last executing test programs: 1m10.463825982s ago: executing program 4 (id=2757): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000510000000000000000000000000000000900020073797a32000000000500040000000000050005000000000012000300686173683a6e65742c706f72740000000c00078008000600000000000500010007000000"], 0x58}}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080), 0x4) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1bb}, 0x48801) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/uts\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, 0x0, 0x0) 1m1.777545112s ago: executing program 4 (id=2757): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000510000000000000000000000000000000900020073797a32000000000500040000000000050005000000000012000300686173683a6e65742c706f72740000000c00078008000600000000000500010007000000"], 0x58}}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080), 0x4) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1bb}, 0x48801) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/uts\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, 0x0, 0x0) 54.459595927s ago: executing program 3 (id=3743): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x650, 0x1b8, 0x0, 0x428, 0x428, 0x0, 0x580, 0x580, 0x580, 0x580, 0x580, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@loopback, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {0xff}}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast1, @private2, [], [0x0, 0x0, 0x0, 0xff000000], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@private}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[], 0x0, 0x0, 0x2}}, @inet=@rpfilter={{0x28}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x118, 0x158, 0x0, {}, [@common=@dst={{0x48}}, @inet=@rpfilter={{0x28}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0xfffffffe, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6b0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000002140)={'wg2\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300000006800010000000000000000000a00000000000000060007000a00000008000500", @ANYRES32=r2, @ANYBLOB="0000000000008000"], 0x30}}, 0x0) 54.159660235s ago: executing program 3 (id=3748): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x75, 0x0, &(0x7f0000000180)="0762a7e565e61b7174eb485324006852a7b28a5e27e5ce743d8d59b9c59659955abf010ffce90987a201994228b53b7519a1f7bf598702738086fe7680d0a87a20456216513a1d2fd2b69c711488b2fd42bfc2e8f41710e76f8c67754d4b114f6b6136bc3248894a721f1fea688182d67e581ed68e", 0x0, 0xdf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xe}, 0x50) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0x7, &(0x7f0000000080)=0xc, 0x4) sendto$packet(r2, &(0x7f0000000040)="c0000000e8fe091c6202a0fffffeff006003180000007f010034e3bd190f5f61a7c6", 0xbc, 0x0, &(0x7f0000000000)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x38}}, 0x81) 48.726161475s ago: executing program 4 (id=2757): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000510000000000000000000000000000000900020073797a32000000000500040000000000050005000000000012000300686173683a6e65742c706f72740000000c00078008000600000000000500010007000000"], 0x58}}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080), 0x4) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1bb}, 0x48801) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/uts\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, 0x0, 0x0) 41.42255776s ago: executing program 3 (id=3748): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x75, 0x0, &(0x7f0000000180)="0762a7e565e61b7174eb485324006852a7b28a5e27e5ce743d8d59b9c59659955abf010ffce90987a201994228b53b7519a1f7bf598702738086fe7680d0a87a20456216513a1d2fd2b69c711488b2fd42bfc2e8f41710e76f8c67754d4b114f6b6136bc3248894a721f1fea688182d67e581ed68e", 0x0, 0xdf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xe}, 0x50) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0x7, &(0x7f0000000080)=0xc, 0x4) sendto$packet(r2, &(0x7f0000000040)="c0000000e8fe091c6202a0fffffeff006003180000007f010034e3bd190f5f61a7c6", 0xbc, 0x0, &(0x7f0000000000)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x38}}, 0x81) 34.505098635s ago: executing program 4 (id=2757): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000510000000000000000000000000000000900020073797a32000000000500040000000000050005000000000012000300686173683a6e65742c706f72740000000c00078008000600000000000500010007000000"], 0x58}}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080), 0x4) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1bb}, 0x48801) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/uts\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, 0x0, 0x0) 29.166678374s ago: executing program 3 (id=3748): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x75, 0x0, &(0x7f0000000180)="0762a7e565e61b7174eb485324006852a7b28a5e27e5ce743d8d59b9c59659955abf010ffce90987a201994228b53b7519a1f7bf598702738086fe7680d0a87a20456216513a1d2fd2b69c711488b2fd42bfc2e8f41710e76f8c67754d4b114f6b6136bc3248894a721f1fea688182d67e581ed68e", 0x0, 0xdf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xe}, 0x50) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0x7, &(0x7f0000000080)=0xc, 0x4) sendto$packet(r2, &(0x7f0000000040)="c0000000e8fe091c6202a0fffffeff006003180000007f010034e3bd190f5f61a7c6", 0xbc, 0x0, &(0x7f0000000000)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x38}}, 0x81) 19.696754084s ago: executing program 4 (id=2757): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000510000000000000000000000000000000900020073797a32000000000500040000000000050005000000000012000300686173683a6e65742c706f72740000000c00078008000600000000000500010007000000"], 0x58}}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080), 0x4) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1bb}, 0x48801) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/uts\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, 0x0, 0x0) 16.551629678s ago: executing program 3 (id=3748): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x75, 0x0, &(0x7f0000000180)="0762a7e565e61b7174eb485324006852a7b28a5e27e5ce743d8d59b9c59659955abf010ffce90987a201994228b53b7519a1f7bf598702738086fe7680d0a87a20456216513a1d2fd2b69c711488b2fd42bfc2e8f41710e76f8c67754d4b114f6b6136bc3248894a721f1fea688182d67e581ed68e", 0x0, 0xdf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xe}, 0x50) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0x7, &(0x7f0000000080)=0xc, 0x4) sendto$packet(r2, &(0x7f0000000040)="c0000000e8fe091c6202a0fffffeff006003180000007f010034e3bd190f5f61a7c6", 0xbc, 0x0, &(0x7f0000000000)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x38}}, 0x81) 6.107761885s ago: executing program 4 (id=2757): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000510000000000000000000000000000000900020073797a32000000000500040000000000050005000000000012000300686173683a6e65742c706f72740000000c00078008000600000000000500010007000000"], 0x58}}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080), 0x4) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1bb}, 0x48801) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/uts\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, 0x0, 0x0) 5.219274522s ago: executing program 3 (id=3748): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x75, 0x0, &(0x7f0000000180)="0762a7e565e61b7174eb485324006852a7b28a5e27e5ce743d8d59b9c59659955abf010ffce90987a201994228b53b7519a1f7bf598702738086fe7680d0a87a20456216513a1d2fd2b69c711488b2fd42bfc2e8f41710e76f8c67754d4b114f6b6136bc3248894a721f1fea688182d67e581ed68e", 0x0, 0xdf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xe}, 0x50) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0x7, &(0x7f0000000080)=0xc, 0x4) sendto$packet(r2, &(0x7f0000000040)="c0000000e8fe091c6202a0fffffeff006003180000007f010034e3bd190f5f61a7c6", 0xbc, 0x0, &(0x7f0000000000)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x38}}, 0x81) 2.030304568s ago: executing program 0 (id=4127): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) r1 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x6, [@enum={0xe, 0x4, 0x0, 0x6, 0x4, [{0x10, 0x6}, {0x9, 0x8f4}, {0xe, 0xf2}, {0x8, 0x1}]}, @volatile={0xb, 0x0, 0x0, 0x9, 0x2}, @func={0x9, 0x0, 0x0, 0xc, 0x2}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x4, 0x4}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x3, 0x4}]}, {0x0, [0x30, 0x0, 0x5f, 0x0]}}, &(0x7f0000000a40)=""/4096, 0x82, 0x1000, 0x0, 0x4, 0x10000, @value}, 0x28) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f0000000000000014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f6985308f5", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r3, @ANYBLOB="2000000000000000b7080000000000007b8af8ff00000000bfa200000000000907020000f8ffffffb703000008000000b70400000000000085000000630000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000380), &(0x7f00000003c0)=0x8) 1.903416635s ago: executing program 1 (id=4129): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000c00), &(0x7f0000002000)=0x2) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000003800), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000003980)={&(0x7f0000003840)={0x40, r2, 0x1, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, {0xd}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8011}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) getsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000c00), &(0x7f0000002000)=0x2) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000003800), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000003980)={&(0x7f0000003840)={0x40, r2, 0x1, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, {0xd}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8011}, 0x0) (async) 1.738389832s ago: executing program 1 (id=4130): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 32) connect$inet6(r1, &(0x7f0000000900)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) (async, rerun: 64) ppoll(&(0x7f0000000080)=[{r1, 0x4200}], 0x1, &(0x7f0000000140), 0x0, 0x0) (async, rerun: 64) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x28}}, 0x0) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x3c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0xffffffff}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_MAX_RATE={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x2}]}}, @TCA_STAB={0xe0, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, {0x10, 0x2, [0x0, 0x0, 0xffff, 0x0, 0x0, 0x0]}}, {{0x19, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff60}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c}, {0x4}}, {{0x1c}, {0x4}}]}]}, 0x148}}, 0x0) 1.631013351s ago: executing program 0 (id=4131): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) (async) listen(r0, 0x7) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000980), 0xe) (async) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x280}, @IFLA_BOND_UPDELAY={0x8}, @IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x2000000}]}}}]}, 0x4c}}, 0x0) (async) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0203100802"], 0x10}}, 0x0) (async) sendmsg$key(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x2, 0x9, 0x3, 0x7, 0x2, 0x0, 0x70bd2a, 0x25dfdbff}, 0x10}}, 0x4000000) (async) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002680)=ANY=[@ANYBLOB="020a00000200000000000000000000006a35b22c0e7445b9f9112d1dd286841774477e91a9031a3442a25735e62b5d6435f45451373fa5aef7c3117c1e9ce37984bd331b81ef41fab4dc495e9afcc8f1ab96fa515f392a09a53d6176d38fbcaaab0f33a9c3197b1346fa755900b29f4e67d68457bc9121019f79cd647f0628d691f81a5558ebaf322e96b9546f608fc44de01bd6b14cdc9cc9c0baf43ba2dfd328a77b1c3eac0c63f44078"], 0x10}}, 0x0) sendmmsg(r2, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="70f2ed0de0d0a59df72ebade3a1fc8911bf1c7e5adef930fc783aec3f678b47a8829c8d749d938d3aeb755fa64d801b834a8d612ac1ff9b3c3ed6e0e7d5ecf73d482321a4903bcfad35573f5615126a039fdf678a27a008888ab3130d68e48b36c45428256c4d2905aba311bbad12245ea2a4603d21de010775ce266b13369f51edf5e54c55e2c8456fda9aa2b89be92193a042c186706ab26e4ddfc66f754267602e0b9b31e9495f45c7e62", 0xac}, {&(0x7f00000017c0)="8fc47ca575a13f08d103c0643b759f4b6d260353037084ebf04525daf3d9fab05406518b88a6de7d33ab9c850c3d45cff041744bb225f5006848ced533690fa5bc9ea759039bad9f937ef9d8e4213e9b35e08aeb1d57c2570ff51324d40703d4e46a2596d69c4520f95b2c6d3c3932fc17570100000000000000df3c1cdf0f062d769ffd22feeace16f510bc942824cb8f5429aa368d2e8d261b717d33c8a4d93e9bdf43a4d9ae5df46c3a5baba5e5a0517689b971f6f1ba3da313d4f63b5f2ab292c5c5c83397ed2bcfc227bc2c033eeb2828b8b025ea43b7406c", 0xdb}, {&(0x7f0000000180)="150bbedbd4e98671afb8e7de41894a9ea03d8b64950d1bac99ab88fc282379ae80c7c88ad33b981ab1c9e16d19ce90d241ded3e4d22691d997805e1d0cebb896712cda64d02ef40c7907e6bb8ff5761d28c35feb3f91f3d60e05f518bd3227fb91e1", 0x62}, {&(0x7f0000000100)="62f28773ee4dff3dd4b614cc97c5a2150b7dd29d0770b930a8", 0x19}, {&(0x7f0000000340)="f168a5b5661807a8041b0457f2d2531f5cd34f96613bfed1af5a8484810b15529a8ef91b31e1975bd2f4118a23541a3942086dccaa3fc0e5916ed4949a8f7b37e2e7c301fe12d54debc20bbc93b4f1c6d5d636849f004c4150f630f4f0af2b26adc13330614a01d9ae87c2104c98d49d1b0521f6f07c5a13e32fca2e360aad19bedd", 0x82}, {&(0x7f0000000400)="7f168e5fe2596631f7b3bd2987587103e31ee9f165a66cbad80cade3de46737bba2010301f5afd4bf1d0b47d37dce3b190cf152b1146af1f0603dcb20f1ed97b8a8c0b649fec1dba35c0877f4a4e02cd6452d7ab0b7da94cb856005cb9848c3565e5b0a2a5b85042dba49034a62aa9011c052d1f5e40ed4bb486ba6a8ef35df3469d9b2f2262801656135891b9ec54795c90bc238d44cd2f3cab8cf20a8ba490c5130089e3025b972e2a0f055d7c6829af4067cfa67744a56c58d734", 0xbc}, {&(0x7f00000004c0)="c20c90e686cb6cca0d3d0a7cbf6a93f532d5a01e0058084d3fe979c356309167a05ad16e873b2076f7c3cd0b36251e1696137d6bcfcd66206512f601227103caa01b0619a5fd69cf5a4e72b3c5e4c2d13c22766ab4d5e5391fe51548521de3d6d3d6645278b6e14ce15c17147fe69eabaef0596c7e5622ad01bc75bba5c25cb6d78a8a7f6a3263d238c5e4810f5daba4e5b8d05bfba6134f4e1d4bcb455b1f37893e140abf8a4d06f3ea58938bc04f92a7e2ff90389ecddccaf15c6b58bf7a65421ccdcf0f8d780e7d1df5648d4f6119efcdde1df94c2f4d39acc73f32f6891a", 0xe0}], 0x7, &(0x7f00000005c0)=[{0x100, 0x117, 0x5, "de491c9867d419f6a1a1348292c00d967577de5ab1222eb5cee44bfab939f09cd72b695d95a9985640fb15eed2bffce4651ffa0e3a7da53905affa209308d597a6c6f2a39f2c81c80cbfa2810d15679a30404ff82e6e4f5fe05889747f4b380a8f3ead09600197877a91045fd686749b88e6c0e41270622dbf9278ee11abea1e88a283d71f17b448a8aad2fb0d82c5d5b21600f5afc908f340676f46d55a91c1c6b84c32329e6eaf34609adde5dfa25f039d6723fc472f3e540d454602da74539dcc221ba728057066f707df00983b72d233ca4cc8f32fb0929b19cd9aa6d9a235a32cf61131f9e0563d9714"}, {0x1010, 0x119, 0x1000, "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"}, {0x48, 0x119, 0x93, "2be73ff78b13562ca2afa298e1732cb4d5c2223489b88e9c0e63c307fad7741c72e2cad1a823983b17a15127b5d454da7f68840a9a"}], 0x1158}}, {{&(0x7f0000001740)=@generic={0x25, "174a2e58ddee817cf9f99f96641c47d8ab7bc912a2d4e104f8a37ca4140df41c7289772d710989773abcc194dea67c3ccebf1f155e4a72b96256921c9345aa62964b3819726b5ef9a920c5654735807be8c87fdeb70dda129e7490f1e6fd343c6680f9675cc8ca2b5419dc13198f7bbfd5c56170f819b381261306d307b7"}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000002540)="2f7b9750254e86803053cc70acb1f0baf0ae6745dfb00f887f9683357a336adac720900f41ae72e6bbc72cebc0f9f51f97d51df5911bbdadcdb8ddbe5bbd786c2b5c2ec83f9383292d62a84d0aae4c47f32fb2d64b2efeb53b12cf0cadf6f1b4687ae6b6b72c5704d12c9d09008e3ad12eff6d43dd2541dd14afd64114d45fd5f914bad41608d44b58349364bf5bfe23e83e986fca39c595bb72cb7e57a6d69fc0a0b6e0a8915c4910e0338328faff6433fa73fde4225abe7af6642927e8df3209edb5eb42fad5ddc8b1a4955c2c12995afecdfb3af2a31aff5ae743c6acc74b94010d7cb4f422884ad68cc5ebc1429aa87a9d659c7eef0fa7b9dd44d0315cd50392178e33dbfc890acb18693099400f6822", 0x112}], 0x1}}, {{&(0x7f0000001900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x3, 0x4, 0x3, 0x1, {0xa, 0x4e24, 0x2, @private2, 0x6}}}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001980)="0cf7e9b9465482a397be37ed336212f327044cac7ff95db28b9a857a9e8845de4c666fe7ad0614eb9b08b6738959565aa3f1c83834433e0df03d5458c7c98a742d1c339882f7b05c2a38799042407d76826e3a3bf2c36debe2a5d7af3db4dc8be35d2cc7b820215cc24894d03915bdf0609427a5b61d92c5c9fd0a350c7f7e724ba12ba099ea433d1b7352ee9b6de9672e9dcd364ec8ae0c", 0x98}, {&(0x7f0000001a40)="457cb7f420500ab7a79f9addc935db1e0b39fbc4abe52fcab804a650633ca35f4f78f98c053aaf4b9baca75a6a76497f49f53392397ec2559bdcb77d6503b01bbc3b85d9fde2ada2f64fa6742cbe1924889ff75f14e12dee5b", 0x59}, {&(0x7f0000001ac0)="6712cd956dc4a9beb05ae0161c5a3be2568004c862e70e1951df427765a20ed3605ba5984a8ba8f203d92539881200f3c50e5464b0cfb86559f8dbe12fbd736884e4b4bb379a9c5f2a625b64", 0x4c}, {&(0x7f0000001b40)="1b6e89888d79a64e49bac8f98cdf4a73b1a10b917d584052c8fd0d05a3b46e5c9e340b73b4185eb09a97531049edc0ae40b932df3d26ebf7c28ba93e5382632f8abe22f7c649c890a9abd4f3ee364fe631366ccd499d1d9a23257afda97b2c407c17879ac41189d4bcc64dee13b836d96c0bc9a31ffc317ad9d85abc71df8d647b4a78f77775574d45e539cd140af7abcb43a90fb84a83bbc94d93885c4787c6370106ba90c44e97cfe9dd1631caf04e0ba827321708abf9b6da0b4657154449085554c7b9d7689a878661ff7572486cd43d544e0002558b29bf5fa173", 0xdd}, {&(0x7f0000001c40)="6faf9b13e77ba6e47791b1b3015686114d04601fb99f4f4fbaebca1777f85c0e27eaa799160f632d64fa951c1e533d41ecb5d8f2c67ccd92e656b2b1b3d333cc17485f427fb1bb5345f00159b223aecc0f29ce91ed53a1a38ee6fdc3f7f6f3d59adcc1e853c77f4151657c717688c6a13c7afb764f8d135205d7c8078b712dff425b6ee65e8cde9b11a693b4389b3e9a2c5fbc5e4901c665609f2479b5ccd857362f545d745811ee6b396d816127fd1f294548832d84f5d6bf9086656eaef53ae8e6b7fbfd53b86c22f7eb61bfab0f36d3eb0f60000d7b43b81ff395bdd065cd184183453e51046fa59c0ad6ff5cbc95ad45f9b4", 0xf4}], 0x5, &(0x7f0000001dc0)=[{0xe8, 0x6, 0x4, "4b86d497f536e7c5a881b43c4f6c965a735fb6cf220180e15a3f54aa50fdfa3e0b1d84a75997ae649c19b973e2cfa97639b83d07dbb821debedbab38788e20976db9a054ad8ae6e4c598291755e2072c72eef88d0b59ad561f163be2c523a1911d7e3341bc0b06fc87c1dff2b4695b597f917d1fed64df6cb4c1e0057a66e20fc50389f0f6db5c0dcdd055e7d5e5dea04dedec3f9edfa6981fac3769a7f8dccf37d27177a7b160fcb3af6d66767b1911680f92835f50d3791478c104c45787dd4c3c0ecdf6159f829484759bbd95267155b301981beedc"}, {0x10, 0x111, 0xf25}, {0xc0, 0x108, 0x2, "d2d9e1e5a2426fccdd48ff587bb68cc037e0263d71296f8017dad98f4bb792cde5e6805a3e1e1bb0ff355830defcc416a497602df07b1dbad069bf70701f9a9f08a3653e358d52524d8970e270ceb82bd8ffca0172156f753fa83fbd501e80e5635decbbbaa3aa39b4a544670bdd304a52b6c885d57334efd13f08d2189168d770a5f13c38d3900cc6f2c79e39d84fc390460118a88c821bc8da01d0df3442bc5297e8b7c905bd89c2b3"}, {0xa0, 0x88, 0x5, "6c9efaf224979a795f5a177307069ec9bfc4194a4047fa77a7645a4b15f5d251625902a1a239f686ee49cb669302d9c28b9ce0491a764b9c0fe6c9bdd782e03b128e76b6ff8225512d301a8618ec0abacfd437ef42d72d7ec3d4264be1012d3e59fb535e3717b681b9a3b3ace97c28a96bf51f4640a8613efef9adccb5cb9e7b5891d787d3f720b9f0890cfbe98fa6c1"}, {0x58, 0x10d, 0x6, "8468b74926ab7c8792c2f7e99347e2cc8a4dd91df87f19a5e6641401dfec58723824bdaee3c053afd991fe5c27f8a45a49c6a5c5167f55f775b4d12b7e5c7c688e"}, {0x80, 0x88, 0x3, "620b80121ba7f939caff3f1f8344a4fa86b5ad0858c36254bf51880c7790a46d884be996d90b21ce6f15f81e78f7a74943add65b257eb9042485d20a7ccf2047c708da695ccdb5a594864f7050bde20d56fad78b69afad76590562b382783d56e747a083e5cba75d256fcd7ab16d1d4f"}, {0x48, 0x10c, 0x101, "778698ecf5879be53a4f405d4a10c0c2b84b27d74c8f77867efa3b8a35b93776610abec8d42cd6dabb8ed33e0a7f9f1473"}, {0xb0, 0x84, 0x8, "4945157932b7df2f6a77fe65a321ec5642982ec8edec53700af7420efd6e8cc22dff5b69a88825fe3fed912aa4ea3f1e0b3e0921de6e60d9c7578d05f56970ed5d05f307fa72b2461d919bef7b170897067abbf90436e4b8c8e0457c4fca467ff804cb71548ef9844d394405cc893e26c0407b0b2cb6b04449b1ef56c6c6235dd896f4ea6c5268c8e65116c567c4fcee5ef661bda59b889512"}, {0xc0, 0xff, 