last executing test programs: 1m28.381175173s ago: executing program 2 (id=779): r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f00000003c0), &(0x7f0000000400)=0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000080)={r2, r3}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = socket$inet(0x2, 0x3, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0xb0, r6, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xde5, 0x5a}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3aa}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}], @NL80211_ATTR_BSS_SELECT={0x24, 0xe3, 0x0, 0x1, {0x20, 0x0, [@NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0xcc}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x6, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xa, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x3}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xfa}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x8557b537c322d643}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1cc}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x40000) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e0, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x148, 0x358, 0x358, 0x148, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @empty, 0xff000000, 0x0, 'xfrm0\x00', 'team_slave_1\x00', {}, {}, 0x33}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x1, 0xd, 0x3, 'syz0\x00', {0x17}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x240) write$tun(r1, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 1m26.797347798s ago: executing program 1 (id=1035): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000000)=0x3ff, 0x4) (async) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000000)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x200, 0x4) 1m15.326580841s ago: executing program 2 (id=779): r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f00000003c0), &(0x7f0000000400)=0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000080)={r2, r3}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = socket$inet(0x2, 0x3, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0xb0, r6, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xde5, 0x5a}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3aa}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}], @NL80211_ATTR_BSS_SELECT={0x24, 0xe3, 0x0, 0x1, {0x20, 0x0, [@NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0xcc}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x6, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xa, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x3}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xfa}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x8557b537c322d643}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1cc}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x40000) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e0, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x148, 0x358, 0x358, 0x148, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @empty, 0xff000000, 0x0, 'xfrm0\x00', 'team_slave_1\x00', {}, {}, 0x33}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x1, 0xd, 0x3, 'syz0\x00', {0x17}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x240) write$tun(r1, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 1m14.147527433s ago: executing program 1 (id=1035): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000000)=0x3ff, 0x4) (async) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000000)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x200, 0x4) 1m2.792338133s ago: executing program 2 (id=779): r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f00000003c0), &(0x7f0000000400)=0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000080)={r2, r3}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = socket$inet(0x2, 0x3, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0xb0, r6, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xde5, 0x5a}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3aa}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}], @NL80211_ATTR_BSS_SELECT={0x24, 0xe3, 0x0, 0x1, {0x20, 0x0, [@NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0xcc}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x6, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xa, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x3}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xfa}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x8557b537c322d643}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1cc}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x40000) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e0, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x148, 