last executing test programs: 46.65030886s ago: executing program 4 (id=253): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000300000000020000000000", @ANYRES32=0x0, @ANYRES32], 0x48) (async) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x8000, 0x800001}) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x4f}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 38.393510897s ago: executing program 4 (id=253): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000300000000020000000000", @ANYRES32=0x0, @ANYRES32], 0x48) (async) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x8000, 0x800001}) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x4f}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 29.629507188s ago: executing program 4 (id=253): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000300000000020000000000", @ANYRES32=0x0, @ANYRES32], 0x48) (async) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x8000, 0x800001}) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x4f}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.487559833s ago: executing program 4 (id=253): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000300000000020000000000", @ANYRES32=0x0, @ANYRES32], 0x48) (async) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x8000, 0x800001}) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x4f}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.487506868s ago: executing program 4 (id=253): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000300000000020000000000", @ANYRES32=0x0, @ANYRES32], 0x48) (async) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x8000, 0x800001}) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x4f}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.487470926s ago: executing program 4 (id=253): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000300000000020000000000", @ANYRES32=0x0, @ANYRES32], 0x48) (async) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x8000, 0x800001}) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x4f}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.71829284s ago: executing program 3 (id=1425): mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_devices(r0, &(0x7f0000000180)={'b', ' *:* ', 'rm\x00'}, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000280)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000000d}) close(r1) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x14, 0x229, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r4) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0xe8, r5, 0x200, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x16}}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010100}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xc}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x80}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffffd}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7b33}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.kill\x00', 0x275a, 0x0) (async) write$cgroup_devices(r0, &(0x7f0000000180)={'b', ' *:* ', 'rm\x00'}, 0x9) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) (async) epoll_create1(0x0) (async) epoll_create1(0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000280)) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000000d}) (async) close(r1) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x14, 0x229, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r4) (async) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0xe8, r5, 0x200, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x16}}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010100}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xc}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x80}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffffd}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7b33}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x800) (async) 2.575175209s ago: executing program 3 (id=1427): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x21, 0x2, 0x2) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0x0, 0x8, 0xfa04, 0xc0, 0x6c02, 0x178, 0x194, 0x194, 0x178, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'batadv_slave_1\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x10}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) r3 = socket$alg(0x26, 0x5, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x13, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x5}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) pipe(&(0x7f0000000180)) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x2, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r8}, &(0x7f0000000440), &(0x7f0000000480)=r7}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f00000000c0)={r8, &(0x7f0000000100), 0x20000000}, 0x20) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0xa6}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001b80)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x440c0}, 0x14000010) 2.391226987s ago: executing program 1 (id=1429): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0}) sendmsg$sock(r2, &(0x7f0000002c00)={0x0, 0x0, 0x0}, 0x40040) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x8001000000000000, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x368, 0x1d0, 0x11, 0x148, 0x0, 0x0, 0x2d0, 0x2a8, 0x2a8, 0x2d0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x188, 0x1d0, 0x4003, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@mcast2, [0xff, 0xff, 0xff000000, 0xff0000ff], @ipv4=@local, [0xff, 0xff, 0xff000000, 0xffffff00], @ipv6=@mcast2, [0xffffffff, 0xff000000, 0xff], @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0x0, 0xffffff00, 0xff000000], 0x7f, 0x5, 0xc, 0x4e23, 0x4e23, 0x1ff, 0x4e24, 0x10, 0x82}, 0x141, 0x21}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) 2.283519114s ago: executing program 1 (id=1431): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000008622f64e863e59fce7aee80000002400128009000100626f6e64000000001406170000001300030000bb0800140000000000"], 0x44}}, 0x0) 2.206894101s ago: executing program 1 (id=1433): syz_emit_ethernet(0xc6, &(0x7f0000000280)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb8, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x27, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @dev, {[@cipso={0x86, 0x49, 0x0, [{0x0, 0x5, "66d281"}, {0x0, 0x11, "6f03057a91f875ccf5bd5d0a5b319a"}, {0x0, 0x10, "6253659c41d7cea461f45f9d37fa"}, {0x0, 0x3, "91"}, {0x0, 0x12, "ccb3e82d2ea24a7b56eb3299d0d03ab6"}, {0x0, 0x8, "a33b7a6b9500"}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private}, {@private}, {}, {@remote}, {@private}, {@remote}, {@private}]}]}}}}}}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x20, @random="a380e37b9489", 'vcan0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x7fff, @loopback}, 0x1c) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448cb, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f00000004c0)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000040)="05000000010000", 0x7) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, 0x0, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000005580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r5, r5, 0x2f, 0x558, 0x0, @void, @value}, 0x20) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000140), 0x5) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x0, @empty, 'batadv_slave_1\x00'}}, 0x1e) 1.963411225s ago: executing program 1 (id=1437): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18696a13fa9ceaf7a3000000000000008500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r0}, 0x10) (async) r1 = socket$inet(0x2, 0x3, 0x47) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x59}]}]}]}, 0x34}}, 0x0) recvmmsg(r1, &(0x7f00000066c0), 0x4000331, 0x20010040, 0x0) 1.856237817s ago: executing program 1 (id=1439): syz_emit_ethernet(0x6e, &(0x7f0000000040)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x38, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0xe, 0xc2, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "7232407c80067615774fdbb46eb86cc8"}, @generic={0x0, 0x5, "111fad"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x40, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xc}]}}}}}}}}, 0x0) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010027bd7000000000000900020073797a30000000000800410072786500140033007465616d300000000000000000008000"], 0x38}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x300, r2, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x76b9}]}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xd58}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xde}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffff7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x87c}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_NODE={0x110, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ID={0x5d, 0x3, "dac1910d2b6a82207a8c0d455057e7e224f9c2390cc5b9f386917e59a7306190cc9cad83f3c1274b8b8e845581276e3d7d093362e93f86a5cf1c6e2a659776b9d5df60a821cf2622afc37660a0ef982f48a8f8fe8e8b753a4d"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b6d5f0246cc3a84e192d07952d7de39ccd2264c74c1a"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_ID={0x4b, 0x3, "318d1d9e64cae9d63f0f813b8adb720fba8500571132c733957169e3faa0ae3d36971dc4511aacfc6d265522ad2749175ffcc0d3457ca7864a8ba7060e6b30481324128f5d9c6f"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9620}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1fffc00}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}]}]}, 0x300}, 0x1, 0x0, 0x0, 0x20008015}, 0x80) (async, rerun: 64) socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendto$packet(r4, &(0x7f00000001c0)="57eca2a10a039d51672141878f5a79ac88682ce055ffe3edc46ae02eede977976bbec40963c6fc946d65898a699364d66b047240338837050929bf458f0652f226c539f9c8e7eb96254f3c6a387504ec626370b7914cc1f2a04a723bf46d4fc2c39e12de2b6ea420496b8f6710d2f0783a899407183c0e21a505ec2c25b02b2c1be4df450219112e1cadc6c93f0cb9e1", 0x90, 0x10, &(0x7f00000000c0)={0x11, 0x9, r5, 0x1, 0x2, 0x6, @remote}, 0x14) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes-aesni)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) (async, rerun: 32) r7 = socket$kcm(0x10, 0x2, 0x0) (rerun: 32) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x300}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x0) 1.846424441s ago: executing program 0 (id=1440): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r2, 0x2, 0x0, 0x0, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, 0x1, 0x8, 0x101}, 0x14}}, 0x0) 1.844738413s ago: executing program 2 (id=1441): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001e00010000d2c1138d6f949a1b0c"], 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1) 1.703387956s ago: executing program 0 (id=1442): syz_emit_ethernet(0x4a, &(0x7f0000000440)={@multicast, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, 0x0, 0x0) connect$pppl2tp(r1, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6000002, 0x8032, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f0000003a80)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e24, @loopback}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000240)='7', 0x1}], 0x1}}], 0x1, 0x2c000011) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmmsg(r1, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)='r', 0x1}, {&(0x7f0000000080)="1907d6f678777fc4968c5007a94cfba13ec5d0557c97c15bae9f8bff6dba34548d867402460d35e3c61d8b9df9ee3811f853015fee8cc337bf127070b1", 0x3d}, {&(0x7f0000000440)="0c76c6f3f4d77caed0136f8f51bb125e1cfc796ae0987f8bbdeacbbf2cd2332fcbfde7570bba313c8acf7c071ea3c22080fc54f9c3ddc290d024cacb2696e27ef22f6757866a48fe5d70ab326c1ea139c992f71e9ed62c6da73989dbe42657981ec91e407e22aaff268f38e3521b44396072f5caad6a2d6a08af440139849c60a29c1aefaf4c3ba351444acee9929e90e322f6084b7beaedba37b999f666cd84942f0a5e6bac84437d9d408215793a1078cfdad83ecf1cc5b60ae7ad7221faf050268d8e9d9692dc3b196c635e530eccb9ba8fce376541a961f029f16095e6", 0xdf}], 0x3}}], 0x3ffffffffffff77, 0x4000025) 1.667045134s ago: executing program 2 (id=1443): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x600, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081084e81f783db4cb9040a07080006007c09e8fc55a10a0015000600142603600e120800020081000401a8000100fcc0ffff000000fd035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'pim6reg1\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x8) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x4b, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000003c0)={'sit0\x00', 0x0, 0x7, 0x7800, 0xffffffff, 0x3, {{0x1e, 0x4, 0x1, 0x5, 0x78, 0x65, 0x0, 0x5, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}, @remote, {[@rr={0x7, 0x7, 0x68, [@multicast1]}, @cipso={0x86, 0x59, 0x3, [{0x1, 0x10, "181ee4f6de4b4b85da0223f32cce"}, {0x2, 0x3, "05"}, {0x2, 0xb, "be09700f7c40d18921"}, {0x5, 0x6, "f31374ec"}, {0x5, 0xd, "4933b0d4dd52fccec6720b"}, {0x7, 0x5, "7fe662"}, {0x0, 0xb, "616186fb83f67191cd"}, {0x6, 0x7, "15bc230950"}, {0x6, 0x2}, {0x7, 0x9, "49e044f6729bdc"}]}, @ra={0x94, 0x4}]}}}}}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000540)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x0, 0xc2, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x30, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r9, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_lsm={0x1d, 0x7, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, [@generic={0x2, 0x1, 0x4, 0x9, 0x1}, @alu={0x7, 0x0, 0x0, 0x1, 0xa, 0xfffffffffffffff4, 0x8}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x3}]}, &(0x7f0000000200)='syzkaller\x00', 0x9, 0xd2, &(0x7f0000000240)=""/210, 0x40f00, 0x18, '\x00', r6, 0x1b, r7, 0x8, &(0x7f00000004c0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0xf, 0x7, 0x9}, 0x10, r8, 0x0, 0x9, &(0x7f0000000840)=[r9], &(0x7f0000000880)=[{0x3, 0x1, 0x4, 0x7}, {0x1, 0x1, 0xc, 0xb}, {0x0, 0x1, 0x10, 0x6}, {0x1, 0x2, 0x10, 0xb}, {0x3, 0x4, 0x2, 0xa}, {0x2, 0x1, 0xe, 0x8}, {0x4, 0x2, 0xf, 0xa}, {0x2, 0x4, 0x0, 0x6}, {0x3, 0x1, 0x6, 0x8}], 0x10, 0x2, @void, @value}, 0x94) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r4, @ANYRESHEX=r5, @ANYRES8=r0, @ANYRES32=r5, @ANYRESOCT=r5], 0x40}}, 0x0) 1.610141679s ago: executing program 3 (id=1444): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="060000000000000071113600000000008510000002000000850000007600000095000810000000009500a50500000000ba71dac0af3020f1d90764993aca1aeddc3737a8820c32f6ab9d2c1b19ef1a77a3a5231407c9"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 1.515993347s ago: executing program 0 (id=1445): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r0, &(0x7f0000000180)={0x0, 0xffffffb1, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x3e9, 0x0, 0x0, 0x1, {0x4d, 0xfffffffc, 0x1, 0x0, 0x3, 0x40, 0x0, 0x7, 0x0, 0xff5, 0x7}}, 0x3c}}, 0x440c1) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socket(0x2, 0xa, 0x6d8a) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x0, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8}]}}]}, 0x3c}}, 0x0) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x50}}, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000008500000061000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x4}, 0x8) (async) sendto$inet6(r4, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000300)={'nicvf0\x00', @local}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x2}, 0x8) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x1f2f, 0x22, 0x0, &(0x7f0000000440)="9f44947021919559684010a408002d7a5d4153f0226dcacf36a548ab01b5cb16afce", 0x0, 0x0, 0x0, 0x0, 0xc0, 0x0, &(0x7f0000000580)="06000000e163a1e841f40df2cd0bf7059fa3e938181322c860b54b1365fdcf07b3b6cee510ae46cb0900001000000000f8d81d246c7ce9e66f813f64f1df9ff13a660358ca101ac28ae055fa04fa324e3a45ede8471c652ee3804f1c95fbb6f8d89dc0517ad21e3b517c0d343f47b91fe7bcea724fe3656487a7925a1c71daf5e46b870cfd506007fdba7370fd0054b201b8750b15ddffff77f438e2aa32c8fe6314ee831756f39012683df6ceb8e449ea96f260d17dd86ec4ac553a5b92bd84"}, 0x50) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2100000000000000280012800a00010076786c616e00000018000280140003"], 0x50}}, 0x0) 1.495863993s ago: executing program 3 (id=1446): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x3, 0x0, @loopback}], 0x2c) socket$inet_smc(0x2b, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) socket$qrtr(0x2a, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x11}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x34) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 1.400014136s ago: executing program 0 (id=1447): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x4, 0x4, 0xbf25, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x11, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3ff}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[r2, 0xffffffffffffffff, r2, r2, r2, r2], 0x0, 0x10, 0x2, @void, @value}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x4}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) 1.323485959s ago: executing program 2 (id=1448): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x2}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x40054) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x8, 0x1, 0x24}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 1.275571917s ago: executing program 3 (id=1449): r0 = socket$netlink(0x10, 0x3, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f00000000c0)={'filter\x00', 0x0, [0xf2deffd2, 0x3a, 0x6a1, 0x1, 0x6]}, &(0x7f0000000000)=0x54) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0) 1.25411744s ago: executing program 0 (id=1450): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040), 0x1c) sendmmsg$inet6(r0, &(0x7f0000008800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x840) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x5, 0xffffffffffffffff, 0x4}, 0x38) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000380)='\r\x00\x00\x00Y~V\x00\x00\x00\x00\x00\x00', 0xd) syz_emit_ethernet(0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000280068002f00069078e0000002ac14a220e4a106c1e2241e394cb0ad5a521e6121b827fe168ac6b99447503c7c53757743d0c53c491e5f1dde8c5814f72ccb22242f94027e1c3f0f3003f9c12b7e51a8aea1903641d9d2a3dab00a318fa0dfe9482cfcd21cd4cde5b43ecbe90a612043900919eb9c19cf0d08100e82f4338555015a6e050ad3fbe7141a0ecd29f0bb8881edc3f505312a35858be2c9c20c330216dfeabed449974637d2e74b93417157cddaa51d61d65817da6f1d4796e6468b77679ddac94a3dfe84884ded216ba5558017bbd96fa2bf6c0ddd0fd900000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5400000090780000"], 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'virt_wifi0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000000020000000000000000", @ANYRES32=r5], 0x20}}, 0xc040) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) unshare(0x20000400) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r8, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r9, @ANYRES32=r9], 0x44}}, 0x0) r10 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r10, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071118400000000008520000001000000850000000000000002000000010000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 1.187486763s ago: executing program 2 (id=1451): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b40)=""/4117, 0x1015}, {&(0x7f0000000100)=""/139, 0x8b}], 0x2}, 0x20) 1.089934297s ago: executing program 2 (id=1452): socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'tunl0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000340)='7', 0x1, 0x0, &(0x7f0000000040)={0x11, 0x8847, r2, 0x1, 0x0, 0x6, @dev}, 0x14) (async) sendto$packet(r1, &(0x7f0000000340)='7', 0x1, 0x0, &(0x7f0000000040)={0x11, 0x8847, r2, 0x1, 0x0, 0x6, @dev}, 0x14) socket$inet_dccp(0x2, 0x6, 0x0) (async) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x800000000010d, 0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xb79, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xb79, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="b400000000000000dd0a00000000561025734d7bc874000000000095000000000000002febf45d707c0d20798e064f2e71fac38b3d47d3eacaf75bf772505597dc5cc4c4d7275d3e8647e621c73650ab3119a3c476751c3dbd603a7e7a3e336c94fdc2322035b93c969a8165e320b3ba4982fba1f0725a39f041fd1ad425e13e334fd3a0ed0dc8e577196797817602f87c18961ee699a264"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x200000000000010d, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r7) listen(r0, 0x100) r8 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000200000018000000000000000000000000000090cd58562a15002c000064a6693bad890000000000180000000000000000000000000000001b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000e50000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e334185850000007300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) (async) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) socket$inet_dccp(0x2, 0x6, 0x0) (async) socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_mreqsrc(r8, 0x0, 0x78, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f00000000c0)=0xc) (async) getsockopt$inet_mreqsrc(r8, 0x0, 0x78, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f00000000c0)=0xc) 922.813278ms ago: executing program 0 (id=1453): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x2, 0x4}, 0x6) 759.304768ms ago: executing program 2 (id=1454): syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "922ff5", 0x28, 0x21, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, {[@srh={0x5e, 0x2, 0x4, 0x1, 0x3, 0x40, 0x7, [@private1]}], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "114f84", 0x0, "8e269c"}}}}}}}, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) (async, rerun: 32) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) (rerun: 32) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020200000a000000000000000000000003000600000000000200000000000000000000000000000002000100140000fbffffff0700000000030005000000000002"], 0x50}, 0x1, 0x7}, 0x0) write$bt_hci(r1, &(0x7f0000000140)=ANY=[], 0xc) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000100000fdffffff1815000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000450000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000010000000000000000000000791200000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 188.522936ms ago: executing program 3 (id=1455): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a0, 0x160, 0x308, 0xc0, 0x308, 0x0, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x1, 0x1}}}, {{@ip={@broadcast, @multicast2, 0xff000000, 0xffffffff, 'veth0_to_batadv\x00', 'tunl0\x00', {0xff}, {0xff}, 0x67, 0x0, 0x68}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x7, 0x9, @dev={0xac, 0x14, 0x14, 0xd}, 0x4e23}}}, {{@ip={@multicast1, @multicast1, 0xff, 0x0, 'hsr0\x00', 'vlan0\x00', {}, {}, 0x11, 0x1, 0x18}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x40, 0x4}}}, {{@ip={@local, @empty, 0xff000000, 0x0, 'veth1_to_batadv\x00', 'dvmrp1\x00', {}, {}, 0x32, 0x0, 0x72}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x65}}}, {{@ip={@rand_addr=0x64010100, @local, 0xffffffff, 0xff000000, 'veth1_vlan\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x5e, 0x1, 0x18}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x983, 0x400, 0xfed, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000400)={0x41, 0x0, 0x2}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000006c0)={0x40}, 0x10) sendmsg$tipc(r1, &(0x7f0000002300)={&(0x7f0000000040)=@name, 0x10, 0x0}, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000740)=0x8, 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_GET_TARGET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c020000", @ANYRES16=0x0, @ANYBLOB="0000000000000000000005000000e00005800c00028008000100000000000c00028000000100000000004c00028008000100000000000800010000000000080003000000000008000200000000000000020000000000080004000000000000000400000000000800040000000000080001"], 0x23c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r4) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r4) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r6, @ANYBLOB="010028bd7000fddbdf25040000000d000a0000000030323135340000000008"], 0xc0}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000004000)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@getneightbl={0x14, 0x42, 0x100, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24000000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r8) 0s ago: executing program 1 (id=1456): r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="8e"], 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f913", 0x11}], 0x1}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[], 0x34}}, 0x4008092) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x40, r2}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000001f40)={&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x5}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@rdma_dest={0x18, 0x114, 0x2, {0x3, 0xddc0}}], 0x18}, 0x0) r5 = socket(0xa, 0x1, 0x0) ioctl(r5, 0x8916, &(0x7f0000000000)) ioctl(r5, 0x8936, &(0x7f0000000000)) kernel console output (not intermixed with test programs): ridge_slave_1) entered disabled state [ 95.370015][ T7025] bridge_slave_1: entered allmulticast mode [ 95.377732][ T7025] bridge_slave_1: entered promiscuous mode [ 95.393648][ T7123] netlink: 'syz.0.534': attribute type 1 has an invalid length. [ 95.401337][ T7123] netlink: 9328 bytes leftover after parsing attributes in process `syz.0.534'. [ 95.411090][ T7123] netlink: 'syz.0.534': attribute type 2 has an invalid length. [ 95.430145][ T7129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.434877][ T7025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.472046][ T7025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.572821][ T7025] team0: Port device team_slave_0 added [ 95.581812][ T7025] team0: Port device team_slave_1 added [ 95.588728][ T7136] netlink: 20 bytes leftover after parsing attributes in process `syz.0.537'. [ 95.619472][ T7025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.631940][ T7025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.666344][ T7025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.686301][ T7025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.706316][ T7025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.741297][ T7025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.752572][ T7142] validate_nla: 1 callbacks suppressed [ 95.752587][ T7142] netlink: 'syz.0.540': attribute type 1 has an invalid length. [ 95.831646][ T7025] hsr_slave_0: entered promiscuous mode [ 95.843904][ T7025] hsr_slave_1: entered promiscuous mode [ 95.851770][ T7025] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.860292][ T7025] Cannot create hsr debugfs directory [ 96.246395][ T7177] openvswitch: netlink: IP tunnel dst address not specified [ 96.265703][ T7178] openvswitch: netlink: IP tunnel dst address not specified [ 96.361382][ T7177] macsec1: entered allmulticast mode [ 96.367839][ T7177] veth1_macvtap: entered allmulticast mode [ 96.459689][ T7177] veth1_macvtap (unregistering): left allmulticast mode [ 96.617814][ T7025] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.628701][ T7025] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.647577][ T7025] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.678509][ T7025] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.831932][ T7025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.855313][ T5240] Bluetooth: hci1: command tx timeout [ 96.886843][ T7025] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.929909][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.937027][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.096719][ T7216] netlink: 'syz.1.563': attribute type 4 has an invalid length. [ 97.116292][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.123438][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.155846][ T7210] __nla_validate_parse: 13 callbacks suppressed [ 97.155862][ T7210] netlink: 12 bytes leftover after parsing attributes in process `syz.2.561'. [ 97.317592][ T7025] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.431009][ T7244] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 97.475054][ T7242] netlink: 'syz.3.567': attribute type 1 has an invalid length. [ 97.505252][ T7242] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.567'. [ 97.540203][ T7242] netlink: 1 bytes leftover after parsing attributes in process `syz.3.567'. [ 97.756368][ T7258] xt_addrtype: ipv6 does not support BROADCAST matching [ 97.866752][ T7025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.894178][ T7264] netlink: 'syz.1.572': attribute type 1 has an invalid length. [ 97.916609][ T7264] netlink: 'syz.1.572': attribute type 4 has an invalid length. [ 97.929350][ T7264] netlink: 15334 bytes leftover after parsing attributes in process `syz.1.572'. [ 97.953806][ T7262] netlink: 'syz.3.573': attribute type 33 has an invalid length. [ 98.023375][ T7271] netlink: 48 bytes leftover after parsing attributes in process `syz.2.574'. [ 98.032260][ T7271] netlink: 43 bytes leftover after parsing attributes in process `syz.2.574'. [ 98.148531][ T7281] netlink: 830 bytes leftover after parsing attributes in process `syz.1.575'. [ 98.327760][ T7025] veth0_vlan: entered promiscuous mode [ 98.339735][ T7025] veth1_vlan: entered promiscuous mode [ 98.373564][ T7302] netlink: 12 bytes leftover after parsing attributes in process `syz.2.581'. [ 98.413643][ T7302] netlink: 56 bytes leftover after parsing attributes in process `syz.2.581'. [ 98.423361][ T7025] veth0_macvtap: entered promiscuous mode [ 98.436155][ T7302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.581'. [ 98.444350][ T7025] veth1_macvtap: entered promiscuous mode [ 98.479795][ T7307] IPv6: sit1: Disabled Multicast RS [ 98.501810][ T7025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.519683][ T7025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.531208][ T7025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.553547][ T7025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.563612][ T7025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.578211][ T7025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.589687][ T7025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.637086][ T7025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.652904][ T7025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.669982][ T7025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.680675][ T7025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.704010][ T7025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.715717][ T7025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.728261][ T7025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.738916][ T7025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.755955][ T7025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.766692][ T7025] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.800923][ T7025] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.810292][ T7025] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.819205][ T7025] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.896684][ T7327] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 98.933410][ T5240] Bluetooth: hci1: command tx timeout [ 99.012176][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.025394][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.062755][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.064493][ T7335] netlink: 'syz.0.594': attribute type 1 has an invalid length. [ 99.086778][ T7335] nbd: must specify at least one socket [ 99.092902][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.492901][ T7366] openvswitch: netlink: Actions may not be safe on all matching packets [ 99.828507][ T7387] openvswitch: netlink: EtherType 0 is less than min 600 [ 99.997689][ T7399] netlink: 'syz.2.618': attribute type 4 has an invalid length. [ 100.146824][ T1831] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.417820][ T1831] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.741193][ T1831] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.039719][ T5243] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 101.051323][ T5243] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 101.062200][ T5243] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 101.083703][ T5243] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 101.090541][ T1831] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.110788][ T5243] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 101.118087][ T5243] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 101.401837][ T1831] bridge_slave_1: left allmulticast mode [ 101.411472][ T1831] bridge_slave_1: left promiscuous mode [ 101.420644][ T1831] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.431950][ T1831] bridge_slave_0: left allmulticast mode [ 101.441026][ T1831] bridge_slave_0: left promiscuous mode [ 101.450398][ T1831] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.788022][ T1831] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.799572][ T1831] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.811448][ T1831] bond0 (unregistering): Released all slaves [ 101.830138][ T7455] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 101.979002][ T7468] xfrm1: entered allmulticast mode [ 102.174722][ T7477] __nla_validate_parse: 8 callbacks suppressed [ 102.174742][ T7477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.637'. [ 102.183042][ T7487] Bluetooth: MGMT ver 1.23 [ 102.191669][ T7486] netlink: 128 bytes leftover after parsing attributes in process `syz.1.641'. [ 102.289330][ T7474] netlink: 12 bytes leftover after parsing attributes in process `syz.2.637'. [ 102.299686][ T7474] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.306851][ T7474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.406030][ T1831] hsr_slave_0: left promiscuous mode [ 102.412317][ T1831] hsr_slave_1: left promiscuous mode [ 102.442097][ T1831] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.452140][ T1831] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.466791][ T1831] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.476804][ T1831] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.500455][ T1831] veth1_macvtap: left promiscuous mode [ 102.507450][ T1831] veth0_macvtap: left promiscuous mode [ 102.519380][ T1831] veth1_vlan: left promiscuous mode [ 102.525480][ T1831] veth0_vlan: left promiscuous mode [ 102.728216][ T7523] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 102.986262][ T1831] team0 (unregistering): Port device team_slave_1 removed [ 103.023902][ T1831] team0 (unregistering): Port device team_slave_0 removed [ 103.032275][ T7533] netlink: 209812 bytes leftover after parsing attributes in process `syz.3.654'. [ 103.054141][ T7533] netlink: get zone limit has 8 unknown bytes [ 103.175269][ T5240] Bluetooth: hci1: command tx timeout [ 103.371296][ T7439] chnl_net:caif_netlink_parms(): no params data found [ 103.388390][ T7510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.644'. [ 103.403473][ T7511] dummy0: left allmulticast mode [ 103.420457][ T7511] dummy0: left promiscuous mode [ 103.425672][ T7511] bridge0: port 3(dummy0) entered disabled state [ 103.444351][ T7511] bridge_slave_0: left allmulticast mode [ 103.450094][ T7511] bridge_slave_0: left promiscuous mode [ 103.456214][ T7511] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.467650][ T7511] eth0_vlan: left allmulticast mode [ 103.473045][ T7511] eth0_vlan: left promiscuous mode [ 103.479176][ T7511] bridge0: port 2(eth0_vlan) entered disabled state [ 103.497502][ T7511] bond0: (slave bond_slave_0): Releasing backup interface [ 103.507392][ T7511] bond0: (slave bond_slave_1): Releasing backup interface [ 103.526753][ T7511] team0: Port device team_slave_0 removed [ 103.533981][ T7511] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.541493][ T7511] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.550067][ T7511] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.557614][ T7511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.578263][ T7513] wg2: entered promiscuous mode [ 103.595884][ T7513] team0: Port device wg2 added [ 103.729448][ T7552] netlink: 'syz.1.657': attribute type 5 has an invalid length. [ 103.748574][ T7439] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.772142][ T7439] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.798834][ T7439] bridge_slave_0: entered allmulticast mode [ 103.826735][ T7439] bridge_slave_0: entered promiscuous mode [ 103.864490][ T7439] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.871622][ T7439] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.894949][ T7439] bridge_slave_1: entered allmulticast mode [ 103.901809][ T7439] bridge_slave_1: entered promiscuous mode [ 103.953614][ T7439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.966825][ T7439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.010994][ T7439] team0: Port device team_slave_0 added [ 104.019906][ T7439] team0: Port device team_slave_1 added [ 104.030420][ T7563] openvswitch: netlink: Unknown key attributes 2 [ 104.031444][ T7571] openvswitch: netlink: Unknown key attributes 2 [ 104.070072][ T7439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.081933][ T7439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.127869][ T7439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.141972][ T7439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.149895][ T7439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.197484][ T7439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.350151][ T7439] hsr_slave_0: entered promiscuous mode [ 104.368606][ T7439] hsr_slave_1: entered promiscuous mode [ 104.385610][ T7439] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.400290][ T7439] Cannot create hsr debugfs directory [ 104.449562][ T7589] pim6reg1: entered promiscuous mode [ 104.457549][ T7589] pim6reg1: entered allmulticast mode [ 104.858819][ T7611] netlink: 'syz.3.676': attribute type 9 has an invalid length. [ 104.873390][ T7611] netlink: 134672 bytes leftover after parsing attributes in process `syz.3.676'. [ 104.891817][ T7611] openvswitch: netlink: Key 2 has unexpected len 20 expected 4 [ 104.980276][ T7621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.679'. [ 105.013628][ T7621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.679'. [ 105.025001][ T7631] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 105.046233][ T7632] x_tables: duplicate underflow at hook 1 [ 105.069912][ T7439] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 105.086104][ T7439] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 105.125487][ T7439] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 105.148109][ T7439] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 105.209460][ T7643] netlink: 16 bytes leftover after parsing attributes in process `syz.0.682'. [ 105.254463][ T5240] Bluetooth: hci1: command tx timeout [ 105.293120][ T7439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.369723][ T7439] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.403033][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.410191][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.494511][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.501654][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.645018][ T7679] netlink: 36 bytes leftover after parsing attributes in process `syz.3.693'. [ 105.678020][ T7681] netlink: 'syz.0.692': attribute type 10 has an invalid length. [ 105.707481][ T7681] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.714992][ T7681] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.737407][ T7681] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.744575][ T7681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.751991][ T7681] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.759176][ T7681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.779745][ T7681] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 105.950757][ T7439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.290140][ T7732] sock: sock_timestamping_bind_phc: sock not bind to device [ 106.454719][ T7439] veth0_vlan: entered promiscuous mode [ 106.511085][ T7439] veth1_vlan: entered promiscuous mode [ 106.520043][ T75] tipc: Subscription rejected, illegal request [ 106.620156][ T7439] veth0_macvtap: entered promiscuous mode [ 106.668635][ T7439] veth1_macvtap: entered promiscuous mode [ 106.807002][ T7439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.822059][ T7439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.832345][ T7439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.848829][ T7439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.861016][ T7439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.874750][ T7758] netlink: 'syz.2.713': attribute type 10 has an invalid length. [ 106.897191][ T7758] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.904693][ T7758] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.946497][ T7758] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.953695][ T7758] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.961142][ T7758] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.968353][ T7758] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.990729][ T7758] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 107.008620][ T7439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.019735][ T7439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.031105][ T7439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.042067][ T7439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.051969][ T7439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.063735][ T7439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.075007][ T7439] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.125490][ T7439] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.155274][ T7439] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.165050][ T7439] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.186774][ T7439] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.196974][ T7771] netlink: 'syz.3.717': attribute type 3 has an invalid length. [ 107.205233][ T7773] __nla_validate_parse: 2 callbacks suppressed [ 107.205248][ T7773] netlink: 12 bytes leftover after parsing attributes in process `syz.0.718'. [ 107.334609][ T5243] Bluetooth: hci1: command tx timeout [ 107.386770][ T7778] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 107.395756][ T7781] netlink: 'syz.2.720': attribute type 3 has an invalid length. [ 107.423535][ T7775] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.719'. [ 107.432642][ T7775] openvswitch: netlink: Actions may not be safe on all matching packets [ 107.434619][ T7781] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.720'. [ 107.441134][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.452811][ T5595] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.467742][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.475474][ T5595] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.543798][ T7786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.722'. [ 107.739859][ T7805] netlink: 12 bytes leftover after parsing attributes in process `syz.0.728'. [ 107.794197][ T7810] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 107.842729][ T7816] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20000 [ 107.857615][ T5284] IPVS: starting estimator thread 0... [ 107.944249][ T7819] IPVS: using max 20 ests per chain, 48000 per kthread [ 108.056879][ T7835] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 108.073089][ T7833] netlink: 112 bytes leftover after parsing attributes in process `syz.0.736'. [ 108.102773][ T7838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.738'. [ 108.737709][ T7878] netlink: 24 bytes leftover after parsing attributes in process `syz.3.749'. [ 109.081506][ T7900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.413642][ T5243] Bluetooth: hci1: command 0x0419 tx timeout [ 109.489128][ T7927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.763'. [ 109.539191][ T7927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.763'. [ 109.670806][ T7944] netlink: 'syz.0.767': attribute type 4 has an invalid length. [ 109.706067][ T7949] netlink: 'syz.3.769': attribute type 1 has an invalid length. [ 110.009358][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.075564][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.134396][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.206064][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.290310][ T11] bridge_slave_1: left allmulticast mode [ 110.296489][ T11] bridge_slave_1: left promiscuous mode [ 110.302153][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.311630][ T11] bridge_slave_0: left allmulticast mode [ 110.318279][ T11] bridge_slave_0: left promiscuous mode [ 110.324418][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.677042][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.692001][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.710383][ T11] bond0 (unregistering): Released all slaves [ 110.736235][ T7970] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 110.751933][ T7975] A link change request failed with some changes committed already. Interface bMtadv_lave_0 may have been left with an inconsistent configuration, please check. [ 110.803681][ T7980] ip6gre1: entered allmulticast mode [ 110.893713][ T5243] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 110.904845][ T5243] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 110.918477][ T5243] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 110.933158][ T5243] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 110.941536][ T5243] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 110.951623][ T5243] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 110.957764][ T7987] IPVS: set_ctl: invalid protocol: 137 224.0.0.2:20000 [ 111.104198][ T7981] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.136467][ T7981] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.161139][ T7981] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 111.190428][ T7981] batadv0: left promiscuous mode [ 111.199158][ T7981] bond0 (unregistering): Released all slaves [ 111.314094][ T8012] xt_cgroup: xt_cgroup: no path or classid specified [ 111.369414][ T7970] bond0 (unregistering): Released all slaves [ 111.633977][ T8027] 8021q: adding VLAN 0 to HW filter on device bond2 [ 111.797025][ T8041] lo: entered allmulticast mode [ 111.847399][ T8041] tunl0: entered allmulticast mode [ 111.877209][ T8041] gre0: entered allmulticast mode [ 111.889283][ T8041] gretap0: entered allmulticast mode [ 111.911014][ T8041] erspan0: entered allmulticast mode [ 111.944934][ T8041] ip_vti0: entered allmulticast mode [ 111.963084][ T8041] ip6_vti0: entered allmulticast mode [ 111.988784][ T8041] sit0: entered allmulticast mode [ 112.000420][ T8041] ip6tnl0: entered allmulticast mode [ 112.011673][ T8041] ip6gre0: entered allmulticast mode [ 112.030806][ T8041] syz_tun: entered allmulticast mode [ 112.043043][ T8041] ip6gretap0: entered allmulticast mode [ 112.052931][ T8041] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.060088][ T8041] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.068842][ T8041] bridge0: entered allmulticast mode [ 112.076860][ T8041] vcan0: entered allmulticast mode [ 112.085130][ T8041] bond0: entered allmulticast mode [ 112.090256][ T8041] bond_slave_0: entered allmulticast mode [ 112.096423][ T8041] bond_slave_1: entered allmulticast mode [ 112.102160][ T8041] batadv_slave_0: entered allmulticast mode [ 112.109057][ T8041] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 112.120618][ T8041] team0: entered allmulticast mode [ 112.126030][ T8041] team_slave_1: entered allmulticast mode [ 112.137086][ T8041] dummy0: entered allmulticast mode [ 112.145437][ T8041] nlmon0: entered allmulticast mode [ 112.152602][ T8041] caif0: entered allmulticast mode [ 112.158319][ T8041] batadv0: entered allmulticast mode [ 112.167523][ T8041] vxcan0: entered allmulticast mode [ 112.174190][ T8041] vxcan1: entered allmulticast mode [ 112.180530][ T8041] veth0: entered allmulticast mode [ 112.188021][ T8041] veth1: entered allmulticast mode [ 112.197670][ T8041] wg0: entered allmulticast mode [ 112.205148][ T8041] wg1: entered allmulticast mode [ 112.212187][ T8041] wg2: entered allmulticast mode [ 112.219724][ T8041] veth0_to_bridge: entered allmulticast mode [ 112.231360][ T8041] veth1_to_bridge: entered allmulticast mode [ 112.242005][ T8041] veth0_to_bond: entered allmulticast mode [ 112.252224][ T8041] veth1_to_bond: entered allmulticast mode [ 112.262520][ T8041] veth1_to_team: entered allmulticast mode [ 112.272578][ T8041] veth0_to_batadv: entered allmulticast mode [ 112.283699][ T8041] veth1_to_batadv: entered allmulticast mode [ 112.291483][ T8041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.302533][ T8041] batadv_slave_1: entered allmulticast mode [ 112.311111][ T8041] xfrm0: entered allmulticast mode [ 112.319690][ T8041] veth0_to_hsr: entered allmulticast mode [ 112.327460][ T8041] hsr_slave_0: entered allmulticast mode [ 112.338588][ T8041] veth1_to_hsr: entered allmulticast mode [ 112.347106][ T8041] hsr_slave_1: entered allmulticast mode [ 112.359179][ T8041] hsr0: entered allmulticast mode [ 112.367771][ T8041] veth1_virt_wifi: entered allmulticast mode [ 112.376192][ T8041] veth0_virt_wifi: entered allmulticast mode [ 112.384483][ T8041] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 112.392245][ T8041] veth1_vlan: entered allmulticast mode [ 112.400046][ T8041] veth0_vlan: entered allmulticast mode [ 112.412215][ T8041] vlan0: entered allmulticast mode [ 112.417936][ T8041] vlan1: entered allmulticast mode [ 112.424158][ T8041] macvlan0: entered allmulticast mode [ 112.431794][ T8041] macvlan1: entered allmulticast mode [ 112.439148][ T8041] ipvlan0: entered allmulticast mode [ 112.444906][ T8041] ipvlan1: entered allmulticast mode [ 112.450800][ T8041] geneve0: entered allmulticast mode [ 112.459924][ T8041] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.469027][ T8041] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.478314][ T8041] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.487359][ T8041] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.498598][ T8041] geneve1: entered allmulticast mode [ 112.508868][ T8041] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 112.518316][ T8041] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 112.527655][ T8041] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 112.544062][ T8041] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 112.552548][ T8041] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 112.560195][ T8041] ieee802154 phy0 wpan0: entered allmulticast mode [ 112.568188][ T8041] virt_wifi0.2: entered allmulticast mode [ 112.575086][ T8041] erspan1: entered allmulticast mode [ 112.580526][ T8041] ipip0: entered allmulticast mode [ 112.586038][ T8041] bridge1: entered allmulticast mode [ 112.591497][ T8041] bond1: entered allmulticast mode [ 112.612285][ T11] hsr_slave_0: left promiscuous mode [ 112.621496][ T11] hsr_slave_1: left promiscuous mode [ 112.637446][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.645506][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.675401][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.694371][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.730328][ T11] veth1_macvtap: left promiscuous mode [ 112.735977][ T11] veth0_macvtap: left promiscuous mode [ 112.741585][ T11] veth1_vlan: left promiscuous mode [ 112.747651][ T11] veth0_vlan: left promiscuous mode [ 113.019125][ T5240] Bluetooth: hci1: command tx timeout [ 113.162039][ T11] team0 (unregistering): Port device team_slave_1 removed [ 113.194893][ T11] team0 (unregistering): Port device