last executing test programs: 1m24.484788789s ago: executing program 2 (id=293): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x90) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f0000000300)}, 0x20) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x3a, 0x0, @empty, @empty}, {0x8100, 0x0, 0x8}}}}}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x22, &(0x7f0000000000)=r5, 0x10) bind$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB="000005004c3dbdfd92498f8b6f207cfbb8c9aaaaaaaaaa002660aa7d8138aaaaaa5eb4a605dec5a1778800000000cf33"]) 1m8.450965701s ago: executing program 2 (id=293): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x90) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f0000000300)}, 0x20) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x3a, 0x0, @empty, @empty}, {0x8100, 0x0, 0x8}}}}}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x22, &(0x7f0000000000)=r5, 0x10) bind$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB="000005004c3dbdfd92498f8b6f207cfbb8c9aaaaaaaaaa002660aa7d8138aaaaaa5eb4a605dec5a1778800000000cf33"]) 55.73592136s ago: executing program 2 (id=293): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x90) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f0000000300)}, 0x20) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x3a, 0x0, @empty, @empty}, {0x8100, 0x0, 0x8}}}}}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x22, &(0x7f0000000000)=r5, 0x10) bind$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB="000005004c3dbdfd92498f8b6f207cfbb8c9aaaaaaaaaa002660aa7d8138aaaaaa5eb4a605dec5a1778800000000cf33"]) 39.861126848s ago: executing program 2 (id=293): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x90) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f0000000300)}, 0x20) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x3a, 0x0, @empty, @empty}, {0x8100, 0x0, 0x8}}}}}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x22, &(0x7f0000000000)=r5, 0x10) bind$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB="000005004c3dbdfd92498f8b6f207cfbb8c9aaaaaaaaaa002660aa7d8138aaaaaa5eb4a605dec5a1778800000000cf33"]) 25.144185197s ago: executing program 2 (id=293): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x90) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f0000000300)}, 0x20) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x3a, 0x0, @empty, @empty}, {0x8100, 0x0, 0x8}}}}}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x22, &(0x7f0000000000)=r5, 0x10) bind$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB="000005004c3dbdfd92498f8b6f207cfbb8c9aaaaaaaaaa002660aa7d8138aaaaaa5eb4a605dec5a1778800000000cf33"]) 9.355730747s ago: executing program 2 (id=293): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x90) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f0000000300)}, 0x20) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x3a, 0x0, @empty, @empty}, {0x8100, 0x0, 0x8}}}}}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x22, &(0x7f0000000000)=r5, 0x10) bind$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB="000005004c3dbdfd92498f8b6f207cfbb8c9aaaaaaaaaa002660aa7d8138aaaaaa5eb4a605dec5a1778800000000cf33"]) 3.251012505s ago: executing program 0 (id=1534): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x101842, 0x0) write$binfmt_script(r1, &(0x7f00000001c0), 0x6a) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x64, &(0x7f0000000340)=[@in6={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, @in6={0xa, 0x4e22, 0x8, @remote, 0x7}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e20, 0x7, @private2, 0x8001}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000400)={r2, @in6={{0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, 0x81}}, 0x2, 0x40}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) close(0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000000200)={'wlan1\x00', @random="ffffff8d00"}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x5, 0x5, 0xc}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 3.006203484s ago: executing program 4 (id=1538): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000640)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010002000000000000001500000020002b8005000200000000000c0005000200000000000000080001000300000008002a00040000000c0006000100000001000000"], 0x48}, 0x1, 0x0, 0x0, 0x404c401}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) socketpair(0x9, 0x3, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000040)={0x80}, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00000000c0), 0x1) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x3}, 0x48) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000240)={@initdev, @remote, 0x0}, &(0x7f00000004c0)=0xc) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x800, 0x0, r4, 0x6, '\x00', r5, r6, 0x5, 0x0, 0x2}, 0x48) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f00000001c0)=0xa, &(0x7f0000000200)=0x4) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f00000002c0)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x9, 0x7, 0x2, 0x7, 0x7ff, 0x5}, {0x5bf, 0x4, 0x7, 0x6, 0x0, 0x4}], ['\x00', '\x00', '\x00']}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000080), &(0x7f0000000100)=0x8) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r8}, 0x10) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x11, &(0x7f0000000100)=ANY=[@ANYRES16=r7], 0x0, 0x4}, 0x90) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000100)={'batadv_slave_0\x00', &(0x7f0000000b40)=@ethtool_gstrings={0x1b, 0x7}}) write$binfmt_misc(r9, &(0x7f00000006c0)={'syz1', "97b17d5aec01eb6dad7b7b68658f09"}, 0x13) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000300d39659560817a44612d34d3a8f436ff1c0a600a23f5070c95511ee39f90c2f13c235a0fad95c1755e476136b030000003c010f4dd61aa4e0a51b6583b9113897853929bb15325f45733edaad1b2d375c3a1a771a796d94c953c476c528ed305ed61beaa3ba820c1e7e23a00b11398f47e0974134d429f3d5719652d2728571c2dd96c9aaa5aff222c815a8836961f1c0fd500ca987840919c4cf12ff85506f4fe34e4def20737700fd90", @ANYRES32=r13, @ANYBLOB], 0x40}, 0x1, 0xd}, 0x0) sendmsg$NFT_MSG_GETGEN(r3, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x10, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 2.9078298s ago: executing program 0 (id=1539): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket(0x18, 0x0, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0xa0179e12}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000100)) ppoll(&(0x7f00000001c0)=[{r3}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0) socket$inet6(0xa, 0xa, 0x9520) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(chacha20-neon,sha256-arm64-neon)\x00'}, 0x58) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) openat$cgroup_ro(r1, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000100)={@loopback={0x0, 0x7ffffffff000}, 0x800, 0x0, 0x2000000000903, 0x0, 0x6, 0xa4}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x10001, 0x109, 0x1300, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x48) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000951000"/24], &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r5}, 0x90) socket$key(0xf, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xb) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="f4010010", @ANYRES16=0x0, @ANYBLOB="020025bd7000fcdbdf2501000000340008801c00078008000500cc2f5b3608000600e400000008000600330000001400078008000600df00000008000600cb000000080002000300000044000c8034000b8008000900f0c33a2808000a004e6b000008000900cea0ad4d08000900d85e2a7808000900956134730800090080a808700c000b8008000a00050000001401088014000780080006009400000008000500fafa4f141c0007800800060048000000080006007d00000008000600860000001400078008000500f6ea09070800050060fde2593c00078008000600ba000000080006005a00000008000600f800000008000500c63fb833080005008fbc7c1a08000600b900000008000600940000001c00078008000600e900000008000600b30000000800050013ecee780c00078008000600b800000044000780080005002cd2ce4308000500b6d87e72080005006957251408000500237e2f7a08000500a05642170800060002000000080005005ec9713c0800050035012c4c2400078008000600db00000008000600fb0000000800060052000000080006002a0000004c000480050003000000000005000300020000000500030000000000050003000100000005000300060000000500030002000000050003000100000005000300000000000500030005000000"], 0x1f4}, 0x1, 0x0, 0x0, 0x40}, 0xbc) 2.622493056s ago: executing program 4 (id=1542): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x6000, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4080}, 0x40040) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000630123000000000095000000000000004c119d33df1b60e4ced6b2d13be469531275db8d0cc6c9e9f7d3156115bc2c5de1682084ded5001b82375c1e5349abff8fff45cd056663e59817b6629cec3272bec11fa2fb358f1ae3b120b5677e3bd94c0883f5b57577ad08daae4be68a612cf2e572fb3a4c4af727597426affa83a7df4e6c7984b66f24d86f7f473c0b385ac97276778ba755720e1f8eb3bc0c7d26"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000011540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) readv(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18060000ff000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000007a000000b70000000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}, 0x1, 0x0, 0x0, 0x408a0}, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, &(0x7f0000000180)=0x10) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8429000b4e230f00000000a2bc5603ca00000f7f89004e002050da742dac0000000101ff05020003000200000000000100000000005839", 0x48}], 0x1) 2.532850173s ago: executing program 0 (id=1543): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) (async) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x2b, 0x80801, 0x1) connect$inet6(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r2}, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x20040005) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000017000/0x4000)=nil, 0x4000, 0x0, 0x28011, r4, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) (async) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) sendmmsg(r5, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)="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", 0x4c2}, {&(0x7f0000001a80)="5d14b670e7ae7db18f130582cd1309639c929b514631d72fdb6f5131e71c1135376ce7b8d67de2e895315ab0a110b7de5fd4e048ebe8410e67f56b8678a0e2f8b4347c55052b848a28ea64f0768e54b9d54e8598b9ec3ccfc23639b5b753f9f836ef18898db1c8ab551e9407efe21ae238ac25ad939fa31c1e14cfde828adbaa47f249663d02a13497a17d4b57f57d664fdb9f919239563419475a3cc42f19542298eed972018889a896921786e3c2bd45b0ad04563f6cfb20d8258715c326", 0xfffffed6}], 0x2}}], 0x1, 0x14) write$binfmt_misc(r5, &(0x7f0000000280)=ANY=[], 0xbf) close(r0) socket$netlink(0x10, 0x3, 0xa) (async) r6 = socket$netlink(0x10, 0x3, 0xa) bind$bt_hci(r6, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r6, @ANYRESOCT=r7], 0x108}}, 0x40448c0) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000100)={'gretap0\x00', @local}) (async) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000100)={'gretap0\x00', @local}) 2.176317795s ago: executing program 0 (id=1548): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/32, 0x20}], 0x1, 0x0, 0xffffffffffffffff}}], 0x48}, 0x0) (async, rerun: 32) mmap(&(0x7f000024e000/0x4000)=nil, 0x4000, 0x2000005, 0x13, r0, 0x4ba85000) (rerun: 32) 1.628937724s ago: executing program 1 (id=1553): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000400), r1) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$pppl2tp(r4, &(0x7f0000000a00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x26) sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r3, 0x303}, 0x14}}, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, r3, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4000041) r5 = socket$inet6(0xa, 0x3, 0x2c) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001640)=@raw={'raw\x00', 0x3c1, 0x3, 0x468, 0x170, 0x1170, 0x1170, 0x170, 0x1170, 0x398, 0x1398, 0x1398, 0x398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x84, 0x0, 0x0, 0x10}, 0x0, 0x128, 0x170, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e20]}}, @common=@unspec=@connmark={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @remote, @private2, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, @mcast1, @empty, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c8) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_percpu\x00', 0x0, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r7, 0x20, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x4}}]}, 0x40}, 0x1, 0x0, 0x0, 0x880}, 0x4000400) 1.418342188s ago: executing program 1 (id=1555): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=@bridge_dellink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x5, 0x0, 0x1, {0x14, 0x4, 0x0, 0x1, [{0x8, 0x2}, {0x8, 0x1}]}}]}]}, 0x3c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001440)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="4e626e7cf817f1c0f619c126176daadb2663edabbe68f16f0eced877f100e1852a6beac2f39f4ec81e567aaa1c32ce5c293e000085f66bac388c4a5f06333c4fc14b3a898181446f05f987fa8de8f4b7d275cb03"], 0x184}}, 0x0) sendmmsg$inet(r0, &(0x7f0000004c00)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev, @multicast2}}}], 0x20}}], 0x1, 0x48040) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x0, @multicast2}}, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0) sendmmsg$inet(r1, &(0x7f0000000900)=[{{&(0x7f0000000480)={0x2, 0x4e21, @private=0xa010102}, 0x10, &(0x7f0000000780)=[{&(0x7f00000004c0)="66226cd88b03e483c06af0080d22722dbf6e703ae7139d4664dd8fccca46323669197114c51518ffd942ace6f6c442f1e6a675250e6f9bf27e83f05b94a1caf578956e6db8554d95fcc0fb7f8fbd9849d9f4dcfad045d3b3ffe7b6e2b03b44a740522f040b7db538a0d0662ddef7f3c30f5d86eeb4d2b62d9efe0ad1f3ae74fdaef2cf0d27d03c0cd58a4d9f0761113298b9d1d727af91c5afdc6835", 0x9c}, {&(0x7f0000000580)="8fbc16305373dca7fb64744fc3caaaa6943662feef22614e1ae9b6fcadd2c83c41fda8092bdd88c074fd7fd1f09ac208ed3157e3601a1646a62994b330050301890c9b22ffe2386fccd09211f9d448857bc50336567f41e83453130704c138faebc83719749cf8a6c88620459fee66e123e1af26b12b3fa319420ab2a66a", 0x7e}, {&(0x7f0000000600)="f1768a1be23b59c79380377ab52b153f0cef279e58ad4ec7c6e82fc5c172375f2d8b72d0ba31edcc2efa94d1113a29ffd9b1ffd765b82e4140f792a624be28d3471e28a5feeb0704e8e8b5aef6be75e5ef0487a71b0a204178c93fd81f8d9259891218ba93547f82e7fce06a4257d31275ef73d223e9dfd67d96b3a3e901e81dc7baa91bfb8356ae6a4f8a61faf2a3c8ec3e8990572a0cb6b13f25a16c997f6b47aa408e4a8aec7724824ec2bf8e98968538c276e80b91c6f2fd6540626c9fccec51b6bad861", 0xc6}, {&(0x7f0000000700)="08227dca1011f97bd034fbde685fa17700a70e7a9b8ab01f217f40b07ed3ea73388198b1e9de", 0x26}, {0x0}], 0x5, &(0x7f0000000800)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @broadcast}}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x80}}], 0x1, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000)={0x175, 0x2, 0x6, 0x8100, 0x1ff}) ioctl$BTRFS_IOC_QGROUP_LIMIT(r5, 0x8030942b, &(0x7f0000000040)={0xfffffffffffffffc, {0x22, 0x0, 0xffffffffffff2463, 0x3a, 0x7fff}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f0000000080)={0x0, 0x1, 0x30, 0x1}) ioctl$BTRFS_IOC_DEV_REPLACE(r5, 0xca289435, &(0x7f0000000480)={0x1, 0xfffffffffffffff8, @start={r6, 0x1, "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", "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"}, [0x7, 0x8000000000000001, 0x0, 0x1, 0x340, 0x3f, 0x400, 0x8, 0x7f, 0x4, 0x7, 0x5, 0x1, 0x3d6c, 0x200, 0x7f, 0x80000000, 0xb2, 0x7, 0x1000, 0x0, 0x7, 0x7, 0x8000000000000000, 0x75, 0x8, 0x1000, 0x3, 0x80, 0x3f, 0xffffffffff000000, 0xcebe, 0x661, 0x0, 0x0, 0xafb, 0x0, 0x9, 0x1, 0x5, 0x101, 0x7, 0x8, 0x5, 0x1, 0x4, 0x40, 0x7, 0x4, 0x8, 0x5, 0x5, 0xfff, 0x4, 0x7, 0x8, 0x20a7, 0x8, 0x4, 0x8000000000000001, 0xd95e, 0x8, 0xd2]}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000ec0)={0x0, 0x3, 0x3, [0x401, 0x80, 0x3f]}, &(0x7f0000000f00)=0xe) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000001080)={0x0, @in6={{0xa, 0x4e20, 0x5, @private1, 0x7fff}}, 0x2, 0x6, 0x1, 0x7, 0x1, 0xffffffff, 0x9}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000001140)={r7, @in6={{0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}, 0x5, 0x8, 0x6, 0x0, 0x0, 0x29fe1564, 0xfa}, 0x9c) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000001200), &(0x7f0000001240)=0x14) getsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000001280), &(0x7f00000012c0)=0x4) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001300)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000001340)={r7, 0x80000001}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380), &(0x7f00000013c0)=0xc) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000f40)=ANY=[@ANYBLOB="1800006bde430200000000000000618c370000400000000081ff33367af6ab18d2b87469"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r11}, 0x90) setsockopt$inet_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000001400), 0x4) 1.163798489s ago: executing program 4 (id=1557): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x2000000000000237, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000964a220000000000001c1966797b4021ea89c5853181d95e0b7d9b187f000000ae000085000000a05d5a76cb0095cba727abbe21ac7539bab7ef72bdbe80946421a6d953b97895e3337d8a9fa6d5381c02c09ae1a44417f108217c3c4e6eb6bf6620572e5428afcace1e9a6da085da4d84509055a7d83e9d62c8372200f68c0ac70f03c20a594aed1717a8d38f83cda88ae3f947ce650ccbc4be68d8c8edcfecff"], &(0x7f00000004c0)='GPL\x00', 0x7fffffff, 0x0, 0x0, 0x0, 0x4}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x2000000000000237, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000964a220000000000001c1966797b4021ea89c5853181d95e0b7d9b187f000000ae000085000000a05d5a76cb0095cba727abbe21ac7539bab7ef72bdbe80946421a6d953b97895e3337d8a9fa6d5381c02c09ae1a44417f108217c3c4e6eb6bf6620572e5428afcace1e9a6da085da4d84509055a7d83e9d62c8372200f68c0ac70f03c20a594aed1717a8d38f83cda88ae3f947ce650ccbc4be68d8c8edcfecff"], &(0x7f00000004c0)='GPL\x00', 0x7fffffff, 0x0, 0x0, 0x0, 0x4}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpu.stat\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000480), 0x208e26e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000040)=ANY=[@ANYBLOB="50000000020601030000000000000000000000000900020073797a320000000005000400000000000500010007000000050005000200000015000300686173683a69702c706f7274006e65176d7521c7"], 0x50}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000040)=ANY=[@ANYBLOB="50000000020601030000000000000000000000000900020073797a320000000005000400000000000500010007000000050005000200000015000300686173683a69702c706f7274006e65176d7521c7"], 0x50}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x800, @empty}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x68, r5, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @media='udp\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x20004000}, 0xd005) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r5, 0x10, 0x70bd2c, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80004}, 