0x358, 0x358, 0x148, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @empty, 0xff000000, 0x0, 'xfrm0\x00', 'team_slave_1\x00', {}, {}, 0x33}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x1, 0xd, 0x3, 'syz0\x00', {0x17}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x240) write$tun(r1, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 1m1.683627317s ago: executing program 1 (id=1035): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000000)=0x3ff, 0x4) (async) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000000)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x200, 0x4) 46.850596473s ago: executing program 2 (id=779): r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f00000003c0), &(0x7f0000000400)=0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000080)={r2, r3}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = socket$inet(0x2, 0x3, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0xb0, r6, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xde5, 0x5a}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3aa}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}], @NL80211_ATTR_BSS_SELECT={0x24, 0xe3, 0x0, 0x1, {0x20, 0x0, [@NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0xcc}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x6, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xa, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x3}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xfa}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x8557b537c322d643}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1cc}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x40000) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e0, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x148, 0x358, 0x358, 0x148, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @empty, 0xff000000, 0x0, 'xfrm0\x00', 'team_slave_1\x00', {}, {}, 0x33}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x1, 0xd, 0x3, 'syz0\x00', {0x17}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x240) write$tun(r1, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 46.356004482s ago: executing program 1 (id=1035): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000000)=0x3ff, 0x4) (async) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000000)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x200, 0x4) 30.36348635s ago: executing program 1 (id=1035): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000000)=0x3ff, 0x4) (async) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000000)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x200, 0x4) 30.335011661s ago: executing program 2 (id=779): r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f00000003c0), &(0x7f0000000400)=0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000080)={r2, r3}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = socket$inet(0x2, 0x3, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0xb0, r6, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xde5, 0x5a}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3aa}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}], @NL80211_ATTR_BSS_SELECT={0x24, 0xe3, 0x0, 0x1, {0x20, 0x0, [@NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0xcc}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x6, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xa, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x3}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xfa}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x8557b537c322d643}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1cc}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x40000) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e0, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x148, 0x358, 0x358, 0x148, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @empty, 0xff000000, 0x0, 'xfrm0\x00', 'team_slave_1\x00', {}, {}, 0x33}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x1, 0xd, 0x3, 'syz0\x00', {0x17}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x240) write$tun(r1, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 26.039334704s ago: executing program 4 (id=1680): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) (async) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r1, 0x104, 0x6ba05eb0794edd29, 0x0, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r2) (async) r4 