last executing test programs: 53.289248584s ago: executing program 2 (id=572): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x4c, 0x1a, 0x190, 0x73, 0x270, 0x258, 0x258, 0x270, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'netdevsim0\x00', 'macvlan1\x00'}, 0x0, 0x160, 0x190, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x2}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @dev}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000711212000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f00000007c0)=0x1, 0x4) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x2, '\x00', 0x0, r1, 0x4, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) splice(r3, 0x0, r5, 0x0, 0x80, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x18, 0x10, 0x80, 0xffffff4e, 0x22020, r2, 0x81, '\x00', 0x0, r3, 0x2, 0x4, 0x4, 0x0, @void, @value, @void, @value}, 0x50) (async) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x9, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {}, {0x4}}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002c00018014000180080001007f00000108000200e00000020c000280050001000000000006000340000300002400028014000180080001000000000008000200ac1414bb0c000280050001000000000008000740000000001c000f8008000140000000000800034000000000080002"], 0x88}}, 0x0) (async, rerun: 32) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x114, 0x1, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xa0}, @CTA_FILTER_ORIG_FLAGS={0x8}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_REPLY={0x90, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}]}, @CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfffffff1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x10001}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xb4}]}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x400}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x3}]}, 0x114}, 0x1, 0x0, 0x0, 0x50}, 0x2c004000) (rerun: 32) 46.395195818s ago: executing program 2 (id=572): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x4c, 0x1a, 0x190, 0x73, 0x270, 0x258, 0x258, 0x270, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'netdevsim0\x00', 'macvlan1\x00'}, 0x0, 0x160, 0x190, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x2}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @dev}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000711212000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f00000007c0)=0x1, 0x4) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x2, '\x00', 0x0, r1, 0x4, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) splice(r3, 0x0, r5, 0x0, 0x80, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x18, 0x10, 0x80, 0xffffff4e, 0x22020, r2, 0x81, '\x00', 0x0, r3, 0x2, 0x4, 0x4, 0x0, @void, @value, @void, @value}, 0x50) (async) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x9, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {}, {0x4}}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002c00018014000180080001007f00000108000200e00000020c000280050001000000000006000340000300002400028014000180080001000000000008000200ac1414bb0c000280050001000000000008000740000000001c000f8008000140000000000800034000000000080002"], 0x88}}, 0x0) (async, rerun: 32) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x114, 0x1, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xa0}, @CTA_FILTER_ORIG_FLAGS={0x8}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_REPLY={0x90, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}]}, @CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfffffff1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x10001}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xb4}]}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x400}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x3}]}, 0x114}, 0x1, 0x0, 0x0, 0x50}, 0x2c004000) (rerun: 32) 36.287141086s ago: executing program 2 (id=572): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x4c, 0x1a, 0x190, 0x73, 0x270, 0x258, 0x258, 0x270, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'netdevsim0\x00', 'macvlan1\x00'}, 0x0, 0x160, 0x190, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x2}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @dev}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000711212000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f00000007c0)=0x1, 0x4) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x2, '\x00', 0x0, r1, 0x4, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) splice(r3, 0x0, r5, 0x0, 0x80, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x18, 0x10, 0x80, 0xffffff4e, 0x22020, r2, 0x81, '\x00', 0x0, r3, 0x2, 0x4, 0x4, 0x0, @void, @value, @void, @value}, 0x50) (async) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x9, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {}, {0x4}}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002c00018014000180080001007f00000108000200e00000020c000280050001000000000006000340000300002400028014000180080001000000000008000200ac1414bb0c000280050001000000000008000740000000001c000f8008000140000000000800034000000000080002"], 0x88}}, 0x0) (async, rerun: 32) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x114, 0x1, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xa0}, @CTA_FILTER_ORIG_FLAGS={0x8}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_REPLY={0x90, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}]}, @CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfffffff1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x10001}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xb4}]}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x400}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x3}]}, 0x114}, 0x1, 0x0, 0x0, 0x50}, 0x2c004000) (rerun: 32) 27.021923335s ago: executing program 2 (id=572): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x4c, 0x1a, 0x190, 0x73, 0x270, 0x258, 0x258, 0x270, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'netdevsim0\x00', 'macvlan1\x00'}, 0x0, 0x160, 0x190, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x2}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @dev}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000711212000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f00000007c0)=0x1, 0x4) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x2, '\x00', 0x0, r1, 0x4, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) splice(r3, 0x0, r5, 0x0, 0x80, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x18, 0x10, 0x80, 0xffffff4e, 0x22020, r2, 0x81, '\x00', 0x0, r3, 0x2, 0x4, 0x4, 0x0, @void, @value, @void, @value}, 0x50) (async) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x9, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {}, {0x4}}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002c00018014000180080001007f00000108000200e00000020c000280050001000000000006000340000300002400028014000180080001000000000008000200ac1414bb0c000280050001000000000008000740000000001c000f8008000140000000000800034000000000080002"], 0x88}}, 0x0) (async, rerun: 32) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x114, 0x1, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xa0}, @CTA_FILTER_ORIG_FLAGS={0x8}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_REPLY={0x90, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}]}, @CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfffffff1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x10001}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xb4}]}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x400}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x3}]}, 0x114}, 0x1, 0x0, 0x0, 0x50}, 0x2c004000) (rerun: 32) 17.71828994s ago: executing program 2 (id=572): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x4c, 0x1a, 0x190, 0x73, 0x270, 0x258, 0x258, 0x270, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'netdevsim0\x00', 'macvlan1\x00'}, 0x0, 0x160, 0x190, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x2}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @dev}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000711212000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f00000007c0)=0x1, 0x4) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x2, '\x00', 0x0, r1, 0x4, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) splice(r3, 0x0, r5, 0x0, 0x80, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x18, 0x10, 0x80, 0xffffff4e, 0x22020, r2, 0x81, '\x00', 0x0, r3, 0x2, 0x4, 0x4, 0x0, @void, @value, @void, @value}, 0x50) (async) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x9, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {}, {0x4}}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002c00018014000180080001007f00000108000200e00000020c000280050001000000000006000340000300002400028014000180080001000000000008000200ac1414bb0c000280050001000000000008000740000000001c000f8008000140000000000800034000000000080002"], 0x88}}, 0x0) (async, rerun: 32) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x114, 0x1, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xa0}, @CTA_FILTER_ORIG_FLAGS={0x8}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_REPLY={0x90, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}]}, @CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfffffff1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x10001}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xb4}]}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x400}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x3}]}, 0x114}, 0x1, 0x0, 0x0, 0x50}, 0x2c004000) (rerun: 32) 6.163539223s ago: executing program 2 (id=572): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x4c, 0x1a, 0x190, 0x73, 0x270, 0x258, 0x258, 0x270, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'netdevsim0\x00', 'macvlan1\x00'}, 0x0, 0x160, 0x190, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x2}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @dev}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000711212000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f00000007c0)=0x1, 0x4) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x2, '\x00', 0x0, r1, 0x4, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) splice(r3, 0x0, r5, 0x0, 0x80, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x18, 0x10, 0x80, 0xffffff4e, 0x22020, r2, 0x81, '\x00', 0x0, r3, 0x2, 0x4, 0x4, 0x0, @void, @value, @void, @value}, 0x50) (async) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x9, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {}, {0x4}}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002c00018014000180080001007f00000108000200e00000020c000280050001000000000006000340000300002400028014000180080001000000000008000200ac1414bb0c000280050001000000000008000740000000001c000f8008000140000000000800034000000000080002"], 0x88}}, 0x0) (async, rerun: 32) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x114, 0x1, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xa0}, @CTA_FILTER_ORIG_FLAGS={0x8}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_REPLY={0x90, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}]}, @CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfffffff1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x10001}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xb4}]}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x400}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x3}]}, 0x114}, 0x1, 0x0, 0x0, 0x50}, 0x2c004000) (rerun: 32) 3.819623963s ago: executing program 1 (id=1032): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000002c00000095000000000000003d789ade838a5ad00c21f97a9d6f55528c474cb385573d9f5ec0798d497a5d0ab93dbb637fd8de14970b4f76b599911df77098a8cd51e5ee070239f048bff4c9d6d337c8759d1737b62deae7412f1b5c334ef76307b8139d8f019360bea59a74b86ce453bc8964c32f955d410083f7567775a2ca15dbbf01550310a78644e80171753107cee23ecb376879ae14b9e1ab987023c7db41925c55b0a4141ae3c08d264831d0f6365469c3562185000000000000004f78cd03163b2d00101e000000000000000000000000000000001a18f6de00bb8c95f8bdc2a5effe88e5bc3a969a35af8033d11474cfa5d73d92c9bd2b72c3ce63d47075ae7c59d82cea124301000000000000000cb56281877934e99919c82bfdffaedc4df6f74e8f286454fcd2967415b826a6300d100e7eb8717c8528e445fbefe6a3139191529f22e4c0435e5c53e469f70c08bdff633307bbf119ffdb2e1d717eb268ee7fee0486fa294b41c1d4dc44a9801c34ada4ed759f4312dd000000000000000000000000f4ad23f3df7cdc65edcb81f103ef861a5d12eb4e1f33f6b43b6661b680850fc55aa8465b0500000000000000a17b60f43b4b2a2afc8730a587525ba1fd296b7aa4cc8936da97ff62885b8586b67e3e9b5b8d4f18df39f65ef75a42bb84587a838b828024ece8f64d74a1502d74f7e42d103e469920ae8c58f7418e67918676abfe37c9a619c27ff1a82d78431843ae38f5ba8207978a16ec9c1fc0dc752684576c8830e8e4e480b4b1649717078100000000000000001900000000ecdc068efc4f590529f07f581874420767f696a260fde832f3bbd50b84d2f0e03d75459da25aee1d3e99d41da9938eb84dfb58dbca8d9d4f1a23e6ce8b6e7e95034e6c1c"], &(0x7f00000003c0)='syzkaller\x00', 0x4, 0xff0, &(0x7f000062b000)=""/4080, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f00000008c0)={0x3a, 0x2b, '\x00', [@generic={0x4, 0xfa, "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"}, @calipso={0x7, 0x50, {0x2, 0x12, 0xa, 0x9, [0x40, 0x200, 0x4, 0x7, 0x3, 0x5, 0x7, 0xfffffffffffff584, 0x3]}}, @jumbo={0xc2, 0x4, 0x9da0}, @jumbo]}, 0x168) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x38, 0x48, 0xe4945d2eb074039d, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @mcast2={0xff, 0x5}}]}, 0x38}}, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="6000000000060300"], 0x60}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r5, @ANYBLOB="24002d80080002000300000005000100000000000500040000000000080003"], 0x40}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4a, 0x0, &(0x7f0000000280)="28fb47d0d0a589b391198c9aeaab5adccd8b407bd85bcc27131efc2a8fe3df8efa267c1c6c395481426942faeba9cd6df4da82cfabf62c7c48f6bc55cf792c342172abee5232955243af", 0x2, 0x0, 0xffffffff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='syzkaller\x00', 0x4, 0xff0, &(0x7f000062b000)=""/4080, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f00000008c0)={0x3a, 0x2b, '\x00', [@generic={0x4, 0xfa, "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"}, @calipso={0x7, 0x50, {0x2, 0x12, 0xa, 0x9, [0x40, 0x200, 0x4, 0x7, 0x3, 0x5, 0x7, 0xfffffffffffff584, 0x3]}}, @jumbo={0xc2, 0x4, 0x9da0}, @jumbo]}, 0x168) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x38, 0x48, 0xe4945d2eb074039d, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @mcast2={0xff, 0x5}}]}, 0x38}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="6000000000060300"], 0x60}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000080)={'wpan1\x00'}) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r5, @ANYBLOB="24002d80080002000300000005000100000000000500040000000000080003"], 0x40}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4a, 0x0, &(0x7f0000000280)="28fb47d0d0a589b391198c9aeaab5adccd8b407bd85bcc27131efc2a8fe3df8efa267c1c6c395481426942faeba9cd6df4da82cfabf62c7c48f6bc55cf792c342172abee5232955243af", 0x2, 0x0, 0xffffffff}, 0x50) (async) 3.540856509s ago: executing program 1 (id=1034): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005000c000100000208000600480a000005000b"], 0x44}, 0x1, 0x0, 0x0, 0x200000c0}, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x1ff, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000005140)={r4, &(0x7f0000004f80), 0x0}, 0x20) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0x7d, 0x0, &(0x7f0000000300)=0x9b) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x20, &(0x7f0000000240)={&(0x7f0000000040)=""/60, 0x3c, 0x0, &(0x7f0000000080)=""/224, 0xe0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1802000000000000000000000020000018010000202070250000000000202020db1af8ff41000000bca1010000f8ffffffb702000008000000b70300000000000085000000050000009500008000"/88], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3.502736599s ago: executing program 0 (id=1035): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@ipv6_newroute={0x38, 0x18, 0x1, 0x0, 0xfffffffc, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, [@RTA_OIF={0x8, 0x4, r4}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x3}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0x10}}]}, 0x38}}, 0x800) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) shutdown(r2, 0x1) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000140)="9fae6eb48447ae7c9c3ca72dc89843e1b2be51a77164333114549728a2f45aa7ec89472eab38cae244aa569734b8645053b4aed31ae8c4a1180b7c6649024400d2d4c8a6ac80950f2e229d90227edb8f1f4b2e1c", 0x54) recvmsg(r2, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=""/40, 0x28}, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000a0000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x22, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0) 3.450304458s ago: executing program 1 (id=1036): socket$tipc(0x1e, 0x2, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)="17000000020001000003be8c5ee17688a2003308030300ecff3f0200000300000a0000000098fc5ad9485bbb6a880023d15e43ff00d6c8db1000dba67e060000001c8900000200df018000000000f5", 0xffffffffffffff56) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x143082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40800, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000d00)=[{&(0x7f0000000100)="89e7ee2c7cdad9b4b47380c988ca", 0xfdef}], 0x1) 2.998868403s ago: executing program 3 (id=1039): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0xfffffffc, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x5, "00000500"}}}]}, 0x48}}, 0x0) 2.724576812s ago: executing program 4 (id=1040): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'gretap0\x00', &(0x7f0000000080)={'tunl0\x00', 0x0, 0x0, 0x8000, 0x5, 0x80000000, {{0x2d, 0x4, 0x3, 0x1, 0xb4, 0x66, 0x0, 0x2, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, {[@end, @timestamp_addr={0x44, 0xc, 0x8, 0x1, 0x0, [{@rand_addr=0x64010101, 0x9}]}, @rr={0x7, 0x1b, 0x1d, [@loopback, @multicast2, @dev={0xac, 0x14, 0x14, 0x2e}, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100]}, @timestamp_addr={0x44, 0x14, 0x2a, 0x1, 0x1, [{@private=0xa010101, 0x6}, {@remote, 0x10}]}, @rr={0x7, 0x17, 0x67, [@multicast2, @loopback, @broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x15}]}, @timestamp_prespec={0x44, 0x14, 0x4b, 0x3, 0x3, [{@empty, 0x6}, {@broadcast, 0x200}]}, @timestamp={0x44, 0x14, 0x4d, 0x0, 0x7, [0x6, 0x10001, 0xa, 0xf]}, @ssrr={0x89, 0x23, 0xc7, [@multicast1, @multicast2, @private=0xa010101, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast2, @empty]}]}}}}}) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="68000000120005ff2cbd7000000000200000004a", @ANYRES32=0x0, @ANYBLOB="00696facda40040040001280090001"], 0x68}}, 0x0) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) (async) socket$igmp(0x2, 0x3, 0x2) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r4, &(0x7f0000000200)=[{0x0}], 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) (async) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @link_local}, 0x32, {0x2, 0x4e20, @multicast1}, 'lo\x00'}) (async) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x10, 0x6, 0x5c0, 0x1f8, 0xd0, 0x0, 0xd0, 0x1f8, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}]}, @common=@unspec=@NFQUEUE3={0x28}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@mcast1}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1\x00', 'ip6gretap0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@multicast1}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'wg1\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) (async) unshare(0x2040400) (async) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r9, 0x6, 0x19, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @remote, 0x1, 0x3, 0x8, 0x0, 0x7fffffffffffffff, 0x40590054, r0}) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000b04fcff", 0x58}], 0x1) 2.651997383s ago: executing program 3 (id=1041): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000505e0bcf68d5a98159e5d9ef80e409b1b8af7c4daa9a8103"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000200000008000000f8ffffff00020000", @ANYRES32=r0, @ANYBLOB="02000000000000000000000000fbfffffff80000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000020000000500"/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r2}, 0x38) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000003c0)=0x3, 0xfa2c861b14c205a) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="300000002c0001000000000000000000050000801c0011802e"], 0x30}], 0x1}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x8}, 0x38) listen(r1, 0x8957) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004085, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) r6 = accept4(r1, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r7, 0x800452d2, &(0x7f0000000100)) close(r7) socket$can_j1939(0x1d, 0x2, 0x7) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00', @ANYRES16=r8, @ANYBLOB="000126bd7000fddbdf250f000000080003"], 0x28}, 0x1, 0x0, 0x0, 