last executing test programs: 1m35.974624418s ago: executing program 3 (id=533): socket(0x10, 0x803, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendto$x25(r0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) unshare(0x400) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x84, 0x9, 0x9, 0x1}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1fc, 0x0, 0xf}, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@local, @in=@empty, 0x0, 0x0, 0x2, 0x0, 0xa}, {0xffffffff, 0x0, 0x0, 0x6, 0x0, 0x80000000}, {}, 0x200000}}, 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x7079, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600200003400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) listen(0xffffffffffffffff, 0x8) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfffffecc) 1m18.485134356s ago: executing program 3 (id=533): socket(0x10, 0x803, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendto$x25(r0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) unshare(0x400) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x84, 0x9, 0x9, 0x1}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1fc, 0x0, 0xf}, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@local, @in=@empty, 0x0, 0x0, 0x2, 0x0, 0xa}, {0xffffffff, 0x0, 0x0, 0x6, 0x0, 0x80000000}, {}, 0x200000}}, 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x7079, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600200003400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) listen(0xffffffffffffffff, 0x8) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfffffecc) 1m3.318899678s ago: executing program 3 (id=533): socket(0x10, 0x803, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendto$x25(r0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) unshare(0x400) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x84, 0x9, 0x9, 0x1}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1fc, 0x0, 0xf}, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@local, @in=@empty, 0x0, 0x0, 0x2, 0x0, 0xa}, {0xffffffff, 0x0, 0x0, 0x6, 0x0, 0x80000000}, {}, 0x200000}}, 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x7079, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600200003400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) listen(0xffffffffffffffff, 0x8) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfffffecc) 46.77771055s ago: executing program 3 (id=533): socket(0x10, 0x803, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendto$x25(r0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) unshare(0x400) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x84, 0x9, 0x9, 0x1}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1fc, 0x0, 0xf}, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@local, @in=@empty, 0x0, 0x0, 0x2, 0x0, 0xa}, {0xffffffff, 0x0, 0x0, 0x6, 0x0, 0x80000000}, {}, 0x200000}}, 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x7079, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600200003400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) listen(0xffffffffffffffff, 0x8) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfffffecc) 32.022560714s ago: executing program 1 (id=1833): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x0) socket$unix(0x1, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) unshare(0x22020600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000002300810000000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r4, 0x58, &(0x7f0000000180)}, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 30.84351639s ago: executing program 1 (id=1839): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0x2}, 0x48) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000181100000b866118dcd65b4470bc0fe7e1a7423c1fe5147329bddcc07bcbc40e", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde}, 0x90) (async) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) sendmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0xffff, 0x2}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000380)="62042802590500000000042f1eafbc0700000000000000582d26116642c47a5f8786e6601e65ab3c06d4b8bf4a81cb3e247306af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be381ef8acd3ff2b51c60207515d915b3e26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710293262534a7af9eab48f2ca2d74d9a4de3300"/234, 0xea}, {&(0x7f0000000680)="294f28dfe56d898ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0105869a804dd2a44ce42557b2e32e2bd3115b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a3e83e91b379c179017f8b4657d1b22eca9a4ae26bca33036d33e1a684059c53cea91ca6637ac780ab2bcfc22a666cd4e5876f11e9aee4724b7cb59731c97e70ebd7f7483994eb07de2f3c6a9448c3206cff6d290b433f331c2399e99ee3bdec", 0xb6}, {&(0x7f0000000580)="0a985dcd785ae83e648abb7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c80ed83025aca8623a5915ddddce2c11c5e8282d329e2ba579e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafb62b9f90799e7fc583bdd9b270bdceb4714219a2d4c229fffb0d86fb286e355", 0x92}], 0x3}, 0x8000) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000500)='GPL\x00', 0x5, 0x11, &(0x7f00000017c0)=""/4098}, 0x90) (async) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) (async) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000500)={&(0x7f00000003c0)={0x1d, r5}, 0x10, &(0x7f00000004c0)={&(0x7f0000000580)={0x1, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "cbfc0b9af540340c"}}, 0x48}}, 0x0) (async) sendmsg$can_bcm(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x1d, r5}, 0x10, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x922, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "5c91440132bb112240fcbcc3fa9d0431575f8614d3538ce09c50eecd6ac579e8e83b944b666113f3afed71231e6653a13532f17b33515bdd7e1be14f53b9fc9b"}}, 0x80}}, 0x0) (async) sendmsg$can_bcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x3, 0xb26, 0x0, {0x77359400}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "5b843c57d0d4fcebda569fd8fea6a7b7ef976c09cf8d2aa4052321896dc15fb693fccb55de57aaaaf6ee76096b4c8b0e182deac6221008dee32436028328ef00"}}, 0x80}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="30df9b6be91b2e0000001e000100000000000000000002000000000000000000000014000300726f73653000"/54], 0x30}}, 0x0) 30.684660184s ago: executing program 4 (id=1841): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000000)={0x0, 0xffffffe9, 0x1, 0x1ff}, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000090000003c0003800800010001000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x50}}, 0x0) 30.428663224s ago: executing program 1 (id=1842): syz_emit_ethernet(0x2a, &(0x7f0000000840)=ANY=[@ANYRESHEX=0x0], 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0x3}, 0x6) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) socket$pppoe(0x18, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x401, 0x8}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x8, 0x80000, 0xfffffff8) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067725174617000000c000280080004000240000008000a00", @ANYRES32=r5, @ANYBLOB], 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000580)=@req3={0x5, 0xf, 0x2aed53ff, 0x7e8, 0x1, 0x4, 0x63}, 0x1c) socket$inet6(0xa, 0x80000, 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], 0x0}, 0x90) 30.34202561s ago: executing program 4 (id=1844): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0xfffffffd}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc) socket$nl_route(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0x8}, 0xc) socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfd, 0x40}, 0xfffffffffffffe05) bind$netlink(0xffffffffffffffff, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc) socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000340)={0x10, 0x0, 0xfffffffd}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5400000002060101000000000000000900020073797a32000000000c0007800800080000000000050005000000000005000100060000000d0003006c6973743a73657400000000d42c2394c8cd0100a3bf7188e0a0934dfa9367fa388ca7172d903ba57b"], 0x54}}, 0x0) 29.920459618s ago: executing program 4 (id=1847): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40000141) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000180)={'sit0\x00', 0x0}) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x6}]}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r6 = socket$caif_stream(0x25, 0x1, 0x4) setsockopt$sock_int(r6, 0x1, 0x2, &(0x7f0000000040)=0x8, 0x4) (async) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040)="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") (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020000000900010073797a3000000000aa000300"], 0x1e4}}, 0x0) (async) write$binfmt_misc(r8, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) splice(r7, 0x0, r9, 0x0, 0x7fff, 0x0) openat$cgroup_procs(r3, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) getpid() (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r10}, 0x10) (async) r11 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) (async) getsockname$packet(r11, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x5}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000010c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {0xfff3, 0xc}, {0x1c, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0xfffffffb}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x8c30}]}}]}, 0x4c}}, 0x0) 29.835364235s ago: executing program 1 (id=1848): r0 = socket(0xa, 0x3, 0x3a) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002ac0)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r2, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e000000160000000000000026000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0xa8, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xfff, 0x64}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3f, 0xe, {{{}, {}, @device_b, @device_b, @from_mac}, 0x0, @random, 0x0, @void, @val, @void, @void, @val={0x6, 0x2}, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7}, @val={0x76, 0x6, {0x0, 0x0, 0x1f}}}}, @NL80211_ATTR_BEACON_TAIL={0x28, 0xf, [@supported_rates={0x1, 0x1, [{}]}, @prep={0x83, 0x1f, {{}, 0xe, 0x0, @device_b, 0x3, @void, 0x3, 0x7, @device_a, 0x6}}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000340)={0x3, &(0x7f0000000300)=[{0x7ff, 0x3, 0xf, 0x7}, {0x3ff, 0x0, 0x1, 0x6}, {0x2, 0x1, 0xac, 0x8d}]}, 0x10) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) r6 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000240)={'macvtap0\x00', {0x2, 0x0, @remote}}) bind$alg(r6, &(0x7f00000018c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x10012, r8, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x4, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r10, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r9}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000bf8200000000000007020000f8ffffffb703000008000000b7040000000000008400000003000000950000000000007c3ae142000000000000000000000000007577dbf0e13153d7cb3b9e91cacbb50cfc20d67ee625735fe5163285f4c1e973ea03fe4e931c30fc9f550ea5a044d7478d58a42d45cf4ac4bc16792c2ebb301ae8bfc698339d3a24aefa5d89eb09878dd01515999d235e5af46d0643e139bc1e03b8caee4e7c7017f1b43574d0578a39cac88a6d97ab9984f796c5e9f6ac8923eeb591"], &(0x7f0000000180)='GPL\x00', 0x4, 0xff8, &(0x7f0000001e00)=""/4088}, 0x90) recvmsg(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xcb, &(0x7f0000000540), 0xc) 29.612462318s ago: executing program 4 (id=1851): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000612073582c137153e37080c18800cac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000180)={@initdev, @local}, &(0x7f0000000100)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'macvlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000002f0080000000800054000"/28], 0x41}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x9, 0x0, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000000)={0x18, 0x0, {0x2, @broadcast, 'xfrm0\x00'}}, 0x1e) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f00000000c0)={0x18, 0x0, {0x2, @broadcast, 'veth1_to_bridge\x00'}}, 0x1e) close(r6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000120001000000000000000000e0000001000000000000000009000000000000"], 0x28}}, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000d40)=0x0) sendmmsg$unix(r5, &(0x7f0000000e40)=[{{&(0x7f00000006c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000200)="6529206d63c958eb7903c9026e2faaed6282e14301f938d090ce7a56efbfbc071d0145ed9b310c65494a947c3f5710", 0x2f}, {&(0x7f0000000900)="e857dd662bb91d17468164255a1560f1097673518ad3f08178acb00a3fc333807e622ebd8bbf2cdfefa7d6d4ebe32fa592ada90e38c6c1183f7dde09f9d265a79c31ce9588404a292b6713769468a79af99d3510bebcd7db8fc1bb29d464d615ed82089d2a82ea4e45965bdaf805234870672061504a5865be36bbcafc69d475a1a26b8ce00804e247d9e3bb5f1208f062f61dd9328fed07c4b3c1cb985c1d917b3b8a08e8d748345299e9d9abaa3e39ba867069b2f48d67a8b6b930077d7774d45c48cc7c6ae14e8866abb43401d411bb6fb211c0b744dc28d8b76cee40d2f1153a0ab74c276ca94f", 0xe9}, {&(0x7f0000001240)="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", 0x1000}, {&(0x7f0000000800)="60f40b170dd4b9a2c9384c60f414af3b5f90ad4983caef46b019e4057ebbd938d34ce1a88c225ab8c448f3b17480443e52a382b45e1ce24b1d3dab0c237de41e4362113b4fbf5c863a740be0a8bfe26dcbd486063a859d749a7dd3bd4d801e27a60350200d8c91d4cc3d1a348fe73f993cf0de45942f86d68374afa881efeff7aa43ad1179111a2812a5bb5c1f9e312d52c655ecb09e4cc127ce016c25f74f4537b3c32fd2bc91ec583a", 0xaa}, {&(0x7f0000000a00)}, {&(0x7f0000000740)="56ed07b62b8377daad693b7e0c7679017c50b6a64414557bd1119f930ad9c1e51e537cd69dd9b1c9c2a041463845ea6282120b5e85f868dc43ee141676a1e1ffbe909af9e4", 0x45}], 0x6, &(0x7f0000000d80)=[@cred={{0x1c, 0x1, 0x2, {0x0, r9}}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [r3, r7]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r9, 0xffffffffffffffff}}}, @rights={{0x10}}], 0x78, 0x400c011}}], 0x1, 0x4000000) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000240)=@filter={'filter\x00', 0x2, 0x4, 0x3f8, 0xffffffff, 0x0, 0x0, 0x1a0, 0xfeffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [], [], 'macsec0\x00', 'bond_slave_0\x00'}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@rand_addr=' \x01\x00', @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@eui64={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @local, @loopback, @remote}}]}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) connect$bt_sco(r8, &(0x7f0000000000)={0x1f, @none}, 0x8) shutdown(r8, 0x1) 29.30096926s ago: executing program 1 (id=1852): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'vlan0\x00', 0x1000}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'wg1\x00', @remote}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f00000002c0)) close(r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000440)={0x0, 0x4, 0x20, 0x0, 0x1}, &(0x7f0000000300)=0x18) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000340)={r8, 0xff}, 0x8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r4], 0x7c}}, 0x40010) sendmsg$NFT_MSG_GETTABLE(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[], 0x14}}, 0x0) recvmmsg(r9, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000180)='{', 0x1, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000940)="014bb6a67b59182ab7e144f700ee0b9d1d71f57a660210b1b32e260da6089e030064497f95666d965042f43d8e39a995d58933e84e8f317bbcc26b00030059", 0x3f}, {&(0x7f0000000a00)="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", 0x45a}], 0x2}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000580)="76896548e84ce2b140d8522fbdfe832e8d71513e3aa66606e037213753148d489bf0596f3bda75a58fb72bdad6fde4d2c403e3ea5143", 0x36}, {&(0x7f00000001c0)="f0fa7f9edb6b5b2bcf3b9726fde3ddb7f048579a78bfea7c69f25c7761a8b2f46c598c56afb9d929d6a2a9c8212eeaa5a4218c268263663a71b06d6fb8dadfe3e6c0b69c374e3e7bd2df0eb19678eab74b0d1235894d2ad54a6bf71d39142867c39bd1fad299d2b62cd296c293a32536d6b8c8b49df5c6f0c8a9baeb708a44088e68d5000029f03cc47cd377c2ce3c7b78261b5c5ab08b0502ef791c2c736be8800cffe4b36b96404baadac6bab20994517b26df00", 0xb5}], 0x2}}], 0x2, 0x20044044) 28.856021957s ago: executing program 4 (id=1855): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1e, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0xa, 0x2}, @int={0x0, 0x0, 0x0, 0x1, 0x5}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x4e, 0x0, 0x1}, 0x20) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000002dc0)=[{{&(0x7f00000027c0)={0x2, 0x4e22, @empty}, 0x10, 0x0, 0x0, &(0x7f0000002b40)=ANY=[], 0x40}}, {{&(0x7f0000002bc0)={0x2, 0x4e22, @empty}, 0x10, 0x0}}], 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000000)=0x5, 0x4) 28.561504944s ago: executing program 4 (id=1857): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002680)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000003c0)="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", 0x8a7}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000400)=[{0x20, 