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000000)=@l2tp, 0x80, 0x0}, 0x0) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000002c0)={0xe0, 0x11, 0x509, 0x0, 0x0, "", [@generic="113c2d9b38402aff6ec2f31166d97833f0f8ac30073eff5aaa90ef4e67d4d71828ded4e460d643d5fe600b15cafc4e6367740fd939728fe10c222557a0e48cc54ad5fdfc9d96eab83adb23e6ea0e30003b415709fe9e9350a9b902a2fb292a57b89faa24ff367c2ce45b80daa96489871ba8845ef4d57736723c2ec516cbbcde6afb99d265f81bc4e9", @generic="1847a803d02973685ab61f218a66b934b7160571e984e5f5d6ad7eff4305326d0affb35c79b457adbe3f0bf08fc949402f059090cf6bf0007718a6968a12e721a9f1fa73"]}, 0xe0}], 0x1}, 0x0) (async) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000ffdbdf25240000000c000600010000000100000024002d80"], 0x44}, 0x1, 0x0, 0x0, 0x4004805}, 0x20000000) 25.965079387s ago: executing program 4 (id=1681): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x18, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3, 0x0, 0x0, 0x0, 0xc}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x8}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x3}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffa}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @alu={0x7, 0x1, 0x9, 0x4, 0xa, 0xffffffffffffffc0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}}]}, &(0x7f0000000040)='GPL\x00', 0x7b77, 0x1, &(0x7f0000000080)=""/1, 0x41000, 0x9, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000002c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x6, 0x800000, 0x9}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000340)=[0x1], &(0x7f0000000380)=[{0x1, 0x2, 0x5, 0xb}, {0x0, 0x2, 0xa, 0x4}, {0x2, 0x4, 0x6, 0xb}, {0x1, 0x2, 0xa, 0x4}], 0x10, 0x2}, 0x94) sendmmsg$sock(r1, &(0x7f0000000940)=[{{&(0x7f00000000c0)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x3, 0x4}}, 0x80, 0x0}}, {{&(0x7f0000000140)=@ethernet={0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x80, 0x0}}], 0x2, 0x4) ioctl$TUNSETGROUP(r0, 0x400454ce, 0xffffffffffffffff) syz_emit_ethernet(0x4e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaa1c575af9ffffe686dd434dd30800180600078004000000000000000000000000aafe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200029078000005020000"], 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) getsockopt(r3, 0x9, 0x9, &(0x7f0000000500)=""/73, &(0x7f0000000580)=0x49) 25.657169438s ago: executing program 4 (id=1683): r0 = socket$rds(0x15, 0x5, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) close(r0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xa}, [@typed={0x8, 0x2, 0x0, 0x0, @fd=r3}]}, 0x1c}}, 0x20000080) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0x7, 0x4, 0x3c0, 0x1f0, 0x1f0, 0x1f0, 0xe8, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28}}, {{@arp={@empty, @private, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_team\x00', 'veth0_to_team\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@arp={@rand_addr, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@remote}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'wlan1\x00', 'veth0_to_hsr\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r3) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="02"], 0x10) socketpair(0x2, 0x1, 0x100, &(0x7f0000000440)) 25.610208584s ago: executing program 4 (id=1684): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0xd794, 0x0}, 0x8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x16, &(0x7f00000007c0)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150700000fff00003506000002000000170600000ee5e50cbf250000000000001f650000000000007507000002000000170700004c0001000f75000000000000bf54000000000000070400000400f9ff2d3501000000000095000000000000000500000000000000950007000000000001722fabb733a0c857c7c45402000000a2d23da04d1ffc187fa1a2ba7ba030c7267c2de00435fd233cc0f0d9b2c3127c46b0f408398d09ee4dc258d726eae098804ce25df627a64ac7efde50fd7f1dd5b17ed764c33b06598bae66ea38541a7cd29032de94983dfab0e5043daf1b46bef5135c65377bdbe65d525743d88ef4b2ee62652b07f8a4b6e6155cecc13a5ddfab726eca91bd5fecb254ab358488c400330171128be291297947d47dc570a385a459ef8e6ada84e987cc0000f6991078a21788cab9d53ad890206ab56506ab08b294c09ea4536e0b9bb0627a03a1eb9cbe6958812a98abad49f42a6fb2b69c0880548c39f13f4cca63a87ad7ff8d1006cc6d95e406deb61b9c7ac3f35f1fdb27e70900001fd13d4a22fc90e5f7300c53f2b6e7e001058dc04b434e379fd5526b52990b04b183c21e6b974a4bf85567348c6c6a4404d987f71d81fe988ddc82dac01bbb437da829712c98381a672db9fa6a8eb38d784c913a804557c4577a22acb7b73c4aa0e07998734fdfbb0d262ef88b3b8cd1a8518dd8326f6367ed938a05c108cf2639e8799fd7cb018f08453fa863f8fb8178569d26a0a48e4498f88d15abbb22d955a162ac1fd3710c1255fbe3c6d1e84152c81ec0192e54d13dc5beebe3de27967e5d1aa8a6139056e3fb738d0ca46b0a1c63a29002e5b12314390ca075ecb43e0c6cd5af64c8b676316b9bff845ea0b20562f53c5b34314411bf3d4af06bdc3def9f2791d6d076ca72e319e6a9e1098bab878a9f1274a61ddee47abb54d8cf901e78bdb85f47ef37dd0daeb6403820ee8414042904917ea1b80a0000000000004c84018fd19fb3581ca1ff9fb5758d76929ec0502802869c51511c2c9dc56ead1449c038e4d2382d6ef61a7d9399cb3cbc53fa6265ec6a94784f91acfe3b1f5b1378f943eb0ece80d1b3d2c757c4e55009343ba2f8440584234503e25c7d6288d04c49"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x8000000, 