0x4364902a12139c5c}, 0x1) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r6) sendmsg$TIPC_CMD_SET_LINK_TOL(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r6, 0x8905, &(0x7f0000000040)) 2.544787452s ago: executing program 0 (id=1042): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000076000100000000000000000007020000", @ANYRES32=0x0, @ANYBLOB="05000d"], 0x28}, 0x1, 0x5502000000000000}, 0x0) r1 = socket(0x2a, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000)=0x3, 0x4) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newqdisc={0x58, 0x24, 0xf0b, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xfff2}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x86, 0x9, 0x4, 0x2, 0x1, 0x9}}, {0x4}}]}, @qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x58}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.431489056s ago: executing program 4 (id=1043): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x60}}, 0x0) 2.421862409s ago: executing program 4 (id=1044): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r4, @ANYBLOB="050003"], 0x28}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d}, 0x14}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d}, 0x14}}, 0x0) 1.735479529s ago: executing program 3 (id=1045): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x328, 0x140, 0x0, 0xfeffffff, 0xa8, 0xa8, 0x290, 0x290, 0xffffffff, 0x290, 0xa8, 0x5, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0x0, 'geneve1\x00', 'geneve0\x00'}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x328}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @local, @gre_key, @gre_key}}}}, {{@ip={@private, @local, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @loopback, @port, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x5, 0xa8, @random='\x00'}]}, 0x3c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x328, 0x140, 0x0, 0xfeffffff, 0xa8, 0xa8, 0x290, 0x290, 0xffffffff, 0x290, 0xa8, 0x5, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0x0, 'geneve1\x00', 'geneve0\x00'}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x328}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @local, @gre_key, @gre_key}}}}, {{@ip={@private, @local, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @loopback, @port, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x5, 0xa8, @random='\x00'}]}, 0x3c}}, 0x0) (async) 1.600622752s ago: executing program 3 (id=1046): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) close(r3) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000000)={0xa, 0xfffd, 0xff, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x6}, 0x1c) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r2) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f0000000540)=""/22) sendmmsg$inet(r4, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000013c0)}}], 0x1, 0xcc804) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$alg(r7, &(0x7f0000008dc0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x700, 0x7800, 0x3, 0x74e, {{0x40, 0x4, 0x1, 0x8, 0x100, 0x67, 0x0, 0x9, 0x2f, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0xc}, {[@timestamp_addr={0x44, 0x34, 0x65, 0x1, 0x1, [{@multicast1}, {@loopback, 0x9}, {@multicast2, 0xfffff3ad}, {@broadcast, 0xd}, {@multicast2, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1ff}]}, @timestamp_prespec={0x44, 0x2c, 0xf4, 0x3, 0x3, [{@broadcast, 0xff}, {@multicast2, 0x2}, {@broadcast, 0x1000}, {@loopback, 0xffffffff}, {@multicast2, 0x81}]}, @timestamp_prespec={0x44, 0x14, 0xce, 0x3, 0xf, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10001}, {@broadcast, 0x7}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xb, 0xa2, [@private=0xa010100, @private=0xa010101]}, @generic={0x7, 0x5, ';Oq'}, @end, @cipso={0x86, 0x2c, 0x0, [{0x2, 0x7, "3dd35a824c"}, {0x7, 0x5, "edccc1"}, {0x5, 0x11, "ec5ba68905db7a51f5553b4448372e"}, {0x7, 0x9, "e09510786fce4b"}]}, @timestamp_addr={0x44, 0x34, 0x45, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d3}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x80000000}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x6}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000400)=[{0x4, 0x2, 0x1, 0x1}, {0x4, 0x2, 0x9, 0x6}, {0x3, 0x5, 0xf, 0x9}, {0x5, 0x4, 0x4}], 0x10, 0x7, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000500)=r8, 0x4) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) sendmsg$alg(r10, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x60}, {&(0x7f0000008c80)="9d", 0x7fffefe1}], 0x2}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000080)={0x14, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x40000) 653.761329ms ago: executing program 4 (id=1047): socket$kcm(0x29, 0x6, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f00000000c0)={@any, 0x9}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 600.508815ms ago: executing program 1 (id=1048): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=@newsa={0xf0, 0x10, 0x633, 0x0, 0x0, {{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@loopback, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x1a}, {}, {}, {}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x72}}, 0xf0}}, 0x0) r2 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000100)={0x5}, 0x10) write(r2, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff02000000000000", 0x1c) recvmmsg(r2, &(0x7f0000004740)=[{{0x0, 0x0, 0x0}, 0x100}, {{0x0, 0x0, 0x0}, 0x1}], 0x2, 0x4000, 0x0) r3 = socket(0x10, 0x80003, 0x0) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'sit0\x00'}) 556.793499ms ago: executing program 0 (id=1049): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000000c0)=@fragment={0x6, 0x0, 0x9, 0x1, 0x0, 0x2, 0x65}, 0x8) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=@newlink={0x30, 0x10, 0x503, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x4}}}]}, 0x30}}, 0x0) ioctl$sock_qrtr_TIOCINQ(r1, 0x541b, &(0x7f0000000000)) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x400, 0xffffffff, 0x1}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x13, 0x0, 0x14, 0x0, 0x0, {0x8}}}}]}, 0x78}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000025bd7000001cbe0002dc3300000000000006000008000c01000000004bbbc5ba22f0bcc24f3fba4231eeefad1379e90effad0979621779b7d058be56eda6acc6d7c3e8478f974681b13e37e008c3185817b6629c711dc260413c630b4cf55a40403034ed1509cc8beedc29a1100f8ddb915aa43c013bb24eace98aeab9454ebbcee561b0cda96f76689400bfe57e436c90414b3fe869d6c4bc36"], 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = socket(0x29, 0x1, 0x2) sendmsg$nl_generic(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)=ANY=[@ANYBLOB="240000001600f75c425b0000000000000a000000040000000c000a"], 0x24}}, 0x0) 523.169781ms ago: executing program 3 (id=1050): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write(r4, &(0x7f0000000000)="0a000000010001", 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$kcm(0xffffffffffffffff, 0xfffffffffffffffc, 0x81) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600200070220f2e47300b3c1f61c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce5b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5cb42a9ecbee5de6cc00"/216, 0xd8}], 0x1}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r11, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r14, 0x0) mmap(&(0x7f0000692000/0x1000)=nil, 0x1000, 0x0, 0x12, r13, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r13, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r11, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000cc0)={0x1c, r7, 0x201, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x700}, 0x0) 443.206845ms ago: executing program 1 (id=1051): unshare(0x32020400) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @remote, @val={@void}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @empty, @empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local}}}}, 0x0) (async) mkdirat$cgroup(r1, &(0x7f0000000040)='syz1\x00', 0x1ff) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000), 0x4) (async, rerun: 64) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='wg2\x00', 0x10) (rerun: 64) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x10) (async) bind$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x43}}}, 0x10) (async) unshare(0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x3, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000849fc831340a1b6600000000009500000000000000982a786146fd0e650e23b570daad3a6e4cd885987a961d38339e60a97985e53b7813430cd4b6cd82f95ffad68941d5cfe736be8f8a90b979d38f360225cff91371d2fd8c7bcedc1dde5fc488c441880754aa1a435c7e373f47eff7fca5fd1ba7961c8d202b60f6dcf9c2a72d9e5d029f6b92b9e7a9b0c55973e5332cc56162a701f9c913b840b3edf2c22a468293a2ded4d3ac19025661d44248e38e57bff434c82a457265e8e9448008a34193b1fd"], &(0x7f0000000080)='GPL\x00', 0x4, 0xff0, &(0x7f0000000200)=""/4080, 0x0, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 364.86155ms ago: executing program 4 (id=1052): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000028000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000540)='rpm_return_int\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) r3 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000180)='memory.pressure\x00', 0x2, 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000200)="4651bb609c8fdccf9b0f01bee22ca7d7bf25925577162093fdf396c7c4c74e4d5a1d9a818b2c1fddba4bda5ae57697874ca8ae7f8e270c68173bdc093e2073acd5639dac0cfcd94885b2a4b4c16ee6a194b1ba4dac1242bd55ed5d3af7a6ff20b73665c10a2a5ee3a1540f08ad579c9f13a1353694b2fe95986467f0387c04a0fcbc40bdbd11efcc656e815da6dc87ce1a7c384d56504cffe89fd3d69865026a388ffa4867b64da6e7cc190204978b1a87680ecbe4590c6189230a29ccf5509ebd10bc5828866ed4d195f60d34cb1ed8460554bf364204ed9686", 0xda}, {&(0x7f0000000300)}], 0x2, 0x5, 0x4) 340.817262ms ago: executing program 1 (id=1053): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c020000", @ANYRES16=0x0, @ANYBLOB="0000000000000000000005000000e00005800c00028008000100000000000c00028000000100000000004c00028008000100000000000800010000000000080003000000000008000200000000000000020000000000080004000000000000000400000000000800040000000000080001"], 0x23c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) (async) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x174, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc, 0xfff2}, {}, {0x0, 0x6}}, [@filter_kind_options=@f_route={{0xa}, {0x144, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xa, 0xe}}, @TCA_ROUTE4_ACT={0x138, 0x6, [@m_simple={0x134, 0x1f, 0x0, 0x0, {{0xb}, {0x4}, {0x105, 0x6, "bb56072c27c5e2984fb9b39740c7dea2e6372a168bf1fdb8ecb6019c9f5db834fcaca18620641b7aab2922f69d2f9b062f5ec4be8a5a603fe7236ffd67f60e9e007b34e0f9cb58fc8855dae5289e4e856559f64bc5a1c5683263937fdd088e5f34874e0d2d2273a7a09810d9042b32fb69223c74e88c41fda5268c22a3107d32ee49d3a99665178abfde24d27a872b23ece9d09c9560070a6e3cca383ccb4d1a6d7c302ab3ee820e67d26e78f72566a2f9765698d783e6c14d8da6156473bc39143eaba66c1921f94f19f65bc88b127c0eb8ac765b9220105c7c1060a0dd863f80d90bc3848a4fa52f73aaa4e21a1f0d6078cc5386cdfb2eef199f5261cf64455c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x174}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000880)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x40, 0x4, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x24000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x4000) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) r7 = socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r9, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r8) (async) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r8) splice(r8, &(0x7f0000000080)=0x9, r8, 0x0, 0x8a, 0x5) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000008c0)={0x38, r10, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x1c, 0x17, {0x3, 0x7, @l2={'eth', 0x3a, 'macvtap0\x00'}}}}}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000008c0)={0x38, r10, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x1c, 0x17, {0x3, 0x7, @l2={'eth', 0x3a, 'macvtap0\x00'}}}}}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {0x0}], 0x8, &(0x7f0000000600)=""/191, 0xbf, 0xb00}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) setsockopt$TIPC_IMPORTANCE(r7, 0x10f, 0x7f, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r3, @ANYBLOB="010028bd7000fddbdf25040000000d000a0003000030323135340000000008"], 0xc0}}, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r3, @ANYBLOB="010028bd7000fddbdf25040000000d000a0003000030323135340000000008"], 0xc0}}, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) r11 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r11, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev}, 0x1c) connect$inet6(r11, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x3}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) (async) r12 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r12, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 200.888525ms ago: executing program 4 (id=1054): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) 128.760742ms ago: executing program 3 (id=1055): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000000000000000000030000000003000000020000000200000000000000000000010500000010000000010000000000001101000000000000000061"], 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000010640)={'sit0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2f, 0x5, 0x0, 0x0, 0xf8, 0x0, 0x3, 0xfc, 0x0, 0xfc, 0x0, 0x0, 0x0, 0xff, 0x0, 0x45}}) unshare(0x4040600) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180292eef64c0000000000000000000085000000220000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="120000000200000008000000ebd0000063200100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="000000000400"/24, @ANYRES32, @ANYBLOB="7a3e7a6f65f0f853448764dd81f2d608ba7abc7b9fb740fc0b7e6f2e5a9679bf7a477530c8d017a3e92b78e0a90ff24f6e081e5dbb95248a7edc1e5015f4ab8f9796cdbb1f6e646405f878be8f8c0e5cf72f43770633f2e7eecc615ab93aefafd7dfbddd4845ac995926e58f383170dc632efd4057d745eb6084917e72df17d1630f4db675994563d2625fab4c5481a9c8cbad4ef20000000000000000", @ANYRESOCT=r1, @ANYRES64=r0], 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) bind$ax25(r2, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @bcast, @default, @bcast]}, 0x48) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000240)={'tunl0\x00', 0x0, 0x40, 0x8000, 0x7, 0x7, {{0x1f, 0x4, 0x0, 0x34, 0x7c, 0x65, 0x0, 0x5, 0x2f, 0x0, @broadcast, @multicast2, {[@timestamp={0x44, 0x2c, 0x7e, 0x0, 0x6, [0x8000, 0x9, 0x7, 0x7, 0xfffffffa, 0x10, 0x9, 0x7, 0xefb, 0x8]}, @timestamp_addr={0x44, 0x3c, 0x87, 0x1, 0x7, [{@empty, 0x4}, {@broadcast, 0x5}, {@private=0xa010102, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8000}, {@multicast2, 0x9}, {@private=0xa010100, 0xd5b}, {@empty, 0x8}]}]}}}}}) socketpair(0xb, 0x800, 0x20000005, &(0x7f0000000100)={0x0, 0x0}) close(r3) close(0xffffffffffffffff) close(r3) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x1}}}, 0x24}}, 0x0) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000a40)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c400000019000100000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000001000000000000000c00150000000000ffff0000"], 0xc4}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 127.580255ms ago: executing program 0 (id=1056): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000711228000000000095", @ANYRES16, @ANYRESOCT], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 44.66056ms ago: executing program 0 (id=1057): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200004000000000000000de63000085000000270000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000c9000000850000005000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000600)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000008d080000711214000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 0s ago: executing program 0 (id=1058): unshare(0x6020480) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="6c0000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x6c}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004050280ff041480"], 0x528}}, 0xc000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000380)={0x0, 0x8c}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r3, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000040)=ANY=[], 0x1000f) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="557b000000000000280012800b00010067656e65766500001800028008000b4000000000060005000000000004000600"], 0x48}}, 0x0) kernel console output (not intermixed with test programs): : renamed from eth3 [ 58.108422][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.172212][ T5837] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.191132][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.201427][ T5837] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.227669][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.234921][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.245162][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.252275][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.262066][ T5837] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.271806][ T5837] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.381192][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.424417][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.453151][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.489538][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.502248][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.537149][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.546914][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.554058][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.563777][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.570921][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.594664][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.601841][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.624777][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.631909][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.659337][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.666541][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.689940][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.697083][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.724889][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.737185][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.853866][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.929175][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.936350][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.978235][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.985984][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.180154][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.276622][ T5849] Bluetooth: hci0: command tx timeout [ 59.276692][ T5144] Bluetooth: hci1: command tx timeout [ 59.282052][ T5843] Bluetooth: hci4: command tx timeout [ 59.300945][ T5842] veth0_vlan: entered promiscuous mode [ 59.328135][ T5835] veth0_vlan: entered promiscuous mode [ 59.342487][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.356345][ T5849] Bluetooth: hci2: command tx timeout [ 59.362039][ T5843] Bluetooth: hci3: command tx timeout [ 59.370437][ T5835] veth1_vlan: entered promiscuous mode [ 59.408262][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.420131][ T5842] veth1_vlan: entered promiscuous mode [ 59.430457][ T5835] veth0_macvtap: entered promiscuous mode [ 59.453700][ T5835] veth1_macvtap: entered promiscuous mode [ 59.479644][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.500904][ T5842] veth0_macvtap: entered promiscuous mode [ 59.539821][ T5842] veth1_macvtap: entered promiscuous mode [ 59.552012][ T5828] veth0_vlan: entered promiscuous mode [ 59.562954][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.590675][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.601106][ T5835] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.612081][ T5835] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.620956][ T5835] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.630071][ T5835] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.650883][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.661657][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.673211][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.682129][ T5828] veth1_vlan: entered promiscuous mode [ 59.708294][ T5831] veth0_vlan: entered promiscuous mode [ 59.723124][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.733807][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.747141][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.772631][ T5842] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.781593][ T5842] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.790951][ T5842] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.799786][ T5842] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.844739][ T5831] veth1_vlan: entered