last executing test programs: 1m14.354899343s ago: executing program 3 (id=460): socket$inet6_sctp(0xa, 0x0, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000006500)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000065c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000006600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000006780)={0x0, 0x0, &(0x7f0000006740)={&(0x7f00000001c0)={0x30, r2, 0x1, 0x0, 0x0, {{0x9, 0x0, 0xfff0}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_MAC={0xa}]}, 0x30}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 57.596862489s ago: executing program 3 (id=460): socket$inet6_sctp(0xa, 0x0, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000006500)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000065c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000006600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000006780)={0x0, 0x0, &(0x7f0000006740)={&(0x7f00000001c0)={0x30, r2, 0x1, 0x0, 0x0, {{0x9, 0x0, 0xfff0}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_MAC={0xa}]}, 0x30}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 44.188525453s ago: executing program 3 (id=460): socket$inet6_sctp(0xa, 0x0, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000006500)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000065c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000006600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000006780)={0x0, 0x0, &(0x7f0000006740)={&(0x7f00000001c0)={0x30, r2, 0x1, 0x0, 0x0, {{0x9, 0x0, 0xfff0}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_MAC={0xa}]}, 0x30}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 29.745201515s ago: executing program 3 (id=460): socket$inet6_sctp(0xa, 0x0, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000006500)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000065c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000006600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000006780)={0x0, 0x0, &(0x7f0000006740)={&(0x7f00000001c0)={0x30, r2, 0x1, 0x0, 0x0, {{0x9, 0x0, 0xfff0}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_MAC={0xa}]}, 0x30}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 15.960432598s ago: executing program 3 (id=460): socket$inet6_sctp(0xa, 0x0, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000006500)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000065c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000006600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000006780)={0x0, 0x0, &(0x7f0000006740)={&(0x7f00000001c0)={0x30, r2, 0x1, 0x0, 0x0, {{0x9, 0x0, 0xfff0}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_MAC={0xa}]}, 0x30}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3.533374984s ago: executing program 2 (id=1522): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x7a, {0x0, 0x0, 0x0, 0x0, 0x14711}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) 3.493574673s ago: executing program 3 (id=460): socket$inet6_sctp(0xa, 0x0, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000006500)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000065c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000006600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000006780)={0x0, 0x0, &(0x7f0000006740)={&(0x7f00000001c0)={0x30, r2, 0x1, 0x0, 0x0, {{0x9, 0x0, 0xfff0}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_MAC={0xa}]}, 0x30}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.592177416s ago: executing program 2 (id=1525): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@can_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) 2.394508487s ago: executing program 2 (id=1527): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f00000000c0)=0x10000) connect$inet(r1, &(0x7f0000001fc0)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0xc, 'veth0_to_team\x00'}) socket$inet_smc(0x2b, 0x1, 0x0) (async) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x18, 0x0, 0x17) write$binfmt_script(r0, &(0x7f0000000180), 0x4) (async) write$binfmt_script(r0, &(0x7f0000000180), 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x7, 0x5}, 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0x20, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6192}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x83}, @jmp={0x5, 0x1, 0x9, 0x5, 0x1, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001540)='GPL\x00', 0x8}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0x20, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6192}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x83}, @jmp={0x5, 0x1, 0x9, 0x5, 0x1, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001540)='GPL\x00', 0x8}, 0x90) 2.228842002s ago: executing program 2 (id=1529): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r1, 0x0, 0x0, 0x20010004, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff0100000000000000000000000000011400040009"], 0xe4}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000005c0)={0xfffffffc, 0x0, 0x0, 0x8}, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="74000000000901010000000000000000030000000c0004800800014000000001090001007300003100000000240002001400018008000100ac1e000108000200e00000010c000280050001002f000000080003400000000808000640000000011400020006000340000000000600034000000000"], 0x74}, 0x1, 0x0, 0x0, 0x804}, 0x4008090) r3 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e23, @broadcast}}, 0x5}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="050071116000000000009500a505000000002482f0d332128bef481af78aefe81cb1ab2d"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x30, 0xffffffffffffffff, 0x6}, 0x90) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETLINK(r4, 0x400454cd, 0x339) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'pim6reg\x00', 0x20}) ioctl$SIOCGSKNS(r4, 0x894c, &(0x7f00000000c0)={'veth1_to_hsr\x00', 0x400}) socketpair(0x1f, 0x4, 0x8, &(0x7f0000000100)={0xffffffffffffffff}) bind$bt_hci(r5, &(0x7f0000000180)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(r4, &(0x7f00000001c0)="986b7ea28f25dbab1986c11110f1ac6e5c6312041d8c5adc4bb69ddce7fa71d78cf7305a908055f29c34ba3c3967297097", 0x31) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000480)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="2e003300d000000008021100000108021100000050505050"], 0x4c}, 0x1, 0x0, 0x0, 0x48010}, 0x0) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="0100000000000200000004000000"], 0x14}, 0x1, 0xfcffffff00000000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000680)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc4}, [@cb_func={0x18, 0x8, 0x4, 0x0, 0x3}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9}, 0x90) 1.432046745s ago: executing program 0 (id=1539): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000100711219000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2000000}, 0x90) 1.309238023s ago: executing program 4 (id=1541): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000880)={'filter\x00', 0xb001, 0x4, 0x3c8, 0xe8, 0x0, 0xd000000, 0x1f8, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @loopback, @local}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 1.274798133s ago: executing program 0 (id=1542): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000050c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540100001900010000000000000000001d01000008000e00", @ANYRES32, @ANYBLOB="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"], 0x154}}, 0xf00000000000000) 1.264554952s ago: executing program 4 (id=1543): socket$unix(0x1, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@getnexthop={0x18, 0x76, 0x401}, 0x18}}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="54010000100033060000000000000000ac1e0001000000000000000003000000ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000320000002001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000400000000000000000048000200656362286369706865725f6e756c6c2900"/215], 0x154}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_SEED={0x8, 0x6}, @NFTA_HASH_SREG={0x8}, @NFTA_HASH_MODULUS={0x8}, @NFTA_HASH_LEN={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000c50000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x0, 0x16, 0xb3}, 0x48) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000001e00851000000600000018000000", @ANYRES32=r6, @ANYBLOB="0000000000000000660a000000000000180000000000000000000000000000109500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) r8 = accept4(r5, 0x0, 0x0, 0x0) recvfrom(r8, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x0, 0x0, 0xffffffffffffff54) setsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e21, 0x8, 0x4e21, 0x2, 0x0, 0xa0, 0x80, 0x6, r4}, {0x5, 0x6f, 0xfffffffeffffffff, 0x9, 0x6, 0x0, 0x25ea, 0x3a47}, {0x0, 0x8, 0x676, 0x3}, 0x7ff, 0x6e6bb8, 0x0, 0x1, 0x2}, {{@in=@empty, 0x4d2, 0xff}, 0x2, @in6=@mcast1, 0x3504, 0x1, 0x2, 0x6, 0x8, 0xd9d}}, 0xe8) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) 781.15312ms ago: executing program 2 (id=1544): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r1, &(0x7f0000000340)="b0fc46a40a760400c2ab339b1230a375cd25632fb94e28078275d309551906ab8a0fc403cd2de30d0cffd373fadbe2", 0x2f, 0x4040810, &(0x7f00000004c0)={0xa, 0x0, 0x9, @empty, 0x5, 0x3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x1, 0x9, 0xae}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x85, r3}, 0x48) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000002c0)={@multicast1, @broadcast, 0x0}, &(0x7f0000000300)=0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000180)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) socket(0x1d, 0x2, 0x6) socket$pppoe(0x18, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMKSA(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001080)={0x3c, r8, 0x90d, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "dde186e463f3d8ce2748b3280b6243eb"}, @NL80211_ATTR_MAC={0xa}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x88000}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r11, 0x8982, &(0x7f0000000040)={0x6, 'veth0_to_team\x00', {0x40}}) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r13, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)={0x28, r14, 0x301, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6}]}]}, 0x28}}, 0x0) ioctl$FS_IOC_RESVSP(r12, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x3, 0x3}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r11, 0x8983, &(0x7f0000000000)={0x0, 'bridge_slave_1\x00', {0xfffffffe}}) 779.824731ms ago: executing program 0 (id=1545): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0040640000cc000800050006000000140004"], 0x58}}, 0x0) 779.426311ms ago: executing program 4 (id=1546): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x2, 0x4e1d, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x24, 0x12, 0x7, {[@lsrr={0x83, 0x7, 0x4, [@remote]}, @rr={0x7, 0xb, 0x8, [@multicast1, @private]}]}}}], 0x28}, 0x0) 683.219013ms ago: executing program 4 (id=1547): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc601}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc87300fe8000000000000000000000000000aaff020020000000000000000000000001"], 0xffe) 623.53208ms ago: executing program 1 (id=1548): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103}, [@printk={@p, {}, {0x7, 0x1, 0xb, 0x1, 0xa, 0x7a00}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 509.316001ms ago: executing program 0 (id=1549): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x400000}}, 0xb8}}, 0x0) socket$packet(0x11, 0x2, 0x300) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000e0000001000000000000000000000000e000000100000000f00000000000007d791eaa159e5d8b000200000000000000", @ANYRES32=0x0, @ANYBLOB], 0xb8}}, 0x0) 509.027512ms ago: executing program 1 (id=1550): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)={0x3c, r1, 0x1, 0x30000, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x3c}}, 0x0) 477.82882ms ago: executing program 1 (id=1551): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000390009000000000000004410010000000400008010000180c9b6c6a3302f435477018d00080002"], 0x30}}, 0x0) 433.348945ms ago: executing program 0 (id=1552): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x5}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x1a}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) unshare(0x20000400) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map=r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfecc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a40000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@cgroup, r0, 0x24, 0x0, 0xffffffffffffffff, @link_id}, 0x20) 325.444714ms ago: executing program 2 (id=1553): socket$inet6_sctp(0xa, 0x0, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000001b40)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000002000010000000000000000000a000000000000001a000000080017004e224e23961c3b53db15632fd464a1a89ec6424d0d"], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c0002801400030020fd000000000000000000000000000114000200fc"], 0x5c}}, 0x0) 324.711692ms ago: executing program 1 (id=1554): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, 0x0, 0x26}, 0x20) (async, rerun: 64) r3 = socket$inet(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) (async, rerun: 64) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) (rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r6 = socket(0x1, 0x803, 0x0) (rerun: 32) write$binfmt_elf64(r6, &(0x7f0000000c00)={{0x7f, 0x45, 0x4c, 0x46, 0xf, 0x3b, 0xb, 0xd, 0x488, 0x2, 0x3, 0x6, 0x157, 0x40, 0x108, 0x95, 0x9, 0x38, 0x1, 0x8, 0xbd4f, 0x2}, [{0x2, 0x8001, 0xffffffffffffff7f, 0x9, 0x8001, 0x8, 0x96dc, 0x7}], "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", ['\x00']}, 0x1178) (async) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x4000) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x6, &(0x7f0000000bc0)=@framed={{}, [@exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x2, &(0x7f0000000940), 0x10}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 275.562753ms ago: executing program 0 (id=1555): socket$inet6(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000180)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private1, [@hopopts={0x3a}, @routing]}}}}}}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000040000", 0x39}], 0x1) 184.615951ms ago: executing program 4 (id=1556): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x48, 0x32, 0xffff, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x0, 0x0, 0x0, {{0xb, 0x2}, {0x4}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x48}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d300000000000000800050001040f0f080003000000080008000f00f7ffffff08000600040000000b00110009000000080002"], 0x5c}}, 0x0) 141.469665ms ago: executing program 1 (id=1557): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="540100001a001307000000000000001cac1414000000000000000000001400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x154}}, 0x0) 53.767824ms ago: executing program 4 (id=1558): r0 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)="90", 0x1}, {0x0, 0x2e}], 0x2}, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r2, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffff001}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x24}}, 0x40000) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) connect$pppl2tp(r3, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x1, 0x3}}, 0x26) getsockopt$bt_BT_SECURITY(r3, 0x111, 0x2, 0x0, 0x20000000) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x20048004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) sendmmsg(r6, &(0x7f0000009440)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000540)="85", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000480)="e5", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000c00)='T', 0x1}], 0x1}}], 0x3, 0x0) write$binfmt_script(r6, &(0x7f00000023c0)={'#! ', './file0'}, 0xfffffdef) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(0xffffffffffffffff, &(0x7f0000001a80)={0x1f, @fixed}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES16], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2}, 0x90) unshare(0x20000400) 0s ago: executing program 1 (id=1559): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x600}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}, @IFLA_MTU={0x8, 0x4, 0x1000}]}, 0x40}}, 0x0) kernel console output (not intermixed with test