0x8, "2edcf36c86bc0f26da0cce2602455e11ce67710b3af01667cbca9d87c7cf5eb6dc6b74a391b5ea978eb7d34830fdf5197f414bc2c6dfe66d2eff3f8565362f9b7319c55aed60ced27ec151e48e3d63f845d357aa253513703cbca37866561e46912d8b2a7f353fc21ae6b0638d8554ffe54e6aa6210698f6c239ca6dce5870d787c4404a8b88c079fbb1b11b763f56a9c65fc8ce66a6a02c8f2451b6f5e9a9ba61b3b5f634d0e8117d8e02645a"}], 0x4e8}}, {{&(0x7f00000022c0)=@tipc=@name={0x1e, 0x2, 0x0, {{0x41, 0x1}, 0x1}}, 0x80, &(0x7f0000002380)=[{&(0x7f0000002340)="209df183e4163bf30e862c269c7705aefbd5a300cebb0548", 0x18}], 0x1, &(0x7f00000023c0)=[{0x60, 0x10b, 0x3, "e2e10639f465ae922ef628126b226d464f10dbf9f81e8f795d5ab25928fae6ccb22098660d71bd2f32cf317ac297e71e45f71578c23bfffea4d5bf5636e456d454631cecd462c0f3b4"}], 0x60}}], 0x4, 0x20000000) 1.393842552s ago: executing program 0 (id=4134): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca02}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x48}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0x98}}, 0x4048010) accept4(r3, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000000)=0x80, 0x80000) 1.228217173s ago: executing program 1 (id=4135): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001340)=ANY=[@ANYBLOB="1800000000000000000000000000000071122f000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, 0x2d, 0x9, 0x70bd27, 0x25dfdbfe, {0x5}, [@typed={0xfd98, 0xa, 0x0, 0x0, @uid}]}, 0x1c}}, 0x20000086) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8982, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @mcast2, 0xbc7}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x17, &(0x7f0000000180)=0x91, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$inet6(r2, &(0x7f0000000400)={0xa, 0x4e20, 0x8, @local, 0xc}, 0x1c) close(r1) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000640000000000500010006000000050005000200e4ff05000400000000000900020073797a31000000000c000300686173683a697000"], 0x50}}, 0x0) gettid() r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000002c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x7a) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmsg$can_bcm(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x40048d0) 1.199622283s ago: executing program 0 (id=4136): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000010ab6fe868b67f000000", @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000000000000100"/28], 0x50) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}}, 0x0) r4 = socket(0x2a, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x28, 0x3, 0x8, 0x5, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x28}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0xfff1}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x3}, @TCA_FLOW_KEYS={0x8, 0x1, 0x32ad}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x408c0}, 0x4000) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r3, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x100}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1d7}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xfffffff3}, @ETHTOOL_A_CHANNELS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xd80}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c080) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)) 1.088371309s ago: executing program 2 (id=4137): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x3000c81c) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x89b0, &(0x7f0000000080)={'bond0\x00', &(0x7f00000000c0)=@ethtool_channels={0x1, 0x7c4d2537, 0x0, 0xfffffffd}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20050800) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000080)) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0439000025"], 0x33fe0) 934.564199ms ago: executing program 2 (id=4138): r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0xffffffff, 0xa, 0x22, 0x40, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1, 0xa, @void, @value, @void, @value}, 0x50) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@rand_addr, @rand_addr, 0x0}, &(0x7f0000000140)=0xc) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x3, [@var={0x9, 0x0, 0x0, 0xe, 0x3, 0x2}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x1, 0x3}]}, {0x0, [0x30]}}, &(0x7f0000000200)=""/154, 0x3b, 0x9a, 0x0, 0xffffffff, 0x0, @void, @value}, 0x28) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f00000003c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={'nr', 0x0}, 0x5, [@bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5421, &(0x7f00000000c0)=0x7) write$cgroup_int(r4, &(0x7f0000000140), 0xfffffdef) write$cgroup_subtree(r4, 0x0, 0x12) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x6, 0xf, 0x6, 0x7a8267fa44b6e1a1, r1, 0x8, '\x00', r2, r3, 0x3, 0x2, 0x2, 0x0, @value=r5, @void, @void, @value}, 0x50) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 884.228723ms ago: executing program 0 (id=4139): socket(0x25, 0x1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wg0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000000c0)=0x40, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000280)=0x20, 0x4) bind$xdp(r3, &(0x7f00000001c0)={0x2c, 0x6, r4, 0x80000000, r2}, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 776.614986ms ago: executing program 1 (id=4140): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000100)={0x0, 0xff7f, 0xd, [0x4, 0x4b7, 0x9, 0x400e, 0x11, 0x9, 0x9fb, 0x2f, 0x43f3, 0x6243, 0x6, 0x1, 0x8e2]}, &(0x7f00000000c0)=0x22) r2 = socket(0x840000000002, 0x3, 0x100) setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000040)=0x5, 0x1) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, 0x0, &(0x7f0000000300)) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x50, &(0x7f0000000000)={0x0, 0x0}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001500)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB="1a00"/12, @ANYRES32, @ANYBLOB="608be10906d5b0fcc392651f7c35239fd4678664871e62a9f43847babf67ca5a4a3da208b4bf1ef4b74940441f56c0993ba7dc8fe660d94d13c70be6909e946dbde806c000b0333db1228b49d1", @ANYRES64=0x0], 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r6, 0x4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) r10 = socket$netlink(0x10, 0x3, 0x4) write(r10, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001ac0)={0x0, 0x17, &(0x7f0000001580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x1000}, {}, {}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001640)='syzkaller\x00', 0x2, 0xd2, &(0x7f0000001680)=""/210, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000001840)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001880)={0x2, 0x0, 0xffff8000, 0xc}, 0x10, 0x0, r5, 0x7, &(0x7f0000001a00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001a40)=[{0x2, 0x3, 0x2, 0xb}, {0x1, 0x4, 0x7, 0xc}, {0x1, 0x3, 0xc, 0x6}, {0x3, 0x5, 0x2, 0xb}, {0x5, 0x2, 0xf, 0x7}, {0x4, 0x1, 0x3}, {0x4, 0x5, 0xb, 0xa}], 0x10, 0x7, @void, @value}, 0x94) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, '\x00\x00\b\x00', "376a31a11e8e279cec092f071cc80f218d360356a936a7e3971a8c35c47e5804", '\x00', "fffffffffffffffd"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "75503e2e6b028a30", "38a2bbc0905837e3dfcbf0c4c1bb92da5cd2135ec0bcbb0400", "1be57745", "d71a00fff5fd1f00"}, 0xa) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r7, 0x4) r11 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240)=r6, 0x4) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1398, 0x0, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x23, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r11, 0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={r1, 0x8, 0x6}, 0x8) 727.464718ms ago: executing program 2 (id=4141): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011809ed61b77d9f16a96c594a1835eb265ba7f20e413597129961ed189d63c3391c4854d66a1452ed6b21900c796c4fb58a76f04811e8a7bda7af3bdb21fcab2d6ca22909ed50d079f0b710000004d0012803b6f2811032d68bea0612044f47c2842b277eb4bc53070416c6050e46d2e0d055c97c9e7f9bf0bafe4af56eba9024644942e3645a3e6db0d1191744909497df00d71a338c0c6a42d17"], 0xb4}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x56}]}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 604.261201ms ago: executing program 2 (id=4142): r0 = socket$inet_icmp(0x2, 0x2, 0x1) recvfrom$inet(r0, 0x0, 0x0, 0x2100, 0x0, 0x0) (async) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) (async) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) (async) r2 = socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000001c0), 0x4) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'lo\x00', {}, 0xf62}) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0xc}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 476.964878ms ago: executing program 1 (id=4143): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x1, 0x1ff, 0x80000000}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @loopback, @private}, &(0x7f0000000140)=0xc) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0x5, [@type_tag={0x5, 0x0, 0x0, 0x12, 0x2}, @var={0xf, 0x0, 0x0, 0xe, 0x2, 0x1}, @fwd={0xd}, @struct={0x1, 0x6, 0x0, 0x4, 0x0, 0x2, [{0xf, 0x1, 0x7}, {0x10, 0x2, 0x6}, {0xd, 0x1, 0x6}, {0xc, 0x0, 0x6}, {0x3, 0x0, 0x6}, {0x6, 0x5, 0x4}]}, @typedef={0x7, 0x0, 0x0, 0x8, 0x1}, @enum64={0xd, 0x2, 0x0, 0x13, 0x1, 0xe, [{0xc, 0x23, 0x1}, {0x7, 0x6, 0x1}]}]}, {0x0, [0x30, 0x0, 0x5f]}}, &(0x7f0000000280)=""/111, 0xc9, 0x6f, 0x1, 0x7, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x4, 0x708f, 0x1, 0x28, 0x1, 0xff, '\x00', r3, r4, 0x1, 0x2, 0x4, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="001c6656698cadac3e8a7e79365a601f", @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf252b00000008000300", @ANYRES32=r2, @ANYBLOB="05003400c4000000040046000a000600bd4b5ec8e03f0000"], 0x34}}, 0x4000800) 373.186183ms ago: executing program 1 (id=4144): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000840)="d5fb0e94563c7165271b534424ab2d78116b36f2a42ef24a037f97f60e9a92e4", 0x20}], 0x1}}], 0x1, 0x20008090) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) sendmmsg$sock(r4, &(0x7f0000005e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4050) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x4000) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) 87.566638ms ago: executing program 2 (id=4145): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002c80)=[{{&(0x7f00000001c0)={0xa, 0x4e23, 0x8, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x64000000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002bc0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x6}}], 0x18}}], 0x2, 0x4001c00) 47.42749ms ago: executing program 0 (id=4146): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) r1 = socket$rds(0x15, 0x5, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) getsockopt(r1, 0x200000000114, 0x2717, 0x0, &(0x7f0000000000)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x30, r4, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x30}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x9f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendto$inet6(r5, &(0x7f0000000080)="58bb5e575d2f13ccdf8d882a89", 0xd, 0x4000000, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @local}, 0x1c) 0s ago: executing program 2 (id=4147): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xb0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2, 0xffffffffffffffff}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r1}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000003c0)={'gretap0\x00', 0x0, 0x8000, 0x10, 0xc, 0x4, {{0x13, 0x4, 0x1, 0x2a, 0x4c, 0x65, 0x0, 0x6, 0x2f, 0x0, @loopback, @remote, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0xf, 0x2b, [@loopback, @empty, @rand_addr=0x64010101]}, @lsrr={0x83, 0x1f, 0x28, [@loopback, @local, @remote, @multicast2, @multicast1, @broadcast, @multicast1]}, @ra={0x94, 0x4}, @end]}}}}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f0000000140), &(0x7f00000001c0)=r0}, 0x20) close(0x3) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r4) r5 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) r8 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r9, 0x29, 0x33, 0x0, 0x0) r10 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r10, 0x0, 0x0) write$tun(r6, &(0x7f0000000700)={@void, @void, @eth={@multicast, @local, @val={@val={0x88a8, 0x0, 0x0, 0x6}}, {@mpls_mc={0x8848, {[], @ipv4=@gre={{0x5, 0x4, 0x2, 0x1d, 0x58, 0x66, 0x0, 0x5, 0x2f, 0x0, @multicast1, @local}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, {0x1, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x0, {{0x9, 0x1, 0x1c, 0x1, 0x1, 0x2, 0x1, 0xd4}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x3, {{0x5, 0x2, 0xf, 0x3, 0x0, 0x0, 0x3}, 0x2, {0xc9, 0x200, 0x2, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1}}}}}}}}}}, 0x6e) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, &(0x7f0000000100)=0x2, 0x4) close(r5) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_ro(r11, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r12) r13 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$FS_IOC_FSSETXATTR(r13, 0x401c5820, &(0x7f0000000000)={0x5, 0x0, 0x10000, 0x2, 0x1003}) kernel console output (not intermixed with test programs): 0:50:50:50:50:50 [ 320.699378][T17639] netlink: 'syz.0.3451': attribute type 6 has an invalid length. [ 320.808429][T17641] xt_CT: No such helper "pptp" [ 320.908091][T17648] netlink: 'syz.0.3453': attribute type 11 has an invalid length. [ 321.205723][ T7735] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.385860][ T7735] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.481229][ T7735] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.656415][ T7735] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.718302][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 321.732280][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 321.742257][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 321.750990][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 321.759301][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 321.918638][ T7735] bridge_slave_1: left allmulticast mode [ 321.924803][ T7735] bridge_slave_1: left promiscuous mode [ 321.930504][ T7735] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.939649][ T7735] bridge_slave_0: left allmulticast mode [ 321.945920][ T7735] bridge_slave_0: left promiscuous mode [ 321.951844][ T7735] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.242858][ T7735] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.256780][ T7735] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.285601][ T7735] bond0 (unregistering): Released all slaves [ 322.505403][T17668] chnl_net:caif_netlink_parms(): no params data found [ 322.867775][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 322.877408][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 322.886781][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 322.902262][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 322.912252][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 322.961750][ T7735] hsr_slave_0: left promiscuous mode [ 322.969212][ T7735] hsr_slave_1: left promiscuous mode [ 322.975247][ T7735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.982664][ T7735] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.990916][ T7735] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.998488][ T7735] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.025785][ T7735] veth1_macvtap: left promiscuous mode [ 323.031391][ T7735] veth0_macvtap: left promiscuous mode [ 323.037291][ T7735] veth1_vlan: left promiscuous mode [ 323.042640][ T7735] veth0_vlan: left promiscuous mode [ 323.611038][ T7735] team0 (unregistering): Port device team_slave_1 removed [ 323.651834][ T7735] team0 (unregistering): Port device team_slave_0 removed [ 323.823443][ T5841] Bluetooth: hci2: command tx timeout [ 324.040838][T17668] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.048494][T17668] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.056179][T17668] bridge_slave_0: entered allmulticast mode [ 324.064148][T17668] bridge_slave_0: entered promiscuous mode [ 324.073583][T17668] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.080797][T17668] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.088512][T17668] bridge_slave_1: entered allmulticast mode [ 324.098134][T17668] bridge_slave_1: entered promiscuous mode [ 324.138541][T17713] netlink: 'syz.1.3467': attribute type 1 has an invalid length. [ 324.149107][T17713] __nla_validate_parse: 5 callbacks suppressed [ 324.149124][T17713] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3467'. [ 324.249495][T17668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.291466][T17668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.439550][T17668] team0: Port device team_slave_0 added [ 324.504903][T17668] team0: Port device team_slave_1 added [ 324.632920][T17668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.640398][T17668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.672793][T17668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.718783][T17735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3473'. [ 324.728475][T17668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.736089][T17668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.762416][T17668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.884723][T17668] hsr_slave_0: entered promiscuous mode [ 324.891233][T17668] hsr_slave_1: entered promiscuous mode [ 324.905572][T17668] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 324.915289][T17668] Cannot create hsr debugfs directory [ 324.920985][T17739] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3474'. [ 324.936962][T17739] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3474'. [ 324.950732][T17739] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3474'. [ 324.960159][T17739] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3474'. [ 324.973786][T17739] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3474'. [ 324.983793][T17739] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3474'. [ 324.997933][T17739] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3474'. [ 325.007181][T17739] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3474'. [ 325.016459][ T5841] Bluetooth: hci4: command tx timeout [ 325.237973][T17760] netlink: 'syz.1.3477': attribute type 13 has an invalid length. [ 325.261308][T17760] netlink: 'syz.1.3477': attribute type 17 has an invalid length. [ 325.342218][T17760] gretap0: left promiscuous mode [ 325.528564][T17760] gretap1: left promiscuous mode [ 325.557729][T17760] gretap2: left promiscuous mode [ 325.567126][T17760] vlan3: left promiscuous mode [ 325.599813][T17700] chnl_net:caif_netlink_parms(): no params data found [ 325.730136][T17776] net_ratelimit: 27 callbacks suppressed [ 325.730155][T17776] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 325.856696][T17780] 8021q: adding VLAN 0 to HW filter on device bond7 [ 325.894838][ T5841] Bluetooth: hci2: command tx timeout [ 326.090941][T17700] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.123229][T17700] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.130821][T17700] bridge_slave_0: entered allmulticast mode [ 326.146430][T17700] bridge_slave_0: entered promiscuous mode [ 326.167803][T17700] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.182211][T17700] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.191349][T17700] bridge_slave_1: entered allmulticast mode [ 326.216085][T17700] bridge_slave_1: entered promiscuous mode [ 326.281018][T17668] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.422238][T17668] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.479271][T17700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.509955][T17700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.606883][T17668] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.731764][T17700] team0: Port device team_slave_0 added [ 326.767722][T17668] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.807359][T17700] team0: Port device team_slave_1 added [ 326.886531][T17700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.893621][T17700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.962312][T17700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.998438][T17700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.030686][T17700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.103314][ T5841] Bluetooth: hci4: command tx timeout [ 327.114494][T17700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.190435][ T30] audit: type=1107 audit(1746515853.221:4): pid=17848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='T%A<”Aœnûî!YiÍií]Ϊ]åï@Ú_‰–™«?