0xfe, 0x0, 0xfffff00f}, {0x40, 0x0, 0x1, 0x200000}, {0x1, 0x0, 0x0, 0x1}]}, 0x10) syz_emit_ethernet(0xf5, &(0x7f0000000d80)=ANY=[@ANYBLOB="29fcf3ec34d4ece3bbffffff81000d8086dd61b6642500bb11fffe8000000000000000000000000000bbfe8000000000000000000000000000aa4e214e2100bb907841030000175247d36a0563ef837d63f37ee6372737de8c9262c4b0db3f8cb9f6ce78a90c7438467a4d31ed80747dd3538ca4736d14a8de40db5a9cac5b04f3546712ba0a6c6ce0977ce665a544f15b58b0832e1f4af1b12619cca705ae10fec24fea92c82837e9ca1f16270bb3a9d68f24c03b9fce348ead4da80131a2046916b2d0ead5d10c9ecfe2193543990bc84f24bfc8a35a8a5db336cf8530a40ffb2d655e3d"], 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x304}, "d4333eb88c6a7f95", "c585725dbb6185a197989a739805a759", "2e7d6edc", "247038eab6cee441"}, 0x28) recvmmsg(r2, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/33, 0x21}], 0x1}}], 0x2, 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000084}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000018000100000000000000000002000000000020090000000006001500040000001400168008000880040002"], 0x38}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000fc0)=ANY=[@ANYRES32=r0], 0x88}}, 0x0) socket$kcm(0x29, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x54) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f0000000040)='FROZEN\x00', 0x7) read(r6, &(0x7f00000000c0)=""/29, 0x1d) r7 = openat$cgroup_procs(r5, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) socket$inet6_udp(0xa, 0x2, 0x0) 28.206213124s ago: executing program 1 (id=1859): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002680)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000003c0)="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", 0x8a7}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000400)=[{0x20, 0xfe, 0x0, 0xfffff00f}, {0x40, 0x0, 0x1, 0x200000}, {0x1, 0x0, 0x0, 0x1}]}, 0x10) syz_emit_ethernet(0xf5, &(0x7f0000000d80)=ANY=[@ANYBLOB="29fcf3ec34d4ece3bbffffff81000d8086dd61b6642500bb11fffe8000000000000000000000000000bbfe8000000000000000000000000000aa4e214e2100bb907841030000175247d36a0563ef837d63f37ee6372737de8c9262c4b0db3f8cb9f6ce78a90c7438467a4d31ed80747dd3538ca4736d14a8de40db5a9cac5b04f3546712ba0a6c6ce0977ce665a544f15b58b0832e1f4af1b12619cca705ae10fec24fea92c82837e9ca1f16270bb3a9d68f24c03b9fce348ead4da80131a2046916b2d0"], 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x304}, "d4333eb88c6a7f95", "c585725dbb6185a197989a739805a759", "2e7d6edc", "247038eab6cee441"}, 0x28) recvmmsg(r2, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/33, 0x21}], 0x1}}], 0x2, 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000084}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000018000100000000000000000002000000000020090000000006001500040000001400168008000880040002"], 0x38}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000fc0)=ANY=[@ANYRES32=r0], 0x88}}, 0x0) socket$kcm(0x29, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x54) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f0000000040)='FROZEN\x00', 0x7) read(r6, &(0x7f00000000c0)=""/29, 0x1d) r7 = openat$cgroup_procs(r5, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) socket$inet6_udp(0xa, 0x2, 0x0) 26.726616293s ago: executing program 3 (id=533): socket(0x10, 0x803, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendto$x25(r0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) unshare(0x400) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x84, 0x9, 0x9, 0x1}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1fc, 0x0, 0xf}, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@local, @in=@empty, 0x0, 0x0, 0x2, 0x0, 0xa}, {0xffffffff, 0x0, 0x0, 0x6, 0x0, 0x80000000}, {}, 0x200000}}, 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x7079, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600200003400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) listen(0xffffffffffffffff, 0x8) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfffffecc) 10.706234315s ago: executing program 3 (id=533): socket(0x10, 0x803, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendto$x25(r0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) unshare(0x400) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x84, 0x9, 0x9, 0x1}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1fc, 0x0, 0xf}, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@local, @in=@empty, 0x0, 0x0, 0x2, 0x0, 0xa}, {0xffffffff, 0x0, 0x0, 0x6, 0x0, 0x80000000}, {}, 0x200000}}, 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x7079, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600200003400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) listen(0xffffffffffffffff, 0x8) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfffffecc) 1.928866408s ago: executing program 0 (id=1989): bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20, 0x62) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) write$binfmt_misc(r0, 0x0, 0x0) 1.419390295s ago: executing program 0 (id=1993): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) sendmsg$NL80211_CMD_DEL_MPATH(r0, 0x0, 0x40) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r1) 1.292492981s ago: executing program 2 (id=1994): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000100000000fdffffffffffffff00", @ANYRES32=r1, @ANYBLOB="000000000000000014001680100001800c0004000c0000000000000008000d"], 0x3c}}, 0x0) 1.112863323s ago: executing program 0 (id=1995): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b80000001900674c0000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001680), 0x0, 0x11) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b80000001900674c0000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ffffffffffffff000000000000000000000000000000000000000000000300000000000000000040"], 0xb8}}, 0x0) 1.042348206s ago: executing program 2 (id=1996): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg(r1, &(0x7f0000002dc0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/27, 0x1b}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x4000000000000d8, 0x9200000000000000) 884.272511ms ago: executing program 0 (id=1997): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000f2ffffff850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd], 0x0, [0x8, 0x4]}}]}}]}, 0x8c}}, 0x0) 700.727095ms ago: executing program 0 (id=1998): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x8}, {0x4}}]}, 0x30}}, 0x0) 493.753261ms ago: executing program 2 (id=1999): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003c80)={{0x14}, [@NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x44}, 0x0) 303.591696ms ago: executing program 2 (id=2000): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, 0x1c) 232.721069ms ago: executing program 0 (id=2001): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000008850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001b0006000c00018008000100", @ANYRES32=r3], 0x20}}, 0x0) 129.960129ms ago: executing program 2 (id=2002): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x17) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, 0x0, &(0x7f0000000080)) 0s ago: executing program 2 (id=2003): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a"], 0x34}}, 0x0) kernel console output (not intermixed with test programs): ackup interface [ 342.415362][ T2907] bond0 (unregistering): Released all slaves [ 342.448527][T10053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1222'. [ 342.466893][T10053] netlink: 'syz.1.1222': attribute type 15 has an invalid length. [ 342.537494][T10053] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.546872][T10053] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.555610][T10053] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.564456][T10053] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.574973][T10053] vxlan1: entered promiscuous mode [ 342.583180][T10061] lo: Caught tx_queue_len zero misconfig [ 342.781866][T10066] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 342.816950][T10067] bridge: RTM_NEWNEIGH with invalid ether address [ 342.856724][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 343.072887][ T2907] hsr_slave_0: left promiscuous mode [ 343.110675][ T2907] hsr_slave_1: left promiscuous mode [ 343.177196][ T2907] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.198495][ T2907] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.258412][ T2907] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.265909][ T2907] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.362746][ T2907] veth1_macvtap: left promiscuous mode [ 343.394620][ T2907] veth0_macvtap: left promiscuous mode [ 343.429543][ T2907] veth1_vlan: left promiscuous mode [ 343.434969][ T2907] veth0_vlan: left promiscuous mode [ 343.820292][ T5241] Bluetooth: hci4: command tx timeout [ 343.896707][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 344.424573][ T2907] team0 (unregistering): Port device team_slave_1 removed [ 344.474782][ T2907] team0 (unregistering): Port device team_slave_0 removed [ 344.910154][T10085] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1230'. [ 344.924727][T10101] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1230'. [ 344.936801][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 345.343874][T10041] chnl_net:caif_netlink_parms(): no params data found [ 345.619472][T10165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1245'. [ 345.705807][T10172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1249'. [ 345.728996][T10168] xt_l2tp: wrong L2TP version: 0 [ 345.735236][T10041] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.770393][T10041] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.790706][T10041] bridge_slave_0: entered allmulticast mode [ 345.807696][T10041] bridge_slave_0: entered promiscuous mode [ 345.856448][T10041] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.873827][T10041] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.883818][T10041] bridge_slave_1: entered allmulticast mode [ 345.891606][T10041] bridge_slave_1: entered promiscuous mode [ 345.911953][ T5241] Bluetooth: hci4: command tx timeout [ 345.976754][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 346.183698][T10041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.209767][T10041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.325386][T10200] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1254'. [ 346.364891][T10041] team0: Port device team_slave_0 added [ 346.372285][T10197] netlink: 'syz.0.1254': attribute type 1 has an invalid length. [ 346.382354][T10197] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 346.390112][T10197] IPv6: NLM_F_CREATE should be set when creating new route [ 346.397435][T10197] IPv6: NLM_F_CREATE should be set when creating new route [ 346.410083][T10041] team0: Port device team_slave_1 added [ 346.435094][T10205] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1258'. [ 346.504933][T10041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.518087][T10041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.550644][T10041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.562659][T10205] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 346.569997][T10205] IPv6: NLM_F_CREATE should be set when creating new route [ 346.577323][T10205] IPv6: NLM_F_CREATE should be set when creating new route [ 346.587345][T10041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.594574][T10041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.601179][T10206] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1258'. [ 346.622759][T10041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.746569][T10205] xt_bpf: check failed: parse error [ 346.903434][T10041] hsr_slave_0: entered promiscuous mode [ 346.992737][T10041] hsr_slave_1: entered promiscuous mode [ 347.016795][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 347.025499][T10041] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 347.040718][T10041] Cannot create hsr debugfs directory [ 347.434537][T10227] geneve3: entered promiscuous mode [ 347.447028][T10227] geneve3: entered allmulticast mode [ 347.659824][T10243] netlink: 'syz.4.1266': attribute type 10 has an invalid length. [ 347.684945][T10243] syz_tun: entered promiscuous mode [ 347.714939][T10243] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 347.853059][T10254] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1271'. [ 347.899181][T10254] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1271'. [ 347.956798][T10258] netlink: 'syz.1.1274': attribute type 1 has an invalid length. [ 347.972039][T10258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1274'. [ 347.990821][ T5241] Bluetooth: hci4: command tx timeout [ 348.056876][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 348.150803][T10265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1275'. [ 348.160241][T10265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1275'. [ 348.170376][T10266] netlink: 'syz.2.1275': attribute type 12 has an invalid length. [ 348.179961][T10266] netlink: 'syz.2.1275': attribute type 29 has an invalid length. [ 348.188004][T10266] netlink: 'syz.2.1275': attribute type 2 has an invalid length. [ 348.195743][T10266] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1275'. [ 348.206012][T10263] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 348.248726][T10271] team0: Caught tx_queue_len zero misconfig [ 348.568845][T10041] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 348.598283][T10041] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 348.667849][T10041] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 348.734179][T10041] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 348.952835][T10310] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1287'. [ 349.041664][T10041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.055227][T10310] netlink: 'syz.2.1287': attribute type 8 has an invalid length. [ 349.073954][T10310] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1287'. [ 349.093048][T10041] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.096853][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 349.133240][ T2907] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.140493][ T2907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.216249][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.223589][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.256441][T10317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1290'. [ 349.270131][T10320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.296194][T10320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.314355][T10319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1290'. [ 349.878008][T10041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.987887][T10041] veth0_vlan: entered promiscuous mode [ 350.043808][T10041] veth1_vlan: entered promiscuous mode [ 350.057269][ T5237] Bluetooth: hci4: command tx timeout [ 350.109352][T10041] veth0_macvtap: entered promiscuous mode [ 350.121804][T10041] veth1_macvtap: entered promiscuous mode [ 350.136775][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 350.156516][T10041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.178128][T10041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.198630][T10041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.219977][T10041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.240298][T10041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.258782][T10041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.317477][T10041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.328705][T10041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.340409][T10041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.351095][T10041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.368424][T10041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.393617][T10041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.404788][T10041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.415431][T10041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.429264][T10041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.439310][T10041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.450471][T10041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.461317][T10041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.481910][T10041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.494690][T10041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.512176][T10041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.535406][T10041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.604870][T10041] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.629422][T10041] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.646620][T10041] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.663882][T10041] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.911149][ T2542] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.945685][ T2542] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.024619][T10375] veth0_vlan: entered allmulticast mode [ 351.176813][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 351.228529][T10378] : renamed from veth0_vlan [ 351.278964][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.299879][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.515932][T10391] ebt_among: dst integrity fail: 200 [ 351.779608][T10401] tipc: Enabling of bearer rejected, failed to enable media [ 352.137505][ T5237] Bluetooth: hci4: command 0x0405 tx timeout [ 352.216854][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 352.338552][T10429] netlink: 'syz.4.1324': attribute type 1 has an invalid length. [ 352.346552][T10429] netlink: 'syz.4.1324': attribute type 1 has an invalid length. [ 352.366978][T10429] netlink: 'syz.4.1324': attribute type 2 has an invalid length. [ 353.125697][T10468] __nla_validate_parse: 7 callbacks suppressed [ 353.125720][T10468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1336'. [ 353.244514][T10468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1336'. [ 353.258468][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 353.453739][T10479] netlink: 47 bytes leftover after parsing attributes in process `syz.4.1339'. [ 353.649982][T10485] netlink: 'syz.4.1341': attribute type 7 has an invalid length. [ 353.895784][T10491] netlink: 'syz.4.1342': attribute type 1 has an invalid length. [ 354.013560][T10496] netlink: 'syz.4.1344': attribute type 1 has an invalid length. [ 354.026660][T10496] netlink: 'syz.4.1344': attribute type 2 has an invalid length. [ 354.296750][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 354.378236][T10509] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1350'. [ 354.561145][T10514] netlink: 'syz.0.1351': attribute type 4 has an invalid length. [ 354.590463][T10516] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1352'. [ 354.863095][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.129894][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.335467][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.336757][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 355.477229][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.728914][ T12] bridge_slave_1: left allmulticast mode [ 355.734628][ T12] bridge_slave_1: left promiscuous mode [ 355.743025][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.756278][ T12] bridge_slave_0: left allmulticast mode [ 355.762763][ T12] bridge_slave_0: left promiscuous mode [ 355.769192][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.376725][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 356.504824][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.519565][ T5241] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 356.528023][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 356.553553][ T5241] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 356.563400][ T5241] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 356.567499][ T12] bond0 (unregistering): Released all slaves [ 356.579239][ T5241] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 356.588043][ T5241] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 356.595857][ T5241] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 357.242155][T10565] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1364'. [ 357.416718][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 357.431785][ T12] hsr_slave_0: left promiscuous mode [ 357.443020][ T12] hsr_slave_1: left promiscuous mode [ 357.455325][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.463602][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.477859][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.485296][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.535123][ T12] veth1_macvtap: left promiscuous mode [ 357.540909][ T12] veth0_macvtap: left promiscuous mode [ 357.555412][ T12] veth1_vlan: left promiscuous mode [ 357.572647][ T12] veth0_vlan: left promiscuous mode [ 358.226431][ T12] team0 (unregistering): Port device team_slave_1 removed [ 358.280755][ T12] team0 (unregistering): Port device team_slave_0 removed [ 358.456725][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 358.697482][ T5248] Bluetooth: hci4: command tx timeout [ 358.756118][T10593] batadv0: entered promiscuous mode [ 358.777345][T10593] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 358.785897][T10593] macvlan2: entered promiscuous mode [ 358.818445][T10593] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 359.221082][T10548] chnl_net:caif_netlink_parms(): no params data found [ 359.496732][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 359.531871][T10548] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.569975][T10548] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.606979][T10548] bridge_slave_0: entered allmulticast mode [ 359.634183][T10548] bridge_slave_0: entered promiscuous mode [ 359.673440][T10548] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.705567][T10548] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.729266][T10548] bridge_slave_1: entered allmulticast mode [ 359.756372][T10548] bridge_slave_1: entered promiscuous mode [ 359.812336][T10647] mac80211_hwsim hwsim35 wlan0: entered promiscuous mode [ 359.838309][T10647] macsec1: entered promiscuous mode [ 359.845933][T10647] macsec1: entered allmulticast mode [ 359.852013][T10647] mac80211_hwsim hwsim35 wlan0: entered allmulticast mode [ 359.916721][T10647] mac80211_hwsim hwsim35 wlan0: left allmulticast mode [ 359.937701][T10647] mac80211_hwsim hwsim35 wlan0: left promiscuous mode [ 360.075542][T10548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.098576][T10655] team0: Device gre2 is of different type [ 360.152748][T10548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.284305][T10548] team0: Port device team_slave_0 added [ 360.311331][T10548] team0: Port device team_slave_1 added [ 360.462474][ T5248] Bluetooth: hci1: command 0x0406 tx timeout [ 360.469225][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 360.493690][T10548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.500763][T10548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.529123][T10548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.539831][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 360.553185][T10672] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1388'. [ 360.565388][T10548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.576482][T10548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.602984][T10548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.680091][T10548] hsr_slave_0: entered promiscuous mode [ 360.687914][T10548] hsr_slave_1: entered promiscuous mode [ 360.694351][T10548] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 360.702795][T10548] Cannot create hsr debugfs directory [ 360.777577][ T5241] Bluetooth: hci4: command tx timeout [ 361.263319][T10548] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 361.281512][T10548] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 361.298686][T10683] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1391'. [ 361.299437][T10548] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 361.326100][T10685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.387832][T10548] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 361.576735][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 361.655839][T10548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.721561][T10548] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.756027][ T2542] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.763371][ T2542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.796487][ T2907] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.803722][ T2907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.101959][T10711] netlink: 'syz.2.1399': attribute type 1 has an invalid length. [ 362.113246][T10712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1400'. [ 362.118994][T10711] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1399'. [ 362.368529][T10727] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1402'. [ 362.409403][T10548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.498807][T10729] netlink: 'syz.0.1403': attribute type 10 has an invalid length. [ 362.529105][T10729] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 362.571327][T10731] netlink: 'syz.1.1405': attribute type 9 has an invalid length. [ 362.592610][T10729] team0: Port device netdevsim0 added [ 362.606703][T10731] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1405'. [ 362.616869][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 362.703962][T10548] veth0_vlan: entered promiscuous mode [ 362.717345][T10737] netlink: 'syz.1.1405': attribute type 9 has an invalid length. [ 362.741449][T10737] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1405'. [ 362.769682][T10548] veth1_vlan: entered promiscuous mode [ 362.857597][ T5241] Bluetooth: hci4: command tx timeout [ 363.060284][T10750] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1407'. [ 363.262972][T10548] veth0_macvtap: entered promiscuous mode [ 363.300477][T10548] veth1_macvtap: entered promiscuous mode [ 363.415059][T10761] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.472191][T10548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.505625][T10548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.535162][T10548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.555831][T10548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.576354][T10548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.584583][T10772] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1416'. [ 363.587800][T10548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.607818][T10548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.618804][T10548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.629593][T10548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.649487][T10548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.660117][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 363.681517][T10548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.722647][T10774] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1415'. [ 363.734921][T10548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.762409][T10548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.772917][T10548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.784942][T10548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.796440][T10548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.833157][T10548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.847419][T10548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.860777][T10548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.872156][T10548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.884559][T10548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.899967][T10548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.966004][T10548] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.997337][T10548] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.019188][T10548] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.041215][T10548] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.103432][T10774] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 364.338341][T10786] netlink: 'syz.2.1419': attribute type 1 has an invalid length. [ 364.394718][ T2542] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.436091][ T2542] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.558803][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.591915][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.696891][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 365.119053][T10830] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 365.736784][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 366.776825][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 366.965562][T10828] __nla_validate_parse: 3 callbacks suppressed [ 366.965579][T10828] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1427'. [ 367.200142][ T5241] Bluetooth: hci0: command tx timeout [ 367.509979][T10858] netlink: 135 bytes leftover after parsing attributes in process `syz.2.1434'. [ 367.595614][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.731188][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.809859][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.820515][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 367.905746][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.031092][ T11] bridge_slave_1: left allmulticast mode [ 368.037008][ T11] bridge_slave_1: left promiscuous mode [ 368.042778][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.054329][ T11] bridge_slave_0: left allmulticast mode [ 368.061641][ T11] bridge_slave_0: left promiscuous mode [ 368.067779][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.454352][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 368.467328][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 368.480496][ T11] bond0 (unregistering): Released all slaves [ 368.766890][T10866] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 368.793484][T10871] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 368.856833][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 368.916938][T10874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1439'. [ 369.087970][T10870] netlink: 'syz.0.1435': attribute type 10 has an invalid length. [ 369.140076][T10870] team0: Port device netdevsim0 removed [ 369.160524][T10870] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 369.202672][T10870] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 369.228202][T10879] netlink: 'syz.2.1440': attribute type 29 has an invalid length. [ 369.356537][ T5237] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 369.370784][ T5237] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 369.379910][ T5237] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 369.397430][ T5237] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 369.407993][ T5237] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 369.415866][ T5237] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 369.901024][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 370.884445][T10894] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 370.936740][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 371.340795][ T11] hsr_slave_0: left promiscuous mode [ 371.365023][ T11] hsr_slave_1: left promiscuous mode [ 371.378021][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.385585][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.409528][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 371.428722][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.484146][ T11] veth1_macvtap: left promiscuous mode [ 371.490165][ T11] veth0_macvtap: left promiscuous mode [ 371.495933][ T11] veth1_vlan: left promiscuous mode [ 371.501618][ T5241] Bluetooth: hci4: command tx timeout [ 371.507142][ T11] veth0_vlan: left promiscuous mode [ 371.976732][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 372.275124][ T11] team0 (unregistering): Port device team_slave_1 removed [ 372.326524][ T11] team0 (unregistering): Port device team_slave_0 removed [ 372.822452][T10899] netlink: 'syz.1.1444': attribute type 10 has an invalid length. [ 372.878904][T10899] team0: Device hsr_slave_0 failed to register rx_handler [ 373.016796][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 373.381334][T10925] netlink: 'syz.2.1451': attribute type 9 has an invalid length. [ 373.420827][T10925] bond0: entered promiscuous mode [ 373.425940][T10925] bond_slave_0: entered promiscuous mode [ 373.467148][T10925] bond_slave_1: entered promiscuous mode [ 373.474446][T10925] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 373.519914][T10925] bond0: left promiscuous mode [ 373.529315][T10925] bond_slave_0: left promiscuous mode [ 373.535061][T10925] bond_slave_1: left promiscuous mode [ 373.588565][ T5241] Bluetooth: hci4: command tx timeout [ 373.650557][T10887] chnl_net:caif_netlink_parms(): no params data found [ 373.741757][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.932855][T10887] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.968415][T10887] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.975741][T10887] bridge_slave_0: entered allmulticast mode [ 374.018911][T10887] bridge_slave_0: entered promiscuous mode [ 374.056701][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 374.065109][T10887] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.084949][T10887] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.102674][T10887] bridge_slave_1: entered allmulticast mode [ 