0x8) (async) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r5, 0x10, 0x70bd2c, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80004}, 0x8) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x76, &(0x7f0000001f00)=""/4062, &(0x7f00000004c0)=0x744) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0xd, &(0x7f00000007c0)=ANY=[@ANYBLOB="18007095000000181100000400"/28, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb7030000ed000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r7}, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b040000000000000000020000002800048024000180090001006d6574610000000014000280080003400000000008008240000000000900010073797a31000000000900020073797a320000000005000740550000fa140000001100010000000000000000000000000a"], 0x84}}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b040000000000000000020000002800048024000180090001006d6574610000000014000280080003400000000008008240000000000900010073797a31000000000900020073797a320000000005000740550000fa140000001100010000000000000000000000000a"], 0x84}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r9, &(0x7f0000000100)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) 1.163476099s ago: executing program 1 (id=1558): r0 = socket(0x22, 0x2, 0x4) bind$bt_hci(r0, &(0x7f00000001c0)={0x1f, 0x4, 0x4}, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000600)=""/95, 0x5f}], 0x1}}], 0x1, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r2, &(0x7f0000000080), 0x10) r3 = socket(0x10, 0x80003, 0x0) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x100000c, 0x57523f47ede17150, r1, 0x19731000) 1.07925645s ago: executing program 1 (id=1559): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, 0x0, &(0x7f00000007c0)) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000013000100000000000000000007000000", @ANYRES32=r8], 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xfff7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_NAT={0x8}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x4c}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002c40)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x17}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0xc}]}}}]}]}], {0x14}}, 0x84}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r11, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r12, 0x0, r11, 0x0, 0x10000008ebc, 0x0) splice(r10, 0x0, r13, 0x0, 0x25a5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="000000181100008000"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b9a00fe00000000b6090800000000007b9af0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000001500000076000000bd9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 987.631123ms ago: executing program 3 (id=1560): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2, 0x0, {0xa, 0x4e23, 0xb, @private1, 0x800}}}, 0x3a) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x700, 0x700, 0x6, 0x1, {{0xf, 0x4, 0x0, 0xa, 0x3c, 0x68, 0x0, 0x3b, 0x29, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x3e}, {[@timestamp_prespec={0x44, 0xc, 0x1d, 0x3, 0x3, [{@multicast1, 0xffff}]}, @lsrr={0x83, 0x1b, 0xf6, [@private=0xa010102, @remote, @dev={0xac, 0x14, 0x14, 0x40}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x41}]}, @noop]}}}}}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32, @ANYBLOB="140004006e736376663000000000000101000000080005"], 0x50}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000014000000240007800c00040000000000000000000c00"], 0x38}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000140)={0x1, 0xfffffff9, 0x2, 0x7}, 0x10) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000000100)=0x104040, 0x4) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x100}, [@IFLA_OPERSTATE={0x0, 0x10, 0xd}, @IFLA_BROADCAST={0x0, 0x2, @link_local}]}, 0x58}}, 0x0) 819.986086ms ago: executing program 4 (id=1561): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0xe, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2c, &(0x7f0000000000), 0x4) accept(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="00000000800000001c0012800c0001006d616376fd3cc96367159a3f0800f25bc7a4c501"], 0x3c}}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000b80)={@cgroup, 0xffffffffffffffff, 0x20, 0x24, 0x0, @prog_id}, 0x20) close(0xffffffffffffffff) r2 = socket(0x1d, 0x5, 0x1) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1d, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000018110000", @ANYRESOCT=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000140)='syzkaller\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00'}, 0x65) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x1, '\x00', r3, 0xffffffffffffffff, 0x3, 0x2}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000003c0)=@o_path={&(0x7f0000000400)='./file0\x00', r4, 0x4000, r7}, 0x18) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r0], 0x74}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000440)=ANY=[@ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="00000000000000002400dce3a5d801006d6163766c616e080003000000000008000500", @ANYRES32=r10, @ANYBLOB], 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000001801000045c096a756d9a8e12651fca353dd3e7ec80f9ed0ab1966a13b4134d4d6ade427c44650f6105583655366", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='kmem_cache_free\x00', r6}, 0x35) r11 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r11, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r11, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x33, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080045000025000000200011907801000000478b78d5ac"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x27, 0x0, 0x0, 0x0, 0x0, 0xd50, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 670.721654ms ago: executing program 3 (id=1562): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x400000, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x20}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000007}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x4, {0x2}}}}]}]}, 0x70}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00'}) 578.277524ms ago: executing program 1 (id=1563): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x101842, 0x0) write$binfmt_script(r1, &(0x7f00000001c0), 0x6a) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x58, &(0x7f0000000340)=[@in6={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, @in6={0xa, 0x4e22, 0x8, @remote, 0x7}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e24, @multicast2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000400)={r2, @in6={{0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, 0x81}}, 0x2, 0x40}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) close(0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000000200)={'wlan1\x00', @random="ffffff8d00"}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x5, 0x5, 0xc}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 444.277441ms ago: executing program 3 (id=1564): socket$nl_generic(0x10, 0x3, 0x10) 443.650082ms ago: executing program 4 (id=1565): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x2) bind$rds(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x9, 0x2, 0x1, 0x7f}, {0x3, 0x0, 0x6, 0x7, 0x4, 0x8000}, 0x7, 0x9, 0x12f1}}, @TCA_TBF_RATE64={0xc, 0x4, 0x11c92234be0344c1}, @TCA_TBF_PBURST={0x8, 0x7, 0x5cf}]}}]}, 0x6c}}, 0x0) 366.175876ms ago: executing program 3 (id=1566): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000140001800d0001007564700822f2f26788"], 0x28}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit, @alu={0x7, 0x1, 0xb, 0x0, 0x0, 0x1, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x5}, 0x90) 283.22429ms ago: executing program 0 (id=1567): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x94}}, 0x0) 268.530692ms ago: executing program 1 (id=1568): r0 = socket$kcm(0x11, 0x3, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) syz_genetlink_get_family_id$team(&(0x7f0000000040), r1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r4, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8840) (async, rerun: 32) bind$bt_hci(r2, &(0x7f0000000000), 0x6) (async, rerun: 32) ioctl$sock_bt_hci(r2, 0x800448d5, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) (async, rerun: 64) r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002580)=@newtaction={0x490, 0x30, 0x12f, 0x0, 0x0, {}, [{0x47c, 0x1, [@m_police={0x478, 0x1, 0x0, 0x0, {{0xb}, {0x44c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xffffffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffc00, 0x8, 0x8, 0x2, 0x6, {0x1, 0x1, 0xf, 0x70, 0x5d5, 0x2}, {0x20, 0x0, 0x1, 0x5, 0x6}, 0x2, 0x5, 0x40}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x490}}, 0x0) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0) (async) recvmmsg$unix(r5, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000004c0)=""/174, 0xae}, {&(0x7f0000001940)=""/4071, 0xfe7}], 0x2}}], 0x1, 0x0, 0x0) write(r5, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) (async) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) (async, rerun: 64) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000500)=[{&(0x7f00000014c0)="27030200590200000000002f1eafbcf706e105000000894f000f1104ee162bd4b8bf4a82f6184b8a34f90186cee84400000008000000001900000000f2c0bd0d94aaebd5bc786364b1bd41769fe990e97f951a39cb41e75906d7d4173c7e82fcbb3c839a600dc2f78019b88152f62a42cc98eb6dd4755a8a60eecfc4e3a837918b68fee974d68686eb9dfd3f0ab85ca13850a3e1cc099c4553a4fe0ee253b8dada923fc0aee5b8c1a34559fbad7000040b47bf3811f21535033941c0856c8fd334dbbf2ed0648ee00598fc848d98de9e41567071f892", 0xd6}, {&(0x7f0000000440)="63f805c7649496db72959832930469edc7b7d050139bf7ada302c9e37eed5653ecb716cdb8981cd80b33254465cc904b7b31789d65c0e0d33330e2ef54205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd937e3fdae90c801681f55ef26cb0000000000000000", 0x85}, {&(0x7f0000000280)="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", 0x11d}], 0x3}, 0x4004050) (rerun: 64) 152.133642ms ago: executing program 0 (id=1569): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) r2 = socket$packet(0x11, 0x2, 0x300) getsockopt(r2, 0x1, 0x2, &(0x7f00000003c0)=""/165, &(0x7f0000000480)=0xa5) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000100)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt(r6, 0x84, 0x7f, &(0x7f0000000080)="020000000d800000", 0x8) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r7 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r7, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) shutdown(r0, 0x1) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001800010000000000000000001d01000008000a003eeefeb73e1b97995ede52372de438fc1a0d052aba517e15dc92891e94cd8ae7cb6e70616e0de227d6d50f94ce6d066b3793ac3ac302402a0ee362e63eccc4bc7297aebd1439ca1fd2f07f4ba4df4fd6fab7a14d3e14cbc2cbd6af9f474d8eda5731ce9633904aba732e3ffb7d7efb", @ANYRES32=0x0, @ANYBLOB='\b\x00\t\x00', @ANYRES32=0x0, @ANYBLOB="08000e00", @ANYRES32=r1, @ANYBLOB="15000300000000000000000064cff2cf132839b101000000"], 0x44}}, 0x0) 148.824705ms ago: executing program 4 (id=1570): socket$netlink(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x5}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x19, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x6, 0xa7, &(0x7f0000000200)=""/167, 0x41100, 0x10, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0xe, 0x2, 0x63}, 0x10, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000a80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000ac0)=[{0x2, 0x5, 0x0, 0x1}, {0x2, 0x4, 0xa, 0x1}, {0x2, 0x4, 0x1}, {0x1, 0x2, 0x3, 0x8}, {0x5, 0x1, 0x9, 0x2}, {0x5, 0x1, 0xe, 0xa}], 0x10, 0x7}, 0x90) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f00000000c0)=0xffffffffffffff9c, 0x8) connect$vsock_stream(r3, &(0x7f0000000380)={0x28, 0x0, 0x0, @hyper}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x14, 0x5a, 0x4, 0x0, 0x0, {0x9}}, 0x33}}, 0x24044014) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000001880)=[{{0x0, 0x2, 0x0}}], 0xf000, 0x10002, 0x0) recvfrom$packet(r1, 0x0, 0x0, 0x0, 0x0, 0x5c) r4 = socket(0x1, 0x80000, 0xf) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee8000004000000", @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400b59500020000000000000a00", @ANYRES32=r6, @ANYBLOB="14000500"/15], 0x2c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000080)={'gretap0\x00', &(0x7f0000000000)={'sit0\x00', r6, 0x80, 0x1, 0xa2, 0xa, {{0xf, 0x4, 0x2, 0x3b, 0x3c, 0x67, 0x0, 0x6, 0x2f, 0x0, @broadcast, @private=0xa010100, {[@timestamp={0x44, 0x4, 0xbb, 0x0, 0xc}, @end, @cipso={0x86, 0x23, 0x1, [{0x6, 0xa, "78a6c22c6895c1ac"}, {0x2, 0xd, "67e9c2011283007d8531d6"}, {0x7067e0e587635d82, 0x6, "5c8040e4"}]}]}}}}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000580)=r2}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x19, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1}, @exit, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x82}, @call={0x85, 0x0, 0x0, 0x1f}, @map_fd={0x18, 0x9, 0x1, 0x0, r11}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000700)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x26, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x2, 0x4, 0x400000, 0x80}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x90) sendmsg$NL80211_CMD_SET_POWER_SAVE(r7, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000008000300"/18, @ANYRES32=r10, @ANYBLOB='\b\x00]\x00\x00\x00\x00\x00'], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="380000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100ba9beee03fd71d16dcfe2b2e88b3cb941db8dcaee623ccebc62ee9f0118efe9ffd7032aef237e5ec42d0435dfb74758f1359f5f4c06856246f1b97c13d384f622acb2d29e8e4f9a089e2cf2531aa52dde7a63f7d92a60456b8aa533629063d5895a2868efbb00d2b952ce7ac11d4eeb4c8bbe184b8312507c68c61152b85469581c549263049515f835ed13b66a76b9ceacb3828585c8bd2f8971b382d081b7fa38fd852b46db7600c58127eed136475", @ANYRES32=r0, @ANYBLOB], 0x38}}, 0x0) 148.427561ms ago: executing program 3 (id=1571): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x3, [@restrict={0xf, 0x0, 0x0, 0xb, 0x3}, @int={0x4, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x1f}, @var={0x5, 0x0, 0x0, 0xe, 0x1, 0x1}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0xf, 0x1}, {0x2, 0x1}, {0xa, 0x4}, {0x3, 0x4}]}]}, {0x0, [0x61]}}, &(0x7f0000000580)=""/174, 0x73, 0xae, 0x0, 0x600}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000006c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa, &(0x7f0000000700)=[0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3a, &(0x7f0000000780)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0xb3, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', r1, 0xffffffffffffffff, 0x0, 0x5, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xb, 0x31, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, [@cb_func={0x18, 0xb, 0x4, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit, @ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xee4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0x3a}]}, &(0x7f0000000480)='GPL\x00', 0x7fffffff, 0x34, &(0x7f00000004c0)=""/52, 0x41100, 0x59, '\x00', 0x0, 0x2f, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x5, 0xc, 0xa, 0xffff}, 0x10, r7, 0xffffffffffffffff, 0x0, &(0x7f0000000a40)=[r8], 0x0, 0x10, 0x9}, 0x90) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000b40)=@bridge_newneigh={0x98, 0x1c, 0x8, 0x70bd26, 0x25dfdbfc, {0x2, 0x0, 0x0, r6, 0x80, 0x49, 0x5}, [@NDA_FDB_EXT_ATTRS={0x14, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x5}, @NFEA_DONT_REFRESH={0x4}]}, @NDA_MASTER={0x8, 0x9, 0x8}, @NDA_SRC_VNI={0x8, 0xb, 0x3}, @NDA_SRC_VNI={0x8, 0xb, 0xe}, @NDA_MASTER={0x8, 0x9, 0x7f6}, @NDA_IFINDEX={0x8, 0x8, r1}, @NDA_FDB_EXT_ATTRS={0x28, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0xe8}, @NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}]}, @NDA_PROBES={0x8, 0x4, 0x6}, @NDA_VNI={0x8, 0x7, 0x7f}, @NDA_PROTOCOL={0x5, 0xc, 0x6}]}, 0x98}}, 0x0) 0s ago: executing program 3 (id=1572): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)={0xe0, 0x10, 0x50b, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa4", @typed={0x9d, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44e4ff282d2d73882fbd9423debbb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100100000000000000a0912086d9f4606d2e4cc898739222c5d3a8"}, @nested={0x21, 0x0, 0x0, 0x1, [@generic="53e255d911da357ba323a96d7596fa3e07c0c48d86230d400e710116c6"]}]}, 0xe0}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071122c000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) (async) socket$kcm(0x2, 0x3, 0x84) (async) unshare(0x20000400) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000201000022000000000000020000"], 0x0, 0x26, 0x0, 0x0, 0x401}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9800", @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4], 0x98}}, 0x0) (async, rerun: 32) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, 0x0, 0x0) (rerun: 32) socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="b40800000000000073119a00000000008510000002000000b7000000000000009500c200000000009500001200000000978397f6f8d449eca162e33d3cc50e3ea2bda29b6c5c0dd4ae4a5723d7bb1782d799214e20806df14107bbb18383f65bfa943f096ffd3f1a5195665bd897b554a4229f80258ac79116086d8764612511b5fbf0562c4034196f45d920ce764e50311836d630a55bd079ffb7c7bfd4d9e226"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000000)=0x8000013, 0xfffffffffffffc92) (async) socket$key(0xf, 0x3, 0x2) kernel console output (not intermixed with test programs): e 1 has an invalid length. [ 150.410147][ T8062] netlink: 9 bytes leftover after parsing attributes in process `syz.3.632'. [ 150.610644][ T8070] xt_TPROXY: Can be used only with -p tcp or -p udp [ 150.920752][ T8085] vlan1: entered promiscuous mode [ 150.930425][ T8085] dummy0: entered promiscuous mode [ 150.952442][ T8085] dummy0: left promiscuous mode [ 151.344673][ T8107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.641'. [ 151.380496][ T8107] netlink: 'syz.0.641': attribute type 15 has an invalid length. [ 151.412612][ T8109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.641'. [ 152.426183][ T129] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.683125][ T129] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.785150][ T129] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.869864][ T129] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.147408][ T129] bridge_slave_1: left allmulticast mode [ 153.176218][ T129] bridge_slave_1: left promiscuous mode [ 153.198876][ T8156] netlink: 195428 bytes leftover after parsing attributes in process `syz.0.649'. [ 153.210216][ T129] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.237124][ T8156] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 153.246556][ T129] bridge_slave_0: left allmulticast mode [ 153.253372][ T129] bridge_slave_0: left promiscuous mode [ 153.260281][ T129] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.512792][ T8165] netlink: 12 bytes leftover after parsing attributes in process `syz.0.652'. [ 153.904712][ T5244] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 153.916542][ T5244] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 153.925779][ T5244] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 153.944895][ T5244] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 153.954662][ T5244] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 153.963480][ T5244] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 154.335082][ T129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.356919][ T129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.376025][ T129] bond0 (unregistering): Released all slaves [ 155.052357][ T8182] dvmrp1: entered allmulticast mode [ 155.483799][ T129] hsr_slave_0: left promiscuous mode [ 155.549982][ T129] hsr_slave_1: left promiscuous mode [ 155.581059][ T129] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.588932][ T129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.640820][ T129] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.648293][ T129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.765107][ T129] veth1_macvtap: left promiscuous mode [ 155.788152][ T129] veth0_macvtap: left promiscuous mode [ 155.818649][ T129] veth1_vlan: left promiscuous mode [ 155.847909][ T129] veth0_vlan: left promiscuous mode [ 156.070353][ T4624] Bluetooth: hci2: command tx timeout [ 156.977828][ T129] team0 (unregistering): Port device team_slave_1 removed [ 157.049233][ T129] team0 (unregistering): Port device team_slave_0 removed [ 157.746371][ T8246] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.093770][ T8172] chnl_net:caif_netlink_parms(): no params data found [ 158.150081][ T5244] Bluetooth: hci2: command tx timeout [ 158.193450][ T8261] netlink: 16 bytes leftover after parsing attributes in process `syz.1.669'. [ 158.509569][ T8265] netlink: 20 bytes leftover after parsing attributes in process `syz.0.670'. [ 158.548258][ T8269] netlink: 20 bytes leftover after parsing attributes in process `syz.0.670'. [ 158.576343][ T8268] netlink: 12 bytes leftover after parsing attributes in process `syz.4.671'. [ 158.605707][ T8268] netlink: 20 bytes leftover after parsing attributes in process `syz.4.671'. [ 158.967547][ T8172] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.020275][ T8172] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.027568][ T8172] bridge_slave_0: entered allmulticast mode [ 159.098928][ T8298] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 159.105909][ T8172] bridge_slave_0: entered promiscuous mode [ 159.161983][ T8172] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.169599][ T8172] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.219347][ T8172] bridge_slave_1: entered allmulticast mode [ 159.245731][ T8172] bridge_slave_1: entered promiscuous mode [ 159.359413][ T8172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.390704][ T8172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.485586][ T8172] team0: Port device team_slave_0 added [ 159.515108][ T8172] team0: Port device team_slave_1 added [ 159.609349][ T8172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.624920][ T8172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.669937][ T8172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.697065][ T8172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.714333][ T8172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.778228][ T8172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.037010][ T8172] hsr_slave_0: entered promiscuous mode [ 160.058690][ T8172] hsr_slave_1: entered promiscuous mode [ 160.078597][ T8172] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 160.099117][ T8172] Cannot create hsr debugfs directory [ 160.243321][ T5244] Bluetooth: hci2: command tx timeout [ 161.008393][ T8360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.689'. [ 161.348422][ T8371] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 161.950331][ T8391] netlink: 56 bytes leftover after parsing attributes in process `syz.1.699'. [ 162.102933][ T8389] netlink: 'syz.0.698': attribute type 12 has an invalid length. [ 162.140324][ T8389] netlink: 132 bytes leftover after parsing attributes in process `syz.0.698'. [ 162.310871][ T4624] Bluetooth: hci2: command tx timeout [ 162.316985][ T5253] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 162.331882][ T4624] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 162.341087][ T4624] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 162.350964][ T4624] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 162.371050][ T4624] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 162.378765][ T4624] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 162.454971][ T8413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.701'. [ 162.500485][ T8172] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 162.603921][ T8172] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 162.651725][ T8172] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 162.737560][ T8172] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 163.542324][ T8411] chnl_net:caif_netlink_parms(): no params data found [ 163.771889][ T8172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.928697][ T8172] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.158094][ T8484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.714'. [ 164.188635][ T8484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.714'. [ 164.206764][ T8411] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.235655][ T8411] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.249756][ T8484] netlink: 36 bytes leftover after parsing attributes in process `syz.0.714'. [ 164.259132][ T8411] bridge_slave_0: entered allmulticast mode [ 164.270336][ T8487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.714'. [ 164.280154][ T8487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.714'. [ 164.289699][ T8411] bridge_slave_0: entered promiscuous mode [ 164.329278][ T8487] netlink: 36 bytes leftover after parsing attributes in process `syz.0.714'. [ 164.331833][ T8411] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.373195][ T8411] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.431482][ T8411] bridge_slave_1: entered allmulticast mode [ 164.463456][ T8411] bridge_slave_1: entered promiscuous mode [ 164.470749][ T5244] Bluetooth: hci5: command tx timeout [ 164.521945][ T3979] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.527961][ T8497] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 164.529237][ T3979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.586219][ T3979] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.593469][ T3979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.605433][ T8490] bridge0: port 1(gretap0) entered blocking state [ 164.617725][ T8490] bridge0: port 1(gretap0) entered disabled state [ 164.627542][ T8490] gretap0: entered allmulticast mode [ 164.656831][ T8490] gretap0: entered promiscuous mode [ 164.813692][ T8411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.842711][ T8411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.038557][ T8411] team0: Port device team_slave_0 added [ 165.083849][ T8411] team0: Port device team_slave_1 added [ 165.267666][ T8411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.293919][ T8411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.343678][ T8411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.417706][ T8411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.435174][ T8411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.501247][ T8411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.563991][ T8524] tipc: Started in network mode [ 165.568932][ T8524] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 165.608623][ T8524] tipc: Enabled bearer , priority 10 [ 165.633655][ T8525] tipc: Resetting bearer [ 165.808448][ T8525] tipc: Disabling bearer [ 165.935729][ T8411] hsr_slave_0: entered promiscuous mode [ 166.011546][ T8411] hsr_slave_1: entered promiscuous mode [ 166.080038][ T8411] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.087670][ T8411] Cannot create hsr debugfs directory [ 166.200695][ T8546] veth1_macvtap: left promiscuous mode [ 166.206232][ T8546] macsec0: entered promiscuous mode [ 166.248747][ T8546] macsec0: entered allmulticast mode [ 166.291568][ T8549] veth1_macvtap: entered promiscuous mode [ 166.326738][ T8553] netlink: 'syz.0.728': attribute type 1 has an invalid length. [ 166.336038][ T8549] veth1_macvtap: entered allmulticast mode [ 166.369286][ T8553] netlink: 'syz.0.728': attribute type 1 has an invalid length. [ 166.370567][ T8549] macsec0: left promiscuous mode [ 166.550133][ T5244] Bluetooth: hci5: command tx timeout [ 166.748700][ T8571] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.947870][ T8574] netlink: 'syz.4.731': attribute type 3 has an invalid length. [ 166.956501][ T8172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.976918][ T8574] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.731'. [ 167.897593][ T8411] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.008018][ T8604] netlink: 12 bytes leftover after parsing attributes in process `syz.4.736'. [ 168.098068][ T8615] sctp: [Deprecated]: syz.1.735 (pid 8615) Use of int in max_burst socket option. [ 168.098068][ T8615] Use struct sctp_assoc_value instead [ 168.120881][ T8607] netlink: 'syz.0.737': attribute type 1 has an invalid length. [ 168.284201][ T8411] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.339586][ T8610] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.735'. [ 168.541594][ T8411] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.623274][ T8172] veth0_vlan: entered promiscuous mode [ 168.647035][ T5244] Bluetooth: hci5: command tx timeout [ 168.703725][ T8411] team0: Port device netdevsim0 removed [ 168.735451][ T8411] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.834299][ T8172] veth1_vlan: entered promiscuous mode [ 168.856600][ T8639] lo: left promiscuous mode [ 168.865118][ T8639] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 168.947333][ T2496] bridge_slave_1: left allmulticast mode [ 168.991000][ T2496] bridge_slave_1: left promiscuous mode [ 169.020171][ T2496] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.055104][ T2496] bridge_slave_0: left allmulticast mode [ 169.077746][ T2496] bridge_slave_0: left promiscuous mode [ 169.087763][ T2496] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.965257][ T2496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.978737][ T2496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.990531][ T2496] bond0 (unregistering): Released all slaves [ 170.186314][ T8172] veth0_macvtap: entered promiscuous mode [ 170.226536][ T8172] veth1_macvtap: entered promiscuous mode [ 170.319570][ T8680] IPVS: Unknown mcast interface: vlan1 [ 170.535032][ T8411] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 170.659492][ T8411] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 170.692483][ T8172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.703837][ T8172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.714153][ T5244] Bluetooth: hci5: command tx timeout [ 170.720391][ T8172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.731327][ T8172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.741628][ T8172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.752489][ T8172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.765968][ T8172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.776893][ T8172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.789174][ T8172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.914579][ T2496] hsr_slave_0: left promiscuous mode [ 170.927860][ T2496] hsr_slave_1: left promiscuous mode [ 170.936574][ T2496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.946150][ T2496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.962451][ T2496] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.967608][ T8714] FAULT_INJECTION: forcing a failure. [ 170.967608][ T8714] name failslab, interval 1, probability 0, space 0, times 1 [ 170.970516][ T2496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.996368][ T8714] CPU: 1 UID: 0 PID: 8714 Comm: syz.0.750 Not tainted 6.11.0-rc5-syzkaller-00156-gef4a99a0164e #0 [ 171.007003][ T8714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 171.017090][ T8714] Call Trace: [ 171.020399][ T8714] [ 171.023347][ T8714] dump_stack_lvl+0x241/0x360 [ 171.028065][ T8714] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.033304][ T8714] ? __pfx__printk+0x10/0x10 [ 171.037931][ T8714] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.044237][ T8714] should_fail_ex+0x3b0/0x4e0 [ 171.048968][ T8714] should_failslab+0xac/0x100 [ 171.053693][ T8714] ? __alloc_skb+0x1c3/0x440 [ 171.058328][ T8714] kmem_cache_alloc_node_noprof+0x71/0x320 [ 171.064232][ T8714] __alloc_skb+0x1c3/0x440 [ 171.068704][ T8714] ? __pfx___alloc_skb+0x10/0x10 [ 171.073689][ T8714] ? km_report+0x1f0/0x240 [ 171.078164][ T8714] ? __pfx_lock_release+0x10/0x10 [ 171.083246][ T8714] xfrm_alloc_compat+0x1b6/0x1690 [ 171.088334][ T8714] ? xfrm_get_translator+0x19/0x240 [ 171.093596][ T8714] dump_one_state+0x282/0x3f0 [ 171.098322][ T8714] xfrm_alloc_userspi+0x895/0xe20 [ 171.103426][ T8714] ? __pfx_xfrm_alloc_userspi+0x10/0x10 [ 171.109007][ T8714] ? __nla_parse+0x40/0x60 [ 171.113445][ T8714] xfrm_user_rcv_msg+0x75b/0xa80 [ 171.118462][ T8714] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 171.123978][ T8714] ? __mutex_trylock_common+0x183/0x2e0 [ 171.129539][ T8714] ? __pfx___might_resched+0x10/0x10 [ 171.135049][ T8714] netlink_rcv_skb+0x1e3/0x430 [ 171.139904][ T8714] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 171.145392][ T8714] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 171.150716][ T8714] xfrm_netlink_rcv+0x79/0x90 [ 171.155423][ T8714] netlink_unicast+0x7f6/0x990 [ 171.160222][ T8714] ? __pfx_netlink_unicast+0x10/0x10 [ 171.165530][ T8714] ? __virt_addr_valid+0x183/0x530 [ 171.170659][ T8714] ? __check_object_size+0x49c/0x900 [ 171.175963][ T8714] ? bpf_lsm_netlink_send+0x9/0x10 [ 171.181093][ T8714] netlink_sendmsg+0x8e4/0xcb0 [ 171.185879][ T8714] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.191186][ T8714] ? __import_iovec+0x536/0x820 [ 171.196052][ T8714] ? aa_sock_msg_perm+0x91/0x160 [ 171.201005][ T8714] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 171.206329][ T8714] ? security_socket_sendmsg+0x87/0xb0 [ 171.211835][ T8714] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.217132][ T8714] __sock_sendmsg+0x221/0x270 [ 171.221847][ T8714] ____sys_sendmsg+0x525/0x7d0 [ 171.226644][ T8714] ? __pfx_____sys_sendmsg+0x10/0x10 [ 171.231965][ T8714] __sys_sendmsg+0x2b0/0x3a0 [ 171.236583][ T8714] ? __pfx___sys_sendmsg+0x10/0x10 [ 171.241803][ T8714] ? vfs_write+0x7c4/0xc90 [ 171.246272][ T8714] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 171.252639][ T8714] ? do_syscall_64+0x100/0x230 [ 171.257454][ T8714] ? do_syscall_64+0xb6/0x230 [ 171.262152][ T8714] do_syscall_64+0xf3/0x230 [ 171.266668][ T8714] ? clear_bhb_loop+0x35/0x90 [ 171.271399][ T8714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.277321][ T8714] RIP: 0033:0x7fcac7979eb9 [ 171.281780][ T8714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.301396][ T8714] RSP: 002b:00007fcac867f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.309829][ T8714] RAX: ffffffffffffffda RBX: 00007fcac7b15f80 RCX: 00007fcac7979eb9 [ 171.317840][ T8714] RDX: 0000000000000000 RSI: 0000000020000540 RDI: 0000000000000003 [ 171.325827][ T8714] RBP: 00007fcac867f090 R08: 0000000000000000 R09: 0000000000000000 [ 171.333821][ T8714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.341801][ T8714] R13: 0000000000000000 R14: 00007fcac7b15f80 R15: 00007ffc93cb1ba8 [ 171.349805][ T8714] [ 171.407103][ T2496] veth1_macvtap: left promiscuous mode [ 171.412967][ T2496] veth0_macvtap: left promiscuous mode [ 171.418640][ T2496] veth1_vlan: left promiscuous mode [ 171.440277][ T2496] veth0_vlan: left promiscuous mode [ 171.450729][ T8719] netlink: 48 bytes leftover after parsing attributes in process `syz.0.752'. [ 171.717596][ T2496] pimreg (unregistering): left allmulticast mode [ 172.203545][ T2496] team0 (unregistering): Port device team_slave_1 removed [ 172.249415][ T2496] team0 (unregistering): Port device team_slave_0 removed [ 172.663736][ T8411] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 172.682499][ T8172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.695139][ T8172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.707012][ T8172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.721528][ T8172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.732937][ T8172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.742506][ T8719] netlink: 48 bytes leftover after parsing attributes in process `syz.0.752'. [ 172.745229][ T8172] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.761138][ T8172] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.776130][ T8172] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.786057][ T8172] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.816189][ T8411] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 172.956228][ T8739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.755'. [ 173.158452][ T8746] netlink: 88 bytes leftover after parsing attributes in process `syz.0.756'. [ 173.322445][ T8746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.756'. [ 173.346254][ T1117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.370054][ T1117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.534744][ T8411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.568270][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.588878][ T8411] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.593794][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.623201][ T3027] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.630456][ T3027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.648334][ T3027] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.655585][ T3027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.252130][ T8771] netlink: 48 bytes leftover after parsing attributes in process `syz.0.760'. [ 174.348897][ T2496] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.376828][ T8774] netlink: 'syz.4.761': attribute type 29 has an invalid length. [ 174.387681][ T8774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.761'. [ 174.498095][ T2496] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.541579][ T8411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.581606][ T2496] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.627386][ T8411] veth0_vlan: entered promiscuous mode [ 174.652380][ T2496] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.678619][ T8411] veth1_vlan: entered promiscuous mode [ 174.732504][ T8411] veth0_macvtap: entered promiscuous mode [ 174.744850][ T8411] veth1_macvtap: entered promiscuous mode [ 174.763768][ T8411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.775734][ T8411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.785841][ T8411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.797866][ T8411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.807956][ T8411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.818700][ T8411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.828886][ T8411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.841695][ T8411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.853435][ T8411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.865154][ T8411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.876431][ T8411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.886336][ T8411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.896886][ T8411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.907616][ T8411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.918121][ T8411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.929515][ T8411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.956308][ T8411] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.965569][ T8411] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.974726][ T8411] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.984949][ T8411] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.239312][ T2496] bridge_slave_1: left allmulticast mode [ 175.270558][ T2496] bridge_slave_1: left promiscuous mode [ 175.276343][ T2496] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.361012][ T2496] bridge_slave_0: left allmulticast mode [ 175.366714][ T2496] bridge_slave_0: left promiscuous mode [ 175.391726][ T2496] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.695920][ T4624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 175.705546][ T4624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 175.714904][ T4624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 175.726281][ T4624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 175.737768][ T4624] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 175.754428][ T4624] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 175.985316][ T2496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.997400][ T2496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.011902][ T2496] bond0 (unregistering): Released all slaves [ 176.032948][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.050103][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.198538][ T1117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.223064][ T1117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.420203][ T8819] netlink: 12 bytes leftover after parsing attributes in process `syz.0.770'. [ 176.681335][ T8826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.772'. [ 176.964205][ T2496] hsr_slave_0: left promiscuous mode [ 176.981068][ T8846] netlink: 4 bytes leftover after parsing attributes in process `syz.3.776'. [ 177.000956][ T2496] hsr_slave_1: left promiscuous mode [ 177.048871][ T2496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.064338][ T2496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.079010][ T2496] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.095254][ T2496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.137959][ T2496] veth1_macvtap: left promiscuous mode [ 177.145129][ T2496] veth0_macvtap: left promiscuous mode [ 177.152403][ T2496] veth1_vlan: left promiscuous mode [ 177.162919][ T2496] veth0_vlan: left promiscuous mode [ 177.774091][ T2496] team0 (unregistering): Port device team_slave_1 removed [ 177.817458][ T2496] team0 (unregistering): Port device team_slave_0 removed [ 177.844801][ T4624] Bluetooth: hci2: command tx timeout [ 178.520226][ T8867] netlink: 32 bytes leftover after parsing attributes in process `syz.3.782'. [ 178.729682][ T8800] chnl_net:caif_netlink_parms(): no params data found [ 178.873208][ T8883] netdevsim netdevsim3: Direct firmware load for : (05) goto pc+0 [ 178.873208][ T8883] 3: (95) exit [ 178.873208][ T8883] At program exit the register R0 is not a known value (pkt) [ 178.873208][ T8883] processed 4 insns (limit 1000000) max_ failed with error -2 [ 178.970011][ T8883] netdevsim netdevsim3: Falling back to sysfs fallback for: : (05) goto pc+0 [ 178.970011][ T8883] 3: (95) exit [ 178.970011][ T8883] At program exit the register R0 is not a known value (pkt) [ 178.970011][ T8883] processed 4 insns (limit 1000000) max_ [ 179.080982][ T8886] netlink: 44 bytes leftover after parsing attributes in process `syz.0.786'. [ 179.351857][ T8914] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.791'. [ 179.386605][ T8800] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.399495][ T8914] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.791'. [ 179.409449][ T8800] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.442138][ T8800] bridge_slave_0: entered allmulticast mode [ 179.455639][ T8800] bridge_slave_0: entered promiscuous mode [ 179.489228][ T8800] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.510921][ T8800] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.518216][ T8800] bridge_slave_1: entered allmulticast mode [ 179.559394][ T8800] bridge_slave_1: entered promiscuous mode [ 179.762498][ T8800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.805275][ T8800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.910233][ T4624] Bluetooth: hci2: command tx timeout [ 179.950623][ T8938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.799'. [ 180.060749][ T8800] team0: Port device team_slave_0 added [ 180.072356][ T8943] netlink: 228 bytes leftover after parsing attributes in process `syz.3.801'. [ 180.115232][ T8800] team0: Port device team_slave_1 added [ 180.289089][ T8953] netlink: 1000 bytes leftover after parsing attributes in process `syz.4.804'. [ 180.317571][ T8957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.803'. [ 180.327092][ T8957] netlink: 'syz.1.803': attribute type 15 has an invalid length. [ 180.370235][ T8800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.394675][ T8957] openvswitch: netlink: Multiple metadata blocks provided [ 180.409141][ T8800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.467301][ T8800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.490724][ T8800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.499478][ T8800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.556476][ T8800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.612604][ T8969] netlink: 'syz.3.810': attribute type 4 has an invalid length. [ 180.620668][ T8969] netlink: 'syz.3.810': attribute type 1 has an invalid length. [ 180.628558][ T8969] netlink: 'syz.3.810': attribute type 7 has an invalid length. [ 180.695566][ T29] audit: type=1107 audit(1725340593.885:2): pid=8968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Š63ú\›†m!öiN›íŠÉÍ‹ôEð~8§*ÔŽFEß@P7+¼kÜÖ' [ 180.736397][ T8800] hsr_slave_0: entered promiscuous mode [ 180.748814][ T8800] hsr_slave_1: entered promiscuous mode [ 180.783632][ T8800] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.797367][ T8800] Cannot create hsr debugfs directory [ 181.659610][ T9011] netlink: 'syz.3.817': attribute type 3 has an invalid length. [ 181.690142][ T9011] __nla_validate_parse: 2 callbacks suppressed [ 181.690161][ T9011] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.817'. [ 181.768892][ T9020] xt_nat: multiple ranges no longer supported [ 181.792890][ T9021] netlink: 12 bytes leftover after parsing attributes in process `syz.4.821'. [ 181.919219][ T9020] netlink: 'syz.1.820': attribute type 4 has an invalid length. [ 181.929612][ T9021] netlink: 12 bytes leftover after parsing attributes in process `syz.4.821'. [ 181.999989][ T4624] Bluetooth: hci2: command tx timeout [ 182.125239][ T9036] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.824'. [ 182.157385][ T9036] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 182.525531][ T8800] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 182.573861][ T8800] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 182.594431][ T9056] : entered promiscuous mode [ 182.621110][ T8800] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 182.657533][ T8800] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 182.675088][ T9056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.831'. [ 182.688634][ T9064] netlink: 20 bytes leftover after parsing attributes in process `syz.3.831'. [ 182.756640][ T9064] vlan2: entered promiscuous mode [ 182.763109][ T9064] syz_tun: entered promiscuous mode [ 182.857548][ T9077] xt_bpf: check failed: parse error [ 183.018107][ T8800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.094429][ T8800] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.128850][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.136129][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.197653][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.204964][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.295869][ T9093] netlink: 12 bytes leftover after parsing attributes in process `syz.3.836'. [ 183.578423][ T9102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.838'. [ 183.593229][ T3979] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 183.624467][ T9090] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.632288][ T9090] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.777112][ T9113] netlink: 16 bytes leftover after parsing attributes in process `syz.1.840'. [ 184.088165][ T5244] Bluetooth: hci2: command tx timeout [ 184.118305][ T9090] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 184.303141][ T9128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.842'. [ 184.798846][ T9156] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 184.924129][ T8800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.140235][ T8800] veth0_vlan: entered promiscuous mode [ 185.212669][ T8800] veth1_vlan: entered promiscuous mode [ 185.414367][ T8800] veth0_macvtap: entered promiscuous mode [ 185.455454][ T8800] veth1_macvtap: entered promiscuous mode [ 185.533640][ T8800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.558432][ T8800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.589196][ T8800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.629758][ T8800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.653923][ T9197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.656514][ T8800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.699592][ T8800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.715824][ T8800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.730899][ T8800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.761708][ T8800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.813280][ T8800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.859980][ T8800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.880135][ T8800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.901147][ T8800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.922055][ T8800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.939001][ T8800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.951739][ T8800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.023399][ T8800] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.032839][ T8800] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.052651][ T8800] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.075191][ T8800] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.164009][ T5244] Bluetooth: hci2: command 0x0405 tx timeout [ 186.382042][ T1117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.416638][ T1117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.485345][ T2496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.500896][ T2496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.690332][ T9238] netlink: 'syz.3.863': attribute type 3 has an invalid length. [ 186.822842][ T9238] __nla_validate_parse: 7 callbacks suppressed [ 186.822864][ T9238] netlink: 12 bytes leftover after parsing attributes in process `syz.3.863'. [ 186.941683][ T9247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.866'. [ 186.970914][ T9241] netlink: 36 bytes leftover after parsing attributes in process `syz.1.865'. [ 187.469542][ T9261] Unsupported ieee802154 address type: 0 [ 187.494558][ T9259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.521702][ T9259] bond_slave_0: entered promiscuous mode [ 187.527823][ T9259] bond_slave_1: entered promiscuous mode [ 187.565191][ T9259] team0: Port device bond0 added [ 187.577492][ T9263] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.870'. [ 187.623411][ T9263] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 187.770466][ T9274] netlink: 20 bytes leftover after parsing attributes in process `syz.4.876'. [ 187.798391][ T9270] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.875'. [ 187.928231][ T9285] netlink: 224 bytes leftover after parsing attributes in process `syz.4.879'. [ 187.958178][ T9285] netlink: 224 bytes leftover after parsing attributes in process `syz.4.879'. [ 188.159695][ T9298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.883'. [ 188.199398][ T9304] bond0: (slave bond_slave_0): Error -28 calling ndo_bpf [ 188.367354][ T9309] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.887'. [ 188.394686][ T1117] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.418014][ T9309] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 189.012528][ T1117] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.073211][ T1117] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.130860][ T1117] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.257931][ T9320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.298290][ T9322] ipt_REJECT: TCP_RESET invalid for non-tcp [ 189.400774][ T1117] bridge_slave_1: left allmulticast mode [ 189.409017][ T1117] bridge_slave_1: left promiscuous mode [ 189.424221][ T1117] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.446910][ T1117] bridge_slave_0: left allmulticast mode [ 189.464488][ T1117] bridge_slave_0: left promiscuous mode [ 189.480341][ T1117] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.790130][ T5244] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 189.799493][ T5244] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 189.808229][ T5244] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 189.817882][ T5244] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 189.842125][ T5244] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 189.871015][ T5244] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 190.295296][ T1117] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.310710][ T1117] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.326937][ T1117] bond0 (unregistering): Released all slaves [ 190.355242][ T9333] netlink: 'syz.0.893': attribute type 7 has an invalid length. [ 190.376234][ T9333] netlink: 'syz.0.893': attribute type 8 has an invalid length. [ 190.450628][ T9333] gretap0: entered promiscuous mode [ 190.500137][ T9333] batadv_slave_1: entered promiscuous mode [ 191.910329][ T4624] Bluetooth: hci2: command tx timeout [ 192.192822][ T9374] __nla_validate_parse: 5 callbacks suppressed [ 192.192843][ T9374] netlink: 292 bytes leftover after parsing attributes in process `syz.1.901'. [ 192.255001][ T9374] netlink: 28 bytes leftover after parsing attributes in process `syz.1.901'. [ 192.289937][ T9374] netlink: 28 bytes leftover after parsing attributes in process `syz.1.901'. [ 192.326131][ T9374] netlink: 68 bytes leftover after parsing attributes in process `syz.1.901'. [ 192.440082][ T9377] netlink: 'syz.3.903': attribute type 1 has an invalid length. [ 192.479933][ T9377] netlink: 'syz.3.903': attribute type 2 has an invalid length. [ 192.653497][ T1117] hsr_slave_0: left promiscuous mode [ 192.777589][ T1117] hsr_slave_1: left promiscuous mode [ 192.818286][ T1117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.832014][ T1117] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.856311][ T1117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.872565][ T1117] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.915311][ T1117] veth1_macvtap: left promiscuous mode [ 192.921393][ T1117] veth0_macvtap: left promiscuous mode [ 192.930453][ T1117] veth1_vlan: left promiscuous mode [ 192.936854][ T1117] veth0_vlan: left promiscuous mode [ 193.389813][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806ed1e400: rx timeout, send abort [ 193.399200][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806ed1dc00: rx timeout, send abort [ 193.408012][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806ed1e400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 193.422433][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806ed1dc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 193.575963][ T1117] team0 (unregistering): Port device team_slave_1 removed [ 193.634896][ T1117] team0 (unregistering): Port device team_slave_0 removed [ 193.990223][ T4624] Bluetooth: hci2: command tx timeout [ 194.205653][ T9409] netlink: 20 bytes leftover after parsing attributes in process `syz.0.909'. [ 194.252680][ T9410] bridge_slave_1: left allmulticast mode [ 194.267851][ T9410] bridge_slave_1: left promiscuous mode [ 194.284124][ T9410] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.304343][ T9410] bridge5: port 1(bridge_slave_1) entered blocking state [ 194.314443][ T9410] bridge5: port 1(bridge_slave_1) entered disabled state [ 194.327428][ T9410] bridge_slave_1: entered allmulticast mode [ 194.335689][ T9410] bridge_slave_1: entered promiscuous mode [ 194.357112][ T9410] bridge5: port 1(bridge_slave_1) entered blocking state [ 194.364433][ T9410] bridge5: port 1(bridge_slave_1) entered forwarding state [ 194.382854][ T9411] bridge5: port 2(veth1_to_bond) entered blocking state [ 194.404024][ T9411] bridge5: port 2(veth1_to_bond) entered disabled state [ 194.431339][ T9411] veth1_to_bond: entered allmulticast mode [ 194.443481][ T9411] veth1_to_bond: entered promiscuous mode [ 194.456698][ T9411] bridge5: port 2(veth1_to_bond) entered blocking state [ 194.463862][ T9411] bridge5: port 2(veth1_to_bond) entered forwarding state [ 194.477225][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.483670][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.655712][ T9429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.701447][ T9427] netlink: 'syz.3.914': attribute type 1 has an invalid length. [ 194.856241][ T9427] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 194.885319][ T9427] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 195.173674][ T9330] chnl_net:caif_netlink_parms(): no