åVö¤øeœK×B ÃŒ§0Ð%—V*ÎmkvÚ—ß´I&¤Áù­»)•ªõÌß{Cñ¹Mž‚&ÚK:ŸÆ¹¦û°£¡®{$d ƒ×ÌÇ'‘Òiø”É~ƒ!ð±%³ [ 327.190435][ T30] %01ytÉuTù\Lîî>E²îãàØX¸Îó+”KŸŒa‡qþä)ålOn™½…„ÿ„Œ÷ [ 327.190435][ T30] àuÊV×ô3lh|Û¸óíº¤(¡SgÈ ¯ðȽƒ€‰ÔoXˆP¿¡‘Û‚' [ 327.432367][T17700] hsr_slave_0: entered promiscuous mode [ 327.455550][T17700] hsr_slave_1: entered promiscuous mode [ 327.461770][T17700] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 327.479154][T17700] Cannot create hsr debugfs directory [ 327.537261][T17668] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 327.636184][T17668] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 327.687843][T17668] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 327.737436][T17668] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 327.792219][T17870] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 327.799503][ T5879] IPVS: starting estimator thread 0... [ 327.915797][T17875] IPVS: using max 26 ests per chain, 62400 per kthread [ 327.975257][ T5841] Bluetooth: hci2: command tx timeout [ 328.275179][T17668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.405399][T17901] netlink: 'syz.3.3519': attribute type 58 has an invalid length. [ 328.414425][T17668] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.430820][ T1031] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.438028][ T1031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.481398][T17899] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 328.506280][T17899] netlink: 'syz.0.3518': attribute type 1 has an invalid length. [ 328.515810][ T1031] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.523021][ T1031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.808555][T17700] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 328.837498][T17700] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 328.892991][T17700] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 328.941980][T17700] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 329.177726][ T5841] Bluetooth: hci4: command tx timeout [ 329.290612][T17668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.345607][T17939] netlink: 'syz.3.3529': attribute type 10 has an invalid length. [ 329.365425][T17940] netlink: 'syz.3.3529': attribute type 10 has an invalid length. [ 329.380398][T17939] __nla_validate_parse: 34 callbacks suppressed [ 329.380417][T17939] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3529'. [ 329.406598][T17940] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3529'. [ 329.423791][T17940] dummy0: entered promiscuous mode [ 329.439512][T17940] bridge0: port 3(dummy0) entered blocking state [ 329.446504][T17940] bridge0: port 3(dummy0) entered disabled state [ 329.453158][T17940] dummy0: entered allmulticast mode [ 329.462126][T17940] bridge0: port 3(dummy0) entered blocking state [ 329.468798][T17940] bridge0: port 3(dummy0) entered forwarding state [ 329.523702][T17700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.542765][T17668] veth0_vlan: entered promiscuous mode [ 329.585162][T17668] veth1_vlan: entered promiscuous mode [ 329.611408][T17700] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.661470][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.668715][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.702894][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.710159][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.746884][T17947] bond0: mtu less than device minimum [ 329.887471][T17668] veth0_macvtap: entered promiscuous mode [ 329.923518][T17668] veth1_macvtap: entered promiscuous mode [ 330.040281][T17668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.056761][ T5841] Bluetooth: hci2: command tx timeout [ 330.077905][T17668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.088354][T17668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.099348][T17668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.112609][T17668] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.227347][T17973] netlink: 'syz.0.3540': attribute type 1 has an invalid length. [ 330.235415][T17668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.235439][T17668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.235453][T17668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.235467][T17668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.238565][T17668] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.295659][T17974] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3539'. [ 330.353709][T17668] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.394632][T17668] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.406305][T17668] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.422279][T17668] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.570012][T17700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.589259][T17989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3543'. [ 330.768746][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.808562][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.907904][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.941054][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.141329][T18012] netlink: 'syz.1.3547': attribute type 11 has an invalid length. [ 331.180603][T18012] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3547'. [ 331.254748][ T5841] Bluetooth: hci4: command tx timeout [ 331.317616][T17700] veth0_vlan: entered promiscuous mode [ 331.363227][T17700] veth1_vlan: entered promiscuous mode [ 331.510129][T17700] veth0_macvtap: entered promiscuous mode [ 331.543756][T17700] veth1_macvtap: entered promiscuous mode [ 331.592546][T18041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3555'. [ 331.610028][T18038] veth0: entered promiscuous mode [ 331.623386][T18038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3553'. [ 331.676314][T18042] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 331.806609][T18048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 331.883020][T17700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.902067][T17700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.925578][T17700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.938780][T17700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.949714][T17700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.961998][T17700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.980861][T17700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.981455][T18057] netlink: 'syz.2.3559': attribute type 4 has an invalid length. [ 332.018401][T17700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.032877][T17700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.049594][T17700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.079774][T17700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.100436][T17700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.117729][T17700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.139964][T17700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.162609][T17700] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.173121][T17700] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.189104][T17700] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.199188][T17700] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.390724][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.440250][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.652469][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.711776][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.935063][T18071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3564'. [ 333.029900][T18076] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3566'. [ 333.083794][T18076] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3566'. [ 333.742034][ T67] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.920422][ T67] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.976804][ T67] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.031426][ T67] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.161692][ T67] bridge_slave_1: left allmulticast mode [ 334.167651][ T67] bridge_slave_1: left promiscuous mode [ 334.174662][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.184491][ T67] bridge_slave_0: left allmulticast mode [ 334.190166][ T67] bridge_slave_0: left promiscuous mode [ 334.196800][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.534986][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 334.550450][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 334.562132][ T67] bond0 (unregistering): Released all slaves [ 334.706366][T18099] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3573'. [ 334.821595][T18099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3573'. [ 334.855187][T18099] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3573'. [ 335.082885][ T67] hsr_slave_0: left promiscuous mode [ 335.115465][ T67] hsr_slave_1: left promiscuous mode [ 335.121675][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.122262][T18123] openvswitch: netlink: Flow key attr not present in new flow. [ 335.138053][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.147725][T18124] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3579'. [ 335.159178][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.171996][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.226556][ T67] veth1_macvtap: left promiscuous mode [ 335.238890][ T67] veth0_macvtap: left promiscuous mode [ 335.250472][ T67] veth1_vlan: left promiscuous mode [ 335.263410][ T67] veth0_vlan: left promiscuous mode [ 335.263530][T18129] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 335.290800][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 335.300813][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 335.310598][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 335.320230][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 335.330214][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 335.860632][ T67] team0 (unregistering): Port device team_slave_1 removed [ 335.908911][ T67] team0 (unregistering): Port device team_slave_0 removed [ 336.302012][T18124] ip_vti0: entered allmulticast mode [ 336.501241][T18141] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3584'. [ 336.531364][T18146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3587'. [ 336.563685][T18147] bridge: RTM_NEWNEIGH with invalid state 0x4 [ 336.615571][T18149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3585'. [ 336.757204][T18130] chnl_net:caif_netlink_parms(): no params data found [ 336.930098][T18130] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.939652][T18130] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.947555][T18130] bridge_slave_0: entered allmulticast mode [ 336.955838][T18130] bridge_slave_0: entered promiscuous mode [ 336.987616][T18130] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.003642][T18130] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.011480][T18130] bridge_slave_1: entered allmulticast mode [ 337.020506][T18130] bridge_slave_1: entered promiscuous mode [ 337.125324][T18130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.146164][T18130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.209594][T18170] veth1_to_team: entered promiscuous mode [ 337.219658][T18130] team0: Port device team_slave_0 added [ 337.249450][T18170] veth1_to_team (unregistering): left promiscuous mode [ 337.280879][T18170] team0: Port device team_slave_1 removed [ 337.295905][T18130] team0: Port device team_slave_1 added [ 337.367076][T18130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.374427][T18130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.402339][T18130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.414655][ T5845] Bluetooth: hci4: command tx timeout [ 337.447158][T18130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.461645][T18130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.494959][T18130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.670691][T18130] hsr_slave_0: entered promiscuous mode [ 337.695609][T18130] hsr_slave_1: entered promiscuous mode [ 337.702081][T18130] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 337.732795][T18130] Cannot create hsr debugfs directory [ 337.796271][T18194] netlink: 'syz.2.3602': attribute type 2 has an invalid length. [ 338.263378][T18210] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3607'. [ 338.774595][T18130] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 338.791373][T18130] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 338.857120][T18130] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 338.886080][T18241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3617'. [ 338.935766][T18130] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 339.102437][T18254] 8021q: adding VLAN 0 to HW filter on device bond1 [ 339.225825][T18254] bond1 (unregistering): Released all slaves [ 339.239888][T18262] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3621'. [ 339.392198][T18130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.457360][T18130] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.481611][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.488853][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.499267][ T5845] Bluetooth: hci4: command tx timeout [ 339.522700][ T1031] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.529926][ T1031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.870013][T18284] x_tables: unsorted entry at hook 2 [ 340.107169][T18130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.554974][T18334] pimreg3: entered allmulticast mode [ 340.692611][T18341] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3647'. [ 340.813559][T18130] veth0_vlan: entered promiscuous mode [ 340.870545][T18130] veth1_vlan: entered promiscuous mode [ 341.022080][T18130] veth0_macvtap: entered promiscuous mode [ 341.060753][T18357] team0: entered promiscuous mode [ 341.087929][T18357] team_slave_0: entered promiscuous mode [ 341.098170][T18357] batadv_slave_1: entered promiscuous mode [ 341.110018][T18357] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 341.117843][T18357] Cannot create hsr debugfs directory [ 341.131150][T18130] veth1_macvtap: entered promiscuous mode [ 341.162943][T18361] netlink: 'syz.3.3652': attribute type 1 has an invalid length. [ 341.181473][T18130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.204009][T18130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.214348][T18130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.224981][T18130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.234969][T18130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.245583][T18130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.265690][T18130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.330862][T18130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.342934][T18130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.366078][T18130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.381241][T18130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.392898][T18130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.410612][T18130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.444894][T18130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.472901][T18371] vti0: entered promiscuous mode [ 341.499843][T18130] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.518583][T18130] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.532851][T18130] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.541785][T18130] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.574952][ T5845] Bluetooth: hci4: command tx timeout [ 341.708585][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.733313][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.815520][ T7735] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.833435][ T7735] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.166408][T18399] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3666'. [ 342.368093][ T1031] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.517298][ T1031] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.601376][ T1031] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.681783][ T1031] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.980357][ T1031] bridge_slave_1: left allmulticast mode [ 342.986265][ T1031] bridge_slave_1: left promiscuous mode [ 342.992114][ T1031] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.001807][ T1031] bridge_slave_0: left allmulticast mode [ 343.007964][ T1031] bridge_slave_0: left promiscuous mode [ 343.013690][ T1031] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.350050][ T1031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.361493][ T1031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.372411][ T1031] bond0 (unregistering): Released all slaves [ 343.613360][T18416] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.3673'. [ 343.635014][T18416] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.3673'. [ 343.860670][T18429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3675'. [ 343.912983][T18428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3675'. [ 343.989625][T18435] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20004 [ 344.003463][ T1031] hsr_slave_0: left promiscuous mode [ 344.026224][ T1031] hsr_slave_1: left promiscuous mode [ 344.042625][ T1031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.060471][ T1031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.105325][ T1031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.133272][ T1031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.216129][ T1031] veth1_macvtap: left promiscuous mode [ 344.228906][ T1031] veth0_macvtap: left promiscuous mode [ 344.248918][ T1031] veth1_vlan: left promiscuous mode [ 344.267873][ T1031] veth0_vlan: left promiscuous mode [ 344.268017][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 344.289030][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 344.300636][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 344.309544][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 344.318555][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 344.787536][ T1031] team0 (unregistering): Port device team_slave_1 removed [ 344.842290][ T1031] team0 (unregistering): Port device team_slave_0 removed [ 345.304536][T18440] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 345.452752][T18461] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3683'. [ 345.590934][T18470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3687'. [ 345.721980][T18474] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3686'. [ 345.740497][T18474] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3686'. [ 345.778320][T18473] tipc: Enabling of bearer rejected, failed to enable media [ 345.961716][T18487] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 