374.116155][T10887] bridge_slave_1: entered promiscuous mode [ 374.492235][T10887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.517496][T10887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.680989][T10887] team0: Port device team_slave_0 added [ 375.096809][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 375.149432][T11022] Bluetooth: hci3: invalid length 0, exp 2 for type 29 [ 375.667291][ T5241] Bluetooth: hci4: command tx timeout [ 376.136709][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 376.804833][T10887] team0: Port device team_slave_1 added [ 376.917687][T10887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.924697][T10887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.974951][T10887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.989252][T10887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.996452][T10887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.024147][T10887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.176741][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 377.238723][T10887] hsr_slave_0: entered promiscuous mode [ 377.263295][T10887] hsr_slave_1: entered promiscuous mode [ 377.338385][T10887] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 377.359105][T10887] Cannot create hsr debugfs directory [ 377.739361][ T5241] Bluetooth: hci4: command tx timeout [ 377.894881][T11081] pim6reg: entered allmulticast mode [ 377.941685][T11082] pim6reg: entered allmulticast mode [ 378.007255][T11085] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1488'. [ 378.030503][T11081] pim6reg: left allmulticast mode [ 378.082803][T11086] IPVS: set_ctl: invalid protocol: 92 127.0.0.1:0 [ 378.091290][T11086] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:0 [ 378.108252][T11079] pim6reg: left allmulticast mode [ 378.216862][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 378.423447][T11093] xt_time: unknown flags 0x4 [ 379.153994][T10887] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 379.183101][T10887] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 379.202266][T10887] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 379.223827][T11120] netlink: 'syz.4.1497': attribute type 1 has an invalid length. [ 379.243984][T11120] netlink: 'syz.4.1497': attribute type 2 has an invalid length. [ 379.256712][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 379.280891][T10887] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 379.535961][T11128] pim6reg: entered allmulticast mode [ 379.584713][T11128] pim6reg: left allmulticast mode [ 379.683375][T10887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.750623][T11136] xt_TPROXY: Can be used only with -p tcp or -p udp [ 379.760066][T10887] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.810260][ T1120] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.817850][ T1120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.906475][T11142] netlink: 'syz.0.1503': attribute type 3 has an invalid length. [ 379.929748][T11142] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1503'. [ 379.990932][T11141] team0: Port device macvlan2 added [ 380.042394][ T1120] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.049660][ T1120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.296958][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 380.440773][T11166] FAULT_INJECTION: forcing a failure. [ 380.440773][T11166] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 380.454662][T11166] CPU: 1 UID: 0 PID: 11166 Comm: syz.1.1511 Not tainted 6.11.0-rc4-syzkaller-00566-g7d3aed652d09 #0 [ 380.465479][T11166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 380.476179][T11166] Call Trace: [ 380.479582][T11166] [ 380.482635][T11166] dump_stack_lvl+0x241/0x360 [ 380.487370][T11166] ? __pfx_dump_stack_lvl+0x10/0x10 [ 380.492697][T11166] ? __pfx__printk+0x10/0x10 [ 380.497357][T11166] ? snprintf+0xda/0x120 [ 380.501737][T11166] should_fail_ex+0x3b0/0x4e0 [ 380.506550][T11166] _copy_to_user+0x2f/0xb0 [ 380.511191][T11166] simple_read_from_buffer+0xca/0x150 [ 380.516863][T11166] proc_fail_nth_read+0x1ec/0x260 [ 380.521934][T11166] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 380.527591][T11166] ? rw_verify_area+0x520/0x6b0 [ 380.532459][T11166] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 380.538106][T11166] vfs_read+0x204/0xbc0 [ 380.542284][T11166] ? __pfx_lock_release+0x10/0x10 [ 380.547335][T11166] ? __pfx_vfs_read+0x10/0x10 [ 380.552123][T11166] ? __fget_files+0x29/0x470 [ 380.556742][T11166] ? __fget_files+0x3f6/0x470 [ 380.561472][T11166] ksys_read+0x1a0/0x2c0 [ 380.565999][T11166] ? __pfx_ksys_read+0x10/0x10 [ 380.570783][T11166] ? do_syscall_64+0x100/0x230 [ 380.575736][T11166] ? do_syscall_64+0xb6/0x230 [ 380.580432][T11166] do_syscall_64+0xf3/0x230 [ 380.584975][T11166] ? clear_bhb_loop+0x35/0x90 [ 380.589673][T11166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.595717][T11166] RIP: 0033:0x7f0270f788bc [ 380.600235][T11166] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 380.619856][T11166] RSP: 002b:00007f0271e1c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 380.628291][T11166] RAX: ffffffffffffffda RBX: 00007f0271115f80 RCX: 00007f0270f788bc [ 380.636274][T11166] RDX: 000000000000000f RSI: 00007f0271e1c0a0 RDI: 0000000000000005 [ 380.644428][T11166] RBP: 00007f0271e1c090 R08: 0000000000000000 R09: 0000000000000000 [ 380.652507][T11166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.660491][T11166] R13: 0000000000000000 R14: 00007f0271115f80 R15: 00007fff5e84de48 [ 380.668585][T11166] [ 380.762647][T11168] netlink: 'syz.0.1509': attribute type 4 has an invalid length. [ 380.851706][T11157] netlink: 'syz.0.1509': attribute type 4 has an invalid length. [ 381.108323][T10887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.211139][T11190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1516'. [ 381.336799][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 381.384518][T10887] veth0_vlan: entered promiscuous mode [ 381.401098][T11194] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1517'. [ 381.640792][T10887] veth1_vlan: entered promiscuous mode [ 381.703506][T10887] veth0_macvtap: entered promiscuous mode [ 381.756981][T10887] veth1_macvtap: entered promiscuous mode [ 381.844562][T10887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.876455][T10887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.894514][T10887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.912630][T10887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.944489][T10887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.970226][T10887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.991235][T10887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.026334][T10887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.046827][T10887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.070051][T10887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.109155][T10887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.171146][T11235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1528'. [ 382.202348][T10887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.216234][T10887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.227367][T10887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.238217][T10887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.248428][T10887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.262726][T10887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.274277][T10887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.286065][T10887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.296432][T10887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.307441][T10887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.319576][T10887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.332002][T10887] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.340862][T10887] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.375025][T10887] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.384399][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 382.406753][T10887] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.695837][T11245] pim6reg: entered allmulticast mode [ 382.720733][ T2542] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.754258][ T2542] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.792989][T11245] pim6reg: left allmulticast mode [ 382.931938][T11253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.936114][ T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.968127][ T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.977712][T11253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.037032][T11253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.101289][T11253] syz.2.1536 (11253) used greatest stack depth: 18448 bytes left [ 383.416736][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 383.538336][T11278] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 383.548343][T11281] x_tables: duplicate underflow at hook 2 [ 383.615872][T11284] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1545'. [ 383.860141][T11300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1544'. [ 383.945430][T11302] pim6reg: entered allmulticast mode [ 383.962575][T11302] pim6reg: left allmulticast mode [ 383.984160][T11304] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1548'. [ 384.456785][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 384.737309][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.800301][T11321] netlink: 'syz.2.1556': attribute type 10 has an invalid length. [ 384.813426][T11321] netlink: 'syz.2.1556': attribute type 10 has an invalid length. [ 385.014548][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.496878][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 385.769138][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.829269][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.883929][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.004751][ T11] bridge_slave_1: left allmulticast mode [ 386.011156][ T11] bridge_slave_1: left promiscuous mode [ 386.017250][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.026875][ T11] bridge_slave_0: left allmulticast mode [ 386.032590][ T11] bridge_slave_0: left promiscuous mode [ 386.039331][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.406518][T11340] netlink: 'syz.2.1560': attribute type 11 has an invalid length. [ 386.441400][T11340] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1560'. [ 386.537035][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 386.851856][ T5237] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 386.870664][ T5237] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 386.883577][ T5237] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 386.893421][ T5237] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 386.911146][ T5237] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 386.927175][ T5237] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 386.975374][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 386.992554][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.004646][ T11] bond0 (unregistering): Released all slaves [ 387.025854][T11346] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1558'. [ 387.078018][T11356] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1563'. [ 387.242352][T11362] openvswitch: netlink: IP tunnel attribute has 2 unknown bytes. [ 387.326109][T11366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1566'. [ 387.352141][T11366] openvswitch: netlink: Message has 1 unknown bytes. [ 387.471287][T11368] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1567'. [ 387.568807][T11374] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 387.576872][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 387.630128][T11378] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 387.659165][T11376] netlink: 'syz.2.1568': attribute type 10 has an invalid length. [ 387.721055][T11376] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 387.932963][ T11] hsr_slave_0: left promiscuous mode [ 387.958211][ T11] hsr_slave_1: left promiscuous mode [ 388.008389][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.021740][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.042624][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.064541][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.133157][ T11] veth1_macvtap: left promiscuous mode [ 388.146511][ T11] veth0_macvtap: left promiscuous mode [ 388.156282][ T11] veth1_vlan: left promiscuous mode [ 388.174754][ T11] veth0_vlan: left promiscuous mode [ 388.616703][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 389.021093][ T5237] Bluetooth: hci4: command tx timeout [ 389.309158][ T11] team0 (unregistering): Port device team_slave_1 removed [ 389.417682][ T11] team0 (unregistering): Port device team_slave_0 removed [ 389.656750][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 390.519843][T11393] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1573'. [ 390.569911][T11399] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1573'. [ 390.696803][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 390.977560][T11417] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1576'. [ 390.997929][T11416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1578'. [ 391.012055][T11417] netlink: 'syz.2.1576': attribute type 1 has an invalid length. [ 391.037827][T11417] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1576'. [ 391.097505][ T5237] Bluetooth: hci4: command tx timeout [ 391.129837][T11353] chnl_net:caif_netlink_parms(): no params data found [ 391.517050][T11353] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.533596][T11413] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1577'. [ 391.546911][T11353] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.555052][T11353] bridge_slave_0: entered allmulticast mode [ 391.607002][T11353] bridge_slave_0: entered promiscuous mode [ 391.623997][T11353] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.645059][T11353] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.652951][T11353] bridge_slave_1: entered allmulticast mode [ 391.675784][T11353] bridge_slave_1: entered promiscuous mode [ 391.736718][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 391.773838][T11436] pim6reg: entered allmulticast mode [ 391.845952][T11353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.882887][T11436] pim6reg: left allmulticast mode [ 391.968145][T11353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.105404][T11445] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1588'. [ 392.172980][T11453] netlink: 'syz.0.1589': attribute type 11 has an invalid length. [ 392.201661][T11453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1589'. [ 392.331511][T11353] team0: Port device team_slave_0 added [ 392.364149][T11353] team0: Port device team_slave_1 added [ 392.509181][T11353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.516512][T11353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.547347][T11465] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1592'. [ 392.597276][T11353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.616260][T11465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1592'. [ 392.634233][T11353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.649879][T11353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.719754][T11353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.776709][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 392.959381][T11353] hsr_slave_0: entered promiscuous mode [ 392.979683][T11353] hsr_slave_1: entered promiscuous mode [ 392.991403][T11353] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 393.005064][T11353] Cannot create hsr debugfs directory [ 393.181562][ T5237] Bluetooth: hci4: command tx timeout [ 393.392834][T11492] pim6reg: entered allmulticast mode [ 393.417532][T11496] hsr0: entered promiscuous mode [ 393.453671][T11492] pim6reg: left allmulticast mode [ 393.816829][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 394.158315][T11353] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 394.180484][T11353] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 394.204412][T11353] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 394.248673][T11353] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 394.453966][T11353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.502055][T11353] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.538535][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.545855][ T1113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.580741][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.588175][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.728569][T11547] syz.0.1617 uses old SIOCAX25GETINFO [ 