12862] bridge0: port 1(veth0_to_bridge) entered disabled state [ 289.182699][T12869] netlink: 'syz.3.2620': attribute type 1 has an invalid length. [ 289.616255][T12886] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2625'. [ 289.638227][T12886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2625'. [ 291.100392][T12889] tipc: Resetting bearer [ 291.107249][T12881] lo speed is unknown, defaulting to 1000 [ 291.247917][T12899] netlink: 'syz.2.2632': attribute type 1 has an invalid length. [ 291.518649][T12899] 8021q: adding VLAN 0 to HW filter on device bond9 [ 291.626897][ C1] ================================================================== [ 291.635031][ C1] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x471/0x4b0 [ 291.643063][ C1] Read of size 2 at addr ffff88814570802a by task syz.3.2634/12915 [ 291.650977][ C1] [ 291.653337][ C1] CPU: 1 UID: 0 PID: 12915 Comm: syz.3.2634 Not tainted 6.15.0-rc5-syzkaller-00126-gea9a83d7f371 #0 PREEMPT(full) [ 291.653359][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 291.653374][ C1] Call Trace: [ 291.653384][ C1] [ 291.653392][ C1] dump_stack_lvl+0x189/0x250 [ 291.653423][ C1] ? __virt_addr_valid+0x18c/0x540 [ 291.653456][ C1] ? rcu_is_watching+0x15/0xb0 [ 291.653494][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.653528][ C1] ? rcu_is_watching+0x15/0xb0 [ 291.653553][ C1] ? lock_release+0x4b/0x3e0 [ 291.653577][ C1] ? __virt_addr_valid+0x18c/0x540 [ 291.653598][ C1] ? __virt_addr_valid+0x469/0x540 [ 291.653620][ C1] print_report+0xb4/0x290 [ 291.653640][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 291.653670][ C1] kasan_report+0x118/0x150 [ 291.653692][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 291.653720][ C1] rose_timer_expiry+0x471/0x4b0 [ 291.653746][ C1] call_timer_fn+0x17b/0x5f0 [ 291.653767][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 291.653790][ C1] ? call_timer_fn+0xbe/0x5f0 [ 291.653811][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 291.653837][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 291.653853][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 291.653871][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 291.653896][ C1] __run_timer_base+0x61a/0x860 [ 291.653914][ C1] ? ktime_get+0x3e/0x1f0 [ 291.653936][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 291.653963][ C1] run_timer_softirq+0xb7/0x180 [ 291.653984][ C1] handle_softirqs+0x283/0x870 [ 291.654011][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 291.654027][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 291.654057][ C1] __irq_exit_rcu+0xca/0x1f0 [ 291.654071][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 291.654090][ C1] irq_exit_rcu+0x9/0x30 [ 291.654103][ C1] sysvec_apic_timer_interrupt+0x57/0xc0 [ 291.654121][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 291.654138][ C1] RIP: 0033:0x7f49d5467d94 [ 291.654160][ C1] Code: 84 00 00 00 00 00 48 8b 4b 08 48 83 c3 08 48 39 d1 72 f3 48 83 e8 08 48 39 f2 73 17 66 2e 0f 1f 84 00 00 00 00 00 48 8b 70 f8 <48> 83 e8 08 48 39 f2 72 f3 48 39 c3 73 3e 48 89 33 48 83 c3 08 48 [ 291.654174][ C1] RSP: 002b:00007ffe293911b0 EFLAGS: 00000283 [ 291.654194][ C1] RAX: 00007f49d4c9f9e8 RBX: 00007f49d4c9a820 RCX: ffffffff895c8238 [ 291.654206][ C1] RDX: ffffffff894666e1 RSI: ffffffff8947262d RDI: 00007f49d4cb75c8 [ 291.654218][ C1] RBP: 00007f49d4c80f38 R08: 00007f49d4c9c278 R09: 00007f49d57a2000 [ 291.654229][ C1] R10: 00007f49d4bff008 R11: 0000000000000001 R12: 00007f49d4c80f30 [ 291.654240][ C1] R13: 000000000000001d R14: 00007ffe29391338 R15: 00007f49d4bff008 [ 291.654255][ C1] ? netdev_debug_event+0x518/0x620 [ 291.654274][ C1] ? validate_linkmsg+0x441/0x950 [ 291.654297][ C1] ? rtnl_fill_link_af+0x2cd/0x440 [ 291.654314][ C1] [ 291.654320][ C1] [ 291.932535][ C1] Allocated by task 5960: [ 291.937212][ C1] kasan_save_track+0x3e/0x80 [ 291.941900][ C1] __kasan_kmalloc+0x93/0xb0 [ 291.946584][ C1] __kmalloc_cache_noprof+0x230/0x3d0 [ 291.951966][ C1] rose_add_node+0x23a/0xde0 [ 291.956567][ C1] rose_rt_ioctl+0xa48/0xfb0 [ 291.961165][ C1] rose_ioctl+0x3ce/0x8b0 [ 291.965507][ C1] sock_do_ioctl+0xd9/0x300 [ 291.970027][ C1] sock_ioctl+0x576/0x790 [ 291.974400][ C1] __se_sys_ioctl+0xf9/0x170 [ 291.979006][ C1] do_syscall_64+0xf6/0x210 [ 291.983561][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.989502][ C1] [ 291.991836][ C1] Freed by task 7178: [ 291.995818][ C1] kasan_save_track+0x3e/0x80 [ 292.000521][ C1] kasan_save_free_info+0x46/0x50 [ 292.005791][ C1] __kasan_slab_free+0x62/0x70 [ 292.010574][ C1] kfree+0x193/0x440 [ 292.014490][ C1] rose_rt_device_down+0x66d/0x6c0 [ 292.019703][ C1] rose_device_event+0x603/0x6a0 [ 292.024655][ C1] notifier_call_chain+0x1b3/0x3e0 [ 292.029858][ C1] __dev_notify_flags+0x18d/0x2e0 [ 292.034889][ C1] netif_change_flags+0xe8/0x1a0 [ 292.039839][ C1] dev_change_flags+0x130/0x260 [ 292.044697][ C1] dev_ioctl+0x7b4/0x1150 [ 292.049048][ C1] sock_do_ioctl+0x22c/0x300 [ 292.053678][ C1] sock_ioctl+0x576/0x790 [ 292.058037][ C1] __se_sys_ioctl+0xf9/0x170 [ 292.062645][ C1] do_syscall_64+0xf6/0x210 [ 292.067168][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.073070][ C1] [ 292.075400][ C1] The buggy address belongs to the object at ffff888145708000 [ 292.075400][ C1] which belongs to the cache kmalloc-512 of size 512 [ 292.089474][ C1] The buggy address is located 42 bytes inside of [ 292.089474][ C1] freed 512-byte region [ffff888145708000, ffff888145708200) [ 292.103217][ C1] [ 292.105548][ C1] The buggy address belongs to the physical page: [ 292.111978][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888145708000 pfn:0x145708 [ 292.122157][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 292.130751][ C1] flags: 0x57ff00000000240(workingset|head|node=1|zone=2|lastcpupid=0x7ff) [ 292.139357][ C1] page_type: f5(slab) [ 292.143375][ C1] raw: 057ff00000000240 ffff88801a041c80 ffffea000515c410 ffffea000514fc10 [ 292.151964][ C1] raw: ffff888145708000 000000000010000b 00000000f5000000 0000000000000000 [ 292.160554][ C1] head: 057ff00000000240 ffff88801a041c80 ffffea000515c410 ffffea000514fc10 [ 292.169247][ C1] head: ffff888145708000 000000000010000b 00000000f5000000 0000000000000000 [ 292.177925][ C1] head: 057ff00000000002 ffffea000515c201 00000000ffffffff 00000000ffffffff [ 292.186600][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 292.195531][ C1] page dumped because: kasan: bad access detected [ 292.201956][ C1] page_owner tracks the page as allocated [ 292.207678][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2000(__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 15315029030, free_ts 15106854067 [ 292.226703][ C1] post_alloc_hook+0x1d8/0x230 [ 292.231478][ C1] get_page_from_freelist+0x21ce/0x22b0 [ 292.237068][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 292.242887][ C1] alloc_pages_mpol+0x232/0x4a0 [ 292.247747][ C1] allocate_slab+0x8a/0x3b0 [ 292.252254][ C1] ___slab_alloc+0xbfc/0x1480 [ 292.256936][ C1] __kmalloc_cache_noprof+0x296/0x3d0 [ 292.262839][ C1] usb_cache_string+0x66/0x130 [ 292.267624][ C1] usb_new_device+0x2fe/0x16c0 [ 292.272403][ C1] register_root_hub+0x275/0x590 [ 292.277357][ C1] usb_add_hcd+0xba1/0x1050 [ 292.281862][ C1] vhci_hcd_probe+0x144/0x380 [ 292.286540][ C1] platform_probe+0x145/0x1d0 [ 292.291223][ C1] really_probe+0x26a/0x9a0 [ 292.295732][ C1] __driver_probe_device+0x18c/0x2f0 [ 292.301026][ C1] driver_probe_device+0x4f/0x430 [ 292.306076][ C1] page last free pid 1 tgid 1 stack trace: [ 292.311901][ C1] __free_frozen_pages+0xb0e/0xcd0 [ 292.317039][ C1] stack_depot_save_flags+0x447/0x910 [ 292.322508][ C1] kasan_save_track+0x4f/0x80 [ 292.327216][ C1] __kasan_slab_alloc+0x6c/0x80 [ 292.332090][ C1] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 292.337595][ C1] __kernfs_new_node+0xd7/0x7f0 [ 292.342577][ C1] kernfs_new_node+0x102/0x210 [ 292.347395][ C1] __kernfs_create_file+0x4b/0x2e0 [ 292.352530][ C1] sysfs_add_file_mode_ns+0x238/0x300 [ 292.357926][ C1] sysfs_create_file_ns+0x128/0x1a0 [ 292.363143][ C1] device_add+0x440/0xb50 [ 292.367487][ C1] usb_create_ep_devs+0x12c/0x230 [ 292.372521][ C1] usb_set_configuration+0x1bc7/0x20e0 [ 292.378009][ C1] usb_generic_driver_probe+0x8d/0x150 [ 292.383563][ C1] usb_probe_device+0x1c1/0x390 [ 292.388436][ C1] really_probe+0x26a/0x9a0 [ 292.392956][ C1] [ 292.395302][ C1] Memory state around the buggy address: [ 292.400936][ C1] ffff888145707f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 292.409043][ C1] ffff888145707f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 292.417172][ C1] >ffff888145708000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 292.425244][ C1] ^ [ 292.430639][ C1] ffff888145708080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 292.438711][ C1] ffff888145708100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 292.446780][ C1] ================================================================== [ 292.454987][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 292.462221][ C1] CPU: 1 UID: 0 PID: 12915 Comm: syz.3.2634 Not tainted 6.15.0-rc5-syzkaller-00126-gea9a83d7f371 #0 PREEMPT(full) [ 292.474324][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 292.484429][ C1] Call Trace: [ 292.487814][ C1] [ 292.490791][ C1] dump_stack_lvl+0x99/0x250 [ 292.495407][ C1] ? __asan_memcpy+0x40/0x70 [ 292.500038][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 292.505269][ C1] ? __pfx__printk+0x10/0x10 [ 292.509904][ C1] panic+0x2db/0x790 [ 292.513840][ C1] ? __pfx_panic+0x10/0x10 [ 292.518279][ C1] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 292.524179][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 292.530184][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 292.536519][ C1] ? print_memory_metadata+0x314/0x400 [ 292.541991][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 292.547117][ C1] check_panic_on_warn+0x89/0xb0 [ 292.552067][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 292.557208][ C1] end_report+0x78/0x160 [ 292.561478][ C1] kasan_report+0x129/0x150 [ 292.566089][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 292.571221][ C1] rose_timer_expiry+0x471/0x4b0 [ 292.576196][ C1] call_timer_fn+0x17b/0x5f0 [ 292.580814][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 292.586292][ C1] ? call_timer_fn+0xbe/0x5f0 [ 292.590986][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 292.596117][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 292.601327][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 292.606564][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 292.612037][ C1] __run_timer_base+0x61a/0x860 [ 292.616901][ C1] ? ktime_get+0x3e/0x1f0 [ 292.621250][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 292.626651][ C1] run_timer_softirq+0xb7/0x180 [ 292.631511][ C1] handle_softirqs+0x283/0x870 [ 292.636304][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 292.641099][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 292.646425][ C1] __irq_exit_rcu+0xca/0x1f0 [ 292.651031][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 292.656240][ C1] irq_exit_rcu+0x9/0x30 [ 292.660489][ C1] sysvec_apic_timer_interrupt+0x57/0xc0 [ 292.666136][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 292.672126][ C1] RIP: 0033:0x7f49d5467d94 [ 292.676561][ C1] Code: 84 00 00 00 00 00 48 8b 4b 08 48 83 c3 08 48 39 d1 72 f3 48 83 e8 08 48 39 f2 73 17 66 2e 0f 1f 84 00 00 00 00 00 48 8b 70 f8 <48> 83 e8 08 48 39 f2 72 f3 48 39 c3 73 3e 48 89 33 48 83 c3 08 48 [ 292.696190][ C1] RSP: 002b:00007ffe293911b0 EFLAGS: 00000283 [ 292.702276][ C1] RAX: 00007f49d4c9f9e8 RBX: 00007f49d4c9a820 RCX: ffffffff895c8238 [ 292.710258][ C1] RDX: ffffffff894666e1 RSI: ffffffff8947262d RDI: 00007f49d4cb75c8 [ 292.718242][ C1] RBP: 00007f49d4c80f38 R08: 00007f49d4c9c278 R09: 00007f49d57a2000 [ 292.726222][ C1] R10: 00007f49d4bff008 R11: 0000000000000001 R12: 00007f49d4c80f30 [ 292.734199][ C1] R13: 000000000000001d R14: 00007ffe29391338 R15: 00007f49d4bff008 [ 292.742249][ C1] ? netdev_debug_event+0x518/0x620 [ 292.747461][ C1] ? validate_linkmsg+0x441/0x950 [ 292.752498][ C1] ? rtnl_fill_link_af+0x2cd/0x440 [ 292.757704][ C1] [ 292.761050][ C1] Kernel Offset: disabled [ 292.765428][ C1] Rebooting in 86400 seconds..