last executing test programs: 1m20.706709236s ago: executing program 0: r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000040)=0xffffffffffffffdb) recvmmsg(r0, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/190, 0xbe}, {&(0x7f0000000180)=""/111, 0x6f}, {&(0x7f0000000200)=""/38, 0x26}, {&(0x7f0000000240)=""/58, 0x3a}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x5, &(0x7f0000000300)=""/133, 0x85}, 0x4}, {{&(0x7f00000003c0)=@ax25={{0x3, @null}, [@remote, @bcast, @null, @rose, @bcast, @remote, @netrom, @rose]}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000001500)=""/182, 0xb6}, {&(0x7f00000015c0)=""/127, 0x7f}, {&(0x7f0000001640)=""/129, 0x81}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000002600)=""/159, 0x9f}, {&(0x7f0000001840)=""/64, 0x40}, {&(0x7f0000001880)=""/55, 0x37}, {&(0x7f00000018c0)=""/134, 0x86}, {&(0x7f0000001980)=""/222, 0xde}], 0x9, &(0x7f0000001b40)=""/218, 0xda}}, {{&(0x7f0000001c40)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001cc0)=""/139, 0x8b}, {&(0x7f0000001d80)=""/36, 0x24}, {&(0x7f0000001dc0)=""/190, 0xbe}], 0x3, &(0x7f0000001ec0)=""/123, 0x7b}, 0x81}, {{&(0x7f0000001f40)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000002340)=[{&(0x7f0000001fc0)=""/1, 0x1}, {&(0x7f0000002000)=""/141, 0x8d}, {&(0x7f00000020c0)=""/242, 0xf2}, {&(0x7f00000021c0)=""/123, 0x7b}, {&(0x7f0000002240)=""/240, 0xf0}], 0x5, &(0x7f00000023c0)=""/4, 0x4}, 0x8}, {{&(0x7f0000002400)=@llc, 0x80, &(0x7f0000003d00)=[{&(0x7f0000002480)=""/206, 0xce}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/212, 0xd4}, {&(0x7f0000002580)=""/117, 0x75}, {&(0x7f0000003c00)=""/85, 0x55}, {&(0x7f0000003c80)=""/118, 0x76}], 0x6, &(0x7f0000003d80)=""/12, 0xc}, 0x147}], 0x5, 0x12000, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000004200)={0x0, 0xfff}, &(0x7f0000004240)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000004280)={r2, @in={{0x2, 0x4e20, @local}}, 0x7f, 0x1f}, &(0x7f0000004340)=0x90) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000041c0)={0x1f, 0xdc09, @none, 0x8}, 0xe) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x40, 0x0, 0x7, 0x3, 0x0, 0x0, {}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8}]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x40}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000005c0)={'vxcan1\x00'}) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000000)=0x1bc, 0x4) r5 = socket(0x18, 0x0, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000480), &(0x7f00000004c0)=0x4) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000100)) r7 = socket(0x200000100000011, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300), 0x24}}, 0x0) getsockname$packet(r9, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r10, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x38}}, 0x4000000) bind$packet(r7, &(0x7f00000001c0)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @random="0fd126608032"}, 0x14) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="09041800f63e"], 0x3f00}], 0x1}, 0x0) 1m5.972582824s ago: executing program 0: r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000040)=0xffffffffffffffdb) recvmmsg(r0, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/190, 0xbe}, {&(0x7f0000000180)=""/111, 0x6f}, {&(0x7f0000000200)=""/38, 0x26}, {&(0x7f0000000240)=""/58, 0x3a}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x5, &(0x7f0000000300)=""/133, 0x85}, 0x4}, {{&(0x7f00000003c0)=@ax25={{0x3, @null}, [@remote, @bcast, @null, @rose, @bcast, @remote, @netrom, @rose]}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000001500)=""/182, 0xb6}, {&(0x7f00000015c0)=""/127, 0x7f}, {&(0x7f0000001640)=""/129, 0x81}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000002600)=""/159, 0x9f}, {&(0x7f0000001840)=""/64, 0x40}, {&(0x7f0000001880)=""/55, 0x37}, {&(0x7f00000018c0)=""/134, 0x86}, {&(0x7f0000001980)=""/222, 0xde}], 0x9, &(0x7f0000001b40)=""/218, 0xda}}, {{&(0x7f0000001c40)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001cc0)=""/139, 0x8b}, {&(0x7f0000001d80)=""/36, 0x24}, {&(0x7f0000001dc0)=""/190, 0xbe}], 0x3, &(0x7f0000001ec0)=""/123, 0x7b}, 0x81}, {{&(0x7f0000001f40)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000002340)=[{&(0x7f0000001fc0)=""/1, 0x1}, {&(0x7f0000002000)=""/141, 0x8d}, {&(0x7f00000020c0)=""/242, 0xf2}, {&(0x7f00000021c0)=""/123, 0x7b}, {&(0x7f0000002240)=""/240, 0xf0}], 0x5, &(0x7f00000023c0)=""/4, 0x4}, 0x8}, {{&(0x7f0000002400)=@llc, 0x80, &(0x7f0000003d00)=[{&(0x7f0000002480)=""/206, 0xce}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/212, 0xd4}, {&(0x7f0000002580)=""/117, 0x75}, {&(0x7f0000003c00)=""/85, 0x55}, {&(0x7f0000003c80)=""/118, 0x76}], 0x6, &(0x7f0000003d80)=""/12, 0xc}, 0x147}], 0x5, 0x12000, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000004200)={0x0, 0xfff}, &(0x7f0000004240)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000004280)={r2, @in={{0x2, 0x4e20, @local}}, 0x7f, 0x1f}, &(0x7f0000004340)=0x90) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000041c0)={0x1f, 0xdc09, @none, 0x8}, 0xe) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x40, 0x0, 0x7, 0x3, 0x0, 0x0, {}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8}]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x40}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000005c0)={'vxcan1\x00'}) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000000)=0x1bc, 0x4) r5 = socket(0x18, 0x0, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000480), &(0x7f00000004c0)=0x4) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000100)) r7 = socket(0x200000100000011, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300), 0x24}}, 0x0) getsockname$packet(r9, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r10, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x38}}, 0x4000000) bind$packet(r7, &(0x7f00000001c0)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @random="0fd126608032"}, 0x14) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="09041800f63e"], 0x3f00}], 0x1}, 0x0) 51.884662701s ago: executing program 0: r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000040)=0xffffffffffffffdb) recvmmsg(r0, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/190, 0xbe}, {&(0x7f0000000180)=""/111, 0x6f}, {&(0x7f0000000200)=""/38, 0x26}, {&(0x7f0000000240)=""/58, 0x3a}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x5, &(0x7f0000000300)=""/133, 0x85}, 0x4}, {{&(0x7f00000003c0)=@ax25={{0x3, @null}, [@remote, @bcast, @null, @rose, @bcast, @remote, @netrom, @rose]}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000001500)=""/182, 0xb6}, {&(0x7f00000015c0)=""/127, 0x7f}, {&(0x7f0000001640)=""/129, 0x81}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000002600)=""/159, 0x9f}, {&(0x7f0000001840)=""/64, 0x40}, {&(0x7f0000001880)=""/55, 0x37}, {&(0x7f00000018c0)=""/134, 0x86}, {&(0x7f0000001980)=""/222, 0xde}], 0x9, &(0x7f0000001b40)=""/218, 0xda}}, {{&(0x7f0000001c40)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001cc0)=""/139, 0x8b}, {&(0x7f0000001d80)=""/36, 0x24}, {&(0x7f0000001dc0)=""/190, 0xbe}], 0x3, &(0x7f0000001ec0)=""/123, 0x7b}, 0x81}, {{&(0x7f0000001f40)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000002340)=[{&(0x7f0000001fc0)=""/1, 0x1}, {&(0x7f0000002000)=""/141, 0x8d}, {&(0x7f00000020c0)=""/242, 0xf2}, {&(0x7f00000021c0)=""/123, 0x7b}, {&(0x7f0000002240)=""/240, 0xf0}], 0x5, &(0x7f00000023c0)=""/4, 0x4}, 0x8}, {{&(0x7f0000002400)=@llc, 0x80, &(0x7f0000003d00)=[{&(0x7f0000002480)=""/206, 0xce}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/212, 0xd4}, {&(0x7f0000002580)=""/117, 0x75}, {&(0x7f0000003c00)=""/85, 0x55}, {&(0x7f0000003c80)=""/118, 0x76}], 0x6, &(0x7f0000003d80)=""/12, 0xc}, 0x147}], 0x5, 0x12000, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000004200)={0x0, 0xfff}, &(0x7f0000004240)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000004280)={r2, @in={{0x2, 0x4e20, @local}}, 0x7f, 0x1f}, &(0x7f0000004340)=0x90) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000041c0)={0x1f, 0xdc09, @none, 0x8}, 0xe) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x40, 0x0, 0x7, 0x3, 0x0, 0x0, {}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8}]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x40}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000005c0)={'vxcan1\x00'}) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000000)=0x1bc, 0x4) r5 = socket(0x18, 0x0, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000480), &(0x7f00000004c0)=0x4) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000100)) r7 = socket(0x200000100000011, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300), 0x24}}, 0x0) getsockname$packet(r9, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r10, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x38}}, 0x4000000) bind$packet(r7, &(0x7f00000001c0)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @random="0fd126608032"}, 0x14) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="09041800f63e"], 0x3f00}], 0x1}, 0x0) 37.571902031s ago: executing program 0: r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000040)=0xffffffffffffffdb) recvmmsg(r0, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/190, 0xbe}, {&(0x7f0000000180)=""/111, 0x6f}, {&(0x7f0000000200)=""/38, 0x26}, {&(0x7f0000000240)=""/58, 0x3a}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x5, &(0x7f0000000300)=""/133, 0x85}, 0x4}, {{&(0x7f00000003c0)=@ax25={{0x3, @null}, [@remote, @bcast, @null, @rose, @bcast, @remote, @netrom, @rose]}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000001500)=""/182, 0xb6}, {&(0x7f00000015c0)=""/127, 0x7f}, {&(0x7f0000001640)=""/129, 0x81}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000002600)=""/159, 0x9f}, {&(0x7f0000001840)=""/64, 0x40}, {&(0x7f0000001880)=""/55, 0x37}, {&(0x7f00000018c0)=""/134, 0x86}, {&(0x7f0000001980)=""/222, 0xde}], 0x9, &(0x7f0000001b40)=""/218, 0xda}}, {{&(0x7f0000001c40)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001cc0)=""/139, 0x8b}, {&(0x7f0000001d80)=""/36, 0x24}, {&(0x7f0000001dc0)=""/190, 0xbe}], 0x3, &(0x7f0000001ec0)=""/123, 0x7b}, 0x81}, {{&(0x7f0000001f40)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000002340)=[{&(0x7f0000001fc0)=""/1, 0x1}, {&(0x7f0000002000)=""/141, 0x8d}, {&(0x7f00000020c0)=""/242, 0xf2}, {&(0x7f00000021c0)=""/123, 0x7b}, {&(0x7f0000002240)=""/240, 0xf0}], 0x5, &(0x7f00000023c0)=""/4, 0x4}, 0x8}, {{&(0x7f0000002400)=@llc, 0x80, &(0x7f0000003d00)=[{&(0x7f0000002480)=""/206, 0xce}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/212, 0xd4}, {&(0x7f0000002580)=""/117, 0x75}, {&(0x7f0000003c00)=""/85, 0x55}, {&(0x7f0000003c80)=""/118, 0x76}], 0x6, &(0x7f0000003d80)=""/12, 0xc}, 0x147}], 0x5, 0x12000, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000004200)={0x0, 0xfff}, &(0x7f0000004240)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000004280)={r2, @in={{0x2, 0x4e20, @local}}, 0x7f, 0x1f}, &(0x7f0000004340)=0x90) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000041c0)={0x1f, 0xdc09, @none, 0x8}, 0xe) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x40, 0x0, 0x7, 0x3, 0x0, 0x0, {}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8}]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x40}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000005c0)={'vxcan1\x00'}) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000000)=0x1bc, 0x4) r5 = socket(0x18, 0x0, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000480), &(0x7f00000004c0)=0x4) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000100)) r7 = socket(0x200000100000011, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300), 0x24}}, 0x0) getsockname$packet(r9, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r10, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x38}}, 0x4000000) bind$packet(r7, &(0x7f00000001c0)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @random="0fd126608032"}, 0x14) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="09041800f63e"], 0x3f00}], 0x1}, 0x0) 23.188674029s ago: executing program 0: r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000040)=0xffffffffffffffdb) recvmmsg(r0, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/190, 0xbe}, {&(0x7f0000000180)=""/111, 0x6f}, {&(0x7f0000000200)=""/38, 0x26}, {&(0x7f0000000240)=""/58, 0x3a}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x5, &(0x7f0000000300)=""/133, 0x85}, 0x4}, {{&(0x7f00000003c0)=@ax25={{0x3, @null}, [@remote, @bcast, @null, @rose, @bcast, @remote, @netrom, @rose]}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000001500)=""/182, 0xb6}, {&(0x7f00000015c0)=""/127, 0x7f}, {&(0x7f0000001640)=""/129, 0x81}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000002600)=""/159, 0x9f}, {&(0x7f0000001840)=""/64, 0x40}, {&(0x7f0000001880)=""/55, 0x37}, {&(0x7f00000018c0)=""/134, 0x86}, {&(0x7f0000001980)=""/222, 0xde}], 0x9, &(0x7f0000001b40)=""/218, 0xda}}, {{&(0x7f0000001c40)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001cc0)=""/139, 0x8b}, {&(0x7f0000001d80)=""/36, 0x24}, {&(0x7f0000001dc0)=""/190, 0xbe}], 0x3, &(0x7f0000001ec0)=""/123, 0x7b}, 0x81}, {{&(0x7f0000001f40)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000002340)=[{&(0x7f0000001fc0)=""/1, 0x1}, {&(0x7f0000002000)=""/141, 0x8d}, {&(0x7f00000020c0)=""/242, 0xf2}, {&(0x7f00000021c0)=""/123, 0x7b}, {&(0x7f0000002240)=""/240, 0xf0}], 0x5, &(0x7f00000023c0)=""/4, 0x4}, 0x8}, {{&(0x7f0000002400)=@llc, 0x80, &(0x7f0000003d00)=[{&(0x7f0000002480)=""/206, 0xce}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/212, 0xd4}, {&(0x7f0000002580)=""/117, 0x75}, {&(0x7f0000003c00)=""/85, 0x55}, {&(0x7f0000003c80)=""/118, 0x76}], 0x6, &(0x7f0000003d80)=""/12, 0xc}, 0x147}], 0x5, 0x12000, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000004200)={0x0, 0xfff}, &(0x7f0000004240)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000004280)={r2, @in={{0x2, 0x4e20, @local}}, 0x7f, 0x1f}, &(0x7f0000004340)=0x90) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000041c0)={0x1f, 0xdc09, @none, 0x8}, 0xe) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x40, 0x0, 0x7, 0x3, 0x0, 0x0, {}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8}]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x40}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000005c0)={'vxcan1\x00'}) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000000)=0x1bc, 0x4) r5 = socket(0x18, 0x0, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000480), &(0x7f00000004c0)=0x4) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000100)) r7 = socket(0x200000100000011, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300), 0x24}}, 0x0) getsockname$packet(r9, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r10, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x38}}, 0x4000000) bind$packet(r7, &(0x7f00000001c0)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @random="0fd126608032"}, 0x14) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="09041800f63e"], 0x3f00}], 0x1}, 0x0) 9.094693384s ago: executing program 0: r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000040)=0xffffffffffffffdb) recvmmsg(r0, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/190, 0xbe}, {&(0x7f0000000180)=""/111, 0x6f}, {&(0x7f0000000200)=""/38, 0x26}, {&(0x7f0000000240)=""/58, 0x3a}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x5, &(0x7f0000000300)=""/133, 0x85}, 0x4}, {{&(0x7f00000003c0)=@ax25={{0x3, @null}, [@remote, @bcast, @null, @rose, @bcast, @remote, @netrom, @rose]}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000001500)=""/182, 0xb6}, {&(0x7f00000015c0)=""/127, 0x7f}, {&(0x7f0000001640)=""/129, 0x81}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000002600)=""/159, 0x9f}, {&(0x7f0000001840)=""/64, 0x40}, {&(0x7f0000001880)=""/55, 0x37}, {&(0x7f00000018c0)=""/134, 0x86}, {&(0x7f0000001980)=""/222, 0xde}], 0x9, &(0x7f0000001b40)=""/218, 0xda}}, {{&(0x7f0000001c40)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001cc0)=""/139, 0x8b}, {&(0x7f0000001d80)=""/36, 0x24}, {&(0x7f0000001dc0)=""/190, 0xbe}], 0x3, &(0x7f0000001ec0)=""/123, 0x7b}, 0x81}, {{&(0x7f0000001f40)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000002340)=[{&(0x7f0000001fc0)=""/1, 0x1}, {&(0x7f0000002000)=""/141, 0x8d}, {&(0x7f00000020c0)=""/242, 0xf2}, {&(0x7f00000021c0)=""/123, 0x7b}, {&(0x7f0000002240)=""/240, 0xf0}], 0x5, &(0x7f00000023c0)=""/4, 0x4}, 0x8}, {{&(0x7f0000002400)=@llc, 0x80, &(0x7f0000003d00)=[{&(0x7f0000002480)=""/206, 0xce}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/212, 0xd4}, {&(0x7f0000002580)=""/117, 0x75}, {&(0x7f0000003c00)=""/85, 0x55}, {&(0x7f0000003c80)=""/118, 0x76}], 0x6, &(0x7f0000003d80)=""/12, 0xc}, 0x147}], 0x5, 0x12000, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000004200)={0x0, 0xfff}, &(0x7f0000004240)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000004280)={r2, @in={{0x2, 0x4e20, @local}}, 0x7f, 0x1f}, &(0x7f0000004340)=0x90) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000041c0)={0x1f, 0xdc09, @none, 0x8}, 0xe) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x40, 0x0, 0x7, 0x3, 0x0, 0x0, {}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8}]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x40}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000005c0)={'vxcan1\x00'}) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000000)=0x1bc, 0x4) r5 = socket(0x18, 0x0, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000480), &(0x7f00000004c0)=0x4) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000100)) r7 = socket(0x200000100000011, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300), 0x24}}, 0x0) getsockname$packet(r9, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r10, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x38}}, 0x4000000) bind$packet(r7, &(0x7f00000001c0)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @random="0fd126608032"}, 0x14) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="09041800f63e"], 0x3f00}], 0x1}, 0x0) 4.50452245s ago: executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000500)={&(0x7f00000000c0)=@can={{}, 0x11, 0x1, 0x4, 0x2, "040000000300"}, 0x10}, 0x1, 0x0, 0x0, 0xc010}, 0x0) 3.017839806s ago: executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80080400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) getsockopt$inet_int(r1, 0x10d, 0x0, &(0x7f0000000000), &(0x7f0000000240)=0x4) 2.702307159s ago: executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x88, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x20000000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r2]}, 0x90) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000680)=ANY=[@ANYBLOB="81e7000000000000000000000000000046ed3d4bb7316a97b01c49862e7dd79b1368162efedfa5cfa8ba889f1dab16e97e94536a8de2334d982f488652fbdf3e50b8e0e185bfb9e96398df7c21a5d9a1b3fb1422f0e7f9c45ecfc7d6ec48792cbef24d9f69e9460d5838f51bc300d9cc0f2d7e7b89f9bd253ea5abdbaf68185bcc2f6f8b0450ec662336bd1edbe99200000000000000"], 0x0, 0x1, 0x85, &(0x7f0000000340)=""/133, 0x0, 0x50, '\x00', 0x0, 0x1b, r3, 0x8, &(0x7f0000000400)={0x1}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x7, 0x1, 0x1}, 0x10, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000480)=[r2, r1], &(0x7f00000004c0)=[{0x3, 0x4, 0x9, 0x5}, {0x1, 0x4, 0x6, 0x9}, {0x0, 0x2, 0xa, 0x8}, {0x3, 0x3, 0xa}], 0x10, 0x6}, 0x90) socket$kcm(0x10, 0x0, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x26, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000811766be0000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0xfffffffc) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose}, [@null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@netrom={'nr', 0x0}, 0x10) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) 2.286371887s ago: executing program 3: socket$nl_route(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x1f}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000005a5602280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 2.172088785s ago: executing program 2: unshare(0x600) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x13, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000020000000000000004b84ffec850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000340)="a4", 0x1, 0x0, &(0x7f0000000400)={0xa, 0x4e20, 0x0, @private1}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000540)={{{@in=@multicast1, @in=@empty}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0xffffffffffffffff) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ppoll(&(0x7f0000000100)=[{r3, 0x3c16465341d63f59}], 0x1, 0x0, 0x0, 0x0) close(r2) 2.100437472s ago: executing program 4: unshare(0x600) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x13, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000020000000000000004b84ffec850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000340)="a4", 0x1, 0x0, &(0x7f0000000400)={0xa, 0x4e20, 0x0, @private1}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000540)={{{@in=@multicast1, @in=@empty}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0xffffffffffffffff) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ppoll(&(0x7f0000000100)=[{r3, 0x3c16465341d63f59}], 0x1, 0x0, 0x0, 0x0) close(r2) 1.750209834s ago: executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000740)="4d5b2570251059d73d1f3ff72b6ec3634768ffe344c5277676793fe00ed91428c8b468dd74c06ba2c9c7d5511dc5531a1b17d93c24818d072131d2e2e2b2fd87162de9", 0x43}, {&(0x7f00000007c0)="e025fa84da45dadeb4e018996dd1abc144b283d524584917c812894e7dd228f1401207007fb2ac8c79855512b3bc8285436c50a5e3acb649a95bd00eaf04440806cbd4cca46f3b47f41e5d421fa0850828976efffbc72a73675e366e218affc67d495404052d4295ffa9e96bfc3808196fabaa6adfa91bdaaaf8ee0b0a20c7326487c4fdb4bd0ea48692e9b74eef33a480a90671dd8b15709933d268043743644b98537558b0017f27cd63c94c25c0d574fc9f622f1bd8083a814a4d88a11888668496f99c2a2436a0d4cbcf9735ff3b70fc4d1455d2f43bcd159eb8b999c620c23de5478805aa92af82444099141433c6bde738", 0xf4}, {&(0x7f0000000900)="9d66d26d75b3f26086605bd56f39226eb20b1055cc14fc1b99273d560d4d6fc932dd9759cb6b411a76813de975f32ab6833562c71ac8fa15fc06d0a4aae3e37b96a5b5cd4968366947aa355b65e24ba9914784382969f53000f4", 0x5a}, {&(0x7f0000000980)="31b2d281ed3be105e2301e80e9f9af749660750c034df042e290ee4d6f03cd609ea24444b7f8e33f7a15490a706f0503d6ea2f1fa8c1f91e36456e99f4760871b840de5342b9b070cf68a37648", 0x4d}, {&(0x7f0000000a00)="8152e37ed76a90e9947da51f010b16e56308c031dca0afbb7936553e79030a6ce0250f1e1a53cf44e5b5c19995f50aa6d4910678e77a752c2e49bf9d9a5cdec432b3093d185cb8690c644dd2cc247caa3b7fd064b41a315203826a9926f6586c7a3cca1a30d843dccae8355d6a3cf44035b29762fb1b743d3f4b50f38baa069dded09e76eed72b8ff01918da5020ecbc831f07fc23add6ff1b4b191c45324b884f79de1a48582211e3cf0cbeab1af2131b7ec16b38fea00f4dc23f47c806d501ca03dbc4c10043e18494dcaafa6f4fc12753e2fa506f9e96268e4637f6cad3dc", 0xe0}, {&(0x7f0000000b00)="40a4d08c0db576fdab3875f2fa96fbba5bfcee8214fac83d997fc9faf922ef84d0f2956364ad6f3744fac40becc2bacf59b39ec45a402170ca3133c9c773ab0cd46bc4", 0x43}], 0x6, 0x0, 0x0, 0x60000c1}, 0x0) read$alg(r0, &(0x7f0000003780)=""/4096, 0x1000) 1.340743171s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000200000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x102, &(0x7f0000000400)=""/258, 0x0, 0x36}, 0x90) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x2c, 0x0, "6970db5e1a5e59ab54053861b182c1aa5bfa09d21b699379ab04eb29ee95bfd4aa2e83662eefcca878e3677208de36650006bfdf10d35ddf3148573cbc274287f6f94c55fc2a25f51f91b69e87873ea1"}, 0xd8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) socket$packet(0x11, 0x3, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="0063707573657420006e65742000626c6b696f20006e65745f636c73204b58c0195769072e37ba21cc8aec5a4c4a5aad549bff406ec3aa32c8ce9627e02a23107c9f813e466f0f1e7ce3e4061529c42d"], 0x1d) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f00800", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r3, &(0x7f00000007c0), &(0x7f00000000c0)=""/79}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000040)={@local}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}]}, 0x48}}, 0x0) 1.247960043s ago: executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000500)={&(0x7f00000000c0)=@can={{}, 0x11, 0x1, 0x4, 0x2, "040000000300"}, 0x10}, 0x1, 0x0, 0x0, 0xc010}, 0x0) 1.166633363s ago: executing program 2: unshare(0x20040600) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000040c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r3, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) listen(r5, 0x0) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a00)={r4}, 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r6, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000340)="02", 0x1, 0x0, &(0x7f0000000000)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r10}, 0x10) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r11, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r11, 0xfff) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) sendmsg$inet(r8, &(0x7f00000004c0)={&(0x7f00000002c0)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000440)="e87dde445412517a615ad002a33fc4d8d0bb0ae6eb8dc90139da20f0ea51805bbedf84849b0a2e6716724d774ed988a312c4adb96be63ae8091290748281680aa7c4d362", 0x44}], 0x1, &(0x7f0000000580)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9c}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@ssrr={0x89, 0x1b, 0xa1, [@local, @empty, @dev={0xac, 0x14, 0x14, 0x34}, @multicast2, @private=0xa010100, @empty]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0x3c, 0x1, 0x2, [{@rand_addr=0x64010101, 0x3}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2b}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0xa0}, 0x800) syz_emit_ethernet(0x4a, &(0x7f0000000840)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1a00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x4c}}, 0x0) 1.136548071s ago: executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40088a01, &(0x7f0000000000)=0x50000000) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000080)=ANY=[@ANYRES64, @ANYRES32], &(0x7f0000000040)='GPL\x00', 0x2000100, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000880)=0xffffffffffffffff, 0x4) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x1ff, 0x8, 0x2}, 0x48) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r6, &(0x7f0000000000), &(0x7f0000000280)=@udp=r7}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r6, &(0x7f0000000d40), 0x0}, 0x20) (async) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000940)={0xffffffffffffffff, 0x7, 0x18}, 0xc) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={0x1, 0xffffffffffffffff}, 0x4) (async) r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x5, &(0x7f0000000b80)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r10}]}, &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x35, &(0x7f0000000c40)=""/53}, 0x90) (async) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x6, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x5}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0xffffffffffffffff}, @generic={0x5, 0x4, 0xc, 0x5, 0xffffff7f}]}, &(0x7f0000000800)='syzkaller\x00', 0x9, 0x3d, &(0x7f0000000380)=""/61, 0x40f00, 0x8, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000008c0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000900)={0x4, 0xb, 0x8, 0x40}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000a40)=[r6, r4, r8, r9, r10, r11], &(0x7f0000000a80)=[{0x5, 0x5, 0x6, 0x1}, {0x4, 0x4, 0x5}, {0x3, 0x5, 0x0, 0xb}], 0x10, 0x8759}, 0x90) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x1b, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0xfff}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [@printk={@lx}, @jmp={0x5, 0x0, 0xa, 0x0, 0x3, 0x6}, @alu={0x7, 0x0, 0x0, 0x4, 0x3, 0xfffffffffffffffe, 0x4}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0xfffffffa, 0x0, 0x0, 0x41100, 0x5d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640)={0x2, 0xf, 0x2, 0x9}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000680)=[{0x0, 0x5, 0x9}, {0x0, 0x1, 0x9, 0x6}, {0x4, 0x5, 0x9, 0xa}, {0x1, 0x3, 0x2, 0x8}, {0x5, 0x3, 0xc, 0x7}], 0x10, 0xffffffff}, 0x90) recvmsg$can_raw(r12, &(0x7f00000001c0)={&(0x7f00000000c0)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000240)=""/130, 0x82}], 0x1}, 0x2020) (async) shutdown(r3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0xffe) (async) r13 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r13, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f94c24fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async) r14 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r14, 0x28, 0x2, &(0x7f0000000040)=0xc56e, 0x8) 1.029603344s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r0}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e03002a000b05d25a806c8c6f94f90424fc601100077a0a000312050282c137153e370e0c1180fc", 0x29}], 0x1}, 0x0) 899.653777ms ago: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000881}, 0x0) socket$kcm(0x29, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, 0x1, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @empty}]}, @CTA_LABELS_MASK={0x24, 0x17, [0x0, 0x5, 0x3, 0x2, 0x3, 0x4, 0x3a7b9fea, 0x0]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_MARK={0x8}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'netbios-ns\x00'}}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x20008000) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @remote, @multicast1}, &(0x7f0000000300)=0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x2, 0x8, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8005) r4 = accept$ax25(0xffffffffffffffff, &(0x7f0000000440)={{0x3, @default}, [@null, @default, @netrom, @default, @bcast, @netrom, @remote, @default]}, &(0x7f00000004c0)=0x48) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000500)) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r1) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x6a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, 0x4, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc004) unshare(0x40020000) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r5, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x810}, 0x8854) syz_genetlink_get_family_id$nl802154(&(0x7f0000000980), r1) syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/uts\x00') r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000b00), r1) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2200}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x58, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x23}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008800}, 0x4000) socket$kcm(0x29, 0x5, 0x0) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000c80)) getgid() 869.517708ms ago: executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x88, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x20000000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r2]}, 0x90) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000680)=ANY=[@ANYBLOB="81e7000000000000000000000000000046ed3d4bb7316a97b01c49862e7dd79b1368162efedfa5cfa8ba889f1dab16e97e94536a8de2334d982f488652fbdf3e50b8e0e185bfb9e96398df7c21a5d9a1b3fb1422f0e7f9c45ecfc7d6ec48792cbef24d9f69e9460d5838f51bc300d9cc0f2d7e7b89f9bd253ea5abdbaf68185bcc2f6f8b0450ec662336bd1edbe99200000000000000"], 0x0, 0x1, 0x85, &(0x7f0000000340)=""/133, 0x0, 0x50, '\x00', 0x0, 0x1b, r3, 0x8, &(0x7f0000000400)={0x1}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x7, 0x1, 0x1}, 0x10, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000480)=[r2, r1], &(0x7f00000004c0)=[{0x3, 0x4, 0x9, 0x5}, {0x1, 0x4, 0x6, 0x9}, {0x0, 0x2, 0xa, 0x8}, {0x3, 0x3, 0xa}], 0x10, 0x6}, 0x90) socket$kcm(0x10, 0x0, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x26, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000811766be0000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0xfffffffc) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose}, [@null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@netrom={'nr', 0x0}, 0x10) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) 838.872913ms ago: executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFCONF(r0, 0x40086602, &(0x7f0000000d80)=@buf) 690.095509ms ago: executing program 1: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa"], &(0x7f0000281ffc)='GPL\x00'}, 0x48) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000280)='hybla\x00', 0x6) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 575.868435ms ago: executing program 1: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000340)={0x0, 0xfffffffffffffcf8, &(0x7f0000000300)={&(0x7f0000000280)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x2c, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x140e, 0x4, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xffffffffffffff07, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_PDN={0x8}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX, @RDMA_NLDEV_ATTR_DEV_INDEX, @RDMA_NLDEV_ATTR_DEV_INDEX={0xfffffe2b}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x0, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x0, 0x3, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x45}, 0x44090) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0xfffffffffffffe8d) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000240)="89", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) close(r3) socket$netlink(0x10, 0x3, 0x0) preadv(r4, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0xe}], 0x3e8, 0x1008, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r6, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) syz_emit_ethernet(0x98, &(0x7f0000000380)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x62, 0x73, 0x0, @local, @remote, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"b1a0f0935e2200796ce99d31ddbc04c17b118d441168aac42748dc87377b96d29bf3128bb9b64596d64debc05a20845dea318540bccebd871aa496d6e8592a1d68aef22c3f6592ba5f38c0c65c15"}}}}}}}, 0x0) bind$unix(r8, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r8, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) connect$unix(r9, &(0x7f0000000000)=@file={0x1}, 0x6e) 502.076908ms ago: executing program 2: socket$nl_route(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x1f}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000005a5602280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 463.149802ms ago: executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x60, 0x3, 0x7, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7fff}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0xc4431490e5ad2135}, 0x4) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x48, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x48}}, 0x0) 408.838227ms ago: executing program 4: unshare(0x600) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x13, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000020000000000000004b84ffec850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000340)="a4", 0x1, 0x0, &(0x7f0000000400)={0xa, 0x4e20, 0x0, @private1}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000540)={{{@in=@multicast1, @in=@empty}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0xffffffffffffffff) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ppoll(&(0x7f0000000100)=[{r3, 0x3c16465341d63f59}], 0x1, 0x0, 0x0, 0x0) close(r2) 361.17792ms ago: executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000500)={&(0x7f00000000c0)=@can={{}, 0x11, 0x1, 0x4, 0x2, "040000000300"}, 0x10}, 0x1, 0x0, 0x0, 0xc010}, 0x0) 141.828719ms ago: executing program 3: unshare(0x600) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x13, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000020000000000000004b84ffec850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000340)="a4", 0x1, 0x0, &(0x7f0000000400)={0xa, 0x4e20, 0x0, @private1}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000540)={{{@in=@multicast1, @in=@empty}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0xffffffffffffffff) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ppoll(&(0x7f0000000100)=[{r3, 0x3c16465341d63f59}], 0x1, 0x0, 0x0, 0x0) close(r2) 122.309665ms ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r0}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e03002a000b05d25a806c8c6f94f90424fc601100077a0a000312050282c137153e370e0c1180fc", 0x29}], 0x1}, 0x0) 0s ago: executing program 1: unshare(0x20040600) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000040c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r3, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r5, 0x101, 0x19, &(0x7f0000001c40)=@bpq0, 0x10) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a00)={r4}, 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r6, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000340)="02", 0x1, 0x0, &(0x7f0000000000)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r10}, 