programs): lem. [ 103.543247][ T6583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.621618][ T6577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.641285][ T6577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.710016][ T6577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.728380][ T6767] nft_compat: unsupported protocol 0 [ 103.740624][ T6583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.748481][ T6583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.777862][ T6583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.812055][ T6594] team0: Port device team_slave_0 added [ 103.821931][ T6594] team0: Port device team_slave_1 added [ 103.875194][ T6771] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 103.907902][ T6774] netlink: 'syz.4.499': attribute type 1 has an invalid length. [ 103.925344][ T6774] netlink: 'syz.4.499': attribute type 2 has an invalid length. [ 103.933491][ T6774] netlink: 'syz.4.499': attribute type 1 has an invalid length. [ 103.964909][ T6775] netlink: 'syz.4.499': attribute type 1 has an invalid length. [ 103.991826][ T6775] netlink: 'syz.4.499': attribute type 2 has an invalid length. [ 104.000856][ T6775] netlink: 'syz.4.499': attribute type 1 has an invalid length. [ 104.011162][ T6594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.026705][ T6777] xt_CT: You must specify a L4 protocol and not use inversions on it [ 104.042765][ T6594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.079841][ T6594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.142117][ T6594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.155063][ T6594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.190830][ T6594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.254190][ T5096] Bluetooth: hci0: command tx timeout [ 104.356470][ T6577] hsr_slave_0: entered promiscuous mode [ 104.362799][ T6577] hsr_slave_1: entered promiscuous mode [ 104.370830][ T6577] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.379456][ T6577] Cannot create hsr debugfs directory [ 104.391631][ T6583] hsr_slave_0: entered promiscuous mode [ 104.398554][ T6583] hsr_slave_1: entered promiscuous mode [ 104.404966][ T5096] Bluetooth: hci2: command tx timeout [ 104.411457][ T6583] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.419238][ T6583] Cannot create hsr debugfs directory [ 104.440488][ T6785] netlink: 'syz.4.504': attribute type 4 has an invalid length. [ 104.451553][ T6594] hsr_slave_0: entered promiscuous mode [ 104.461142][ T6594] hsr_slave_1: entered promiscuous mode [ 104.467410][ T6594] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.476154][ T6594] Cannot create hsr debugfs directory [ 104.510498][ T6787] netlink: 'syz.4.504': attribute type 4 has an invalid length. [ 104.993928][ T2821] bridge_slave_1: left allmulticast mode [ 105.016168][ T2821] bridge_slave_1: left promiscuous mode [ 105.022113][ T2821] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.067499][ T2821] bridge_slave_0: left allmulticast mode [ 105.073189][ T2821] bridge_slave_0: left promiscuous mode [ 105.083408][ T2821] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.096278][ T2821] bridge_slave_1: left allmulticast mode [ 105.101964][ T2821] bridge_slave_1: left promiscuous mode [ 105.119960][ T2821] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.147036][ T2821] bridge_slave_0: left allmulticast mode [ 105.152741][ T2821] bridge_slave_0: left promiscuous mode [ 105.166719][ T2821] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.204369][ T5096] Bluetooth: hci4: command tx timeout [ 105.732996][ T2821] bond0 (unregistering): left allmulticast mode [ 105.740005][ T2821] bond_slave_0: left allmulticast mode [ 105.745667][ T2821] bond_slave_1: left allmulticast mode [ 105.751183][ T2821] bond0 (unregistering): left promiscuous mode [ 105.757554][ T2821] bond_slave_0: left promiscuous mode [ 105.763211][ T2821] bond_slave_1: left promiscuous mode [ 105.787920][ T2821] team0: Port device macvlan2 removed [ 105.807213][ T2821] team0: Port device macvlan3 removed [ 105.822401][ T2821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.833680][ T2821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.844824][ T2821] bond0 (unregistering): Released all slaves [ 105.928212][ T2821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.942322][ T2821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.953204][ T2821] bond0 (unregistering): Released all slaves [ 106.171200][ T2821] tipc: Left network mode [ 106.292829][ T6824] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 106.326052][ T5096] Bluetooth: hci0: command tx timeout [ 106.443742][ T6833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.455475][ T6835] __nla_validate_parse: 8 callbacks suppressed [ 106.455492][ T6835] netlink: 4 bytes leftover after parsing attributes in process `syz.4.515'. [ 106.484474][ T5096] Bluetooth: hci2: command tx timeout [ 106.787503][ T2821] hsr_slave_0: left promiscuous mode [ 106.805218][ T2821] hsr_slave_1: left promiscuous mode [ 106.827113][ T2821] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.834984][ T2821] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.844500][ T2821] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.852054][ T2821] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.863218][ T2821] hsr_slave_0: left promiscuous mode [ 106.871342][ T2821] hsr_slave_1: left promiscuous mode [ 106.878118][ T2821] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.886078][ T2821] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.893809][ T2821] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.924437][ T2821] veth1_macvtap: left promiscuous mode [ 106.929969][ T2821] veth0_macvtap: left promiscuous mode [ 106.935981][ T2821] veth1_vlan: left promiscuous mode [ 106.942267][ T2821] veth0_vlan: left promiscuous mode [ 106.949940][ T2821] veth1_macvtap: left promiscuous mode [ 106.955659][ T2821] veth0_macvtap: left promiscuous mode [ 106.961266][ T2821] veth1_vlan: left promiscuous mode [ 106.967880][ T2821] veth0_vlan: left promiscuous mode [ 107.284256][ T5096] Bluetooth: hci4: command tx timeout [ 107.447779][ T2821] team0 (unregistering): Port device team_slave_1 removed [ 107.482371][ T2821] team0 (unregistering): Port device team_slave_0 removed [ 108.070702][ T2821] team0 (unregistering): Port device team_slave_1 removed [ 108.101740][ T2821] team0 (unregistering): Port device team_slave_0 removed [ 108.393124][ T6849] netlink: 'syz.4.518': attribute type 4 has an invalid length. [ 108.403704][ T6849] netlink: 17 bytes leftover after parsing attributes in process `syz.4.518'. [ 108.696426][ T6594] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 108.770963][ T6583] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.816793][ T6594] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 108.844704][ T6594] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 108.927510][ T6583] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.958229][ T6594] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 108.968563][ T6834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.073708][ T6583] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.246329][ T6583] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.283066][ T6873] netlink: 5300 bytes leftover after parsing attributes in process `syz.2.522'. [ 109.302826][ T6873] openvswitch: netlink: IP tunnel dst address not specified [ 109.428820][ T6594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.508065][ T6594] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.543052][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.550270][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.602591][ T6885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.525'. [ 109.661638][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.668805][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.694540][ T6888] netlink: 24 bytes leftover after parsing attributes in process `syz.4.524'. [ 109.765872][ T6583] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 109.890452][ T6583] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 109.913557][ T6583] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 109.937819][ T6583] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 110.371543][ T6583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.509136][ T6583] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.569173][ T5187] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.576380][ T5187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.593929][ T6577] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 110.625503][ T6577] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 110.691875][ T6594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.729071][ T5173] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.736267][ T5173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.755910][ T6577] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 110.768279][ T6577] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 110.825374][ T6914] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 110.912492][ T6921] Cannot find add_set index 0 as target [ 111.217321][ T6931] netlink: 728 bytes leftover after parsing attributes in process `syz.4.535'. [ 111.261924][ T6594] veth0_vlan: entered promiscuous mode [ 111.296006][ T6931] netem: unknown loss type 0 [ 111.300945][ T6931] netem: change failed [ 111.337512][ T6931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.535'. [ 111.404444][ T6931] netlink: 180 bytes leftover after parsing attributes in process `syz.4.535'. [ 111.407703][ T6594] veth1_vlan: entered promiscuous mode [ 111.423441][ T6931] netlink: 2776 bytes leftover after parsing attributes in process `syz.4.535'. [ 111.538354][ T6577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.596774][ T6583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.640535][ T6594] veth0_macvtap: entered promiscuous mode [ 111.691853][ T6577] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.713054][ T6594] veth1_macvtap: entered promiscuous mode [ 111.762189][ T5136] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.769527][ T5136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.831516][ T5136] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.838742][ T5136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.910655][ T6958] netlink: 'syz.2.539': attribute type 4 has an invalid length. [ 112.083583][ T6970] netlink: 104 bytes leftover after parsing attributes in process `syz.2.541'. [ 112.098162][ T6594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.111662][ T6594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.132726][ T6594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.151828][ T6594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.176016][ T6594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.199074][ T6594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.213999][ T6594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.309957][ T6583] veth0_vlan: entered promiscuous mode [ 112.329098][ T6594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.340822][ T6594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.351148][ T6594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.361953][ T6594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.373231][ T6594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.384012][ T6594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.397996][ T6594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.417629][ T6594] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.431413][ T6594] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.440464][ T6594] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.449600][ T6594] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.532281][ T6583] veth1_vlan: entered promiscuous mode [ 112.535169][ T6985] sctp: [Deprecated]: syz.4.543 (pid 6985) Use of struct sctp_assoc_value in delayed_ack socket option. [ 112.535169][ T6985] Use struct sctp_sack_info instead [ 112.790506][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.791386][ T6583] veth0_macvtap: entered promiscuous mode [ 112.832917][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.867361][ T6583] veth1_macvtap: entered promiscuous mode [ 112.872400][ T6993] netlink: 728 bytes leftover after parsing attributes in process `syz.4.545'. [ 112.903008][ T6993] netem: unknown loss type 0 [ 112.917130][ T6993] netem: change failed [ 112.922843][ T6993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.545'. [ 112.949741][ T6993] netlink: 180 bytes leftover after parsing attributes in process `syz.4.545'. [ 112.978427][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.007466][ T6583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.020402][ T6993] netlink: 2776 bytes leftover after parsing attributes in process `syz.4.545'. [ 113.030908][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.050287][ T6583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.078939][ T6583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.106066][ T6583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.122874][ T6583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.144069][ T6583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.153930][ T6583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.171710][ T6583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.210646][ T6583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.222128][ T6583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.234531][ T6583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.258462][ T6583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.275465][ T6583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.294111][ T6583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.314657][ T6583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.325006][ T6583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.335769][ T6583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.347879][ T6583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.474286][ T6583] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.487240][ T6583] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.492988][ T7015] netlink: 202680 bytes leftover after parsing attributes in process `syz.4.549'. [ 113.519710][ T6583] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.534237][ T6583] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.597057][ T6577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.850342][ T6577] veth0_vlan: entered promiscuous mode [ 113.892462][ T6577] veth1_vlan: entered promiscuous mode [ 114.002410][ T6577] veth0_macvtap: entered promiscuous mode [ 114.031191][ T6577] veth1_macvtap: entered promiscuous mode [ 114.071596][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.121100][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.258598][ T7044] netlink: 'syz.4.555': attribute type 3 has an invalid length. [ 114.330578][ T2821] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.376472][ T130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.417469][ T6577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.428700][ T130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.449543][ T6577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.474443][ T6577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.503006][ T6577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.524627][ T6577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.548682][ T6577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.569874][ T6577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.591734][ T6577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.613188][ T6577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.639615][ T6577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.665442][ T6577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.722732][ T2821] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.810773][ T6577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.845278][ T6577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.878556][ T6577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.901939][ T6577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.920887][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 114.922944][ T6577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.949100][ T6577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.955077][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 114.965496][ T6577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.986663][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 114.986685][ T6577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.986700][ T6577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.022780][ T6577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.022815][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 115.064538][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 115.072142][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 115.138576][ T6577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.262474][ T2821] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.319511][ T6577] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.370802][ T6577] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.388226][ T6577] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.413350][ T6577] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.506708][ T2821] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.225212][ T2821] bridge_slave_1: left allmulticast mode [ 116.238225][ T2821] bridge_slave_1: left promiscuous mode [ 116.244087][ T2821] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.246219][ T7120] openvswitch: netlink: Flow actions attr not present in new flow. [ 116.286412][ T2821] bridge_slave_0: left allmulticast mode [ 116.294177][ T2821] bridge_slave_0: left promiscuous mode [ 116.305935][ T2821] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.439130][ T7124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.572'. [ 116.781962][ T2821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.798907][ T2821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.822296][ T2821] bond0 (unregistering): Released all slaves [ 116.997155][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.036345][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.124226][ T53] Bluetooth: hci4: command tx timeout [ 117.264418][ T7154] dummy0: entered promiscuous mode [ 117.286883][ T7154] dummy0: left promiscuous mode [ 117.363219][ T7162] SET target dimension over the limit! [ 117.464745][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.472615][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.709817][ T7061] chnl_net:caif_netlink_parms(): no params data found [ 117.914684][ T2821] hsr_slave_0: left promiscuous mode [ 117.941137][ T2821] hsr_slave_1: left promiscuous mode [ 117.957066][ T7181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.583'. [ 117.984343][ T2821] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.013124][ T2821] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.034687][ T2821] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.042156][ T2821] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.102710][ T2821] veth1_macvtap: left promiscuous mode [ 118.111661][ T2821] veth0_macvtap: left promiscuous mode [ 118.123904][ T2821] veth1_vlan: left promiscuous mode [ 118.132202][ T2821] veth0_vlan: left promiscuous mode [ 118.767816][ T2821] team0 (unregistering): Port device team_slave_1 removed [ 118.803127][ T2821] team0 (unregistering): Port device team_slave_0 removed [ 119.158103][ T7198] netlink: 'syz.2.584': attribute type 4 has an invalid length. [ 119.215758][ T53] Bluetooth: hci4: command tx timeout [ 119.362167][ T7206] Driver unsupported XDP return value 0 on prog (id 106) dev N/A, expect packet loss! [ 119.375208][ T7061] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.383258][ T7061] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.406844][ T7061] bridge_slave_0: entered allmulticast mode [ 119.417194][ T7061] bridge_slave_0: entered promiscuous mode [ 119.428095][ T7061] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.448538][ T7061] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.457341][ T7061] bridge_slave_1: entered allmulticast mode [ 119.473127][ T7061] bridge_slave_1: entered promiscuous mode [ 119.516175][ T7203] netlink: 16 bytes leftover after parsing attributes in process `syz.4.586'. [ 119.554747][ T7203] netlink: 152 bytes leftover after parsing attributes in process `syz.4.586'. [ 119.671145][ T7061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.732746][ T7233] netlink: 'syz.1.591': attribute type 5 has an invalid length. [ 119.799836][ T7249] netlink: 5300 bytes leftover after parsing attributes in process `syz.2.592'. [ 119.833683][ T7061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.875119][ T7249] openvswitch: netlink: IP tunnel dst address not specified [ 120.100531][ T7256] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 120.203796][ T7061] team0: Port device team_slave_0 added [ 120.274589][ T7061] team0: Port device team_slave_1 added [ 120.299728][ T7274] netlink: 104 bytes leftover after parsing attributes in process `syz.1.597'. [ 120.478395][ T7277] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 120.529329][ T7061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.540581][ T7061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.588681][ T7287] netlink: 48 bytes leftover after parsing attributes in process `syz.4.601'. [ 120.602100][ T7061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.621322][ T7287] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.601'. [ 120.632694][ T7287] openvswitch: netlink: Geneve opt len 13 is not a multiple of 4. [ 120.643819][ T7280] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 120.651239][ T7290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.599'. [ 120.682321][ T7061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.713396][ T7061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.782169][ T7061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.020653][ T7061] hsr_slave_0: entered promiscuous mode [ 121.073645][ T7061] hsr_slave_1: entered promiscuous mode [ 121.103473][ T7309] netlink: 'syz.1.611': attribute type 11 has an invalid length. [ 121.114989][ T7061] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 121.128752][ T7309] netlink: 32 bytes leftover after parsing attributes in process `syz.1.611'. [ 121.150323][ T7061] Cannot create hsr debugfs directory [ 121.284356][ T53] Bluetooth: hci4: command tx timeout [ 122.329774][ T7361] netlink: 24 bytes leftover after parsing attributes in process `syz.1.622'. [ 122.392942][ T7061] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 122.472602][ T7061] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 122.543018][ T7061] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 122.591520][ T7061] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 122.991571][ T7396] netlink: 'syz.1.631': attribute type 1 has an invalid length. [ 123.066767][ T7061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.076134][ T7397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.627'. [ 123.297639][ T7061] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.365292][ T53] Bluetooth: hci4: command tx timeout [ 123.386026][ T5136] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.393207][ T5136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.430937][ T5136] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.438160][ T5136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.578798][ T7419] netlink: 168 bytes leftover after parsing attributes in process `syz.1.636'. [ 123.604686][ T7423] netlink: 104 bytes leftover after parsing attributes in process `syz.4.637'. [ 123.815908][ T7434] netlink: 16 bytes leftover after parsing attributes in process `syz.2.640'. [ 123.847928][ T7432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.641'. [ 123.869958][ T7432] syz_tun: entered promiscuous mode [ 123.913509][ T7432] macsec1: entered promiscuous mode [ 123.939371][ T7432] macsec1: entered allmulticast mode [ 123.982405][ T7432] syz_tun: entered allmulticast mode [ 124.112555][ T7448] netlink: 32 bytes leftover after parsing attributes in process `syz.2.644'. [ 124.371934][ T7061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.563626][ T7061] veth0_vlan: entered promiscuous mode [ 124.611413][ T7479] netlink: 24 bytes leftover after parsing attributes in process `syz.4.652'. [ 124.662185][ T7061] veth1_vlan: entered promiscuous mode [ 124.868699][ T7061] veth0_macvtap: entered promiscuous mode [ 124.908973][ T7061] veth1_macvtap: entered promiscuous mode [ 124.983149][ T7494] netlink: 48 bytes leftover after parsing attributes in process `syz.2.657'. [ 125.052117][ T7061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.077492][ T7061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.097107][ T7061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.127355][ T7061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.168781][ T7061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.187183][ T7061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.210053][ T7061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.226073][ T7061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.236418][ T7061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.247349][ T7061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.263817][ T7061] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.317091][ T7498] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 125.345290][ T7498] batman_adv: batadv0: Adding interface: ip6gretap1 [ 125.373949][ T7498] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.453298][ T7498] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 125.517675][ T7061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.583909][ T7061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.636618][ T7061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.681931][ T7061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.707259][ T7061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.718412][ T7061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.728881][ T7061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.739475][ T7061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.749594][ T7061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.761930][ T7061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.782036][ T7061] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.800946][ T7516] netlink: 20 bytes leftover after parsing attributes in process `syz.1.668'. [ 125.836176][ T7061] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.894199][ T7061] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.902949][ T7061] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.951784][ T7061] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.224998][ T7534] netlink: 56 bytes leftover after parsing attributes in process `syz.2.673'. [ 126.243737][ T2821] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.276953][ T2821] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.376594][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.396845][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.256159][ T7584] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 127.291499][ T7584] gretap1: entered promiscuous mode [ 127.306113][ T7584] gretap1: entered allmulticast mode [ 127.948245][ T7240] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.341975][ T7240] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.485223][ T7642] __nla_validate_parse: 4 callbacks suppressed [ 128.485241][ T7642] netlink: 5300 bytes leftover after parsing attributes in process `syz.1.709'. [ 128.508390][ T7642] openvswitch: netlink: IP tunnel dst address not specified [ 128.530280][ T7240] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.626444][ T5096] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 128.638859][ T5096] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 128.649821][ T5096] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 128.659239][ T5096] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 128.682684][ T7653] netlink: 104 bytes leftover after parsing attributes in process `syz.2.712'. [ 128.692646][ T5096] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 128.708654][ T5096] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 128.799939][ T7660] Cannot find add_set index 0 as target [ 128.801992][ T7240] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.855867][ T7665] netlink: 12 bytes leftover after parsing attributes in process `syz.1.711'. [ 128.983324][ T7673] netlink: 44 bytes leftover after parsing attributes in process `syz.2.716'. [ 129.022979][ T7673] netlink: 43 bytes leftover after parsing attributes in process `syz.2.716'. [ 129.087948][ T7673] netlink: 'syz.2.716': attribute type 5 has an invalid length. [ 129.112142][ T7673] netlink: 43 bytes leftover after parsing attributes in process `syz.2.716'. [ 129.208884][ T7676] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 129.293639][ T7679] netlink: 'syz.4.719': attribute type 44 has an invalid length. [ 129.343896][ T7687] netlink: 'syz.0.721': attribute type 16 has an invalid length. [ 129.357726][ T7684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.377283][ T7684] team0: Device bond0 failed to register rx_handler [ 129.383207][ T7687] netlink: 'syz.0.721': attribute type 3 has an invalid length. [ 129.394000][ T7687] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.721'. [ 129.414225][ T7688] netlink: 'syz.0.721': attribute type 16 has an invalid length. [ 129.438832][ T7688] netlink: 'syz.0.721': attribute type 3 has an invalid length. [ 129.452367][ T7688] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.721'. [ 129.475139][ T7240] bridge_slave_1: left allmulticast mode [ 129.491389][ T7240] bridge_slave_1: left promiscuous mode [ 129.504654][ T7240] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.552147][ T7240] bridge_slave_0: left allmulticast mode [ 129.560482][ T7240] bridge_slave_0: left promiscuous mode [ 129.567654][ T7240] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.651775][ T7701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.724'. [ 129.706554][ T7705] netlink: 'syz.0.726': attribute type 11 has an invalid length. [ 129.717155][ T7705] netlink: 32 bytes leftover after parsing attributes in process `syz.0.726'. [ 129.990701][ T7240] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.003236][ T7240] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.017586][ T7240] bond0 (unregistering): Released all slaves [ 130.159584][ T7713] openvswitch: netlink: Message has 4 unknown bytes. [ 130.419075][ T7708] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 130.814560][ T53] Bluetooth: hci4: command tx timeout [ 131.273449][ T7743] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.282559][ T7743] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.292547][ T7743] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.301483][ T7743] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.388918][ T7743] vxlan0: entered promiscuous mode [ 131.415033][ T7647] chnl_net:caif_netlink_parms(): no params data found [ 131.485413][ T7761] syzkaller0: entered allmulticast mode [ 131.558063][ T7774] netlink: 'syz.1.739': attribute type 1 has an invalid length. [ 131.566577][ T7774] netlink: 'syz.1.739': attribute type 1 has an invalid length. [ 131.671768][ T7240] hsr_slave_0: left promiscuous mode [ 131.699916][ T7240] hsr_slave_1: left promiscuous mode [ 131.711757][ T7240] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.721351][ T7240] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.745317][ T7240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.752778][ T7240] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.806471][ T7240] veth1_macvtap: left promiscuous mode [ 131.814445][ T7240] veth0_macvtap: left promiscuous mode [ 131.844361][ T7240] veth1_vlan: left promiscuous mode [ 131.849794][ T7240] veth0_vlan: left promiscuous mode [ 132.302371][ T7240] team0 (unregistering): Port device team_slave_1 removed [ 132.342430][ T7240] team0 (unregistering): Port device team_slave_0 removed [ 132.884409][ T53] Bluetooth: hci4: command tx timeout [ 132.888591][ T7647] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.901753][ T7647] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.917780][ T7647] bridge_slave_0: entered allmulticast mode [ 132.925230][ T7647] bridge_slave_0: entered promiscuous mode [ 132.937767][ T7647] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.945281][ T7647] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.964890][ T7647] bridge_slave_1: entered allmulticast mode [ 132.972240][ T7647] bridge_slave_1: entered promiscuous mode [ 133.208228][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.215828][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.310358][ T7647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.351124][ T7818] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.392777][ T7647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.421580][ T7818] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.516404][ T7825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.621848][ T7647] team0: Port device team_slave_0 added [ 133.686432][ T7647] team0: Port device team_slave_1 added [ 133.822672][ T7832] tipc: Started in network mode [ 133.842142][ T7832] tipc: Node identity 0000000000004c3a0000400000000001, cluster identity 4711 [ 133.854836][ T7832] tipc: Enabling of bearer rejected, failed to enable media [ 133.911666][ T7839] syz_tun (unregistering): left allmulticast mode [ 133.933958][ T7839] syz_tun (unregistering): left promiscuous mode [ 133.964385][ T7839] bridge0: port 3(syz_tun) entered disabled state [ 133.990034][ T7647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.997427][ T7647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.033777][ T7647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.071348][ T7647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.090764][ T7647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.124271][ T7647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.208175][ T7849] __nla_validate_parse: 10 callbacks suppressed [ 134.208194][ T7849] netlink: 112 bytes leftover after parsing attributes in process `syz.1.763'. [ 134.341113][ T7647] hsr_slave_0: entered promiscuous mode [ 134.354717][ T7647] hsr_slave_1: entered promiscuous mode [ 134.361341][ T7647] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.384468][ T7647] Cannot create hsr debugfs directory [ 134.645729][ T7863] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 134.964178][ T53] Bluetooth: hci4: command tx timeout [ 135.372061][ T7888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.774'. [ 135.607600][ T7907] vlan2: entered promiscuous mode [ 135.630875][ T7907] veth0: entered promiscuous mode [ 135.655506][ T7907] team0: Port device vlan2 added [ 135.701566][ T7647] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 135.744892][ T7647] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 135.850254][ T7647] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 135.926625][ T7235] bridge_slave_1: left allmulticast mode [ 135.932323][ T7235] bridge_slave_1: left promiscuous mode [ 135.975249][ T7235] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.993802][ T7235] bridge_slave_0: left allmulticast mode [ 136.000679][ T7235] bridge_slave_0: left promiscuous mode [ 136.007461][ T7235] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.449573][ T7235] team0: Port device bond0 removed [ 136.460449][ T7235] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.472418][ T7235] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.488653][ T7235] bond0 (unregistering): Released all slaves [ 136.502322][ T7647] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 136.518636][ T7929] netlink: 'syz.2.786': attribute type 1 has an invalid length. [ 136.639703][ T7235] tipc: Left network mode [ 136.678563][ T7938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.789'. [ 136.782114][ T7939] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 137.039335][ T7947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.788'. [ 137.054960][ T53] Bluetooth: hci4: command tx timeout [ 137.171471][ T7957] dvmrp0: entered allmulticast mode [ 137.218784][ T7968] dvmrp0: left allmulticast mode [ 137.452544][ T7971] netlink: 'syz.2.793': attribute type 21 has an invalid length. [ 137.703782][ T7235] hsr_slave_0: left promiscuous mode [ 137.759907][ T7235] hsr_slave_1: left promiscuous mode [ 137.791263][ T7235] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.841260][ T7235] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.888681][ T7235] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.904328][ T7235] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.936118][ T8005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.803'. [ 137.996581][ T7235] macvlan1: left allmulticast mode [ 138.014524][ T7235] veth1_vlan: left allmulticast mode [ 138.019889][ T7235] macvlan1: left promiscuous mode [ 138.033247][ T7235] veth1_macvtap: left promiscuous mode [ 138.042367][ T7235] veth0_macvtap: left promiscuous mode [ 138.053544][ T7235] veth1_vlan: left promiscuous mode [ 138.071346][ T7235] veth0_vlan: left promiscuous mode [ 138.108172][ T8012] netlink: 276 bytes leftover after parsing attributes in process `syz.4.805'. [ 139.171205][ T7235] team0 (unregistering): Port device team_slave_1 removed [ 139.223540][ T7235] team0 (unregistering): Port device team_slave_0 removed [ 139.820494][ T8019] netlink: 'syz.1.807': attribute type 5 has an invalid length. [ 139.825294][ T8059] netlink: 5300 bytes leftover after parsing attributes in process `syz.2.809'. [ 139.854920][ T8059] openvswitch: netlink: IP tunnel dst address not specified [ 140.063245][ T8066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.092404][ T8066] team0: Port device bond0 added [ 140.137919][ T8070] netlink: 20 bytes leftover after parsing attributes in process `syz.2.812'. [ 140.196409][ T7647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.304411][ T8079] netlink: 'syz.0.814': attribute type 10 has an invalid length. [ 140.352762][ T8078] dummy0: entered promiscuous mode [ 140.386781][ T8078] dummy0: left promiscuous mode [ 140.498380][ T7647] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.540741][ T5137] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.547975][ T5137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.642738][ T5137] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.649939][ T5137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.703700][ T8098] netlink: 728 bytes leftover after parsing attributes in process `syz.0.820'. [ 140.848909][ T8098] netem: unknown loss type 0 [ 140.853963][ T8098] netem: change failed [ 140.900744][ T8109] netlink: 'syz.4.822': attribute type 44 has an invalid length. [ 140.909580][ T8098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.820'. [ 140.943263][ T8098] netlink: 180 bytes leftover after parsing attributes in process `syz.0.820'. [ 140.972528][ T8098] netlink: 2776 bytes leftover after parsing attributes in process `syz.0.820'. [ 140.978816][ T8106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.021370][ T8106] team0: Device bond0 failed to register rx_handler [ 141.390182][ T8126] netlink: 48 bytes leftover after parsing attributes in process `syz.2.829'. [ 141.409089][ T7647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.422662][ T8128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.830'. [ 141.495272][ T8128] netlink: 4 bytes leftover after parsing attributes in process `syz.1.830'. [ 141.513616][ T8128] netlink: 16 bytes leftover after parsing attributes in process `syz.1.830'. [ 141.647295][ T7647] veth0_vlan: entered promiscuous mode [ 141.727516][ T7647] veth1_vlan: entered promiscuous mode [ 141.823599][ T8145] geneve2: entered promiscuous mode [ 141.859577][ T8145] geneve2: entered allmulticast mode [ 141.879341][ T7647] veth0_macvtap: entered promiscuous mode [ 141.900469][ T8144] netem: unknown loss type 0 [ 141.909032][ T8144] netem: change failed [ 141.922664][ T7647] veth1_macvtap: entered promiscuous mode [ 141.942323][ T8150] netlink: 'syz.2.837': attribute type 2 has an invalid length. [ 142.008569][ T7647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.041977][ T7647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.057421][ T7647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.097269][ T7647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.124318][ T7647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.150554][ T7647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.162318][ T7647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.198638][ T7647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.211469][ T7647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.324808][ T7647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.355727][ T7647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.367689][ T7647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.372561][ T8164] netlink: 'syz.4.843': attribute type 12 has an invalid length. [ 142.398850][ T7647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.411654][ T7647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.423890][ T7647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.435983][ T7647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.446769][ T7647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.457917][ T7647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.499592][ T7647] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.509633][ T7647] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.519120][ T7647] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.534260][ T7647] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.752033][ T8180] Bluetooth: MGMT ver 1.22 [ 142.842046][ T7223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.894115][ T7223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.014438][ T8196] netlink: 'syz.0.852': attribute type 1 has an invalid length. [ 143.130942][ T8196] bond1: entered promiscuous mode [ 143.204694][ T2821] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.213451][ T2821] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.262485][ T8209] ip6gretap1: entered promiscuous mode [ 143.271822][ T8209] ip6gretap1: entered allmulticast mode [ 143.286239][ T8209] bond1: (slave ip6gretap1): making interface the new active one [ 143.307528][ T8209] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 143.333508][ T8196] netlink: 'syz.0.852': attribute type 1 has an invalid length. [ 143.547186][ T8231] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 143.588682][ T8226] Bluetooth: hci3: invalid length 0, exp 2 for type 12 [ 143.622592][ T8231] Unsupported ieee802154 address type: 0 [ 143.657570][ T8231] openvswitch: netlink: Duplicate key (type 0). [ 143.691064][ T8236] macvlan2: entered allmulticast mode [ 143.706193][ T8236] mac80211_hwsim hwsim19 wlan0: entered promiscuous mode [ 143.727801][ T8236] mac80211_hwsim hwsim19 wlan0: entered allmulticast mode [ 143.772500][ T8236] team0: Port device macvlan2 added [ 144.304693][ T8276] netlink: 'syz.4.874': attribute type 1 has an invalid length. [ 144.627461][ T2811] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.956508][ T8298] tipc: Trying to set illegal importance in message [ 145.131400][ T2811] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.157290][ T8305] netlink: 'syz.4.884': attribute type 2 has an invalid length. [ 145.172803][ T8305] __nla_validate_parse: 17 callbacks suppressed [ 145.172822][ T8305] netlink: 244 bytes leftover after parsing attributes in process `syz.4.884'. [ 145.208423][ T8304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.883'. [ 145.228395][ T5096] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 145.241525][ T5096] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 145.253209][ T5096] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 145.277164][ T5096] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 145.291320][ T5096] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 145.300463][ T5096] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 145.329624][ T2811] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.528125][ T2811] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.609534][ T8322] netlink: 28 bytes leftover after parsing attributes in process `syz.4.891'. [ 146.034885][ T2811] bridge_slave_1: left allmulticast mode [ 146.047882][ T2811] bridge_slave_1: left promiscuous mode [ 146.060326][ T2811] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.091637][ T2811] bridge_slave_0: left allmulticast mode [ 146.101994][ T2811] bridge_slave_0: left promiscuous mode [ 146.109433][ T2811] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.398424][ T8354] netlink: 104 bytes leftover after parsing attributes in process `syz.4.901'. [ 146.570788][ T8363] netlink: 'syz.0.903': attribute type 7 has an invalid length. [ 146.592999][ T8363] netlink: 244 bytes leftover after parsing attributes in process `syz.0.903'. [ 146.900471][ T2811] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.921872][ T8379] netlink: 6 bytes leftover after parsing attributes in process `syz.4.907'. [ 146.933610][ T2811] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.950817][ T2811] bond0 (unregistering): Released all slaves [ 147.151268][ T8393] netlink: 144 bytes leftover after parsing attributes in process `syz.0.910'. [ 147.282758][ T8401] syz.1.913[8401] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.282905][ T8401] syz.1.913[8401] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.301438][ T8402] netlink: 12 bytes leftover after parsing attributes in process `syz.4.911'. [ 147.374701][ T53] Bluetooth: hci4: command tx timeout [ 147.432563][ T8306] chnl_net:caif_netlink_parms(): no params data found [ 147.472678][ T8409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.914'. [ 147.648957][ T8415] xt_limit: Overflow, try lower: 0/0 [ 147.817599][ T8419] syz_tun (unregistering): left allmulticast mode [ 147.880859][ T8421] netlink: 'syz.2.915': attribute type 8 has an invalid length. [ 147.891839][ T8421] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 148.042398][ T8437] netlink: 728 bytes leftover after parsing attributes in process `syz.4.921'. [ 148.192586][ T2811] hsr_slave_0: left promiscuous mode [ 148.219851][ T2811] hsr_slave_1: left promiscuous mode [ 148.237309][ T2811] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.260059][ T2811] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.287928][ T2811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.314402][ T2811] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.387606][ T2811] veth1_macvtap: left promiscuous mode [ 148.407335][ T2811] veth0_macvtap: left promiscuous mode [ 148.428729][ T2811] veth1_vlan: left promiscuous mode [ 148.438788][ T2811] veth0_vlan: left promiscuous mode [ 148.644462][ T53] Bluetooth: hci0: command tx timeout [ 148.944339][ T2811] team0 (unregistering): Port device team_slave_1 removed [ 148.985439][ T2811] team0 (unregistering): Port device team_slave_0 removed [ 149.305855][ T8306] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.313106][ T8306] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.320954][ T8306] bridge_slave_0: entered allmulticast mode [ 149.327927][ T8306] bridge_slave_0: entered promiscuous mode [ 149.339145][ T8306] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.346942][ T8306] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.360859][ T8306] bridge_slave_1: entered allmulticast mode [ 149.368632][ T8306] bridge_slave_1: entered promiscuous mode [ 149.376733][ T8443] netem: unknown loss type 0 [ 149.381740][ T8443] netem: change failed [ 149.412522][ T8462] netlink: 'syz.0.925': attribute type 4 has an invalid length. [ 149.444731][ T53] Bluetooth: hci4: command tx timeout [ 149.683169][ T8306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.689818][ T8479] xt_TCPMSS: Only works on TCP SYN packets [ 149.732069][ T8306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.829535][ T8489] netlink: 'syz.4.935': attribute type 22 has an invalid length. [ 149.938384][ T8306] team0: Port device team_slave_0 added [ 149.977049][ T8306] team0: Port device team_slave_1 added [ 150.126813][ T8306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.142268][ T8306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.198795][ T8306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.239971][ T8306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.257151][ T8516] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 150.272693][ T8306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.335702][ T8306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.377458][ T8518] __nla_validate_parse: 4 