394.856851][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 395.173427][T11563] tun0: tun_chr_ioctl cmd 2147767519 [ 395.259184][ T5237] Bluetooth: hci4: command tx timeout [ 395.292228][T11353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.367545][T11561] ip6t_REJECT: ECHOREPLY is not supported [ 395.484034][T11353] veth0_vlan: entered promiscuous mode [ 395.546173][T11353] veth1_vlan: entered promiscuous mode [ 395.683272][T11353] veth0_macvtap: entered promiscuous mode [ 395.717674][T11353] veth1_macvtap: entered promiscuous mode [ 395.777696][T11353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.799232][T11353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.826954][T11353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.854485][T11353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.896721][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 395.899239][T11353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.942887][T11353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.972769][T11353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.992805][T11353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.005251][T11353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.020725][T11353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.032986][T11353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.080817][T11353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.111758][T11353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.124538][T11353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.146067][T11353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.158134][T11353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.184380][T11353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.203779][T11608] __nla_validate_parse: 11 callbacks suppressed [ 396.203801][T11608] netlink: 134744 bytes leftover after parsing attributes in process `syz.1.1636'. [ 396.208143][T11353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.247862][T11353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.257990][T11353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.271555][T11353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.294017][T11353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 396.362206][T11353] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.395001][T11353] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.410287][T11353] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.419704][T11353] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.462402][T11615] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1639'. [ 396.504199][T11615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1639'. [ 396.734980][T11626] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1641'. [ 396.775711][T11626] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 396.901011][T11627] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1641'. [ 396.931890][T11627] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 396.936783][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 396.978568][T11632] sit0: entered promiscuous mode [ 397.028009][T11632] netlink: 'syz.0.1640': attribute type 1 has an invalid length. [ 397.049748][T11632] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1640'. [ 397.075658][T11636] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1643'. [ 397.126358][T11638] netlink: 'syz.2.1643': attribute type 3 has an invalid length. [ 397.196484][ T2907] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.222512][ T2907] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.263315][T11639] xt_ecn: cannot match TCP bits for non-tcp packets [ 397.278248][T11639] xt_l2tp: v2 tid > 0xffff: 150994944 [ 397.285277][T11636] xt_hashlimit: size too large, truncated to 1048576 [ 397.309419][T11636] xt_hashlimit: max too large, truncated to 1048576 [ 397.320379][T11645] x_tables: duplicate underflow at hook 3 [ 397.327906][T11636] xt_hashlimit: overflow, try lower: 0/0 [ 397.334618][T11646] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1645'. [ 397.359335][ T2907] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.390984][ T2907] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.417559][ T5241] Bluetooth: hci4: command 0x0405 tx timeout [ 397.427649][T11647] ip6t_REJECT: ECHOREPLY is not supported [ 397.651006][T11654] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1646'. [ 397.950964][T11666] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1648'. [ 397.976709][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 398.327519][T11684] netlink: 'syz.4.1656': attribute type 1 has an invalid length. [ 398.408502][T11696] netlink: 'syz.4.1656': attribute type 11 has an invalid length. [ 398.447990][T11690] ip6t_REJECT: ECHOREPLY is not supported [ 398.459873][T11695] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.500737][T11695] batadv_slave_0: entered promiscuous mode [ 399.016703][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 399.498186][ T5248] Bluetooth: hci4: command 0x0405 tx timeout [ 399.892197][T11752] netlink: 'syz.1.1676': attribute type 15 has an invalid length. [ 400.056885][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 400.302188][ T2907] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.458899][ T2907] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.546991][ T5237] Bluetooth: hci3: command 0x1407 tx timeout [ 400.559461][ T2907] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.646300][ T2907] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.785277][ T2907] bridge_slave_1: left allmulticast mode [ 400.791609][ T2907] bridge_slave_1: left promiscuous mode [ 400.797841][ T2907] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.820842][ T2907] bridge_slave_0: left allmulticast mode [ 400.827652][ T2907] bridge_slave_0: left promiscuous mode [ 400.833924][ T2907] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.103460][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 401.310613][ T2907] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 401.324664][ T2907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 401.336951][ T2907] bond0 (unregistering): Released all slaves [ 401.742231][ T2907] hsr_slave_0: left promiscuous mode [ 401.782976][ T2907] hsr_slave_1: left promiscuous mode [ 401.809432][ T2907] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 401.832363][ T2907] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 401.865364][ T2907] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 401.882374][ T2907] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 401.962332][ T2907] veth1_macvtap: left promiscuous mode [ 401.974998][ T2907] veth0_macvtap: left promiscuous mode [ 401.986573][ T2907] veth1_vlan: left promiscuous mode [ 401.998468][ T2907] veth0_vlan: left promiscuous mode [ 402.007931][T11790] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:2 [ 402.136740][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 402.168406][T11793] __nla_validate_parse: 6 callbacks suppressed [ 402.168432][T11793] netlink: 209772 bytes leftover after parsing attributes in process `syz.0.1687'. [ 402.208809][T11793] openvswitch: netlink: Message has 80 unknown bytes. [ 402.230646][ T5237] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 402.247607][ T5237] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 402.268338][ T5237] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 402.283846][ T5237] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 402.298391][ T5237] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 402.308635][ T5237] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 402.879983][ T2907] team0 (unregistering): Port device team_slave_1 removed [ 402.940086][ T2907] team0 (unregistering): Port device team_slave_0 removed [ 403.177200][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 403.513467][T11783] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 403.543298][T11788] vlan2: entered allmulticast mode [ 403.595239][T11788] mac80211_hwsim hwsim40 wlan1: entered allmulticast mode [ 403.607374][T11788] mac80211_hwsim hwsim40 wlan1: left allmulticast mode [ 404.217021][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 404.254047][ C0] hrtimer: interrupt took 1548825 ns [ 404.347251][T11822] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1695'. [ 404.377075][ T5241] Bluetooth: hci4: command tx timeout [ 404.553480][T11825] netlink: 'syz.0.1695': attribute type 2 has an invalid length. [ 404.930195][T11848] FAULT_INJECTION: forcing a failure. [ 404.930195][T11848] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 404.944363][T11848] CPU: 1 UID: 0 PID: 11848 Comm: syz.4.1701 Not tainted 6.11.0-rc4-syzkaller-00566-g7d3aed652d09 #0 [ 404.955176][T11848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 404.965279][T11848] Call Trace: [ 404.968600][T11848] [ 404.971564][T11848] dump_stack_lvl+0x241/0x360 [ 404.976290][T11848] ? __pfx_dump_stack_lvl+0x10/0x10 [ 404.981533][T11848] ? __pfx__printk+0x10/0x10 [ 404.986174][T11848] ? __pfx_lock_release+0x10/0x10 [ 404.991274][T11848] ? aa_label_sk_perm+0x4f0/0x6d0 [ 404.996348][T11848] should_fail_ex+0x3b0/0x4e0 [ 405.001094][T11848] _copy_from_user+0x2f/0xe0 [ 405.005759][T11848] sk_getsockopt+0x1d2/0x3890 [ 405.010507][T11848] ? __pfx_sk_getsockopt+0x10/0x10 [ 405.015682][T11848] ? __pfx___might_resched+0x10/0x10 [ 405.021112][T11848] ? __lock_acquire+0x137a/0x2040 [ 405.026211][T11848] ? aa_sk_perm+0x96d/0xab0 [ 405.030773][T11848] ? __pfx_aa_sk_perm+0x10/0x10 [ 405.035683][T11848] ? __pfx_lock_acquire+0x10/0x10 [ 405.041036][T11848] ? aa_sock_opt_perm+0x79/0x120 [ 405.046025][T11848] do_sock_getsockopt+0x270/0x850 [ 405.051114][T11848] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 405.056721][T11848] ? __fget_files+0x3f6/0x470 [ 405.061731][T11848] __sys_getsockopt+0x271/0x330 [ 405.066732][T11848] ? __pfx___sys_getsockopt+0x10/0x10 [ 405.072437][T11848] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 405.078829][T11848] ? do_syscall_64+0x100/0x230 [ 405.083653][T11848] __x64_sys_getsockopt+0xb5/0xd0 [ 405.088831][T11848] do_syscall_64+0xf3/0x230 [ 405.093488][T11848] ? clear_bhb_loop+0x35/0x90 [ 405.098406][T11848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.104357][T11848] RIP: 0033:0x7f2997579e79 [ 405.108825][T11848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.128660][T11848] RSP: 002b:00007f29982f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 405.137131][T11848] RAX: ffffffffffffffda RBX: 00007f2997715f80 RCX: 00007f2997579e79 [ 405.145344][T11848] RDX: 0000000000000002 RSI: 0000000000000001 RDI: 0000000000000003 [ 405.153366][T11848] RBP: 00007f29982f7090 R08: 0000000020002900 R09: 0000000000000000 [ 405.161387][T11848] R10: 0000000020002880 R11: 0000000000000246 R12: 0000000000000001 [ 405.169443][T11848] R13: 0000000000000000 R14: 00007f2997715f80 R15: 00007ffd626b6bb8 [ 405.177483][T11848] [ 405.256832][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 405.505234][T11794] chnl_net:caif_netlink_parms(): no params data found [ 405.824403][T11872] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1706'. [ 405.883031][T11876] netlink: 'syz.2.1705': attribute type 7 has an invalid length. [ 405.942302][T11876] netlink: 'syz.2.1705': attribute type 39 has an invalid length. [ 405.979340][T11867] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1706'. [ 406.082288][T11877] netlink: 'syz.0.1707': attribute type 10 has an invalid length. [ 406.136926][T11884] netlink: 'syz.0.1707': attribute type 1 has an invalid length. [ 406.144735][T11884] netlink: 616 bytes leftover after parsing attributes in process `syz.0.1707'. [ 406.202496][T11877] bond0: (slave netdevsim0): Releasing backup interface [ 406.230741][T11877] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 406.256013][T11877] team0: Port device netdevsim0 added [ 406.296842][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 406.320794][T11885] netlink: 'syz.0.1707': attribute type 10 has an invalid length. [ 406.351926][T11885] team0: Port device netdevsim0 removed [ 406.363484][T11885] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 406.372653][T11885] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 406.397410][T11794] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.404654][T11794] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.423384][T11794] bridge_slave_0: entered allmulticast mode [ 406.448047][T11794] bridge_slave_0: entered promiscuous mode [ 406.460331][ T5241] Bluetooth: hci4: command tx timeout [ 406.489654][T11794] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.507147][T11794] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.514789][T11794] bridge_slave_1: entered allmulticast mode [ 406.522937][T11794] bridge_slave_1: entered promiscuous mode [ 406.536802][ T5241] Bluetooth: hci3: command 0x1407 tx timeout [ 406.683256][T11794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.744227][T11794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.964977][T11794] team0: Port device team_slave_0 added [ 407.019587][T11794] team0: Port device team_slave_1 added [ 407.155806][T11905] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1716'. [ 407.260676][T11908] ip6t_REJECT: ECHOREPLY is not supported [ 407.278369][T11910] ip6t_REJECT: ECHOREPLY is not supported [ 407.292732][T11794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.336897][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 407.337265][T11794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.423207][T11794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.444731][T11794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.454199][T11794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.485804][T11794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.532600][T11906] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1715'. [ 407.617965][T11919] FAULT_INJECTION: forcing a failure. [ 407.617965][T11919] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 407.646870][T11919] CPU: 1 UID: 0 PID: 11919 Comm: syz.1.1719 Not tainted 6.11.0-rc4-syzkaller-00566-g7d3aed652d09 #0 [ 407.658150][T11919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 407.668944][T11919] Call Trace: [ 407.672380][T11919] [ 407.675354][T11919] dump_stack_lvl+0x241/0x360 [ 407.680398][T11919] ? __pfx_dump_stack_lvl+0x10/0x10 [ 407.685796][T11919] ? __pfx__printk+0x10/0x10 [ 407.690548][T11919] ? __pfx_lock_release+0x10/0x10 [ 407.695739][T11919] ? aa_label_sk_perm+0x4f0/0x6d0 [ 407.701207][T11919] ? taprio_dequeue+0x26/0x550 [ 407.706017][T11919] should_fail_ex+0x3b0/0x4e0 [ 407.710753][T11919] _copy_to_user+0x2f/0xb0 [ 407.715244][T11919] sk_getsockopt+0x2657/0x3890 [ 407.720164][T11919] ? __pfx_sk_getsockopt+0x10/0x10 [ 407.725328][T11919] ? __pfx___might_resched+0x10/0x10 [ 407.730857][T11919] ? __lock_acquire+0x137a/0x2040 [ 407.735962][T11919] ? aa_sk_perm+0x96d/0xab0 [ 407.741055][T11919] ? __pfx_aa_sk_perm+0x10/0x10 [ 407.745969][T11919] ? __pfx_lock_acquire+0x10/0x10 [ 407.751056][T11919] ? aa_sock_opt_perm+0x79/0x120 [ 407.756143][T11919] do_sock_getsockopt+0x270/0x850 [ 407.761465][T11919] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 407.767171][T11919] ? __fget_files+0x3f6/0x470 [ 407.772188][T11919] __sys_getsockopt+0x271/0x330 [ 407.777157][T11919] ? __pfx___sys_getsockopt+0x10/0x10 [ 407.782589][T11919] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 407.789507][T11919] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 407.796188][T11919] ? __irq_exit_rcu+0x100/0x1c0 [ 407.801200][T11919] __x64_sys_getsockopt+0xb5/0xd0 [ 407.806361][T11919] do_syscall_64+0xf3/0x230 [ 407.811025][T11919] ? clear_bhb_loop+0x35/0x90 [ 407.815915][T11919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.821957][T11919] RIP: 0033:0x7f0270f79e79 [ 407.826608][T11919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.846312][T11919] RSP: 002b:00007f0271e1c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 407.855752][T11919] RAX: ffffffffffffffda RBX: 00007f0271115f80 RCX: 00007f0270f79e79 [ 407.865169][T11919] RDX: 0000000000000002 RSI: 0000000000000001 RDI: 0000000000000003 [ 407.873307][T11919] RBP: 00007f0271e1c090 R08: 0000000020002900 R09: 0000000000000000 [ 407.881852][T11919] R10: 0000000020002880 R11: 0000000000000246 R12: 0000000000000001 [ 407.890889][T11919] R13: 0000000000000000 R14: 00007f0271115f80 R15: 00007fff5e84de48 [ 407.898938][T11919] [ 408.130158][T11794] hsr_slave_0: entered promiscuous mode [ 408.174993][T11794] hsr_slave_1: entered promiscuous mode [ 408.185370][T11794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 408.196135][T11794] Cannot create hsr debugfs directory [ 408.213915][T11922] team0: Port device team_slave_1 removed [ 408.227922][T11927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1720'. [ 