promiscuous mode [ 59.854182][ T5828] veth0_macvtap: entered promiscuous mode [ 59.883754][ T5828] veth1_macvtap: entered promiscuous mode [ 59.900032][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.910321][ T5831] veth0_macvtap: entered promiscuous mode [ 59.919717][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.923803][ T5837] veth0_vlan: entered promiscuous mode [ 59.973522][ T5831] veth1_macvtap: entered promiscuous mode [ 59.995121][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.008636][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.018795][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.030409][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.041494][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.053044][ T5837] veth1_vlan: entered promiscuous mode [ 60.065056][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.078757][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.126565][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.143018][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.143921][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 60.154204][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.179296][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.191121][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.202089][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.214938][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.223470][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.234135][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.245162][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.255684][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.265559][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.276066][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.286926][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.314371][ T5837] veth0_macvtap: entered promiscuous mode [ 60.340006][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.350908][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.363473][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.374062][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.383967][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.394525][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.408039][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.428674][ T5828] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.437896][ T5828] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.446719][ T5828] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.455734][ T5828] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.458765][ T5917] netlink: 'syz.4.5': attribute type 4 has an invalid length. [ 60.500599][ T5837] veth1_macvtap: entered promiscuous mode [ 60.519357][ T5917] netlink: 'syz.4.5': attribute type 4 has an invalid length. [ 60.524210][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.536171][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.545060][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.554188][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.596808][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.604723][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.640055][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.667094][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.703696][ T5919] team_slave_0: entered promiscuous mode [ 60.709550][ T5919] team_slave_1: entered promiscuous mode [ 60.728790][ T5919] vlan2: entered promiscuous mode [ 60.733873][ T5919] team0: entered promiscuous mode [ 60.744149][ T5919] team0: Device vlan2 is already an upper device of the team interface [ 60.756466][ T5919] team0: left promiscuous mode [ 60.761542][ T5919] team_slave_0: left promiscuous mode [ 60.767011][ T5919] team_slave_1: left promiscuous mode [ 60.782478][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.793152][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.804363][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.814851][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.825069][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.835628][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.845550][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.856379][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.867516][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.911391][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.928688][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.007334][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.018624][ T5925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 61.030829][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.047823][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.061833][ T5925] netlink: 'syz.2.3': attribute type 10 has an invalid length. [ 61.069552][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.079933][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.090730][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.100952][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.111664][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.124374][ T5927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 61.134952][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.202387][ T5925] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 61.224944][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.242708][ T5837] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.253122][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.275772][ T5837] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.312132][ T5837] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.319997][ T5938] netlink: 'syz.4.9': attribute type 10 has an invalid length. [ 61.327811][ T5837] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.356191][ T5843] Bluetooth: hci1: command tx timeout [ 61.361636][ T5843] Bluetooth: hci4: command tx timeout [ 61.366934][ T5938] batman_adv: batadv0: Adding interface: team0 [ 61.367499][ T5849] Bluetooth: hci0: command tx timeout [ 61.374154][ T5938] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.407266][ T5938] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 61.431604][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.436556][ T5849] Bluetooth: hci3: command tx timeout [ 61.439730][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.444876][ T5849] Bluetooth: hci2: command tx timeout [ 61.467728][ T5938] syz.4.9 uses obsolete (PF_INET,SOCK_PACKET) [ 61.591986][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.636941][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.713153][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.734164][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.990883][ T5925] syz.2.3 (5925) used greatest stack depth: 18456 bytes left [ 62.060967][ T5955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 62.357904][ T5966] Zero length message leads to an empty skb [ 62.500349][ T5974] netlink: 32 bytes leftover after parsing attributes in process `syz.3.16'. [ 62.572831][ T5976] Bluetooth: MGMT ver 1.23 [ 62.629950][ T5979] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 62.790985][ T5968] pim6reg1: entered promiscuous mode [ 62.796768][ T5968] pim6reg1: entered allmulticast mode [ 63.246763][ T6010] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 63.396199][ T6017] netlink: 'syz.3.31': attribute type 4 has an invalid length. [ 63.435723][ T5849] Bluetooth: hci0: command tx timeout [ 63.441570][ T5843] Bluetooth: hci4: command tx timeout [ 63.441579][ T5144] Bluetooth: hci1: command tx timeout [ 63.454063][ T6019] netlink: 'syz.3.31': attribute type 4 has an invalid length. [ 63.516292][ T5849] Bluetooth: hci2: command tx timeout [ 63.521744][ T5849] Bluetooth: hci3: command tx timeout [ 63.543957][ T6025] netlink: 12 bytes leftover after parsing attributes in process `syz.4.34'. [ 63.546831][ T6023] netlink: 'syz.0.33': attribute type 39 has an invalid length. [ 64.228561][ T6063] netlink: 16 bytes leftover after parsing attributes in process `syz.3.44'. [ 64.280246][ T6063] x_tables: duplicate entry at hook 2 [ 64.280509][ T6064] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 64.286196][ T6063] netlink: 28 bytes leftover after parsing attributes in process `syz.3.44'. [ 64.459907][ T6069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.42'. [ 64.501668][ T6071] netlink: 'syz.3.46': attribute type 3 has an invalid length. [ 64.514769][ T6071] netlink: 128 bytes leftover after parsing attributes in process `syz.3.46'. [ 64.613272][ T6077] netlink: 'syz.1.47': attribute type 178 has an invalid length. [ 64.623817][ T6077] netlink: 4 bytes leftover after parsing attributes in process `syz.1.47'. [ 65.741197][ T6111] netlink: 76 bytes leftover after parsing attributes in process `syz.3.57'. [ 66.229056][ T6128] netlink: 44 bytes leftover after parsing attributes in process `syz.1.62'. [ 67.785904][ T6154] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 67.856379][ T6154] netlink: 24 bytes leftover after parsing attributes in process `syz.2.69'. [ 68.223957][ T6166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.75'. [ 68.354113][ T6172] pimreg: entered allmulticast mode [ 68.410689][ T6172] pimreg: left allmulticast mode [ 68.449436][ T6181] netlink: 'syz.4.77': attribute type 10 has an invalid length. [ 68.501605][ T6185] netlink: 'syz.2.78': attribute type 10 has an invalid length. [ 68.514511][ T6169] syzkaller0: entered allmulticast mode [ 68.542427][ T6183] ax25_connect(): syz.1.79 uses autobind, please contact jreuter@yaina.de [ 68.574769][ T6181] team0: Port device wlan1 added [ 68.619689][ T6187] sctp: [Deprecated]: syz.2.78 (pid 6187) Use of int in maxseg socket option. [ 68.619689][ T6187] Use struct sctp_assoc_value instead [ 68.671282][ T6185] bond0: (slave wlan1): Releasing backup interface [ 68.712796][ T6185] team0: Port device wlan1 added [ 68.731391][ T6168] syzkaller0: left allmulticast mode [ 68.802303][ T6195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.82'. [ 68.826761][ T6197] sctp: [Deprecated]: syz.4.83 (pid 6197) Use of int in max_burst socket option. [ 68.826761][ T6197] Use struct sctp_assoc_value instead [ 68.900577][ T6195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.82'. [ 68.922314][ T6203] warning: `syz.4.85' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 69.103883][ T6215] netlink: 'syz.3.86': attribute type 1 has an invalid length. [ 69.334475][ T6226] @ÿ: renamed from bond_slave_0 (while UP) [ 69.895916][ T6235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.93'. [ 70.044426][ T6234] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.223930][ T6234] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.373318][ T6255] netlink: 36 bytes leftover after parsing attributes in process `syz.1.99'. [ 70.386158][ T6234] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.412334][ T6257] hsr0: entered promiscuous mode [ 70.519138][ T6234] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.675040][ T6234] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.754027][ T6234] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.821941][ T6234] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.840426][ T6275] xfrm1: entered allmulticast mode [ 70.882063][ T6234] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.204636][ T6296] bond0: entered promiscuous mode [ 71.210191][ T6296] @ÿ: entered promiscuous mode [ 71.216022][ T6296] bond_slave_1: entered promiscuous mode [ 71.224322][ T6295] bond0: left promiscuous mode [ 71.229444][ T6295] @ÿ: left promiscuous mode [ 71.234610][ T6295] bond_slave_1: left promiscuous mode [ 71.380017][ T6301] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 71.605243][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.620232][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.100098][ T6325] netlink: 'syz.4.117': attribute type 1 has an invalid length. [ 72.387297][ T6342] netlink: 4 bytes leftover after parsing attributes in process `syz.3.124'. [ 72.545297][ T6354] sctp: [Deprecated]: syz.1.127 (pid 6354) Use of int in max_burst socket option. [ 72.545297][ T6354] Use struct sctp_assoc_value instead [ 72.805204][ T6366] sctp: [Deprecated]: syz.4.129 (pid 6366) Use of int in max_burst socket option deprecated. [ 72.805204][ T6366] Use struct sctp_assoc_value instead [ 72.983134][ T6385] netlink: 4 bytes leftover after parsing attributes in process `syz.0.131'. [ 73.040588][ T6391] netlink: 12 bytes leftover after parsing attributes in process `syz.0.131'. [ 73.182967][ T6398] netlink: 'syz.2.135': attribute type 5 has an invalid length. [ 73.260282][ T6400] xt_TCPMSS: Only works on TCP SYN packets [ 73.484196][ T6379] mac80211_hwsim hwsim6 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 73.701984][ T6416] xt_socket: unknown flags 0x4 [ 73.872232][ T6429] netlink: 20 bytes leftover after parsing attributes in process `syz.0.140'. [ 74.031393][ T6433] batadv_slave_1: entered promiscuous mode [ 74.185342][ T6434] sctp: [Deprecated]: syz.3.145 (pid 6434) Use of struct sctp_assoc_value in delayed_ack socket option. [ 74.185342][ T6434] Use struct sctp_sack_info instead [ 74.217887][ T6432] batadv_slave_1: left promiscuous mode [ 74.351023][ T6454] netlink: 'syz.2.149': attribute type 4 has an invalid length. [ 74.359092][ T6455] netlink: 'syz.2.149': attribute type 4 has an invalid length. [ 74.397298][ T6454] netlink: 'syz.2.149': attribute type 4 has an invalid length. [ 74.456999][ T6455] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 63 [ 74.461632][ T6459] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 75.238635][ T6497] netlink: 64 bytes leftover after parsing attributes in process `syz.4.162'. [ 75.370180][ T6506] netlink: 12 bytes leftover after parsing attributes in process `syz.4.162'. [ 75.469677][ T6497] "syz.4.162" (6497) uses obsolete ecb(arc4) skcipher [ 76.078941][ T1116] wlan0: Trigger new scan to find an IBSS to join [ 76.194392][ T6549] netem: incorrect ge model size [ 76.204017][ T6549] netem: change failed [ 76.476990][ T6570] netlink: 16 bytes leftover after parsing attributes in process `syz.0.183'. [ 76.491132][ T6573] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 76.740548][ T9] cfg80211: failed to load regulatory.db [ 76.791985][ T6584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.184'. [ 76.816368][ T6594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.184'. [ 76.827023][ T6598] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 76.834624][ T6598] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 77.134878][ T5849] Bluetooth: hci4: command tx timeout [ 77.262846][ T6613] 8021q: VLANs not supported on lo [ 77.533715][ T6620] netlink: 28 bytes leftover after parsing attributes in process `syz.2.193'. [ 78.041479][ T6649] netlink: 8 bytes leftover after parsing attributes in process `syz.3.200'. [ 78.173788][ T6634] syz.0.198 (6634) used greatest stack depth: 18320 bytes left [ 78.419034][ T6662] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 78.494944][ T6662] Illegal XDP return value 4294967282 on prog (id 70) dev N/A, expect packet loss! [ 78.535648][ T6676] netlink: 16 bytes leftover after parsing attributes in process `syz.1.203'. [ 78.580000][ T6679] netem: change failed [ 78.698547][ T5885] hid-generic 0005:0458:0059.0001: item fetching failed at offset 0/1 [ 78.731299][ T5885] hid-generic 0005:0458:0059.0001: probe with driver hid-generic failed with error -22 [ 78.758448][ T6684] batadv_slave_1: entered promiscuous mode [ 78.821683][ T6683] batadv_slave_1: left promiscuous mode [ 78.992921][ T6707] netlink: 4 bytes leftover after parsing attributes in process `syz.0.213'. [ 79.527369][ T6736] tipc: Enabling of bearer <Þ|i³:æ> rejected, media not registered [ 79.856374][ T6755] batman_adv: batadv0: Removing interface: team0 [ 79.873269][ T6755] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.891958][ T6755] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.906333][ T6755] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.921370][ T6755] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.042525][ T6767] netlink: 112 bytes leftover after parsing attributes in process `syz.1.226'. [ 80.493621][ T6784] netlink: 20 bytes leftover after parsing attributes in process `syz.2.231'. [ 80.958766][ T6803] trusted_key: syz.2.236 sent an empty control message without MSG_MORE. [ 81.125788][ T53] wlan0: Trigger new scan to find an IBSS to join [ 81.146727][ T6815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.240'. [ 81.258759][ T6821] netlink: 'syz.0.238': attribute type 10 has an invalid length. [ 81.294286][ T6821] netlink: 40 bytes leftover after parsing attributes in process `syz.0.238'. [ 81.319725][ T6821] veth0_vlan: entered allmulticast mode [ 81.329285][ T6821] bridge0: port 3(veth0_vlan) entered blocking state [ 81.344295][ T6821] bridge0: port 3(veth0_vlan) entered disabled state [ 81.355135][ T6821] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 81.382729][ T6821] netlink: 16 bytes leftover after parsing attributes in process `syz.0.238'. [ 81.404272][ T6821] netlink: 16 bytes leftover after parsing attributes in process `syz.0.238'. [ 81.523318][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 82.041893][ T6861] : entered promiscuous mode [ 82.090271][ T11] wlan0: Creating new IBSS network, BSSID d2:bb:1a:3b:90:da [ 82.113443][ T6865] vxcan1: tx drop: invalid sa for name 0x0000000000000001 [ 82.757855][ T6899] __nla_validate_parse: 8 callbacks suppressed [ 82.757875][ T6899] netlink: 72 bytes leftover after parsing attributes in process `syz.4.263'. [ 82.953465][ T6910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.266'. [ 82.978991][ T6910] batadv0: entered promiscuous mode [ 82.989896][ T6910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.174980][ T6918] netlink: 'syz.0.267': attribute type 3 has an invalid length. [ 83.199646][ T6925] netlink: 116 bytes leftover after parsing attributes in process `syz.4.270'. [ 83.394162][ T6932] netlink: 24 bytes leftover after parsing attributes in process `syz.1.271'. [ 83.595503][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 83.776314][ T6949] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 84.288626][ T6974] team0 (unregistering): Port device team_slave_0 removed [ 84.353245][ T6974] team0 (unregistering): Port device team_slave_1 removed [ 84.397232][ T6974] team0 (unregistering): Port device wlan1 removed [ 84.927717][ T5885] IPVS: starting estimator thread 0... [ 84.966111][ T7027] netlink: 'syz.4.287': attribute type 39 has an invalid length. [ 85.026536][ T7028] IPVS: using max 29 ests per chain, 69600 per kthread [ 85.407464][ T7050] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 85.677918][ T7066] netlink: 8 bytes leftover after parsing attributes in process `syz.3.293'. [ 85.922588][ T7084] netlink: 'syz.4.296': attribute type 10 has an invalid length. [ 86.022397][ T7084] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 86.839354][ T5839] IPVS: starting estimator thread 0... [ 86.985697][ T7143] IPVS: using max 19 ests per chain, 45600 per kthread [ 87.320248][ T7162] netlink: 24 bytes leftover after parsing attributes in process `syz.1.314'. [ 87.941013][ T7175] netlink: 40 bytes leftover after parsing attributes in process `syz.2.316'. [ 88.701517][ T7168] tipc: Enabling of bearer rejected, failed to enable media [ 88.867095][ T7185] netlink: 96 bytes leftover after parsing attributes in process `syz.0.319'. [ 88.903831][ T7185] vlan2: entered allmulticast mode [ 88.941630][ T7185] gretap0: entered allmulticast mode [ 88.992965][ T7188] netlink: 96 bytes leftover after parsing attributes in process `syz.0.319'. [ 89.040377][ T7199] netlink: 'syz.2.321': attribute type 1 has an invalid length. [ 89.854741][ T7238] xt_SECMARK: invalid mode: 0 [ 89.995942][ T7241] netlink: 76 bytes leftover after parsing attributes in process `syz.2.328'. [ 90.070858][ T7238] netlink: 40 bytes leftover after parsing attributes in process `syz.3.330'. [ 90.100106][ T7247] netlink: 60 bytes leftover after parsing attributes in process `syz.2.328'. [ 90.122882][ T7241] netlink: 60 bytes leftover after parsing attributes in process `syz.2.328'. [ 90.123186][ T7238] netlink: 20 bytes leftover after parsing attributes in process `syz.3.330'. [ 90.161304][ T7247] x_tables: duplicate entry at hook 1 [ 90.565081][ T7272] netlink: 'syz.3.337': attribute type 1 has an invalid length. [ 90.938069][ T7287] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 91.029131][ T7287] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 91.289428][ T7298] netlink: 'syz.4.344': attribute type 1 has an invalid length. [ 91.315487][ T7298] netlink: 36 bytes leftover after parsing attributes in process `syz.4.344'. [ 91.334971][ T7302] netlink: 12 bytes leftover after parsing attributes in process `syz.2.346'. [ 91.364113][ T7302] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 91.955352][ T7326] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 92.044388][ T7332] netlink: 'syz.3.352': attribute type 1 has an invalid length. [ 92.134027][ T7332] bond1: entered promiscuous mode [ 92.155739][ T7332] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.881269][ T7375] netlink: 'syz.2.358': attribute type 1 has an invalid length. [ 92.936389][ T7375] 8021q: adding VLAN 0 to HW filter on device bond2 [ 93.525577][ T7398] team0: No ports can be present during mode change [ 93.593692][ T7397] team0: No ports can be present during mode change [ 94.000504][ T7416] netlink: zone id is out of range [ 94.015727][ T7416] netlink: zone id is out of range [ 94.027651][ T7416] netlink: zone id is out of range [ 94.045531][ T7416] netlink: zone id is out of range [ 94.050880][ T7416] netlink: zone id is out of range [ 94.071157][ T7416] netlink: zone id is out of range [ 94.075608][ T35] wlan1: Trigger new scan to find an IBSS to join [ 94.090343][ T7416] netlink: zone id is out of range [ 94.120167][ T7416] netlink: zone id is out of range [ 94.143822][ T7416] netlink: zone id is out of range [ 94.183875][ T7427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.375'. [ 94.302627][ T7434] x_tables: duplicate underflow at hook 2 [ 94.421246][ T7441] netlink: 108 bytes leftover after parsing attributes in process `syz.0.378'. [ 94.452577][ T7441] netlink: 108 bytes leftover after parsing attributes in process `syz.0.378'. [ 94.481906][ T7439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.378'. [ 94.523157][ T7452] netlink: 'syz.3.382': attribute type 5 has an invalid length. [ 94.527848][ T7439] vlan3: entered promiscuous mode [ 94.556363][ T7439] team0: entered promiscuous mode [ 94.561456][ T7439] team_slave_0: entered promiscuous mode [ 94.583338][ T7439] team_slave_1: entered promiscuous mode [ 94.605326][ T7439] team0: Device vlan3 is already an upper device of the team interface [ 94.629158][ T7439] team0: left promiscuous mode [ 94.633987][ T7439] team_slave_0: left promiscuous mode [ 94.644826][ T7439] team_slave_1: left promiscuous mode [ 94.748182][ T7461] tap0: tun_chr_ioctl cmd 1074025677 [ 94.753671][ T7461] tap0: linktype set to 821 [ 94.816373][ T7459] netlink: 16 bytes leftover after parsing attributes in process `syz.1.384'. [ 94.974254][ T7470] team0: Device gtp0 is of different type [ 95.034814][ T7474] netlink: 'syz.2.390': attribute type 1 has an invalid length. [ 95.598985][ T7510] netlink: 132 bytes leftover after parsing attributes in process `syz.0.399'. [ 95.953830][ T7520] netlink: 828 bytes leftover after parsing attributes in process `syz.3.401'. [ 95.999370][ T7532] netlink: 28 bytes leftover after parsing attributes in process `syz.2.406'. [ 96.273739][ T7543] netlink: 'syz.4.411': attribute type 9 has an invalid length. [ 96.305524][ T7543] netlink: 8 bytes leftover after parsing attributes in process `syz.4.411'. [ 96.441813][ T7547] netlink: 16 bytes leftover after parsing attributes in process `syz.3.408'. [ 97.035617][ T1143] wlan1: Trigger new scan to find an IBSS to join [ 97.299264][ T7581] netlink: 'syz.4.418': attribute type 3 has an invalid length. [ 97.439062][ T7591] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 97.702576][ T1091] bond0: (slave bond_slave_0): interface is now down [ 97.718143][ T1091] bond0: (slave bond_slave_1): interface is now down [ 97.742675][ T1091] bond0: now running without any active interface! [ 98.204569][ T7596] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 98.704181][ T7661] netlink: 'syz.3.439': attribute type 1 has an invalid length. [ 98.868056][ T7668] tipc: Started in network mode [ 98.873129][ T7668] tipc: Node identity ba95f011b9f1, cluster identity 4711 [ 98.882587][ T7668] tipc: Enabled bearer , priority 0 [ 98.915154][ T7668] syzkaller0: entered promiscuous mode [ 98.920721][ T7668] syzkaller0: entered allmulticast mode [ 98.927387][ T7668] tipc: Resetting bearer [ 98.957366][ T7671] ebt_among: dst integrity fail: 200 [ 99.028860][ T7667] tipc: Resetting bearer [ 99.215066][ T7675] netlink: 'syz.1.447': attribute type 1 has an invalid length. [ 99.879422][ T25] tipc: Node number set to 56946705 [ 100.080324][ T11] wlan1: Trigger new scan to find an IBSS to join [ 100.721439][ T7667] tipc: Disabling bearer [ 100.760391][ T7675] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 100.853696][ T7679] netlink: 'syz.0.448': attribute type 21 has an invalid length. [ 100.900443][ T7679] __nla_validate_parse: 8 callbacks suppressed [ 100.901700][ T7679] netlink: 132 bytes leftover after parsing attributes in process `syz.0.448'. [ 101.051845][ T1143] wlan1: Creating new IBSS network, BSSID 96:f7:06:93:24:30 [ 101.208603][ T7695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.451'. [ 101.295095][ T7687] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 101.302636][ T7687] IPv6: NLM_F_CREATE should be set when creating new route [ 101.310010][ T7687] IPv6: NLM_F_CREATE should be set when creating new route [ 101.317264][ T7687] IPv6: NLM_F_CREATE should be set when creating new route [ 101.431948][ T7707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.455'. [ 101.514436][ T7710] ieee802154 phy0 wpan0: encryption failed: -22 [ 101.788616][ T7720] IPVS: set_ctl: invalid protocol: 20 172.20.20.48:20001 [ 101.832474][ T7732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.461'. [ 101.919945][ T7736] geneve2: entered promiscuous mode [ 101.938652][ T7736] geneve2: entered allmulticast mode [ 101.987078][ T7737] geneve2: entered promiscuous mode [ 101.992332][ T7737] geneve2: entered allmulticast mode [ 102.024046][ T7742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.465'. [ 102.061006][ T7745] IPVS: sync thread started: state = BACKUP, mcast_ifn = gre0, syncid = 4, id = 0 [ 102.074255][ T7744] netlink: 'syz.1.466': attribute type 1 has an invalid length. [ 102.189256][ T7749] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 102.246817][ T7751] netlink: 'syz.0.468': attribute type 3 has an invalid length. [ 102.256886][ T7751] netlink: 8 bytes leftover after parsing attributes in process `syz.0.468'. [ 102.294584][ T7751] netlink: 'syz.0.468': attribute type 3 has an invalid length. [ 102.303938][ T7751] netlink: 8 bytes leftover after parsing attributes in process `syz.0.468'. [ 102.325711][ T7756] Bluetooth: MGMT ver 1.23 [ 102.398472][ T7759] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878) [ 102.450522][ T7759] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 102.456380][ T7756] IPVS: Scheduler module ip_vs_sip not found [ 102.586157][ T7764] netlink: 256 bytes leftover after parsing attributes in process `syz.0.472'. [ 102.621253][ T7771] netlink: 4 bytes leftover after parsing attributes in process `syz.0.472'. [ 102.649547][ T7771] netlink: 20 bytes leftover after parsing attributes in process `syz.0.472'. [ 102.811640][ T7779] tipc: Enabling not permitted [ 102.823881][ T7779] tipc: Enabling of bearer rejected, failed to enable media [ 102.847512][ T7782] netlink: 'syz.4.478': attribute type 3 has an invalid length. [ 102.859608][ T7782] netlink: 'syz.4.478': attribute type 2 has an invalid length. [ 102.912147][ T7785] tipc: Enabling of bearer rejected, failed to enable media [ 103.493164][ T7827] x_tables: duplicate underflow at hook 3 [ 103.693354][ T7837] netlink: 'syz.2.490': attribute type 1 has an invalid length. [ 103.713076][ T7834] bridge0: port 3(hsr0) entered blocking state [ 103.727407][ T7834] bridge0: port 3(hsr0) entered disabled state [ 103.742984][ T7834] hsr0: entered allmulticast mode [ 103.753593][ T7834] hsr_slave_0: entered allmulticast mode [ 103.765330][ T7834] hsr_slave_1: entered allmulticast mode [ 103.783502][ T7834] hsr0: entered promiscuous mode [ 103.791570][ T7834] bridge0: port 3(hsr0) entered blocking state [ 103.798281][ T7834] bridge0: port 3(hsr0) entered forwarding state [ 103.810706][ T7837] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 104.067025][ T7851] x_tables: duplicate underflow at hook 2 [ 104.072396][ T5885] hid-generic 0005:046D:FFF9.0002: item fetching failed at offset 0/1 [ 104.092618][ T7853] netlink: 'syz.2.492': attribute type 1 has an invalid length. [ 104.151184][ T5885] hid-generic 0005:046D:FFF9.0002: probe with driver hid-generic failed with error -22 [ 104.877064][ T7897] team0 (unregistering): Port device team_slave_0 removed [ 104.889699][ T7897] team0 (unregistering): Port device team_slave_1 removed [ 104.911122][ T7897] team0 (unregistering): Port device wlan1 removed [ 105.162190][ T7907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.799457][ T7942] net_ratelimit: 339 callbacks suppressed [ 105.799487][ T7942] openvswitch: netlink: Message has 12 unknown bytes. [ 105.814018][ T7942] openvswitch: netlink: Message has 12 unknown bytes. [ 105.851519][ T7929] xt_CT: You must specify a L4 protocol and not use inversions on it [ 105.865440][ T7942] openvswitch: netlink: Message has 12 unknown bytes. [ 105.910228][ T7942] openvswitch: netlink: Message has 12 unknown bytes. [ 105.931678][ T7942] openvswitch: netlink: Message has 12 unknown bytes. [ 105.949257][ T7942] openvswitch: netlink: Message has 12 unknown bytes. [ 105.975708][ T7942] openvswitch: netlink: Message has 12 unknown bytes. [ 106.004428][ T7942] openvswitch: netlink: Message has 12 unknown bytes. [ 106.016053][ T7942] openvswitch: netlink: Message has 12 unknown bytes. [ 106.032257][ T7942] openvswitch: netlink: Message has 12 unknown bytes. [ 106.245917][ T7961] netlink: 'syz.1.521': attribute type 11 has an invalid length. [ 106.267147][ T7958] rdma_op ffff88803223f1f0 conn xmit_rdma 0000000000000000 [ 106.281736][ T7961] __nla_validate_parse: 13 callbacks suppressed [ 106.281754][ T7961] netlink: 228 bytes leftover after parsing attributes in process `syz.1.521'. [ 106.575195][ T7977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.525'. [ 106.589062][ T7980] netlink: 'syz.2.527': attribute type 3 has an invalid length. [ 106.598433][ T7981] netlink: 'syz.4.528': attribute type 10 has an invalid length. [ 106.614416][ T7980] netlink: 132 bytes leftover after parsing attributes in process `syz.2.527'. [ 106.638622][ T7981] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.647836][ T7981] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.722333][ T7981] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.729545][ T7981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.737803][ T7981] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.744907][ T7981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.790508][ T7981] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 106.876658][ T7998] netlink: 52 bytes leftover after parsing attributes in process `syz.2.531'. [ 107.193155][ T8016] netlink: 20 bytes leftover after parsing attributes in process `syz.4.537'. [ 107.203639][ T8014] netlink: 10 bytes leftover after parsing attributes in process `syz.3.538'. [ 107.213749][ T8012] netlink: 120 bytes leftover after parsing attributes in process `syz.1.536'. [ 107.235615][ T8012] netlink: 'syz.1.536': attribute type 1 has an invalid length. [ 107.247976][ T8012] netlink: 68 bytes leftover after parsing attributes in process `syz.1.536'. [ 107.544709][ T8037] ax25_connect(): syz.4.542 uses autobind, please contact jreuter@yaina.de [ 107.787277][ T8041] netlink: 'syz.3.547': attribute type 2 has an invalid length. [ 107.815900][ T8041] netlink: 'syz.3.547': attribute type 9 has an invalid length. [ 107.825166][ T8041] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.547'. [ 108.325886][ T8076] macvtap1: entered promiscuous mode [ 108.341352][ T8076] macvtap1: entered allmulticast mode [ 108.391999][ T8079] GUP no longer grows the stack in syz.2.556 (8079): 20004000-2000a000 (20002000) [ 108.405831][ T8079] CPU: 1 UID: 0 PID: 8079 Comm: syz.2.556 Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 108.416464][ T8079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 108.426546][ T8079] Call Trace: [ 108.429847][ T8079] [ 108.432789][ T8079] dump_stack_lvl+0x241/0x360 [ 108.437496][ T8079] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.442716][ T8079] ? __pfx__printk+0x10/0x10 [ 108.447313][ T8079] ? find_vma+0xf9/0x170 [ 108.451603][ T8079] __get_user_pages+0x4385/0x49e0 [ 108.456653][ T8079] ? __pfx_lock_acquire+0x10/0x10 [ 108.461701][ T8079] ? mark_lock+0x9a/0x360 [ 108.466049][ T8079] ? __lock_acquire+0x1397/0x2100 [ 108.471099][ T8079] ? __pfx___get_user_pages+0x10/0x10 [ 108.476483][ T8079] ? __gup_longterm_locked+0xd2f/0x17f0 [ 108.482035][ T8079] ? __pfx_down_read_killable+0x10/0x10 [ 108.487590][ T8079] ? __pfx_lock_acquire+0x10/0x10 [ 108.492792][ T8079] ? try_get_folio+0xf1/0x6f0 [ 108.497470][ T8079] ? __pfx_lock_release+0x10/0x10 [ 108.502496][ T8079] __gup_longterm_locked+0xe64/0x17f0 [ 108.507883][ T8079] ? mark_lock+0x9a/0x360 [ 108.512214][ T8079] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 108.518196][ T8079] ? __pfx___gup_longterm_locked+0x10/0x10 [ 108.524011][ T8079] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 108.530342][ T8079] ? gup_fast_fallback+0x207e/0x29c0 [ 108.535629][ T8079] gup_fast_fallback+0x2266/0x29c0 [ 108.540770][ T8079] ? __pfx_gup_fast_fallback+0x10/0x10 [ 108.546253][ T8079] ? __mutex_trylock_common+0x183/0x2e0 [ 108.551801][ T8079] ? __pfx___might_resched+0x10/0x10 [ 108.557259][ T8079] ? is_valid_gup_args+0x124/0x200 [ 108.562372][ T8079] get_user_pages_fast+0xcc/0x160 [ 108.567396][ T8079] ? __pfx_get_user_pages_fast+0x10/0x10 [ 108.573023][ T8079] ? rcu_is_watching+0x15/0xb0 [ 108.577788][ T8079] ? trace_contention_end+0x3c/0x120 [ 108.583075][ T8079] ? __mutex_lock+0x37f/0xee0 [ 108.587752][ T8079] __iov_iter_get_pages_alloc+0x3b4/0x8e0 [ 108.593509][ T8079] iov_iter_get_pages2+0xcf/0x130 [ 108.598557][ T8079] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 108.604226][ T8079] __se_sys_vmsplice+0x740/0x1490 [ 108.609261][ T8079] ? plist_del+0x3f1/0x410 [ 108.613699][ T8079] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 108.619163][ T8079] ? __pfx_futex_wake+0x10/0x10 [ 108.624046][ T8079] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 108.630030][ T8079] ? do_syscall_64+0x100/0x230 [ 108.634798][ T8079] ? do_syscall_64+0xb6/0x230 [ 108.639496][ T8079] do_syscall_64+0xf3/0x230 [ 108.644001][ T8079] ? clear_bhb_loop+0x35/0x90 [ 108.648690][ T8079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.654598][ T8079] RIP: 0033:0x7f287f785d29 [ 108.659020][ T8079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.678624][ T8079] RSP: 002b:00007f288057c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 108.687056][ T8079] RAX: ffffffffffffffda RBX: 00007f287f975fa0 RCX: 00007f287f785d29 [ 108.695025][ T8079] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000006 [ 108.702990][ T8079] RBP: 00007f287f801b08 R08: 0000000000000000 R09: 0000000000000000 [ 108.710962][ T8079] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 108.718940][ T8079] R13: 0000000000000000 R14: 00007f287f975fa0 R15: 00007ffc53f39ca8 [ 108.727356][ T8079] [ 108.781946][ T8077] netlink: 'syz.1.554': attribute type 4 has an invalid length. [ 108.806400][ T8077] netlink: 52 bytes leftover after parsing attributes in process `syz.1.554'. [ 108.893996][ T8090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.018822][ T8097] netlink: 'syz.4.559': attribute type 10 has an invalid length. [ 109.047758][ T8097] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 109.542125][ T8120] netlink: 'syz.0.571': attribute type 1 has an invalid length. [ 109.997228][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 110.006034][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 110.014224][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 110.022475][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 110.031118][ T5843] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 110.038546][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 110.259887][ T8129] chnl_net:caif_netlink_parms(): no params data found [ 110.501568][ T8129] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.509597][ T8129] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.517242][ T8129] bridge_slave_0: entered allmulticast mode [ 110.524554][ T8129] bridge_slave_0: entered promiscuous mode [ 110.532850][ T8158] syzkaller1: entered promiscuous mode [ 110.552156][ T8158] syzkaller1: entered allmulticast mode [ 110.560148][ T8129] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.567725][ T8129] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.576104][ T8129] bridge_slave_1: entered allmulticast mode [ 110.594564][ T8129] bridge_slave_1: entered promiscuous mode [ 110.703462][ T8129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.732408][ T8129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.840133][ T8129] team0: Port device team_slave_0 added [ 110.856020][ T8129] team0: Port device team_slave_1 added [ 110.931907][ T8129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.939875][ T8129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.995045][ T8129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.017120][ T8129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.024101][ T8129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.053952][ T8129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.120217][ T8129] hsr_slave_0: entered promiscuous mode [ 111.127120][ T8129] hsr_slave_1: entered promiscuous mode [ 111.139821][ T8129] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.147980][ T8129] Cannot create hsr debugfs directory [ 111.317787][ T8198] __nla_validate_parse: 10 callbacks suppressed [ 111.317806][ T8198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.594'. [ 111.335736][ T8198] netlink: 46 bytes leftover after parsing attributes in process `syz.1.594'. [ 111.361589][ T8198] pim6reg1: entered promiscuous mode [ 111.367483][ T8198] pim6reg1: entered allmulticast mode [ 111.586013][ T8129] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.701363][ T8129] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.879751][ T8129] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.966953][ T8227] net_ratelimit: 26 callbacks suppressed [ 111.966971][ T8227] openvswitch: netlink: Key 6 has unexpected len 0 expected 2 [ 112.018781][ T8129] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.075774][ T5849] Bluetooth: hci4: command tx timeout [ 112.083731][ T8208] netlink: 12 bytes leftover after parsing attributes in process `syz.0.597'. [ 112.206252][ T8129] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 112.226662][ T8129] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 112.246375][ T8129] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 112.428939][ T8129] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 112.596330][ T8129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.718106][ T8129] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.721404][ T8260] netlink: 'syz.0.610': attribute type 4 has an invalid length. [ 112.738889][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.746065][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.778057][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.785225][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.804749][ T8263] netlink: 'syz.0.610': attribute type 4 has an invalid length. [ 113.111367][ T8129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.161092][ T8129] veth0_vlan: entered promiscuous mode [ 113.179182][ T8129] veth1_vlan: entered promiscuous mode [ 113.241345][ T8129] veth0_macvtap: entered promiscuous mode [ 113.287901][ T8129] veth1_macvtap: entered promiscuous mode [ 113.361962][ T8129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.393710][ T8129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.416669][ T8129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.441771][ T8129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.454803][ T8129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.471740][ T8129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.481710][ T8129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.500464][ T8129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.513493][ T8129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.545320][ T8286] tipc: Started in network mode [ 113.561741][ T8286] tipc: Node identity 7, cluster identity 4711 [ 113.575218][ T8286] tipc: Node number set to 7 [ 113.580710][ T8286] tipc: Cannot configure node identity twice [ 113.713345][ T8293] IPv6: addrconf: prefix option has invalid lifetime [ 113.735966][ T8129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.778028][ T8298] netlink: 32 bytes leftover after parsing attributes in process `syz.3.617'. [ 113.787831][ T8129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.798764][ T8129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.810837][ T8129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.821810][ T8129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.836730][ T8129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.847259][ T8129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.859487][ T8129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.872750][ T8304] syz.0.621: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 113.889235][ T8129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.900393][ T8304] CPU: 0 UID: 0 PID: 8304 Comm: syz.0.621 Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 113.911025][ T8304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 113.921111][ T8304] Call Trace: [ 113.924417][ T8304] [ 113.927375][ T8304] dump_stack_lvl+0x241/0x360 [ 113.932084][ T8304] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.937298][ T8304] ? __pfx__printk+0x10/0x10 [ 113.941907][ T8304] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 113.948317][ T8304] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 113.954825][ T8304] warn_alloc+0x278/0x410 [ 113.959174][ T8304] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 113.965271][ T8304] ? __pfx_warn_alloc+0x10/0x10 [ 113.970138][ T8304] ? kasan_save_track+0x3f/0x80 [ 113.974992][ T8304] ? __kasan_kmalloc+0x98/0xb0 [ 113.979771][ T8304] ? xsk_setsockopt+0x4ea/0x950 [ 113.984619][ T8304] ? do_sock_setsockopt+0x3af/0x720 [ 113.989814][ T8304] ? __x64_sys_setsockopt+0x1ee/0x280 [ 113.995186][ T8304] ? do_syscall_64+0xf3/0x230 [ 113.999860][ T8304] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.005955][ T8304] __vmalloc_node_range_noprof+0x126/0x1380 [ 114.011899][ T8304] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 114.018261][ T8304] ? __kasan_kmalloc+0x98/0xb0 [ 114.023379][ T8304] vmalloc_user_noprof+0x74/0x80 [ 114.028316][ T8304] ? xskq_create+0xb6/0x170 [ 114.032832][ T8304] xskq_create+0xb6/0x170 [ 114.037165][ T8304] xsk_init_queue+0xa1/0x100 [ 114.041760][ T8304] xsk_setsockopt+0x4ea/0x950 [ 114.046440][ T8304] ? __pfx_xsk_setsockopt+0x10/0x10 [ 114.051637][ T8304] ? __pfx_aa_sk_perm+0x10/0x10 [ 114.056496][ T8304] ? aa_sock_opt_perm+0x79/0x120 [ 114.061436][ T8304] ? __pfx_xsk_setsockopt+0x10/0x10 [ 114.066641][ T8304] do_sock_setsockopt+0x3af/0x720 [ 114.071670][ T8304] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 114.077216][ T8304] ? __fget_files+0x395/0x410 [ 114.081894][ T8304] ? __fget_files+0x2a/0x410 [ 114.086490][ T8304] __x64_sys_setsockopt+0x1ee/0x280 [ 114.091693][ T8304] do_syscall_64+0xf3/0x230 [ 114.096196][ T8304] ? clear_bhb_loop+0x35/0x90 [ 114.100874][ T8304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.106772][ T8304] RIP: 0033:0x7f8a28b85d29 [ 114.111201][ T8304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.130802][ T8304] RSP: 002b:00007f8a2991f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 114.139214][ T8304] RAX: ffffffffffffffda RBX: 00007f8a28d75fa0 RCX: 00007f8a28b85d29 [ 114.147181][ T8304] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 114.155169][ T8304] RBP: 00007f8a28c01b08 R08: 0000000000000004 R09: 0000000000000000 [ 114.163139][ T8304] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.171108][ T8304] R13: 0000000000000000 R14: 00007f8a28d75fa0 R15: 00007ffe19f1bae8 [ 114.179091][ T8304] [ 114.193519][ T8298] ip6gre1: entered allmulticast mode [ 114.200147][ T5849] Bluetooth: hci4: command tx timeout [ 114.210565][ T8304] Mem-Info: [ 114.213825][ T8304] active_anon:4797 inactive_anon:0 isolated_anon:0 [ 114.213825][ T8304] active_file:1263 inactive_file:38269 isolated_file:0 [ 114.213825][ T8304] unevictable:768 dirty:118 writeback:0 [ 114.213825][ T8304] slab_reclaimable:10329 slab_unreclaimable:101972 [ 114.213825][ T8304] mapped:28268 shmem:1440 pagetables:631 [ 114.213825][ T8304] sec_pagetables:0 bounce:0 [ 114.213825][ T8304] kernel_misc_reclaimable:0 [ 114.213825][ T8304] free:1337318 free_pcp:448 free_cma:0 [ 114.265696][ T8304] Node 0 active_anon:19088kB inactive_anon:0kB active_file:5052kB inactive_file:153000kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:113072kB dirty:472kB writeback:0kB shmem:4224kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11100kB pagetables:2424kB sec_pagetables:0kB all_unreclaimable? no [ 114.306962][ T8129] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.316657][ T8129] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.318168][ T8304] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 114.325349][ T8129] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.325619][ T8129] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.386432][ T8304] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 114.481359][ T8304] lowmem_reserve[]: 0 2465 2466 0 0 [ 114.531765][ T8304] Node 0 DMA32 free:1426208kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:20248kB inactive_anon:0kB active_file:5052kB inactive_file:152172kB unevictable:1536kB writepending:468kB present:3129332kB managed:2552760kB mlocked:0kB bounce:0kB free_pcp:2604kB local_pcp:1412kB free_cma:0kB [ 114.601158][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.647153][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.670104][ T8304] lowmem_reserve[]: 0 0 0 0 0 [ 114.674895][ T8304] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:4kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 114.735798][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.747899][ T8304] lowmem_reserve[]: 0 0 0 0 0 [ 114.752701][ T8304] Node 1 Normal free:3905472kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:104kB local_pcp:0kB free_cma:0kB [ 114.764758][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.803426][ T8304] lowmem_reserve[]: 0 0 0 0 0 [ 114.817396][ T8304] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 114.845539][ T8304] Node 0 DMA32: 3*4kB (UME) 0*8kB 1*16kB (E) 2*32kB (UE) 4*64kB (U) 2*128kB (UM) 21*256kB (UM) 54*512kB (UME) 45*1024kB (UME) 7*2048kB (UM) 322*4096kB (UM) = 1412956kB [ 114.903576][ T8304] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 114.946056][ T8304] Node 1 Normal: 204*4kB (UE) 62*8kB (UME) 32*16kB (UME) 201*32kB (UME) 98*64kB (UME) 30*128kB (UME) 12*256kB (UME) 6*512kB (UME) 6*1024kB (UME) 4*2048kB (UE) 944*4096kB (M) = 3905472kB [ 115.005549][ T8304] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 115.025586][ T8304] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 115.034933][ T8304] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 115.045637][ T8304] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 115.054965][ T8304] 44915 total pagecache pages [ 115.165713][ T8304] 0 pages in swap cache [ 115.188675][ T8304] Free swap = 124996kB [ 115.215438][ T8304] Total swap = 124996kB [ 115.219645][ T8304] 2097051 pages RAM [ 115.223465][ T8304] 0 pages HighMem/MovableOnly [ 115.261174][ T8304] 427011 pages reserved [ 115.274863][ T8304] 0 pages cma reserved [ 115.505046][ T8333] netlink: 24 bytes leftover after parsing attributes in process `syz.4.630'. [ 115.560918][ T8338] netlink: 'syz.3.629': attribute type 1 has an invalid length. [ 115.605212][ T8338] 8021q: adding VLAN 0 to HW filter on device bond2 [ 115.640679][ T8338] 8021q: adding VLAN 0 to HW filter on device bond2 [ 115.655923][ T8338] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 115.674343][ T8341] netlink: 48 bytes leftover after parsing attributes in process `syz.4.631'. [ 115.697152][ T8338] bond2: (slave vcan1): Error -95 calling set_mac_address [ 115.792010][ T8347] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 115.817087][ T8347] bond2: (slave batadv1): making interface the new active one [ 115.825271][ T8347] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 116.215933][ T8379] netlink: 48 bytes leftover after parsing attributes in process `syz.1.643'. [ 116.256874][ T8378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.641'. [ 117.132741][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 117.156382][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 117.165908][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 117.204662][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 117.238717][ T1103] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.253636][ T5849] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 117.264183][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 117.352633][ T8419] vcan0: MTU too low for tipc bearer [ 117.361106][ T8419] tipc: Enabling of bearer rejected, failed to enable media [ 117.498453][ T1103] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.680477][ T1103] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.832506][ T1103] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.860043][ T8458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.662'. [ 117.930781][ T8463] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (511) [ 117.960337][ T8463] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 118.064807][ T8458] sctp: [Deprecated]: syz.1.662 (pid 8458) Use of struct sctp_assoc_value in delayed_ack socket option. [ 118.064807][ T8458] Use struct sctp_sack_info instead [ 118.113117][ T1103] bridge_slave_1: left allmulticast mode [ 118.119613][ T1103] bridge_slave_1: left promiscuous mode [ 118.127603][ T1103] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.155758][ T1103] bridge_slave_0: left allmulticast mode [ 118.161444][ T1103] bridge_slave_0: left promiscuous mode [ 118.167912][ T8458] netlink: 'syz.1.662': attribute type 1 has an invalid length. [ 118.175641][ T1103] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.712844][ T8485] netlink: 4 bytes leftover after parsing attributes in process `syz.3.669'. [ 118.729792][ T8485] netlink: 'syz.3.669': attribute type 1 has an invalid length. [ 119.343194][ T1103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.363252][ T1103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.372297][ T5843] Bluetooth: hci4: command tx timeout [ 119.387015][ T1103] bond0 (unregistering): Released all slaves [ 119.423349][ T8489] tap0: tun_chr_ioctl cmd 1074025677 [ 119.450781][ T8489] tap0: linktype set to 778 [ 119.460168][ T8508] tipc: Started in network mode [ 119.477457][ T8508] tipc: Node identity ac14140f, cluster identity 4711 [ 119.485016][ T8508] tipc: New replicast peer: 255.255.255.255 [ 119.496711][ T8508] tipc: Enabled bearer , priority 10 [ 119.527925][ T8412] chnl_net:caif_netlink_parms(): no params data found [ 119.833193][ T8534] netlink: 12 bytes leftover after parsing attributes in process `syz.3.678'. [ 119.843470][ T8532] netlink: 'syz.0.675': attribute type 1 has an invalid length. [ 119.898672][ T8538] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 119.943122][ T8537] bridge_slave_1: left allmulticast mode [ 119.949276][ T8537] bridge_slave_1: left promiscuous mode [ 119.963495][ T8537] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.995284][ T8534] netlink: 'syz.3.678': attribute type 39 has an invalid length. [ 120.007891][ T8537] bridge3: port 1(bridge_slave_1) entered blocking state [ 120.023370][ T8537] bridge3: port 1(bridge_slave_1) entered disabled state [ 120.032417][ T8537] bridge_slave_1: entered allmulticast mode [ 120.039905][ T8537] bridge_slave_1: entered promiscuous mode [ 120.160714][ T8538] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.170628][ T8538] bond0: (slave bond1): Enslaving as an active interface with an up link [ 120.387368][ T8412] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.405820][ T8412] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.417666][ T8412] bridge_slave_0: entered allmulticast mode [ 120.433873][ T25] hid-generic 0005:07C0:0058.0003: item fetching failed at offset 0/1 [ 120.440390][ T8412] bridge_slave_0: entered promiscuous mode [ 120.443918][ T25] hid-generic 0005:07C0:0058.0003: probe with driver hid-generic failed with error -22 [ 120.473202][ T1103] hsr_slave_0: left promiscuous mode [ 120.482842][ T1103] hsr_slave_1: left promiscuous mode [ 120.489496][ T1103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.498526][ T25] tipc: Node number set to 2886997007 [ 120.506139][ T1103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.514327][ T1103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.522566][ T1103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.544296][ T1103] veth1_macvtap: left promiscuous mode [ 120.550214][ T1103] veth0_macvtap: left promiscuous mode [ 120.556063][ T1103] veth1_vlan: left promiscuous mode [ 120.561641][ T1103] veth0_vlan: left promiscuous mode [ 120.989383][ T1103] team0 (unregistering): Port device team_slave_1 removed [ 121.027090][ T1103] team0 (unregistering): Port device team_slave_0 removed [ 121.403934][ T8560] netlink: 'syz.3.683': attribute type 21 has an invalid length. [ 121.411914][ T8560] netlink: 132 bytes leftover after parsing attributes in process `syz.3.683'. [ 121.422532][ T8558] netlink: 12 bytes leftover after parsing attributes in process `syz.1.682'. [ 121.434948][ T8412] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.443049][ T8412] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.450548][ T8412] bridge_slave_1: entered allmulticast mode [ 121.457763][ T8412] bridge_slave_1: entered promiscuous mode [ 121.474858][ T5843] Bluetooth: hci4: command tx timeout [ 121.569373][ T8570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.684'. [ 121.640382][ T8412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.662704][ T8575] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 121.701158][ T8412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.839378][ T8412] team0: Port device team_slave_0 added [ 121.851390][ T8587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.688'. [ 121.869167][ T8580] veth0_to_team: entered promiscuous mode [ 121.875164][ T8580] veth0_to_team: entered allmulticast mode [ 121.891836][ T8412] team0: Port device team_slave_1 added [ 121.969900][ T8595] netlink: 'syz.1.690': attribute type 9 has an invalid length. [ 121.995053][ T8596] netlink: 'syz.1.690': attribute type 9 has an invalid length. [ 122.062026][ T8412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.076079][ T8412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.120722][ T8606] netlink: 12 bytes leftover after parsing attributes in process `syz.4.687'. [ 122.120801][ T8412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.159937][ T8595] macvlan1: entered promiscuous mode [ 122.262454][ T8412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.272712][ T8412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.299355][ T8412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.422018][ T8412] hsr_slave_0: entered promiscuous mode [ 122.433378][ T8412] hsr_slave_1: entered promiscuous mode [ 122.439894][ T8412] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.449392][ T8412] Cannot create hsr debugfs directory [ 122.474503][ T8616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.694'. [ 122.478964][ T8618] netlink: 'syz.0.695': attribute type 11 has an invalid length. [ 122.494945][ T8618] netlink: 224 bytes leftover after parsing attributes in process `syz.0.695'. [ 122.765225][ T8627] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 122.943180][ T8633] tipc: Enabled bearer , priority 0 [ 122.981870][ T8636] dvmrp1: entered allmulticast mode [ 123.008819][ T8634] dvmrp1: left allmulticast mode [ 123.086573][ T8638] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 123.152834][ T8641] __nla_validate_parse: 1 callbacks suppressed [ 123.152849][ T8641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.705'. [ 123.317569][ T8412] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 123.333860][ T8412] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 123.352307][ T8412] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 123.366110][ T8412] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 123.378954][ T8650] netlink: 'syz.1.707': attribute type 1 has an invalid length. [ 123.446490][ T8650] bond2 (unregistering): Released all slaves [ 123.516750][ T5843] Bluetooth: hci4: command tx timeout [ 123.524274][ T8412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.577037][ T8412] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.616940][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.624069][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.653576][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.660751][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.705301][ T8412] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 123.715555][ T8658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.709'. [ 123.725434][ T8412] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 123.750581][ T8657] bridge0: entered promiscuous mode [ 123.757181][ T8655] netlink: 12 bytes leftover after parsing attributes in process `syz.0.708'. [ 123.784407][ T8658] bridge_slave_1: left allmulticast mode [ 123.800522][ T8658] bridge_slave_1: left promiscuous mode [ 123.811137][ T8658] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.895204][ T8658] bridge_slave_0: left allmulticast mode [ 123.905267][ T8658] bridge_slave_0: left promiscuous mode [ 123.911200][ T8658] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.932788][ T8658] bridge0 (unregistering): left promiscuous mode [ 124.071639][ T8630] tipc: Disabling bearer [ 124.202584][ T8671] delete_channel: no stack [ 124.325840][ T8412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.444549][ T8412] veth0_vlan: entered promiscuous mode [ 124.468076][ T8412] veth1_vlan: entered promiscuous mode [ 124.521975][ T8412] veth0_macvtap: entered promiscuous mode [ 124.542809][ T8412] veth1_macvtap: entered promiscuous mode [ 124.586324][ T8412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.604892][ T8412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.620008][ T8412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.653769][ T8412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.683020][ T8412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.705779][ T8687] netlink: 'syz.1.711': attribute type 1 has an invalid length. [ 124.716152][ T8412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.729511][ T8412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.740496][ T8412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.752491][ T8412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.816199][ T8412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.835975][ T8694] netlink: 'syz.3.715': attribute type 3 has an invalid length. [ 124.866287][ T8412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.893755][ T8412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.914524][ T8412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.928410][ T8412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.954536][ T8412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.984220][ T8412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.001424][ T8412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.018357][ T8412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.116482][ T8412] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.132230][ T8412] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.141119][ T8412] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.150336][ T8412] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.273822][ T1049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.315345][ T1049] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.391084][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.402328][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.437734][ T8717] ip6tnl1: entered promiscuous mode [ 125.442995][ T8717] ip6tnl1: entered allmulticast mode [ 125.596328][ T5843] Bluetooth: hci4: command tx timeout [ 125.630664][ T8721] netlink: 28 bytes leftover after parsing attributes in process `syz.0.722'. [ 125.690352][ T8729] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 126.025627][ T8735] netlink: 44 bytes leftover after parsing attributes in process `syz.3.726'. [ 126.054253][ T8740] netlink: 'syz.1.727': attribute type 1 has an invalid length. [ 126.122952][ T8740] 8021q: adding VLAN 0 to HW filter on device bond3 [ 126.346355][ T8757] netlink: 4 bytes leftover after parsing attributes in process `syz.4.730'. [ 126.372719][ T8748] bridge0: port 3(hsr0) entered disabled state [ 126.379105][ T8748] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.431241][ T8760] sock: sock_timestamping_bind_phc: sock not bind to device [ 126.455338][ T8760] netlink: 28 bytes leftover after parsing attributes in process `syz.0.731'. [ 126.550249][ T8748] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.604373][ T8748] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.783934][ T8748] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.809217][ T8748] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.824052][ T8748] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.843178][ T8748] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.963313][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 126.974838][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 