0x10) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r11, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r11, 0xfff) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) sendmsg$inet(r8, &(0x7f00000004c0)={&(0x7f00000002c0)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000440)="e87dde445412517a615ad002a33fc4d8d0bb0ae6eb8dc90139da20f0ea51805bbedf84849b0a2e6716724d774ed988a312c4adb96be63ae8091290748281680aa7c4d362", 0x44}], 0x1, &(0x7f0000000580)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9c}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@ssrr={0x89, 0x1b, 0xa1, [@local, @empty, @dev={0xac, 0x14, 0x14, 0x34}, @multicast2, @private=0xa010100, @empty]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0x3c, 0x1, 0x2, [{@rand_addr=0x64010101, 0x3}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2b}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0xa0}, 0x800) syz_emit_ethernet(0x4a, &(0x7f0000000840)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1a00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x4c}}, 0x0) kernel console output (not intermixed with test programs): ng interface: batadv_slave_0 [ 228.008738][ T9912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.069638][ T9912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.091900][T10049] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 228.121979][ T9912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.130933][ T9912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.173346][ T8595] net_ratelimit: 38 callbacks suppressed [ 228.173369][ T8595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.202343][ T9912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.218294][T10057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.291720][ T9912] hsr_slave_0: entered promiscuous mode [ 228.301301][T10057] xt_TPROXY: Can be used only with -p tcp or -p udp [ 228.313281][ T9912] hsr_slave_1: entered promiscuous mode [ 228.322884][ T9912] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 228.330595][ T9912] Cannot create hsr debugfs directory [ 228.663801][T10067] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'. [ 228.684878][T10067] 0ªX¹¦D: renamed from gretap0 (while UP) [ 228.695308][T10067] 0ªX¹¦D: entered allmulticast mode [ 228.701461][T10067] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 229.138753][T10082] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 229.220588][T10083] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 229.255153][T10082] team0: Port device hsr_slave_0 added [ 229.272854][ T5165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.282735][T10083] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 229.433254][ T5124] Bluetooth: hci3: command tx timeout [ 229.457833][ T9912] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 229.473602][ T9912] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 229.494138][ T9912] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 229.536129][ T9912] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 229.773466][T10096] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 229.807121][ T9912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.861016][ T9912] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.915136][ T5165] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.922376][ T5165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.966614][T10103] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 229.978301][T10103] netlink: 197276 bytes leftover after parsing attributes in process `syz-executor.4'. [ 229.992635][ T8595] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.999913][ T8595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.054758][T10107] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'. [ 230.080988][T10107] 0ªX¹¦D: renamed from gretap0 (while UP) [ 230.090541][T10107] 0ªX¹¦D: entered allmulticast mode [ 230.098051][T10107] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 230.197807][ T9912] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 230.218149][ T9912] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 230.247798][T10113] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 230.445422][T10125] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 230.698413][ T9912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.835695][ T9912] veth0_vlan: entered promiscuous mode [ 230.859918][ T9912] veth1_vlan: entered promiscuous mode [ 230.925967][ T9912] veth0_macvtap: entered promiscuous mode [ 230.945047][ T9912] veth1_macvtap: entered promiscuous mode [ 231.000880][ T9912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.029883][ T9912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.054126][ T9912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.065768][ T9912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.076389][ T9912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.090714][T10148] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 231.099182][T10148] netlink: 197276 bytes leftover after parsing attributes in process `syz-executor.3'. [ 231.109440][ T9912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.132687][ T9912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.160461][ T9912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.174117][ T9912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.184911][ T9912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.199327][ T9912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.217349][ T9912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.239895][ T9912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.250110][ T9912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.261241][ T9912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.271486][ T9912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.296561][ T9912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.310977][ T9912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.342327][ T9912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.358025][ T9912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.385904][ T9912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.409790][ T9912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.458502][ T9912] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.481583][ T9912] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.509814][ T9912] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.530320][ T5124] Bluetooth: hci3: command tx timeout [ 231.559136][ T9912] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.582776][T10163] netlink: 240 bytes leftover after parsing attributes in process `syz-executor.1'. [ 231.964835][ T5654] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.004434][ T5654] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.104440][ T5661] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.124967][ T5661] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.297090][T10186] sctp: [Deprecated]: syz-executor.1 (pid 10186) Use of struct sctp_assoc_value in delayed_ack socket option. [ 232.297090][T10186] Use struct sctp_sack_info instead [ 232.460006][T10196] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 232.953993][T10216] __nla_validate_parse: 2 callbacks suppressed [ 232.954014][T10216] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 234.235589][T10256] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.258291][T10256] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.286144][T10256] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.303271][ T5654] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.307136][T10256] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.379243][T10256] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.422642][T10256] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.445736][T10256] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.463594][T10256] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.486165][T10256] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.506776][T10256] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.904872][T10281] x_tables: duplicate underflow at hook 2 [ 235.416556][ T5116] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 235.437557][ T5116] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 235.447222][ T5116] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 235.460985][ T5116] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 235.468119][T10307] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 235.478771][ T5116] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 235.486577][ T5116] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 235.571894][ T5654] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.715859][ T5654] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.773249][T10312] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 235.808630][T10312] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 235.900771][ T5654] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.924511][T10301] lo speed is unknown, defaulting to 1000 [ 236.143210][ T5654] bridge_slave_1: left allmulticast mode [ 236.148929][ T5654] bridge_slave_1: left promiscuous mode [ 236.156436][ T5654] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.199048][ T5654] bridge_slave_0: left allmulticast mode [ 236.224150][ T5654] bridge_slave_0: left promiscuous mode [ 236.241482][ T5654] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.937146][ T5654] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.949683][ T5654] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.965509][ T5654] bond0 (unregistering): Released all slaves [ 237.049752][T10336] netlink: 'syz-executor.2': attribute type 30 has an invalid length. [ 237.102027][T10343] lo speed is unknown, defaulting to 1000 [ 237.270196][T10357] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 237.415945][T10363] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 237.567828][T10301] chnl_net:caif_netlink_parms(): no params data found [ 237.576328][T10371] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 237.586801][T10371] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 237.609443][ T5116] Bluetooth: hci3: command tx timeout [ 237.609443][T10371] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 237.617369][T10371] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 237.687304][ T5654] hsr_slave_0: left promiscuous mode [ 237.702978][ T5654] hsr_slave_1: left promiscuous mode [ 237.725197][ T5654] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.741334][ T5654] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.755897][ T5654] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.771368][ T5654] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.808069][ T5654] veth1_macvtap: left promiscuous mode [ 237.814708][ T5654] veth0_macvtap: left promiscuous mode [ 237.820868][ T5654] veth1_vlan: left promiscuous mode [ 237.826602][ T5654] veth0_vlan: left promiscuous mode [ 237.852049][ T29] audit: type=1804 audit(1717693540.999:5): pid=10382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1643416058/syzkaller.KmcJwE/324/memory.events" dev="sda1" ino=1960 res=1 errno=0 [ 238.651369][ T5654] team0 (unregistering): Port device team_slave_1 removed [ 238.708653][ T5654] team0 (unregistering): Port device team_slave_0 removed [ 239.278787][T10385] netlink: 'syz-executor.1': attribute type 30 has an invalid length. [ 239.567764][T10301] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.612949][T10301] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.620274][T10301] bridge_slave_0: entered allmulticast mode [ 239.654812][T10301] bridge_slave_0: entered promiscuous mode [ 239.674289][T10301] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.682431][ T5116] Bluetooth: hci3: command tx timeout [ 239.703449][T10301] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.712669][T10301] bridge_slave_1: entered allmulticast mode [ 239.720969][T10301] bridge_slave_1: entered promiscuous mode [ 239.797255][T10301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.811626][T10301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.850029][T10415] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 239.933103][T10415] team0: Device veth1_vlan failed to register rx_handler [ 240.019601][T10301] team0: Port device team_slave_0 added [ 240.072399][ C1] net_ratelimit: 21 callbacks suppressed [ 240.072424][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.110328][T10414] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 240.147879][T10301] team0: Port device team_slave_1 added [ 240.242427][T10423] team0: left allmulticast mode [ 240.247386][T10423] team_slave_0: left allmulticast mode [ 240.256247][T10423] team_slave_1: left allmulticast mode [ 240.262344][T10423] bridge0: port 3(team0) entered disabled state [ 240.290626][T10423] team0: Cannot enslave team device to itself [ 240.309100][T10301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.317319][T10301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.344589][T10301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.365585][T10427] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 240.397481][T10301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.410728][T10301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.463834][T10301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.488573][T10431] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 240.539847][T10415] syz-executor.2 (10415) used greatest stack depth: 17072 bytes left [ 240.584557][T10439] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.3'. [ 240.597268][T10439] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.3'. [ 240.599895][T10301] hsr_slave_0: entered promiscuous mode [ 240.628614][T10301] hsr_slave_1: entered promiscuous mode [ 240.639050][T10301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 240.647782][T10301] Cannot create hsr debugfs directory [ 241.005522][T10453] lo speed is unknown, defaulting to 1000 [ 241.410555][T10466] lo speed is unknown, defaulting to 1000 [ 241.753341][ T5116] Bluetooth: hci3: command tx timeout [ 242.013974][T10301] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 242.085629][T10301] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 242.115586][T10301] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 242.130153][T10492] xt_ecn: cannot match TCP bits for non-tcp packets [ 242.143001][T10301] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 242.299270][T10469] SET target dimension over the limit! [ 242.405096][T10301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.440026][T10301] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.458365][ T8595] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.465727][ T8595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.529584][ T5165] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.536918][ T5165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.547691][T10505] lo speed is unknown, defaulting to 1000 [ 243.101465][T10516] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 243.212255][T10516] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 243.217667][T10524] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 243.449337][T10532] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 243.478734][T10301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.637252][T10301] veth0_vlan: entered promiscuous mode [ 243.675741][T10301] veth1_vlan: entered promiscuous mode [ 243.794461][T10301] veth0_macvtap: entered promiscuous mode [ 243.832972][ T5116] Bluetooth: hci3: command tx timeout [ 243.836403][T10301] veth1_macvtap: entered promiscuous mode [ 243.911449][T10545] lo speed is unknown, defaulting to 1000 [ 243.942940][T10301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.961886][T10301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.978028][T10301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.989074][T10301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.000251][T10301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.010993][T10301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.021265][T10301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.031815][T10301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.044509][T10301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.055230][T10301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.067444][T10301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.180167][T10557] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 244.229350][T10301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.240198][T10301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.251980][T10301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.267140][T10301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.277654][T10301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.288955][T10301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.299110][T10301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.311676][T10301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.329964][T10301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.341483][T10301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.353724][T10301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.366398][T10557] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 244.442976][T10301] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.462286][T10301] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.479770][T10301] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.491554][T10301] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.828121][ T5678] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.839103][ T5678] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.932482][ T5678] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.941187][ T5678] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.355088][T10593] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 245.378744][T10593] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 245.529590][T10604] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 245.538890][T10604] netlink: 197276 bytes leftover after parsing attributes in process `syz-executor.3'. [ 245.584049][T10605] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 246.195910][T10610] mac80211_hwsim hwsim3 ÿÿÿÿÿÿ: renamed from wlan1 (while UP) [ 246.532809][T10627] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 246.567619][T10627] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 246.721956][T10634] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 246.733455][T10634] netlink: 197276 bytes leftover after parsing attributes in process `syz-executor.4'. [ 246.881116][T10639] lo speed is unknown, defaulting to 1000 [ 247.380105][T10663] xt_CT: You must specify a L4 protocol and not use inversions on it [ 247.528970][ T5678] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.933155][T10678] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 247.941405][T10678] netlink: 197276 bytes leftover after parsing attributes in process `syz-executor.3'. [ 248.066770][ T5124] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 248.078091][ T5124] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 248.088959][ T5124] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 248.098512][ T5124] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 248.111514][ T5124] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 248.120070][ T5124] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 248.170297][T10682] lo speed is unknown, defaulting to 1000 [ 248.544723][T10690] lo speed is unknown, defaulting to 1000 [ 248.787396][ T5678] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.895210][T10699] pim6reg: entered allmulticast mode [ 248.942961][T10682] chnl_net:caif_netlink_parms(): no params data found [ 249.124537][ T5678] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.216245][T10694] pim6reg: left allmulticast mode [ 249.374699][ T5678] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.437576][T10715] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 249.558970][T10682] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.590326][T10682] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.612514][T10682] bridge_slave_0: entered allmulticast mode [ 249.621070][T10682] bridge_slave_0: entered promiscuous mode [ 249.666276][T10682] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.674636][T10682] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.685778][T10682] bridge_slave_1: entered allmulticast mode [ 249.695416][T10682] bridge_slave_1: entered promiscuous mode [ 249.790491][T10719] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 249.817549][T10725] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 249.833387][T10725] netlink: 197276 bytes leftover after parsing attributes in process `syz-executor.3'. [ 249.929574][T10682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.974726][T10682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.178069][T10682] team0: Port device team_slave_0 added [ 250.204795][ T5678] bridge_slave_1: left allmulticast mode [ 250.210517][ T5678] bridge_slave_1: left promiscuous mode [ 250.242970][ T5116] Bluetooth: hci3: command tx timeout [ 250.272817][ T5678] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.319796][ T5678] bridge_slave_0: left allmulticast mode [ 250.354890][ T5678] bridge_slave_0: left promiscuous mode [ 250.379306][ T5678] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.248276][ T5678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.270665][ T5678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.286125][ T5678] bond0 (unregistering): Released all slaves [ 251.304874][T10682] team0: Port device team_slave_1 added [ 251.406335][T10736] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 251.438539][T10738] lo speed is unknown, defaulting to 1000 [ 251.662443][T10682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.669445][T10682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.713835][T10682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.785311][T10682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.809370][T10682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.868435][T10682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.196683][ T5678] hsr_slave_0: left promiscuous mode [ 252.218188][ T5678] hsr_slave_1: left promiscuous mode [ 252.232543][ T5678] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.251507][ T5678] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.264348][ T5678] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.280857][ T5678] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.323488][ T5116] Bluetooth: hci3: command tx timeout [ 252.374031][ T5678] veth1_macvtap: left promiscuous mode [ 252.385134][T10775] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 252.401248][ T5678] veth0_macvtap: left promiscuous mode [ 252.407544][ T5678] veth1_vlan: left promiscuous mode [ 252.413343][T10775] netlink: 197276 bytes leftover after parsing attributes in process `syz-executor.1'. [ 252.423966][ T5678] veth0_vlan: left promiscuous mode [ 253.407504][ T5678] team0 (unregistering): Port device team_slave_1 removed [ 253.455362][ T5678] team0 (unregistering): Port device team_slave_0 removed [ 254.013831][T10770] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 254.051580][T10781] bond0: (slave netdevsim0): Releasing backup interface [ 254.074320][T10781] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 254.103672][T10682] hsr_slave_0: entered promiscuous mode [ 254.130375][T10682] hsr_slave_1: entered promiscuous mode [ 254.138587][T10682] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 254.146596][T10682] Cannot create hsr debugfs directory [ 254.392349][ T5116] Bluetooth: hci3: command tx timeout [ 254.942945][T10831] pim6reg: entered allmulticast mode [ 254.986407][T10840] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 255.121474][ T29] audit: type=1804 audit(1717693558.269:6): pid=10834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir867327418/syzkaller.y95cc9/133/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 [ 255.239567][T10821] pim6reg: left allmulticast mode [ 255.426206][T10840] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 255.610644][T10854] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 255.647547][T10854] netlink: 197276 bytes leftover after parsing attributes in process `syz-executor.2'. [ 255.750228][T10860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.830998][T10682] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 255.859746][T10682] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 255.887411][T10682] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 255.923431][T10682] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 256.157134][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.164203][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.275167][T10682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.325774][T10682] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.361380][T10882] lo speed is unknown, defaulting to 1000 [ 256.365986][ T5111] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.374634][ T5111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.413597][ T5111] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.420843][ T5111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.472580][ T5116] Bluetooth: hci3: command tx timeout [ 256.792613][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.826795][T10891] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.4'. [ 256.966658][T10900] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 257.016193][T10900] netlink: 197276 bytes leftover after parsing attributes in process `syz-executor.4'. [ 257.417371][T10682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.474674][T10920] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 257.550537][T10924] lo speed is unknown, defaulting to 1000 [ 257.568359][T10920] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 257.607408][T10925] lo speed is unknown, defaulting to 1000 [ 257.717193][T10936] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 257.734228][T10938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.815272][T10936] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 257.824385][T10682] veth0_vlan: entered promiscuous mode [ 257.832546][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.834324][T10936] netlink: 212848 bytes leftover after parsing attributes in process `syz-executor.3'. [ 257.869616][T10682] veth1_vlan: entered promiscuous mode [ 258.275738][T10682] veth0_macvtap: entered promiscuous mode [ 258.335849][T10963] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 258.348507][T10682] veth1_macvtap: entered promiscuous mode [ 258.350511][T10963] netlink: 197276 bytes leftover after parsing attributes in process `syz-executor.4'. [ 258.413141][T10966] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 258.529156][T10969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.549747][T10969] bond1: (slave batadv0): Enslaving as an active interface with an up link [ 258.631785][T10966] 8021q: adding VLAN 0 to HW filter on device bond1 [ 258.645309][T10682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.656059][T10682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.669238][T10682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.681415][T10682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.691601][T10682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.711815][T10682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.742811][T10682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.753521][T10682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.763583][T10682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.774216][T10682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.792467][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.795782][T10682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.994235][T10979] lo speed is unknown, defaulting to 1000 [ 258.997692][T10682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.011244][T10682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.031753][T10682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.060437][T10682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.076083][T10682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.090461][T10682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.100650][T10682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.111464][T10682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.123643][T10682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.134293][T10682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.148259][T10682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.241601][T10682] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.251074][T10682] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.269166][T10682] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.290327][T10682] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.569347][T11001] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 259.832456][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.902775][ T5690] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.913965][ T5690] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.042362][ T5654] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.051135][ T5654] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.150183][ T29] audit: type=1804 audit(1717693563.299:7): pid=11009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1643416058/syzkaller.KmcJwE/364/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 260.390459][T11024] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 260.404964][T11024] netlink: 197276 bytes leftover after parsing attributes in process `syz-executor.3'. [ 260.786520][T11036] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 261.114927][ T5669] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.416908][ T5669] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.448855][T11059] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 261.725502][ T5669] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.953650][ T5669] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.104144][ T5124] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 262.115013][ T5124] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 262.124570][ T5124] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 262.140638][ T5124] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 262.149229][ T5124] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 262.158376][ T5124] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 262.254804][ T5669] bridge_slave_1: left allmulticast mode [ 262.260760][ T5669] bridge_slave_1: left promiscuous mode [ 262.267103][ T5669] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.284114][ T5669] bridge_slave_0: left allmulticast mode [ 262.291088][ T5669] bridge_slave_0: left promiscuous mode [ 262.301035][ T5669] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.918698][T11104] __nla_validate_parse: 2 callbacks suppressed [ 262.918722][T11104] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 262.934933][T11104] openvswitch: netlink: Flow key attr not present in new flow. [ 262.965558][ T5669] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.990246][ T5669] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.016205][ T5669] bond0 (unregistering): Released all slaves [ 263.055840][T11085] lo speed is unknown, defaulting to 1000 [ 263.181615][T11108] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 263.220205][T11108] netlink: 197276 bytes leftover after parsing attributes in process `syz-executor.4'. [ 263.246712][T11094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.710278][ T5669] hsr_slave_0: left promiscuous mode [ 263.726186][ T5669] hsr_slave_1: left promiscuous mode [ 263.734230][ T5669] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.749629][ T5669] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.760858][ T5669] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.771089][ T5669] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.838294][ T5669] veth1_macvtap: left promiscuous mode [ 263.846979][ T5669] veth0_macvtap: left promiscuous mode [ 263.854784][ T5669] veth1_vlan: left promiscuous mode [ 263.860354][ T5669] veth0_vlan: left promiscuous mode [ 264.232786][ T5116] Bluetooth: hci3: command tx timeout [ 264.712047][ T5669] team0 (unregistering): Port device team_slave_1 removed [ 264.776435][ T5669] team0 (unregistering): Port device team_slave_0 removed [ 265.372696][T11085] chnl_net:caif_netlink_parms(): no params data found [ 265.840121][T11171] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 265.888981][T11085] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.897981][T11085] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.916625][T11085] bridge_slave_0: entered allmulticast mode [ 265.934084][T11085] bridge_slave_0: entered promiscuous mode [ 265.949864][T11085] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.959667][T11085] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.969183][T11085] bridge_slave_1: entered allmulticast mode [ 265.996140][T11085] bridge_slave_1: entered promiscuous mode [ 266.084796][T11183] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 266.133789][T11183] netlink: 197276 bytes leftover after parsing attributes in process `syz-executor.4'. [ 266.200992][T11085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.279574][T11085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.312469][ T5116] Bluetooth: hci3: command tx timeout [ 266.571546][T11085] team0: Port device team_slave_0 added [ 266.611144][T11085] team0: Port device team_slave_1 added [ 266.752594][T11085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.773548][T11085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.821597][T11085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.879245][T11085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.903489][T11085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.957453][ T29] audit: type=1804 audit(1717693570.099:8): pid=11195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir867327418/syzkaller.y95cc9/164/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 266.991935][T11085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.189669][T11085] hsr_slave_0: entered promiscuous mode [ 267.224315][T11085] hsr_slave_1: entered promiscuous mode [ 267.277301][T11085] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 267.301017][T11085] Cannot create hsr debugfs directory [ 268.030382][T11221] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 268.132393][T11221] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 268.285566][T11227] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 268.302423][T11227] netlink: 197276 bytes leftover after parsing attributes in process `syz-executor.2'. [ 268.392407][ T5116] Bluetooth: hci3: command tx timeout [ 268.603244][T11085] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 268.665161][T11085] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 268.710493][T11085] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 268.751291][T11085] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 269.076080][T11251] SET target dimension over the limit! [ 269.671045][T11085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.755735][T11085] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.797164][ T784] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.804493][ T784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.917380][ T784] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.924683][ T784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.240244][ T5124] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 270.251974][ T5124] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 270.265799][ T5124] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 270.276699][ T5124] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 270.284953][ T5124] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 270.295504][ T5124] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 270.369178][ T5669] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.473345][ T5116] Bluetooth: hci3: command tx timeout [ 270.566219][ T5669] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.629114][T11277] lo speed is unknown, defaulting to 1000 [ 270.651702][ T5669] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.675987][T11289] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 