408.376893][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 408.443559][T11936] wg2: entered promiscuous mode [ 408.458165][T11936] wg2: entered allmulticast mode [ 408.531347][T11944] netlink: 'syz.0.1725': attribute type 2 has an invalid length. [ 408.537095][ T5241] Bluetooth: hci4: command tx timeout [ 408.562692][T11944] netlink: 'syz.0.1725': attribute type 1 has an invalid length. [ 408.606936][T11944] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1725'. [ 408.774413][T11949] bond0: (slave netdevsim0): Releasing backup interface [ 408.825850][T11949] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 408.953509][T11951] pim6reg: entered allmulticast mode [ 409.053367][T11948] pim6reg: left allmulticast mode [ 409.236529][T11959] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1730'. [ 409.361408][T11961] ip6t_REJECT: ECHOREPLY is not supported [ 409.416908][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 409.527519][T11966] netlink: 'syz.4.1731': attribute type 10 has an invalid length. [ 409.570728][T11966] geneve0: entered promiscuous mode [ 409.697669][T11966] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 410.453572][T11794] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 410.461328][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 410.497153][T11794] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 410.515325][T11794] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 410.542380][T11794] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 410.618059][ T5241] Bluetooth: hci4: command 0x0419 tx timeout [ 411.036224][T11794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.247945][T12014] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1744'. [ 411.366276][T12015] ip6t_REJECT: ECHOREPLY is not supported [ 411.497042][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 411.526323][T12021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1746'. [ 411.574359][T11794] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.633324][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.642826][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.759934][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.767919][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.803308][T12024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1748'. [ 411.860152][T12024] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1748'. [ 412.192988][T12040] pim6reg: entered allmulticast mode [ 412.311676][T12040] pim6reg: left allmulticast mode [ 412.536861][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 412.697052][ T5241] Bluetooth: hci4: command 0x0419 tx timeout [ 413.072238][T11794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.416406][T11794] veth0_vlan: entered promiscuous mode [ 413.531304][T11794] veth1_vlan: entered promiscuous mode [ 413.576952][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 413.717314][T12076] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1759'. [ 413.836203][T11794] veth0_macvtap: entered promiscuous mode [ 413.879626][T12076] ip6t_REJECT: ECHOREPLY is not supported [ 413.897233][T11794] veth1_macvtap: entered promiscuous mode [ 414.142392][T11794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.178239][T11794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.216262][T11794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.251668][T11794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.303815][T11794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.346777][T11794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.366712][T11794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.400845][T11794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.466348][T11794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.529348][T11794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.591863][T11794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.616925][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 414.635746][T11794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.670181][T11794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.710663][T11794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.742662][T11794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.773454][T11794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.810096][T11794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.829681][T11794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.846239][T11794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.870581][T11794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.932784][T12095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1763'. [ 414.965022][T12102] pim6reg: entered allmulticast mode [ 414.977697][T12105] netlink: 'syz.4.1766': attribute type 1 has an invalid length. [ 414.994572][T12103] pim6reg: left allmulticast mode [ 415.002743][T12105] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1766'. [ 415.099652][T11794] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.127663][T11794] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.148431][T11794] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.181863][T11794] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.519512][T12111] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1769'. [ 415.647144][T12116] bond0: (slave bond_slave_0): Releasing backup interface [ 415.656806][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 415.755637][ T1120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.788078][ T1120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.841387][T12119] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 415.915135][ T1120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.973775][ T1120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.488594][T12133] netlink: 2096 bytes leftover after parsing attributes in process `syz.0.1775'. [ 416.500839][T12133] netlink: 58 bytes leftover after parsing attributes in process `syz.0.1775'. [ 416.512773][T12133] netlink: 58 bytes leftover after parsing attributes in process `syz.0.1775'. [ 416.696856][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 416.779752][ T2542] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.016013][ T2542] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.209432][ T2542] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.327746][ T2542] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.504441][ T2542] bridge_slave_1: left allmulticast mode [ 417.511081][ T2542] bridge_slave_1: left promiscuous mode [ 417.517567][ T2542] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.530946][ T2542] bridge_slave_0: left allmulticast mode [ 417.537328][ T2542] bridge_slave_0: left promiscuous mode [ 417.543277][ T2542] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.736817][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 418.291631][ T2542] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 418.309008][ T2542] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 418.322128][ T2542] bond0 (unregistering): Released all slaves [ 418.542477][T12147] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 418.777101][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 418.852074][T12157] pim6reg: entered allmulticast mode [ 418.952352][T12149] pim6reg: left allmulticast mode [ 419.479225][ T5237] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 419.491988][ T5237] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 419.503557][ T5237] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 419.528765][ T5237] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 419.540446][ T5237] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 419.549183][T12167] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1783'. [ 419.560307][ T5237] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 419.733228][ T2542] hsr_slave_0: left promiscuous mode [ 419.768830][ T2542] hsr_slave_1: left promiscuous mode [ 419.787863][ T2542] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 419.815582][ T2542] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 419.817815][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 419.860676][ T2542] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 419.898381][ T2542] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 420.033510][ T2542] veth1_macvtap: left promiscuous mode [ 420.057807][ T2542] veth0_macvtap: left promiscuous mode [ 420.097283][ T2542] veth1_vlan: left promiscuous mode [ 420.104427][ T2542] veth0_vlan: left promiscuous mode [ 420.856872][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 421.526725][ T2542] team0 (unregistering): Port device team_slave_1 removed [ 421.658563][ T5237] Bluetooth: hci4: command tx timeout [ 421.749605][ T2542] team0 (unregistering): Port device team_slave_0 removed [ 421.909715][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 422.953614][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 423.090728][T12167] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1783'. [ 423.749815][ T5237] Bluetooth: hci4: command tx timeout [ 423.831593][T12187] x_tables: duplicate underflow at hook 3 [ 423.976919][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 424.343449][T12190] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1788'. [ 424.573110][T12201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1788'. [ 424.941696][T12210] pim6reg: entered allmulticast mode [ 425.016813][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 425.034087][T12216] pim6reg: left allmulticast mode [ 425.167221][T12165] chnl_net:caif_netlink_parms(): no params data found [ 425.445315][T12223] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1797'. [ 425.628106][T12239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1797'. [ 425.818132][ T5237] Bluetooth: hci4: command tx timeout [ 425.942505][T12165] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.981890][T12165] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.037332][T12165] bridge_slave_0: entered allmulticast mode [ 426.056827][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 426.066896][T12165] bridge_slave_0: entered promiscuous mode [ 426.107963][T12165] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.137307][T12165] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.146581][T12165] bridge_slave_1: entered allmulticast mode [ 426.164500][T12165] bridge_slave_1: entered promiscuous mode [ 426.347725][T12250] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1803'. [ 426.790448][T12165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.849627][T12165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.989442][T12246] delete_channel: no stack [ 426.996010][T12250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1803'. [ 427.097019][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 427.111394][T12262] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1805'. [ 427.209459][T12267] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1806'. [ 427.231000][T12269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1805'. [ 427.362593][T12276] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1807'. [ 427.373852][T12271] team0: Device sit1 is of different type [ 427.461454][T12278] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 427.571421][T12165] team0: Port device team_slave_0 added [ 427.618572][T12165] team0: Port device team_slave_1 added [ 427.626783][T12273] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1807'. [ 427.780488][T12279] bond3 (unregistering): Released all slaves [ 427.898580][ T5237] Bluetooth: hci4: command tx timeout [ 428.065845][T12287] pim6reg: entered allmulticast mode [ 428.137233][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 428.161922][T12165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.206959][T12165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.299686][T12165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.359039][T12165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.384323][T12165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.436900][T12165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.583457][T12165] hsr_slave_0: entered promiscuous mode [ 428.597466][T12165] hsr_slave_1: entered promiscuous mode [ 428.616152][T12165] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 428.637306][T12165] Cannot create hsr debugfs directory [ 429.145549][T12312] netlink: 'syz.1.1816': attribute type 2 has an invalid length. [ 429.177117][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 429.890684][T12331] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1819'. [ 429.932834][T12334] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1820'. [ 429.980846][ T5237] Bluetooth: hci4: command tx timeout [ 430.047984][T12337] ip6t_REJECT: ECHOREPLY is not supported [ 430.104980][T12339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1819'. [ 430.217551][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 430.405950][T12165] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 430.472306][T12165] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 430.519364][T12165] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 430.569176][T12165] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 430.601893][T12350] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1824'. [ 430.738982][T12357] netlink: 'syz.1.1827': attribute type 12 has an invalid length. [ 430.776441][T12357] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1827'. [ 431.204385][T12165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.256775][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 431.289734][T12165] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.322504][ T1120] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.329977][ T1120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.409650][ T1120] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.417150][ T1120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.444866][T12382] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1830'. [ 431.469922][T12382] 0·: renamed from hsr_slave_1 (while UP) [ 431.487673][T12382] 0·: entered allmulticast mode [ 431.495148][T12382] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 431.561908][T12385] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1832'. [ 431.638055][T12389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1832'. [ 431.742261][T12384] netlink: 'syz.1.1833': attribute type 10 has an invalid length. [ 432.137584][ T5241] Bluetooth: hci4: command 0x0405 tx timeout [ 432.296986][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 432.401137][T12395] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1835'. [ 432.910182][T12425] IPVS: Error connecting to the multicast addr [ 433.224426][T12435] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1844'. [ 433.336841][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 433.571400][T12165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.785704][T12453] pim6reg: left allmulticast mode [ 434.066171][T12466] ip6t_REJECT: ECHOREPLY is not supported [ 434.193833][T12165] veth0_vlan: entered promiscuous mode [ 434.272236][T12165] veth1_vlan: entered promiscuous mode [ 434.328426][T12471] wg1: entered allmulticast mode [ 434.376926][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 434.482402][T12473] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 434.525548][T12473] 0ªX¹¦Dö»: entered allmulticast mode [ 434.635030][T12165] veth0_macvtap: entered promiscuous mode [ 434.731264][T12165] veth1_macvtap: entered promiscuous mode [ 434.842502][T12165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.871620][T12165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.896491][T12165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.916371][T12165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.928653][T12165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.943283][T12165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.956489][T12165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.971116][T12165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.987420][T12165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.054158][T12487] __nla_validate_parse: 3 callbacks suppressed [ 435.054188][T12487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1857'. [ 435.107476][T12165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.160094][T12165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.191676][T12165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.202724][T12165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.215715][T12165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.228909][T12165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.249486][T12165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.267302][T12165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.285172][T12165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.300468][T12494] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1858'. [ 