0x4}, 0x8, 0x10, &(0x7f0000000000)={0x1}, 0x10, r0}, 0x94) 25.40504854s ago: executing program 4 (id=1686): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x700, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x67, 0x0, 0x0, 0x2f, 0x0, @loopback, @loopback}}}}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000100)={'gre0\x00', r1, 0x8000, 0x8000, 0xba4, 0x80000001, {{0x22, 0x4, 0x3, 0x3, 0x88, 0x66, 0x0, 0xf, 0x2f, 0x0, @private=0xa010102, @multicast1, {[@cipso={0x86, 0xf, 0x3, [{0x0, 0x9, "03a48a61e8e605"}]}, @end, @noop, @lsrr={0x83, 0x2b, 0x16, [@multicast1, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @dev={0xac, 0x14, 0x14, 0xc}, @dev={0xac, 0x14, 0x14, 0x3a}, @local, @private=0xa010100, @local, @rand_addr=0x64010102]}, @lsrr={0x83, 0x13, 0x86, [@empty, @private=0xa010101, @broadcast, @dev={0xac, 0x14, 0x14, 0x43}]}, @rr={0x7, 0xb, 0xaf, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}, @timestamp={0x44, 0x18, 0x41, 0x0, 0x9, [0x2, 0x8, 0x8, 0x7, 0xfffffc00]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', r1, 0x80, 0x8, 0x7409, 0x2, {{0x14, 0x4, 0x1, 0x25, 0x50, 0x67, 0x0, 0x0, 0x29, 0x0, @empty, @remote, {[@timestamp_addr={0x44, 0x14, 0x9f, 0x1, 0x7, [{@multicast1, 0x72a}, {@private=0xa010100, 0x4}]}, @cipso={0x86, 0x28, 0xffffffffffffffff, [{0x6, 0x9, "2a34dfbff36e1c"}, {0x2, 0x5, "ca4bdd"}, {0x5, 0x2}, {0x2, 0x3, 'l'}, {0x6, 0xf, "c4d7d1ed616e2a55adc48af636"}]}]}}}}}) 15.194960082s ago: executing program 1 (id=1035): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000000)=0x3ff, 0x4) (async) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000000)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x200, 0x4) 14.260769457s ago: executing program 2 (id=779): r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f00000003c0), &(0x7f0000000400)=0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000080)={r2, r3}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = socket$inet(0x2, 0x3, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0xb0, r6, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xde5, 0x5a}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3aa}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}], @NL80211_ATTR_BSS_SELECT={0x24, 0xe3, 0x0, 0x1, {0x20, 0x0, [@NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0xcc}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x6, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xa, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x3}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xfa}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x8557b537c322d643}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1cc}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x40000) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e0, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x148, 0x358, 0x358, 0x148, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @empty, 0xff000000, 0x0, 'xfrm0\x00', 'team_slave_1\x00', {}, {}, 0x33}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x1, 0xd, 0x3, 'syz0\x00', {0x17}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x240) write$tun(r1, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 12.307746057s ago: executing program 4 (id=1686): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x700, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x67, 0x0, 0x0, 0x2f, 0x0, @loopback, @loopback}}}}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000100)={'gre0\x00', r1, 0x8000, 0x8000, 0xba4, 0x80000001, {{0x22, 0x4, 0x3, 0x3, 0x88, 0x66, 0x0, 0xf, 0x2f, 0x0, @private=0xa010102, @multicast1, {[@cipso={0x86, 0xf, 0x3, [{0x0, 0x9, "03a48a61e8e605"}]}, @end, @noop, @lsrr={0x83, 0x2b, 0x16, [@multicast1, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @dev={0xac, 0x14, 0x14, 0xc}, @dev={0xac, 0x14, 0x14, 0x3a}, @local, @private=0xa010100, @local, @rand_addr=0x64010102]}, @lsrr={0x83, 0x13, 0x86, [@empty, @private=0xa010101, @broadcast, @dev={0xac, 0x14, 0x14, 0x43}]}, @rr={0x7, 0xb, 