callbacks suppressed [ 150.377477][ T8518] netlink: 16 bytes leftover after parsing attributes in process `syz.2.943'. [ 150.415618][ T8518] netlink: 152 bytes leftover after parsing attributes in process `syz.2.943'. [ 150.638587][ T8306] hsr_slave_0: entered promiscuous mode [ 150.689446][ T8540] netlink: 728 bytes leftover after parsing attributes in process `syz.1.947'. [ 150.709614][ T8306] hsr_slave_1: entered promiscuous mode [ 150.815412][ T8547] netem: unknown loss type 0 [ 150.827066][ T8547] netem: change failed [ 150.831930][ T8539] netlink: 16 bytes leftover after parsing attributes in process `syz.4.948'. [ 150.845063][ T8540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.947'. [ 150.860379][ T8540] netlink: 180 bytes leftover after parsing attributes in process `syz.1.947'. [ 150.881583][ T8540] netlink: 2776 bytes leftover after parsing attributes in process `syz.1.947'. [ 151.186033][ T8556] netlink: 152 bytes leftover after parsing attributes in process `syz.4.952'. [ 151.208863][ T8561] veth0_macvtap: left promiscuous mode [ 151.470535][ T8577] netlink: 48 bytes leftover after parsing attributes in process `syz.2.959'. [ 151.524504][ T53] Bluetooth: hci4: command tx timeout [ 151.568040][ T8578] delete_channel: no stack [ 151.657040][ T8588] netlink: 728 bytes leftover after parsing attributes in process `syz.4.963'. [ 151.698738][ T8588] netem: unknown loss type 0 [ 151.712921][ T8588] netem: change failed [ 152.573086][ T8306] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 152.621498][ T8306] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 152.689843][ T8306] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 152.769580][ T8306] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 152.961006][ T8636] netem: unknown loss type 0 [ 152.980692][ T8636] netem: change failed [ 153.041501][ T8645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.051524][ T8645] team0: Device bond0 failed to register rx_handler [ 153.478085][ T8306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.555283][ T8661] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 153.590365][ T8664] netlink: 'syz.0.986': attribute type 1 has an invalid length. [ 153.604410][ T53] Bluetooth: hci4: command tx timeout [ 153.635548][ T8664] netlink: 'syz.0.986': attribute type 1 has an invalid length. [ 153.665164][ T8306] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.725618][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.732785][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.783462][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.790684][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.942601][ T8685] netem: unknown loss type 0 [ 153.964170][ T8685] netem: change failed [ 154.090054][ T8306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 154.870339][ T8306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.963368][ T8734] netlink: 'syz.4.1003': attribute type 4 has an invalid length. [ 155.183100][ T8306] veth0_vlan: entered promiscuous mode [ 155.207375][ T5096] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 155.218773][ T5096] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 155.228767][ T5096] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 155.237310][ T5096] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 155.248300][ T5096] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 155.256677][ T5096] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 155.272629][ T8306] veth1_vlan: entered promiscuous mode [ 155.446158][ T8755] __nla_validate_parse: 24 callbacks suppressed [ 155.446185][ T8755] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1009'. [ 155.493240][ T8306] veth0_macvtap: entered promiscuous mode [ 155.529696][ T8758] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1010'. [ 155.540654][ T8306] veth1_macvtap: entered promiscuous mode [ 155.627941][ T8306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.664377][ T8306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.703152][ T8306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.714290][ T8306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.724955][ T8306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.736246][ T8306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.748457][ T8306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.763022][ T8306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.779707][ T8306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.815882][ T8772] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1013'. [ 155.836229][ T8772] netlink: 'syz.4.1013': attribute type 18 has an invalid length. [ 155.869623][ T8772] vxlan1: entered promiscuous mode [ 155.910521][ T8306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.927764][ T8306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.939283][ T8306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.953579][ T8306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.964466][ T8306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.975546][ T8306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.986120][ T8306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.999108][ T8306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.015334][ T8306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.061645][ T8306] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.075924][ T8306] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.093333][ T8306] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.128097][ T8306] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.501542][ T2821] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.544567][ T2821] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.608061][ T7223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.632608][ T8741] chnl_net:caif_netlink_parms(): no params data found [ 156.639977][ T7223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.759218][ T8807] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1021'. [ 157.184362][ T8741] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.191641][ T8741] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.204259][ T8741] bridge_slave_0: entered allmulticast mode [ 157.231198][ T8741] bridge_slave_0: entered promiscuous mode [ 157.256560][ T8741] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.285324][ T53] Bluetooth: hci3: command tx timeout [ 157.296304][ T8741] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.303566][ T8741] bridge_slave_1: entered allmulticast mode [ 157.350912][ T8741] bridge_slave_1: entered promiscuous mode [ 157.543106][ T8849] IPv6: sit2: Disabled Multicast RS [ 157.559986][ T8845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1029'. [ 157.597276][ T8741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.644008][ T8741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.801382][ T8741] team0: Port device team_slave_0 added [ 157.856973][ T8741] team0: Port device team_slave_1 added [ 158.096484][ T8741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.140270][ T8741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.215014][ T8741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.275260][ T7240] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.299467][ T8741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.306765][ T8741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.333251][ T8741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.375912][ T8741] hsr_slave_0: entered promiscuous mode [ 158.382217][ T8741] hsr_slave_1: entered promiscuous mode [ 158.388640][ T8741] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.399124][ T8741] Cannot create hsr debugfs directory [ 158.514273][ T8741] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.602179][ T8741] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.673427][ T8741] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.907251][ T7240] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.009569][ T8741] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.166672][ T5096] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 159.194213][ T5096] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 159.215745][ T7240] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.226488][ T5096] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 159.239331][ T5096] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 159.248230][ T5096] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 159.255768][ T5096] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 159.364516][ T53] Bluetooth: hci3: command tx timeout [ 159.429614][ T7240] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.748535][ T8741] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 159.805528][ T8914] openvswitch: netlink: IP tunnel attribute has 2 unknown bytes. [ 159.816302][ T8918] openvswitch: netlink: IP tunnel attribute has 2 unknown bytes. [ 159.886038][ T8741] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 160.006021][ T8741] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 160.028750][ T8741] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 160.073597][ T7240] bridge_slave_1: left allmulticast mode [ 160.087930][ T7240] bridge_slave_1: left promiscuous mode [ 160.102886][ T7240] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.125340][ T7240] bridge_slave_0: left allmulticast mode [ 160.131029][ T7240] bridge_slave_0: left promiscuous mode [ 160.141781][ T7240] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.480276][ T7240] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.491553][ T7240] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.508909][ T7240] bond0 (unregistering): Released all slaves [ 160.850449][ T8950] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1059'. [ 160.933013][ T8891] chnl_net:caif_netlink_parms(): no params data found [ 160.956291][ T8955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1061'. [ 160.989037][ T8952] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1060'. [ 161.003970][ T8952] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1060'. [ 161.206200][ T8957] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 161.355522][ T8973] netlink: 'syz.0.1067': attribute type 1 has an invalid length. [ 161.365180][ T53] Bluetooth: hci4: command tx timeout [ 161.434429][ T7240] hsr_slave_0: left promiscuous mode [ 161.445174][ T53] Bluetooth: hci3: command tx timeout [ 161.463595][ T7240] hsr_slave_1: left promiscuous mode [ 161.492434][ T7240] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.530490][ T7240] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.563634][ T7240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.593326][ T7240] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.651646][ T7240] veth1_macvtap: left promiscuous mode [ 161.661933][ T7240] veth0_macvtap: left promiscuous mode [ 161.688261][ T7240] veth1_vlan: left promiscuous mode [ 161.700558][ T7240] veth0_vlan: left promiscuous mode [ 162.162224][ T7240] team0 (unregistering): Port device team_slave_1 removed [ 162.200297][ T7240] team0 (unregistering): Port device team_slave_0 removed [ 162.552578][ T8985] dummy0: entered promiscuous mode [ 162.598988][ T8985] dummy0: left promiscuous mode [ 162.846915][ T9005] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1077'. [ 162.924549][ T8891] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.931721][ T8891] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.964362][ T8891] bridge_slave_0: entered allmulticast mode [ 162.971768][ T8891] bridge_slave_0: entered promiscuous mode [ 163.012032][ T8891] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.026296][ T8891] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.033867][ T8891] bridge_slave_1: entered allmulticast mode [ 163.048103][ T8891] bridge_slave_1: entered promiscuous mode [ 163.058168][ T9008] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1079'. [ 163.211678][ T8891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.260501][ T8891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.310894][ T9021] netlink: 201636 bytes leftover after parsing attributes in process `syz.4.1084'. [ 163.431038][ T8891] team0: Port device team_slave_0 added [ 163.444777][ T53] Bluetooth: hci4: command tx timeout [ 163.477512][ T8891] team0: Port device team_slave_1 added [ 163.525595][ T53] Bluetooth: hci3: command tx timeout [ 163.681652][ T8891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.697777][ T8891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.737727][ T8891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.753491][ T8891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.760778][ T8891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.820093][ T8891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.864760][ T9046] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1090'. [ 164.035380][ T9053] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1092'. [ 164.064696][ T9053] FAULT_INJECTION: forcing a failure. [ 164.064696][ T9053] name failslab, interval 1, probability 0, space 0, times 1 [ 164.115007][ T9060] netlink: 'syz.0.1094': attribute type 11 has an invalid length. [ 164.132128][ T9053] CPU: 0 PID: 9053 Comm: syz.1.1092 Not tainted 6.10.0-rc6-syzkaller-01259-g3abbd7ed8b76 #0 [ 164.142244][ T9053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 164.152335][ T9053] Call Trace: [ 164.155625][ T9053] [ 164.158577][ T9053] dump_stack_lvl+0x241/0x360 [ 164.163301][ T9053] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.168525][ T9053] ? __pfx__printk+0x10/0x10 [ 164.173147][ T9053] should_fail_ex+0x3b0/0x4e0 [ 164.177851][ T9053] ? nfnetlink_rcv+0x11b8/0x2a90 [ 164.182810][ T9053] should_failslab+0x9/0x20 [ 164.186979][ T8891] hsr_slave_0: entered promiscuous mode [ 164.187318][ T9053] kmalloc_trace_noprof+0x6c/0x2c0 [ 164.197985][ T9053] nfnetlink_rcv+0x11b8/0x2a90 [ 164.202807][ T9053] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 164.207971][ T9053] ? netlink_deliver_tap+0x2e/0x1b0 [ 164.213167][ T9053] ? skb_clone+0x240/0x390 [ 164.217581][ T9053] ? __pfx_lock_release+0x10/0x10 [ 164.222611][ T9053] ? netlink_deliver_tap+0x2e/0x1b0 [ 164.227803][ T9053] netlink_unicast+0x7f0/0x990 [ 164.232566][ T9053] ? __pfx_netlink_unicast+0x10/0x10 [ 164.237843][ T9053] ? __virt_addr_valid+0x183/0x520 [ 164.242953][ T9053] ? __check_object_size+0x49c/0x900 [ 164.248234][ T9053] ? bpf_lsm_netlink_send+0x9/0x10 [ 164.253347][ T9053] netlink_sendmsg+0x8e4/0xcb0 [ 164.258115][ T9053] ? __pfx_netlink_sendmsg+0x10/0x10 [ 164.263392][ T9053] ? __import_iovec+0x536/0x820 [ 164.268233][ T9053] ? aa_sock_msg_perm+0x91/0x160 [ 164.273171][ T9053] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 164.278448][ T9053] ? security_socket_sendmsg+0x87/0xb0 [ 164.283906][ T9053] ? __pfx_netlink_sendmsg+0x10/0x10 [ 164.289185][ T9053] __sock_sendmsg+0x221/0x270 [ 164.293859][ T9053] ____sys_sendmsg+0x525/0x7d0 [ 164.298626][ T9053] ? __pfx_____sys_sendmsg+0x10/0x10 [ 164.303918][ T9053] __sys_sendmsg+0x2b0/0x3a0 [ 164.308506][ T9053] ? __pfx___sys_sendmsg+0x10/0x10 [ 164.313612][ T9053] ? vfs_write+0x7c4/0xc90 [ 164.318054][ T9053] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 164.324378][ T9053] ? do_syscall_64+0x100/0x230 [ 164.329137][ T9053] ? do_syscall_64+0xb6/0x230 [ 164.333803][ T9053] do_syscall_64+0xf3/0x230 [ 164.338298][ T9053] ? clear_bhb_loop+0x35/0x90 [ 164.342972][ T9053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.348865][ T9053] RIP: 0033:0x7ff33fd75bd9 [ 164.353291][ T9053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.372890][ T9053] RSP: 002b:00007ff340b80048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 164.381307][ T9053] RAX: ffffffffffffffda RBX: 00007ff33ff03f60 RCX: 00007ff33fd75bd9 [ 164.389273][ T9053] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 164.397239][ T9053] RBP: 00007ff340b800a0 R08: 0000000000000000 R09: 0000000000000000 [ 164.405209][ T9053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.413176][ T9053] R13: 000000000000004d R14: 00007ff33ff03f60 R15: 00007fffb5d20a78 [ 164.421158][ T9053] [ 164.433216][ T8891] hsr_slave_1: entered promiscuous mode [ 164.466982][ T8741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.693295][ T8741] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.760159][ T9070] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 