435.311484][T12165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.333427][T12165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.358359][T12495] ip6t_REJECT: ECHOREPLY is not supported [ 435.409493][T12165] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.418852][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 435.437803][T12165] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.448684][T12165] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.457759][T12165] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.486195][T12492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1859'. [ 435.628260][T12500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1860'. [ 435.863962][ T1120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.896046][ T1120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.979116][ T2542] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.998626][ T2542] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.111581][T12509] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 436.139169][ T5241] Bluetooth: hci4: command 0x0405 tx timeout [ 436.298656][T12511] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1865'. [ 436.371352][T12511] ip6t_REJECT: ECHOREPLY is not supported [ 436.457061][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 436.761142][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.862717][T12516] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1867'. [ 437.108932][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.381163][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.482391][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.496808][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 437.665094][ T11] bridge_slave_1: left allmulticast mode [ 437.673646][ T11] bridge_slave_1: left promiscuous mode [ 437.681347][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.699083][ T11] bridge_slave_0: left allmulticast mode [ 437.707749][ T11] bridge_slave_0: left promiscuous mode [ 437.715391][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.456929][ T5241] Bluetooth: hci3: command 0x1407 tx timeout [ 438.535068][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 438.543892][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 438.598918][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 438.641387][ T11] bond0 (unregistering): Released all slaves [ 438.693023][T12523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1868'. [ 438.789737][T12523] vlan2: entered promiscuous mode [ 439.095754][ T5241] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 439.112852][ T5241] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 439.123076][ T5241] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 439.134782][ T5241] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 439.144774][ T5241] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 439.211668][ T5241] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 439.346501][T12535] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1871'. [ 439.439127][ T11] hsr_slave_0: left promiscuous mode [ 439.456876][ T11] hsr_slave_1: left promiscuous mode [ 439.472472][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.481059][T12537] ip6t_REJECT: ECHOREPLY is not supported [ 439.499902][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.510070][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.519678][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.577181][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 439.588568][ T11] veth1_macvtap: left promiscuous mode [ 439.594447][ T11] veth0_macvtap: left promiscuous mode [ 439.601559][ T11] veth1_vlan: left promiscuous mode [ 439.607815][ T11] veth0_vlan: left promiscuous mode [ 440.490217][ T11] team0 (unregistering): Port device team_slave_1 removed [ 440.561343][ T11] team0 (unregistering): Port device team_slave_0 removed [ 440.625819][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 441.266502][ T5237] Bluetooth: hci4: command tx timeout [ 441.583865][T12542] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1872'. [ 441.656796][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 441.686874][T12546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1874'. [ 441.698519][T12546] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1874'. [ 441.750178][T12547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1874'. [ 441.785900][T12547] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1874'. [ 441.830210][T12546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1874'. [ 441.843674][T12546] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1874'. [ 441.871832][T12546] gtp0: entered promiscuous mode [ 441.877956][T12546] gtp0: entered allmulticast mode [ 442.272660][T12529] chnl_net:caif_netlink_parms(): no params data found [ 442.524646][T12529] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.541498][T12529] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.553696][T12529] bridge_slave_0: entered allmulticast mode [ 442.562161][T12529] bridge_slave_0: entered promiscuous mode [ 442.572934][T12529] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.580399][T12529] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.618776][T12529] bridge_slave_1: entered allmulticast mode [ 442.634966][T12529] bridge_slave_1: entered promiscuous mode [ 442.696790][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 442.791579][T12529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.829476][T12529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.944643][T12529] team0: Port device team_slave_0 added [ 442.972954][T12529] team0: Port device team_slave_1 added [ 443.106081][T12529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.127461][T12529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.172507][T12529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.199527][T12529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.215608][T12529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.252148][T12529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.337052][ T5237] Bluetooth: hci4: command 0x041b tx timeout [ 443.435855][T12529] hsr_slave_0: entered promiscuous mode [ 443.466221][T12529] hsr_slave_1: entered promiscuous mode [ 443.490635][T12529] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 443.518261][T12529] Cannot create hsr debugfs directory [ 443.556039][T12588] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1888'. [ 443.736790][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 444.533247][T12529] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 444.581470][T12529] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 444.622107][T12529] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 444.761142][T12529] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 444.776864][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 445.097021][T12621] tipc: Cannot configure node identity twice [ 445.156099][T12529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.315593][T12529] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.381478][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.389571][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.427084][ T5241] Bluetooth: hci4: command 0x041b tx timeout [ 445.488576][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.496292][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.770642][T12529] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 445.816896][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 445.943250][T12636] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1907'. [ 445.967893][T12635] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1907'. [ 445.993790][T12638] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 446.235990][ T5237] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 446.292421][ T5237] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 446.308540][ T5237] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 446.349134][ T5237] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 446.378112][ T5237] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 446.390575][ T5237] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 446.725701][T12529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 446.769374][ T5237] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 446.788222][ T5237] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 446.829339][ T5237] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 446.856944][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 446.877202][ T5237] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 446.889232][ T5237] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 446.899686][ T5237] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 447.438587][T12529] veth0_vlan: entered promiscuous mode [ 447.497544][ T5237] Bluetooth: hci4: command 0x041b tx timeout [ 447.548498][T12641] chnl_net:caif_netlink_parms(): no params data found [ 447.619898][T12672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1919'. [ 447.720752][T12674] syzkaller0: entered allmulticast mode [ 447.730068][T12529] veth1_vlan: entered promiscuous mode [ 447.837080][T12671] bond0: (slave wlan1): Releasing backup interface [ 447.881567][T12677] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1920'. [ 447.897133][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 448.071711][T12669] syzkaller0: left allmulticast mode [ 448.198695][T12641] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.227353][T12641] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.234742][T12641] bridge_slave_0: entered allmulticast mode [ 448.256055][T12641] bridge_slave_0: entered promiscuous mode [ 448.308135][T12641] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.315429][T12641] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.343547][T12641] bridge_slave_1: entered allmulticast mode [ 448.361280][T12641] bridge_slave_1: entered promiscuous mode [ 448.372776][T12653] chnl_net:caif_netlink_parms(): no params data found [ 448.408904][T12685] tipc: MTU too low for tipc bearer [ 448.457262][ T5237] Bluetooth: hci5: command tx timeout [ 448.509193][T12689] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 448.543671][T12529] veth0_macvtap: entered promiscuous mode [ 448.565112][T12529] veth1_macvtap: entered promiscuous mode [ 448.583109][T12641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.621927][T12641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.815391][T12641] team0: Port device team_slave_0 added [ 448.912688][T12641] team0: Port device team_slave_1 added [ 448.936942][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 448.944295][ T5237] Bluetooth: hci6: command tx timeout [ 448.989217][T12653] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.017447][T12653] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.029427][T12653] bridge_slave_0: entered allmulticast mode [ 449.040448][T12653] bridge_slave_0: entered promiscuous mode [ 449.053501][T12653] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.062427][T12653] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.074066][T12653] bridge_slave_1: entered allmulticast mode [ 449.087472][T12653] bridge_slave_1: entered promiscuous mode [ 449.143533][T12529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.166967][T12529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.206864][T12529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.239768][T12529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.266866][T12529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.286436][T12529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.298172][T12529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.309656][T12529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.322933][T12529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 449.461883][T12529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 449.479149][T12529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.489961][T12529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 449.503711][T12529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.514794][T12529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 449.527362][T12529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.537804][T12529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 449.554375][T12529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.564621][T12529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 449.575600][T12529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.588739][ T5237] Bluetooth: hci4: command 0x041b tx timeout [ 449.598709][T12529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 449.624246][T12641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.646842][T12641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.675800][T12641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.694664][T12653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.709031][T12707] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 449.716429][T12707] IPv6: NLM_F_CREATE should be set when creating new route [ 449.723987][T12707] IPv6: NLM_F_CREATE should be set when creating new route [ 449.736236][T12641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.756985][T12641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.797492][T12641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.814849][T12653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.871107][T12529] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.905766][T12529] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.937146][T12529] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.946205][T12529] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.976795][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 450.135182][T12653] team0: Port device team_slave_0 added [ 450.153129][T12653] team0: Port device team_slave_1 added [ 450.240713][T12641] hsr_slave_0: entered promiscuous mode [ 450.264149][T12641] hsr_slave_1: entered promiscuous mode [ 450.280258][T12641] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 450.296741][T12641] Cannot create hsr debugfs directory [ 450.431733][T12653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 450.442118][T12653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.484497][T12653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 450.507829][T12722] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1938'. [ 450.520374][T12722] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.538318][ T5237] Bluetooth: hci5: command tx timeout [ 450.675211][T12653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 450.688063][T12653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.777247][T12653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.016774][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 451.029877][ T5237] Bluetooth: hci6: command tx timeout [ 451.204949][T12653] hsr_slave_0: entered promiscuous mode [ 451.235579][T12653] hsr_slave_1: entered promiscuous mode [ 451.254539][T12653] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 451.274018][T12653] Cannot create hsr debugfs directory [ 451.329822][T12731] netlink: 'syz.2.1941': attribute type 6 has an invalid length. [ 451.395710][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.423921][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.818108][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.826105][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.991894][T12641] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.056807][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 452.327463][T12641] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.564949][T12641] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.617415][ T5237] Bluetooth: hci5: command tx timeout [ 452.865987][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.984321][T12641] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.086826][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.097996][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 453.108076][ T5237] Bluetooth: hci6: command tx timeout [ 453.221204][T12653] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.233546][T12653] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.274645][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.349764][T12653] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.371496][T12653] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.407184][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.499081][T12653] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.510073][T12653] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.623069][T12653] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.635150][T12653] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.669769][ T11] bridge_slave_1: left allmulticast mode [ 453.675567][ T11] bridge_slave_1: left promiscuous mode [ 453.681787][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.691906][ T11] bridge_slave_0: left allmulticast mode [ 453.704008][ T11] bridge_slave_0: left promiscuous mode [ 453.709968][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.144006][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 454.268714][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 454.293304][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 454.310712][ T11] bond0 (unregistering): Released all slaves [ 454.589640][T12641] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 454.624027][T12641] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 454.697412][ T5237] Bluetooth: hci5: command tx timeout [ 454.853777][T12641] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 454.901311][T12641] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 455.005493][ T11] hsr_slave_0: left promiscuous mode [ 455.012399][ T11] hsr_slave_1: left promiscuous mode [ 455.029351][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 455.046828][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 455.065416][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 455.082181][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 455.161855][ T11] veth1_macvtap: left promiscuous mode [ 455.176800][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 455.177580][ T5237] Bluetooth: hci6: command tx timeout [ 455.185037][ T11] veth0_macvtap: left promiscuous mode [ 455.185255][ T11] veth1_vlan: left promiscuous mode [ 455.238285][ T11] veth0_vlan: left promiscuous mode [ 455.266405][ T5241] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 455.288066][ T5241] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 455.307493][ T5241] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 455.316272][ T5241] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 455.338933][ T5241] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 455.347948][ T5241] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 456.209524][ T11] team0 (unregistering): Port device team_slave_1 removed [ 456.217286][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 456.279254][ T11] team0 (unregistering): Port device team_slave_0 removed [ 456.921806][T12769] syz_tun: entered promiscuous mode [ 456.929902][T12769] syz_tun: left promiscuous mode [ 457.079478][T12653] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 457.137727][T12653] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 457.151261][T12653] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 457.224344][T12653] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 457.256813][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 457.423106][ T5241] Bluetooth: hci4: command tx timeout [ 457.700210][T12790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1964'. [ 457.875187][T12641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.038463][T12641] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.064498][T12772] chnl_net:caif_netlink_parms(): no params data found [ 458.111036][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.118616][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.183847][T12653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.211597][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.218891][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 458.296789][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 458.490022][T12772] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.518692][T12772] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.536408][T12772] bridge_slave_0: entered allmulticast mode [ 458.552933][T12772] bridge_slave_0: entered promiscuous mode [ 458.588474][T12772] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.595655][T12772] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.617148][T12772] bridge_slave_1: entered allmulticast mode [ 458.629403][T12772] bridge_slave_1: entered promiscuous mode [ 458.648126][T12653] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.815363][T12772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.848826][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.856025][ T1113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.903610][T12772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.022225][T12772] team0: Port device team_slave_0 added [ 459.082717][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.089997][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.129774][T12772] team0: Port device team_slave_1 added [ 459.245148][T12772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.271693][T12772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.314999][T12772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.334769][T12772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.336825][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 459.344364][T12772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.384960][T12772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.497421][ T5241] Bluetooth: hci4: command tx timeout [ 459.567265][T12772] hsr_slave_0: entered promiscuous mode [ 459.595085][T12772] hsr_slave_1: entered promiscuous mode [ 459.606295][T12772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 459.615805][T12772] Cannot create hsr debugfs directory [ 459.716245][T12820] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1975'. [ 459.855551][T12820] bond1: entered promiscuous mode [ 459.931411][T12821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1975'. [ 459.949258][T12821] bond1: left promiscuous mode [ 459.955212][T12821] 8021q: adding VLAN 0 to HW filter on device bond1 [ 460.376886][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 460.451994][T12641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.459724][T12836] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1980'. [ 461.237160][T12772] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 461.268583][T12772] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 461.309117][T12772] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 461.351096][T12772] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 461.417107][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 461.453233][T12653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 461.580338][ T5241] Bluetooth: hci4: command tx timeout [ 461.744126][T12641] veth0_vlan: entered promiscuous mode [ 461.789094][T12653] veth0_vlan: entered promiscuous mode [ 461.822564][T12641] veth1_vlan: entered promiscuous mode [ 461.944083][T12653] veth1_vlan: entered promiscuous mode [ 462.130017][T12772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.171634][T12641] veth0_macvtap: entered promiscuous mode [ 462.213595][T12641] veth1_macvtap: entered promiscuous mode [ 462.275686][T12772] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.338395][T12653] veth0_macvtap: entered promiscuous mode [ 462.370797][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.378019][ T1113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.431861][T12653] veth1_macvtap: entered promiscuous mode [ 462.441454][T12879] syz.2.1996[12879] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 462.441726][T12879] syz.2.1996[12879] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 462.456767][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 462.514222][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.522710][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.570659][T12641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.606961][T12641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.639072][T12641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.662565][T12641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.676400][T12641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.699931][T12641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.742965][T12641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.767640][T12641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.789347][T12641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 462.813408][T12641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.835586][T12641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.857373][T12641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.877837][T12641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.896858][T12641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.918636][T12641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.928982][T12641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.954036][T12641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.965647][T12641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.976421][T12641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.992145][T12641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.052702][T12641] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.084085][T12641] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.105426][T12641] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.115026][T12641] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.150475][T12653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.183619][T12653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.207853][T12653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.235777][T12653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.257184][T12653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.276759][T12653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.298780][T12653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.313128][T12653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.334463][T12653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.350364][T12653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.374921][T12653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.395892][T12891] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000f8: 0000 [#1] PREEMPT SMP KASAN PTI [ 463.408731][T12891] KASAN: null-ptr-deref in range [0x00000000000007c0-0x00000000000007c7] [ 463.417273][T12891] CPU: 1 UID: 0 PID: 12891 Comm: syz.0.2001 Not tainted 6.11.0-rc4-syzkaller-00566-g7d3aed652d09 #0 [ 463.428168][T12891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 463.438262][T12891] RIP: 0010:phy_start_cable_test_tdr+0x3a/0x5c0 [ 463.444566][T12891] Code: ec 38 48 89 54 24 18 49 89 f6 48 89 fb 49 bd 00 00 00 00 00 fc ff df e8 74 26 2b fb 48 8d bb c0 07 00 00 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 05 e8 2a 68 92 fb 48 8b 83 c0 07 00 00 48 89 44 [ 463.464209][T12891] RSP: 0018:ffffc900095bf230 EFLAGS: 00010202 [ 463.470297][T12891] RAX: 00000000000000f8 RBX: 0000000000000000 RCX: 0000000000040000 [ 463.478452][T12891] RDX: ffffc90004e99000 RSI: 0000000000000adc RDI: 00000000000007c0 [ 463.486531][T12891] RBP: ffffc900095bf470 R08: ffffffff89cb108d R09: 1ffff1100db13c15 [ 463.494531][T12891] R10: dffffc0000000000 R11: ffffffff866864a0 R12: ffffc900095bf3f0 [ 463.502531][T12891] R13: dffffc0000000000 R14: ffffc900095bf740 R15: 0000000000000000 [ 463.510520][T12891] FS: 00007fb9215ff6c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 463.519463][T12891] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 463.526084][T12891] CR2: 0000000020001ac0 CR3: 0000000062a3e000 CR4: 00000000003506f0 [ 463.534172][T12891] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 463.542168][T12891] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 463.550173][T12891] Call Trace: [ 463.553470][T12891] [ 463.556502][T12891] ? __die_body+0x88/0xe0 [ 463.560865][T12891] ? die_addr+0x108/0x140 [ 463.565220][T12891] ? exc_general_protection+0x3dd/0x5d0 [ 463.570976][T12891] ? netdev_get_by_index+0x7a/0xb0 [ 463.576289][T12891] ? asm_exc_general_protection+0x26/0x30 [ 463.582029][T12891] ? __pfx_phy_start_cable_test_tdr+0x10/0x10 [ 463.588113][T12891] ? ethnl_act_cable_test_tdr+0x5ad/0x10d0 [ 463.593937][T12891] ? phy_start_cable_test_tdr+0x3a/0x5c0 [ 463.599595][T12891] ? ethnl_ops_begin+0x1ae/0x1f0 [ 463.604565][T12891] ? __pfx_phy_start_cable_test_tdr+0x10/0x10 [ 463.610650][T12891] ethnl_act_cable_test_tdr+0x607/0x10d0 [ 463.616312][T12891] ? __pfx_ethnl_act_cable_test_tdr+0x10/0x10 [ 463.622395][T12891] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 463.628801][T12891] ? __nla_parse+0x40/0x60 [ 463.633238][T12891] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 463.639591][T12891] genl_rcv_msg+0xb14/0xec0 [ 463.644121][T12891] ? mark_lock+0x9a/0x350 [ 463.648479][T12891] ? __pfx_genl_rcv_msg+0x10/0x10 [ 463.653625][T12891] ? __pfx_lock_acquire+0x10/0x10 [ 463.658695][T12891] ? __pfx_ethnl_act_cable_test_tdr+0x10/0x10 [ 463.664794][T12891] ? __pfx___might_resched+0x10/0x10 [ 463.670119][T12891] netlink_rcv_skb+0x1e3/0x430 [ 463.674993][T12891] ? __pfx_genl_rcv_msg+0x10/0x10 [ 463.680036][T12891] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 463.685342][T12891] ? __netlink_deliver_tap+0x77e/0x7c0 [ 463.690822][T12891] genl_rcv+0x28/0x40 [ 463.694828][T12891] netlink_unicast+0x7f6/0x990 [ 463.699624][T12891] ? __pfx_netlink_unicast+0x10/0x10 [ 463.704933][T12891] ? __virt_addr_valid+0x183/0x530 [ 463.710058][T12891] ? __check_object_size+0x49c/0x900 [ 463.715359][T12891] ? bpf_lsm_netlink_send+0x9/0x10 [ 463.720526][T12891] netlink_sendmsg+0x8e4/0xcb0 [ 463.725314][T12891] ? __pfx_netlink_sendmsg+0x10/0x10 [ 463.730610][T12891] ? __import_iovec+0x536/0x820 [ 463.735480][T12891] ? aa_sock_msg_perm+0x91/0x160 [ 463.740612][T12891] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 463.745913][T12891] ? security_socket_sendmsg+0x87/0xb0 [ 463.751515][T12891] ? __pfx_netlink_sendmsg+0x10/0x10 [ 463.756844][T12891] __sock_sendmsg+0x221/0x270 [ 463.761546][T12891] ____sys_sendmsg+0x525/0x7d0 [ 463.766348][T12891] ? __pfx_____sys_sendmsg+0x10/0x10 [ 463.771695][T12891] __sys_sendmsg+0x2b0/0x3a0 [ 463.776374][T12891] ? __pfx___sys_sendmsg+0x10/0x10 [ 463.781676][T12891] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 463.787642][T12891] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 463.794079][T12891] ? do_syscall_64+0x100/0x230 [ 463.798947][T12891] ? do_syscall_64+0xb6/0x230 [ 463.803669][T12891] do_syscall_64+0xf3/0x230 [ 463.808191][T12891] ? clear_bhb_loop+0x35/0x90 [ 463.813019][T12891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.819042][T12891] RIP: 0033:0x7fb921b79e79 [ 463.823511][T12891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 463.843238][T12891] RSP: 002b:00007fb9215ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 463.851862][T12891] RAX: ffffffffffffffda RBX: 00007fb921d15f80 RCX: 00007fb921b79e79 [ 463.859866][T12891] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000005 [ 463.867859][T12891] RBP: 00007fb921be793e R08: 0000000000000000 R09: 0000000000000000 [ 463.875836][T12891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 463.883848][T12891] R13: 0000000000000000 R14: 00007fb921d15f80 R15: 00007ffff4645fe8 [ 463.891930][T12891] [ 463.894958][T12891] Modules linked in: [ 463.900069][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 463.907893][ T5241] Bluetooth: hci4: command tx timeout [ 463.916939][T12891] ---[ end trace 0000000000000000 ]--- [ 463.926643][T12891] RIP: 0010:phy_start_cable_test_tdr+0x3a/0x5c0 [ 463.986693][T12891] Code: ec 38 48 89 54 24 18 49 89 f6 48 89 fb 49 bd 00 00 00 00 00 fc ff df e8 74 26 2b fb 48 8d bb c0 07 00 00 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 05 e8 2a 68 92 fb 48 8b 83 c0 07 00 00 48 89 44 [ 464.015894][T12891] RSP: 0018:ffffc900095bf230 EFLAGS: 00010202 [ 464.024089][T12891] RAX: 00000000000000f8 RBX: 0000000000000000 RCX: 0000000000040000 [ 464.039388][T12891] RDX: ffffc90004e99000 RSI: 0000000000000adc RDI: 00000000000007c0 [ 464.050185][T12891] RBP: ffffc900095bf470 R08: ffffffff89cb108d R09: 1ffff1100db13c15 [ 464.060392][T12891] R10: dffffc0000000000 R11: ffffffff866864a0 R12: ffffc900095bf3f0 [ 464.068619][T12891] R13: dffffc0000000000 R14: ffffc900095bf740 R15: 0000000000000000 [ 464.077238][T12891] FS: 00007fb9215ff6c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 464.086400][T12891] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 464.093413][T12891] CR2: 00007fffbe8dbf88 CR3: 0000000062a3e000 CR4: 00000000003506f0 [ 464.101782][T12891] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 464.109882][T12891] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 464.118075][T12891] Kernel panic - not syncing: Fatal exception [ 464.124294][T12891] Kernel Offset: disabled [ 464.128686][T12891] Rebooting in 86400 seconds..