126.984087][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 126.992951][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 127.004027][ T5849] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 127.011756][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 127.032897][ T8756] bond3: (slave ip6gretap1): making interface the new active one [ 127.042887][ T8756] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 127.051590][ T8756] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 127.060515][ T8756] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 127.181683][ T5887] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 127.399830][ T5887] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 127.429635][ T8776] tipc: Enabled bearer , priority 2 [ 127.523501][ T8786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.737'. [ 127.619042][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.649995][ T8792] netlink: 8 bytes leftover after parsing attributes in process `syz.4.739'. [ 127.666753][ T8763] chnl_net:caif_netlink_parms(): no params data found [ 127.727970][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.780580][ T8800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.742'. [ 127.951530][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.001195][ T8818] netlink: 'syz.0.746': attribute type 1 has an invalid length. [ 128.055045][ T1103] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 128.064308][ T8812] syzkaller0: entered promiscuous mode [ 128.086156][ T8812] syzkaller0: entered allmulticast mode [ 128.139434][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.152964][ T1143] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 128.195142][ T8763] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.204662][ T8763] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.220095][ T8763] bridge_slave_0: entered allmulticast mode [ 128.231621][ T8763] bridge_slave_0: entered promiscuous mode [ 128.256859][ T8827] x_tables: duplicate underflow at hook 1 [ 128.259574][ T8763] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.279855][ T8763] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.291917][ T8763] bridge_slave_1: entered allmulticast mode [ 128.311037][ T8763] bridge_slave_1: entered promiscuous mode [ 128.466747][ T8763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.521270][ T8763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.651006][ T8763] team0: Port device team_slave_0 added [ 128.680051][ T8763] team0: Port device team_slave_1 added [ 128.731674][ T8843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.752'. [ 128.740726][ T8843] netlink: 4 bytes leftover after parsing attributes in process `syz.4.752'. [ 128.801366][ T12] bridge_slave_1: left allmulticast mode [ 128.815986][ T12] bridge_slave_1: left promiscuous mode [ 128.836347][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.898913][ T12] bridge_slave_0: left allmulticast mode [ 128.911130][ T12] bridge_slave_0: left promiscuous mode [ 128.917575][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.039391][ T5849] Bluetooth: hci4: command tx timeout [ 129.267071][ T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 129.463041][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.473889][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.485861][ T12] bond0 (unregistering): Released all slaves [ 129.503234][ T8763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.510731][ T8763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.538647][ T8763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.569950][ T8850] IPv6: Can't replace route, no match found [ 129.609655][ T1143] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 129.656583][ T1143] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 129.771952][ T8763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.781958][ T8763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.802438][ T8869] xt_cluster: node mask cannot exceed total number of nodes [ 129.809029][ T8763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.988006][ T8763] hsr_slave_0: entered promiscuous mode [ 130.006707][ T8763] hsr_slave_1: entered promiscuous mode [ 130.028580][ T8763] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 130.041204][ T8763] Cannot create hsr debugfs directory [ 130.105745][ T8882] netlink: 32 bytes leftover after parsing attributes in process `syz.1.761'. [ 130.126538][ T8880] ip6t_REJECT: ECHOREPLY is not supported [ 130.379367][ T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 130.524457][ T12] hsr_slave_0: left promiscuous mode [ 130.535801][ T12] hsr_slave_1: left promiscuous mode [ 130.546311][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.554908][ T8906] netlink: 76 bytes leftover after parsing attributes in process `syz.4.769'. [ 130.572218][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.580609][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.588306][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.609202][ T12] veth1_macvtap: left promiscuous mode [ 130.614716][ T12] veth0_macvtap: left promiscuous mode [ 130.620599][ T12] veth1_vlan: left promiscuous mode [ 130.626004][ T12] veth0_vlan: left promiscuous mode [ 131.035609][ T1143] wlan1: Trigger new scan to find an IBSS to join [ 131.127130][ T5849] Bluetooth: hci4: command tx timeout [ 131.194073][ T12] team0 (unregistering): Port device team_slave_1 removed [ 131.245605][ T12] team0 (unregistering): Port device team_slave_0 removed [ 131.671149][ T8927] netlink: 204156 bytes leftover after parsing attributes in process `syz.3.774'. [ 131.684075][ T8927] netlink: zone id is out of range [ 131.689958][ T8927] netlink: zone id is out of range [ 131.696162][ T8927] netlink: zone id is out of range [ 131.701414][ T8927] netlink: zone id is out of range [ 131.706753][ T8927] netlink: zone id is out of range [ 131.711893][ T8927] netlink: zone id is out of range [ 131.718643][ T8927] netlink: zone id is out of range [ 131.723787][ T8927] netlink: zone id is out of range [ 131.732449][ T8927] netlink: zone id is out of range [ 131.737762][ T8927] netlink: zone id is out of range [ 131.936889][ T8906] netlink: 12 bytes leftover after parsing attributes in process `syz.4.769'. [ 132.248170][ T8950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.780'. [ 132.258799][ T8950] netlink: 'syz.1.780': attribute type 10 has an invalid length. [ 132.306009][ T8950] macvlan0: entered allmulticast mode [ 132.313724][ T8950] veth1_vlan: entered allmulticast mode [ 132.333547][ T8950] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 132.551028][ T8961] ipvlan2: entered promiscuous mode [ 132.575615][ T8961] ipvlan2: entered allmulticast mode [ 132.580970][ T8961] vlan0: entered allmulticast mode [ 132.616182][ T68] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 132.616201][ T68] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 132.808641][ T8975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.815170][ T8977] netlink: 36 bytes leftover after parsing attributes in process `syz.1.785'. [ 132.849671][ T8975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.855561][ T8976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.901801][ T8975] netlink: 'syz.4.787': attribute type 10 has an invalid length. [ 133.055630][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.163271][ T8991] netlink: 12 bytes leftover after parsing attributes in process `syz.1.792'. [ 133.215679][ T5849] Bluetooth: hci4: command tx timeout [ 133.270095][ T8999] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 133.308431][ T8996] batadv0: entered promiscuous mode [ 133.314862][ T8996] macsec0: entered promiscuous mode [ 133.327345][ T8996] macsec0: entered allmulticast mode [ 133.340791][ T8996] batadv0: entered allmulticast mode [ 133.353364][ T8996] batadv0: left allmulticast mode [ 133.359316][ T8996] batadv0: left promiscuous mode [ 133.399975][ T8763] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 133.415304][ T8763] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 133.433280][ T8763] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 133.455127][ T8763] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 133.518161][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 133.578465][ T8763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.599358][ T8763] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.629389][ T1103] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.636573][ T1103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.660336][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.667556][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.837842][ T1049] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 133.946579][ T8763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.011945][ T8763] veth0_vlan: entered promiscuous mode [ 134.025207][ T8763] veth1_vlan: entered promiscuous mode [ 134.077135][ T35] wlan1: Trigger new scan to find an IBSS to join [ 134.080115][ T8763] veth0_macvtap: entered promiscuous mode [ 134.102400][ T8763] veth1_macvtap: entered promiscuous mode [ 134.115536][ T9029] IPVS: set_ctl: invalid protocol: 47 100.1.1.2:20002 [ 134.138186][ T8763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.152669][ T8763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.163631][ T8763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.176974][ T8763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.187107][ T8763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.198145][ T8763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.217315][ T8763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.247594][ T8763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.268426][ T8763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.283636][ T8763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.295528][ T8763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.305559][ T8763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.316727][ T8763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.333645][ T8763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.359552][ T8763] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.379528][ T8763] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.397789][ T8763] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.414624][ T8763] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.537185][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.586626][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.603668][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.623116][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.956900][ T68] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 135.077747][ T9069] netlink: 24 bytes leftover after parsing attributes in process `syz.4.811'. [ 135.696735][ T9108] netlink: 'syz.0.825': attribute type 3 has an invalid length. [ 135.716927][ T9108] netlink: 224 bytes leftover after parsing attributes in process `syz.0.825'. [ 135.742068][ T9106] netlink: 4 bytes leftover after parsing attributes in process `syz.3.824'. [ 135.757829][ T9108] netlink: 'syz.0.825': attribute type 3 has an invalid length. [ 135.783591][ T9108] netlink: 224 bytes leftover after parsing attributes in process `syz.0.825'. [ 135.984357][ T1049] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.065741][ T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 136.564490][ T9134] netlink: 'syz.3.830': attribute type 21 has an invalid length. [ 136.588123][ T9134] netlink: 132 bytes leftover after parsing attributes in process `syz.3.830'. [ 136.754428][ T9142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.833'. [ 136.806526][ T9142] pim6reg: entered allmulticast mode [ 136.925752][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 136.935396][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 136.943797][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 136.953170][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 136.961943][ T5843] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 136.969796][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 137.045586][ T68] wlan1: Trigger new scan to find an IBSS to join [ 137.182222][ T9144] chnl_net:caif_netlink_parms(): no params data found [ 137.207499][ T68] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 137.305052][ T9144] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.312843][ T9144] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.320488][ T9144] bridge_slave_0: entered allmulticast mode [ 137.328623][ T9144] bridge_slave_0: entered promiscuous mode [ 137.337829][ T9144] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.345590][ T9144] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.387050][ T9144] bridge_slave_1: entered allmulticast mode [ 137.404400][ T9144] bridge_slave_1: entered promiscuous mode [ 137.524601][ T1049] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.532270][ T9175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.841'. [ 137.578431][ T9144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.612657][ T9144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.808977][ T1049] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.864873][ T9144] team0: Port device team_slave_0 added [ 137.872891][ T9155] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 137.875036][ T9144] team0: Port device team_slave_1 added [ 137.978572][ T9197] netlink: 44 bytes leftover after parsing attributes in process `syz.4.845'. [ 137.988995][ T35] wlan1: Creating new IBSS network, BSSID ca:28:1c:a4:d5:7c [ 137.990239][ T1049] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.087588][ T9144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.125685][ T9144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.184764][ T9144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.220462][ T9144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.264137][ T9144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.328502][ T9144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.406147][ T1103] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 138.541020][ T1049] bridge_slave_1: left allmulticast mode [ 138.566399][ T1049] bridge_slave_1: left promiscuous mode [ 138.586203][ T1049] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.612126][ T1049] bridge_slave_0: left allmulticast mode [ 138.648479][ T1049] bridge_slave_0: left promiscuous mode [ 138.670593][ T1049] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.802643][ T9239] netlink: 28 bytes leftover after parsing attributes in process `syz.0.854'. [ 138.836670][ T9239] netlink: 28 bytes leftover after parsing attributes in process `syz.0.854'. [ 139.045966][ T5843] Bluetooth: hci4: command tx timeout [ 139.116912][ T5843] Bluetooth: hci3: command 0x0401 tx timeout [ 139.325204][ T1049] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.340080][ T1049] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.350296][ T1049] bond0 (unregistering): Released all slaves [ 139.389682][ T9239] erspan0: entered promiscuous mode [ 139.432504][ T9239] batadv_slave_1: entered promiscuous mode [ 139.517155][ T68] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 139.544601][ T9144] hsr_slave_0: entered promiscuous mode [ 139.570736][ T9144] hsr_slave_1: entered promiscuous mode [ 139.595820][ T9144] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.603429][ T9144] Cannot create hsr debugfs directory [ 140.230567][ T9277] dvmrp5: entered allmulticast mode [ 140.306164][ T1049] hsr_slave_0: left promiscuous mode [ 140.331017][ T1049] hsr_slave_1: left promiscuous mode [ 140.350796][ T1049] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.365175][ T1049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.382004][ T1049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.395539][ T1049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.436177][ T1049] veth1_macvtap: left promiscuous mode [ 140.441893][ T1049] veth0_macvtap: left promiscuous mode [ 140.448353][ T1049] veth1_vlan: left promiscuous mode [ 140.453612][ T1049] veth0_vlan: left promiscuous mode [ 140.705551][ T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 140.897147][ T1049] team0 (unregistering): Port device team_slave_1 removed [ 140.944332][ T1049] team0 (unregistering): Port device team_slave_0 removed [ 141.115862][ T5843] Bluetooth: hci4: command tx timeout [ 141.358003][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 141.381169][ T9277] dvmrp5: left allmulticast mode [ 141.426233][ T9281] bond0: entered promiscuous mode [ 141.432670][ T9281] bond_slave_0: entered promiscuous mode [ 141.442493][ T9281] bond_slave_1: entered promiscuous mode [ 141.582582][ T9281] bond0: left promiscuous mode [ 141.605936][ T9281] bond_slave_0: left promiscuous mode [ 141.611496][ T9281] bond_slave_1: left promiscuous mode [ 141.816008][ T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 141.873588][ T9316] __nla_validate_parse: 1 callbacks suppressed [ 141.873609][ T9316] netlink: 16 bytes leftover after parsing attributes in process `syz.0.876'. [ 142.022874][ T9322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.878'. [ 142.044458][ T9322] net_ratelimit: 3 callbacks suppressed [ 142.044476][ T9322] openvswitch: netlink: Flow actions attr not present in new flow. [ 142.059130][ T9144] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 142.072801][ T9322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.878'. [ 142.087401][ T9144] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 142.107495][ T9144] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 142.109887][ T9322] openvswitch: netlink: Flow actions attr not present in new flow. [ 142.125334][ T9144] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 142.299838][ T9335] netlink: 16 bytes leftover after parsing attributes in process `syz.4.883'. [ 142.350649][ T9144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.396252][ T9144] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.424514][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.431692][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.467282][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.474475][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.537335][ T9144] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 142.561853][ T9347] netlink: 'syz.4.886': attribute type 27 has an invalid length. [ 142.575543][ T9144] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 142.656827][ T9355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.888'. [ 142.926332][ T68] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 142.938923][ T9144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.056118][ T9144] veth0_vlan: entered promiscuous mode [ 143.079720][ T9144] veth1_vlan: entered promiscuous mode [ 143.172357][ T9144] veth0_macvtap: entered promiscuous mode [ 143.182606][ T9144] veth1_macvtap: entered promiscuous mode [ 143.206807][ T5843] Bluetooth: hci4: command tx timeout [ 143.221270][ T9144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.261051][ T9144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.287198][ T9144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.288347][ T9389] delete_channel: no stack [ 143.303612][ T9144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.314048][ T9144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.324707][ T9144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.340964][ T9144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.357953][ T9391] netlink: 'syz.3.895': attribute type 13 has an invalid length. [ 143.379644][ T9144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.436246][ T9144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.451247][ T9144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.473649][ T9144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.514209][ T9144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.546931][ T9144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.567107][ T9144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.616850][ T9144] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.648900][ T9144] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.696165][ T9144] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.705011][ T9144] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.860222][ T9415] tipc: Resetting bearer [ 143.963789][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.980948][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.030906][ T1049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.049167][ T1049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.058474][ T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 144.130489][ T9426] netlink: 12 bytes leftover after parsing attributes in process `syz.4.905'. [ 144.147314][ T9426] netlink: 4 bytes leftover after parsing attributes in process `syz.4.905'. [ 144.186171][ T9428] xt_hashlimit: size