270.725483][T11085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.768667][ T5669] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.027181][T11085] veth0_vlan: entered promiscuous mode [ 271.274491][ T5669] bridge_slave_1: left allmulticast mode [ 271.290222][ T5669] bridge_slave_1: left promiscuous mode [ 271.310915][ T5669] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.345585][ T5669] bridge_slave_0: left allmulticast mode [ 271.366751][ T5669] bridge_slave_0: left promiscuous mode [ 271.380254][ T5669] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.392510][ T5116] Bluetooth: hci2: command tx timeout [ 272.675635][ T5669] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 272.706619][ T5669] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 272.737660][ T5669] bond0 (unregistering): Released all slaves [ 272.781528][T11299] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 272.804818][T11299] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.4'. [ 272.835019][T11299] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.4'. [ 272.858452][T11300] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 272.894740][T11085] veth1_vlan: entered promiscuous mode [ 273.054702][T11277] chnl_net:caif_netlink_parms(): no params data found [ 273.118575][T11325] bridge0: port 3(team0) entered blocking state [ 273.126447][T11325] bridge0: port 3(team0) entered disabled state [ 273.134728][T11325] team0: entered allmulticast mode [ 273.152228][T11325] team_slave_0: entered allmulticast mode [ 273.162256][T11325] team_slave_1: entered allmulticast mode [ 273.553964][T11335] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 273.610628][T11277] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.624118][T11277] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.640637][T11277] bridge_slave_0: entered allmulticast mode [ 273.666481][T11277] bridge_slave_0: entered promiscuous mode [ 273.690074][T11277] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.709206][T11277] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.721544][T11277] bridge_slave_1: entered allmulticast mode [ 273.734121][T11277] bridge_slave_1: entered promiscuous mode [ 273.768207][T11085] veth0_macvtap: entered promiscuous mode [ 273.929805][T11085] veth1_macvtap: entered promiscuous mode [ 273.955808][T11277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.027439][T11277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.147752][T11277] team0: Port device team_slave_0 added [ 274.175282][T11085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.201892][T11085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.212580][T11085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.223250][T11085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.234407][T11085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.246484][T11085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.256792][T11085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.268191][T11085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.286308][T11085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.319526][T11085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.344282][T11085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.400202][T11277] team0: Port device team_slave_1 added [ 274.472352][ T5116] Bluetooth: hci2: command tx timeout [ 274.581010][T11085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.622259][T11085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.636308][T11355] openvswitch: netlink: ct_state flags 0000d2dc unsupported [ 274.652607][T11085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.672158][T11085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.702567][T11085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.732393][T11085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.752167][T11085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.772286][T11085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.792149][T11085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.822242][T11085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.844051][T11085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.893850][T11277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.908770][T11277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.952141][T11277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.027583][T11085] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.053132][T11085] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.061909][T11085] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.090190][T11085] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.125053][T11277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.142900][T11277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.184770][T11277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.238247][ T5669] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.251660][ T5669] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.273960][ T5669] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.281592][ T5669] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.317094][ T5669] veth1_macvtap: left promiscuous mode [ 275.323618][ T5669] veth0_macvtap: left promiscuous mode [ 275.329917][ T5669] veth0_vlan: left promiscuous mode [ 276.038132][ T5669] team0 (unregistering): Port device hsr_slave_0 removed [ 276.175132][ T5669] team0 (unregistering): Port device team_slave_1 removed [ 276.227607][ T5669] team0 (unregistering): Port device team_slave_0 removed [ 276.562793][ T5116] Bluetooth: hci2: command tx timeout [ 276.945222][T11277] hsr_slave_0: entered promiscuous mode [ 276.968673][T11277] hsr_slave_1: entered promiscuous mode [ 276.989874][T11277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 277.000111][T11277] Cannot create hsr debugfs directory [ 277.385952][T11384] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 277.438808][ T994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.472235][ T994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.548560][ T5669] IPVS: stop unused estimator thread 0... [ 277.565553][T11388] dummy0: entered promiscuous mode [ 277.577159][T11388] macvlan4: entered allmulticast mode [ 277.583603][T11388] dummy0: entered allmulticast mode [ 277.594768][T11388] dummy0: left allmulticast mode [ 277.599959][T11388] dummy0: left promiscuous mode [ 277.675778][ T5657] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.695349][ T5657] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.096358][ T5657] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.280003][ T5657] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.485373][ T5657] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.632378][ T5116] Bluetooth: hci2: command tx timeout [ 278.715789][ T5657] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.823914][T11277] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 278.863600][T11277] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 278.897539][T11277] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 278.930317][T11277] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 279.077786][ T5657] bridge_slave_1: left allmulticast mode [ 279.084426][ T5657] bridge_slave_1: left promiscuous mode [ 279.090247][ T5657] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.105960][ T5657] bridge_slave_0: left allmulticast mode [ 279.111762][ T5657] bridge_slave_0: left promiscuous mode [ 279.129332][ T5657] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.197676][ T5124] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 279.215244][ T5124] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 279.225683][ T5124] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 279.237756][ T5124] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 279.245909][ T5124] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 279.254125][ T5124] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 280.036358][ T5657] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.065381][ T5657] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.085614][ T5657] bond0 (unregistering): Released all slaves [ 280.247467][T11419] lo speed is unknown, defaulting to 1000 [ 280.706608][T11277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.739269][T11277] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.794884][ T5657] hsr_slave_0: left promiscuous mode [ 280.834613][ T5657] hsr_slave_1: left promiscuous mode [ 280.850843][ T5657] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.864717][ T5657] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.890232][ T5657] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.913543][ T5657] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.988803][ T5657] veth1_macvtap: left promiscuous mode [ 281.004109][ T5657] veth0_macvtap: left promiscuous mode [ 281.014435][ T5657] veth1_vlan: left promiscuous mode [ 281.026043][ T5657] veth0_vlan: left promiscuous mode [ 281.352680][ T5116] Bluetooth: hci3: command tx timeout [ 282.428853][ T5657] team0 (unregistering): Port device team_slave_1 removed [ 282.531533][ T5657] team0 (unregistering): Port device team_slave_0 removed [ 283.434572][ T5116] Bluetooth: hci3: command tx timeout [ 283.622542][T11446] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 283.646081][ T5164] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.653338][ T5164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.733174][ T5164] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.740388][ T5164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.082593][T11458] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 284.094611][T11419] chnl_net:caif_netlink_parms(): no params data found [ 284.143462][T11277] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 284.276165][T11463] sch_tbf: burst 0 is lower than device team0 mtu (1514) ! [ 284.290321][T11463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.309921][T11463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.363283][T11463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.371845][T11463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.383224][T11467] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 284.389670][T11463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.430722][T11467] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 284.434175][T11463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.469712][T11463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.472819][T11472] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.4'. [ 284.492715][T11467] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 284.515256][T11463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.537066][T11474] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 284.559591][T11474] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 284.573529][T11419] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.580975][T11419] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.601790][T11419] bridge_slave_0: entered allmulticast mode [ 284.625751][ T29] audit: type=1800 audit(1717693587.759:9): pid=11477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1948 res=0 errno=0 [ 284.643028][T11419] bridge_slave_0: entered promiscuous mode [ 284.703795][T11419] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.729735][ T29] audit: type=1804 audit(1717693587.779:10): pid=11477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1643416058/syzkaller.KmcJwE/408/memory.events" dev="sda1" ino=1948 res=1 errno=0 [ 284.734876][T11419] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.859228][ T29] audit: type=1804 audit(1717693587.819:11): pid=11472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1643416058/syzkaller.KmcJwE/408/memory.events" dev="sda1" ino=1948 res=1 errno=0 [ 284.884449][T11419] bridge_slave_1: entered allmulticast mode [ 284.892690][T11419] bridge_slave_1: entered promiscuous mode [ 285.037211][T11419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.083175][T11277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.095517][T11419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.289477][T11419] team0: Port device team_slave_0 added [ 285.310377][T11419] team0: Port device team_slave_1 added [ 285.493646][T11419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.500752][T11419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.543512][ T5116] Bluetooth: hci3: command tx timeout [ 285.555905][T11419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.607993][T11419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.625130][T11419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.696748][T11419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.760880][T11277] veth0_vlan: entered promiscuous mode [ 285.906332][T11419] hsr_slave_0: entered promiscuous mode [ 285.923435][T11419] hsr_slave_1: entered promiscuous mode [ 285.935296][T11419] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 285.943763][T11419] Cannot create hsr debugfs directory [ 285.979435][T11277] veth1_vlan: entered promiscuous mode [ 286.255650][T11277] veth0_macvtap: entered promiscuous mode [ 286.329838][T11277] veth1_macvtap: entered promiscuous mode [ 286.508528][T11277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.525582][T11277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.550008][T11277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.586565][T11277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.609673][T11277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.626207][T11277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.640757][T11519] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.3'. [ 286.651632][T11277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.669542][T11277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.698639][T11277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.711404][T11277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.725949][T11277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.738203][T11277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.756209][ T29] audit: type=1800 audit(1717693589.899:12): pid=11520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1937 res=0 errno=0 [ 286.781020][T11277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.791296][T11277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.803388][ T29] audit: type=1804 audit(1717693589.909:13): pid=11520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir867327418/syzkaller.y95cc9/188/memory.events" dev="sda1" ino=1937 res=1 errno=0 [ 286.829119][T11277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.841314][T11277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.855830][T11277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.869121][ T29] audit: type=1804 audit(1717693589.909:14): pid=11520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir867327418/syzkaller.y95cc9/188/memory.events" dev="sda1" ino=1937 res=1 errno=0 [ 286.874237][T11277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.975310][T11277] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.995534][T11277] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.017706][T11277] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.051300][T11277] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.201781][T11535] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 287.432283][ T5654] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.453503][ T5654] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.480377][T11544] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 287.491322][T11544] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.511274][T11544] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.522314][T11544] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 287.592738][ T5116] Bluetooth: hci3: command tx timeout [ 287.626809][ T5669] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.634995][ T5669] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.640779][T11419] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 287.680874][T11419] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 287.708282][T11419] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 287.754635][T11552] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 287.764633][T11419] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 287.786901][T11552] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 288.056103][T11419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.143920][T11419] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.190754][ T784] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.198021][ T784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.266102][ T784] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.273496][ T784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.398247][T11419] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 288.430128][T11573] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 288.760475][ T29] audit: type=1804 audit(1717693591.909:15): pid=11581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir867327418/syzkaller.y95cc9/192/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 288.878796][T11419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.018456][T11419] veth0_vlan: entered promiscuous mode [ 289.056113][T11419] veth1_vlan: entered promiscuous mode [ 289.165994][T11419] veth0_macvtap: entered promiscuous mode [ 289.171418][T11586] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 289.195811][T11419] veth1_macvtap: entered promiscuous mode [ 289.212430][T11586] netlink: 197276 bytes leftover after parsing attributes in process `syz-executor.3'. [ 289.283751][T11419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.305931][T11419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.323635][T11419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.348820][T11419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.380557][T11419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.412476][T11419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.434126][T11419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.459372][T11419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.474192][T11419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.549426][T11591] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 