params data found [ 195.593782][ T9475] bond_slave_0: left promiscuous mode [ 195.623048][ T9475] bond_slave_1: left promiscuous mode [ 195.779362][ T9485] netlink: 209848 bytes leftover after parsing attributes in process `syz.0.924'. [ 195.802337][ T9484] netlink: 208 bytes leftover after parsing attributes in process `syz.3.925'. [ 195.803060][ T9485] openvswitch: netlink: Message has 2 unknown bytes. [ 195.833765][ T9330] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.868464][ T9330] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.886238][ T9330] bridge_slave_0: entered allmulticast mode [ 195.902895][ T9330] bridge_slave_0: entered promiscuous mode [ 195.967747][ T9330] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.002086][ T9330] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.018785][ T9330] bridge_slave_1: entered allmulticast mode [ 196.041191][ T9330] bridge_slave_1: entered promiscuous mode [ 196.070195][ T5253] Bluetooth: hci2: command tx timeout [ 196.137716][ T9330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.189445][ T9330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.313521][ T9500] netlink: 'syz.3.929': attribute type 10 has an invalid length. [ 196.340046][ T9500] netlink: 40 bytes leftover after parsing attributes in process `syz.3.929'. [ 196.372492][ T9500] bridge0: port 3(dummy0) entered blocking state [ 196.389493][ T9500] bridge0: port 3(dummy0) entered disabled state [ 196.411552][ T9500] dummy0: entered allmulticast mode [ 196.448599][ T9500] dummy0: entered promiscuous mode [ 196.477566][ T9330] team0: Port device team_slave_0 added [ 196.498619][ T9330] team0: Port device team_slave_1 added [ 196.533023][ T9510] netlink: 40 bytes leftover after parsing attributes in process `syz.4.930'. [ 196.550262][ T5253] Bluetooth: hci4: command 0x0406 tx timeout [ 196.556870][ T5241] Bluetooth: hci1: command 0x0406 tx timeout [ 196.737110][ T9518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.932'. [ 196.798215][ T9330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.828610][ T9330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.914332][ T9330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.972752][ T9330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.006960][ T9330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.060507][ T9330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.311584][ T9330] hsr_slave_0: entered promiscuous mode [ 197.362013][ T9330] hsr_slave_1: entered promiscuous mode [ 197.379384][ T9330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.400364][ T9330] Cannot create hsr debugfs directory [ 197.691386][ T9571] xt_bpf: check failed: parse error [ 197.714600][ T9571] __nla_validate_parse: 2 callbacks suppressed [ 197.714618][ T9571] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.946'. [ 197.738239][ T9571] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.946'. [ 198.125205][ T9588] netlink: 228 bytes leftover after parsing attributes in process `syz.0.951'. [ 198.149989][ T4624] Bluetooth: hci2: command tx timeout [ 198.301086][ T9591] IPVS: Error connecting to the multicast addr [ 198.308223][ T9593] netlink: 20 bytes leftover after parsing attributes in process `syz.3.953'. [ 198.534033][ T9610] netlink: 'syz.3.956': attribute type 1 has an invalid length. [ 198.555043][ T9610] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.956'. [ 198.602780][ T9610] netlink: 'syz.3.956': attribute type 1 has an invalid length. [ 198.644797][ T9612] netlink: 'syz.3.956': attribute type 1 has an invalid length. [ 198.684130][ T9612] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.956'. [ 198.740000][ T9612] netlink: 'syz.3.956': attribute type 1 has an invalid length. [ 199.152492][ T9330] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 199.183942][ T9330] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 199.207296][ T9330] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 199.236938][ T9330] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 199.502024][ T9330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.551327][ T9330] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.583634][ T1117] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.590900][ T1117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.637834][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.645119][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.862258][ T9330] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 200.200337][ T9687] openvswitch: netlink: ct_state flags 0000d2dc unsupported [ 200.210850][ T9687] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 200.368213][ T9330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.547052][ T9330] veth0_vlan: entered promiscuous mode [ 200.624873][ T9330] veth1_vlan: entered promiscuous mode [ 200.734423][ T9330] veth0_macvtap: entered promiscuous mode [ 200.767043][ T9330] veth1_macvtap: entered promiscuous mode [ 200.851146][ T9330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.885165][ T9330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.895418][ T9330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.906649][ T9330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.916847][ T9330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.928691][ T9330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.939143][ T9330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.959731][ T9330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.973197][ T9330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.035345][ T9330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.066814][ T9330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.099951][ T9330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.140043][ T9330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.166717][ T9330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.199987][ T9330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.206144][ T9723] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 201.244322][ T9330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.301657][ T9330] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.349434][ T9330] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.380993][ T9330] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.389764][ T9330] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.756301][ T3979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.782363][ T3979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.871571][ T3027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.895617][ T3027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.490697][ T9765] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.989'. [ 202.519933][ T9765] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 202.658066][ T9775] bridge0: port 2(team0) entered blocking state [ 202.667992][ T9775] bridge0: port 2(team0) entered disabled state [ 202.674704][ T9775] team0: entered allmulticast mode [ 202.689202][ T9775] team_slave_0: entered allmulticast mode [ 202.709051][ T9771] netlink: 16126 bytes leftover after parsing attributes in process `syz.4.991'. [ 202.710366][ T9775] team_slave_1: entered allmulticast mode [ 202.725003][ T9775] bond0: entered allmulticast mode [ 202.731936][ T9771] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.991'. [ 202.758325][ T9775] bond_slave_0: entered allmulticast mode [ 202.771472][ T9775] bond_slave_1: entered allmulticast mode [ 202.808357][ T9775] team0: entered promiscuous mode [ 202.825661][ T9775] bond0: entered promiscuous mode [ 202.833986][ T9775] bond_slave_0: entered promiscuous mode [ 202.848041][ T9775] bond_slave_1: entered promiscuous mode [ 203.146175][ T9796] netlink: 'syz.0.994': attribute type 10 has an invalid length. [ 203.201303][ T9796] bond0: (slave bond_slave_0): Releasing backup interface [ 204.508929][ T2496] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.071852][ T2496] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.202189][ T2496] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.294687][ T2496] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.445839][ T2496] bridge_slave_1: left allmulticast mode [ 205.452136][ T2496] bridge_slave_1: left promiscuous mode [ 205.457924][ T2496] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.468126][ T2496] bridge_slave_0: left allmulticast mode [ 205.474241][ T2496] bridge_slave_0: left promiscuous mode [ 205.480849][ T2496] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.010163][ T5244] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 206.035871][ T5244] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 206.051516][ T5244] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 206.061410][ T5244] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 206.071155][ T5244] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 206.078743][ T5244] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 206.181740][ T2496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.194872][ T2496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.209471][ T2496] bond0 (unregistering): Released all slaves [ 206.222152][ T9866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1013'. [ 206.468188][ T9889] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 206.551460][ T9898] netlink: 'syz.3.1016': attribute type 1 has an invalid length. [ 206.568710][ T9898] netlink: 9352 bytes leftover after parsing attributes in process `syz.3.1016'. [ 206.579094][ T9898] netlink: 'syz.3.1016': attribute type 1 has an invalid length. [ 206.587453][ T9898] netlink: 'syz.3.1016': attribute type 2 has an invalid length. [ 206.638980][ T9899] tap0: tun_chr_ioctl cmd 1074812118 [ 207.086526][ T2496] hsr_slave_0: left promiscuous mode [ 207.122333][ T2496] hsr_slave_1: left promiscuous mode [ 207.153458][ T2496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.169966][ T2496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.190787][ T2496] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.198634][ T2496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.276540][ T2496] veth1_macvtap: left promiscuous mode [ 207.326317][ T2496] veth0_macvtap: left promiscuous mode [ 207.334007][ T2496] veth1_vlan: left promiscuous mode [ 207.339437][ T2496] veth0_vlan: left promiscuous mode [ 207.549717][ T9938] ieee802154 phy0 wpan0: encryption failed: -22 [ 208.140557][ T2496] team0 (unregistering): Port device team_slave_1 removed [ 208.152866][ T5244] Bluetooth: hci2: command tx timeout [ 208.196390][ T2496] team0 (unregistering): Port device team_slave_0 removed [ 208.800027][ T9940] netlink: 23 bytes leftover after parsing attributes in process `syz.4.1028'. [ 208.951535][ T9954] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 209.187823][ T9884] chnl_net:caif_netlink_parms(): no params data found [ 209.382185][ T9975] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1037'. [ 209.557262][ T9884] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.565211][ T9884] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.576678][ T9884] bridge_slave_0: entered allmulticast mode [ 209.585455][ T9884] bridge_slave_0: entered promiscuous mode [ 209.597029][ T9884] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.604687][ T9884] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.614052][ T9884] bridge_slave_1: entered allmulticast mode [ 209.623407][ T9884] bridge_slave_1: entered promiscuous mode [ 209.719626][ T9884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.736512][ T9884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.922001][ T9884] team0: Port device team_slave_0 added [ 209.937807][ T9884] team0: Port device team_slave_1 added [ 209.944845][ T9995] netlink: 'syz.4.1040': attribute type 2 has an invalid length. [ 210.003886][ T9884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.017372][ T9884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.083400][ T9884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.134265][ T9884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.152324][ T9884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.206264][ T9884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.230873][ T5244] Bluetooth: hci2: command tx timeout [ 210.352805][T10009] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1043'. [ 210.401756][ T9884] hsr_slave_0: entered promiscuous mode [ 210.405760][T10007] netlink: 'syz.4.1043': attribute type 1 has an invalid length. [ 210.423805][T10007] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1043'. [ 210.431457][ T9884] hsr_slave_1: entered promiscuous mode [ 210.441912][ T9884] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 210.449696][ T9884] Cannot create hsr debugfs directory [ 210.555945][T10014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1043'. [ 210.688704][T10015] netlink: 308 bytes leftover after parsing attributes in process `syz.3.1044'. [ 211.293710][T10034] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1047'. [ 211.324929][T10034] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1047'. [ 211.732651][ T9884] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 211.748750][ T9884] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 211.799233][ T9884] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 211.828921][ T9884] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 211.880920][T10067] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0 [ 211.900288][T10063] IPVS: stopping backup sync thread 10067 ... [ 212.146313][ T9884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.182708][ T9884] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.215029][ T129] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.222318][ T129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.293034][ T129] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.300257][ T129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.312902][ T5244] Bluetooth: hci2: command tx timeout [ 212.458445][T10088] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 212.698737][T10102] x_tables: duplicate underflow at hook 1 [ 213.001860][ T9884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.058825][T10122] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1065'. [ 213.125846][T10126] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1066'. [ 213.242478][ T9884] veth0_vlan: entered promiscuous mode [ 213.268720][ T9884] veth1_vlan: entered promiscuous mode [ 213.399239][ T9884] veth0_macvtap: entered promiscuous mode [ 213.423674][ T9884] veth1_macvtap: entered promiscuous mode [ 213.485885][ T9884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.513228][ T9884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.514466][T10138] No such timeout policy "syz0" [ 213.547050][ T9884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.588182][ T9884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.616190][ T9884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.639690][ T9884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.670431][ T9884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.693388][ T9884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.718347][ T9884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.761550][ T9884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.789859][ T9884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.830865][ T9884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.859827][ T9884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.870111][ T9884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.907244][ T9884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.942774][ T9884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.963685][T10153] ieee802154 phy0 wpan0: encryption failed: -22 [ 213.964454][ T9884] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.996423][T10153] netlink: 'syz.4.1071': attribute type 1 has an invalid length. [ 214.007770][ T9884] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.020047][T10153] netlink: 'syz.4.1071': attribute type 3 has an invalid length. [ 214.020687][ T9884] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.028097][T10153] __nla_validate_parse: 2 callbacks suppressed [ 214.028115][T10153] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1071'. [ 214.055856][ T9884] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.094131][T10153] NCSI netlink: No device for ifindex 0 [ 214.115899][T10163] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1073'. [ 214.130360][T10163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1073'. [ 214.190107][T10159] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1073'. [ 214.391337][ T5244] Bluetooth: hci2: command tx timeout [ 214.653847][ T1117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.687821][ T1117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.767056][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.786328][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.975868][T10192] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1077'. [ 215.598552][ T3979] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 215.668120][T10225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.707981][T10214] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.868181][T10231] netlink: 'syz.4.1085': attribute type 1 has an invalid length. [ 215.891620][T10231] netlink: 'syz.4.1085': attribute type 2 has an invalid length. [ 216.166481][T10249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1089'. [ 216.188898][T10249] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.1089'. [ 216.213767][T10249] openvswitch: netlink: Actions may not be safe on all matching packets [ 216.479691][ T1117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.499847][ T1117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.742551][T10274] netlink: 'syz.3.1095': attribute type 1 has an invalid length. [ 216.751389][T10274] netlink: 1136 bytes leftover after parsing attributes in process `syz.3.1095'. [ 216.760704][T10274] netlink: 'syz.3.1095': attribute type 1 has an invalid length. [ 216.768664][T10274] netlink: 8192 bytes leftover after parsing attributes in process `syz.3.1095'. [ 216.840491][T10280] batadv_slave_1: entered promiscuous mode [ 216.848187][T10279] batadv_slave_1: left promiscuous mode [ 216.964014][T10283] netlink: 'syz.3.1098': attribute type 1 has an invalid length. [ 216.973261][T10283] netlink: 'syz.3.1098': attribute type 4 has an invalid length. [ 216.982868][T10283] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.1098'. [ 217.078958][ T1117] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.106629][T10283] netlink: 'syz.3.1098': attribute type 1 has an invalid length. [ 217.125422][T10283] netlink: 'syz.3.1098': attribute type 4 has an invalid length. [ 218.371897][ T1117] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.509368][T10310] tls_set_device_offload_rx: netdev not found [ 218.518286][T10311] xt_l2tp: v2 doesn't support IP mode [ 218.593989][ T1117] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.626565][ T4624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 218.647424][ T4624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 218.655705][ T4624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 218.666218][ T4624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 218.674664][ T4624] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 218.684258][ T4624] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 218.867850][ T1117] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.272326][T10330] __nla_validate_parse: 1 callbacks suppressed [ 219.272347][T10330] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1107'. [ 219.360031][ T1117] bridge_slave_1: left allmulticast mode [ 219.373877][ T1117] bridge_slave_1: left promiscuous mode [ 219.396012][ T1117] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.414852][ T1117] bridge_slave_0: left allmulticast mode [ 219.425091][T10339] netlink: 'syz.3.1111': attribute type 2 has an invalid length. [ 219.426790][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 219.442345][T10339] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1111'. [ 219.447659][ T1117] bridge_slave_0: left promiscuous mode [ 219.458745][ T1117] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.812429][ T5244] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 219.825049][ T5244] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 219.842991][ T5244] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 219.867177][ T5244] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 219.875244][ T5244] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 219.887635][ T5244] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 220.258937][ T1117] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.273423][ T1117] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.287823][ T1117] bond0 (unregistering): Released all slaves [ 220.470829][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 220.621359][T10312] chnl_net:caif_netlink_parms(): no params data found [ 220.790596][ T5244] Bluetooth: hci2: command tx timeout [ 221.363506][ T1117] hsr_slave_0: left promiscuous mode [ 221.369758][ T1117] hsr_slave_1: left promiscuous mode [ 221.377830][ T1117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.408196][ T1117] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.422709][ T1117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.436977][ T1117] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.505914][ T1117] veth1_macvtap: left promiscuous mode [ 221.514636][ T1117] veth0_macvtap: left promiscuous mode [ 221.521072][ T1117] veth1_vlan: left promiscuous mode [ 221.526593][ T1117] veth0_vlan: left promiscuous mode [ 222.000027][ T5244] Bluetooth: hci3: command tx timeout [ 222.219708][ T1117] team0 (unregistering): Port device team_slave_1 removed [ 222.271943][ T1117] team0 (unregistering): Port device team_slave_0 removed [ 222.727852][T10415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1125'. [ 222.755294][T10312] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.770442][T10312] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.788281][T10312] bridge_slave_0: entered allmulticast mode [ 222.799164][T10312] bridge_slave_0: entered promiscuous mode [ 222.875299][ T5244] Bluetooth: hci2: command tx timeout [ 222.890574][T10312] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.898360][T10312] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.912010][T10312] bridge_slave_1: entered allmulticast mode [ 222.919607][T10312] bridge_slave_1: entered promiscuous mode [ 222.994258][T10439] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1132'. [ 223.164761][T10312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.227424][T10439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1132'. [ 223.282359][T10439] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1132'. [ 223.361213][T10439] ipvlan2: entered allmulticast mode [ 223.409286][T10439] veth0_vlan: entered allmulticast mode [ 223.460631][T10312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.485879][T10463] x_tables: duplicate underflow at hook 3 [ 223.498140][T10348] chnl_net:caif_netlink_parms(): no params data found [ 223.607781][T10312] team0: Port device team_slave_0 added [ 223.647251][T10312] team0: Port device team_slave_1 added [ 223.839685][T10312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.869617][T10312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.928242][T10312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.975084][T10489] IPVS: set_ctl: invalid protocol: 137 172.20.20.42:20004 [ 224.070523][ T5244] Bluetooth: hci3: command tx timeout [ 224.073940][T10312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.087492][T10312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.122954][T10312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.347725][T10312] hsr_slave_0: entered promiscuous mode [ 224.354943][T10312] hsr_slave_1: entered promiscuous mode [ 224.362283][T10312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.378756][T10312] Cannot create hsr debugfs directory [ 224.440545][T10348] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.455582][T10348] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.468358][T10348] bridge_slave_0: entered allmulticast mode [ 224.481749][T10348] bridge_slave_0: entered promiscuous mode [ 224.496734][T10348] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.504785][T10348] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.512261][T10348] bridge_slave_1: entered allmulticast mode [ 224.519639][T10348] bridge_slave_1: entered promiscuous mode [ 224.661444][T10348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.697432][T10348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.705825][T10509] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1143'. [ 224.845269][T10348] team0: Port device team_slave_0 added [ 224.874269][T10348] team0: Port device team_slave_1 added [ 224.949945][ T4624] Bluetooth: hci2: command tx timeout [ 225.101132][T10348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.123983][T10348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.181205][T10348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.192056][T10525] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1145'. [ 225.192083][T10525] netlink: 'syz.0.1145': attribute type 9 has an invalid length. [ 225.305348][T10348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.336384][T10348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.407738][T10348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.442208][T10538] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1147'. [ 225.725178][T10348] hsr_slave_0: entered promiscuous mode [ 225.771270][T10348] hsr_slave_1: entered promiscuous mode [ 225.790427][T10348] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.798040][T10348] Cannot create hsr debugfs directory [ 225.832658][T10548] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1150'. [ 226.150073][ T4624] Bluetooth: hci3: command tx timeout [ 226.305661][T10559] lo: entered allmulticast mode [ 226.388494][T10562] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1153'. [ 226.481156][T10564] netlink: 'syz.3.1154': attribute type 1 has an invalid length. [ 226.554985][T10312] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 226.660851][T10348] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.694514][T10348] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 226.746576][T10312] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 226.784795][T10312] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 226.827489][T10312] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 226.902842][T10348] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.920629][T10348] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 227.030087][ T4624] Bluetooth: hci2: command tx timeout [ 227.245177][T10348] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.262750][T10348] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 227.326645][T10606] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1161'. [ 227.532249][T10348] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.572643][T10348] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 227.618291][T10613] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 227.674649][T10619] netlink: 'syz.3.1164': attribute type 2 has an invalid length. [ 227.915297][T10312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.064917][T10626] netlink: 'syz.0.1165': attribute type 30 has an invalid length. [ 228.118689][T10312] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.151984][T10348] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 228.223578][T10348] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 228.241611][ T4624] Bluetooth: hci3: command 0x0419 tx timeout [ 228.337497][ T129] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.344788][ T129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.379350][T10348] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 228.443014][ T129] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.450341][ T129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.531689][T10348] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 228.588147][T10654] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1171'. [ 229.063808][T10673] netlink: 'syz.3.1174': attribute type 14 has an invalid length. [ 229.131524][T10348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.271644][T10680] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1176'. [ 229.311845][T10688] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1177'. [ 229.415858][T10677] netlink: 'syz.4.1176': attribute type 8 has an invalid length. [ 229.477549][T10312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.547425][T10348] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.646689][ T1117] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.653932][ T1117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.714564][ T1117] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.721782][ T1117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.804980][T10312] veth0_vlan: entered promiscuous mode [ 229.854018][T10705] netlink: 'syz.3.1182': attribute type 1 has an invalid length. [ 229.862243][T10312] veth1_vlan: entered promiscuous mode [ 229.904708][T10711] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1183'. [ 229.915681][T10710] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1184'. [ 230.018659][T10312] veth0_macvtap: entered promiscuous mode [ 230.084008][T10312] veth1_macvtap: entered promiscuous mode [ 230.139754][T10312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.160240][T10312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.171477][T10312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.190102][T10723] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1186'. [ 230.199185][T10723] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1186'. [ 230.200359][T10312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.234881][T10723] cannot load conntrack support for proto=3 [ 230.260356][T10312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.282082][T10312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.298911][T10312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.314513][ T4624] Bluetooth: hci3: command 0x0419 tx timeout [ 230.333557][T10312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.346972][T10733] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1188'. [ 230.368799][T10312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.407256][T10312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.418106][T10312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.428348][T10312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.439592][T10312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.450058][T10312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.466017][T10312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.478927][T10312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.492933][T10312] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.548427][T10312] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.588875][T10312] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.637611][T10312] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.925092][T10747] bond0: (slave vlan3): Opening slave failed [ 230.984359][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.006932][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.050409][T10348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.104453][ T2496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.130486][ T2496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.207003][T10348] veth0_vlan: entered promiscuous mode [ 231.234844][T10348] veth1_vlan: entered promiscuous mode [ 231.273644][T10756] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.1195'. [ 231.286663][T10756] netlink: 183228 bytes leftover after parsing attributes in process `syz.3.1195'. [ 231.339081][T10753] netlink: 'syz.3.1195': attribute type 11 has an invalid length. [ 231.348426][ T47] IPVS: starting estimator thread 0... [ 231.361111][T10753] netlink: 211132 bytes leftover after parsing attributes in process `syz.3.1195'. [ 231.429190][T10348] veth0_macvtap: entered promiscuous mode [ 231.448537][T10348] veth1_macvtap: entered promiscuous mode [ 231.460131][T10758] IPVS: using max 16 ests per chain, 38400 per kthread [ 231.522510][T10760] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1197'. [ 231.523081][T10348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.551956][T10348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.567476][T10348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.578624][T10348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.588881][T10348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.599656][T10348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.617435][T10348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.630118][T10348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.640974][T10348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.652006][T10348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.664612][T10348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.676798][T10762] netlink: 'syz.4.1198': attribute type 4 has an invalid length. [ 231.775176][T10348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.800053][T10348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.826318][T10348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.858144][T10348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.874231][T10348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.885085][T10348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.895233][T10348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.909182][T10348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.928473][T10348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.956034][T10774] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1200'. [ 232.002035][T10348] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.011474][T10348] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.020499][T10348] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.029637][T10348] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.052330][T10776] IPVS: set_ctl: invalid protocol: 108 172.20.20.170:20000 [ 232.252161][ T3979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.274033][ T3979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.352699][ T2496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.373892][T10788] x_tables: duplicate underflow at hook 3 [ 232.374014][ T2496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.390244][ T5244] Bluetooth: hci3: command 0x0419 tx timeout [ 232.843993][T10806] ɶƣ0GC¦: entered promiscuous mode [ 232.966850][T10812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.002651][T10812] team0: Port device bond0 added [ 233.123827][ T3027] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.643736][ T3027] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.708203][ T3027] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.795088][ T3027] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.906810][ T3027] bridge_slave_1: left allmulticast mode [ 233.912873][ T3027] bridge_slave_1: left promiscuous mode [ 233.919535][ T3027] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.931873][ T3027] bridge_slave_0: left allmulticast mode [ 233.937532][ T3027] bridge_slave_0: left promiscuous mode [ 233.943779][ T3027] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.678155][T10836] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 234.711700][ T4624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 234.721654][ T4624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 234.727897][T10836] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 234.743113][ T4624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 234.766082][ T4624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 234.778405][ T4624] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 234.787035][ T3027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.792184][ T4624] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 234.817051][ T3027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.834850][ T3027] bond0 (unregistering): Released all slaves [ 235.627394][T10837] chnl_net:caif_netlink_parms(): no params data found [ 236.049477][ T3027] hsr_slave_0: left promiscuous mode [ 236.079335][T10897] __nla_validate_parse: 3 callbacks suppressed [ 236.079368][T10897] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1231'. [ 236.096993][ T3027] hsr_slave_1: left promiscuous mode [ 236.109303][ T3027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.117398][ T3027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.118296][T10898] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1232'. [ 236.135580][ T3027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.143625][T10898] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 236.146734][ T3027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.196543][ T3027] veth1_macvtap: left promiscuous mode [ 236.202466][ T3027] veth0_macvtap: left promiscuous mode [ 236.208177][ T3027] veth1_vlan: left promiscuous mode [ 236.213745][ T3027] veth0_vlan: left promiscuous mode [ 236.654602][T10910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1235'. [ 236.870347][ T4624] Bluetooth: hci2: command tx timeout [ 236.928481][ T3027] team0 (unregistering): Port