0xaf, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}, @timestamp={0x44, 0x18, 0x41, 0x0, 0x9, [0x2, 0x8, 0x8, 0x7, 0xfffffc00]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', r1, 0x80, 0x8, 0x7409, 0x2, {{0x14, 0x4, 0x1, 0x25, 0x50, 0x67, 0x0, 0x0, 0x29, 0x0, @empty, @remote, {[@timestamp_addr={0x44, 0x14, 0x9f, 0x1, 0x7, [{@multicast1, 0x72a}, {@private=0xa010100, 0x4}]}, @cipso={0x86, 0x28, 0xffffffffffffffff, [{0x6, 0x9, "2a34dfbff36e1c"}, {0x2, 0x5, "ca4bdd"}, {0x5, 0x2}, {0x2, 0x3, 'l'}, {0x6, 0xf, "c4d7d1ed616e2a55adc48af636"}]}]}}}}}) 3.688722425s ago: executing program 0 (id=1820): r0 = socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000a00)={r1}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111b100000000008510000002000000850000000500000095003300000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) 3.561552164s ago: executing program 0 (id=1822): r0 = socket$netlink(0x10, 0x3, 0xa) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001500257f09004b01fcfc8c860a881300f217e0060000e3323909b8f8896e3371", 0x24}], 0x1) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r1, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x20040020) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001"], 0x122}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x448, 0x278, 0x168, 0x9, 0x0, 0xb, 0x378, 0x250, 0x250, 0x378, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c, 0x0, 0x0, 0x1}, 0x6000000, 0x230, 0x278, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_batadv\x00', {0x4, 0x7ff, 0x0, 0x0, 0x0, 0x6, 0x1000}}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x30, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x4}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x20000844) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x63, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6}, {0x4, 0x8}}}, 0x24}}, 0x40004) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r5, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000200001032cbd7000ffdbdf250200000000000001"], 0x28}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x4924b68, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) 1.417338004s ago: executing program 0 (id=1824): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x20) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000180)=""/215, 0x30000, 0x1800, 0x8}, 0x20) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000140)={0x0, 0x300000, 0x1000, 0x9, 0x2}, 0x20) 1.177254362s ago: executing program 0 (id=1826): sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="8f773f1aede1a5e7e574669e89a5778b701124a5c39c0a5d8567471d9ba6e7098e5c1fedde99190dc3d37cade657c85af56e35c0fc2dbd1e6d89059d7744dc5397eae77ec4c8d88438a0d26c5189d3276f71818b0ebedcb9b184378b085c59651f43fc3990df22bda0d5ddb9ac9ea67ac2d8dfea8e4e387326774dde5c12f48b95b2f26329a5c0d805100ea7b31b7cf56a5d0bd712c68c9fa64688258487f49382f0ec8ca510119dca0ef1c115410bba418e902ce02e95e58bb0176aaf7a58150c9419cda84dc57bf2e473377475b4479ef017e61a30", 0xd6, 0x10, &(0x7f0000000100)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2b4}, 0x1c) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) splice(0xffffffffffffffff, &(0x7f0000000140)=0x1e, r0, &(0x7f0000000180)=0xfd36, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f00000001c0), r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000200)={@empty, @multicast2, 0x15, 0xe}}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@exit, @jmp={0x5, 0x0, 0x6, 0x0, 0x9, 0xffffffffffffffc0, 0xffffffffffffffff}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x5}, @ldst={0x0, 0x2, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0xfffffffffffffff0}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='syzkaller\x00', 0x8f4, 0xce, &(0x7f00000003c0)=""/206, 0x41100, 0x7, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000004c0)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000500)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000540)=[{0x4, 0x1, 0x7, 0x4}, {0x2, 0x5, 0x5, 0x2}, {0x2, 0x4, 0x2, 0x6}, {0x4, 0x4, 0xf, 0xb}, {0x0, 0x5, 0xd, 0x87af8d9ce6025b02}, {0x3, 0x4, 0xd, 0x6}], 0x10, 0x62f5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000280)='ext4_da_reserve_space\x00', r3, 0x0, 0x3}, 0x18) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x70, r4, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r6 = bpf$ITER_CREATE(0x21, &(0x7f00000008c0), 0x8) sendmsg$nl_route(r6, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)=@getroute={0x14, 0x1a, 0x300, 