team_slave_0 removed [ 113.492567][ T8060] dvmrp0: entered allmulticast mode [ 113.563518][ T7984] chnl_net:caif_netlink_parms(): no params data found [ 113.773786][ T7984] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.803315][ T7984] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.823890][ T7984] bridge_slave_0: entered allmulticast mode [ 113.830815][ T7984] bridge_slave_0: entered promiscuous mode [ 113.842610][ T8090] __nla_validate_parse: 5 callbacks suppressed [ 113.842626][ T8090] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.803'. [ 113.865605][ T8090] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 113.869897][ T7984] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.887648][ T7984] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.912762][ T7984] bridge_slave_1: entered allmulticast mode [ 113.932922][ T7984] bridge_slave_1: entered promiscuous mode [ 114.081263][ T7984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.098749][ T8107] tipc: Enabling of bearer rejected, failed to enable media [ 114.119873][ T7984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.210774][ T7984] team0: Port device team_slave_0 added [ 114.232166][ T7984] team0: Port device team_slave_1 added [ 114.295441][ T8119] A link change request failed with some changes committed already. Interface bMtadv_lave_0 may have been left with an inconsistent configuration, please check. [ 114.397531][ T7984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.422055][ T7984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.448805][ T7984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.469538][ T8123] netlink: 44 bytes leftover after parsing attributes in process `syz.2.811'. [ 114.497521][ T8121] bridge0: port 1(ipvlan2) entered blocking state [ 114.517078][ T8121] bridge0: port 1(ipvlan2) entered disabled state [ 114.529802][ T8121] ipvlan2: entered allmulticast mode [ 114.535338][ T8121] bridge0: entered allmulticast mode [ 114.541772][ T8121] ipvlan2: left allmulticast mode [ 114.552325][ T8121] bridge0: left allmulticast mode [ 114.577582][ T8124] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 114.591600][ T8126] netlink: 12 bytes leftover after parsing attributes in process `syz.3.813'. [ 114.611600][ T7984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.633744][ T7984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.661207][ T8142] netlink: 'syz.2.816': attribute type 9 has an invalid length. [ 114.665525][ T7984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.669386][ T8142] netlink: 'syz.2.816': attribute type 6 has an invalid length. [ 114.734257][ T8135] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.752651][ T8135] bond0: (slave bond1): Enslaving as an active interface with an up link [ 114.787169][ T8136] bond0 (unregistering): (slave bond1): Releasing backup interface [ 114.799166][ T8136] bond0 (unregistering): Released all slaves [ 114.873416][ T8151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.818'. [ 114.916825][ T7984] hsr_slave_0: entered promiscuous mode [ 114.950240][ T7984] hsr_slave_1: entered promiscuous mode [ 114.957306][ T7984] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.975709][ T7984] Cannot create hsr debugfs directory [ 115.050913][ T8158] team0 (unregistering): Port device team_slave_0 removed [ 115.073808][ T8158] team0 (unregistering): Port device team_slave_1 removed [ 115.093360][ T5240] Bluetooth: hci1: command 0x041b tx timeout [ 115.136870][ T8165] netlink: 104 bytes leftover after parsing attributes in process `syz.2.823'. [ 115.349318][ T8174] netlink: 'syz.2.825': attribute type 11 has an invalid length. [ 115.373402][ T8174] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.825'. [ 115.598408][ T8177] netlink: 'syz.2.827': attribute type 1 has an invalid length. [ 115.626768][ T7984] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 115.637931][ T7984] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 115.660002][ T7984] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 115.693655][ T7984] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 115.820357][ T7984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.880217][ T7984] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.915971][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.923108][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.954186][ T8190] tipc: Started in network mode [ 115.966103][ T8190] tipc: Node identity ac14140f, cluster identity 4711 [ 115.982152][ T8190] tipc: New replicast peer: 255.255.255.255 [ 115.996812][ T8190] tipc: Enabled bearer , priority 10 [ 116.016342][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.023492][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.143984][ T8196] netlink: 16 bytes leftover after parsing attributes in process `syz.0.834'. [ 116.152891][ T8196] netlink: 16 bytes leftover after parsing attributes in process `syz.0.834'. [ 116.201150][ T8198] netlink: 108 bytes leftover after parsing attributes in process `syz.2.837'. [ 116.286042][ T8201] pim6reg1: entered allmulticast mode [ 116.452543][ T7984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.604568][ T8232] netlink: 16 bytes leftover after parsing attributes in process `syz.3.845'. [ 116.646594][ T8236] netlink: 'syz.1.847': attribute type 8 has an invalid length. [ 116.935269][ T7984] veth0_vlan: entered promiscuous mode [ 116.960017][ T7984] veth1_vlan: entered promiscuous mode [ 117.047951][ T7984] veth0_macvtap: entered promiscuous mode [ 117.058858][ T7984] veth1_macvtap: entered promiscuous mode [ 117.084711][ T7984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.101588][ T7984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.118255][ T5283] tipc: Node number set to 2886997007 [ 117.126548][ T7984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.141051][ T7984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.159347][ T7984] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.173348][ T5243] Bluetooth: hci1: command 0x041b tx timeout [ 117.201856][ T8274] bond0: (slave vlan2): Opening slave failed [ 117.233113][ T7984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.250192][ T7984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.260824][ T7984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.272078][ T7984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.284886][ T7984] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.300345][ T7984] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.312764][ T7984] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.328788][ T7984] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.353747][ T7984] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.538470][ T5596] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.554647][ T5596] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.622653][ T8297] geneve4: entered promiscuous mode [ 117.641131][ T8297] geneve4: entered allmulticast mode [ 117.727822][ T5596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.746142][ T5596] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.026996][ T8329] unknown channel width for channel at 909000KHz? [ 118.350686][ T8353] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 60 [ 118.533791][ T8372] netlink: 'syz.2.885': attribute type 10 has an invalid length. [ 118.547936][ T8372] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 118.558864][ T8372] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 118.784783][ T7984] syz-executor (7984) used greatest stack depth: 18328 bytes left [ 118.908269][ T5595] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.659581][ T5595] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.681203][ T8404] __nla_validate_parse: 15 callbacks suppressed [ 119.681220][ T8404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.894'. [ 119.714219][ T8405] netlink: 12 bytes leftover after parsing attributes in process `syz.2.894'. [ 119.753734][ T8412] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 119.809834][ T5240] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 119.818526][ T5240] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 119.826843][ T5240] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 119.850759][ T5240] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 119.862086][ T5595] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.877921][ T5240] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 119.890027][ T5240] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 119.905949][ T8419] netlink: 'syz.2.897': attribute type 1 has an invalid length. [ 119.914003][ T8419] netlink: 9396 bytes leftover after parsing attributes in process `syz.2.897'. [ 119.969012][ T5595] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.109335][ T8421] netlink: 'syz.1.899': attribute type 11 has an invalid length. [ 120.123311][ T8421] netlink: 'syz.1.899': attribute type 11 has an invalid length. [ 120.131136][ T8421] netlink: 209800 bytes leftover after parsing attributes in process `syz.1.899'. [ 120.274071][ T5595] bridge_slave_1: left allmulticast mode [ 120.279806][ T5595] bridge_slave_1: left promiscuous mode [ 120.286539][ T5595] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.301936][ T5595] bridge_slave_0: left allmulticast mode [ 120.308538][ T5595] bridge_slave_0: left promiscuous mode [ 120.314363][ T5595] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.637923][ T5595] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.650930][ T5595] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.662321][ T5595] bond0 (unregistering): Released all slaves [ 120.929813][ T8480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.916'. [ 120.952060][ T8415] chnl_net:caif_netlink_parms(): no params data found [ 120.961145][ T8480] netlink: 'syz.2.916': attribute type 10 has an invalid length. [ 120.977625][ T8480] netlink: 210880 bytes leftover after parsing attributes in process `syz.2.916'. [ 121.181226][ T8415] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.197181][ T8488] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 121.208118][ T8415] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.233173][ T8415] bridge_slave_0: entered allmulticast mode [ 121.247214][ T8415] bridge_slave_0: entered promiscuous mode [ 121.256375][ T8415] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.263978][ T8415] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.271686][ T8415] bridge_slave_1: entered allmulticast mode [ 121.278650][ T8415] bridge_slave_1: entered promiscuous mode [ 121.306684][ T5595] hsr_slave_0: left promiscuous mode [ 121.312752][ T5595] hsr_slave_1: left promiscuous mode [ 121.322301][ T5595] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.333136][ T5595] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.347675][ T5595] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.355318][ T5595] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.382327][ T5595] veth1_macvtap: left promiscuous mode [ 121.391103][ T5595] veth0_macvtap: left promiscuous mode [ 121.399007][ T5595] veth1_vlan: left promiscuous mode [ 121.409035][ T5595] veth0_vlan: left promiscuous mode [ 121.761128][ T5595] team0 (unregistering): Port device team_slave_1 removed [ 121.802587][ T5595] team0 (unregistering): Port device team_slave_0 removed [ 121.983798][ T5240] Bluetooth: hci1: command tx timeout [ 122.166522][ T8504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.924'. [ 122.176532][ T8504] netlink: 12 bytes leftover after parsing attributes in process `syz.1.924'. [ 122.185824][ T8504] netlink: 'syz.1.924': attribute type 20 has an invalid length. [ 122.197974][ T8505] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 122.199869][ T8507] netlink: 'syz.0.925': attribute type 5 has an invalid length. [ 122.228122][ T8508] netlink: 204 bytes leftover after parsing attributes in process `syz.0.925'. [ 122.243826][ T8507] netlink: 'syz.0.925': attribute type 5 has an invalid length. [ 122.265900][ T8415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.287035][ T8507] netlink: 'syz.0.925': attribute type 5 has an invalid length. [ 122.310700][ T8512] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.926'. [ 122.322098][ T8512] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 122.329453][ T8514] dccp_invalid_packet: invalid packet type [ 122.342688][ T8507] netlink: 'syz.0.925': attribute type 5 has an invalid length. [ 122.359350][ T8415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.390460][ T8507] netlink: 'syz.0.925': attribute type 5 has an invalid length. [ 122.422628][ T8507] netlink: 'syz.0.925': attribute type 5 has an invalid length. [ 122.459733][ T8507] netlink: 'syz.0.925': attribute type 5 has an invalid length. [ 122.480035][ T8507] netlink: 'syz.0.925': attribute type 5 has an invalid length. [ 122.530434][ T8415] team0: Port device team_slave_0 added [ 122.542653][ T8415] team0: Port device team_slave_1 added [ 122.636308][ T8415] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.655540][ T8415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.694303][ T8415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.723664][ T8415] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.737752][ T8415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.786523][ T8415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.922797][ T8415] hsr_slave_0: entered promiscuous mode [ 122.945590][ T8415] hsr_slave_1: entered promiscuous mode [ 122.959708][ T8415] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.969234][ T8415] Cannot create hsr debugfs directory [ 123.441065][ T8579] sctp: [Deprecated]: syz.3.944 (pid 8579) Use of int in max_burst socket option deprecated. [ 123.441065][ T8579] Use struct sctp_assoc_value instead [ 123.459382][ T8581] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 123.569946][ T8589] xt_hashlimit: max too large, truncated to 1048576 [ 123.647609][ T8589] bridge: RTM_NEWNEIGH with invalid ether address [ 123.853809][ T8613] xt_hashlimit: max too large, truncated to 1048576 [ 123.870305][ T8415] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 123.886907][ T8415] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 123.907483][ T8415] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 123.920012][ T8415] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 123.960564][ T8616] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 124.021353][ T8415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.037898][ T8415] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.054217][ T5240] Bluetooth: hci1: command tx timeout [ 124.068024][ T8415] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 124.078471][ T8415] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 124.096832][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.104013][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.149522][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.156681][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.542943][ T8415] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.571154][ T8655] syz.0.961[8655] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 124.691003][ T8661] syz_tun: entered promiscuous mode [ 124.716102][ T8661] syz_tun: left promiscuous mode [ 124.767260][ T8662] __nla_validate_parse: 2 callbacks suppressed [ 124.767276][ T8662] netlink: 256 bytes leftover after parsing attributes in process `syz.1.963'. [ 124.863763][ T8659] netlink: 12 bytes leftover after parsing attributes in process `syz.1.963'. [ 125.260213][ T8687] netlink: 12 bytes leftover after parsing attributes in process `syz.2.971'. [ 125.285915][ T8685] x_tables: duplicate underflow at hook 2 [ 125.338184][ T8415] veth0_vlan: entered promiscuous mode [ 125.349519][ T8415] veth1_vlan: entered promiscuous mode [ 125.382919][ T8415] veth0_macvtap: entered promiscuous mode [ 125.392324][ T8415] veth1_macvtap: entered promiscuous mode [ 125.406370][ T8415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.417184][ T8415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.427263][ T8415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.438151][ T8415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.451456][ T8415] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.462668][ T8415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.473663][ T8415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.483864][ T8415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.494961][ T8415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.506062][ T8415] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.528586][ T8415] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.543592][ T8415] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.556081][ T8415] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.580047][ T8415] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.650403][ T8699] IPv6: NLM_F_REPLACE set, but no existing node found! [ 125.678806][ T8706] netlink: 64 bytes leftover after parsing attributes in process `syz.1.978'. [ 125.777532][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.811850][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.877842][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.913390][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.083930][ T8728] netlink: 4 bytes leftover after parsing attributes in process `syz.3.984'. [ 126.440389][ T8747] netlink: 28 bytes leftover after parsing attributes in process `syz.0.989'. [ 126.454916][ T8747] netlink: 28 bytes leftover after parsing attributes in process `syz.0.989'. [ 126.468933][ T8747] gretap0: entered promiscuous mode [ 126.475535][ T8747] batadv_slave_1: entered promiscuous mode [ 126.482698][ T8747] hsr1: Slave A (gretap0) is not up; please bring it up to get a fully working HSR network [ 126.495508][ T8747] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 126.510119][ T8752] netlink: 20 bytes leftover after parsing attributes in process `syz.3.991'. [ 126.539307][ T8755] netlink: 20 bytes leftover after parsing attributes in process `syz.3.991'. [ 126.732251][ T8772] tipc: Can't bind to reserved service type 2 [ 126.809915][ T8772] netlink: 244 bytes leftover after parsing attributes in process `syz.3.997'. [ 127.034271][ T8789] dccp_invalid_packet: P.CsCov 5 exceeds packet length 16 [ 127.221704][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.269231][ T8808] validate_nla: 16 callbacks suppressed [ 128.269250][ T8808] netlink: 'syz.3.1009': attribute type 9 has an invalid length. [ 128.294979][ T5243] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 128.304079][ T5243] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 128.311788][ T5243] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 128.327961][ T5243] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 128.343055][ T5243] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 128.354480][ T5243] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 128.487961][ T8816] xt_l2tp: unknown flags: 18 [ 129.112957][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.125631][ T8799] netlink: 'syz.0.1007': attribute type 13 has an invalid length. [ 129.264244][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.388506][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.421998][ T8846] tipc: Enabling of bearer rejected, failed to enable media [ 129.590193][ T8809] chnl_net:caif_netlink_parms(): no params data found [ 129.612653][ T11] bridge_slave_1: left allmulticast mode [ 129.619836][ T11] bridge_slave_1: left promiscuous mode [ 129.626533][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.642592][ T11] bridge_slave_0: left allmulticast mode [ 129.650197][ T11] bridge_slave_0: left promiscuous mode [ 129.657402][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.708781][ T8871] openvswitch: netlink: Actions may not be safe on all matching packets [ 129.720534][ T8871] openvswitch: netlink: Actions may not be safe on all matching packets [ 129.995683][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.006996][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.018329][ T11] bond0 (unregistering): Released all slaves [ 130.188442][ T8888] x_tables: duplicate underflow at hook 3 [ 130.238197][ T8809] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.267850][ T8809] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.293679][ T8809] bridge_slave_0: entered allmulticast mode [ 130.312422][ T8809] bridge_slave_0: entered promiscuous mode [ 130.321688][ T8809] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.321890][ T8900] __nla_validate_parse: 4 callbacks suppressed [ 130.321904][ T8900] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1029'. [ 130.344886][ T8809] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.352121][ T8809] bridge_slave_1: entered allmulticast mode [ 130.359309][ T8809] bridge_slave_1: entered promiscuous mode [ 130.453875][ T5240] Bluetooth: hci1: command tx timeout [ 130.511996][ T8905] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1035'. [ 130.552185][ T11] hsr_slave_0: left promiscuous mode [ 130.559166][ T8909] netlink: 'syz.0.1037': attribute type 1 has an invalid length. [ 130.570438][ T11] hsr_slave_1: left promiscuous mode [ 130.582951][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.598335][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.608207][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.621800][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.641953][ T11] veth1_macvtap: left promiscuous mode [ 130.647940][ T11] veth0_macvtap: left promiscuous mode [ 130.656867][ T11] veth1_vlan: left promiscuous mode [ 130.662138][ T11] veth0_vlan: left promiscuous mode [ 131.040629][ T11] team0 (unregistering): Port device team_slave_1 removed [ 131.071282][ T11] team0 (unregistering): Port device team_slave_0 removed [ 131.359794][ T8809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.411454][ T8809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.504609][ T8929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1041'. [ 131.561392][ T8929] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1041'. [ 131.586066][ T8928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1043'. [ 131.595488][ T8929] openvswitch: netlink: Actions may not be safe on all matching packets [ 131.607285][ T8809] team0: Port device team_slave_0 added [ 131.639722][ T8928] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1043'. [ 131.676032][ T8809] team0: Port device team_slave_1 added [ 131.781984][ T8809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.794663][ T8809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.859340][ T8809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.901147][ T8809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.923301][ T8809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.957067][ T8809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.993828][ T8946] veth0_to_bond: mtu less than device minimum [ 132.002308][ T8946] netlink: 'syz.2.1049': attribute type 30 has an invalid length. [ 132.059671][ T8948] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 132.189515][ T8809] hsr_slave_0: entered promiscuous mode [ 132.210479][ T8809] hsr_slave_1: entered promiscuous mode [ 132.247048][ T8809] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.257751][ T8809] Cannot create hsr debugfs directory [ 132.412429][ T8977] netlink: 'syz.2.1056': attribute type 2 has an invalid length. [ 132.533684][ T5240] Bluetooth: hci1: command tx timeout [ 132.552984][ T8983] tipc: Enabling of bearer rejected, failed to enable media [ 132.696367][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.738421][ T8998] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1064'. [ 133.036076][ T9016] openvswitch: netlink: Flow actions attr not present in new flow. [ 133.048611][ T8809] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 133.054444][ T9016] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1069'. [ 133.066727][ T8809] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 133.081331][ T8809] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 133.090784][ T8809] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 133.152654][ T9027] netlink: 'syz.1.1072': attribute type 11 has an invalid length. [ 133.219663][ T8809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.266050][ T8809] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.282415][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.289551][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.303159][ T5595] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.310328][ T5595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.351111][ T9036] xt_CT: You must specify a L4 protocol and not use inversions on it [ 133.418720][ T9036] sctp: [Deprecated]: syz.1.1075 (pid 9036) Use of int in maxseg socket option. [ 133.418720][ T9036] Use struct sctp_assoc_value instead [ 133.526455][ T9047] netlink: 'syz.0.1077': attribute type 3 has an invalid length. [ 133.540682][ T9047] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1077'. [ 133.582919][ T9050] netlink: 'syz.0.1077': attribute type 8 has an invalid length. [ 133.596541][ T9050] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 133.630139][ T8809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.757186][ T9063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1081'. [ 133.875809][ T8809] veth0_vlan: entered promiscuous mode [ 133.886685][ T8809] veth1_vlan: entered promiscuous mode [ 133.907769][ T8809] veth0_macvtap: entered promiscuous mode [ 133.917622][ T8809] veth1_macvtap: entered promiscuous mode [ 133.932635][ T8809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.943476][ T8809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.953740][ T8809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.964706][ T8809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.980256][ T8809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.989547][ T8809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.000038][ T8809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.009895][ T8809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.020369][ T8809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.031066][ T8809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.038403][ T9073] mac80211_hwsim hwsim7 : renamed from wlan1 [ 134.071095][ T8809] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.098816][ T8809] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.112132][ T8809] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.121132][ T8809] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.189996][ T9081] netlink: 'syz.3.1085': attribute type 9 has an invalid length. [ 134.230295][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.251953][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.281170][ T5595] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.308031][ T5595] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.842443][ T9111] netlink: 'syz.1.1095': attribute type 10 has an invalid length. [ 134.862353][ T9111] bridge0: port 1(wlan1) entered blocking state [ 134.882591][ T9111] bridge0: port 1(wlan1) entered disabled state [ 134.893043][ T9111] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 134.908075][ T9111] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 135.047529][ T9120] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 135.486850][ T9161] netlink: 'syz.3.1109': attribute type 1 has an invalid length. [ 135.487136][ T9162] __nla_validate_parse: 6 callbacks suppressed [ 135.487150][ T9162] netlink: 209848 bytes leftover after parsing attributes in process `syz.1.1110'. [ 135.508615][ T9161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1109'. [ 135.528597][ T9162] openvswitch: netlink: Message has 2 unknown bytes. [ 135.585985][ T9164] netlink: 'syz.0.1111': attribute type 21 has an invalid length. [ 135.597085][ T9164] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1111'. [ 135.614195][ T9164] netlink: 'syz.0.1111': attribute type 5 has an invalid length. [ 135.625385][ T9164] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1111'. [ 135.638518][ T9169] netlink: 'syz.1.1113': attribute type 1 has an invalid length. [ 135.646595][ T9169] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1113'. [ 135.658178][ T9170] netlink: 'syz.0.1111': attribute type 10 has an invalid length. [ 135.672857][ T9170] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1111'. [ 135.703624][ T9170] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 135.714591][ T9170] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 135.724856][ T9170] batman_adv: batadv0: Adding interface: virt_wifi0 [ 135.731608][ T9170] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.759284][ T9170] batman_adv: batadv0: Interface activated: virt_wifi0 [ 135.770130][ T9166] syz.3.1112 (9166) used greatest stack depth: 17840 bytes left [ 135.855442][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.820221][ T9178] netlink: 'syz.1.1115': attribute type 22 has an invalid length. [ 136.904857][ T9185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1118'. [ 137.022562][ T5243] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 137.055632][ T5243] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 137.064022][ T5243] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 137.072699][ T5243] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 137.089700][ T5243] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 137.112151][ T5243] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 137.147395][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.216763][ T9199] openvswitch: netlink: Actions may not be safe on all matching packets [ 137.231216][ T9202] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 137.269201][ T1831] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.286721][ T1831] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.374683][ T9214] netlink: 210620 bytes leftover after parsing attributes in process `syz.1.1128'. [ 137.388274][ T9214] openvswitch: netlink: ufid size 2296 bytes exceeds the range (1, 16) [ 137.444725][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.503742][ T9192] chnl_net:caif_netlink_parms(): no params data found [ 137.569149][ T9214] hsr0: entered promiscuous mode [ 137.598117][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.738025][ T9192] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.746656][ T9192] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.763489][ T9192] bridge_slave_0: entered allmulticast mode [ 137.770128][ T9192] bridge_slave_0: entered promiscuous mode [ 137.821139][ T9192] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.832042][ T9192] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.846679][ T9192] bridge_slave_1: entered allmulticast mode [ 137.856923][ T9192] bridge_slave_1: entered promiscuous mode [ 137.949549][ T9243] geneve2: entered promiscuous mode [ 137.955263][ T9243] geneve2: entered allmulticast mode [ 137.969993][ T9192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.996018][ T9244] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1135'. [ 137.996669][ T9192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.032065][ T52] bridge_slave_1: left allmulticast mode [ 138.040298][ T52] bridge_slave_1: left promiscuous mode [ 138.049589][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.085228][ T52] bridge_slave_0: left allmulticast mode [ 138.091182][ T52] bridge_slave_0: left promiscuous mode [ 138.110560][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.653735][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.668123][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.680037][ T52] bond0 (unregistering): Released all slaves [ 138.738222][ T9264] netlink: 'syz.3.1142': attribute type 13 has an invalid length. [ 138.753421][ T9264] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1142'. [ 138.765308][ T9264] syz_tun: refused to change device tx_queue_len [ 138.793379][ T9264] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 138.879356][ T9192] team0: Port device team_slave_0 added [ 138.904332][ T9192] team0: Port device team_slave_1 added [ 138.998044][ T9192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.013975][ T9192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.051798][ T9192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.070123][ T9282] netlink: 'syz.3.1149': attribute type 1 has an invalid length. [ 139.092747][ T9192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.100475][ T9192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.127728][ T9192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.134185][ T9282] netlink: 'syz.3.1149': attribute type 1 has an invalid length. [ 139.155477][ T9282] netlink: 'syz.3.1149': attribute type 1 has an invalid length. [ 139.173570][ T5240] Bluetooth: hci1: command tx timeout [ 139.282648][ T9291] tipc: Started in network mode [ 139.298178][ T9291] tipc: Node identity ac14140f, cluster identity 7 [ 139.308429][ T9291] tipc: New replicast peer: 255.255.255.255 [ 139.315460][ T9291] tipc: Enabled bearer , priority 10 [ 139.358239][ T9192] hsr_slave_0: entered promiscuous mode [ 139.365084][ T9192] hsr_slave_1: entered promiscuous mode [ 139.371388][ T9192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.380518][ T9192] Cannot create hsr debugfs directory [ 139.396099][ T52] hsr_slave_0: left promiscuous mode [ 139.406739][ T52] hsr_slave_1: left promiscuous mode [ 139.417689][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.430343][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.438995][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.450146][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.484630][ T52] veth1_macvtap: left promiscuous mode [ 139.492495][ T52] veth0_macvtap: left promiscuous mode [ 139.509948][ T52] veth1_vlan: left promiscuous mode [ 139.526814][ T52] veth0_vlan: left promiscuous mode [ 139.774358][ T9319] Timeout policy `syz0' can only be used by L3 protocol number 0 [ 140.041646][ T52] team0 (unregistering): Port device team_slave_1 removed [ 140.077200][ T52] team0 (unregistering): Port device team_slave_0 removed [ 140.404337][ T9320] tipc: Enabling of bearer rejected, failed to enable media [ 140.434539][ T5284] tipc: Node number set to 2886997007 [ 140.531320][ T9335] __nla_validate_parse: 5 callbacks suppressed [ 140.531340][ T9335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1160'. [ 140.574410][ T9336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1160'. [ 