too large, truncated to 1048576 [ 144.206441][ T9426] netlink: 'syz.4.905': attribute type 1 has an invalid length. [ 144.525183][ T9438] netlink: 20 bytes leftover after parsing attributes in process `syz.4.909'. [ 144.720778][ T9422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.904'. [ 144.756619][ T9422] nbd: socks must be embedded in a SOCK_ITEM attr [ 144.818767][ T9441] netlink: 16 bytes leftover after parsing attributes in process `syz.4.910'. [ 145.230807][ T1049] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 145.328260][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.369496][ T9454] xt_CT: You must specify a L4 protocol and not use inversions on it [ 145.904937][ T9465] netlink: 'syz.1.917': attribute type 7 has an invalid length. [ 146.284855][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 146.300728][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 146.310278][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 146.320013][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 146.330270][ T5849] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 146.335140][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.348338][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 146.349375][ T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 146.456407][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.641219][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.873756][ T9478] chnl_net:caif_netlink_parms(): no params data found [ 146.946461][ T9500] __nla_validate_parse: 5 callbacks suppressed [ 146.946480][ T9500] netlink: 72 bytes leftover after parsing attributes in process `syz.1.926'. [ 147.094798][ T11] bridge_slave_1: left allmulticast mode [ 147.113629][ T11] bridge_slave_1: left promiscuous mode [ 147.130988][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.147423][ T11] bridge_slave_0: left allmulticast mode [ 147.153140][ T11] bridge_slave_0: left promiscuous mode [ 147.159200][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.179771][ T9513] netlink: 9 bytes leftover after parsing attributes in process `syz.4.930'. [ 147.531941][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.543231][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.553916][ T11] bond0 (unregistering): Released all slaves [ 147.568929][ T9513] 0·: renamed from hsr_slave_1 (while UP) [ 147.580564][ T9513] 0·: entered allmulticast mode [ 147.589108][ T9513] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 147.605007][ T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 147.861635][ T9531] netlink: 20 bytes leftover after parsing attributes in process `syz.3.933'. [ 147.870854][ T9531] tc_dump_action: action bad kind [ 147.878989][ T9478] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.909319][ T9478] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.931712][ T9478] bridge_slave_0: entered allmulticast mode [ 147.950880][ T9478] bridge_slave_0: entered promiscuous mode [ 147.975154][ T9478] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.992944][ T9478] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.002705][ T9478] bridge_slave_1: entered allmulticast mode [ 148.010273][ T9478] bridge_slave_1: entered promiscuous mode [ 148.022953][ T9526] netlink: 12 bytes leftover after parsing attributes in process `syz.4.932'. [ 148.256301][ T9549] netlink: 32 bytes leftover after parsing attributes in process `syz.4.939'. [ 148.256476][ T9478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.311206][ T9478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.397411][ T5849] Bluetooth: hci4: command tx timeout [ 148.419538][ T11] hsr_slave_0: left promiscuous mode [ 148.433468][ T11] hsr_slave_1: left promiscuous mode [ 148.460956][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.468987][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.486246][ T9560] netlink: 12 bytes leftover after parsing attributes in process `syz.3.941'. [ 148.496849][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.504357][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.547809][ T11] veth1_macvtap: left promiscuous mode [ 148.553381][ T11] veth0_macvtap: left promiscuous mode [ 148.559857][ T11] veth1_vlan: left promiscuous mode [ 148.565172][ T11] veth0_vlan: left promiscuous mode [ 148.735684][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 149.447609][ T11] team0 (unregistering): Port device team_slave_1 removed [ 149.461015][ T9585] xt_hashlimit: size too large, truncated to 1048576 [ 149.520217][ T11] team0 (unregistering): Port device team_slave_0 removed [ 149.865736][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 150.010027][ T9478] team0: Port device team_slave_0 added [ 150.030599][ T9560] bond3: entered promiscuous mode [ 150.103966][ T9478] team0: Port device team_slave_1 added [ 150.229555][ T9606] syz.1.953[9606] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.229646][ T9606] syz.1.953[9606] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.253832][ T9478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.282007][ T9478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.325683][ T9478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.362826][ T9604] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.400003][ T9478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.412030][ T9478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.444052][ T9478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.485805][ T5849] Bluetooth: hci4: command tx timeout [ 150.538726][ T9604] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.594584][ T9630] xt_bpf: check failed: parse error [ 150.659245][ T9478] hsr_slave_0: entered promiscuous mode [ 150.695868][ T9478] hsr_slave_1: entered promiscuous mode [ 150.707940][ T9478] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 150.723265][ T9478] Cannot create hsr debugfs directory [ 150.735230][ T9604] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.845107][ T9604] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.999297][ T68] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 151.065719][ T9644] netlink: 20 bytes leftover after parsing attributes in process `syz.1.965'. [ 151.088521][ T9604] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.229826][ T9604] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.335084][ T9655] netlink: 'syz.1.969': attribute type 1 has an invalid length. [ 151.344870][ T9655] netlink: 224 bytes leftover after parsing attributes in process `syz.1.969'. [ 151.351802][ T9604] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.397118][ T9604] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.465666][ T9659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.970'. [ 151.724229][ T9666] syzkaller0: entered promiscuous mode [ 151.730556][ T9666] syzkaller0: entered allmulticast mode [ 151.854506][ T9677] netlink: 40 bytes leftover after parsing attributes in process `syz.0.975'. [ 152.115720][ T1103] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 152.563408][ T5849] Bluetooth: hci4: command tx timeout [ 152.688710][ T9683] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 153.257057][ T1049] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 153.534534][ T9682] veth0_vlan: left promiscuous mode [ 153.539959][ T9682] vlan0: entered promiscuous mode [ 153.545015][ T9682] vlan0: entered allmulticast mode [ 153.642295][ T9478] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 153.666452][ T9478] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 153.705144][ T9478] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 153.759534][ T9478] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 153.885322][ T9478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.902318][ T9478] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.913628][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.920845][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.962871][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.970053][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.155805][ T9711] __nla_validate_parse: 1 callbacks suppressed [ 154.155825][ T9711] netlink: 40 bytes leftover after parsing attributes in process `syz.0.984'. [ 154.174628][ T9710] netlink: 'syz.1.983': attribute type 39 has an invalid length. [ 154.192332][ T9714] veth1_macvtap: left promiscuous mode [ 154.214160][ T9714] macsec0: entered promiscuous mode [ 154.221160][ T9714] macsec0: entered allmulticast mode [ 154.271554][ T9710] veth1_vlan: left allmulticast mode [ 154.297467][ T9710] macvlan0: left allmulticast mode [ 154.324191][ T9711] ip6tnl2: entered promiscuous mode [ 154.344774][ T9718] veth1_macvtap: entered promiscuous mode [ 154.367669][ T9718] veth1_macvtap: entered allmulticast mode [ 154.392547][ T9718] macsec0: left promiscuous mode [ 154.407604][ T9718] macsec0: left allmulticast mode [ 154.408433][ T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 154.428810][ T9718] veth1_macvtap: left allmulticast mode [ 154.480078][ T9478] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.499274][ T9731] netlink: 12 bytes leftover after parsing attributes in process `syz.1.987'. [ 154.574417][ T9478] veth0_vlan: entered promiscuous mode [ 154.602078][ T9478] veth1_vlan: entered promiscuous mode [ 154.646122][ T5849] Bluetooth: hci4: command tx timeout [ 154.684972][ T9478] veth0_macvtap: entered promiscuous mode [ 154.712714][ T9478] veth1_macvtap: entered promiscuous mode [ 154.778151][ T9478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.788921][ T9478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.798994][ T9478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.809520][ T9478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.819416][ T9478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.830162][ T9478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.842632][ T9478] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.853178][ T9478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.864016][ T9478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.874175][ T9478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.899669][ T9478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.913034][ T9478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.931856][ T9478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.944178][ T9478] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.963256][ T9478] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.984160][ T9478] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.995064][ T9478] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.003378][ T9751] netlink: 4 bytes leftover after parsing attributes in process `syz.4.993'. [ 155.008263][ T9478] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.179878][ T9760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.996'. [ 155.220180][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.233934][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.263503][ T9762] netlink: 'syz.1.997': attribute type 1 has an invalid length. [ 155.355225][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.387717][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.556862][ T1049] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 156.243439][ T9787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1003'. [ 156.405332][ T9794] netlink: 'syz.0.1007': attribute type 1 has an invalid length. [ 156.493505][ T9801] bond3: (slave gretap1): making interface the new active one [ 156.501938][ T9801] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 156.534853][ T9807] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 156.553441][ T9807] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 156.655986][ T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 156.698519][ T9812] netlink: 'syz.3.1009': attribute type 10 has an invalid length. [ 156.715548][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 156.743480][ T9814] netlink: 'syz.4.1011': attribute type 13 has an invalid length. [ 156.808625][ T9812] bond0: (slave netdevsim0): Enslaving as an active interface with a down link [ 156.837899][ T9814] tipc: Resetting bearer [ 156.873115][ T9814] gretap0: refused to change device tx_queue_len [ 156.906937][ T9814] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 156.989012][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.011169][ T9809] bridge0: port 2(ip6gretap0) entered blocking state [ 157.030262][ T9809] bridge0: port 2(ip6gretap0) entered disabled state [ 157.037907][ T9809] ip6gretap0: entered allmulticast mode [ 157.044674][ T9809] ip6gretap0: entered promiscuous mode [ 157.117791][ T35] wlan1: Trigger new scan to find an IBSS to join [ 157.633369][ T9825] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1013'. [ 157.760333][ T9831] IPVS: Unknown mcast interface: veth°ñ [ 157.785316][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 157.876307][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 157.919852][ T9827] sch_tbf: burst 250 is lower than device lo mtu (39799) ! [ 157.921951][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 157.938016][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 157.951285][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 157.965817][ T5843] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 157.973586][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 158.395010][ T9852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1022'. [ 158.422203][ T9853] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1022'. [ 158.431990][ T9852] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.440088][ T9852] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.461365][ T9852] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.472612][ T9852] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.506370][ T9862] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1023'. [ 158.531502][ T9835] chnl_net:caif_netlink_parms(): no params data found [ 158.673907][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.722219][ T9872] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 158.722790][ T9835] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.754680][ T9835] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.763503][ T9835] bridge_slave_0: entered allmulticast mode [ 158.781673][ T9835] bridge_slave_0: entered promiscuous mode [ 158.817843][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.863491][ T9835] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.884857][ T9835] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.910931][ T9835] bridge_slave_1: entered allmulticast mode [ 158.934881][ T9835] bridge_slave_1: entered promiscuous mode [ 158.997941][ T1049] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 159.023432][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.077154][ T9835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.097080][ T9894] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1032'. [ 159.123903][ T9835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.220500][ T9898] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1033'. [ 159.231496][ T9835] team0: Port device team_slave_0 added [ 159.249575][ T9835] team0: Port device team_slave_1 added [ 159.346048][ T9835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.353721][ T9835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.394535][ T9835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.407671][ T9905] netlink: 'syz.0.1035': attribute type 1 has an invalid length. [ 159.441550][ T11] bridge_slave_1: left allmulticast mode [ 159.447532][ T11] bridge_slave_1: left promiscuous mode [ 159.453254][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.468691][ T11] bridge_slave_0: left allmulticast mode [ 159.475216][ T11] bridge_slave_0: left promiscuous mode [ 159.481058][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.937339][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.955047][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.972025][ T11] bond0 (unregistering): Released all slaves [ 159.981888][ T9835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.993583][ T9835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.021548][ T5849] Bluetooth: hci4: command tx timeout [ 160.027910][ T9835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.051352][ T9916] tipc: Started in network mode [ 160.068650][ T9916] tipc: Node identity aecff77d0f47, cluster identity 4711 [ 160.090978][ T9916] tipc: Enabled bearer , priority 0 [ 160.156477][ T9920] syzkaller0: entered promiscuous mode [ 160.162121][ T9920] syzkaller0: entered allmulticast mode [ 160.168344][ T9920] tipc: Resetting bearer [ 160.180729][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 160.268584][ T1049] tipc: Resetting bearer [ 160.286610][ T9927] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1040'. [ 160.296021][ T9927] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1040'. [ 160.354419][ T9906] tipc: Resetting bearer [ 161.205708][ T5884] tipc: Node number set to 2710108029 [ 161.297299][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 162.075769][ T5849] Bluetooth: hci4: command tx timeout [ 162.105582][ T12] wlan1: Trigger new scan to find an IBSS to join [ 162.159434][ T9906] tipc: Disabling bearer [ 162.231469][ T9953] bridge4: entered promiscuous mode [ 162.273157][ T9953] bridge4: entered allmulticast mode [ 162.361415][ T9963] netlink: 'syz.3.1050': attribute type 21 has an invalid length. [ 162.369478][ T9963] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1050'. [ 162.427092][ T68] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 162.485856][ T9835] hsr_slave_0: entered promiscuous mode [ 162.493352][ T9835] hsr_slave_1: entered promiscuous mode [ 162.500752][ T9835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.508808][ T9835] Cannot create hsr debugfs directory [ 162.558679][ T9978] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1049'. [ 162.608415][ T9981] netlink: 'syz.1.1053': attribute type 10 has an invalid length. [ 162.649670][ T11] hsr_slave_0: left promiscuous mode [ 162.702490][ T11] hsr_slave_1: left promiscuous mode [ 162.712460][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.732330][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.743101][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.761091][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.801976][ T11] veth1_macvtap: left promiscuous mode [ 162.821275][ T11] veth0_macvtap: left promiscuous mode [ 162.831972][ T11] veth1_vlan: left promiscuous mode [ 162.843014][ T11] veth0_vlan: left promiscuous mode [ 162.889726][ T9998] netlink: 'syz.0.1058': attribute type 1 has an invalid length. [ 162.898944][ T9998] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.056395][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.065810][ T68] [ 163.068471][ T68] ============================= [ 163.073334][ T68] WARNING: suspicious RCU usage [ 163.078291][ T68] 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 Not tainted [ 163.085495][ T68] ----------------------------- [ 163.090353][ T68] net/sched/sch_generic.c:1256 suspicious rcu_dereference_protected() usage! [ 163.099232][ T68] [ 163.099232][ T68] other info that might help us debug this: [ 163.099232][ T68] [ 163.109558][ T68] [ 163.109558][ T68] rcu_scheduler_active = 2, debug_locks = 1 [ 163.118116][ T68] 3 locks held by kworker/u8:4/68: [ 163.123242][ T68] #0: ffff88805d63a148 ((wq_completion)bond0){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 163.134377][ T68] #1: ffffc9000155fd00 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 163.147431][ T68] #2: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x174/0x3170 [ 163.157188][ T68] [ 163.157188][ T68] stack backtrace: [ 163.163089][ T68] CPU: 1 UID: 0 PID: 68 Comm: kworker/u8:4 Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 163.173800][ T68] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 163.183853][ T68] Workqueue: bond0 bond_mii_monitor [ 163.189064][ T68] Call Trace: [ 163.192338][ T68] [ 163.195269][ T68] dump_stack_lvl+0x241/0x360 [ 163.199952][ T68] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.205146][ T68] ? __pfx__printk+0x10/0x10 [ 163.209830][ T68] lockdep_rcu_suspicious+0x226/0x340 [ 163.215202][ T68] dev_activate+0xf8/0x1240 [ 163.219709][ T68] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 163.225601][ T68] ? lockdep_hardirqs_on+0x99/0x150 [ 163.230827][ T68] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 163.236715][ T68] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 163.243063][ T68] ? __pfx_dev_activate+0x10/0x10 [ 163.248110][ T68] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 163.254022][ T68] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 163.260353][ T68] ? rfc2863_policy+0x1db/0x3b0 [ 163.265209][ T68] linkwatch_do_dev+0xfb/0x170 [ 163.269977][ T68] ethtool_op_get_link+0x15/0x60 [ 163.274911][ T68] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 163.280544][ T68] bond_check_dev_link+0x1f1/0x3f0 [ 163.285662][ T68] ? __pfx_bond_check_dev_link+0x10/0x10 [ 163.291303][ T68] bond_mii_monitor+0x49a/0x3170 [ 163.296245][ T68] ? __lock_acquire+0x1397/0x2100 [ 163.301290][ T68] ? bond_mii_monitor+0x174/0x3170 [ 163.306422][ T68] ? do_raw_spin_unlock+0x13c/0x8b0 [ 163.311634][ T68] ? __pfx_bond_mii_monitor+0x10/0x10 [ 163.317023][ T68] ? __pfx_lock_acquire+0x10/0x10 [ 163.322055][ T68] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 163.328046][ T68] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 163.334384][ T68] ? process_scheduled_works+0x976/0x1840 [ 163.340101][ T68] process_scheduled_works+0xa66/0x1840 [ 163.345666][ T68] ? __pfx_process_scheduled_works+0x10/0x10 [ 163.351650][ T68] ? assign_work+0x364/0x3d0 [ 163.356237][ T68] worker_thread+0x870/0xd30 [ 163.360829][ T68] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 163.366737][ T68] ? __kthread_parkme+0x169/0x1d0 [ 163.371778][ T68] ? __pfx_worker_thread+0x10/0x10 [ 163.376896][ T68] kthread+0x2f0/0x390 [ 163.380981][ T68] ? __pfx_worker_thread+0x10/0x10 [ 163.386091][ T68] ? __pfx_kthread+0x10/0x10 [ 163.390683][ T68] ret_from_fork+0x4b/0x80 [ 163.395096][ T68] ? __pfx_kthread+0x10/0x10 [ 163.399686][ T68] ret_from_fork_asm+0x1a/0x30 [ 163.404456][ T68] [ 163.415819][ T68] [ 163.418229][ T68] ============================= [ 163.423305][ T68] WARNING: suspicious RCU usage [ 163.428488][ T68] 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 Not tainted [ 163.435873][ T68] ----------------------------- [ 163.440739][ T68] net/sched/sch_generic.c:1234 suspicious rcu_dereference_protected() usage! [ 163.449576][ T68] [ 163.449576][ T68] other info that might help us debug this: [ 163.449576][ T68] [ 163.459857][ T68] [ 163.459857][ T68] rcu_scheduler_active = 2, debug_locks = 1 [ 163.467968][ T68] 3 locks held by kworker/u8:4/68: [ 163.473084][ T68] #0: ffff88805d63a148 ((wq_completion)bond0){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 163.484047][ T68] #1: ffffc9000155fd00 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 163.497092][ T68] #2: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x174/0x3170 [ 163.506936][ T68] [ 163.506936][ T68] stack backtrace: [ 163.512841][ T68] CPU: 0 UID: 0 PID: 68 Comm: kworker/u8:4 Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 163.523525][ T68] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 163.533681][ T68] Workqueue: bond0 bond_mii_monitor [ 163.538888][ T68] Call Trace: [ 163.542175][ T68] [ 163.545101][ T68] dump_stack_lvl+0x241/0x360 [ 163.549805][ T68] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.555016][ T68] ? __pfx__printk+0x10/0x10 [ 163.559609][ T68] lockdep_rcu_suspicious+0x226/0x340 [ 163.564986][ T68] transition_one_qdisc+0x8e/0x1c0 [ 163.570105][ T68] dev_activate+0x838/0x1240 [ 163.574705][ T68] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 163.581027][ T68] ? __pfx_dev_activate+0x10/0x10 [ 163.586046][ T68] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 163.591933][ T68] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 163.598254][ T68] ? rfc2863_policy+0x1db/0x3b0 [ 163.603128][ T68] linkwatch_do_dev+0xfb/0x170 [ 163.607885][ T68] ethtool_op_get_link+0x15/0x60 [ 163.612823][ T68] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 163.618454][ T68] bond_check_dev_link+0x1f1/0x3f0 [ 163.623570][ T68] ? __pfx_bond_check_dev_link+0x10/0x10 [ 163.629216][ T68] bond_mii_monitor+0x49a/0x3170 [ 163.634159][ T68] ? __lock_acquire+0x1397/0x2100 [ 163.639195][ T68] ? bond_mii_monitor+0x174/0x3170 [ 163.644309][ T68] ? do_raw_spin_unlock+0x13c/0x8b0 [ 163.649511][ T68] ? __pfx_bond_mii_monitor+0x10/0x10 [ 163.654892][ T68] ? __pfx_lock_acquire+0x10/0x10 [ 163.659914][ T68] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 163.665893][ T68] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 163.672247][ T68] ? process_scheduled_works+0x976/0x1840 [ 163.677968][ T68] process_scheduled_works+0xa66/0x1840 [ 163.683528][ T68] ? __pfx_process_scheduled_works+0x10/0x10 [ 163.689509][ T68] ? assign_work+0x364/0x3d0 [ 163.694195][ T68] worker_thread+0x870/0xd30 [ 163.698810][ T68] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 163.704703][ T68] ? __kthread_parkme+0x169/0x1d0 [ 163.709725][ T68] ? __pfx_worker_thread+0x10/0x10 [ 163.714828][ T68] kthread+0x2f0/0x390 [ 163.718898][ T68] ? __pfx_worker_thread+0x10/0x10 [ 163.724008][ T68] ? __pfx_kthread+0x10/0x10 [ 163.728601][ T68] ret_from_fork+0x4b/0x80 [ 163.733014][ T68] ? __pfx_kthread+0x10/0x10 [ 163.737605][ T68] ret_from_fork_asm+0x1a/0x30 [ 163.742380][ T68] [ 163.775274][ T68] [ 163.777764][ T68] ============================= [ 163.782612][ T68] WARNING: suspicious RCU usage [ 163.787557][ T68] 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 Not tainted [ 163.794663][ T68] ----------------------------- [ 163.799561][ T68] ./include/linux/rtnetlink.h:156 suspicious rcu_dereference_protected() usage! [ 163.808675][ T68] [ 163.808675][ T68] other info that might help us debug this: [ 163.808675][ T68] [ 163.818970][ T68] [ 163.818970][ T68] rcu_scheduler_active = 2, debug_locks = 1 [ 163.827089][ T68] 3 locks held by kworker/u8:4/68: [ 163.832209][ T68] #0: ffff88805d63a148 ((wq_completion)bond0){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 163.843506][ T68] #1: ffffc9000155fd00 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 163.856748][ T68] #2: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x174/0x3170 [ 163.866528][ T68] [ 163.866528][ T68] stack backtrace: [ 163.872439][ T68] CPU: 0 UID: 0 PID: 68 Comm: kworker/u8:4 Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 163.883125][ T68] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 163.893176][ T68] Workqueue: bond0 bond_mii_monitor [ 163.898385][ T68] Call Trace: [ 163.901659][ T68] [ 163.904585][ T68] dump_stack_lvl+0x241/0x360 [ 163.909284][ T68] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.914497][ T68] ? __pfx__printk+0x10/0x10 [ 163.919088][ T68] lockdep_rcu_suspicious+0x226/0x340 [ 163.924464][ T68] dev_activate+0x925/0x1240 [ 163.929071][ T68] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 163.935426][ T68] ? __pfx_dev_activate+0x10/0x10 [ 163.940464][ T68] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 163.946352][ T68] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 163.952674][ T68] ? rfc2863_policy+0x1db/0x3b0 [ 163.957517][ T68] linkwatch_do_dev+0xfb/0x170 [ 163.962294][ T68] ethtool_op_get_link+0x15/0x60 [ 163.967224][ T68] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 163.972846][ T68] bond_check_dev_link+0x1f1/0x3f0 [ 163.977274][ T1143] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 163.977950][ T68] ? __pfx_bond_check_dev_link+0x10/0x10 [ 163.991325][ T68] bond_mii_monitor+0x49a/0x3170 [ 163.996288][ T68] ? __lock_acquire+0x1397/0x2100 [ 164.001314][ T68] ? bond_mii_monitor+0x174/0x3170 [ 164.006441][ T68] ? do_raw_spin_unlock+0x13c/0x8b0 [ 164.011634][ T68] ? __pfx_bond_mii_monitor+0x10/0x10 [ 164.017023][ T68] ? __pfx_lock_acquire+0x10/0x10 [ 164.022041][ T68] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 164.028028][ T68] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 164.034403][ T68] ? process_scheduled_works+0x976/0x1840 [ 164.040130][ T68] process_scheduled_works+0xa66/0x1840 [ 164.045746][ T68] ? __pfx_process_scheduled_works+0x10/0x10 [ 164.051736][ T68] ? assign_work+0x364/0x3d0 [ 164.056319][ T68] worker_thread+0x870/0xd30 [ 164.060906][ T68] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 164.066815][ T68] ? __kthread_parkme+0x169/0x1d0 [ 164.071834][ T68] ? __pfx_worker_thread+0x10/0x10 [ 164.076950][ T68] kthread+0x2f0/0x390 [ 164.081040][ T68] ? __pfx_worker_thread+0x10/0x10 [ 164.086160][ T68] ? __pfx_kthread+0x10/0x10 [ 164.090746][ T68] ret_from_fork+0x4b/0x80 [ 164.095152][ T68] ? __pfx_kthread+0x10/0x10 [ 164.099736][ T68] ret_from_fork_asm+0x1a/0x30 [ 164.104518][ T68] [ 164.108608][ T68] BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1523 [ 164.118106][ T68] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 68, name: kworker/u8:4 [ 164.127175][ T68] preempt_count: 0, expected: 0 [ 164.132020][ T68] RCU nest depth: 1, expected: 0 [ 164.136974][ T68] 3 locks held by kworker/u8:4/68: [ 164.142408][ T68] #0: ffff88805d63a148 ((wq_completion)bond0){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 164.153363][ T68] #1: ffffc9000155fd00 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 164.166447][ T5849] Bluetooth: hci4: command tx timeout [ 164.172386][ T68] #2: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x174/0x3170 [ 164.182142][ T68] CPU: 0 UID: 0 PID: 68 Comm: kworker/u8:4 Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 164.192823][ T68] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 164.202879][ T68] Workqueue: bond0 bond_mii_monitor [ 164.208118][ T68] Call Trace: [ 164.211396][ T68] [ 164.214327][ T68] dump_stack_lvl+0x241/0x360 [ 164.219021][ T68] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.224238][ T68] ? __pfx__printk+0x10/0x10 [ 164.228825][ T68] ? __schedule+0x1858/0x4c30 [ 164.233519][ T68] __might_resched+0x5d4/0x780 [ 164.238296][ T68] ? preempt_schedule_notrace+0xf6/0x140 [ 164.243947][ T68] ? __pfx___might_resched+0x10/0x10 [ 164.249234][ T68] ? __pfx___schedule+0x10/0x10 [ 164.254085][ T68] ? lockdep_hardirqs_on+0x99/0x150 [ 164.259306][ T68] down_read+0x8e/0xa40 [ 164.263478][ T68] ? dump_stack_lvl+0x2f9/0x360 [ 164.268349][ T68] ? preempt_schedule_notrace+0x100/0x140 [ 164.274071][ T68] ? __pfx_down_read+0x10/0x10 [ 164.278857][ T68] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.284059][ T68] ? __pfx__printk+0x10/0x10 [ 164.288653][ T68] ? dev_get_flags+0x147/0x1d0 [ 164.293419][ T68] wext_netdev_notifier_call+0x1f/0x120 [ 164.298966][ T68] notifier_call_chain+0x1a5/0x3f0 [ 164.304078][ T68] netdev_state_change+0x11f/0x1a0 [ 164.309191][ T68] ? __pfx_netdev_state_change+0x10/0x10 [ 164.314822][ T68] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 164.320707][ T68] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 164.327030][ T68] ? rfc2863_policy+0x1db/0x3b0 [ 164.331875][ T68] linkwatch_do_dev+0x112/0x170 [ 164.336721][ T68] ethtool_op_get_link+0x15/0x60 [ 164.341654][ T68] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 164.347288][ T68] bond_check_dev_link+0x1f1/0x3f0 [ 164.352404][ T68] ? __pfx_bond_check_dev_link+0x10/0x10 [ 164.358047][ T68] bond_mii_monitor+0x49a/0x3170 [ 164.362988][ T68] ? __lock_acquire+0x1397/0x2100 [ 164.368020][ T68] ? bond_mii_monitor+0x174/0x3170 [ 164.373128][ T68] ? do_raw_spin_unlock+0x13c/0x8b0 [ 164.378325][ T68] ? __pfx_bond_mii_monitor+0x10/0x10 [ 164.383702][ T68] ? __pfx_lock_acquire+0x10/0x10 [ 164.388726][ T68] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 164.394723][ T68] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 164.401154][ T68] ? process_scheduled_works+0x976/0x1840 [ 164.406880][ T68] process_scheduled_works+0xa66/0x1840 [ 164.412540][ T68] ? __pfx_process_scheduled_works+0x10/0x10 [ 164.418694][ T68] ? assign_work+0x364/0x3d0 [ 164.423301][ T68] worker_thread+0x870/0xd30 [ 164.427896][ T68] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 164.433783][ T68] ? __kthread_parkme+0x169/0x1d0 [ 164.438804][ T68] ? __pfx_worker_thread+0x10/0x10 [ 164.443914][ T68] kthread+0x2f0/0x390 [ 164.447980][ T68] ? __pfx_worker_thread+0x10/0x10 [ 164.453083][ T68] ? __pfx_kthread+0x10/0x10 [ 164.457772][ T68] ret_from_fork+0x4b/0x80 [ 164.462192][ T68] ? __pfx_kthread+0x10/0x10 [ 164.466783][ T68] ret_from_fork_asm+0x1a/0x30 [ 164.471562][ T68] [ 164.477771][ T68] [ 164.480121][ T68] ============================= [ 164.484959][ T68] [ BUG: Invalid wait context ] [ 164.489820][ T68] 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 Tainted: G W [ 164.498396][ T68] ----------------------------- [ 164.503228][ T68] kworker/u8:4/68 is trying to lock: [ 164.508489][ T68] ffffffff8fca7410 (net_rwsem){++++}-{4:4}, at: wext_netdev_notifier_call+0x1f/0x120 [ 164.517978][ T68] other info that might help us debug this: [ 164.523850][ T68] context-{5:5} [ 164.527290][ T68] 3 locks held by kworker/u8:4/68: [ 164.532379][ T68] #0: ffff88805d63a148 ((wq_completion)bond0){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 164.543241][ T68] #1: ffffc9000155fd00 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 164.556105][ T68] #2: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x174/0x3170 [ 164.565745][ T68] stack backtrace: [ 164.569441][ T68] CPU: 0 UID: 0 PID: 68 Comm: kworker/u8:4 Tainted: G W 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 164.581653][ T68] Tainted: [W]=WARN [ 164.585439][ T68] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 164.595506][ T68] Workqueue: bond0 bond_mii_monitor [ 164.600710][ T68] Call Trace: [ 164.603970][ T68] [ 164.606882][ T68] dump_stack_lvl+0x241/0x360 [ 164.611542][ T68] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.616743][ T68] ? __pfx__printk+0x10/0x10 [ 164.621405][ T68] __lock_acquire+0x15a8/0x2100 [ 164.626255][ T68] lock_acquire+0x1ed/0x550 [ 164.630738][ T68] ? wext_netdev_notifier_call+0x1f/0x120 [ 164.636460][ T68] ? __pfx_lock_acquire+0x10/0x10 [ 164.641486][ T68] ? preempt_schedule_notrace+0xf6/0x140 [ 164.647099][ T68] ? __pfx___might_resched+0x10/0x10 [ 164.652372][ T68] ? __pfx___schedule+0x10/0x10 [ 164.657207][ T68] ? lockdep_hardirqs_on+0x99/0x150 [ 164.662405][ T68] down_read+0xb1/0xa40 [ 164.666543][ T68] ? wext_netdev_notifier_call+0x1f/0x120 [ 164.672244][ T68] ? dump_stack_lvl+0x2f9/0x360 [ 164.677079][ T68] ? preempt_schedule_notrace+0x100/0x140 [ 164.682778][ T68] ? __pfx_down_read+0x10/0x10 [ 164.687535][ T68] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.692732][ T68] ? __pfx__printk+0x10/0x10 [ 164.697302][ T68] ? dev_get_flags+0x147/0x1d0 [ 164.702043][ T68] wext_netdev_notifier_call+0x1f/0x120 [ 164.707574][ T68] notifier_call_chain+0x1a5/0x3f0 [ 164.712667][ T68] netdev_state_change+0x11f/0x1a0 [ 164.717759][ T68] ? __pfx_netdev_state_change+0x10/0x10 [ 164.723371][ T68] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 164.729246][ T68] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 164.735737][ T68] ? rfc2863_policy+0x1db/0x3b0 [ 164.740588][ T68] linkwatch_do_dev+0x112/0x170 [ 164.745422][ T68] ethtool_op_get_link+0x15/0x60 [ 164.750338][ T68] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 164.755955][ T68] bond_check_dev_link+0x1f1/0x3f0 [ 164.761051][ T68] ? __pfx_bond_check_dev_link+0x10/0x10 [ 164.766700][ T68] bond_mii_monitor+0x49a/0x3170 [ 164.771621][ T68] ? __lock_acquire+0x1397/0x2100 [ 164.776629][ T68] ? bond_mii_monitor+0x174/0x3170 [ 164.781719][ T68] ? do_raw_spin_unlock+0x13c/0x8b0 [ 164.786910][ T68] ? __pfx_bond_mii_monitor+0x10/0x10 [ 164.792284][ T68] ? __pfx_lock_acquire+0x10/0x10 [ 164.797307][ T68] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 164.803266][ T68] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 164.809575][ T68] ? process_scheduled_works+0x976/0x1840 [ 164.815274][ T68] process_scheduled_works+0xa66/0x1840 [ 164.820802][ T68] ? __pfx_process_scheduled_works+0x10/0x10 [ 164.826760][ T68] ? assign_work+0x364/0x3d0 [ 164.831325][ T68] worker_thread+0x870/0xd30 [ 164.835907][ T68] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 164.841802][ T68] ? __kthread_parkme+0x169/0x1d0 [ 164.846812][ T68] ? __pfx_worker_thread+0x10/0x10 [ 164.851901][ T68] kthread+0x2f0/0x390 [ 164.855948][ T68] ? __pfx_worker_thread+0x10/0x10 [ 164.861047][ T68] ? __pfx_kthread+0x10/0x10 [ 164.865713][ T68] ret_from_fork+0x4b/0x80 [ 164.870109][ T68] ? __pfx_kthread+0x10/0x10 [ 164.874675][ T68] ret_from_fork_asm+0x1a/0x30 [ 164.879420][ T68] [ 165.062296][ T11] team0 (unregistering): Port device team_slave_1 removed [ 165.093830][ T11] team0 (unregistering): Port device team_slave_0 removed [ 165.394152][ T9981] team0: Device veth1_macvtap failed to register rx_handler [ 165.427432][ T9982] tipc: Enabled bearer , priority 3 [ 165.435733][ T9957] tipc: Resetting bearer [ 165.451168][ T9983] tipc: Enabling of bearer rejected, already enabled [ 165.548634][ T68] bond0: (slave wlan1): link status definitely up, 0 Mbps full duplex [ 165.685849][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 165.751353][ T9835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 165.759874][ T9835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 165.768430][ T9835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 165.777308][ T9835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 165.832051][ T9835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.848331][ T9835] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.858564][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.865688][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.879985][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.887078][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.911877][ T9835] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 165.922647][ T9835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 165.995268][ T9835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.020783][ T9835] veth0_vlan: entered promiscuous mode [ 166.030136][ T9835] veth1_vlan: entered promiscuous mode [ 166.047680][ T9835] veth0_macvtap: entered promiscuous mode [ 166.055128][ T9835] veth1_macvtap: entered promiscuous mode [ 166.066905][ T9835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.077509][ T9835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.088431][ T9835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.098918][ T9835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.110141][ T9835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.120759][ T9835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.131281][ T9835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.141125][ T9835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.151570][ T9835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.162404][ T9835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.172392][ T9835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.181191][ T9835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.190471][ T9835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.199274][ T9835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.222403][ T9835] ieee80211 phy28: Selected rate control algorithm 'minstrel_ht' [ 166.235417][ T5849] Bluetooth: hci4: command tx timeout [ 166.243543][ T9957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.244716][ T9835] ieee80211 phy29: Selected rate control algorithm 'minstrel_ht' [ 166.256406][ T9957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.274674][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.283508][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.796265][ T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 167.906337][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 168.401182][ T9957] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.016524][ T68] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 170.061820][ T9957] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.130730][ T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 170.141603][ T9957] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.158232][ T35] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 170.189504][ T9957] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.267697][ T9957] bridge_slave_1: left allmulticast mode [ 170.273383][ T9957] bridge_slave_1: left promiscuous mode [ 170.281102][ T9957] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.291801][ T9957] bridge_slave_0: left allmulticast mode [ 170.299646][ T9957] bridge_slave_0: left promiscuous mode [ 170.305326][ T9957] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.411553][ T9957] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.423783][ T9957] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.433498][ T9957] bond0 (unregistering): Released all slaves [ 170.653488][ T9957] hsr_slave_0: left promiscuous mode [ 170.661355][ T9957] hsr_slave_1: left promiscuous mode [ 170.667383][ T9957] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.674780][ T9957] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.685591][ T9957] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.692991][ T9957] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.707896][ T9957] veth1_macvtap: left promiscuous mode [ 170.713411][ T9957] veth0_macvtap: left promiscuous mode [ 170.719321][ T9957] veth1_vlan: left promiscuous mode [ 170.724587][ T9957] veth0_vlan: left promiscuous mode [ 170.862015][ T9957] team0 (unregistering): Port device team_slave_1 removed [ 170.888345][ T9957] team0 (unregistering): Port device team_slave_0 removed [ 171.245916][ T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 172.345564][ T68] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!