346.028469][T18485] geneve1: entered promiscuous mode [ 346.041192][T18485] geneve1: entered allmulticast mode [ 346.075724][T18490] netlink: 'syz.2.3692': attribute type 3 has an invalid length. [ 346.114071][T18490] netlink: 'syz.2.3692': attribute type 3 has an invalid length. [ 346.121931][T18490] netlink: 'syz.2.3692': attribute type 3 has an invalid length. [ 346.171179][T18490] netlink: 'syz.2.3692': attribute type 3 has an invalid length. [ 346.181618][T18490] netlink: 'syz.2.3692': attribute type 3 has an invalid length. [ 346.234278][T18490] netlink: 'syz.2.3692': attribute type 3 has an invalid length. [ 346.245440][T18490] netlink: 'syz.2.3692': attribute type 3 has an invalid length. [ 346.253348][T18490] netlink: 'syz.2.3692': attribute type 3 has an invalid length. [ 346.278446][T18490] netlink: 'syz.2.3692': attribute type 3 has an invalid length. [ 346.280783][T18505] xt_limit: Overflow, try lower: 0/0 [ 346.287581][T18490] netlink: 'syz.2.3692': attribute type 3 has an invalid length. [ 346.307821][T18505] vlan0: entered allmulticast mode [ 346.316779][T18505] veth0_vlan: entered allmulticast mode [ 346.374527][ T5845] Bluetooth: hci4: command tx timeout [ 346.399777][T18505] team0: Port device vlan0 added [ 346.452309][T18451] chnl_net:caif_netlink_parms(): no params data found [ 346.495500][T18510] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 346.518429][T18510] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 346.531727][T18510] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 346.565328][T18520] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3701'. [ 346.714816][T18451] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.722063][T18451] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.730384][T18451] bridge_slave_0: entered allmulticast mode [ 346.740114][T18451] bridge_slave_0: entered promiscuous mode [ 346.750981][T18451] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.758491][T18451] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.766034][T18451] bridge_slave_1: entered allmulticast mode [ 346.774303][T18451] bridge_slave_1: entered promiscuous mode [ 346.826593][T18532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3704'. [ 346.848592][T18451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.867254][T18451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.919506][T18451] team0: Port device team_slave_0 added [ 346.931050][T18451] team0: Port device team_slave_1 added [ 346.990035][T18451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.997646][T18451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.024590][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 347.033524][T18451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.048486][T18451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.055677][T18451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.082017][T18451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.141962][T18451] hsr_slave_0: entered promiscuous mode [ 347.148569][T18451] hsr_slave_1: entered promiscuous mode [ 347.156293][T18451] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 347.164794][T18451] Cannot create hsr debugfs directory [ 347.453004][T18544] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3707'. [ 347.466277][T18546] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3707'. [ 347.493432][T18544] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 347.520171][T18543] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3707'. [ 347.570021][T18546] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 347.800024][T18558] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3711'. [ 347.959317][T18451] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 347.985936][T18451] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 348.010650][T18565] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3716'. [ 348.047365][T18451] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 348.054502][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 348.105213][T18570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3718'. [ 348.134289][T18451] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 348.462606][T18451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.470749][ T5845] Bluetooth: hci4: command tx timeout [ 348.497852][T18451] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.543496][ T3513] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.550702][ T3513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.631557][ T1031] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.638791][ T1031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.946422][T18616] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 349.075329][T18621] IPVS: set_ctl: invalid protocol: 51 172.30.1.1:20003 [ 349.094084][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 349.185151][T18451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.431494][T18644] sctp: [Deprecated]: syz.1.3738 (pid 18644) Use of int in maxseg socket option. [ 349.431494][T18644] Use struct sctp_assoc_value instead [ 350.133912][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 350.162031][ T7735] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.194271][ T7735] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 350.534323][ T5845] Bluetooth: hci4: command tx timeout [ 350.628785][ T7735] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.667869][ T7735] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 350.735297][T18451] veth0_vlan: entered promiscuous mode [ 350.779820][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 350.795283][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 350.815143][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 350.825061][T18692] __nla_validate_parse: 10 callbacks suppressed [ 350.825080][T18692] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3751'. [ 350.826645][ T7735] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.845806][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 350.853164][ T7735] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 350.860246][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 350.923217][T18451] veth1_vlan: entered promiscuous mode [ 350.976243][ T7735] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.995989][ T7735] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 351.048085][T18701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3756'. [ 351.057380][T18701] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3756'. [ 351.174463][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 351.286720][T18451] veth0_macvtap: entered promiscuous mode [ 351.325149][T18451] veth1_macvtap: entered promiscuous mode [ 351.375989][T18451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.422015][T18451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.432083][T18451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.443174][T18451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.458039][T18451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.469896][T18451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.487552][T18451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.507827][ T7735] dummy0: left allmulticast mode [ 351.515896][ T7735] bridge0: port 3(dummy0) entered disabled state [ 351.541940][ T7735] bridge_slave_1: left allmulticast mode [ 351.548602][ T7735] bridge_slave_1: left promiscuous mode [ 351.559997][ T7735] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.569784][ T7735] bridge_slave_0: left allmulticast mode [ 351.580139][ T7735] bridge_slave_0: left promiscuous mode [ 351.586498][ T7735] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.001461][ T7735] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.016434][ T7735] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.028352][ T7735] bond0 (unregistering): Released all slaves [ 352.150838][T18451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.177064][T18451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.202625][T18451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.214053][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 352.220573][T18451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.231114][T18451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.266866][T18451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.293012][T18451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.331822][T18687] chnl_net:caif_netlink_parms(): no params data found [ 352.380358][T18451] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.403727][T18451] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.423622][T18451] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.434463][T18736] ieee802154 phy1 wpan1: encryption failed: -22 [ 352.441546][T18451] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.489838][T18736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3766'. [ 352.616193][ T5841] Bluetooth: hci4: command tx timeout [ 352.933399][ T7735] hsr_slave_0: left promiscuous mode [ 352.940349][ T5841] Bluetooth: hci0: command tx timeout [ 352.960680][ T7735] hsr_slave_1: left promiscuous mode [ 352.967954][ T7735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.976123][ T7735] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.984485][ T7735] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.991997][ T7735] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.025774][ T7735] veth1_vlan: left promiscuous mode [ 353.031315][ T7735] veth0_vlan: left promiscuous mode [ 353.091307][T18768] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3775'. [ 353.103105][T18768] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 353.112293][T18768] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 353.254071][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 353.279914][ T7735] team0 (unregistering): Port device vlan0 removed [ 353.554412][ T7735] team0 (unregistering): Port device team_slave_1 removed [ 353.608573][ T7735] team0 (unregistering): Port device team_slave_0 removed [ 354.290369][T18687] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.297509][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 354.309627][T18687] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.317120][T18687] bridge_slave_0: entered allmulticast mode [ 354.325988][T18687] bridge_slave_0: entered promiscuous mode [ 354.355028][T18687] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.379093][T18687] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.403600][T18687] bridge_slave_1: entered allmulticast mode [ 354.428801][T18687] bridge_slave_1: entered promiscuous mode [ 354.479145][T18792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3782'. [ 354.501619][T18792] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 354.512802][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.528185][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.602877][T18687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.659988][T18687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.693177][ T1031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.714048][ T1031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.760412][T18799] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3785'. [ 354.843572][T18687] team0: Port device team_slave_0 added [ 354.870309][T18687] team0: Port device team_slave_1 added [ 354.943800][ T7735] IPVS: stop unused estimator thread 0... [ 354.983436][T18687] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.002402][T18687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.029853][ T5841] Bluetooth: hci0: command 0x041b tx timeout [ 355.039645][T18687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.053169][T18687] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.060309][T18687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.086524][T18687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.333967][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 355.390770][T18687] hsr_slave_0: entered promiscuous mode [ 355.427228][T18687] hsr_slave_1: entered promiscuous mode [ 355.441512][T18687] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 355.478449][T18687] Cannot create hsr debugfs directory [ 355.611782][ T1031] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.701608][ T1031] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.777588][ T1031] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.876970][ T1031] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.017820][ T1031] bridge_slave_1: left allmulticast mode [ 356.023497][ T1031] bridge_slave_1: left promiscuous mode [ 356.029743][ T1031] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.039155][ T1031] bridge_slave_0: left allmulticast mode [ 356.046102][ T1031] bridge_slave_0: left promiscuous mode [ 356.051929][ T1031] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.376642][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 356.417790][ T1031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.429950][ T1031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 356.440385][ T1031] bond0 (unregistering): Released all slaves [ 356.598659][T18687] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 356.613031][T18687] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 356.665646][T18687] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 356.681335][T18687] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 356.784365][ T1031] hsr_slave_0: left promiscuous mode [ 356.801479][ T1031] hsr_slave_1: left promiscuous mode [ 356.814510][ T1031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.823396][ T1031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.825105][T18836] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3797'. [ 356.847391][ T1031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.876584][ T1031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.934391][ T1031] veth1_macvtap: left promiscuous mode [ 356.939973][ T1031] veth0_macvtap: left promiscuous mode [ 356.960965][ T1031] veth1_vlan: left promiscuous mode [ 356.966839][ T1031] veth0_vlan: left promiscuous mode [ 357.094158][ T5841] Bluetooth: hci0: command 0x041b tx timeout [ 357.249506][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 357.261843][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 357.278488][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 357.307528][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 357.331620][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 357.424860][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 357.643344][ T1031] team0 (unregistering): Port device team_slave_1 removed [ 357.690533][ T1031] team0 (unregistering): Port device team_slave_0 removed [ 358.125410][T18836] validate_nla: 44 callbacks suppressed [ 358.125430][T18836] netlink: 'syz.2.3797': attribute type 3 has an invalid length. [ 358.139070][T18836] netlink: 766 bytes leftover after parsing attributes in process `syz.2.3797'. [ 358.169282][T18842] IPv6: sit1: Disabled Multicast RS [ 358.195059][T18842] sit1: entered allmulticast mode [ 358.454140][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 358.509143][T18687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.759919][T18687] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.898286][ T3513] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.905791][ T3513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.929200][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.936509][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.002012][T18845] chnl_net:caif_netlink_parms(): no params data found [ 359.137520][T18884] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 359.174255][ T5841] Bluetooth: hci0: command 0x041b tx timeout [ 359.254266][T18893] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3812'. [ 359.265254][T18845] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.272677][T18845] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.281645][T18893] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3812'. [ 359.291217][T18845] bridge_slave_0: entered allmulticast mode [ 359.300569][T18845] bridge_slave_0: entered promiscuous mode [ 359.322279][T18893] vlan2: entered allmulticast mode [ 359.333473][T18893] gretap0: entered allmulticast mode [ 359.342936][T18895] openvswitch: netlink: IPv6 tunnel dst address is zero [ 359.352939][T18845] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.364567][T18845] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.384217][T18845] bridge_slave_1: entered allmulticast mode [ 359.391687][T18845] bridge_slave_1: entered promiscuous mode [ 359.414376][ T5841] Bluetooth: hci4: command tx timeout [ 359.504093][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 359.533041][T18845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.549854][T18845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.623112][T18897] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3813'. [ 359.647833][T18897] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3813'. [ 359.720062][T18845] team0: Port device team_slave_0 added [ 359.749750][T18845] team0: Port device team_slave_1 added [ 359.798101][T18911] IPv6: NLM_F_REPLACE set, but no existing node found! [ 359.818008][T18845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.825982][T18845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.853401][T18845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.866717][T18845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.873732][T18845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.900734][T18845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.981757][T18845] hsr_slave_0: entered promiscuous mode [ 359.988870][T18845] hsr_slave_1: entered promiscuous mode [ 359.996061][T18845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 360.003799][T18845] Cannot create hsr debugfs directory [ 360.075214][T18914] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3817'. [ 360.090611][T18914] macvlan0: entered promiscuous mode [ 360.153418][T18687] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.350165][T18916] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3818'. [ 360.477185][T18927] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3822'. [ 360.489553][T18687] veth0_vlan: entered promiscuous mode [ 360.503289][T18687] veth1_vlan: entered promiscuous mode [ 360.511028][T18927] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3822'. [ 360.533923][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 360.596439][T18930] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}zR3âëp(@O' [ 360.611221][T18930] CPU: 0 UID: 0 PID: 18930 Comm: syz.2.3823 Not tainted 6.15.0-rc4-syzkaller-00152-g4397684a292a #0 PREEMPT(full) [ 360.611250][T18930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 360.611263][T18930] Call Trace: [ 360.611271][T18930] [ 360.611280][T18930] dump_stack_lvl+0x189/0x250 [ 360.611317][T18930] ? lockdep_hardirqs_on+0x9c/0x150 [ 360.611341][T18930] ? __pfx_dump_stack_lvl+0x10/0x10 [ 360.611371][T18930] ? __pfx__printk+0x10/0x10 [ 360.611396][T18930] ? kernfs_path_from_node+0x2b/0x260 [ 360.611429][T18930] ? kernfs_path_from_node+0x216/0x260 [ 360.611461][T18930] sysfs_warn_dup+0x8e/0xa0 [ 360.611487][T18930] sysfs_do_create_link_sd+0xc0/0x110 [ 360.611517][T18930] device_add_class_symlinks+0x1cf/0x240 [ 360.611545][T18930] device_add+0x475/0xb50 [ 360.611573][T18930] wiphy_register+0x199a/0x26b0 [ 360.611620][T18930] ? __pfx_wiphy_register+0x10/0x10 [ 360.611643][T18930] ? minstrel_ht_alloc+0x893/0x990 [ 360.611682][T18930] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 