140.589525][ T9339] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1161'. [ 140.679499][ T9339] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1161'. [ 140.890037][ T9346] x_tables: duplicate underflow at hook 3 [ 140.993728][ T9363] bridge0: port 3(vlan2) entered blocking state [ 141.009886][ T9363] bridge0: port 3(vlan2) entered disabled state [ 141.019989][ T9363] vlan2: entered allmulticast mode [ 141.036208][ T9363] vlan2: left allmulticast mode [ 141.067390][ T9374] netlink: 'syz.2.1171': attribute type 4 has an invalid length. [ 141.111613][ T9374] netlink: 'syz.2.1171': attribute type 4 has an invalid length. [ 141.210287][ T9192] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 141.235916][ T9192] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 141.253351][ T5240] Bluetooth: hci1: command tx timeout [ 141.262247][ T9192] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 141.280540][ T9378] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1172'. [ 141.304007][ T9192] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 141.404962][ T9393] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1175'. [ 141.452995][ T9192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.485596][ T9393] : entered promiscuous mode [ 141.520443][ T9192] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.566304][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.573447][ T5596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.582877][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.590010][ T5596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.720030][ T9408] x_tables: duplicate underflow at hook 1 [ 141.824891][ T9192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.901277][ T9430] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1184'. [ 142.048323][ T9192] veth0_vlan: entered promiscuous mode [ 142.060172][ T9192] veth1_vlan: entered promiscuous mode [ 142.087287][ T9192] veth0_macvtap: entered promiscuous mode [ 142.099321][ T9192] veth1_macvtap: entered promiscuous mode [ 142.116901][ T9192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.129092][ T9192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.153401][ T9192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.178165][ T9192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.204479][ T9192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.227053][ T9192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.241829][ T9192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.252146][ T9192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.265868][ T9192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.278217][ T9192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.292396][ T9192] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.330836][ T9192] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.360010][ T9192] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.387469][ T9192] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.398306][ T9454] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1191'. [ 142.516674][ T1831] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.530825][ T1831] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.534614][ T5240] Bluetooth: hci4: command tx timeout [ 142.548047][ T9463] x_tables: unsorted underflow at hook 3 [ 142.566488][ T9465] netlink: 'syz.3.1194': attribute type 4 has an invalid length. [ 142.585511][ T5595] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.595344][ T5595] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.770686][ T9475] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1199'. [ 142.887696][ T9477] syz_tun: entered promiscuous mode [ 142.930126][ T9477] syz_tun: left promiscuous mode [ 143.129646][ T9502] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1204'. [ 143.299412][ T9513] ip6gre0: entered promiscuous mode [ 144.066628][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.143441][ T9592] netlink: 'syz.2.1233': attribute type 2 has an invalid length. [ 145.357397][ T9601] x_tables: ip_tables: udp match: only valid for protocol 17 [ 145.386400][ T9604] netlink: 'syz.2.1237': attribute type 1 has an invalid length. [ 145.391774][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.395340][ T5243] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 145.415650][ T5243] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 145.424212][ T5243] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 145.431620][ T9604] netlink: 'syz.2.1237': attribute type 1 has an invalid length. [ 145.442467][ T5243] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 145.450435][ T5243] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 145.459939][ T5243] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 145.625445][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.758137][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.789994][ T9631] __nla_validate_parse: 6 callbacks suppressed [ 145.790012][ T9631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1244'. [ 145.809137][ T9624] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1242'. [ 145.939873][ T11] bridge_slave_1: left allmulticast mode [ 145.951532][ T11] bridge_slave_1: left promiscuous mode [ 145.958473][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.985863][ T11] bridge_slave_0: left allmulticast mode [ 146.002006][ T11] bridge_slave_0: left promiscuous mode [ 146.009857][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.308068][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.319540][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.330222][ T11] bond0 (unregistering): Released all slaves [ 146.348746][ T9654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1250'. [ 146.462761][ T9660] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1252'. [ 146.508641][ T9660] bond0: option resend_igmp: invalid value (7540) [ 146.526950][ T9660] bond0: option resend_igmp: allowed values 0 - 255 [ 146.531466][ T9663] sctp: [Deprecated]: syz.2.1254 (pid 9663) Use of int in maxseg socket option. [ 146.531466][ T9663] Use struct sctp_assoc_value instead [ 146.675393][ T9600] chnl_net:caif_netlink_parms(): no params data found [ 146.742661][ T9674] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1257'. [ 146.769401][ T9673] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1257'. [ 146.811484][ T11] hsr_slave_0: left promiscuous mode [ 146.833928][ T11] hsr_slave_1: left promiscuous mode [ 146.849220][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.860633][ T9682] netlink: 'syz.0.1260': attribute type 1 has an invalid length. [ 146.873755][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.888692][ T9682] netlink: 'syz.0.1260': attribute type 2 has an invalid length. [ 146.906164][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.932140][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.000655][ T11] veth1_macvtap: left promiscuous mode [ 147.006472][ T11] veth0_macvtap: left promiscuous mode [ 147.012039][ T11] veth1_vlan: left promiscuous mode [ 147.018181][ T11] veth0_vlan: left promiscuous mode [ 147.359962][ T11] team0 (unregistering): Port device team_slave_1 removed [ 147.393047][ T11] team0 (unregistering): Port device team_slave_0 removed [ 147.495111][ T5243] Bluetooth: hci1: command tx timeout [ 147.711316][ T9696] netlink: 'syz.0.1262': attribute type 1 has an invalid length. [ 147.758053][ T9696] netlink: 9372 bytes leftover after parsing attributes in process `syz.0.1262'. [ 147.800246][ T9696] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1262'. [ 147.810365][ T9696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1262'. [ 147.867297][ T9713] netlink: 'syz.0.1267': attribute type 1 has an invalid length. [ 147.923153][ T9600] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.930386][ T9600] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.937641][ T9600] bridge_slave_0: entered allmulticast mode [ 147.944809][ T9600] bridge_slave_0: entered promiscuous mode [ 147.952312][ T9600] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.959700][ T9600] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.967092][ T9600] bridge_slave_1: entered allmulticast mode [ 147.974308][ T9600] bridge_slave_1: entered promiscuous mode [ 148.039371][ T9600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.079649][ T9600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.129838][ T9725] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1269'. [ 148.215056][ T9600] team0: Port device team_slave_0 added [ 148.245526][ T9600] team0: Port device team_slave_1 added [ 148.318343][ T9600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.326111][ T9600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.374612][ T9600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.426940][ T9600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.450187][ T9600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.503799][ T9600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.626313][ T9600] hsr_slave_0: entered promiscuous mode [ 148.648250][ T9600] hsr_slave_1: entered promiscuous mode [ 148.658659][ T9600] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 148.680376][ T9600] Cannot create hsr debugfs directory [ 148.840248][ T9775] IPv6: sit2: Disabled Multicast RS [ 148.847743][ T9772] ipvlan1: left allmulticast mode [ 148.888103][ T9779] tipc: Enabling of bearer rejected, media not registered [ 148.924128][ T9772] netlink: 'syz.0.1279': attribute type 1 has an invalid length. [ 148.938495][ T9772] netlink: 'syz.0.1279': attribute type 4 has an invalid length. [ 149.345584][ T9792] netlink: 'syz.1.1286': attribute type 10 has an invalid length. [ 149.379857][ T9792] team0: Device hsr_slave_0 is of different type [ 149.577307][ T5243] Bluetooth: hci1: command 0x041b tx timeout [ 149.604198][ T9600] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 149.624130][ T9600] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 149.639209][ T9600] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 149.710210][ T9600] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 149.788113][ T9838] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 149.843773][ T9600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.858964][ T9600] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.886675][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.893922][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.935941][ T5595] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.943042][ T5595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.202322][ T9600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.349917][ T9875] validate_nla: 2 callbacks suppressed [ 150.349934][ T9875] netlink: 'syz.1.1305': attribute type 1 has an invalid length. [ 150.365119][ T9875] netlink: 'syz.1.1305': attribute type 2 has an invalid length. [ 150.374154][ T9875] netlink: 'syz.1.1305': attribute type 1 has an invalid length. [ 150.382002][ T9875] netlink: 'syz.1.1305': attribute type 2 has an invalid length. [ 150.390210][ T9875] netlink: 'syz.1.1305': attribute type 1 has an invalid length. [ 150.398675][ T9875] netlink: 'syz.1.1305': attribute type 2 has an invalid length. [ 150.421588][ T9875] netlink: 'syz.1.1305': attribute type 1 has an invalid length. [ 150.450617][ T9875] netlink: 'syz.1.1305': attribute type 2 has an invalid length. [ 150.459785][ T9875] netlink: 'syz.1.1305': attribute type 1 has an invalid length. [ 150.468329][ T9875] netlink: 'syz.1.1305': attribute type 2 has an invalid length. [ 150.530638][ T9600] veth0_vlan: entered promiscuous mode [ 150.555459][ T9600] veth1_vlan: entered promiscuous mode [ 150.592903][ T9600] veth0_macvtap: entered promiscuous mode [ 150.616459][ T9600] veth1_macvtap: entered promiscuous mode [ 150.652415][ T9600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.670170][ T9600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.685136][ T9600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.695825][ T9600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.706916][ T9600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.716172][ T9600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.726664][ T9600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.736754][ T9600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.747226][ T9600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.758007][ T9600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.768418][ T9600] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.777342][ T9600] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.786111][ T9600] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.795111][ T9600] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.945195][ T5596] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.953129][ T5596] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.996452][ T5595] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.024642][ T5595] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.206471][ T9920] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 151.422193][ T937] IPVS: starting estimator thread 0... [ 151.523963][ T9952] 8021q: VLANs not supported on ipvlan0 [ 151.530426][ T9947] IPVS: using max 18 ests per chain, 43200 per kthread [ 151.770865][ T9972] __nla_validate_parse: 7 callbacks suppressed [ 151.770885][ T9972] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1334'. [ 151.832547][ T9974] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1336'. [ 152.064020][ T9995] netlink: 668 bytes leftover after parsing attributes in process `syz.2.1342'. [ 152.074169][ T9995] netlink: 668 bytes leftover after parsing attributes in process `syz.2.1342'. [ 152.109155][ T9995] netlink: 668 bytes leftover after parsing attributes in process `syz.2.1342'. [ 152.119973][ T9995] netlink: 668 bytes leftover after parsing attributes in process `syz.2.1342'. [ 152.138983][ T9995] netlink: 668 bytes leftover after parsing attributes in process `syz.2.1342'. [ 152.148808][T10002] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1343'. [ 152.151914][ T9995] netlink: 668 bytes leftover after parsing attributes in process `syz.2.1342'. [ 152.158555][T10002] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 152.177711][T10003] dummy0: entered allmulticast mode [ 152.189980][ T9995] netlink: 668 bytes leftover after parsing attributes in process `syz.2.1342'. [ 152.662260][T10037] syzkaller1: entered promiscuous mode [ 152.668416][T10037] syzkaller1: entered allmulticast mode [ 152.689832][T10032] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993 [ 152.771636][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.909316][T10049] netlink: zone id is out of range [ 153.939216][T10049] netlink: zone id is out of range [ 153.949631][T10049] netlink: zone id is out of range [ 153.980534][T10049] netlink: zone id is out of range [ 154.033526][T10049] netlink: zone id is out of range [ 154.095709][T10049] netlink: set zone limit has 4 unknown bytes [ 154.505520][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.444994][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.563136][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.003529][ T11] bridge_slave_1: left allmulticast mode [ 156.009226][ T11] bridge_slave_1: left promiscuous mode [ 156.048279][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.093996][ T11] bridge_slave_0: left allmulticast mode [ 156.099666][ T11] bridge_slave_0: left promiscuous mode [ 156.148379][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.729683][ T5243] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 156.747536][ T5243] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 156.760092][ T5243] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 156.785609][ T5243] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 156.797608][ T5243] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 156.812192][ T5243] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 156.830032][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.846307][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.857147][ T11] bond0 (unregistering): Released all slaves [ 156.868099][T10061] __nla_validate_parse: 127 callbacks suppressed [ 156.868116][T10061] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1358'. [ 156.886926][T10066] IPVS: Unknown mcast interface: veth0_macvtap [ 156.895366][T10073] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1362'. [ 156.918792][T10069] IPVS: Unknown mcast interface: veth0_macvtap [ 157.159629][T10091] bridge: RTM_NEWNEIGH with invalid ether address [ 157.169778][T10095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1367'. [ 157.220473][ T11] hsr_slave_0: left promiscuous mode [ 157.230661][ T11] hsr_slave_1: left promiscuous mode [ 157.242405][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.267574][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.281383][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.294403][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.318284][ T11] veth1_macvtap: left promiscuous mode [ 157.324763][ T11] veth0_macvtap: left promiscuous mode [ 157.330319][ T11] veth1_vlan: left promiscuous mode [ 157.338166][ T11] veth0_vlan: left promiscuous mode [ 157.737856][ T11] team0 (unregistering): Port device team_slave_1 removed [ 157.769726][ T11] team0 (unregistering): Port device team_slave_0 removed [ 158.068528][T10104] bond0: option resend_igmp: invalid value (7540) [ 158.077754][T10104] bond0: option resend_igmp: allowed values 0 - 255 [ 158.089350][T10109] netdevsim netdevsim2 : renamed from netdevsim0 (while UP) [ 158.101262][T10109] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1370'. [ 158.119071][T10109] A link change request failed with some changes committed already. Interface may have been left with an inconsistent configuration, please check. [ 158.166400][T10120] IPVS: set_ctl: invalid protocol: 59 10.1.1.2:20001 [ 158.314973][T10074] chnl_net:caif_netlink_parms(): no params data found [ 158.403040][T10074] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.414653][T10074] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.421819][T10074] bridge_slave_0: entered allmulticast mode [ 158.432661][T10074] bridge_slave_0: entered promiscuous mode [ 158.443918][T10074] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.451141][T10074] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.465755][T10074] bridge_slave_1: entered allmulticast mode [ 158.472690][T10074] bridge_slave_1: entered promiscuous mode [ 158.499954][T10074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.523616][T10074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.552839][T10074] team0: Port device team_slave_0 added [ 158.561976][T10074] team0: Port device team_slave_1 added [ 158.591501][T10074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.598718][T10074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.630767][T10074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.643914][T10074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.650880][T10074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.677525][T10074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.715357][T10074] hsr_slave_0: entered promiscuous mode [ 158.721912][T10074] hsr_slave_1: entered promiscuous mode [ 158.728960][T10074] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.736690][T10074] Cannot create hsr debugfs directory [ 158.853381][ T5243] Bluetooth: hci1: command tx timeout [ 159.019394][T10074] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 159.034889][T10074] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 159.044476][T10074] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 159.053049][T10074] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 159.072395][T10074] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.079507][T10074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.086969][T10074] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.094121][T10074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.138494][T10074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.153895][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.161978][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.180794][T10074] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.191212][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.198317][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.211722][ T5595] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.218830][ T5595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.355077][T10074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.498217][T10074] veth0_vlan: entered promiscuous mode [ 159.508737][T10074] veth1_vlan: entered promiscuous mode [ 159.531472][T10074] veth0_macvtap: entered promiscuous mode [ 159.539928][T10074] veth1_macvtap: entered promiscuous mode [ 159.554099][T10074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.565607][T10074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.575950][T10074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.587102][T10074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.598656][T10074] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.610046][T10074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.620669][T10074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.630794][T10074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.641480][T10074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.652481][T10074] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.665105][T10074] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.675089][T10074] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.684360][T10074] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.693072][T10074] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.741160][ T1831] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.754643][ T1831] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.771923][ T5595] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.782008][ T5595] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.690339][ T5595] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.989146][ T5240] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 162.998438][ T5240] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 163.006282][ T5240] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 163.015116][ T5240] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 163.023060][ T5240] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 163.030595][ T5240] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 163.131884][T10144] chnl_net:caif_netlink_parms(): no params data found [ 163.178674][T10144] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.186104][T10144] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.193924][T10144] bridge_slave_0: entered allmulticast mode [ 163.200504][T10144] bridge_slave_0: entered promiscuous mode [ 163.208235][T10144] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.219091][T10144] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.226389][T10144] bridge_slave_1: entered allmulticast mode [ 163.232918][T10144] bridge_slave_1: entered promiscuous mode [ 163.256552][T10144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.268740][T10144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.302397][ T5595] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.325917][T10144] team0: Port device team_slave_0 added [ 163.334200][T10144] team0: Port device team_slave_1 added [ 163.355621][T10144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.362769][T10144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.389170][T10144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.401822][T10144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.409092][T10144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.437130][T10144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.460583][ T5595] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.495777][T10144] hsr_slave_0: entered promiscuous mode [ 163.507865][T10144] hsr_slave_1: entered promiscuous mode [ 163.514303][T10144] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.521852][T10144] Cannot create hsr debugfs directory [ 163.539328][ T5595] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.633041][ T5595] bridge_slave_1: left allmulticast mode [ 163.639278][ T5595] bridge_slave_1: left promiscuous mode [ 163.645873][ T5595] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.659081][ T5595] bridge_slave_0: left allmulticast mode [ 163.665177][ T5595] bridge_slave_0: left promiscuous mode [ 163.670829][ T5595] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.940022][ T5595] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.951374][ T5595] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.962538][ T5595] bond0 (unregistering): Released all slaves [ 164.245639][ T5595] hsr_slave_0: left promiscuous mode [ 164.251580][ T5595] hsr_slave_1: left promiscuous mode [ 164.258088][ T5595] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.265627][ T5595] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.275742][ T5595] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.283158][ T5595] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.300610][ T5595] veth1_macvtap: left promiscuous mode [ 164.307009][ T5595] veth0_macvtap: left promiscuous mode [ 164.312563][ T5595] veth1_vlan: left promiscuous mode [ 164.318042][ T5595] veth0_vlan: left promiscuous mode [ 164.679543][ T5595] team0 (unregistering): Port device team_slave_1 removed [ 164.716029][ T5595] team0 (unregistering): Port device team_slave_0 removed [ 165.084103][T10144] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 165.092661][T10144] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 165.100001][ T5243] Bluetooth: hci1: command tx timeout [ 165.108471][T10144] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 165.121937][T10144] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 165.198982][T10144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.217359][T10144] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.229220][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.236337][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.251037][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.258174][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.305878][T10144] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 165.410846][T10144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.550417][T10144] veth0_vlan: entered promiscuous mode [ 165.562810][T10144] veth1_vlan: entered promiscuous mode [ 165.586250][T10144] veth0_macvtap: entered promiscuous mode [ 165.596295][T10144] veth1_macvtap: entered promiscuous mode [ 165.611555][T10144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.622131][T10144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.633452][T10144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.644068][T10144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.655953][T10144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.668018][T10144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.678618][T10144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.688561][T10144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.699066][T10144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.709895][T10144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.723845][T10144] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.732549][T10144] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.741702][T10144] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.751301][T10144] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.799015][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.811485][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.832228][ T5595] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.840204][ T5595] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.846276][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.235844][ T5240] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 169.244388][ T5240] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 169.252097][ T5240] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 169.261270][ T5240] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 169.272423][ T5240] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 169.279783][ T5240] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 169.344094][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.410265][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.450186][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.468808][T10163] chnl_net:caif_netlink_parms(): no params data found [ 169.547905][T10163] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.555328][T10163] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.562439][T10163] bridge_slave_0: entered allmulticast mode [ 169.569352][T10163] bridge_slave_0: entered promiscuous mode [ 169.581602][T10163] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.589123][T10163] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.596700][T10163] bridge_slave_1: entered allmulticast mode [ 169.603652][T10163] bridge_slave_1: entered promiscuous mode [ 169.640209][T10163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.649873][ T52] bridge_slave_1: left allmulticast mode [ 169.659866][ T52] bridge_slave_1: left promiscuous mode [ 169.665933][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.675110][ T52] bridge_slave_0: left allmulticast mode [ 169.680770][ T52] bridge_slave_0: left promiscuous mode [ 169.686559][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.958364][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.969282][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.980023][ T52] bond0 (unregistering): Released all slaves [ 169.995623][T10163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.024774][T10163] team0: Port device team_slave_0 added [ 170.032003][T10163] team0: Port device team_slave_1 added [ 170.089130][T10163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.096311][T10163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.123012][T10163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.136745][T10163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.145313][T10163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.171646][T10163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.225344][T10163] hsr_slave_0: entered promiscuous mode [ 170.231438][T10163] hsr_slave_1: entered promiscuous mode [ 170.237930][T10163] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.247876][T10163] Cannot create hsr debugfs directory [ 170.285906][ T52] hsr_slave_0: left promiscuous mode [ 170.291644][ T52] hsr_slave_1: left promiscuous mode [ 170.300410][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.308405][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.316460][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.324382][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.341716][ T52] veth1_macvtap: left promiscuous mode [ 170.347479][ T52] veth0_macvtap: left promiscuous mode [ 170.353152][ T52] veth1_vlan: left promiscuous mode [ 170.358686][ T52] veth0_vlan: left promiscuous mode [ 170.676798][ T52] team0 (unregistering): Port device team_slave_1 removed [ 170.708837][ T52] team0 (unregistering): Port device team_slave_0 removed [ 171.334185][ T5243] Bluetooth: hci1: command tx timeout [ 171.355747][T10163] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 171.366078][T10163] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 171.376075][T10163] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 171.389481][T10163] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 171.441365][T10163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.457287][T10163] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.470164][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.477273][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.491856][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.498984][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.619184][T10163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.760331][T10163] veth0_vlan: entered promiscuous mode [ 171.771766][T10163] veth1_vlan: entered promiscuous mode [ 171.797928][T10163] veth0_macvtap: entered promiscuous mode [ 171.806674][T10163] veth1_macvtap: entered promiscuous mode [ 171.821666][T10163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.832167][T10163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.842461][T10163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.856988][T10163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.867817][T10163] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.882662][T10163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.893854][T10163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.904007][T10163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.914475][T10163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.925408][T10163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.939101][T10163] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.947969][T10163] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.957584][T10163] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.966629][T10163] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.022113][ T5596] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.039989][ T5596] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.057985][ T5596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.066535][ T5596] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.060840][ T5596] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.506131][T10183] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 175.703121][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 175.712293][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 175.720264][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 175.729549][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 175.739928][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 175.746032][ T5237] Bluetooth: hci0: command 0x0406 tx timeout [ 175.746065][ T5245] Bluetooth: hci2: command 0x0406 tx timeout [ 175.761124][ T5245] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 175.769164][ T5245] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 175.825865][ T5596] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.906349][T10205] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1384'. [ 