device team_slave_1 removed [ 236.981413][ T3027] team0 (unregistering): Port device team_slave_0 removed [ 237.463793][T10883] sit0: entered promiscuous mode [ 237.482421][T10883] netlink: 'syz.0.1229': attribute type 1 has an invalid length. [ 237.500459][T10883] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1229'. [ 237.745959][T10917] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1238'. [ 237.862311][T10837] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.880010][T10837] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.887625][T10837] bridge_slave_0: entered allmulticast mode [ 237.910709][T10837] bridge_slave_0: entered promiscuous mode [ 237.957040][T10837] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.971140][T10837] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.978646][T10837] bridge_slave_1: entered allmulticast mode [ 237.989616][T10837] bridge_slave_1: entered promiscuous mode [ 238.427373][T10837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.451265][T10837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.609364][T10837] team0: Port device team_slave_0 added [ 238.649431][T10837] team0: Port device team_slave_1 added [ 238.854089][T10837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.873785][T10837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.946025][T10970] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1248'. [ 238.948013][T10837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.956374][ T4624] Bluetooth: hci2: command tx timeout [ 239.051574][T10837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.098477][T10837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.199710][T10837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.302585][T10977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1249'. [ 239.321747][T10977] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1249'. [ 239.486729][T10837] hsr_slave_0: entered promiscuous mode [ 239.506782][T10837] hsr_slave_1: entered promiscuous mode [ 239.539914][T10837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.557817][T10837] Cannot create hsr debugfs directory [ 239.601433][T10991] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 239.612956][T10991] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 239.622641][T10991] gretap1: entered promiscuous mode [ 239.627907][T10991] gretap1: entered allmulticast mode [ 239.638891][T10995] bond0: entered promiscuous mode [ 239.645000][T10995] bond_slave_0: entered promiscuous mode [ 239.655010][T10995] bond_slave_1: entered promiscuous mode [ 239.691859][T10998] tipc: Started in network mode [ 239.720599][T10998] tipc: Node identity 1, cluster identity 4711 [ 239.732040][T10998] tipc: Node number set to 1 [ 239.828112][T11007] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1258'. [ 239.858430][T11003] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1256'. [ 240.401091][T11040] netlink: 'syz.4.1265': attribute type 8 has an invalid length. [ 240.488318][T11042] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 240.563523][T11047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.620822][T11047] team0: Port device bond0 added [ 240.833895][T11064] netlink: 'syz.1.1270': attribute type 21 has an invalid length. [ 241.031711][ T4624] Bluetooth: hci2: command tx timeout [ 241.516721][T11090] netlink: 'syz.3.1278': attribute type 21 has an invalid length. [ 241.535866][T11090] __nla_validate_parse: 2 callbacks suppressed [ 241.535886][T11090] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1278'. [ 241.553028][T11091] netlink: 'syz.0.1275': attribute type 21 has an invalid length. [ 241.563126][T11091] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1275'. [ 241.584404][T11090] netlink: 'syz.3.1278': attribute type 5 has an invalid length. [ 241.592812][T11095] tipc: Started in network mode [ 241.601219][T11095] tipc: Node identity ac1414aa, cluster identity 4711 [ 241.618480][T11095] tipc: Enabled bearer , priority 10 [ 241.625905][T11090] openvswitch: : Dropping previously announced user features [ 241.641820][T11091] tipc: Disabling bearer [ 241.655598][T11097] IPVS: set_ctl: invalid protocol: 173 172.20.20.187:20003 [ 241.656566][T10837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 241.724701][T11091] bond_slave_0: entered promiscuous mode [ 241.734684][T10837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 241.787035][T10837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 241.830587][T10837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 241.974597][T11105] bond0: left promiscuous mode [ 241.990298][T11105] bond_slave_0: left promiscuous mode [ 242.010889][T11105] bond_slave_1: left promiscuous mode [ 242.253061][T11114] netlink: 'syz.1.1282': attribute type 10 has an invalid length. [ 242.381784][T11114] team0: Port device netdevsim0 added [ 242.427459][T10837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.534775][T10837] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.579207][ T2496] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.586445][ T2496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.634770][T11133] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1286'. [ 242.673901][ T129] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.681136][ T129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.937992][T11147] netlink: 'syz.0.1291': attribute type 105 has an invalid length. [ 242.953581][T11148] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1290'. [ 242.969981][T11147] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1291'. [ 243.111397][ T4624] Bluetooth: hci2: command tx timeout [ 243.316727][T11164] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1295'. [ 243.528633][T11175] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1298'. [ 243.592745][T11183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1299'. [ 243.611456][T10837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.789673][T10837] veth0_vlan: entered promiscuous mode [ 243.853159][T10837] veth1_vlan: entered promiscuous mode [ 243.891452][T11196] netlink: 'syz.1.1304': attribute type 21 has an invalid length. [ 244.044129][T10837] veth0_macvtap: entered promiscuous mode [ 244.086455][T10837] veth1_macvtap: entered promiscuous mode [ 244.166957][T10837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.200518][T10837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.241089][T10837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.282070][T10837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.304672][T10837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.339123][T10837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.367249][T10837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.381347][T10837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.407660][T10837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.434282][T10837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.462260][T10837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.559305][T11218] veth0_vlan: left promiscuous mode [ 244.581891][T11218] veth0_vlan: entered promiscuous mode [ 244.609624][T10837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.649964][T10837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.677514][T10837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.704328][T10837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.723428][T10837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.743320][T10837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.753609][T10837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.764689][T10837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.784848][T10837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.873832][T10837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.892470][T10837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.916332][T10837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.935496][T10837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.960320][T11239] netlink: 'syz.0.1313': attribute type 21 has an invalid length. [ 244.991478][T11239] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1313'. [ 245.043345][T11239] IPVS: set_ctl: invalid protocol: 1 10.1.1.0:20002 [ 245.305454][ T3027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.337305][ T3027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.434986][ T3027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.455209][ T3027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.588319][T11266] syz_tun: entered promiscuous mode [ 245.638499][T11265] syz_tun: left promiscuous mode [ 245.981831][T11278] syzkaller0: entered promiscuous mode [ 245.987388][T11278] syzkaller0: entered allmulticast mode [ 246.371782][T11299] ax25_connect(): syz.0.1328 uses autobind, please contact jreuter@yaina.de [ 246.526795][T11271] infiniband syz2: set active [ 246.553356][T11271] infiniband syz2: added veth0_vlan [ 246.560894][T11309] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1330'. [ 246.597062][T11271] syz2: rxe_create_cq: returned err = -12 [ 246.640345][T11271] infiniband syz2: Couldn't create ib_mad CQ [ 246.646718][T11271] infiniband syz2: Couldn't open port 1 [ 246.700794][T11316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1330'. [ 246.734235][T11271] RDS/IB: syz2: added [ 246.763493][T11271] smc: adding ib device syz2 with port count 1 [ 246.791667][T11271] smc: ib device syz2 port 1 has pnetid [ 246.891653][T11319] openvswitch: : Dropping previously announced user features [ 247.308910][T11333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1337'. [ 247.438649][T11335] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1338'. [ 247.603491][ T3027] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 247.954899][ T1117] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.182562][ T1117] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.264749][ T1117] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.342828][ T1117] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.535341][ T1117] bridge_slave_1: left allmulticast mode [ 248.550922][ T1117] bridge_slave_1: left promiscuous mode [ 248.556746][ T1117] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.585158][ T1117] bridge_slave_0: left allmulticast mode [ 248.599925][ T1117] bridge_slave_0: left promiscuous mode [ 248.605744][ T1117] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.578990][ T1117] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.593832][ T1117] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.608988][ T1117] bond0 (unregistering): Released all slaves [ 249.770916][ T5244] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 249.801594][ T5244] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 249.833194][ T5244] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 249.835219][T11371] netlink: 'syz.1.1345': attribute type 10 has an invalid length. [ 249.853307][ T5244] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 249.870093][ T5244] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 249.870887][T11371] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1345'. [ 249.886611][ T5244] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 249.922530][T11371] bridge0: port 3(dummy0) entered blocking state [ 249.929199][T11371] bridge0: port 3(dummy0) entered disabled state [ 249.948221][T11371] dummy0: entered allmulticast mode [ 249.999446][T11371] dummy0: entered promiscuous mode [ 250.009396][T11371] bridge0: port 3(dummy0) entered blocking state [ 250.015942][T11371] bridge0: port 3(dummy0) entered forwarding state [ 250.081850][T11392] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1349'. [ 250.108895][T11392] €Â: renamed from bridge_slave_0 [ 250.265656][T11388] netlink: 'syz.4.1348': attribute type 10 has an invalid length. [ 250.331651][T11388] team0: Port device netdevsim0 added [ 250.349743][T11396] tipc: Enabled bearer , priority 10 [ 250.365693][T11406] netlink: 'syz.3.1352': attribute type 1 has an invalid length. [ 250.372399][T11398] netlink: 'syz.4.1348': attribute type 10 has an invalid length. [ 250.396882][T11406] netlink: 9328 bytes leftover after parsing attributes in process `syz.3.1352'. [ 250.411751][T11406] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1352'. [ 250.432663][T11406] netlink: 'syz.3.1352': attribute type 1 has an invalid length. [ 250.485523][T11398] team0: Port device netdevsim0 removed [ 250.492741][T11415] openvswitch: netlink: Message has 8 unknown bytes. [ 250.520201][T11398] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 250.599971][T11415] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1354'. [ 250.713050][T11425] netlink: 308 bytes leftover after parsing attributes in process `syz.1.1354'. [ 251.150187][T11442] netlink: 'syz.0.1359': attribute type 4 has an invalid length. [ 251.323607][T11441] pim6reg1: entered promiscuous mode [ 251.329199][T11441] pim6reg1: entered allmulticast mode [ 251.463158][ T1117] hsr_slave_0: left promiscuous mode [ 251.503422][ T1117] hsr_slave_1: left promiscuous mode [ 251.514519][ T1117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.522482][ T1117] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.537083][ T1117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.550540][ T1117] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.578483][T11457] __nla_validate_parse: 1 callbacks suppressed [ 251.578503][T11457] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1362'. [ 251.635202][ T1117] veth1_macvtap: left promiscuous mode [ 251.644518][ T1117] veth0_macvtap: left promiscuous mode [ 251.652552][ T1117] veth1_vlan: left promiscuous mode [ 251.658565][ T1117] veth0_vlan: left promiscuous mode [ 251.990324][ T5244] Bluetooth: hci2: command tx timeout [ 252.277473][ T1117] team0 (unregistering): Port device team_slave_1 removed [ 252.325285][ T1117] team0 (unregistering): Port device team_slave_0 removed [ 252.947017][T11458] team0: Port device vlan2 added [ 253.241086][T11477] cannot load conntrack support for proto=3 [ 253.269894][T11480] netlink: 'syz.4.1369': attribute type 1 has an invalid length. [ 253.300171][T11480] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1369'. [ 253.324453][T11375] chnl_net:caif_netlink_parms(): no params data found [ 253.683511][T11495] bond0: (slave bond_slave_0): Error -28 calling ndo_bpf [ 253.713552][T11501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1374'. [ 253.946049][T11375] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.961381][T11375] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.978861][T11517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.978936][T11375] bridge_slave_0: entered allmulticast mode [ 254.028898][T11375] bridge_slave_0: entered promiscuous mode [ 254.068427][T11375] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.076059][ T5244] Bluetooth: hci2: command tx timeout [ 254.092993][T11375] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.104683][T11375] bridge_slave_1: entered allmulticast mode [ 254.112773][T11375] bridge_slave_1: entered promiscuous mode [ 254.259463][T11375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.304365][T11375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.425889][T11375] team0: Port device team_slave_0 added [ 254.461741][T11375] team0: Port device team_slave_1 added [ 254.597097][T11375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.614995][T11375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.660513][T11375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.690720][T11543] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1384'. [ 254.753426][T11375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.774552][T11375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.816661][T11375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.042562][T11375] hsr_slave_0: entered promiscuous mode [ 255.066288][T11375] hsr_slave_1: entered promiscuous mode [ 255.106223][T11375] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 255.129924][T11375] Cannot create hsr debugfs directory [ 255.318597][T11580] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1392'. [ 255.341485][T11587] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1395'. [ 255.371896][T11587] x_tables: duplicate underflow at hook 2 [ 255.913867][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.149968][ T5244] Bluetooth: hci2: command tx timeout [ 256.758860][T11626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1404'. [ 256.787873][T11626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1404'. [ 256.899134][T11629] IPVS: set_ctl: invalid protocol: 1 224.0.0.2:0 [ 257.073761][T11634] can: request_module (can-proto-0) failed. [ 257.111818][T11638] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1407'. [ 257.144814][T11639] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1406'. [ 257.355940][T11654] xt_TCPMSS: Only works on TCP SYN packets [ 257.376219][T11634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1407'. [ 257.487725][T11658] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1410'. [ 257.561988][T11667] netlink: 'syz.1.1411': attribute type 12 has an invalid length. [ 257.572765][T11667] netlink: 197276 bytes leftover after parsing attributes in process `syz.1.1411'. [ 257.655401][T11664] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1410'. [ 257.724523][T11666] netlink: 'syz.1.1411': attribute type 12 has an invalid length. [ 257.751281][T11666] netlink: 197276 bytes leftover after parsing attributes in process `syz.1.1411'. [ 258.072811][T11375] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 258.104260][T11375] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 258.163039][T11375] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 258.201387][T11375] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 258.230290][ T5244] Bluetooth: hci2: command tx timeout [ 258.282692][T11694] dvmrp1: left allmulticast mode [ 258.341967][T11696] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1421'. [ 258.704475][T11375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.866205][T11722] netlink: 'syz.4.1427': attribute type 13 has an invalid length. [ 258.879378][T11722] netlink: 'syz.4.1427': attribute type 14 has an invalid length. [ 258.933857][T11722] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.943890][T11722] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.953616][T11722] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.962570][T11722] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.029697][T11722] vxlan0: entered promiscuous mode [ 259.075258][T11375] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.109310][ T129] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.116523][ T129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.187524][ T129] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.194753][ T129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.412891][T11375] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 259.445209][T11750] ip6t_srh: unknown srh invflags 5F00 [ 259.501674][T11750] ip6t_srh: unknown srh invflags 5F00 [ 259.817617][T11774] tipc: Started in network mode [ 259.849373][T11774] tipc: Node identity ac1414aa, cluster identity 4711 [ 259.881936][T11774] tipc: Enabled bearer , priority 10 [ 259.981389][T11375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.159485][T11375] veth0_vlan: entered promiscuous mode [ 260.200548][T11375] veth1_vlan: entered promiscuous mode [ 260.212266][T11792] erspan0: vlans aren't supported yet for dev_uc|mc_add() [ 260.283711][T11375] veth0_macvtap: entered promiscuous mode [ 260.313741][T11375] veth1_macvtap: entered promiscuous mode [ 260.360984][T11375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.400077][T11375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.415607][T11375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.436779][T11375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.449402][T11805] raw_sendmsg: syz.3.1452 forgot to set AF_INET. Fix it! [ 260.457338][T11375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.497242][T11375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.516714][T11375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.527643][T11375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.550828][T11375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.575985][T11375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.613898][T11375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.636395][T11817] ieee802154 phy0 wpan0: encryption failed: -90 [ 260.647550][T11805] netem: incorrect gi model size [ 260.658509][T11805] netem: change failed [ 260.673852][T11375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.684664][T11375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.695317][T11375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.706896][T11375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.721833][T11375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.739923][T11375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.759931][T11375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.781238][T11375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.794533][T11375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.893342][T11825] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 260.945226][T11375] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.959873][T11375] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.979052][T11375] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.999434][T11375] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.001947][ T9107] tipc: Node number set to 2886997162 [ 261.208702][T11837] dvmrp1: entered allmulticast mode [ 261.261566][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.282387][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.347591][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.366376][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.681775][T11863] tipc: Can't bind to reserved service type 0 [ 261.712602][T11860] geneve2: entered promiscuous mode [ 261.724906][T11860] geneve2: entered allmulticast mode [ 262.368966][T11891] __nla_validate_parse: 9 callbacks suppressed [ 262.368988][T11891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1477'. [ 263.206428][T11924] bond0: (slave bond_slave_0): Error -28 calling ndo_bpf [ 263.559034][T11935] syzkaller1: entered promiscuous mode [ 263.574928][T11935] syzkaller1: entered allmulticast mode [ 263.663173][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.217517][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.288697][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.369209][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.489055][ T36] bridge_slave_1: left allmulticast mode [ 264.499430][ T36] bridge_slave_1: left promiscuous mode [ 264.506199][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.516044][ T36] bridge_slave_0: left allmulticast mode [ 264.522408][ T36] bridge_slave_0: left promiscuous mode [ 264.528106][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.931139][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.944336][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.957354][ T36] bond0 (unregistering): Released all slaves [ 265.057011][T11948] xt_l2tp: v2 tid > 0xffff: 150994944 [ 265.084103][T11944] team0: Device bridge0 is up. Set it down before adding it as a team port [ 265.264187][T11959] netlink: 'syz.1.1498': attribute type 3 has an invalid length. [ 265.275693][T11959] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1498'. [ 265.390309][T11960] netlink: 'syz.3.1499': attribute type 10 has an invalid length. [ 265.399893][T11960] bridge0: port 3(dummy0) entered blocking state [ 265.406387][T11960] bridge0: port 3(dummy0) entered forwarding state [ 265.413403][T11960] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.420725][T11960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.540484][T11960] bridge0: port 3(dummy0) entered disabled state [ 265.547122][T11960] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.749241][ T4624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 265.763474][ T4624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 265.774769][ T4624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 265.786094][ T4624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 265.796349][T11980] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1504'. [ 265.813097][ T4624] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 265.823376][ T4624] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 266.000090][T11992] IPVS: sh: TCP 172.20.20.170:0 - no destination available [ 266.214878][T12002] netlink: 'syz.3.1510': attribute type 26 has an invalid length. [ 266.272249][T12004] netlink: 'syz.4.1511': attribute type 32 has an invalid length. [ 266.620019][T12010] netlink: 'syz.4.1514': attribute type 1 has an invalid length. [ 266.657371][T12010] netlink: 'syz.4.1514': attribute type 11 has an invalid length. [ 266.868027][T12015] netlink: 'syz.4.1514': attribute type 32 has an invalid length. [ 266.907300][T12015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1514'. [ 266.933930][T12015] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 267.074139][ T36] hsr_slave_0: left promiscuous mode [ 267.138743][ T36] hsr_slave_1: left promiscuous mode [ 267.160392][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.185293][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.203241][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.216265][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.278998][ T36] veth1_macvtap: left promiscuous mode [ 267.293870][ T36] veth0_macvtap: left promiscuous mode [ 267.299679][ T36] veth1_vlan: left promiscuous mode [ 267.306303][ T36] veth0_vlan: left promiscuous mode [ 267.913715][ T5244] Bluetooth: hci2: command tx timeout [ 267.934138][ T36] team0 (unregistering): Port device team_slave_1 removed [ 267.978696][ T36] team0 (unregistering): Port device team_slave_0 removed [ 268.947227][T11977] chnl_net:caif_netlink_parms(): no params data found [ 269.180396][T12065] ip6_vti0: entered promiscuous mode [ 269.186409][T12065] vlan0: entered promiscuous mode [ 269.207834][T12065] ip6_vti0: left promiscuous mode [ 269.357700][T12073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1530'. [ 269.575166][T11977] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.597193][T11977] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.617284][T11977] bridge_slave_0: entered allmulticast mode [ 269.628896][T11977] bridge_slave_0: entered promiscuous mode [ 269.676902][T11977] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.697079][T11977] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.712525][T11977] bridge_slave_1: entered allmulticast mode [ 269.728083][T11977] bridge_slave_1: entered promiscuous mode [ 269.956664][T12100] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1540'. [ 269.979101][T11977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.990641][ T5244] Bluetooth: hci2: command tx timeout [ 270.022054][T11977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.218840][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 270.264977][T11977] team0: Port device team_slave_0 added [ 270.293440][T11977] team0: Port device team_slave_1 added [ 270.402922][T11977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.423094][T11977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.488184][T11977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.515895][T11977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.540416][T11977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.652802][T11977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.882093][T11977] hsr_slave_0: entered promiscuous mode [ 270.920231][T11977] hsr_slave_1: entered promiscuous mode [ 270.980148][T11977] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 270.987929][T11977] Cannot create hsr debugfs directory [ 271.223407][T12150] xt_CT: You must specify a L4 protocol and not use inversions on it [ 271.540576][T12157] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 271.560735][T12157] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 271.680960][T12157] netlink: 'syz.3.1556': attribute type 5 has an invalid length. [ 272.036208][T12174] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1561'. [ 272.080121][ T4624] Bluetooth: hci2: command tx timeout [ 272.384285][T11977] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 272.441404][T11977] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 272.481203][T12187] sch_tbf: peakrate 32768 is lower than or equals to rate 1281593178885145793 ! [ 272.516653][T11977] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 272.550860][T11977] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 272.761991][T12202] bond1: Unknown bonding mode 6 for xdp xmit [ 272.768851][T12202] ------------[ cut here ]------------ [ 272.774420][T12202] WARNING: CPU: 1 PID: 12202 at drivers/net/bonding/bond_main.c:5541 bond_xdp_get_xmit_slave+0x519/0x690 [ 272.785724][T12202] Modules linked in: [ 272.789677][T12202] CPU: 1 UID: 0 PID: 12202 Comm: syz.4.1570 Not tainted 6.11.0-rc5-syzkaller-00156-gef4a99a0164e #0 [ 272.800580][T12202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 272.810911][T12202] RIP: 0010:bond_xdp_get_xmit_slave+0x519/0x690 [ 272.811015][T12206] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1569'. [ 272.817194][T12202] Code: be 90 13 00 00 48 c7 c2 80 5b 96 8c e8 90 31 13 fb eb 98 e8 f9 8f 36 fb 4c 89 e7 48 c7 c6 80 7a 96 8c 89 da e8 e8 f7 5b 05 90 <0f> 0b 90 eb a6 e8 dd 8f 36 fb 48 85 db 74 0a e8 d3 8f 36 fb e9 72 [ 272.817230][T12202] RSP: 0018:ffffc90009427848 EFLAGS: 00010246 [ 272.817256][T12202] RAX: de22775352bedc00 RBX: 0000000000000006 RCX: de22775352bedc00 [ 272.817275][T12202] RDX: ffffc900094c9000 RSI: 0000000000002991 RDI: 0000000000002992 [ 272.817292][T12202] RBP: ffffc90009427c60 R08: ffffffff8174013c R09: 1ffff92001284e84 [ 272.817310][T12202] R10: dffffc0000000000 R11: fffff52001284e85 R12: ffff888031128000 [ 272.817328][T12202] R13: ffff888031128000 R14: ffff888031128cc0 R15: dffffc0000000000 [ 272.817347][T12202] FS: 00007fe9393e56c0(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 272.817368][T12202] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 272.817385][T12202] CR2: 000000110c36ae75 CR3: 000000006b828000 CR4: 00000000003506f0 [ 272.817405][T12202] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 272.817420][T12202] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 272.817437][T12202] Call Trace: [ 272.817447][T12202] [ 272.817459][T12202] ? __warn+0x163/0x4e0 [ 272.817486][T12202] ? bond_xdp_get_xmit_slave+0x519/0x690 [ 272.843540][T11977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.846185][T12202] ? report_bug+0x2b3/0x500 [ 272.906840][T11977] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.907924][T12202] ? bond_xdp_get_xmit_slave+0x519/0x690 [ 272.907977][T12202] ? handle_bug+0x3e/0x70 [ 272.976331][T12202] ? exc_invalid_op+0x1a/0x50 [ 272.979066][T11977] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 272.981084][T12202] ? asm_exc_invalid_op+0x1a/0x20 [ 272.981131][T12202] ? __wake_up_klogd+0xcc/0x110 [ 272.981166][T12202] ? bond_xdp_get_xmit_slave+0x519/0x690 [ 272.981203][T12202] ? bond_xdp_get_xmit_slave+0x518/0x690 [ 272.981243][T12202] xdp_master_redirect+0x143/0x2d0 [ 273.013372][T11977] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 273.017954][T12202] bpf_test_run+0x8cf/0xa90 [ 273.017989][T12202] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 273.018022][T12202] ? bpf_test_run+0x370/0xa90 [ 273.043805][T12202] ? __pfx_bpf_test_run+0x10/0x10 [ 273.048915][T12202] ? _copy_from_user+0xa6/0xe0 [ 273.053793][T12202] ? bpf_test_init+0x15a/0x180 [ 273.058620][T12202] ? xdp_convert_md_to_buff+0x5b/0x330 [ 273.064167][T12202] bpf_prog_test_run_xdp+0x7e3/0x11b0 [ 273.066630][ T3027] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.069569][T12202] ? __pfx_lock_release+0x10/0x10 [ 273.069623][T12202] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 273.076832][ T3027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.081758][T12202] ? __fget_files+0x29/0x470 [ 273.098759][ T3027] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.099552][T12202] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 273.106749][ T3027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.112468][T12202] bpf_prog_test_run+0x33a/0x3b0 [ 273.112513][T12202] __sys_bpf+0x48d/0x810 [ 273.129059][T12202] ? __pfx___sys_bpf+0x10/0x10 [ 273.133920][T12202] ? __sys_connect+0x16b/0x310 [ 273.138753][T12202] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 273.144845][T12202] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 273.151280][T12202] ? do_syscall_64+0x100/0x230 [ 273.156092][T12202] __x64_sys_bpf+0x7c/0x90 [ 273.160601][T12202] do_syscall_64+0xf3/0x230 [ 273.165152][T12202] ? clear_bhb_loop+0x35/0x90 [ 273.169939][T12202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.175886][T12202] RIP: 0033:0x7fe938579eb9 [ 273.180479][T12202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.200168][T12202] RSP: 002b:00007fe9393e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 273.208640][T12202] RAX: ffffffffffffffda RBX: 00007fe938715f80 RCX: 00007fe938579eb9 [ 273.216718][T12202] RDX: 0000000000000050 RSI: 0000000020000040 RDI: 000000000000000a [ 273.224777][T12202] RBP: 00007fe9385e793e R08: 0000000000000000 R09: 0000000000000000 [ 273.232848][T12202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.240899][T12202] R13: 0000000000000000 R14: 00007fe938715f80 R15: 00007ffdca45c1a8 [ 273.248947][T12202] [ 273.252062][T12202] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 273.259372][T12202] CPU: 1 UID: 0 PID: 12202 Comm: syz.4.1570 Not tainted 6.11.0-rc5-syzkaller-00156-gef4a99a0164e #0 [ 273.270172][T12202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 273.280274][T12202] Call Trace: [ 273.283589][T12202] [ 273.286592][T12202] dump_stack_lvl+0x241/0x360 [ 273.291324][T12202] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.296573][T12202] ? __pfx__printk+0x10/0x10 [ 273.301216][T12202] ? vscnprintf+0x5d/0x90 [ 273.305597][T12202] panic+0x349/0x860 [ 273.309546][T12202] ? __warn+0x172/0x4e0 [ 273.313747][T12202] ? __pfx_panic+0x10/0x10 [ 273.318229][T12202] __warn+0x346/0x4e0 [ 273.322249][T12202] ? bond_xdp_get_xmit_slave+0x519/0x690 [ 273.328023][T12202] report_bug+0x2b3/0x500 [ 273.332407][T12202] ? bond_xdp_get_xmit_slave+0x519/0x690 [ 273.338101][T12202] handle_bug+0x3e/0x70 [ 273.342303][T12202] exc_invalid_op+0x1a/0x50 [ 273.346869][T12202] asm_exc_invalid_op+0x1a/0x20 [ 273.351859][T12202] RIP: 0010:bond_xdp_get_xmit_slave+0x519/0x690 [ 273.358145][T12202] Code: be 90 13 00 00 48 c7 c2 80 5b 96 8c e8 90 31 13 fb eb 98 e8 f9 8f 36 fb 4c 89 e7 48 c7 c6 80 7a 96 8c 89 da e8 e8 f7 5b 05 90 <0f> 0b 90 eb a6 e8 dd 8f 36 fb 48 85 db 74 0a e8 d3 8f 36 fb e9 72 [ 273.377788][T12202] RSP: 0018:ffffc90009427848 EFLAGS: 00010246 [ 273.383907][T12202] RAX: de22775352bedc00 RBX: 0000000000000006 RCX: de22775352bedc00 [ 273.392006][T12202] RDX: ffffc900094c9000 RSI: 0000000000002991 RDI: 0000000000002992 [ 273.400013][T12202] RBP: ffffc90009427c60 R08: ffffffff8174013c R09: 1ffff92001284e84 [ 273.408018][T12202] R10: dffffc0000000000 R11: fffff52001284e85 R12: ffff888031128000 [ 273.416027][T12202] R13: ffff888031128000 R14: ffff888031128cc0 R15: dffffc0000000000 [ 273.424047][T12202] ? __wake_up_klogd+0xcc/0x110 [ 273.428958][T12202] ? bond_xdp_get_xmit_slave+0x518/0x690 [ 273.434649][T12202] xdp_master_redirect+0x143/0x2d0 [ 273.439841][T12202] bpf_test_run+0x8cf/0xa90 [ 273.444391][T12202] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 273.450353][T12202] ? bpf_test_run+0x370/0xa90 [ 273.455084][T12202] ? __pfx_bpf_test_run+0x10/0x10 [ 273.460185][T12202] ? _copy_from_user+0xa6/0xe0 [ 273.465000][T12202] ? bpf_test_init+0x15a/0x180 [ 273.469817][T12202] ? xdp_convert_md_to_buff+0x5b/0x330 [ 273.475315][T12202] bpf_prog_test_run_xdp+0x7e3/0x11b0 [ 273.480733][T12202] ? __pfx_lock_release+0x10/0x10 [ 273.485814][T12202] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 273.491671][T12202] ? __fget_files+0x29/0x470 [ 273.496325][T12202] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 273.502169][T12202] bpf_prog_test_run+0x33a/0x3b0 [ 273.507164][T12202] __sys_bpf+0x48d/0x810 [ 273.511455][T12202] ? __pfx___sys_bpf+0x10/0x10 [ 273.516263][T12202] ? __sys_connect+0x16b/0x310 [ 273.521083][T12202] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 273.527116][T12202] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 273.533498][T12202] ? do_syscall_64+0x100/0x230 [ 273.538305][T12202] __x64_sys_bpf+0x7c/0x90 [ 273.542768][T12202] do_syscall_64+0xf3/0x230 [ 273.547317][T12202] ? clear_bhb_loop+0x35/0x90 [ 273.552049][T12202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.557995][T12202] RIP: 0033:0x7fe938579eb9 [ 273.562453][T12202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.582112][T12202] RSP: 002b:00007fe9393e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 273.590578][T12202] RAX: ffffffffffffffda RBX: 00007fe938715f80 RCX: 00007fe938579eb9 [ 273.598587][T12202] RDX: 0000000000000050 RSI: 0000000020000040 RDI: 000000000000000a [ 273.606597][T12202] RBP: 00007fe9385e793e R08: 0000000000000000 R09: 0000000000000000 [ 273.614697][T12202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.622709][T12202] R13: 0000000000000000 R14: 00007fe938715f80 R15: 00007ffdca45c1a8 [ 273.630735][T12202] [ 273.634135][T12202] Kernel Offset: disabled [ 273.638470][T12202] Rebooting in 86400 seconds..