0x70bd29, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x80c1) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b00)={0x1, &(0x7f0000000a00)="15839f6b10db79cb8d7c7be2f0dcc2d1732a065b9a1d7109c26381874d17b5e2c94dbf7b04eb1f0fec6c40c72a48ac43af260fe8d25000568cc4fd54be154b4872a57e074ae0d41d2cb5d609d717244b093b5895babe3c0f71b19e2582fccda4", &(0x7f0000000a80)=""/70}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000cc0)={r6, &(0x7f0000000b40)="e97aa09dc3056cd6374302aac7a1670d97b02c7a9b9728ed5112f5b48e5e59fb70beee7cb632591c7fb4a0446c2773d21f166bc6da54858ce7571da315d0494634a882fa09da029a871eed85e690ab87625618d042df691ad1d6edf12dc3d6baf52e49c75e2315d672e4f760d41921157710f7a8b5766c934a49721be6d92a6585945c136d4a2650d1bab9ae97e54a87607efa857098abe5035427f53826f20f8b8e6b409ed3740f0cd2e9a7112763ef4c9ccdde8a34ecbacdff775ede82aa1afc886ae2", &(0x7f0000000c40)=""/116}, 0x20) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000d40)='./cgroup.net/syz0\x00', 0x1ff) sendmsg$tipc(r6, &(0x7f0000001140)={&(0x7f0000000d80)=@id={0x1e, 0x3, 0x1, {0x4e23}}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000dc0)="379cdac0c33a7ccfd2fe07809aa80c5879640e59831ac6cabda595baa7dd8e6219dd3b3f13afb4f02602a8f44735daa1afae2c3b5ec4110589eaa7333d5672d14f85fdefe90c1a3c3b1409dae0124873e390399ae8e5933a409f6aa302c4a39f64fac067ba25019e79eb5f3a0c80f93b80c7ee99f2a067849fec1947cb2e98bacf7851ce3ba32684c877a36a6a0bcb1e1bab8bb50bcc1535554433e15d2d045f3e2d61bc0b6bed37cef425d0fdb21507133c0e8e98ac23acca3a39c6872d916c85e0674c52d7ead12bbf1b6664b01065", 0xd0}, {&(0x7f0000000ec0)="4b1802aaf3a81142c64bbed981a249c5b7f0aeb9ba912ab3ca2607915e2452d6ba5682fb9507ef9291cbded3f90043391b", 0x31}, {&(0x7f0000000f00)="f055045286217d58be10ffc7226c06eaa2dfbbd05780f135d056cd2224a4cb8d6b49c4f0758ec40a433922b552645fb8ef48bbbd673156a78c40d43029080304ca4b18a5f54cad84f52baa637531eb359ae244d9f35481b00b794f6670deea8f5adba7ad01542f3e3f368ce81279b0d990fcd2e7d0f8fbfcaf6edae36d4d92e4d3ac13be385e36f4720e5505392659463b5412bdd713ec05d4f81e4613d3f852fbc500cc953876fe", 0xa8}, {&(0x7f0000000fc0)="483393f85d1bfaa4af1bff4679732a29138072900df8c6eb50b0d67fd647e2f173b196c4f3d1aa5624a0fac0c37eb09a3c0305d1b141d8f299a3444543491a4e2ec80c18a4f1e0833a3f58914830329961e28c40290cbd6adfde2e98bd5d2eedfd061a06278672001f4f0e8b60593a841cec1ade6b508db61c966a771a199ac00970c8dbbd4c0e37712c79706d7a2916b667dad0604ce6bc149278c8d6637944ae1608ab9a8e19", 0xa7}], 0x4, &(0x7f00000010c0)="9e7dbb91056a26b0adbb0898e9c5739b60d9297087a8ea8ba4b54c00706254dee292581d71ccfcc12da0ff92a5c72e06d29dac5d9a1542325e986dbe5346fc8fd10744f80c44ef464095814f5dec9eea5b60e86531b92ef86733929b30a4cf5a", 0x60, 0x4}, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000011c0), r1) sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x1c, r8, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000012c0)={0xdb3, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001300)=r9, 0x4) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x28, r7, 0x10, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x80) recvmsg(r2, &(0x7f00000015c0)={&(0x7f0000001440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/118, 0x76}, {&(0x7f0000001540)}], 0x2}, 0x10101) syz_init_net_socket$netrom(0x6, 0x5, 0x0) recvfrom$netrom(0xffffffffffffffff, &(0x7f0000001600)=""/239, 0xef, 0x40, &(0x7f0000001700)={{0x3, @bcast, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001800)={r0, &(0x7f0000001780)="cc0753a20c6dcf90e42abfae9e3290154a179521537e", &(0x7f00000017c0)=@tcp6=r6, 0x1}, 0x20) sendmsg$IPVS_CMD_GET_INFO(r10, &(0x7f0000001a00)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000019c0)={&(0x7f00000018c0)={0xe0, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x93}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_virt_wifi\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24000001}, 0x24000000) 675.529642ms ago: executing program 3 (id=1831): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x64, r1, 0x200, 0xffffffff, 0x0, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x64}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x11, 0x3, 0x4000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000880)={'ip6gretap0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r2, 0x107, 0xb, &(0x7f0000000000)=0x4, 0x4) r5 = socket$netlink(0x10, 0x3, 0x45c4b347cd62ec36) sendmmsg(r5, 0x0, 0x0, 0x0) r6 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xca, 0x0, 0x0) r7 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@deltclass={0x90, 0x29, 0x300, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0xffe4}, {0x1}, {0x6, 