360.611717][T18930] ieee80211_register_hw+0x334b/0x4060 [ 360.611753][T18930] ? ieee80211_register_hw+0x1441/0x4060 [ 360.611785][T18930] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 360.611817][T18930] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 360.611848][T18930] ? __hrtimer_setup+0x187/0x210 [ 360.611877][T18930] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 360.611901][T18930] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 360.611966][T18930] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 360.611994][T18930] ? trace_kmalloc+0x1f/0xd0 [ 360.612016][T18930] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 360.612041][T18930] ? kstrndup+0xbf/0x160 [ 360.612072][T18930] hwsim_new_radio_nl+0xea4/0x1b10 [ 360.612105][T18930] ? __pfx___nla_validate_parse+0x10/0x10 [ 360.612146][T18930] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 360.612191][T18930] ? __nla_parse+0x40/0x60 [ 360.612218][T18930] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 360.612256][T18930] genl_family_rcv_msg_doit+0x212/0x300 [ 360.612292][T18930] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 360.612335][T18930] ? bpf_lsm_capable+0x9/0x20 [ 360.612363][T18930] ? security_capable+0x7e/0x2e0 [ 360.612392][T18930] genl_rcv_msg+0x60e/0x790 [ 360.612426][T18930] ? __pfx_genl_rcv_msg+0x10/0x10 [ 360.612452][T18930] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 360.612499][T18930] netlink_rcv_skb+0x219/0x490 [ 360.612520][T18930] ? __pfx_genl_rcv_msg+0x10/0x10 [ 360.612549][T18930] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 360.612598][T18930] ? down_read+0x1ad/0x2e0 [ 360.612626][T18930] genl_rcv+0x28/0x40 [ 360.612650][T18930] netlink_unicast+0x758/0x8d0 [ 360.612695][T18930] netlink_sendmsg+0x805/0xb30 [ 360.612728][T18930] ? __pfx_netlink_sendmsg+0x10/0x10 [ 360.612754][T18930] ? aa_sock_msg_perm+0x94/0x160 [ 360.612777][T18930] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 360.612806][T18930] ? __pfx_netlink_sendmsg+0x10/0x10 [ 360.612829][T18930] __sock_sendmsg+0x219/0x270 [ 360.612866][T18930] ____sys_sendmsg+0x505/0x830 [ 360.612898][T18930] ? __pfx_____sys_sendmsg+0x10/0x10 [ 360.612936][T18930] ? import_iovec+0x74/0xa0 [ 360.612967][T18930] ___sys_sendmsg+0x21f/0x2a0 [ 360.612996][T18930] ? __pfx____sys_sendmsg+0x10/0x10 [ 360.613066][T18930] ? __fget_files+0x2a/0x420 [ 360.613091][T18930] ? __fget_files+0x3a0/0x420 [ 360.613130][T18930] __x64_sys_sendmsg+0x19b/0x260 [ 360.613159][T18930] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 360.613205][T18930] ? do_syscall_64+0xba/0x210 [ 360.613234][T18930] do_syscall_64+0xf6/0x210 [ 360.613258][T18930] ? clear_bhb_loop+0x45/0xa0 [ 360.613284][T18930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.613303][T18930] RIP: 0033:0x7f245ad8e969 [ 360.613323][T18930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.613340][T18930] RSP: 002b:00007f245bc78038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 360.613362][T18930] RAX: ffffffffffffffda RBX: 00007f245afb5fa0 RCX: 00007f245ad8e969 [ 360.613377][T18930] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 360.613390][T18930] RBP: 00007f245ae10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 360.613403][T18930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 360.613415][T18930] R13: 0000000000000000 R14: 00007f245afb5fa0 R15: 00007ffee7d565a8 [ 360.613450][T18930] [ 360.896061][T18942] Bluetooth: MGMT ver 1.23 [ 360.942518][T18927] netlink: 'syz.1.3822': attribute type 2 has an invalid length. [ 361.173784][T18687] veth0_macvtap: entered promiscuous mode [ 361.235956][T18687] veth1_macvtap: entered promiscuous mode [ 361.255910][ T5841] Bluetooth: hci0: command 0x041b tx timeout [ 361.316953][T18687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.327888][T18687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.339663][T18687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.352985][T18687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.386450][T18687] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.454193][T18687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.478661][T18687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.495189][ T5841] Bluetooth: hci4: command tx timeout [ 361.500716][T18687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.514448][T18687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.526635][T18687] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.559167][T18687] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.568220][T18687] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.577164][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 361.589017][T18687] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.597988][T18687] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.637807][T18845] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 361.657353][T18845] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 361.678489][T18845] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 361.716969][T18845] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 361.935555][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.944914][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.091735][T18845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.119705][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.154288][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.170286][T18845] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.311966][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.319196][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.368862][T18989] xt_ecn: cannot match TCP bits for non-tcp packets [ 362.408494][T18989] __nla_validate_parse: 2 callbacks suppressed [ 362.408515][T18989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3834'. [ 362.423756][T18989] netlink: 'syz.1.3834': attribute type 3 has an invalid length. [ 362.485858][ T1031] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.493090][ T1031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.613925][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 363.266039][T19000] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.273787][T19000] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.325711][T19010] bridge_slave_0: default FDB implementation only supports local addresses [ 363.521169][T19017] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3844'. [ 363.575064][ T5841] Bluetooth: hci4: command tx timeout [ 363.606138][T19027] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3846'. [ 363.627850][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.652070][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 363.662048][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 363.664001][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 363.678015][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 363.691558][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 363.701146][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 363.770507][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.815427][T19032] openvswitch: netlink: Message has 3 unknown bytes. [ 363.822822][T19032] openvswitch: netlink: Actions may not be safe on all matching packets [ 363.902287][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.955217][T19037] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 364.019733][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.046130][T19037] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3848'. [ 364.058717][T19037] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3848'. [ 364.250097][T18845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.277758][T19049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3851'. [ 364.337125][T19049] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3851'. [ 364.424498][ T12] bridge_slave_1: left allmulticast mode [ 364.431731][ T12] bridge_slave_1: left promiscuous mode [ 364.439270][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.467303][ T12] bridge_slave_0: left allmulticast mode [ 364.473233][ T12] bridge_slave_0: left promiscuous mode [ 364.481692][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.708486][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 364.859288][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 364.870969][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 364.881696][ T12] bond0 (unregistering): Released all slaves [ 365.243198][T19072] sctp: [Deprecated]: syz.2.3857 (pid 19072) Use of struct sctp_assoc_value in delayed_ack socket option. [ 365.243198][T19072] Use struct sctp_sack_info instead [ 365.281318][T19074] openvswitch: netlink: Actions may not be safe on all matching packets [ 365.282361][T19072] netlink: 'syz.2.3857': attribute type 4 has an invalid length. [ 365.406794][T19072] netlink: 'syz.2.3857': attribute type 4 has an invalid length. [ 365.435794][T19084] netlink: 'syz.0.3860': attribute type 1 has an invalid length. [ 365.460503][T19028] chnl_net:caif_netlink_parms(): no params data found [ 365.552065][ T12] hsr_slave_0: left promiscuous mode [ 365.568362][T19088] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3861'. [ 365.578798][ T12] hsr_slave_1: left promiscuous mode [ 365.601641][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.617621][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.638253][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.649821][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.657083][ T5845] Bluetooth: hci4: command tx timeout [ 365.721204][ T12] veth1_macvtap: left promiscuous mode [ 365.727018][ T12] veth0_macvtap: left promiscuous mode [ 365.732711][ T12] veth1_vlan: left promiscuous mode [ 365.738153][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 365.745245][ T5845] Bluetooth: hci0: command tx timeout [ 365.759619][ T12] veth0_vlan: left promiscuous mode [ 366.340343][ T12] team0 (unregistering): Port device team_slave_1 removed [ 366.384639][ T12] team0 (unregistering): Port device team_slave_0 removed [ 366.783959][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 367.116160][T19028] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.133071][T19028] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.150348][T19028] bridge_slave_0: entered allmulticast mode [ 367.169751][T19028] bridge_slave_0: entered promiscuous mode [ 367.195555][T19028] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.202969][T19028] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.211350][T19028] bridge_slave_1: entered allmulticast mode [ 367.219969][T19028] bridge_slave_1: entered promiscuous mode [ 367.294290][T18845] veth0_vlan: entered promiscuous mode [ 367.315945][T19028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.324927][T19122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3871'. [ 367.351464][T19028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.358771][T19122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3871'. [ 367.368297][T18845] veth1_vlan: entered promiscuous mode [ 367.499559][T19028] team0: Port device team_slave_0 added [ 367.512222][T19125] __nla_validate_parse: 1 callbacks suppressed [ 367.512241][T19125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3872'. [ 367.537288][T19028] team0: Port device team_slave_1 added [ 367.650831][T19125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3872'. [ 367.670275][T19028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.688689][T19028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.719443][T19028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.734792][T19028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.741948][T19028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.791789][T19028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.813948][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 367.821766][ T5841] Bluetooth: hci0: command tx timeout [ 367.850403][T18845] veth0_macvtap: entered promiscuous mode [ 367.972729][T18845] veth1_macvtap: entered promiscuous mode [ 368.002626][T19142] netlink: 'syz.2.3878': attribute type 5 has an invalid length. [ 368.050304][T19028] hsr_slave_0: entered promiscuous mode [ 368.070764][T19028] hsr_slave_1: entered promiscuous mode [ 368.085430][T19028] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 368.093183][T19028] Cannot create hsr debugfs directory [ 368.162971][T18845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.189094][T18845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.219447][T18845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.248517][T18845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.286317][T18845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.372641][T19156] @ÿ: renamed from bond_slave_0 (while UP) [ 368.420784][T18845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.432360][T18845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.444139][T18845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.455492][T18845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.467510][T18845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.475526][T19144] syzkaller1: entered promiscuous mode [ 368.481037][T19144] syzkaller1: entered allmulticast mode [ 368.541397][T18845] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.553517][T18845] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.563486][T18845] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.574773][T18845] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.634274][T19163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3882'. [ 368.698153][T19166] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 368.854633][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 368.933336][ T7735] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.954506][ T7735] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.077005][ T3513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.083431][T19177] netlink: 216 bytes leftover after parsing attributes in process `syz.0.3887'. [ 369.096790][T19177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3887'. [ 369.102266][ T3513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.299173][T19181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3888'. [ 369.636105][ T67] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.694310][T19028] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 369.708810][T19028] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 369.797078][ T67] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.830478][T19028] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 369.849281][T19028] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 369.894028][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 369.903394][ T5841] Bluetooth: hci0: command 0x040f tx timeout [ 369.973643][ T67] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.022669][T19028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.061731][ T67] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.084713][T19028] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.097026][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.104223][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.120868][ T7735] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.128045][ T7735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.270290][ T67] bridge_slave_1: left allmulticast mode [ 370.281625][ T67] bridge_slave_1: left promiscuous mode [ 370.288558][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.308603][ T67] bridge_slave_0: left allmulticast mode [ 370.319764][ T67] bridge_slave_0: left promiscuous mode [ 370.326215][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.691339][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 370.704609][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 370.716125][ T67] bond0 (unregistering): Released all slaves [ 370.778167][T19028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.885121][T19028] veth0_vlan: entered promiscuous mode [ 370.926869][T19028] veth1_vlan: entered promiscuous mode [ 370.934318][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 370.975608][T19028] veth0_macvtap: entered promiscuous mode [ 370.989064][T19028] veth1_macvtap: entered promiscuous mode [ 371.002799][ T67] hsr_slave_0: left promiscuous mode [ 371.011314][ T67] hsr_slave_1: left promiscuous mode [ 371.018367][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.026387][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.038510][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 371.046860][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.071135][ T67] veth1_macvtap: left promiscuous mode [ 371.077114][ T67] veth0_macvtap: left promiscuous mode [ 371.082713][ T67] veth1_vlan: left promiscuous mode [ 371.088227][ T67] veth0_vlan: left promiscuous mode [ 371.202821][T19204] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3893'. [ 371.231828][T19204] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3893'. [ 371.333454][T19208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3896'. [ 371.464726][T19210] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3897'. [ 371.762554][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 371.772500][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 371.783058][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 371.792774][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 371.800634][T19227] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 371.810702][T19227] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 371.825214][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 371.950431][T19232] netlink: 'syz.2.3901': attribute type 10 has an invalid length. [ 371.960936][T19230] can: request_module (can-proto-0) failed. [ 371.973942][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 371.987604][ T5841] Bluetooth: hci0: command 0x040f tx timeout [ 372.122210][T19241] netlink: 'syz.0.3904': attribute type 1 has an invalid length. [ 372.149489][T19241] netlink: 'syz.0.3904': attribute type 1 has an invalid length. [ 372.163403][T19241] netlink: 'syz.0.3904': attribute type 2 has an invalid length. [ 372.292585][ T67] team0 (unregistering): Port device team_slave_1 removed [ 372.339630][ T67] team0 (unregistering): Port device team_slave_0 removed [ 372.829949][T19232] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 372.881571][T19028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.920927][T19028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.964046][T19028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.989907][T19028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.002178][T19028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.013960][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 373.026156][T19028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.034778][T19252] __nla_validate_parse: 3 callbacks suppressed [ 373.034802][T19252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3906'. [ 373.041621][T19028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.073996][T19028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.084824][T19028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.097892][T19028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.150346][T19028] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.179694][T19028] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.204120][T19028] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.212880][T19028] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.270512][T19260] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3910'. [ 373.480419][T19272] [H: renamed from veth0_vlan (while UP) [ 373.716562][ T7735] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.742704][ T7735] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.787167][T19223] chnl_net:caif_netlink_parms(): no params data found [ 373.894517][ T5841] Bluetooth: hci4: command tx timeout [ 373.949805][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.971476][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.998186][T19291] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3919'. [ 374.053935][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 374.065246][ T5845] Bluetooth: hci0: command 0x040f tx timeout [ 374.082276][T19299] netlink: 252 bytes leftover after parsing attributes in process `syz.0.3920'. [ 374.189506][T19223] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.212558][T19223] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.237232][T19223] bridge_slave_0: entered allmulticast mode [ 374.263747][T19223] bridge_slave_0: entered promiscuous mode [ 374.315320][T19223] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.346743][T19223] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.362330][T19223] bridge_slave_1: entered allmulticast mode [ 374.371579][T19223] bridge_slave_1: entered promiscuous mode [ 374.478925][T19315] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3923'. [ 374.522752][T19223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.600808][T19317] 8021q: adding VLAN 0 to HW filter on device bond8 [ 374.609485][T19317] bond0: (slave bond8): Enslaving as an active interface with a down link [ 374.636616][T19223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.717417][T19223] team0: Port device team_slave_0 added [ 374.727608][T19223] team0: Port device team_slave_1 added [ 374.756512][ T30] audit: type=1107 audit(1746515900.791:5): pid=19326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 374.793758][T19223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.801720][T19223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.802690][T19327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3927'. [ 374.827682][T19223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.830803][T19223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.856254][T19223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.893878][T19223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.969461][ T67] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.097655][T19223] hsr_slave_0: entered promiscuous mode [ 375.104039][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 375.117954][T19223] hsr_slave_1: entered promiscuous mode [ 375.127538][T19223] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 375.137643][T19223] Cannot create hsr debugfs directory [ 375.272219][ T67] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.410708][ T67] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.606398][ T67] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.750788][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 375.760679][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 375.774974][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 375.796518][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 375.806242][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 375.907493][T19353] netlink: 'syz.1.3932': attribute type 23 has an invalid length. [ 375.958167][T19357] netlink: 'syz.0.3934': attribute type 10 has an invalid length. [ 375.984672][ T5845] Bluetooth: hci4: command tx timeout [ 376.018407][T19357] team0: Device veth0_macvtap failed to register rx_handler [ 376.045808][T19360] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3935'. [ 376.134752][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 376.152329][T19365] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3935'. [ 376.163723][T19365] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3935'. [ 376.183626][T19369] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3935'. [ 376.263602][ T67] bridge_slave_1: left allmulticast mode [ 376.274780][ T67] bridge_slave_1: left promiscuous mode [ 376.281748][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.313243][ T67] bridge_slave_0: left allmulticast mode [ 376.332224][ T67] bridge_slave_0: left promiscuous mode [ 376.341732][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.855446][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 376.871078][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 376.881687][ T67] bond0 (unregistering): Released all slaves [ 377.174293][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 377.419742][T19416] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 377.517704][T19420] netlink: 'syz.2.3948': attribute type 10 has an invalid length. [ 377.617533][T19420] team0: Device ipvlan1 failed to register rx_handler [ 377.656154][T19345] chnl_net:caif_netlink_parms(): no params data found [ 377.752162][ T67] hsr_slave_0: left promiscuous mode [ 377.778957][ T67] hsr_slave_1: left promiscuous mode [ 377.786653][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.802215][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.820270][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.828273][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.839692][T19439] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 377.882514][ T67] veth1_macvtap: left promiscuous mode [ 377.894830][ T5841] Bluetooth: hci0: command tx timeout [ 377.896341][ T67] veth0_macvtap: left promiscuous mode [ 377.919079][ T67] veth1_vlan: left promiscuous mode [ 377.925539][ T67] veth0_vlan: left promiscuous mode [ 378.064659][ T5841] Bluetooth: hci4: command tx timeout [ 378.224119][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 378.542249][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.569333][ T67] team0 (unregistering): Port device team_slave_1 removed [ 378.613722][ T67] team0 (unregistering): Port device team_slave_0 removed [ 379.049405][T19223] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 379.133901][T19223] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 379.165757][T19223] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 379.204524][T19452] __nla_validate_parse: 2 callbacks suppressed [ 379.204554][T19452] netlink: 216 bytes leftover after parsing attributes in process `syz.1.3958'. [ 379.239431][T19223] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 379.243397][T19452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3958'. [ 379.255687][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 379.303410][T19458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3960'. [ 379.320575][T19462] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3959'. [ 379.582241][T19345] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.593616][T19345] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.601652][T19345] bridge_slave_0: entered allmulticast mode [ 379.610620][T19345] bridge_slave_0: entered promiscuous mode [ 379.638163][T19471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3962'. [ 379.668323][T19471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3962'. [ 379.686657][T19345] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.704867][T19345] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.726743][T19345] bridge_slave_1: entered allmulticast mode [ 379.743060][T19345] bridge_slave_1: entered promiscuous mode [ 379.789440][T19478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3965'. [ 379.856794][T19345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.892237][T19345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.975253][ T5841] Bluetooth: hci0: command tx timeout [ 379.981995][T19489] netlink: 'syz.2.3968': attribute type 10 has an invalid length. [ 379.990246][T19489] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3968'. [ 380.012871][T19345] team0: Port device team_slave_0 added [ 380.027629][T19345] team0: Port device team_slave_1 added [ 380.075900][T19489] geneve0: entered promiscuous mode [ 380.082012][T19489] team0: Port device geneve0 added [ 380.134329][ T5841] Bluetooth: hci4: command tx timeout [ 380.168796][T19345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.177464][T19345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.205355][T19345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.264856][T19345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.279537][T19345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.306055][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 380.313728][T19345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.435624][T19502] netlink: 'syz.2.3972': attribute type 1 has an invalid length. [ 380.443433][T19502] netlink: 'syz.2.3972': attribute type 11 has an invalid length. [ 380.451917][T19502] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3972'. [ 380.487865][T19345] hsr_slave_0: entered promiscuous mode [ 380.497400][T19345] hsr_slave_1: entered promiscuous mode [ 380.504109][T19345] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 380.511735][T19345] Cannot create hsr debugfs directory [ 380.536878][T19507] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3973'. [ 380.662419][T19511] bridge: RTM_NEWNEIGH with invalid ether address [ 380.671195][T19512] bridge: RTM_NEWNEIGH with invalid ether address [ 380.700611][T19223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.852299][T19223] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.925744][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.932885][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.973657][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.980918][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.131768][T19526] bridge8: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 381.333991][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 381.397675][T19345] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 381.429166][T19345] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 381.460513][T19345] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 381.490028][T19345] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 381.547620][T19223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.697008][T19345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.740293][T19345] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.764695][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.771888][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.791692][T19550] netlink: 'syz.0.3984': attribute type 1 has an invalid length. [ 381.812869][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.820122][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.055744][ T5841] Bluetooth: hci0: command tx timeout [ 382.374037][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 382.443197][T19223] veth0_vlan: entered promiscuous mode [ 382.518945][T19580] only policy match revision 0 supported [ 382.518969][T19580] unable to load match [ 382.563343][T19223] veth1_vlan: entered promiscuous mode [ 382.568802][T19582] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 382.592944][T19345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.703155][T19223] veth0_macvtap: entered promiscuous mode [ 382.753029][T19345] veth0_vlan: entered promiscuous mode [ 382.761247][T19223] veth1_macvtap: entered promiscuous mode [ 382.771806][T19585] xt_CT: No such helper "pptp" [ 382.826996][T19223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.868779][T19223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.881070][T19223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.899548][T19223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.913530][T19223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.942581][T19345] veth1_vlan: entered promiscuous mode [ 382.958506][T19223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.969518][T19223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.983137][T19223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.995371][T19223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.013454][T19223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.043066][T19223] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.052231][T19223] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.062585][T19223] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.072322][T19223] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.123019][T19603] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 383.210556][T19345] veth0_macvtap: entered promiscuous mode [ 383.289198][T19345] veth1_macvtap: entered promiscuous mode [ 383.320477][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.337851][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.369242][T19345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.383774][T19345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.394253][T19345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.405689][T19345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.415829][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 383.423438][T19345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.437412][T19345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.450202][T19345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.487298][T19345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.519939][T19345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.540726][T19345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.562632][T19345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.584555][T19345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.618178][T19345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.639586][T19345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.662246][T19345] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.671262][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.679251][T19345] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.690270][T19345] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.701313][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.719432][T19345] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.766771][T19618] tipc: Started in network mode [ 383.771702][T19618] tipc: Node identity 06eeb5e9ecab, cluster identity 4711 [ 383.781736][T19618] tipc: Enabled bearer , priority 10 [ 384.035320][ T3513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.066717][ T3513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.136127][ T5845] Bluetooth: hci0: command tx timeout [ 384.187500][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.234316][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.453974][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 384.500924][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.610188][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.677001][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.743112][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.863208][ T12] bridge_slave_1: left allmulticast mode [ 384.869312][ T12] bridge_slave_1: left promiscuous mode [ 384.875270][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.885174][ T12] bridge_slave_0: left allmulticast mode [ 384.890842][ T12] bridge_slave_0: left promiscuous mode [ 384.896957][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.914599][ T5913] tipc: Node number set to 3930437097 [ 385.228464][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 385.239715][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 385.250960][ T12] bond0 (unregistering): Released all slaves [ 385.496102][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 385.507056][ T12] hsr_slave_0: left promiscuous mode [ 385.512962][ T12] hsr_slave_1: left promiscuous mode [ 385.519144][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.526933][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.538803][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.546422][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.569838][ T12] veth1_macvtap: left promiscuous mode [ 385.576365][ T12] veth0_macvtap: left promiscuous mode [ 385.581977][ T12] veth1_vlan: left promiscuous mode [ 385.587645][ T12] veth0_vlan: left promiscuous mode [ 385.945038][T19650] __nla_validate_parse: 43 callbacks suppressed [ 385.945059][T19650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4015'. [ 386.214568][ T5845] Bluetooth: hci0: command 0x0405 tx timeout [ 386.255326][T19661] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4018'. [ 386.291212][T19663] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4017'. [ 386.307374][T19664] netlink: ct family unspecified [ 386.330928][T19664] openvswitch: netlink: Actions may not be safe on all matching packets [ 386.349824][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 386.359377][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 386.367871][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 386.376416][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 386.384224][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 386.533906][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 386.729885][ T12] team0 (unregistering): Port device team_slave_1 removed [ 386.771477][ T12] team0 (unregistering): Port device team_slave_0 removed [ 387.177375][T19661] team0: entered allmulticast mode [ 387.182553][T19661] team_slave_0: entered allmulticast mode [ 387.208606][T19661] geneve0: entered allmulticast mode [ 387.251503][T19670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4019'. [ 387.573907][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 387.595749][T19688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4024'. [ 387.689055][T19686] ieee802154 phy1 wpan1: encryption failed: -22 [ 387.892959][T19665] chnl_net:caif_netlink_parms(): no params data found [ 387.944304][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.030838][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.074660][T19665] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.082936][T19665] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.090554][T19665] bridge_slave_0: entered allmulticast mode [ 388.100250][T19665] bridge_slave_0: entered promiscuous mode [ 388.123608][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.147007][T19665] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.158223][T19665] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.165812][T19665] bridge_slave_1: entered allmulticast mode [ 388.173155][T19665] bridge_slave_1: entered promiscuous mode [ 388.199278][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.246772][T19665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.261036][T19665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.362905][T19665] team0: Port device team_slave_0 added [ 388.387559][T19665] team0: Port device team_slave_1 added [ 388.459140][ T5845] Bluetooth: hci4: command tx timeout [ 388.594356][T19707] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 388.610625][T19665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.617711][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 388.654240][T19665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.717721][T19665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.739672][T19665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.752579][T19665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.818995][T19665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.845706][T19723] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4032'. [ 389.007874][ T12] bridge_slave_1: left allmulticast mode [ 389.015694][ T12] bridge_slave_1: left promiscuous mode [ 389.034850][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.051304][ T12] bridge_slave_0: left allmulticast mode [ 389.063990][ T12] bridge_slave_0: left promiscuous mode [ 389.076764][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.130379][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 389.156979][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 389.166575][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 389.189581][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 389.202789][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 389.649255][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.663908][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 389.664374][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.683421][ T12] bond0 (unregistering): Released all slaves [ 389.768943][T19665] hsr_slave_0: entered promiscuous mode [ 389.783391][T19665] hsr_slave_1: entered promiscuous mode [ 389.803087][T19665] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 389.817972][T19665] Cannot create hsr debugfs directory [ 390.154905][ T5841] block nbd1: Receive control failed (result -32) [ 390.283492][T19761] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4042'. [ 390.378722][ T12] hsr_slave_0: left promiscuous mode [ 390.408839][ T12] hsr_slave_1: left promiscuous mode [ 390.418785][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.430778][T19765] openvswitch: netlink: Message has 4 unknown bytes. [ 390.438793][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.447599][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.455494][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.497225][T19771] netlink: 'syz.0.4046': attribute type 1 has an invalid length. [ 390.530036][ T12] veth1_macvtap: left promiscuous mode [ 390.545133][ T5841] Bluetooth: hci4: command tx timeout [ 390.549079][ T12] veth0_macvtap: left promiscuous mode [ 390.562866][ T12] veth1_vlan: left promiscuous mode [ 390.570962][ T12] veth0_vlan: left promiscuous mode [ 390.693973][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 391.041428][ T12] team0 (unregistering): Port device team_slave_1 removed [ 391.084009][ T12] team0 (unregistering): Port device team_slave_0 removed [ 391.264337][ T5841] Bluetooth: hci0: command tx timeout [ 391.714553][T19786] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4050'. [ 391.733909][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 391.962722][T19797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4054'. [ 392.028680][T19797] openvswitch: netlink: nsh attribute has 5276 unknown bytes. [ 392.049162][T19802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4056'. [ 392.061389][T19797] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 392.159204][T19733] chnl_net:caif_netlink_parms(): no params data found [ 392.303221][T19665] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 392.319292][T19665] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 392.336727][T19665] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 392.360251][T19665] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 392.386500][T19733] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.394558][T19733] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.401823][T19733] bridge_slave_0: entered allmulticast mode [ 392.409829][T19733] bridge_slave_0: entered promiscuous mode [ 392.420168][T19733] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.427528][T19733] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.434982][T19733] bridge_slave_1: entered allmulticast mode [ 392.442402][T19733] bridge_slave_1: entered promiscuous mode [ 392.489172][T19733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.503099][T19733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.558999][T19733] team0: Port device team_slave_0 added [ 392.573652][T19733] team0: Port device team_slave_1 added [ 392.613039][T19733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.620502][ T5841] Bluetooth: hci4: command tx timeout [ 392.631602][T19733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.667460][T19733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.684766][T19733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.691835][T19733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.719328][T19733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.773957][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 392.799752][T19809] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4058'. [ 392.853534][T19733] hsr_slave_0: entered promiscuous mode [ 392.871075][T19733] hsr_slave_1: entered promiscuous mode [ 392.890743][T19733] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 392.906870][T19733] Cannot create hsr debugfs directory [ 393.334753][ T5841] Bluetooth: hci0: command tx timeout [ 393.347015][T19830] Bluetooth: MGMT ver 1.23 [ 393.814085][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 394.068521][T19844] delete_channel: no stack [ 394.154535][T19665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.274953][T19665] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.306435][T19849] xt_TPROXY: Can be used only with -p tcp or -p udp [ 394.326120][T19850] xt_TCPMSS: Only works on TCP SYN packets [ 394.356496][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.363836][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.484663][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.491912][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.694359][ T5841] Bluetooth: hci4: command tx timeout [ 394.722983][T19665] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 394.790236][T19665] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 394.834283][T19870] netlink: 272 bytes leftover after parsing attributes in process `syz.1.4072'. [ 394.854025][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 394.951174][T19733] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 394.995400][T19733] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 395.008204][T19733] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 395.033600][T19733] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 395.297473][T19733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.322722][T19879] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 395.368504][T19733] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.387640][T19665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.411597][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.418862][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.427862][ T5841] Bluetooth: hci0: command tx timeout [ 395.470793][ T3513] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.478046][ T3513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.893903][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 395.950555][T19909] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 396.082905][T19665] veth0_vlan: entered promiscuous mode [ 396.126064][T19665] veth1_vlan: entered promiscuous mode [ 396.161153][T19917] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 396.173398][T19733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.208052][T19917] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (9) [ 396.241730][T19922] netlink: 'syz.2.4087': attribute type 33 has an invalid length. [ 396.256215][T19922] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4087'. [ 396.282976][T19665] veth0_macvtap: entered promiscuous mode [ 396.318023][T19927] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.4089'. [ 396.318412][T19665] veth1_macvtap: entered promiscuous mode [ 396.341339][T19927] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.4089'. [ 396.372522][T19927] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.4089'. [ 396.379161][T19665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.399430][T19927] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.4089'. [ 396.408965][T19665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.408991][T19665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.434752][T19665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.447766][T19665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.471211][T19733] veth0_vlan: entered promiscuous mode [ 396.512313][T19931] bond1: entered promiscuous mode [ 396.517741][T19931] bond1: entered allmulticast mode [ 396.523556][T19931] 8021q: adding VLAN 0 to HW filter on device bond1 [ 396.549657][T19933] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 396.592878][T19665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.609505][T19665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.619823][T19665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.630903][T19665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.659148][T19665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 396.718998][T19733] veth1_vlan: entered promiscuous mode [ 396.730730][T19665] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.744759][T19665] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.758892][T19665] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.770636][T19665] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.927873][T19944] __nla_validate_parse: 61 callbacks suppressed [ 396.927889][T19944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4094'. [ 396.934351][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 396.940657][T19733] veth0_macvtap: entered promiscuous mode [ 397.069065][T19733] veth1_macvtap: entered promiscuous mode [ 397.081777][ T3513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.116646][ T3513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.160907][T19733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.175218][T19733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.185638][T19733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.196430][T19733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.208129][T19733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.227079][T19733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.256942][T19733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 397.295727][ T3513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.323148][T19733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.335583][T19733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.341503][ T3513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.354314][T19733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.375141][T19733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.394149][T19733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.410698][T19733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.505404][ T5841] Bluetooth: hci0: command tx timeout [ 397.511726][T19733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.561528][T19733] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.571465][T19733] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.584165][T19733] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.592914][T19733] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.632095][T19960] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4101'. [ 397.666540][T19962] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4101'. [ 397.835527][T19965] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4102'. [ 397.974146][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 398.049397][ T3513] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.072195][T19982] netlink: 'syz.2.4105': attribute type 10 has an invalid length. [ 398.088268][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.104064][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.220502][ T3513] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.287192][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.329032][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.366881][ T3513] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.613419][ T3513] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.749375][ T3513] bridge_slave_1: left allmulticast mode [ 398.758541][ T3513] bridge_slave_1: left promiscuous mode [ 398.764523][ T3513] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.778692][ T3513] bridge_slave_0: left allmulticast mode [ 398.787045][ T3513] bridge_slave_0: left promiscuous mode [ 398.792857][ T3513] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.014959][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 399.276906][ T5140] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 399.287206][ T5140] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 399.296704][ T5140] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 399.305707][ T5140] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 399.313490][ T5140] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 399.624572][ T3513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 399.655000][ T3513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 399.677558][ T3513] bond0 (unregistering): Released all slaves [ 399.709592][ T5140] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 399.719617][ T5140] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 399.729207][ T5140] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 399.748346][ T5140] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 399.759626][ T5140] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 399.978181][T20009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4113'. [ 400.033426][T20018] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 2, id = 0 [ 400.053933][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 400.320858][T20034] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4119'. [ 400.330374][T20034] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4119'. [ 400.342549][T20034] netlink: 'syz.2.4119': attribute type 5 has an invalid length. [ 400.366055][T20034] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4119'. [ 400.371584][T20029] syzkaller1: entered promiscuous mode [ 400.381300][T20029] syzkaller1: entered allmulticast mode [ 400.413676][T20038] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4119'. [ 400.429271][T20038] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4119'. [ 400.451621][T20038] netlink: 'syz.2.4119': attribute type 5 has an invalid length. [ 400.467141][ T3513] hsr_slave_0: left promiscuous mode [ 400.473229][ T3513] hsr_slave_1: left promiscuous mode [ 400.495763][ T3513] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.503236][ T3513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.518382][ T3513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.529468][ T3513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.561504][ T3513] veth1_macvtap: left promiscuous mode [ 400.567512][ T3513] veth0_macvtap: left promiscuous mode [ 400.573219][ T3513] veth1_vlan: left promiscuous mode [ 400.580949][ T3513] veth0_vlan: left promiscuous mode [ 401.089495][ T3513] team0 (unregistering): Port device team_slave_1 removed [ 401.104035][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 401.116985][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 401.149601][ T3513] team0 (unregistering): Port device team_slave_0 removed [ 401.428678][ T5841] Bluetooth: hci0: command tx timeout [ 401.814169][ T5841] Bluetooth: hci4: command tx timeout [ 402.105878][T20006] chnl_net:caif_netlink_parms(): no params data found [ 402.134205][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 402.189819][T19999] chnl_net:caif_netlink_parms(): no params data found [ 402.205762][T20061] netlink: 'syz.0.4127': attribute type 13 has an invalid length. [ 402.246446][T20061] __nla_validate_parse: 2 callbacks suppressed [ 402.246466][T20061] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4127'. [ 402.360605][T20061] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len [ 402.558515][T20080] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 402.758434][T20092] netlink: 'syz.2.4133': attribute type 3 has an invalid length. [ 402.770235][T20092] netlink: 766 bytes leftover after parsing attributes in process `syz.2.4133'. [ 402.803636][T19999] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.828293][T19999] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.838346][T19999] bridge_slave_0: entered allmulticast mode [ 402.852354][T19999] bridge_slave_0: entered promiscuous mode [ 402.866224][T19999] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.874117][T19999] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.881647][T19999] bridge_slave_1: entered allmulticast mode [ 402.895259][T19999] bridge_slave_1: entered promiscuous mode [ 402.924622][T20006] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.931816][T20006] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.955492][T20006] bridge_slave_0: entered allmulticast mode [ 402.975768][T20006] bridge_slave_0: entered promiscuous mode [ 402.992834][T20006] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.019570][T20006] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.027101][T20006] bridge_slave_1: entered allmulticast mode [ 403.034879][T20006] bridge_slave_1: entered promiscuous mode [ 403.071647][T20106] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4135'. [ 403.174000][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 403.202485][T20006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.245089][T20114] netlink: 'syz.0.4139': attribute type 39 has an invalid length. [ 403.281346][ T3513] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.327505][T19999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.353474][T20006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.459262][T19999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.486358][T20124] xt_CT: You must specify a L4 protocol and not use inversions on it [ 403.497144][ T3513] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.506623][ T5841] Bluetooth: hci0: command tx timeout [ 403.547262][T20123] team0: left allmulticast mode [ 403.552335][T20123] team_slave_0: left allmulticast mode [ 403.559126][T20123] geneve0: left allmulticast mode [ 403.642013][T20123] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.668875][T20123] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.779330][T20123] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.790717][T20123] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.800091][T20123] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.809313][T20123] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.850707][T20123] vti0: left promiscuous mode [ 403.856814][T20123] vlan2: left allmulticast mode [ 403.862331][T20123] gretap0: left allmulticast mode [ 403.872467][T20123] bond1: left promiscuous mode [ 403.877744][T20123] bond1: left allmulticast mode [ 403.884608][T20121] 8021q: VLANs not supported on lo [ 403.894381][ T5841] Bluetooth: hci4: command tx timeout [ 403.962813][T20006] team0: Port device team_slave_0 added [ 404.016457][ T3513] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.130666][T20136] netlink: 'syz.0.4146': attribute type 10 has an invalid length. [ 404.139508][ C1] ================================================================== [ 404.139528][ C1] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x471/0x4b0 [ 404.139569][ C1] Read of size 2 at addr ffff8880238d402a by task syz.0.4146/20136 [ 404.139590][ C1] [ 404.139602][ C1] CPU: 1 UID: 0 PID: 20136 Comm: syz.0.4146 Not tainted 6.15.0-rc4-syzkaller-00152-g4397684a292a #0 PREEMPT(full) [ 404.139631][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 404.139645][ C1] Call Trace: [ 404.139654][ C1] [ 404.139662][ C1] dump_stack_lvl+0x189/0x250 [ 404.139695][ C1] ? __virt_addr_valid+0x18c/0x540 [ 404.139722][ C1] ? rcu_is_watching+0x15/0xb0 [ 404.139754][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 404.139783][ C1] ? rcu_is_watching+0x15/0xb0 [ 404.139815][ C1] ? lock_release+0x4b/0x3e0 [ 404.139847][ C1] ? __virt_addr_valid+0x18c/0x540 [ 404.139873][ C1] ? __virt_addr_valid+0x469/0x540 [ 404.139910][ C1] print_report+0xb4/0x290 [ 404.139936][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 404.139964][ C1] kasan_report+0x118/0x150 [ 404.139993][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 404.140028][ C1] rose_timer_expiry+0x471/0x4b0 [ 404.140059][ C1] call_timer_fn+0x17b/0x5f0 [ 404.140087][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 404.140116][ C1] ? call_timer_fn+0xbe/0x5f0 [ 404.140141][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 404.140173][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 404.140193][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 404.140214][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 404.140245][ C1] __run_timer_base+0x61a/0x860 [ 404.140269][ C1] ? ktime_get+0x3e/0x1f0 [ 404.140297][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 404.140320][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 404.140353][ C1] run_timer_softirq+0xb7/0x180 [ 404.140385][ C1] handle_softirqs+0x283/0x870 [ 404.140420][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 404.140442][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 404.140477][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 404.140505][ C1] __irq_exit_rcu+0xca/0x1f0 [ 404.140523][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 404.140548][ C1] irq_exit_rcu+0x9/0x30 [ 404.140565][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 404.140586][ C1] [ 404.140593][ C1] [ 404.140601][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 404.140624][ C1] RIP: 0010:console_flush_all+0x7f7/0xc40 [ 404.140648][ C1] Code: 48 21 c3 0f 85 e9 01 00 00 e8 85 b5 1e 00 48 8b 5c 24 20 4d 85 f6 75 07 e8 76 b5 1e 00 eb 06 e8 6f b5 1e 00 fb 48 8b 44 24 28 <42> 80 3c 20 00 74 08 48 89 df e8 5a aa 80 00 48 8b 1b 48 8b 44 24 [ 404.140668][ C1] RSP: 0018:ffffc90003d0ea80 EFLAGS: 00000287 [ 404.140689][ C1] RAX: 1ffffffff1cf3eeb RBX: ffffffff8e79f758 RCX: 0000000000080000 [ 404.140705][ C1] RDX: ffffc9001ba49000 RSI: 00000000000024a4 RDI: 00000000000024a5 [ 404.140720][ C1] RBP: ffffc90003d0ebd0 R08: ffffffff8f7ed377 R09: 1ffffffff1efda6e [ 404.140737][ C1] R10: dffffc0000000000 R11: fffffbfff1efda6f R12: dffffc0000000000 [ 404.140754][ C1] R13: 0000000000000001 R14: 0000000000000200 R15: ffffffff8e79f700 [ 404.140781][ C1] ? console_flush_all+0x13a/0xc40 [ 404.140809][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 404.140860][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 404.140930][ C1] console_unlock+0xc4/0x270 [ 404.140951][ C1] ? __pfx_console_unlock+0x10/0x10 [ 404.140972][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 404.140999][ C1] vprintk_emit+0x5b7/0x7a0 [ 404.141020][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 404.141037][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 404.141057][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 404.141079][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 404.141098][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 404.141125][ C1] _printk+0xcf/0x120 [ 404.141147][ C1] ? __pfx__printk+0x10/0x10 [ 404.141174][ C1] __nla_validate_parse+0x1719/0x2d40 [ 404.141198][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 404.141237][ C1] ? __pfx___nla_validate_parse+0x10/0x10 [ 404.141265][ C1] ? stack_trace_save+0x9c/0xe0 [ 404.141287][ C1] ? stack_depot_save_flags+0x40/0x910 [ 404.141312][ C1] ? kasan_save_track+0x4f/0x80 [ 404.141333][ C1] ? kasan_save_track+0x3e/0x80 [ 404.141353][ C1] ? kasan_save_free_info+0x46/0x50 [ 404.141383][ C1] ? __kasan_slab_free+0x62/0x70 [ 404.141407][ C1] __nla_parse+0x40/0x60 [ 404.141432][ C1] rtnl_setlink+0x1bf/0x900 [ 404.141457][ C1] ? __pfx_rtnl_setlink+0x10/0x10 [ 404.141532][ C1] ? __pfx_rtnl_setlink+0x10/0x10 [ 404.141552][ C1] rtnetlink_rcv_msg+0x7cc/0xb70 [ 404.141574][ C1] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 404.141593][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 404.141615][ C1] ? ref_tracker_free+0x63a/0x7d0 [ 404.141635][ C1] ? __copy_skb_header+0xa7/0x550 [ 404.141666][ C1] netlink_rcv_skb+0x219/0x490 [ 404.141687][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 404.141708][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 404.141740][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 404.141760][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 404.141783][ C1] netlink_unicast+0x758/0x8d0 [ 404.141821][ C1] netlink_sendmsg+0x805/0xb30 [ 404.141847][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 404.141870][ C1] ? aa_sock_msg_perm+0x94/0x160 [ 404.141899][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 404.141922][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 404.141944][ C1] __sock_sendmsg+0x219/0x270 [ 404.141976][ C1] ____sys_sendmsg+0x505/0x830 [ 404.142005][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 404.142035][ C1] ? import_iovec+0x74/0xa0 [ 404.142064][ C1] ___sys_sendmsg+0x21f/0x2a0 [ 404.142091][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 404.142137][ C1] ? __fget_files+0x2a/0x420 [ 404.142163][ C1] ? __fget_files+0x3a0/0x420 [ 404.142195][ C1] __x64_sys_sendmsg+0x19b/0x260 [ 404.142222][ C1] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 404.142257][ C1] ? do_syscall_64+0xba/0x210 [ 404.142283][ C1] do_syscall_64+0xf6/0x210 [ 404.142306][ C1] ? clear_bhb_loop+0x45/0xa0 [ 404.142330][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.142350][ C1] RIP: 0033:0x7f1c88f8e969 [ 404.142368][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 404.142386][ C1] RSP: 002b:00007f1c89d9d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 404.142407][ C1] RAX: ffffffffffffffda RBX: 00007f1c891b5fa0 RCX: 00007f1c88f8e969 [ 404.142422][ C1] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 404.142436][ C1] RBP: 00007f1c89010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 404.142450][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 404.142462][ C1] R13: 0000000000000000 R14: 00007f1c891b5fa0 R15: 00007ffed8034e58 [ 404.142486][ C1] [ 404.142494][ C1] [ 404.142500][ C1] Allocated by task 19665: [ 404.142511][ C1] kasan_save_track+0x3e/0x80 [ 404.142533][ C1] __kasan_kmalloc+0x93/0xb0 [ 404.142554][ C1] __kmalloc_noprof+0x27a/0x4f0 [ 404.142578][ C1] tnode_new+0xc3/0x380 [ 404.142598][ C1] resize+0x406/0x2710 [ 404.142616][ C1] fib_insert_alias+0xab7/0x1210 [ 404.142635][ C1] fib_table_insert+0x67c/0x1b50 [ 404.142653][ C1] fib_magic+0x2c4/0x390 [ 404.142677][ C1] fib_add_ifaddr+0x144/0x5f0 [ 404.142701][ C1] fib_inetaddr_event+0x12e/0x190 [ 404.142727][ C1] notifier_call_chain+0x1b3/0x3e0 [ 404.142745][ C1] blocking_notifier_call_chain+0x6a/0x90 [ 404.142765][ C1] __inet_insert_ifa+0xa13/0xbf0 [ 404.142787][ C1] inet_rtm_newaddr+0xf3a/0x18b0 [ 404.142810][ C1] rtnetlink_rcv_msg+0x7cc/0xb70 [ 404.142828][ C1] netlink_rcv_skb+0x219/0x490 [ 404.142846][ C1] netlink_unicast+0x758/0x8d0 [ 404.142874][ C1] netlink_sendmsg+0x805/0xb30 [ 404.142900][ C1] __sock_sendmsg+0x219/0x270 [ 404.142928][ C1] __sys_sendto+0x3bd/0x520 [ 404.142947][ C1] __x64_sys_sendto+0xde/0x100 [ 404.142966][ C1] do_syscall_64+0xf6/0x210 [ 404.142987][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.143006][ C1] [ 404.143012][ C1] Freed by task 15: [ 404.143022][ C1] kasan_save_track+0x3e/0x80 [ 404.143042][ C1] kasan_save_free_info+0x46/0x50 [ 404.143071][ C1] __kasan_slab_free+0x62/0x70 [ 404.143092][ C1] kfree+0x193/0x440 [ 404.143112][ C1] rcu_core+0xca5/0x1710 [ 404.143139][ C1] handle_softirqs+0x283/0x870 [ 404.143168][ C1] run_ksoftirqd+0x9b/0x100 [ 404.143187][ C1] smpboot_thread_fn+0x53f/0xa60 [ 404.143217][ C1] kthread+0x70e/0x8a0 [ 404.143238][ C1] ret_from_fork+0x4b/0x80 [ 404.143257][ C1] ret_from_fork_asm+0x1a/0x30 [ 404.143275][ C1] [ 404.143281][ C1] Last potentially related work creation: [ 404.143289][ C1] kasan_save_stack+0x3e/0x60 [ 404.143308][ C1] kasan_record_aux_stack+0xbc/0xd0 [ 404.143338][ C1] call_rcu+0x142/0x990 [ 404.143354][ C1] replace+0x238/0x5c0 [ 404.143374][ C1] resize+0x1c4b/0x2710 [ 404.143393][ C1] fib_remove_alias+0x322/0x480 [ 404.143411][ C1] fib_table_delete+0xd05/0xf80 [ 404.143430][ C1] fib_magic+0x2e4/0x390 [ 404.143454][ C1] fib_del_ifaddr+0x1082/0x1480 [ 404.143478][ C1] fib_inetaddr_event+0xbb/0x190 [ 404.143504][ C1] notifier_call_chain+0x1b3/0x3e0 [ 404.143522][ C1] blocking_notifier_call_chain+0x6a/0x90 [ 404.143541][ C1] __inet_del_ifa+0x87d/0x1040 [ 404.143562][ C1] inetdev_event+0x632/0x15b0 [ 404.143584][ C1] notifier_call_chain+0x1b3/0x3e0 [ 404.143602][ C1] unregister_netdevice_many_notify+0x15d4/0x2330 [ 404.143632][ C1] default_device_exit_batch+0x819/0x890 [ 404.143652][ C1] cleanup_net+0x7a9/0xbd0 [ 404.143672][ C1] process_scheduled_works+0xadb/0x17a0 [ 404.143703][ C1] worker_thread+0x8a0/0xda0 [ 404.143719][ C1] kthread+0x70e/0x8a0 [ 404.143740][ C1] ret_from_fork+0x4b/0x80 [ 404.143759][ C1] ret_from_fork_asm+0x1a/0x30 [ 404.143776][ C1] [ 404.143782][ C1] The buggy address belongs to the object at ffff8880238d4000 [ 404.143782][ C1] which belongs to the cache kmalloc-512 of size 512 [ 404.143804][ C1] The buggy address is located 42 bytes inside of [ 404.143804][ C1] freed 512-byte region [ffff8880238d4000, ffff8880238d4200) [ 404.143824][ C1] [ 404.143829][ C1] The buggy address belongs to the physical page: [ 404.143839][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x238d4 [ 404.143858][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 404.143874][ C1] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 404.143911][ C1] page_type: f5(slab) [ 404.143930][ C1] raw: 00fff00000000040 ffff88801a041c80 0000000000000000 dead000000000001 [ 404.143949][ C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 404.143968][ C1] head: 00fff00000000040 ffff88801a041c80 0000000000000000 dead000000000001 [ 404.143986][ C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 404.144004][ C1] head: 00fff00000000002 ffffea00008e3501 00000000ffffffff 00000000ffffffff [ 404.144023][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 404.144034][ C1] page dumped because: kasan: bad access detected [ 404.144049][ C1] page_owner tracks the page as allocated [ 404.144058][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5825, tgid 5825 (syz-executor), ts 87820824333, free_ts 87685448955 [ 404.144093][ C1] post_alloc_hook+0x1d8/0x230 [ 404.144119][ C1] get_page_from_freelist+0x21ce/0x22b0 [ 404.144149][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 404.144179][ C1] alloc_pages_mpol+0x232/0x4a0 [ 404.144202][ C1] allocate_slab+0x8a/0x3b0 [ 404.144218][ C1] ___slab_alloc+0xbfc/0x1480 [ 404.144244][ C1] __kmalloc_noprof+0x305/0x4f0 [ 404.144267][ C1] tomoyo_init_log+0x1a6e/0x1f70 [ 404.144289][ C1] tomoyo_supervisor+0x340/0x1480 [ 404.144311][ C1] tomoyo_path_number_perm+0x438/0x5a0 [ 404.144341][ C1] tomoyo_path_mkdir+0xa8/0xe0 [ 404.144363][ C1] security_path_mkdir+0x171/0x380 [ 404.144387][ C1] do_mkdirat+0x1bd/0x590 [ 404.144404][ C1] __x64_sys_mkdirat+0x87/0xa0 [ 404.144423][ C1] do_syscall_64+0xf6/0x210 [ 404.144445][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.144465][ C1] page last free pid 1161 tgid 1161 stack trace: [ 404.144477][ C1] __free_frozen_pages+0xb0e/0xcd0 [ 404.144503][ C1] __slab_free+0x326/0x400 [ 404.144519][ C1] qlist_free_all+0x9a/0x140 [ 404.144538][ C1] kasan_quarantine_reduce+0x148/0x160 [ 404.144559][ C1] __kasan_slab_alloc+0x22/0x80 [ 404.144581][ C1] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 404.144605][ C1] __alloc_skb+0x112/0x2d0 [ 404.144625][ C1] nl80211_send_ibss_bssid+0x8d/0x430 [ 404.144653][ C1] __cfg80211_ibss_joined+0x34a/0x440 [ 404.144676][ C1] cfg80211_process_wdev_events+0x38a/0x4f0 [ 404.144697][ C1] cfg80211_process_rdev_events+0xa1/0x110 [ 404.144717][ C1] cfg80211_event_work+0x2c/0x60 [ 404.144741][ C1] process_scheduled_works+0xadb/0x17a0 [ 404.144772][ C1] worker_thread+0x8a0/0xda0 [ 404.144788][ C1] kthread+0x70e/0x8a0 [ 404.144809][ C1] ret_from_fork+0x4b/0x80 [ 404.144828][ C1] [ 404.144834][ C1] Memory state around the buggy address: [ 404.144846][ C1] ffff8880238d3f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 404.144861][ C1] ffff8880238d3f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 404.144876][ C1] >ffff8880238d4000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 404.144894][ C1] ^ [ 404.144905][ C1] ffff8880238d4080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 404.144920][ C1] ffff8880238d4100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 404.144931][ C1] ================================================================== [ 404.144983][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 404.145000][ C1] CPU: 1 UID: 0 PID: 20136 Comm: syz.0.4146 Not tainted 6.15.0-rc4-syzkaller-00152-g4397684a292a #0 PREEMPT(full) [ 404.145026][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 404.145039][ C1] Call Trace: [ 404.145048][ C1] [ 404.145057][ C1] dump_stack_lvl+0x99/0x250 [ 404.145087][ C1] ? __asan_memcpy+0x40/0x70 [ 404.145107][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 404.145137][ C1] ? __pfx__printk+0x10/0x10 [ 404.145165][ C1] panic+0x2db/0x790 [ 404.145197][ C1] ? __pfx_panic+0x10/0x10 [ 404.145228][ C1] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 404.145249][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 404.145270][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 404.145289][ C1] ? print_memory_metadata+0x314/0x400 [ 404.145318][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 404.145348][ C1] check_panic_on_warn+0x89/0xb0 [ 404.145375][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 404.145404][ C1] end_report+0x78/0x160 [ 404.145429][ C1] kasan_report+0x129/0x150 [ 404.145456][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 404.145490][ C1] rose_timer_expiry+0x471/0x4b0 [ 404.145521][ C1] call_timer_fn+0x17b/0x5f0 [ 404.145548][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 404.145577][ C1] ? call_timer_fn+0xbe/0x5f0 [ 404.145604][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 404.145637][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 404.145656][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 404.145678][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 404.145708][ C1] __run_timer_base+0x61a/0x860 [ 404.145733][ C1] ? ktime_get+0x3e/0x1f0 [ 404.145760][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 404.145783][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 404.145816][ C1] run_timer_softirq+0xb7/0x180 [ 404.145841][ C1] handle_softirqs+0x283/0x870 [ 404.145876][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 404.145905][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 404.145941][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 404.145968][ C1] __irq_exit_rcu+0xca/0x1f0 [ 404.145987][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 404.146012][ C1] irq_exit_rcu+0x9/0x30 [ 404.146028][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 404.146049][ C1] [ 404.146057][ C1] [ 404.146065][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 404.146087][ C1] RIP: 0010:console_flush_all+0x7f7/0xc40 [ 404.146111][ C1] Code: 48 21 c3 0f 85 e9 01 00 00 e8 85 b5 1e 00 48 8b 5c 24 20 4d 85 f6 75 07 e8 76 b5 1e 00 eb 06 e8 6f b5 1e 00 fb 48 8b 44 24 28 <42> 80 3c 20 00 74 08 48 89 df e8 5a aa 80 00 48 8b 1b 48 8b 44 24 [ 404.146130][ C1] RSP: 0018:ffffc90003d0ea80 EFLAGS: 00000287 [ 404.146150][ C1] RAX: 1ffffffff1cf3eeb RBX: ffffffff8e79f758 RCX: 0000000000080000 [ 404.146166][ C1] RDX: ffffc9001ba49000 RSI: 00000000000024a4 RDI: 00000000000024a5 [ 404.146181][ C1] RBP: ffffc90003d0ebd0 R08: ffffffff8f7ed377 R09: 1ffffffff1efda6e [ 404.146198][ C1] R10: dffffc0000000000 R11: fffffbfff1efda6f R12: dffffc0000000000 [ 404.146214][ C1] R13: 0000000000000001 R14: 0000000000000200 R15: ffffffff8e79f700 [ 404.146241][ C1] ? console_flush_all+0x13a/0xc40 [ 404.146268][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 404.146297][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 404.146325][ C1] console_unlock+0xc4/0x270 [ 404.146346][ C1] ? __pfx_console_unlock+0x10/0x10 [ 404.146368][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 404.146396][ C1] vprintk_emit+0x5b7/0x7a0 [ 404.146416][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 404.146434][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 404.146455][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 404.146478][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 404.146498][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 404.146525][ C1] _printk+0xcf/0x120 [ 404.146548][ C1] ? __pfx__printk+0x10/0x10 [ 404.146575][ C1] __nla_validate_parse+0x1719/0x2d40 [ 404.146599][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 404.146639][ C1] ? __pfx___nla_validate_parse+0x10/0x10 [ 404.146668][ C1] ? stack_trace_save+0x9c/0xe0 [ 404.146690][ C1] ? stack_depot_save_flags+0x40/0x910 [ 404.146715][ C1] ? kasan_save_track+0x4f/0x80 [ 404.146736][ C1] ? kasan_save_track+0x3e/0x80 [ 404.146757][ C1] ? kasan_save_free_info+0x46/0x50 [ 404.146787][ C1] ? __kasan_slab_free+0x62/0x70 [ 404.146812][ C1] __nla_parse+0x40/0x60 [ 404.146837][ C1] rtnl_setlink+0x1bf/0x900 [ 404.146862][ C1] ? __pfx_rtnl_setlink+0x10/0x10 [ 404.146944][ C1] ? __pfx_rtnl_setlink+0x10/0x10 [ 404.146964][ C1] rtnetlink_rcv_msg+0x7cc/0xb70 [ 404.146987][ C1] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 404.147007][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 404.147029][ C1] ? ref_tracker_free+0x63a/0x7d0 [ 404.147049][ C1] ? __copy_skb_header+0xa7/0x550 [ 404.147081][ C1] netlink_rcv_skb+0x219/0x490 [ 404.147102][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 404.147124][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 404.147157][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 404.147178][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 404.147202][ C1] netlink_unicast+0x758/0x8d0 [ 404.147240][ C1] netlink_sendmsg+0x805/0xb30 [ 404.147267][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 404.147291][ C1] ? aa_sock_msg_perm+0x94/0x160 [ 404.147314][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 404.147337][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 404.147359][ C1] __sock_sendmsg+0x219/0x270 [ 404.147393][ C1] ____sys_sendmsg+0x505/0x830 [ 404.147422][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 404.147452][ C1] ? import_iovec+0x74/0xa0 [ 404.147482][ C1] ___sys_sendmsg+0x21f/0x2a0 [ 404.147510][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 404.147557][ C1] ? __fget_files+0x2a/0x420 [ 404.147583][ C1] ? __fget_files+0x3a0/0x420 [ 404.147615][ C1] __x64_sys_sendmsg+0x19b/0x260 [ 404.147643][ C1] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 404.147679][ C1] ? do_syscall_64+0xba/0x210 [ 404.147705][ C1] do_syscall_64+0xf6/0x210 [ 404.147730][ C1] ? clear_bhb_loop+0x45/0xa0 [ 404.147754][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.147774][ C1] RIP: 0033:0x7f1c88f8e969 [ 404.147793][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 404.147811][ C1] RSP: 002b:00007f1c89d9d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 404.147833][ C1] RAX: ffffffffffffffda RBX: 00007f1c891b5fa0 RCX: 00007f1c88f8e969 [ 404.147849][ C1] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 404.147863][ C1] RBP: 00007f1c89010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 404.147876][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 404.147895][ C1] R13: 0000000000000000 R14: 00007f1c891b5fa0 R15: 00007ffed8034e58 [ 404.147920][ C1] [ 404.148173][ C1] Kernel Offset: disabled