164.806874][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.814097][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.893773][ T9079] netlink: 'syz.4.1100': attribute type 1 has an invalid length. [ 165.062526][ T9080] netlink: 'syz.1.1099': attribute type 5 has an invalid length. [ 165.071113][ T9086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1102'. [ 165.113110][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.120309][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.231992][ T9093] macsec1: entered promiscuous mode [ 165.251086][ T9093] macvlan1: entered promiscuous mode [ 165.262519][ T9093] macsec1: entered allmulticast mode [ 165.271491][ T9093] macvlan1: entered allmulticast mode [ 165.289061][ T9093] veth1_vlan: entered allmulticast mode [ 165.332406][ T9098] xt_CT: You must specify a L4 protocol and not use inversions on it [ 165.442409][ T9101] netlink: 'syz.0.1105': attribute type 5 has an invalid length. [ 165.532672][ T53] Bluetooth: hci4: command tx timeout [ 165.658725][ T9110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.715261][ T9110] team0: Port device bond0 added [ 165.741263][ T8741] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 165.981196][ T9113] dummy0: entered promiscuous mode [ 166.018133][ T9113] dummy0: left promiscuous mode [ 166.332982][ T8891] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 166.379266][ T8891] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 166.396214][ T9129] syz.4.1111[9129] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.396371][ T9129] syz.4.1111[9129] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.402880][ T8891] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 166.471956][ T8741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.485822][ T8891] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 166.758552][ T9141] __nla_validate_parse: 5 callbacks suppressed [ 166.758572][ T9141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1113'. [ 166.797159][ T8741] veth0_vlan: entered promiscuous mode [ 166.896884][ T8741] veth1_vlan: entered promiscuous mode [ 167.102373][ T9162] netlink: 'syz.0.1118': attribute type 11 has an invalid length. [ 167.141449][ T8741] veth0_macvtap: entered promiscuous mode [ 167.162355][ T9163] netlink: 'syz.0.1118': attribute type 11 has an invalid length. [ 167.173981][ T8741] veth1_macvtap: entered promiscuous mode [ 167.191202][ T9166] netlink: 'syz.1.1119': attribute type 1 has an invalid length. [ 167.214978][ T9163] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1118'. [ 167.247927][ T8891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.267665][ T9166] netlink: 9328 bytes leftover after parsing attributes in process `syz.1.1119'. [ 167.284905][ T9166] netlink: 'syz.1.1119': attribute type 2 has an invalid length. [ 167.302984][ T8741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.322312][ T8741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.332827][ T9166] netlink: 'syz.1.1119': attribute type 1 has an invalid length. [ 167.334860][ T8741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.353821][ T8741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.365811][ T8741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.376771][ T8741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.387193][ T8741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.398723][ T8741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.411020][ T8741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.452288][ T8741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.489897][ T8741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.511943][ T8741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.544004][ T8741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.571727][ T8741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.589594][ T8741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.612493][ T53] Bluetooth: hci4: command tx timeout [ 167.622671][ T8741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.643746][ T8741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.662519][ T8741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.671799][ T9172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1121'. [ 167.684946][ T9177] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1122'. [ 167.760832][ T8891] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.798969][ T9190] macvlan3: entered promiscuous mode [ 167.811225][ T9190] macvlan3: entered allmulticast mode [ 167.826078][ T9190] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 167.836411][ T9190] team0: Port device macvlan3 added [ 167.848594][ T8741] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.862524][ T8741] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.890013][ T8741] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.915400][ T8741] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.947021][ T9195] IPv6: sit1: Disabled Multicast RS [ 168.035974][ T5173] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.043190][ T5173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.095245][ T5173] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.102418][ T5173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.161162][ T9209] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1129'. [ 168.186811][ T9204] netlink: 'syz.0.1128': attribute type 44 has an invalid length. [ 168.200902][ T9209] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1129'. [ 168.212615][ T9209] netlink: 'syz.1.1129': attribute type 5 has an invalid length. [ 168.236618][ T9209] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1129'. [ 168.363511][ T8891] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 168.425122][ T8891] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 168.649867][ T2811] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.688189][ T2811] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.809108][ T9235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1135'. [ 168.838536][ T2811] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.850129][ T9237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1137'. [ 168.855005][ T2811] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.037683][ T9242] netlink: 'syz.0.1138': attribute type 1 has an invalid length. [ 169.130511][ T9242] ieee802154 phy0 wpan0: encryption failed: -22 [ 169.223464][ T8891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.382120][ T9263] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 169.463119][ T8891] veth0_vlan: entered promiscuous mode [ 169.527793][ T9270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.551597][ T8891] veth1_vlan: entered promiscuous mode [ 169.652082][ T8891] veth0_macvtap: entered promiscuous mode [ 169.713983][ T8891] veth1_macvtap: entered promiscuous mode [ 169.987851][ T8891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.058021][ T8891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.098051][ T8891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.128922][ T8891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.149041][ T8891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.177058][ T8891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.194113][ T8891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.209348][ T8891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.219595][ T8891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.232996][ T8891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.304163][ T8891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.370619][ T8891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.424314][ T8891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.446116][ T8891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.474428][ T8891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.503553][ T8891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.542522][ T8891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.571599][ T8891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.593859][ T8891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.609021][ T8891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.619968][ T8891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.636281][ T8891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.812101][ T8891] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.834689][ T8891] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.872123][ T8891] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.890799][ T8891] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.277172][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.344209][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.454653][ T9375] tipc: Enabling of bearer rejected, failed to enable media [ 171.494749][ T7221] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.512898][ T7221] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.644954][ T9387] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 171.829689][ T9393] netlink: 'syz.0.1180': attribute type 11 has an invalid length. [ 171.929080][ T9406] netlink: 'syz.0.1180': attribute type 11 has an invalid length. [ 171.952002][ T9406] __nla_validate_parse: 14 callbacks suppressed [ 171.952021][ T9406] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1180'. [ 172.818831][ T9456] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.848882][ T9460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1182'. [ 172.922196][ T9456] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.317674][ T9456] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.441776][ T9456] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.648743][ T9488] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1190'. [ 173.745294][ T5096] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 173.785381][ T5096] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 173.795369][ T5096] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 173.804844][ T5096] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 173.819341][ T5096] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 173.828414][ T5096] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 173.852530][ T9497] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1192'. [ 173.950425][ T9501] netlink: 'syz.0.1195': attribute type 1 has an invalid length. [ 174.048780][ T9504] tipc: Started in network mode [ 174.053703][ T9504] tipc: Node identity 0000000000004c3a0000400000000001, cluster identity 4711 [ 174.077758][ T9504] tipc: Enabling of bearer rejected, failed to enable media [ 174.204409][ T9456] bridge_slave_1: left allmulticast mode [ 174.231743][ T9456] bridge_slave_1: left promiscuous mode [ 174.250035][ T9456] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.268810][ T9456] bridge_slave_0: left allmulticast mode [ 174.275008][ T9456] bridge_slave_0: left promiscuous mode [ 174.280887][ T9456] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.690827][ T9456] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.703679][ T9456] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.716248][ T9456] bond0 (unregistering): Released all slaves [ 174.772235][ T9524] macvlan2: entered promiscuous mode [ 174.796004][ T9524] macvlan2: entered allmulticast mode [ 174.801807][ T9524] bridge0: entered promiscuous mode [ 174.850329][ T9524] bridge0: entered allmulticast mode [ 174.896522][ T9524] team0: Port device macvlan2 added [ 175.089804][ T9540] netlink: 200628 bytes leftover after parsing attributes in process `syz.4.1206'. [ 175.348105][ T9553] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1209'. [ 175.611497][ T9566] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1213'. [ 175.690186][ T9456] hsr_slave_0: left promiscuous mode [ 175.722805][ T9456] hsr_slave_1: left promiscuous mode [ 175.769609][ T9456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.814378][ T9456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.847890][ T9456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.876051][ T9456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.912909][ T9579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1218'. [ 175.925187][ T53] Bluetooth: hci4: command tx timeout [ 175.984236][ T9579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1218'. [ 175.994649][ T9579] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1218'. [ 176.008788][ T9456] veth1_macvtap: left promiscuous mode [ 176.029583][ T9456] veth0_macvtap: left promiscuous mode [ 176.035739][ T9456] veth1_vlan: left promiscuous mode [ 176.041044][ T9456] veth0_vlan: left promiscuous mode [ 176.483606][ T9456] team0 (unregistering): Port device team_slave_1 removed [ 176.521001][ T9456] team0 (unregistering): Port device team_slave_0 removed [ 176.881357][ T9572] dummy0: entered promiscuous mode [ 176.900223][ T9572] dummy0: left promiscuous mode [ 176.957778][ T9492] chnl_net:caif_netlink_parms(): no params data found [ 177.416380][ T9611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1229'. [ 177.630693][ T9492] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.644845][ T9492] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.656355][ T9492] bridge_slave_0: entered allmulticast mode [ 177.674156][ T9492] bridge_slave_0: entered promiscuous mode [ 177.705825][ T9492] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.720333][ T9492] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.730759][ T9492] bridge_slave_1: entered allmulticast mode [ 177.741134][ T9492] bridge_slave_1: entered promiscuous mode [ 177.790829][ T9632] netlink: 'syz.0.1236': attribute type 44 has an invalid length. [ 177.860180][ T9492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.869916][ T9639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1237'. [ 177.913873][ T9492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.005235][ T53] Bluetooth: hci4: command tx timeout [ 178.115098][ T9492] team0: Port device team_slave_0 added [ 178.177024][ T9492] team0: Port device team_slave_1 added [ 178.331604][ T9657] netlink: 'syz.0.1241': attribute type 2 has an invalid length. [ 178.340517][ T9657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1241'. [ 178.350786][ T9492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.380574][ T9492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.414637][ T9661] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1242'. [ 178.473374][ T9492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.521320][ T9492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.522255][ T9669] netlink: 728 bytes leftover after parsing attributes in process `syz.2.1244'. [ 178.533942][ T9492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.564994][ T9492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.682167][ T9492] hsr_slave_0: entered promiscuous mode [ 178.708582][ T9492] hsr_slave_1: entered promiscuous mode [ 178.728149][ T9669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1244'. [ 178.754855][ T9669] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1244'. [ 178.778366][ T9669] netlink: 2776 bytes leftover after parsing attributes in process `syz.2.1244'. [ 178.800057][ T9678] netem: unknown loss type 0 [ 178.806111][ T9676] netlink: 'syz.0.1246': attribute type 2 has an invalid length. [ 178.881350][ C1] vcan0: j1939_tp_rxtimer: 0xffff888023f1b800: rx timeout, send abort [ 179.166967][ T9691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1249'. [ 179.347049][ T9702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1254'. [ 179.390957][ C1] vcan0: j1939_tp_rxtimer: 0xffff888023f1b800: abort rx timeout. Force session deactivation [ 179.570561][ T9711] netlink: 'syz.2.1257': attribute type 1 has an invalid length. [ 179.614354][ T9711] netlink: 'syz.2.1257': attribute type 1 has an invalid length. [ 179.631049][ T9711] netlink: 'syz.2.1257': attribute type 2 has an invalid length. [ 179.962214][ T9719] netlink: 'syz.2.1257': attribute type 10 has an invalid length. [ 180.002171][ T9719] team0: Port device netdevsim0 added [ 180.085376][ T53] Bluetooth: hci4: command tx timeout [ 180.204462][ T9748] netlink: 'syz.2.1265': attribute type 5 has an invalid length. [ 180.258078][ T9751] netlink: 'syz.4.1267': attribute type 11 has an invalid length. [ 180.279174][ T9492] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 180.325221][ T9492] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 180.364611][ T9492] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 180.423618][ T9755] syz_tun: entered promiscuous mode [ 180.448704][ T9755] macsec1: entered promiscuous mode [ 180.459914][ T9755] macsec1: entered allmulticast mode [ 180.500633][ T9755] syz_tun: entered allmulticast mode [ 180.513913][ T9492] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 180.531538][ T9760] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 180.756466][ T9774] netlink: 'syz.2.1272': attribute type 44 has an invalid length. [ 180.853136][ T9770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.873486][ T9770] team0: Port device bond0 added [ 181.016832][ T9492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.062545][ T9786] batman_adv: batadv1: Adding interface: netdevsim0 [ 181.084811][ T9786] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.119417][ T9786] batman_adv: batadv1: Interface activated: netdevsim0 [ 181.235118][ T9492] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.263774][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.271017][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.355835][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.363011][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.558832][ T9815] netlink: 'syz.1.1285': attribute type 3 has an invalid length. [ 181.777549][ T9824] tipc: Enabling of bearer rejected, failed to enable media [ 182.178866][ T53] Bluetooth: hci4: command tx timeout [ 182.338742][ T9853] netlink: 'syz.1.1296': attribute type 4 has an invalid length. [ 182.366469][ T9492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.561877][ T9492] veth0_vlan: entered promiscuous mode [ 182.684241][ T9865] __nla_validate_parse: 12 callbacks suppressed [ 182.684261][ T9865] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1300'. [ 182.807678][ T9492] veth1_vlan: entered promiscuous mode [ 182.829326][ T9880] netlink: 'syz.2.1302': attribute type 4 has an invalid length. [ 182.958957][ T9869] netlink: 'syz.2.1302': attribute type 4 has an invalid length. [ 182.996470][ T9889] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1306'. [ 183.129850][ T9492] veth0_macvtap: entered promiscuous mode [ 183.189640][ T9492] veth1_macvtap: entered promiscuous mode [ 183.253758][ T9492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.272010][ T9903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1310'. [ 183.313800][ T9492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.361946][ T9492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.382943][ T9492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.423580][ T9492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.455898][ T9492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.480667][ T9492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.503086][ T9492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.523415][ T9492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.549876][ T9492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.576437][ T9492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.620178][ T9909] dvmrp1: entered allmulticast mode [ 183.643458][ T9492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.681415][ T9492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.726395][ T9492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.763141][ T9492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.799362][ T9492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.840201][ T9492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.869373][ T9492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.892813][ T9492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.915244][ T9492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.936744][ T9492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.975906][ T9492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.065662][ T9492] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.082967][ T9492] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.093326][ T9492] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.128661][ T9492] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.345435][ T9444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.353859][ T9444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.361889][ T9949] team0: entered promiscuous mode [ 184.381602][ T9949] team_slave_0: entered promiscuous mode [ 184.393574][ T9949] team_slave_1: entered promiscuous mode [ 184.402448][ T9949] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 184.432581][ T9949] bond0: entered promiscuous mode [ 184.445297][ T9949] bond_slave_0: entered promiscuous mode [ 184.451240][ T9949] bond_slave_1: entered promiscuous mode [ 184.594278][ T9964] netlink: 728 bytes leftover after parsing attributes in process `syz.4.1326'. [ 184.627007][ T9969] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1327'. [ 184.638203][ T7228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.682295][ T7228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.725311][ T9964] netem: unknown loss type 0 [ 184.740057][ T9964] netem: change failed [ 184.751998][ T9973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1326'. [ 184.779343][ T9973] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1326'. [ 184.789998][ T9974] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1327'. [ 184.834459][ T9973] netlink: 2776 bytes leftover after parsing attributes in process `syz.4.1326'. [ 184.879342][ T9948] team0: left promiscuous mode [ 184.909346][ T9948] team_slave_0: left promiscuous mode [ 184.926515][ T9948] team_slave_1: left promiscuous mode [ 184.937943][ T9948] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 184.954447][ T9948] bond0: left promiscuous mode [ 184.965246][ T9948] bond_slave_0: left promiscuous mode [ 184.973526][ T9948] bond_slave_1: left promiscuous mode [ 184.992241][ T9983] netlink: 'syz.0.1328': attribute type 2 has an invalid length. [ 185.002498][ T9983] netlink: 'syz.0.1328': attribute type 2 has an invalid length. [ 185.018641][ T9983] netlink: 'syz.0.1328': attribute type 2 has an invalid length. [ 185.030095][ T9983] netlink: 'syz.0.1328': attribute type 1 has an invalid length. [ 185.187334][ T9989] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1331'. [ 185.257639][ T9994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.318282][ T9999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.362586][T10002] Bluetooth: MGMT ver 1.22 [ 185.419522][ T9994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.525573][ T9994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.558854][ T9994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.650685][T10019] ieee802154 phy0 wpan0: encryption failed: -90 [ 185.898995][T10031] dummy0: entered promiscuous mode [ 185.908633][T10031] dummy0: left promiscuous mode [ 186.179279][ T9444] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.826020][ T9444] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.898166][ T9444] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.027134][ T9444] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.311859][T10060] bridge0: Device is already in use. [ 187.407035][T10061] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 187.424275][ T9444] bridge_slave_1: left allmulticast mode [ 187.431350][ T9444] bridge_slave_1: left promiscuous mode [ 187.478753][ T9444] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.565774][ T9444] bridge_slave_0: left allmulticast mode [ 187.571469][ T9444] bridge_slave_0: left promiscuous mode [ 187.603868][T10074] Cannot find add_set index 0 as target [ 187.625352][ T9444] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.694611][ T5096] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 187.704664][ T5096] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 187.714474][ T5096] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 187.733079][ T5096] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 187.743251][ T5096] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 187.751226][ T5096] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 188.264210][ T9444] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.276080][ T9444] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.287382][ T9444] bond0 (unregistering): Released all slaves [ 188.311933][T10092] netlink: 'syz.1.1357': attribute type 21 has an invalid length. [ 188.990489][T10130] __nla_validate_parse: 2 callbacks suppressed [ 188.990508][T10130] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1367'. [ 189.035445][ T9444] hsr_slave_0: left promiscuous mode [ 189.064976][T10133] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1369'. [ 189.092099][ T9444] hsr_slave_1: left promiscuous mode [ 189.116020][ T9444] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.141639][ T9444] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.164249][ T9444] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.192526][ T9444] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.248653][ T9444] veth1_macvtap: left promiscuous mode [ 189.258838][ T9444] veth0_macvtap: left promiscuous mode [ 189.264692][ T9444] veth1_vlan: left promiscuous mode [ 189.273959][ T9444] veth0_vlan: left promiscuous mode [ 189.832234][ T9444] team0 (unregistering): Port device team_slave_1 removed [ 189.848484][ T53] Bluetooth: hci4: command tx timeout [ 189.876237][ T9444] team0 (unregistering): Port device team_slave_0 removed [ 190.208383][T10138] netlink: 'syz.4.1370': attribute type 1 has an invalid length. [ 190.246308][T10144] dummy0: entered promiscuous mode [ 190.289040][T10144] dummy0: left promiscuous mode [ 190.899043][T10189] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1384'. [ 190.923665][T10177] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.931536][T10177] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.040749][T10185] team0: Device ipvlan3 is already an upper device of the team interface [ 191.173327][T10080] chnl_net:caif_netlink_parms(): no params data found [ 191.450223][T10080] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.470478][T10080] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.482499][T10080] bridge_slave_0: entered allmulticast mode [ 191.501336][T10080] bridge_slave_0: entered promiscuous mode [ 191.516177][T10080] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.534198][T10080] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.551684][T10080] bridge_slave_1: entered allmulticast mode [ 191.561986][T10080] bridge_slave_1: entered promiscuous mode [ 191.604850][ T53] Bluetooth: hci1: command 0x0406 tx timeout [ 191.690811][T10080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.727196][T10080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.777483][T10245] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 191.787259][T10244] netlink: 'syz.0.1400': attribute type 1 has an invalid length. [ 191.826522][T10080] team0: Port device team_slave_0 added [ 191.838960][T10080] team0: Port device team_slave_1 added [ 191.899914][T10080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.917972][T10080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.950342][ T5096] Bluetooth: hci4: command tx timeout [ 191.955996][T10080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.982527][T10080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.990143][T10080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.992691][T10257] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1405'. [ 192.017667][T10080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.068316][T10257] netlink: 'syz.0.1405': attribute type 5 has an invalid length. [ 192.103035][T10258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1405'. [ 192.130812][T10080] hsr_slave_0: entered promiscuous mode [ 192.139380][T10080] hsr_slave_1: entered promiscuous mode [ 192.239089][T10265] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1407'. [ 192.254702][T10265] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1407'. [ 192.273897][T10265] netlink: 'syz.0.1407': attribute type 5 has an invalid length. [ 192.285647][T10265] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1407'. [ 192.790295][T10292] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1420'. [ 192.790710][T10294] netlink: 'syz.2.1421': attribute type 11 has an invalid length. [ 192.815408][T10292] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1420'. [ 192.835701][T10292] openvswitch: netlink: Geneve opt len 13 is not a multiple of 4. [ 192.958534][T10296] nbd: must specify a size in bytes for the device [ 192.979941][T10300] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 192.990777][T10080] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 193.116903][T10080] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 193.156810][T10080] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 193.220032][T10312] netlink: 'syz.0.1427': attribute type 4 has an invalid length. [ 193.233610][T10315] bridge_slave_1: left allmulticast mode [ 193.275892][T10315] bridge_slave_1: left promiscuous mode [ 193.301571][T10315] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.333413][T10315] bridge3: port 1(bridge_slave_1) entered blocking state [ 193.349258][T10315] bridge3: port 1(bridge_slave_1) entered disabled state [ 193.358893][T10315] bridge_slave_1: entered allmulticast mode [ 193.385935][T10315] bridge_slave_1: entered promiscuous mode [ 193.393100][T10315] bridge3: port 1(bridge_slave_1) entered blocking state [ 193.400343][T10315] bridge3: port 1(bridge_slave_1) entered forwarding state [ 193.430950][T10080] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 193.495707][T10311] bridge3: port 2(veth1_to_bond) entered blocking state [ 193.503843][T10311] bridge3: port 2(veth1_to_bond) entered disabled state [ 193.512290][T10311] veth1_to_bond: entered allmulticast mode [ 193.522708][T10311] veth1_to_bond: entered promiscuous mode [ 193.530346][T10311] bridge3: port 2(veth1_to_bond) entered blocking state [ 193.537586][T10311] bridge3: port 2(veth1_to_bond) entered forwarding state [ 193.577370][T10334] netlink: 'syz.2.1436': attribute type 1 has an invalid length. [ 193.637653][T10338] netlink: 'syz.0.1438': attribute type 13 has an invalid length. [ 193.796496][T10346] netlink: 'syz.2.1442': attribute type 4 has an invalid length. [ 193.877873][T10080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.903858][T10356] SET target dimension over the limit! [ 193.961003][T10080] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.975698][ T5137] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.982909][ T5137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.004787][ T5096] Bluetooth: hci4: command tx timeout [ 194.056134][ T5140] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.063311][ T5140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.161827][T10374] __nla_validate_parse: 7 callbacks suppressed [ 194.161848][T10374] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1448'. [ 194.211002][T10374] pim6reg: entered allmulticast mode [ 194.368121][T10380] netlink: 5300 bytes leftover after parsing attributes in process `syz.1.1451'. [ 194.393595][T10380] openvswitch: netlink: IP tunnel dst address not specified [ 194.658074][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.664932][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.707742][T10385] team0: entered promiscuous mode [ 194.713848][T10385] team_slave_0: entered promiscuous mode [ 194.732129][T10385] team_slave_1: entered promiscuous mode [ 194.746605][T10385] macvlan2: entered promiscuous mode [ 194.754007][T10393] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1455'. [ 194.772935][T10385] bond0: entered promiscuous mode [ 194.778227][T10385] bond_slave_0: entered promiscuous mode [ 194.808502][T10385] bond_slave_1: entered promiscuous mode [ 194.842296][T10385] dummy0: entered promiscuous mode [ 194.857987][T10387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1454'. [ 195.060958][T10402] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1457'. [ 195.098225][T10080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.267817][T10080] veth0_vlan: entered promiscuous mode [ 195.295469][T10080] veth1_vlan: entered promiscuous mode [ 195.385228][T10080] veth0_macvtap: entered promiscuous mode [ 195.417121][T10080] veth1_macvtap: entered promiscuous mode [ 