0x7}}, [@tclass_kind_options=@c_netem={0xa}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}, @tclass_kind_options=@c_qfq={{0x8}, {0x2c, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x1}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x8}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x7ff}, @TCA_QFQ_LMAX={0x8, 0x2, 0xe34b}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x7}]}}, @tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_sfq={0x8}, @TCA_RATE={0x6, 0x5, {0x2}}, @TCA_RATE={0x6, 0x5, {0x81}}]}, 0x90}}, 0x24000000) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x56, &(0x7f00000003c0)={@broadcast, @empty, @void, {@canfd={0xd, {{0x3, 0x1}, 0x1b, 0x5, 0x0, 0x0, "6a30f44c72cc038fbdef5e9e82f58435cb35ba1c7de3ab9820d886cc72bc4c24e06f8a12eac3f32f3879e5eda7c18606db96ce4b41e02a6fb81b793baa5dae8c"}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'pimreg1\x00'}) sendmsg$netlink(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f011400e0dc14"], 0xdd12}], 0x1}, 0x20040051) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000200)={'tunl0\x00', 0x0, 0x8, 0x10, 0x2, 0x1, {{0x21, 0x4, 0x0, 0x29, 0x84, 0x67, 0x0, 0x6, 0x29, 0x0, @multicast2, @private=0xa010101, {[@timestamp_addr={0x44, 0x4c, 0x9, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x95}, {@rand_addr=0x64010102, 0x2}, {@broadcast, 0x10e43}, {@empty, 0x7}, {@local}, {@private=0xa010101, 0x6}, {@multicast1, 0x48}, {@remote}, {@loopback, 0x8}]}, @cipso={0x86, 0x12, 0x2, [{0x1, 0xc, "cbeb478521873da1b102"}]}, @end, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xb, 0xd2, [@rand_addr=0x64010102, @empty]}]}}}}}) sendmsg$nl_route(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="24003ad13502b7e6f33707c2a2d6001d5748ae274e66d29ca917e554c0717322af1a70308de0d91635f1425f3209761701ed1ccdb0e20d2866ca7789706aa345aab87561150e8e90dfcedc7a4c48904762905010a6a9153e7a6565e6c17731f673b6b5e933355995ca2cab08bb9e27e63512ea591544a277114c668cd122c84d4694638ffe620347ad963cfa36058fffdf3199b81a1049a53adfadd7a65ae6f394b4f0b1897b69794cfbe159bd0bf7141c8bd4c5e0a9411ac0f62cf03b48970c5936b7a575", @ANYRES32=r10, @ANYBLOB="200080090600050000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x40045) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 571.314603ms ago: executing program 3 (id=1832): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000440)={@val={0x8, 0x800}, @val={0x0, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x2, 0x0, @rand_addr=0x64010120, @broadcast, {[@ra={0x94, 0x4}]}}, "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"}}, 0xfce) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0xfffffffffffffffe, 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) syz_emit_ethernet(0x52, &(0x7f0000000280)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x1c, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"5e4cd36bb96bd2b9"}}}}}}}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r3) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r5, 0x9, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008800}, 0x40000) 293.06309ms ago: executing program 3 (id=1833): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000540)=@bridge_getvlan={0x20, 0x72, 0x301, 0x4000001, 0x7, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x12}]}, 0x20}, 0x1, 0xf00, 0x0, 0x40091}, 0x0) syz_emit_ethernet(0xed, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xdf, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e22, 0xcb, 0x0, @wg=@data={0x4, 0x7, 0x7, "00222bab058c29f5c30b963f9de30909d4478fb1760c14eb5c375ca85a53151a8d0700ce3dba998c245e79b09714298713a01089818c46917c908095588f76d696ae9ff44ed71f6308d1d9b674d2d369fde37c7bdea0ddc4c14797b32285c762ea31d6bdfac81fa12e31f654830f72e09c41c25d8cfd4a01472ddfa74f663e0ff25e4d25f930879ae38a9c91754c5a2e066b0de41efec464d2dbcf0b456167e64a9af3547db2e4e27924fa1cc7288b88c2b0d1"}}}}}}, 0x0) 273.152299ms ago: executing program 0 (id=1834): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000005bc0), &(0x7f0000005c00)=0x30) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r0}) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x10}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r3, 0x7}, 0x8) listen(r0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) vmsplice(r4, &(0x7f00000006c0)=[{0xfffffffffffffffe}], 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) tee(r5, r5, 0x66f, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x482, &(0x7f0000000000)=""/57, &(0x7f0000000040)=0x39) 213.92464ms ago: executing program 3 (id=1835): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000070000004d0000000000000045000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000200)=ANY=[], 0x18}}, 