175.969673][ T5596] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.092645][ T5596] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.274245][ T5596] bridge_slave_1: left allmulticast mode [ 176.283362][ T5596] bridge_slave_1: left promiscuous mode [ 176.289148][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.299043][ T5596] bridge_slave_0: left allmulticast mode [ 176.309978][ T5596] bridge_slave_0: left promiscuous mode [ 176.316034][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.547117][T10236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1389'. [ 176.561376][T10237] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1392'. [ 176.577289][T10237] validate_nla: 124 callbacks suppressed [ 176.577306][T10237] netlink: 'syz.0.1392': attribute type 2 has an invalid length. [ 176.592151][T10237] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1392'. [ 176.700634][ T5596] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.717788][ T5596] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.729703][ T5596] bond0 (unregistering): Released all slaves [ 176.748133][T10225] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1388'. [ 176.972401][T10256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1398'. [ 176.976237][T10194] chnl_net:caif_netlink_parms(): no params data found [ 177.193328][T10263] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1401'. [ 177.360104][ T5596] hsr_slave_0: left promiscuous mode [ 177.371581][T10271] netlink: 'syz.1.1404': attribute type 10 has an invalid length. [ 177.389490][ T5596] hsr_slave_1: left promiscuous mode [ 177.399177][T10271] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.1404'. [ 177.409663][ T5596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.418470][ T5596] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.426804][ T5596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.434638][ T5596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.449259][T10277] netlink: 'syz.0.1403': attribute type 1 has an invalid length. [ 177.459299][T10277] netlink: 'syz.0.1403': attribute type 3 has an invalid length. [ 177.462025][ T5596] veth1_macvtap: left promiscuous mode [ 177.472977][ T5596] veth0_macvtap: left promiscuous mode [ 177.478956][ T5596] veth1_vlan: left promiscuous mode [ 177.482786][T10277] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1403'. [ 177.484622][ T5596] veth0_vlan: left promiscuous mode [ 177.499673][T10277] NCSI netlink: No device for ifindex 131080 [ 177.512002][T10278] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1405'. [ 177.824722][ T5240] Bluetooth: hci1: command tx timeout [ 178.082745][ T5596] team0 (unregistering): Port device team_slave_1 removed [ 178.139870][ T5596] team0 (unregistering): Port device team_slave_0 removed [ 178.520174][T10194] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.527731][T10194] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.535451][T10194] bridge_slave_0: entered allmulticast mode [ 178.542119][T10194] bridge_slave_0: entered promiscuous mode [ 178.556939][T10274] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 178.566213][T10274] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 178.575188][T10274] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 178.585192][T10274] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 178.594284][T10274] geneve2: entered promiscuous mode [ 178.599541][T10274] geneve2: entered allmulticast mode [ 178.607273][T10274] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 178.616870][T10274] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 178.626007][T10274] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 178.634988][T10274] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 178.692886][T10300] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 178.703079][T10300] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 178.712633][T10300] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 178.728622][T10300] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 178.738475][T10300] geneve2: entered promiscuous mode [ 178.746341][T10300] geneve2: entered allmulticast mode [ 178.753054][T10300] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 178.763081][T10300] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 178.772212][T10300] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 178.786446][T10300] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 178.821943][T10194] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.829402][T10194] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.838150][T10194] bridge_slave_1: entered allmulticast mode [ 178.850178][T10194] bridge_slave_1: entered promiscuous mode [ 178.898868][T10194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.937450][T10194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.072116][T10194] team0: Port device team_slave_0 added [ 179.105352][T10194] team0: Port device team_slave_1 added [ 179.234292][T10194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.269515][T10194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.301812][T10194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.318572][T10336] netlink: 'syz.1.1421': attribute type 13 has an invalid length. [ 179.443223][T10194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.450354][T10194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.478584][T10194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.574157][T10194] hsr_slave_0: entered promiscuous mode [ 179.593731][T10194] hsr_slave_1: entered promiscuous mode [ 179.601706][T10194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 179.613762][T10194] Cannot create hsr debugfs directory [ 179.820385][T10365] x_tables: duplicate underflow at hook 2 [ 179.855001][T10366] xt_TCPMSS: Only works on TCP SYN packets [ 179.893381][ T5240] Bluetooth: hci1: command tx timeout [ 179.981118][T10366] "syz.3.1427" (10366) uses obsolete ecb(arc4) skcipher [ 179.989610][T10373] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 180.240733][T10389] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 180.268447][T10194] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 180.282233][T10194] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 180.299089][T10194] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 180.316784][T10194] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 180.389626][T10399] netlink: 'syz.2.1436': attribute type 8 has an invalid length. [ 180.410920][T10399] netlink: 'syz.2.1436': attribute type 1 has an invalid length. [ 180.508978][T10194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.551986][T10194] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.578013][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.585183][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.612009][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.619199][ T5596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.755944][T10422] netlink: 'syz.2.1443': attribute type 21 has an invalid length. [ 180.778993][T10422] IPv6: NLM_F_CREATE should be specified when creating new route [ 180.798240][T10422] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 180.805522][T10422] IPv6: NLM_F_CREATE should be set when creating new route [ 180.812782][T10422] IPv6: NLM_F_CREATE should be set when creating new route [ 180.820054][T10422] IPv6: NLM_F_CREATE should be set when creating new route [ 180.852661][T10412] infiniband syz0: set down [ 180.860053][T10412] infiniband syz0: added team0 [ 180.872660][T10412] syz0: rxe_create_cq: returned err = -12 [ 180.879027][T10412] infiniband syz0: Couldn't create ib_mad CQ [ 180.889303][T10412] infiniband syz0: Couldn't open port 1 [ 180.939237][T10412] RDS/IB: syz0: added [ 180.951608][T10412] smc: adding ib device syz0 with port count 1 [ 180.969089][T10412] smc: ib device syz0 port 1 has pnetid [ 181.002193][T10194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.193955][T10445] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 181.215942][T10445] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 181.281052][T10445] batman_adv: batadv0: Removing interface: virt_wifi0 [ 181.533669][T10194] veth0_vlan: entered promiscuous mode [ 181.568310][T10194] veth1_vlan: entered promiscuous mode [ 181.621094][T10194] veth0_macvtap: entered promiscuous mode [ 181.631449][T10194] veth1_macvtap: entered promiscuous mode [ 181.658960][T10194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.676534][T10194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.690201][T10194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.702752][T10194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.718972][T10194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.757875][T10194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.769095][T10194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.783577][T10194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.799607][T10194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.811344][T10194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.825857][T10194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.841469][T10194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.851151][T10194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.861508][T10194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.989367][ T5245] Bluetooth: hci1: command tx timeout [ 182.057955][ T5596] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.066134][ T5596] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.159197][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.171209][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.226025][T10472] netlink: 'syz.3.1455': attribute type 10 has an invalid length. [ 182.250927][T10472] __nla_validate_parse: 6 callbacks suppressed [ 182.250946][T10472] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1455'. [ 182.303625][ T5240] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 182.311443][T10463] [ 182.313807][T10463] ============================================ [ 182.319983][T10463] WARNING: possible recursive locking detected [ 182.326170][T10463] 6.12.0-rc3-syzkaller-00185-g9efc44fb2dba #0 Not tainted [ 182.333283][T10463] -------------------------------------------- [ 182.339437][T10463] syz.0.1453/10463 is trying to acquire lock: [ 182.345505][T10463] ffff8880564dc078 (&hdev->lock){+.+.}-{3:3}, at: mgmt_remove_adv_monitor_complete+0xaf/0x550 [ 182.355811][T10463] [ 182.355811][T10463] but task is already holding lock: [ 182.363182][T10463] ffff8880564dc078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x5c8/0x11c0 [ 182.372445][T10463] [ 182.372445][T10463] other info that might help us debug this: [ 182.380504][T10463] Possible unsafe locking scenario: [ 182.380504][T10463] [ 182.387969][T10463] CPU0 [ 182.391264][T10463] ---- [ 182.394543][T10463] lock(&hdev->lock); [ 182.398624][T10463] lock(&hdev->lock); [ 182.402697][T10463] [ 182.402697][T10463] *** DEADLOCK *** [ 182.402697][T10463] [ 182.410839][T10463] May be due to missing lock nesting notation [ 182.410839][T10463] [ 182.419151][T10463] 3 locks held by syz.0.1453/10463: [ 182.424337][T10463] #0: ffff8880564dcd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_close+0x10a/0x210 [ 182.433829][T10463] #1: ffff8880564dc078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x5c8/0x11c0 [ 182.443596][T10463] #2: ffff8880564dc690 (&hdev->cmd_sync_work_lock){+.+.}-{3:3}, at: hci_cmd_sync_dequeue+0x44/0x3d0 [ 182.454482][T10463] [ 182.454482][T10463] stack backtrace: [ 182.460359][T10463] CPU: 0 UID: 0 PID: 10463 Comm: syz.0.1453 Not tainted 6.12.0-rc3-syzkaller-00185-g9efc44fb2dba #0 [ 182.471108][T10463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 182.481154][T10463] Call Trace: [ 182.484424][T10463] [ 182.487346][T10463] dump_stack_lvl+0x241/0x360 [ 182.492020][T10463] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.497214][T10463] ? __pfx__printk+0x10/0x10 [ 182.501799][T10463] ? lockdep_unlock+0x16a/0x300 [ 182.506654][T10463] print_deadlock_bug+0x483/0x620 [ 182.511679][T10463] validate_chain+0x15e2/0x5920 [ 182.516535][T10463] ? validate_chain+0x11e/0x5920 [ 182.521468][T10463] ? __pfx_validate_chain+0x10/0x10 [ 182.526665][T10463] ? validate_chain+0x11e/0x5920 [ 182.531602][T10463] ? validate_chain+0x11e/0x5920 [ 182.536540][T10463] ? __pfx_validate_chain+0x10/0x10 [ 182.541745][T10463] ? __pfx_validate_chain+0x10/0x10 [ 182.546941][T10463] ? mark_lock+0x9a/0x360 [ 182.551269][T10463] __lock_acquire+0x1384/0x2050 [ 182.556129][T10463] lock_acquire+0x1ed/0x550 [ 182.560633][T10463] ? mgmt_remove_adv_monitor_complete+0xaf/0x550 [ 182.566967][T10463] ? __pfx_lock_acquire+0x10/0x10 [ 182.571995][T10463] ? __pfx___might_resched+0x10/0x10 [ 182.577283][T10463] __mutex_lock+0x136/0xd70 [ 182.581782][T10463] ? mgmt_remove_adv_monitor_complete+0xaf/0x550 [ 182.588198][T10463] ? __pfx___mutex_trylock_common+0x10/0x10 [ 182.594086][T10463] ? mgmt_remove_adv_monitor_complete+0xaf/0x550 [ 182.600411][T10463] ? __pfx___mutex_lock+0x10/0x10 [ 182.605428][T10463] ? rcu_is_watching+0x15/0xb0 [ 182.610188][T10463] ? __mutex_lock+0x2ef/0xd70 [ 182.614865][T10463] mgmt_remove_adv_monitor_complete+0xaf/0x550 [ 182.621022][T10463] ? __pfx___mutex_lock+0x10/0x10 [ 182.626047][T10463] ? __pfx_mgmt_remove_adv_monitor_complete+0x10/0x10 [ 182.632812][T10463] ? __pfx_mgmt_remove_adv_monitor_complete+0x10/0x10 [ 182.639575][T10463] hci_cmd_sync_dequeue+0x22b/0x3d0 [ 182.644775][T10463] cmd_complete_rsp+0x4c/0x180 [ 182.649534][T10463] mgmt_pending_foreach+0xd1/0x130 [ 182.654644][T10463] ? __pfx_cmd_complete_rsp+0x10/0x10 [ 182.660009][T10463] __mgmt_power_off+0x183/0x430 [ 182.664852][T10463] ? __pfx___mgmt_power_off+0x10/0x10 [ 182.670220][T10463] ? __mutex_trylock_common+0x183/0x2e0 [ 182.675763][T10463] ? __pfx___might_resched+0x10/0x10 [ 182.681048][T10463] ? __pfx___mutex_trylock_common+0x10/0x10 [ 182.686936][T10463] ? rcu_is_watching+0x15/0xb0 [ 182.691694][T10463] ? trace_contention_end+0x3c/0x120 [ 182.696980][T10463] ? __mutex_lock+0x2ef/0xd70 [ 182.701651][T10463] ? __mutex_unlock_slowpath+0x21d/0x750 [ 182.707277][T10463] ? hci_dev_close_sync+0x5c8/0x11c0 [ 182.712560][T10463] ? __pfx___mutex_lock+0x10/0x10 [ 182.717590][T10463] ? lockdep_hardirqs_on+0x99/0x150 [ 182.722783][T10463] ? _raw_spin_unlock_irq+0x2e/0x50 [ 182.727982][T10463] ? drain_workqueue+0x2d3/0x3a0 [ 182.732910][T10463] ? hci_discovery_set_state+0x57/0x180 [ 182.738447][T10463] hci_dev_close_sync+0x6c4/0x11c0 [ 182.743560][T10463] hci_dev_close+0x112/0x210 [ 182.748142][T10463] sock_do_ioctl+0x158/0x460 [ 182.752735][T10463] ? __pfx_sock_do_ioctl+0x10/0x10 [ 182.757851][T10463] sock_ioctl+0x626/0x8e0 [ 182.762179][T10463] ? __pfx_sock_ioctl+0x10/0x10 [ 182.767028][T10463] ? __fget_files+0x29/0x470 [ 182.771623][T10463] ? __fget_files+0x3f3/0x470 [ 182.776295][T10463] ? __pfx_sock_ioctl+0x10/0x10 [ 182.781142][T10463] __se_sys_ioctl+0xf9/0x170 [ 182.785737][T10463] do_syscall_64+0xf3/0x230 [ 182.790233][T10463] ? clear_bhb_loop+0x35/0x90 [ 182.794906][T10463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.800802][T10463] RIP: 0033:0x7f64fd57e719 [ 182.805213][T10463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.824823][T10463] RSP: 002b:00007f64fe39e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 182.833235][T10463] RAX: ffffffffffffffda RBX: 00007f64fd735f80 RCX: 00007f64fd57e719 [ 182.841200][T10463] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 0000000000000004 [ 182.849161][T10463] RBP: 00007f64fd5f12be R08: 0000000000000000 R09: 0000000000000000 [ 182.857126][T10463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.865091][T10463] R13: 0000000000000000 R14: 00007f64fd735f80 R15: 00007ffdf49645b8 [ 182.873063][T10463] [ 184.139681][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.077470][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.148158][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.218811][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.292265][ T35] bridge_slave_1: left allmulticast mode [ 185.297956][ T35] bridge_slave_1: left promiscuous mode [ 185.304089][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.312423][ T35] bridge_slave_0: left allmulticast mode [ 185.318453][ T35] bridge_slave_0: left promiscuous mode [ 185.325414][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.443373][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.454155][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.464133][ T35] bond0 (unregistering): Released all slaves [ 185.738514][ T35] hsr_slave_0: left promiscuous mode [ 185.744337][ T35] hsr_slave_1: left promiscuous mode [ 185.750055][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.763663][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.771241][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.779237][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.788814][ T35] veth1_macvtap: left promiscuous mode [ 185.794849][ T35] veth0_macvtap: left promiscuous mode [ 185.800396][ T35] veth1_vlan: left promiscuous mode [ 185.806044][ T35] veth0_vlan: left promiscuous mode [ 185.967289][ T35] team0 (unregistering): Port device team_slave_1 removed [ 185.990935][ T35] team0 (unregistering): Port device team_slave_0 removed