195.511244][T10080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.550221][T10080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.560888][T10429] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1466'. [ 195.570381][T10080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.593702][T10080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.603972][T10080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.616155][T10080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.627024][T10080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.638521][T10080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.649699][T10080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.661910][T10080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.676111][T10080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.721234][T10080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.735603][T10080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.752526][T10080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.766404][T10080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.792423][T10080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.811790][T10080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.823228][T10080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.845934][T10080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.871930][T10080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.883778][T10080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.896028][T10080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.905335][T10441] tipc: Started in network mode [ 195.910326][T10441] tipc: Node identity 0000000000004c3a0000400000000001, cluster identity 4711 [ 195.926389][T10441] tipc: Enabling of bearer rejected, failed to enable media [ 195.953799][T10080] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.980273][T10080] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.990669][T10080] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.000105][T10080] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.024738][T10446] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1471'. [ 196.085203][ T5096] Bluetooth: hci4: command tx timeout [ 196.262345][ T7226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.274178][ T7226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.371039][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.392065][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.466197][T10467] netlink: 'syz.4.1481': attribute type 9 has an invalid length. [ 196.525110][T10470] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1483'. [ 196.568064][T10470] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1483'. [ 196.578333][T10470] openvswitch: netlink: Geneve opt len 13 is not a multiple of 4. [ 196.631441][T10478] netlink: 'syz.1.1485': attribute type 11 has an invalid length. [ 196.673011][T10478] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1485'. [ 196.849211][T10491] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 197.636968][T10531] netlink: 'syz.2.1507': attribute type 13 has an invalid length. [ 197.858109][T10539] syz_tun (unregistering): left allmulticast mode [ 197.986819][T10545] SET target dimension over the limit! [ 198.572378][T10570] macsec1: entered promiscuous mode [ 198.583270][T10570] macvlan1: entered promiscuous mode [ 198.589825][T10570] macsec1: entered allmulticast mode [ 198.605592][T10570] macvlan1: entered allmulticast mode [ 198.613934][T10570] veth1_vlan: entered allmulticast mode [ 198.760011][ T9456] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.559261][ T9456] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.655572][T10579] __nla_validate_parse: 7 callbacks suppressed [ 199.655590][T10579] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1526'. [ 199.736171][ T9456] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.978366][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 199.987859][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 200.034622][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 200.045370][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 200.060417][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 200.074177][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 200.137552][ T9456] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.289726][T10604] netlink: 'syz.4.1532': attribute type 10 has an invalid length. [ 200.315308][T10604] batman_adv: batadv1: Interface deactivated: netdevsim0 [ 200.357291][T10604] batman_adv: batadv1: Removing interface: netdevsim0 [ 200.573286][T10613] netlink: 'syz.1.1535': attribute type 21 has an invalid length. [ 200.748171][ T9456] bridge_slave_1: left allmulticast mode [ 200.754641][ T9456] bridge_slave_1: left promiscuous mode [ 200.760756][ T9456] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.796476][ T9456] bridge_slave_0: left allmulticast mode [ 200.813328][ T9456] bridge_slave_0: left promiscuous mode [ 200.833608][ T9456] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.917150][T10631] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1543'. [ 201.193829][ T9456] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.208477][ T9456] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.220483][ T9456] bond0 (unregistering): Released all slaves [ 201.378652][T10636] netlink: 'syz.0.1545': attribute type 11 has an invalid length. [ 201.394455][T10636] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1545'. [ 201.842383][T10588] chnl_net:caif_netlink_parms(): no params data found [ 201.931262][ T9456] hsr_slave_0: left promiscuous mode [ 201.959475][ T9456] hsr_slave_1: left promiscuous mode [ 201.982210][T10674] netlink: 'syz.4.1556': attribute type 17 has an invalid length. [ 201.994527][ T9456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.995353][T10675] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1557'. [ 202.003134][ T9456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.042224][ T9456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.062374][ T9456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.117380][ T9456] veth1_macvtap: left promiscuous mode [ 202.123110][ T9456] veth0_macvtap: left promiscuous mode [ 202.130018][ T9456] veth1_vlan: left promiscuous mode [ 202.137668][ T9456] veth0_vlan: left promiscuous mode [ 202.164456][ T53] Bluetooth: hci4: command tx timeout [ 202.601043][ T9456] team0 (unregistering): Port device team_slave_1 removed [ 202.640594][ T9456] team0 (unregistering): Port device team_slave_0 removed [ 202.968263][ T9449] ================================================================== [ 202.976374][ T9449] BUG: KASAN: slab-use-after-free in l2tp_tunnel_del_work+0xe5/0x330 [ 202.984463][ T9449] Read of size 8 at addr ffff88807995e0b8 by task kworker/u8:25/9449 [ 202.992513][ T9449] [ 202.994828][ T9449] CPU: 0 PID: 9449 Comm: kworker/u8:25 Not tainted 6.10.0-rc6-syzkaller-01259-g3abbd7ed8b76 #0 [ 203.005130][ T9449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 203.015182][ T9449] Workqueue: l2tp l2tp_tunnel_del_work [ 203.020683][ T9449] Call Trace: [ 203.023950][ T9449] [ 203.026866][ T9449] dump_stack_lvl+0x241/0x360 [ 203.031533][ T9449] ? __pfx_dump_stack_lvl+0x10/0x10 [ 203.036721][ T9449] ? __pfx__printk+0x10/0x10 [ 203.041297][ T9449] ? _printk+0xd5/0x120 [ 203.045434][ T9449] ? __virt_addr_valid+0x183/0x520 [ 203.050529][ T9449] ? __virt_addr_valid+0x183/0x520 [ 203.055655][ T9449] print_report+0x169/0x550 [ 203.060148][ T9449] ? __virt_addr_valid+0x183/0x520 [ 203.065255][ T9449] ? __virt_addr_valid+0x183/0x520 [ 203.070376][ T9449] ? __virt_addr_valid+0x44e/0x520 [ 203.075491][ T9449] ? __phys_addr+0xba/0x170 [ 203.079982][ T9449] ? l2tp_tunnel_del_work+0xe5/0x330 [ 203.085256][ T9449] kasan_report+0x143/0x180 [ 203.089763][ T9449] ? l2tp_tunnel_del_work+0xe5/0x330 [ 203.095036][ T9449] l2tp_tunnel_del_work+0xe5/0x330 [ 203.100141][ T9449] ? process_scheduled_works+0x945/0x1830 [ 203.105844][ T9449] process_scheduled_works+0xa2c/0x1830 [ 203.111380][ T9449] ? __pfx_process_scheduled_works+0x10/0x10 [ 203.117356][ T9449] ? assign_work+0x364/0x3d0 [ 203.121950][ T9449] worker_thread+0x86d/0xd50 [ 203.126527][ T9449] ? __kthread_parkme+0x169/0x1d0 [ 203.131534][ T9449] ? __pfx_worker_thread+0x10/0x10 [ 203.136629][ T9449] kthread+0x2f0/0x390 [ 203.140683][ T9449] ? __pfx_worker_thread+0x10/0x10 [ 203.145775][ T9449] ? __pfx_kthread+0x10/0x10 [ 203.150350][ T9449] ret_from_fork+0x4b/0x80 [ 203.154751][ T9449] ? __pfx_kthread+0x10/0x10 [ 203.159347][ T9449] ret_from_fork_asm+0x1a/0x30 [ 203.164107][ T9449] [ 203.167127][ T9449] [ 203.169450][ T9449] Allocated by task 10681: [ 203.173855][ T9449] kasan_save_track+0x3f/0x80 [ 203.178514][ T9449] __kasan_kmalloc+0x98/0xb0 [ 203.183087][ T9449] __kmalloc_noprof+0x1f9/0x400 [ 203.187921][ T9449] l2tp_session_create+0x3b/0xc20 [ 203.192925][ T9449] pppol2tp_connect+0xca3/0x17a0 [ 203.197846][ T9449] __sys_connect+0x2df/0x310 [ 203.202427][ T9449] __x64_sys_connect+0x7a/0x90 [ 203.207187][ T9449] do_syscall_64+0xf3/0x230 [ 203.211671][ T9449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.217555][ T9449] [ 203.219879][ T9449] Freed by task 24: [ 203.223680][ T9449] kasan_save_track+0x3f/0x80 [ 203.228355][ T9449] kasan_save_free_info+0x40/0x50 [ 203.233376][ T9449] poison_slab_object+0xe0/0x150 [ 203.238305][ T9449] __kasan_slab_free+0x37/0x60 [ 203.243055][ T9449] kfree+0x149/0x360 [ 203.246933][ T9449] __sk_destruct+0x58/0x5f0 [ 203.251420][ T9449] rcu_core+0xafd/0x1830 [ 203.255646][ T9449] handle_softirqs+0x2c4/0x970 [ 203.260388][ T9449] run_ksoftirqd+0xca/0x130 [ 203.264879][ T9449] smpboot_thread_fn+0x544/0xa30 [ 203.269815][ T9449] kthread+0x2f0/0x390 [ 203.273954][ T9449] ret_from_fork+0x4b/0x80 [ 203.278353][ T9449] ret_from_fork_asm+0x1a/0x30 [ 203.283099][ T9449] [ 203.285404][ T9449] Last potentially related work creation: [ 203.291102][ T9449] kasan_save_stack+0x3f/0x60 [ 203.295781][ T9449] __kasan_record_aux_stack+0xac/0xc0 [ 203.301167][ T9449] call_rcu+0x167/0xa70 [ 203.305303][ T9449] pppol2tp_release+0x24b/0x350 [ 203.310136][ T9449] sock_close+0xbc/0x240 [ 203.314365][ T9449] __fput+0x24a/0x8a0 [ 203.318347][ T9449] task_work_run+0x24f/0x310 [ 203.322937][ T9449] do_exit+0xa27/0x27e0 [ 203.327077][ T9449] do_group_exit+0x207/0x2c0 [ 203.331649][ T9449] get_signal+0x16a1/0x1740 [ 203.336156][ T9449] arch_do_signal_or_restart+0x96/0x860 [ 203.341695][ T9449] syscall_exit_to_user_mode+0xc9/0x360 [ 203.347232][ T9449] do_syscall_64+0x100/0x230 [ 203.351806][ T9449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.357681][ T9449] [ 203.360014][ T9449] The buggy address belongs to the object at ffff88807995e000 [ 203.360014][ T9449] which belongs to the cache kmalloc-1k of size 1024 [ 203.374061][ T9449] The buggy address is located 184 bytes inside of [ 203.374061][ T9449] freed 1024-byte region [ffff88807995e000, ffff88807995e400) [ 203.387950][ T9449] [ 203.390290][ T9449] The buggy address belongs to the physical page: [ 203.396699][ T9449] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79958 [ 203.405443][ T9449] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 203.413922][ T9449] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 203.421464][ T9449] page_type: 0xffffefff(slab) [ 203.426123][ T9449] raw: 00fff00000000040 ffff888015041dc0 dead000000000100 dead000000000122 [ 203.434684][ T9449] raw: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 203.443245][ T9449] head: 00fff00000000040 ffff888015041dc0 dead000000000100 dead000000000122 [ 203.451893][ T9449] head: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 203.460543][ T9449] head: 00fff00000000003 ffffea0001e65601 ffffffffffffffff 0000000000000000 [ 203.469207][ T9449] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 203.477871][ T9449] page dumped because: kasan: bad access detected [ 203.484273][ T9449] page_owner tracks the page as allocated [ 203.489964][ T9449] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 51, tgid 51 (kworker/u8:3), ts 66870498065, free_ts 66851955358 [ 203.511734][ T9449] post_alloc_hook+0x1f3/0x230 [ 203.516498][ T9449] get_page_from_freelist+0x2e4c/0x2f10 [ 203.522049][ T9449] __alloc_pages_noprof+0x256/0x6c0 [ 203.527235][ T9449] alloc_slab_page+0x5f/0x120 [ 203.531896][ T9449] allocate_slab+0x5a/0x2f0 [ 203.536382][ T9449] ___slab_alloc+0xcd1/0x14b0 [ 203.541037][ T9449] __slab_alloc+0x58/0xa0 [ 203.545348][ T9449] kmalloc_node_track_caller_noprof+0x281/0x440 [ 203.551575][ T9449] kmalloc_reserve+0x111/0x2a0 [ 203.556323][ T9449] __alloc_skb+0x1f3/0x440 [ 203.560719][ T9449] inet6_rt_notify+0xdf/0x290 [ 203.565386][ T9449] fib6_add+0x1e33/0x4430 [ 203.569715][ T9449] ip6_ins_rt+0x106/0x170 [ 203.574037][ T9449] __ipv6_ifa_notify+0x5d2/0x1230 [ 203.579055][ T9449] addrconf_dad_completed+0x181/0xcd0 [ 203.584411][ T9449] addrconf_dad_work+0xdc2/0x16f0 [ 203.589420][ T9449] page last free pid 5098 tgid 5098 stack trace: [ 203.595723][ T9449] free_unref_page+0xd22/0xea0 [ 203.600471][ T9449] __put_partials+0xeb/0x130 [ 203.605050][ T9449] put_cpu_partial+0x17c/0x250 [ 203.609814][ T9449] __slab_free+0x2ea/0x3d0 [ 203.614222][ T9449] qlist_free_all+0x9e/0x140 [ 203.618815][ T9449] kasan_quarantine_reduce+0x14f/0x170 [ 203.624272][ T9449] __kasan_slab_alloc+0x23/0x80 [ 203.629116][ T9449] kmalloc_trace_noprof+0x132/0x2c0 [ 203.634301][ T9449] kernfs_fop_open+0x3e0/0xd10 [ 203.639054][ T9449] do_dentry_open+0x970/0x1450 [ 203.643905][ T9449] vfs_open+0x3e/0x330 [ 203.647974][ T9449] path_openat+0x2c01/0x35f0 [ 203.652550][ T9449] do_filp_open+0x235/0x490 [ 203.657034][ T9449] do_sys_openat2+0x13e/0x1d0 [ 203.661711][ T9449] __x64_sys_openat+0x247/0x2a0 [ 203.666552][ T9449] do_syscall_64+0xf3/0x230 [ 203.671061][ T9449] [ 203.673377][ T9449] Memory state around the buggy address: [ 203.678990][ T9449] ffff88807995df80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 203.687031][ T9449] ffff88807995e000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 203.695072][ T9449] >ffff88807995e080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 203.703108][ T9449] ^ [ 203.708993][ T9449] ffff88807995e100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 203.717049][ T9449] ffff88807995e180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 203.725101][ T9449] ================================================================== [ 203.733202][ T9449] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 203.740413][ T9449] CPU: 0 PID: 9449 Comm: kworker/u8:25 Not tainted 6.10.0-rc6-syzkaller-01259-g3abbd7ed8b76 #0 [ 203.750721][ T9449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 203.760765][ T9449] Workqueue: l2tp l2tp_tunnel_del_work [ 203.766235][ T9449] Call Trace: [ 203.769500][ T9449] [ 203.772464][ T9449] dump_stack_lvl+0x241/0x360 [ 203.777130][ T9449] ? __pfx_dump_stack_lvl+0x10/0x10 [ 203.782314][ T9449] ? __pfx__printk+0x10/0x10 [ 203.786901][ T9449] ? vscnprintf+0x5d/0x90 [ 203.791252][ T9449] panic+0x349/0x860 [ 203.795184][ T9449] ? check_panic_on_warn+0x21/0xb0 [ 203.800290][ T9449] ? __pfx_panic+0x10/0x10 [ 203.804697][ T9449] ? mark_lock+0x9a/0x350 [ 203.809023][ T9449] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 203.814926][ T9449] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 203.820815][ T9449] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 203.827144][ T9449] ? print_report+0x502/0x550 [ 203.831810][ T9449] check_panic_on_warn+0x86/0xb0 [ 203.836750][ T9449] ? l2tp_tunnel_del_work+0xe5/0x330 [ 203.842045][ T9449] end_report+0x77/0x160 [ 203.846291][ T9449] kasan_report+0x154/0x180 [ 203.850782][ T9449] ? l2tp_tunnel_del_work+0xe5/0x330 [ 203.856073][ T9449] l2tp_tunnel_del_work+0xe5/0x330 [ 203.861192][ T9449] ? process_scheduled_works+0x945/0x1830 [ 203.866899][ T9449] process_scheduled_works+0xa2c/0x1830 [ 203.872457][ T9449] ? __pfx_process_scheduled_works+0x10/0x10 [ 203.878437][ T9449] ? assign_work+0x364/0x3d0 [ 203.883014][ T9449] worker_thread+0x86d/0xd50 [ 203.887614][ T9449] ? __kthread_parkme+0x169/0x1d0 [ 203.892664][ T9449] ? __pfx_worker_thread+0x10/0x10 [ 203.897781][ T9449] kthread+0x2f0/0x390 [ 203.901839][ T9449] ? __pfx_worker_thread+0x10/0x10 [ 203.906936][ T9449] ? __pfx_kthread+0x10/0x10 [ 203.911519][ T9449] ret_from_fork+0x4b/0x80 [ 203.915944][ T9449] ? __pfx_kthread+0x10/0x10 [ 203.920532][ T9449] ret_from_fork_asm+0x1a/0x30 [ 203.925295][ T9449] [ 203.928566][ T9449] Kernel Offset: disabled [ 203.932882][ T9449] Rebooting in 86400 seconds..