289.650973][T11419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.668826][T11419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.692247][T11419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.710126][T11419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.748426][T11419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.764948][T11419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.779562][T11419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.790431][T11419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.803888][T11419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.818206][T11419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.840249][T11419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.888659][T11419] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.942851][T11419] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.975763][T11419] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.993636][T11419] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.187196][T11606] lo speed is unknown, defaulting to 1000 [ 290.346584][ T5669] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.366659][ T5669] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.537945][ T5661] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.554142][ T5661] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.573976][T11617] lo speed is unknown, defaulting to 1000 [ 291.428100][T11633] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 291.455221][T11633] netlink: 197276 bytes leftover after parsing attributes in process `syz-executor.2'. [ 292.049346][T11652] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 292.462386][ T29] audit: type=1804 audit(1717693595.609:16): pid=11662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1653027091/syzkaller.t8SVTn/14/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 292.497997][T11665] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 292.937561][ T5661] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.650974][T11692] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 293.674494][T11694] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 293.682416][T11692] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 293.837165][ T5661] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.879347][ T5124] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 293.891513][ T5124] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 293.900995][ T5124] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 293.905294][T11700] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.4'. [ 293.933592][ T5124] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 293.953142][ T5124] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 293.970717][ T5124] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 294.004751][ T5661] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.047978][T11701] lo speed is unknown, defaulting to 1000 [ 294.099455][ T5661] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.121718][T11708] veth0_vlan: entered allmulticast mode [ 294.188666][T11706] batadv_slave_0: entered allmulticast mode [ 294.223567][T11705] batadv_slave_0: left allmulticast mode [ 294.245852][T11696] lo speed is unknown, defaulting to 1000 [ 294.320375][T11710] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 294.342232][T11710] netlink: 197276 bytes leftover after parsing attributes in process `syz-executor.1'. [ 294.503632][ T5661] bridge_slave_1: left allmulticast mode [ 294.509357][ T5661] bridge_slave_1: left promiscuous mode [ 294.535335][ T5661] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.566694][ T5661] bridge_slave_0: left allmulticast mode [ 294.584194][ T5661] bridge_slave_0: left promiscuous mode [ 294.592450][ T5661] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.724464][ T29] audit: type=1804 audit(1717693597.869:17): pid=11717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2630990151/syzkaller.Mwn27T/474/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 295.249522][ T5661] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 295.265871][ T5661] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 295.278726][ T5661] bond0 (unregistering): Released all slaves [ 295.530440][T11731] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 295.571334][T11733] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 295.580946][T11733] nbd: couldn't find a device at index -1 [ 295.720756][T11737] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 295.774560][T11696] chnl_net:caif_netlink_parms(): no params data found [ 295.788035][T11737] xt_cgroup: xt_cgroup: no path or classid specified [ 295.991177][ T5661] hsr_slave_0: left promiscuous mode [ 296.007141][ T5661] hsr_slave_1: left promiscuous mode [ 296.034396][ T5661] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.048937][ T5661] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 296.067515][ T5661] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.082423][ T5661] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 296.082688][ T5116] Bluetooth: hci3: command tx timeout [ 296.151513][ T5661] veth1_macvtap: left promiscuous mode [ 296.175409][ T5661] veth0_macvtap: left promiscuous mode [ 296.190676][ T5661] veth1_vlan: left promiscuous mode [ 296.215541][ T5661] veth0_vlan: left promiscuous mode [ 296.608995][T11764] Cannot find add_set index 0 as target [ 297.135940][ T5661] team0 (unregistering): Port device team_slave_1 removed [ 297.200637][ T5661] team0 (unregistering): Port device team_slave_0 removed [ 297.988736][T11781] net_ratelimit: 1020 callbacks suppressed [ 297.988793][T11781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.078069][T11783] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 298.091436][T11786] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 298.112879][ T29] audit: type=1804 audit(1717693601.269:18): pid=11778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1643416058/syzkaller.KmcJwE/434/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 298.112994][T11783] nbd: couldn't find a device at index -1 [ 298.152763][ T5116] Bluetooth: hci3: command tx timeout [ 298.158644][T11696] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.198021][T11696] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.227611][T11696] bridge_slave_0: entered allmulticast mode [ 298.259095][T11696] bridge_slave_0: entered promiscuous mode [ 298.290092][T11696] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.306237][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.315303][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.338266][T11696] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.356613][T11696] bridge_slave_1: entered allmulticast mode [ 298.378198][T11696] bridge_slave_1: entered promiscuous mode [ 298.547866][T11696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.580302][T11696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.682587][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.740093][T11696] team0: Port device team_slave_0 added [ 298.796273][T11801] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 298.821581][T11696] team0: Port device team_slave_1 added [ 298.983535][T11696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.990570][T11696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.028401][T11696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.033136][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.049090][T11696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.070893][T11696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.171382][T11696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.205326][T11820] xt_CT: You must specify a L4 protocol and not use inversions on it [ 299.242571][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.245531][T11812] lo speed is unknown, defaulting to 1000 [ 299.549659][T11696] hsr_slave_0: entered promiscuous mode [ 299.559414][T11696] hsr_slave_1: entered promiscuous mode [ 299.588421][T11696] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 299.614112][T11696] Cannot create hsr debugfs directory [ 299.796420][T11833] lo speed is unknown, defaulting to 1000 [ 299.881577][T11834] lo speed is unknown, defaulting to 1000 [ 300.072302][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.232428][ T5124] Bluetooth: hci3: command tx timeout [ 300.666721][T11843] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 300.983488][ T29] audit: type=1804 audit(1717693604.139:19): pid=11846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1653027091/syzkaller.t8SVTn/28/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 301.012539][T11850] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 301.057518][T11850] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 301.309636][T11696] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 301.376468][T11696] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 301.415806][T11696] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 301.462935][T11696] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 301.562599][T11858] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.1'. [ 301.877964][T11696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.007494][T11696] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.042455][ T5165] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.049669][ T5165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.077608][ T5165] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.084852][ T5165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.266725][T11874] Cannot find add_set index 0 as target [ 302.313668][ T5124] Bluetooth: hci3: command tx timeout [ 302.323365][T11878] tipc: Started in network mode [ 302.328775][T11876] x_tables: ip6_tables: tcp match: only valid for protocol 6 [ 302.335612][T11878] tipc: Node identity 3a20300a74797065, cluster identity 4711 [ 302.346353][T11878] tipc: Enabling of bearer rejected, failed to enable media [ 302.638353][T11885] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 302.656877][T11885] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 302.898786][T11696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.096114][T11696] veth0_vlan: entered promiscuous mode [ 303.130948][T11696] veth1_vlan: entered promiscuous mode [ 303.276626][T11696] veth0_macvtap: entered promiscuous mode [ 303.316484][T11696] veth1_macvtap: entered promiscuous mode [ 303.399861][T11696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.426750][T11696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.452213][T11696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.477347][T11696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.503448][T11696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.525556][T11696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.546302][T11696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.568853][T11696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.597950][T11696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.624487][T11696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.648718][T11696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.669621][T11696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.693689][T11696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.732634][T11696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.758562][T11696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.782255][T11696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.802261][T11696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.818030][T11696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.842419][T11696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.867977][T11696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.899367][T11913] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 303.975786][T11696] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.992911][T11696] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.001676][T11696] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.031701][T11696] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.325891][ T5669] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.351144][ T5669] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.433604][T11922] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 304.449241][T11922] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 304.491434][T11924] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 304.529025][ T5657] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.553741][T11924] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 304.569620][ T5657] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.019587][T11940] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 305.059045][T11940] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 305.066523][T11940] IPv6: NLM_F_CREATE should be set when creating new route [ 305.109403][T11940] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 305.688784][T11946] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 305.755544][T11947] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 305.976686][T11953] IPVS: set_ctl: invalid protocol: 12 10.1.1.2:20000 [ 306.018234][T11955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.061095][T11956] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 306.084407][T11949] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 306.112670][T11949] ip6gretap0: left allmulticast mode [ 306.132520][T11949] ip6gretap0: left promiscuous mode [ 306.138130][T11949] bridge0: port 3(ip6gretap0) entered disabled state [ 306.184782][T11949] bridge_slave_0: left allmulticast mode [ 306.190504][T11949] bridge_slave_0: left promiscuous mode [ 306.223552][T11949] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.424656][T11958] lo speed is unknown, defaulting to 1000 [ 306.656705][T11963] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 306.944638][T11968] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 306.995239][T11958] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 307.013362][ T5657] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.032568][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.061649][T11960] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 307.090573][T11960] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 307.813090][T11986] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 308.037599][ T5657] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.054840][ T5123] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 308.068134][ T5123] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 308.082453][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.089515][ T5123] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 308.109857][ T5123] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 308.118342][ T5123] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 308.126242][ T5123] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 308.316165][ T5657] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.365834][T11999] IPVS: set_ctl: invalid protocol: 12 10.1.1.2:20000 [ 308.388042][T11992] lo speed is unknown, defaulting to 1000 [ 308.457829][ T5657] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.787207][ T5657] bridge_slave_1: left allmulticast mode [ 308.802145][ T5657] bridge_slave_1: left promiscuous mode [ 308.808004][ T5657] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.851622][ T5657] bridge_slave_0: left allmulticast mode [ 308.879445][ T5657] bridge_slave_0: left promiscuous mode [ 308.902797][ T5657] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.447525][ T5116] Bluetooth: hci4: command 0x0405 tx timeout [ 309.855936][ T5657] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.875937][ T5657] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.895757][ T5657] bond0 (unregistering): Released all slaves [ 310.162365][ T5124] Bluetooth: hci3: command tx timeout [ 310.271512][T12012] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 310.597874][T11992] chnl_net:caif_netlink_parms(): no params data found [ 310.739948][ T5657] hsr_slave_0: left promiscuous mode [ 310.756826][ T5657] hsr_slave_1: left promiscuous mode [ 310.776260][ T5657] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.802567][ T5657] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.828711][ T5657] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.869017][ T5657] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.937121][ T5657] veth1_macvtap: left promiscuous mode [ 310.957867][ T5657] veth0_macvtap: left promiscuous mode [ 310.964523][ T5657] veth1_vlan: left promiscuous mode [ 310.970204][ T5657] veth0_vlan: left promiscuous mode [ 312.232468][ T5124] Bluetooth: hci3: command tx timeout [ 312.350977][ T5657] team0 (unregistering): Port device team_slave_1 removed [ 312.494138][ T5657] team0 (unregistering): Port device team_slave_0 removed [ 313.598644][T12053] IPVS: set_ctl: invalid protocol: 12 10.1.1.2:20000 [ 313.817752][T11992] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.834466][T11992] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.861654][T11992] bridge_slave_0: entered allmulticast mode [ 313.879739][T11992] bridge_slave_0: entered promiscuous mode [ 313.904289][T11992] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.911911][T11992] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.921722][T11992] bridge_slave_1: entered allmulticast mode [ 313.939753][T11992] bridge_slave_1: entered promiscuous mode [ 314.096427][T11992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.158023][T11992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.191719][T12068] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 314.320475][ T5124] Bluetooth: hci3: command tx timeout [ 314.332946][T11992] team0: Port device team_slave_0 added [ 314.339539][T12067] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.3'. [ 314.364635][T11992] team0: Port device team_slave_1 added [ 314.468798][T11992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.492667][T11992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.528387][T11992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.544764][T11992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.551964][T11992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.601060][T11992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.685613][T11992] hsr_slave_0: entered promiscuous mode [ 314.706635][T11992] hsr_slave_1: entered promiscuous mode [ 314.727857][T11992] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 314.739346][T11992] Cannot create hsr debugfs directory [ 315.757802][T11992] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 315.786722][T11992] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 315.806532][T11992] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 315.865654][T11992] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 316.133175][T11992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.176284][T11992] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.208658][ T8594] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.215986][ T8594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.265484][ T8596] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.272693][ T8596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.392599][ T5124] Bluetooth: hci3: command tx timeout [ 316.577439][T12101] mac80211_hwsim hwsim26 wlan0 (unregistering): left allmulticast mode [ 316.627290][T12101] mac80211_hwsim hwsim26 wlan0 (unregistering): left promiscuous mode [ 316.770021][T12104] team0: Device is already in use. [ 317.012353][T11992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.200519][T11992] veth0_vlan: entered promiscuous mode [ 317.262993][T11992] veth1_vlan: entered promiscuous mode [ 317.285951][T12115] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 317.396687][T11992] veth0_macvtap: entered promiscuous mode [ 317.423256][T11992] veth1_macvtap: entered promiscuous mode [ 317.508383][T11992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.535292][T11992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.549851][T11992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.560641][T11992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.572732][T11992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.585197][T11992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.601270][T11992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.613671][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.620432][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.629370][T11992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.644662][T11992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.658037][T11992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.671725][T11992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.684863][T11992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.696597][T11992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.706771][T11992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.725858][T11992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.740198][T11992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.757685][T11992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.775922][T11992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.791849][T11992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.808442][T11992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.940588][T11992] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.970592][T11992] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.001142][T11992] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.017217][T11992] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.361739][ T994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.392046][ T994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.440597][ T5661] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.482399][ T5661] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.915264][T12178] lo speed is unknown, defaulting to 1000 [ 320.681784][T12202] netlink: 209840 bytes leftover after parsing attributes in process `syz-executor.4'. [ 321.339297][ T5657] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.389312][T12218] lo speed is unknown, defaulting to 1000 [ 321.816353][T12241] No such timeout policy "syz1" [ 322.134636][ T5657] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.316776][ T5657] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.371711][ T5116] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 322.383215][ T5116] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 322.405988][ T5116] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 322.420741][ T5116] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 322.434088][ T5116] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 322.441881][ T5116] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 322.536560][ T5657] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.705023][T12255] lo speed is unknown, defaulting to 1000 [ 322.978426][ T5657] bridge_slave_1: left allmulticast mode [ 323.010422][ T5657] bridge_slave_1: left promiscuous mode [ 323.043814][ T5657] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.088961][ T5657] bridge_slave_0: left allmulticast mode [ 323.094816][ T5657] bridge_slave_0: left promiscuous mode [ 323.100676][ T5657] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.968982][ T5657] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.001485][ T5657] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.023892][ T5657] bond0 (unregistering): Released all slaves [ 324.232765][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.562578][ T5124] Bluetooth: hci3: command tx timeout [ 324.734554][T12255] chnl_net:caif_netlink_parms(): no params data found [ 325.025361][ T5657] hsr_slave_0: left promiscuous mode [ 325.056645][ T5657] hsr_slave_1: left promiscuous mode [ 325.079269][ T5657] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.109968][ T5657] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.142103][ T5657] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.149601][ T5657] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.240528][ T5657] veth1_macvtap: left promiscuous mode [ 325.261401][ T5657] veth0_macvtap: left promiscuous mode [ 325.272331][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.280192][ T5657] veth1_vlan: left promiscuous mode [ 325.299873][ T5657] veth0_vlan: left promiscuous mode [ 326.312234][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.580785][ T5657] team0 (unregistering): Port device team_slave_1 removed [ 326.632812][ T5124] Bluetooth: hci3: command tx timeout [ 326.699562][ T5657] team0 (unregistering): Port device team_slave_0 removed [ 327.797346][T12290] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 327.937690][T12255] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.963402][T12255] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.970708][T12255] bridge_slave_0: entered allmulticast mode [ 328.006541][T12255] bridge_slave_0: entered promiscuous mode [ 328.043739][T12255] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.053189][T12255] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.075990][T12255] bridge_slave_1: entered allmulticast mode [ 328.102347][T12255] bridge_slave_1: entered promiscuous mode [ 328.283933][T12255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.325779][T12255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.457952][T12255] team0: Port device team_slave_0 added [ 328.480293][T12255] team0: Port device team_slave_1 added [ 328.647321][T12255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.680500][T12255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.712411][ T5124] Bluetooth: hci3: command tx timeout [ 328.758243][T12255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.834579][T12255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.877379][T12255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.920643][T12255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.272240][T12337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.329992][T12255] hsr_slave_0: entered promiscuous mode [ 329.359113][T12255] hsr_slave_1: entered promiscuous mode [ 329.383593][T12255] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 329.422651][T12255] Cannot create hsr debugfs directory [ 330.226044][T12255] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 330.246908][T12255] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 330.280616][T12255] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 330.312566][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.317071][T12255] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 330.392362][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.575505][T12367] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 330.583623][T12255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.659153][T12255] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.691912][ T5172] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.699185][ T5172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.743598][T12377] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 330.764788][ T5172] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.772000][ T5172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.795923][ T5124] Bluetooth: hci3: command tx timeout [ 330.809155][T12377] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 330.879642][T12377] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 331.352520][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.432222][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.545072][T12255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.685239][T12255] veth0_vlan: entered promiscuous mode [ 331.718917][T12255] veth1_vlan: entered promiscuous mode [ 331.809490][T12255] veth0_macvtap: entered promiscuous mode [ 331.837792][T12255] veth1_macvtap: entered promiscuous mode [ 331.875522][T12255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.902348][T12255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.932275][T12255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.942941][T12255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.962165][T12255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.983300][T12255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.994212][T12255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.005020][T12255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.021898][T12255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.054842][T12255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.078349][T12255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.096600][T12255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.117710][T12255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.147970][T12255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.172468][T12255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.182397][T12255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.193183][T12255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.203436][T12255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.214207][T12255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.229127][T12255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.249573][T12255] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.269339][T12255] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.279314][T12255] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.288631][T12255] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.472338][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.632030][ T5661] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.656936][ T5661] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.674006][T12419] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.2'. [ 332.796771][ T5657] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.836995][ T5657] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.820177][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807f58d400: rx timeout, send abort [ 334.828926][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807f58d400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 335.687397][ T5661] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.954672][T12499] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 336.082669][T12504] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 336.722576][T12531] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 336.819168][ T5116] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 336.831294][ T5116] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 336.841505][ T5116] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 336.853210][ T5116] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 336.861262][ T5116] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 336.869024][ T5116] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 336.994839][ T5661] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.030564][T12536] lo speed is unknown, defaulting to 1000 [ 337.147916][ T5661] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.180805][T12533] lo speed is unknown, defaulting to 1000 [ 337.294982][ T5661] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.431102][T12548] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 337.743818][T12556] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 337.766752][T12561] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 337.965964][ T5661] bridge_slave_1: left allmulticast mode [ 337.971693][ T5661] bridge_slave_1: left promiscuous mode [ 338.001978][ T5661] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.025470][ T5661] bridge_slave_0: left allmulticast mode [ 338.031205][ T5661] bridge_slave_0: left promiscuous mode [ 338.061571][ T5661] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.224564][T12579] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.3'. [ 338.243530][T12579] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 338.260131][T12579] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 338.281423][T12579] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 338.309358][T12579] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 338.904011][ T5661] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 338.917646][ T5661] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 338.930747][ T5661] bond0 (unregistering): Released all slaves [ 338.952277][ T5116] Bluetooth: hci3: command tx timeout [ 338.981787][T12580] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 339.081849][T12580] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 339.119150][T12580] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 339.152400][T12573] lo speed is unknown, defaulting to 1000 [ 339.342626][T12533] chnl_net:caif_netlink_parms(): no params data found [ 339.769854][ T5661] hsr_slave_0: left promiscuous mode [ 339.807543][ T5661] hsr_slave_1: left promiscuous mode [ 339.829220][ T5661] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.865405][ T5661] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.893142][ T5661] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.901399][ T5661] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.996916][ T5661] veth1_macvtap: left promiscuous mode [ 340.020774][ T5661] veth0_macvtap: left promiscuous mode [ 340.033538][ T5661] veth1_vlan: left promiscuous mode [ 340.039076][ T5661] veth0_vlan: left promiscuous mode [ 341.041555][ T5116] Bluetooth: hci3: command tx timeout [ 341.266153][ T5661] team0 (unregistering): Port device team_slave_1 removed [ 341.322755][ T5661] team0 (unregistering): Port device team_slave_0 removed [ 341.971319][T12624] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 342.011349][T12533] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.030831][T12533] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.042439][T12533] bridge_slave_0: entered allmulticast mode [ 342.051360][T12533] bridge_slave_0: entered promiscuous mode [ 342.074464][T12533] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.085802][T12533] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.102368][T12533] bridge_slave_1: entered allmulticast mode [ 342.111231][T12533] bridge_slave_1: entered promiscuous mode [ 342.269296][T12533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.316023][T12533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.400697][T12641] team_slave_0: entered promiscuous mode [ 342.434933][T12641] team_slave_0: left promiscuous mode [ 342.552446][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.570712][T12533] team0: Port device team_slave_0 added [ 342.587239][T12533] team0: Port device team_slave_1 added [ 342.751767][T12646] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 342.795039][T12648] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 342.808725][T12649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.813231][T12533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.834060][T12533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.876286][T12533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.913958][T12533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.929252][T12533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.964411][T12533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.113633][ T5116] Bluetooth: hci3: command tx timeout [ 343.234309][T12657] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 343.271896][T12533] hsr_slave_0: entered promiscuous mode [ 343.305480][T12533] hsr_slave_1: entered promiscuous mode [ 343.334637][T12533] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 343.350515][T12533] Cannot create hsr debugfs directory [ 343.592301][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.767575][T12671] ebt_limit: overflow, try lower: 0/0 [ 343.832228][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.886014][T12677] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 344.303882][T12687] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 344.359674][T12687] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 344.410826][T12533] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 344.477344][T12533] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 344.513081][T12533] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 344.537079][T12533] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 344.566144][T12690] lo speed is unknown, defaulting to 1000 [ 344.632379][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.872345][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.193846][ T5116] Bluetooth: hci3: command tx timeout [ 345.319926][T12533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.400383][T12533] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.441768][ T5165] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.448997][ T5165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.481389][ T8593] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.488681][ T8593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.040151][T12533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.190531][T12533] veth0_vlan: entered promiscuous mode [ 346.230720][T12533] veth1_vlan: entered promiscuous mode [ 346.355916][T12533] veth0_macvtap: entered promiscuous mode [ 346.411952][T12533] veth1_macvtap: entered promiscuous mode [ 346.486755][T12533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.510869][T12533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.535734][T12533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.559202][T12533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.585628][T12533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.607918][T12533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.624966][T12533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.643139][T12533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.664558][T12533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.717973][T12533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.765508][T12533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.807536][T12533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.822101][T12533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.844446][T12533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.879491][T12533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.908779][T12533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.932812][T12533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.958681][T12533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.984548][T12533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.014268][T12533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.057626][T12533] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.077492][T12533] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.095327][T12533] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.111801][T12533] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.324248][ T5666] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.344226][ T5666] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.429360][ T994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.453168][ T994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.927543][T12748] lo speed is unknown, defaulting to 1000 [ 348.449794][T12763] ebt_limit: overflow, try lower: 0/0 [ 348.459143][T12765] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 348.977815][T12787] lo speed is unknown, defaulting to 1000 [ 349.338695][T12798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.807409][ T5669] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.381573][T12823] lo speed is unknown, defaulting to 1000 [ 350.392204][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.815318][ T5124] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 350.826610][ T5124] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 350.837019][ T5124] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 350.847577][ T5124] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 350.859787][ T5124] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 350.869545][ T5124] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 350.942797][T12836] lo speed is unknown, defaulting to 1000 [ 351.236294][ T5669] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.442198][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.455139][ T5669] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.490352][T12836] chnl_net:caif_netlink_parms(): no params data found [ 351.607253][ T5669] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.934190][T12836] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.943970][T12836] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.972790][T12836] bridge_slave_0: entered allmulticast mode [ 351.980474][T12836] bridge_slave_0: entered promiscuous mode [ 352.071350][T12836] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.095930][T12836] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.105925][T12836] bridge_slave_1: entered allmulticast mode [ 352.126051][T12836] bridge_slave_1: entered promiscuous mode [ 352.215307][ T5669] bridge_slave_1: left allmulticast mode [ 352.222004][ T5669] bridge_slave_1: left promiscuous mode [ 352.228266][ T5669] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.240792][ T5669] bridge_slave_0: left allmulticast mode [ 352.265623][ T5669] bridge_slave_0: left promiscuous mode [ 352.277332][ T5669] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.952661][ T5124] Bluetooth: hci3: command tx timeout [ 353.139110][ T5669] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 353.164970][ T5669] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 353.188468][ T5669] bond0 (unregistering): Released all slaves [ 353.234407][T12836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.329526][T12836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.415017][T12880] lo speed is unknown, defaulting to 1000 [ 353.710201][T12836] team0: Port device team_slave_0 added [ 353.847928][T12836] team0: Port device team_slave_1 added [ 354.037893][T12836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.047310][T12836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.077811][T12836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.098792][ T5669] hsr_slave_0: left promiscuous mode [ 354.106941][ T5669] hsr_slave_1: left promiscuous mode [ 354.113837][ T5669] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.130430][ T5669] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.144870][ T5669] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.170024][ T5669] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.241659][ T5669] veth1_macvtap: left promiscuous mode [ 354.254847][ T5669] veth0_macvtap: left promiscuous mode [ 354.273593][ T5669] veth1_vlan: left promiscuous mode [ 354.293380][ T5669] veth0_vlan: left promiscuous mode [ 354.785046][T12908] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 355.033909][ T5124] Bluetooth: hci3: command tx timeout [ 355.170621][ T5669] team0 (unregistering): Port device team_slave_1 removed [ 355.228897][ T5669] team0 (unregistering): Port device team_slave_0 removed [ 355.895522][T12836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.904024][T12836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.944659][T12836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.120088][T12836] hsr_slave_0: entered promiscuous mode [ 356.139696][T12836] hsr_slave_1: entered promiscuous mode [ 356.154872][T12836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 356.169436][T12836] Cannot create hsr debugfs directory [ 356.545261][T12930] tap0: tun_chr_ioctl cmd 1074025675 [ 356.550880][T12930] tap0: persist enabled [ 356.568185][T12930] tap0: tun_chr_ioctl cmd 1074025675 [ 356.583560][T12930] tap0: persist disabled [ 357.122561][ T5124] Bluetooth: hci3: command tx timeout [ 357.148811][T12836] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 357.160186][T12836] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 357.173147][T12836] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 357.184878][T12836] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 357.306597][T12836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.338537][T12836] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.355493][ T8596] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.362743][ T8596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.397207][ T784] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.404507][ T784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.680851][T12959] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 357.691760][T12959] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.4'. [ 357.993729][T12971] lo speed is unknown, defaulting to 1000 [ 358.084264][T12836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.258087][T12983] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 358.441822][T12836] veth0_vlan: entered promiscuous mode [ 358.486976][T12836] veth1_vlan: entered promiscuous mode [ 358.670863][T12836] veth0_macvtap: entered promiscuous mode [ 358.710628][T12836] veth1_macvtap: entered promiscuous mode [ 358.757447][T12836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.777664][T12836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.797256][T12836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.808084][T12836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.819591][T12836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.830639][T12836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.840574][T12836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.859718][T12836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.872018][T13008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.883878][T12836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.920991][T13006] ------------[ cut here ]------------ [ 358.921128][T12836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.927072][T13006] refcount_t: decrement hit 0; leaking memory. [ 358.935953][T13006] WARNING: CPU: 0 PID: 13006 at lib/refcount.c:31 refcount_warn_saturate+0xfa/0x1d0 [ 358.954579][T13006] Modules linked in: [ 358.958532][T13006] CPU: 0 PID: 13006 Comm: syz-executor.1 Not tainted 6.10.0-rc1-syzkaller-00199-gb0c9a2643541 #0 [ 358.969804][T13006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 358.969992][T12836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.980026][T13006] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 358.980071][T13006] Code: b2 00 00 00 e8 d7 c0 e6 fc 5b 5d c3 cc cc cc cc e8 cb c0 e6 fc c6 05 aa 6e e8 0a 01 90 48 c7 c7 e0 a0 1f 8c e8 47 ef a8 fc 90 <0f> 0b 90 90 eb d9 e8 ab c0 e6 fc c6 05 87 6e e8 0a 01 90 48 c7 c7 2024/06/06 17:07:42 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 358.980093][T13006] RSP: 0018:ffffc90004807748 EFLAGS: 00010246 [ 358.980118][T13006] RAX: dc5817340aaec300 RBX: ffff88802c4ce664 RCX: ffff88806b8d1e00 [ 358.980138][T13006] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 358.980155][T13006] RBP: 0000000000000004 R08: ffffffff815847a2 R09: 1ffffffff25f50d7 [ 358.980173][T13006] R10: dffffc0000000000 R11: fffffbfff25f50d8 R12: ffff88802c4ce620 [ 358.980192][T13006] R13: 0000000000000000 R14: ffff88802c4ce664 R15: dffffc0000000000 [ 358.980216][T13006] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 358.980238][T13006] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 358.980257][T13006] CR2: 00007fdf2af4fd58 CR3: 000000006aff4000 CR4: 00000000003506f0 [ 358.980278][T13006] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 358.980293][T13006] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 358.980311][T13006] Call Trace: [ 358.980326][T13006] [ 358.980337][T13006] ? __warn+0x163/0x4e0 [ 358.980370][T13006] ? refcount_warn_saturate+0xfa/0x1d0 [ 358.980407][T13006] ? report_bug+0x2b3/0x500 [ 358.980435][T13006] ? refcount_warn_saturate+0xfa/0x1d0 [ 358.980474][T13006] ? handle_bug+0x3e/0x70 [ 358.980501][T13006] ? exc_invalid_op+0x1a/0x50 [ 358.980528][T13006] ? asm_exc_invalid_op+0x1a/0x20 [ 358.980562][T13006] ? __warn_printk+0x292/0x360 [ 359.006031][T12836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.016546][T13006] ? refcount_warn_saturate+0xfa/0x1d0 [ 359.016599][T13006] ? refcount_warn_saturate+0xf9/0x1d0 [ 359.016632][T13006] ref_tracker_free+0x6af/0x7e0 [ 359.016665][T13006] ? __pfx_ref_tracker_free+0x10/0x10 [ 359.016720][T13006] ax25_release+0x368/0x950 [ 359.016759][T13006] sock_close+0xbc/0x240 [ 359.016786][T13006] ? __pfx_sock_close+0x10/0x10 [ 359.016817][T13006] __fput+0x406/0x8b0 [ 359.016857][T13006] task_work_run+0x24f/0x310 [ 359.016897][T13006] ? __pfx_task_work_run+0x10/0x10 [ 359.016934][T13006] ? do_exit+0xa22/0x27e0 [ 359.016962][T13006] ? kmem_cache_free+0x145/0x350 [ 359.016991][T13006] do_exit+0xa27/0x27e0 [ 359.017032][T13006] ? __pfx_do_exit+0x10/0x10 [ 359.017063][T13006] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 359.017105][T13006] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 359.017136][T13006] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 359.017161][T13006] ? _raw_spin_lock_irq+0xdf/0x120 [ 359.017199][T13006] do_group_exit+0x207/0x2c0 [ 359.017234][T13006] ? _raw_spin_unlock_irq+0x23/0x50 [ 359.017264][T13006] ? lockdep_hardirqs_on+0x99/0x150 [ 359.017293][T13006] get_signal+0x16a1/0x1740 [ 359.017347][T13006] ? __pfx_get_signal+0x10/0x10 [ 359.017395][T13006] arch_do_signal_or_restart+0x96/0x860 [ 359.017431][T13006] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 359.017460][T13006] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 359.017500][T13006] ? syscall_exit_to_user_mode+0xa3/0x370 [ 359.185990][T12836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.188643][T13006] syscall_exit_to_user_mode+0xc9/0x370 [ 359.212634][T12836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.216328][T13006] do_syscall_64+0x100/0x230 [ 359.221188][T12836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.221216][T12836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.225368][T13006] ? clear_bhb_loop+0x35/0x90 [ 359.225403][T13006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.225447][T13006] RIP: 0033:0x7fdf2a27cf69 [ 359.225482][T13006] Code: Unable to access opcode bytes at 0x7fdf2a27cf3f. [ 359.225496][T13006] RSP: 002b:00007fdf2af70178 EFLAGS: 00000246 [ 359.240741][ T5124] Bluetooth: hci3: command tx timeout [ 359.241556][T13006] ORIG_RAX: 00000000000000ca [ 359.393575][T13006] RAX: fffffffffffffe00 RBX: 00007fdf2a3b3f88 RCX: 00007fdf2a27cf69 [ 359.401584][T13006] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdf2a3b3f88 [ 359.409677][T13006] RBP: 00007fdf2a3b3f80 R08: 00007fdf2af706c0 R09: 00007fdf2af706c0 [ 359.417771][T13006] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdf2a3b3f8c [ 359.425811][T13006] R13: 000000000000000b R14: 00007ffc7e1a4cb0 R15: 00007ffc7e1a4d98 [ 359.434337][T13006] [ 359.437388][T13006] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 359.444694][T13006] CPU: 0 PID: 13006 Comm: syz-executor.1 Not tainted 6.10.0-rc1-syzkaller-00199-gb0c9a2643541 #0 [ 359.455227][T13006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 359.465311][T13006] Call Trace: [ 359.468619][T13006] [ 359.471588][T13006] dump_stack_lvl+0x241/0x360 [ 359.476311][T13006] ? __pfx_dump_stack_lvl+0x10/0x10 [ 359.481548][T13006] ? __pfx__printk+0x10/0x10 [ 359.486191][T13006] ? vscnprintf+0x5d/0x90 [ 359.490561][T13006] panic+0x349/0x860 [ 359.494492][T13006] ? __warn+0x172/0x4e0 [ 359.498773][T13006] ? __pfx_panic+0x10/0x10 [ 359.503243][T13006] __warn+0x346/0x4e0 [ 359.507259][T13006] ? refcount_warn_saturate+0xfa/0x1d0 [ 359.512769][T13006] report_bug+0x2b3/0x500 [ 359.517138][T13006] ? refcount_warn_saturate+0xfa/0x1d0 [ 359.522663][T13006] handle_bug+0x3e/0x70 [ 359.526871][T13006] exc_invalid_op+0x1a/0x50 [ 359.531432][T13006] asm_exc_invalid_op+0x1a/0x20 [ 359.536334][T13006] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 359.542455][T13006] Code: b2 00 00 00 e8 d7 c0 e6 fc 5b 5d c3 cc cc cc cc e8 cb c0 e6 fc c6 05 aa 6e e8 0a 01 90 48 c7 c7 e0 a0 1f 8c e8 47 ef a8 fc 90 <0f> 0b 90 90 eb d9 e8 ab c0 e6 fc c6 05 87 6e e8 0a 01 90 48 c7 c7 [ 359.562102][T13006] RSP: 0018:ffffc90004807748 EFLAGS: 00010246 [ 359.568210][T13006] RAX: dc5817340aaec300 RBX: ffff88802c4ce664 RCX: ffff88806b8d1e00 [ 359.576222][T13006] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 359.584231][T13006] RBP: 0000000000000004 R08: ffffffff815847a2 R09: 1ffffffff25f50d7 [ 359.592242][T13006] R10: dffffc0000000000 R11: fffffbfff25f50d8 R12: ffff88802c4ce620 [ 359.600273][T13006] R13: 0000000000000000 R14: ffff88802c4ce664 R15: dffffc0000000000 [ 359.608303][T13006] ? __warn_printk+0x292/0x360 [ 359.613127][T13006] ? refcount_warn_saturate+0xf9/0x1d0 [ 359.618627][T13006] ref_tracker_free+0x6af/0x7e0 [ 359.623520][T13006] ? __pfx_ref_tracker_free+0x10/0x10 [ 359.628968][T13006] ax25_release+0x368/0x950 [ 359.633524][T13006] sock_close+0xbc/0x240 [ 359.637887][T13006] ? __pfx_sock_close+0x10/0x10 [ 359.642866][T13006] __fput+0x406/0x8b0 [ 359.646897][T13006] task_work_run+0x24f/0x310 [ 359.651539][T13006] ? __pfx_task_work_run+0x10/0x10 [ 359.656696][T13006] ? do_exit+0xa22/0x27e0 [ 359.661062][T13006] ? kmem_cache_free+0x145/0x350 [ 359.666044][T13006] do_exit+0xa27/0x27e0 [ 359.670254][T13006] ? __pfx_do_exit+0x10/0x10 [ 359.674916][T13006] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 359.680347][T13006] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 359.686370][T13006] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 359.692733][T13006] ? _raw_spin_lock_irq+0xdf/0x120 [ 359.697895][T13006] do_group_exit+0x207/0x2c0 [ 359.702508][T13006] ? _raw_spin_unlock_irq+0x23/0x50 [ 359.707759][T13006] ? lockdep_hardirqs_on+0x99/0x150 [ 359.712983][T13006] get_signal+0x16a1/0x1740 [ 359.717520][T13006] ? __pfx_get_signal+0x10/0x10 [ 359.722503][T13006] arch_do_signal_or_restart+0x96/0x860 [ 359.728067][T13006] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 359.734239][T13006] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 359.740244][T13006] ? syscall_exit_to_user_mode+0xa3/0x370 [ 359.745983][T13006] syscall_exit_to_user_mode+0xc9/0x370 [ 359.751553][T13006] do_syscall_64+0x100/0x230 [ 359.756181][T13006] ? clear_bhb_loop+0x35/0x90 [ 359.760896][T13006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.766809][T13006] RIP: 0033:0x7fdf2a27cf69 [ 359.771260][T13006] Code: Unable to access opcode bytes at 0x7fdf2a27cf3f. [ 359.778393][T13006] RSP: 002b:00007fdf2af70178 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 359.786839][T13006] RAX: fffffffffffffe00 RBX: 00007fdf2a3b3f88 RCX: 00007fdf2a27cf69 [ 359.794833][T13006] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdf2a3b3f88 [ 359.802852][T13006] RBP: 00007fdf2a3b3f80 R08: 00007fdf2af706c0 R09: 00007fdf2af706c0 [ 359.810841][T13006] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdf2a3b3f8c [ 359.818832][T13006] R13: 000000000000000b R14: 00007ffc7e1a4cb0 R15: 00007ffc7e1a4d98 [ 359.826837][T13006] [ 359.830224][T13006] Kernel Offset: disabled [ 359.834629][T13006] Rebooting in 86400 seconds..