0x0) ioctl(0xffffffffffffffff, 0x1ff, &(0x7f0000000000)="ed09f1047ae9fbb1cd555974c7638988e76fd197b4fd4f0b19ebfa38405fcff154b7938a2331d6e3ea29d0213d3c910727c91f9be1585528b1d7ce48417db63795fb3787c24a3c5a2510e99dfe1b56b24ef8ad4b48f2c6016e3e51190777bd59005e3f774777d02760f2878bc9896d7e86eda9c3933b1ebb3eaed246798036819187c7fd28bca8de3d943d788f46428773107e60fadffb845f8e007e66b5dc618ed631119c12f6bd89b416fce1801193be7b2c02e49065d197cfe63dddc2ce7a04e0a031650b8f183478287b327f4a4ad55384ac71a6f3c26c7baf610f7809b171acb7449d02d519b43b1e") 64.940985ms ago: executing program 0 (id=1836): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000b40)={0x13, "dd6e4eaaff9e7199f5b246fb0144c42ce5a861c065a1424a20e8705c8a6d70b593a9c20eddcb4bf2a10b606ce6b400e06c17dc5c2ad6c632a3aa2d50f01ef1293ad45749226b7af96e58d1a92ac1d2ecd704a63548983cf9b60da2d6ce07bb02a3b3e9b1bb016997bff8ff78f44f6371b5c0f58260bf2d27ebbdba58224b0129"}) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000340)={0x42, 0x2}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="310328bd7000000000000900000008000300", @ANYRES32=r6, @ANYBLOB="0800060096"], 0x24}, 0x1, 0x0, 0x0, 0x20000095}, 0x8c0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="002ec2ff31b9e8a323516be3c5336574600968bda00df0a56cad91ea771cdaeae9c788952f739e71d4185a7ca9e845a9331b681042f03e3cb6e4b8be6de905127a712c13205664a131e0dd16de5b6b584fd0b2fbac8f511f66e83471b1d3265d4331ab28e82f", @ANYRES16=r7, @ANYRESHEX=r6, @ANYRES32=r8, @ANYBLOB="0a0018000303030303030000080026006c0900000800a0000200000008009f0007000000"], 0x40}, 0x1, 0x0, 0x0, 0x4000001}, 0x2000400c) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r3) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14) r12 = socket$unix(0x1, 0x1, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x4, {0x0, 0x0, 0x0, r14, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240480c4}, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r14, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) sendmsg$MPTCP_PM_CMD_REMOVE(r9, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)={0x70, r10, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r14}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x4094}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000000)) 59.368331ms ago: executing program 3 (id=1837): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x48, r5, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'nicvf0\x00'}]}, 0x48}, 0x1, 0x40030000000000}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00"/27], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000020ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) 0s ago: executing program 3 (id=1838): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000104902df94b709f7ec8b104800010000000000000000000000000a14000000020a09010000000000000000000000001400000011000100000000faf33b2e18679533f992337992db"], 0x3c}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'erspan0\x00', 0x0, 0x7800, 0x700, 0x5, 0x7, {{0xd, 0x4, 0x2, 0x1c, 0x34, 0x67, 0x0, 0x5, 0x29, 0x0, @remote, @local, {[@generic={0x86, 0x9, "9ddd509dea2aff"}, @generic={0x7, 0xb, "e607000000454c69b3"}, @timestamp={0x44, 0xc, 0x29, 0x0, 0xd, [0x3, 0x8]}]}}}}}) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x3fa, 0x200, 0x70bd2b, 0x25dfdbff, {0x1, 0x0, 0x1, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x43ab2a030b31e0e6}, 0x80) kernel console output (not intermixed with test programs): 24141][T10167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.451311][T10167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.495157][T10350] tipc: Enabled bearer , priority 0 [ 184.550683][T10351] syzkaller0: entered promiscuous mode [ 184.565901][T10351] syzkaller0: entered allmulticast mode [ 184.574473][T10347] tipc: Enabling of bearer rejected, already enabled [ 184.618995][ T1157] hsr_slave_0: left promiscuous mode [ 184.629403][ T1157] hsr_slave_1: left promiscuous mode [ 184.635791][ T1157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.644700][ T1157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.661464][ T1157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.685646][ T1157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.697824][ T5864] Bluetooth: hci2: command tx timeout [ 184.731215][ T1157] veth1_macvtap: left promiscuous mode [ 184.737070][ T1157] veth0_macvtap: left promiscuous mode [ 184.742768][ T1157] veth1_vlan: left promiscuous mode [ 184.749052][ T1157] veth0_vlan: left promiscuous mode [ 185.292355][ T1157] team0 (unregistering): Port device team_slave_1 removed [ 185.342940][ T1157] team0 (unregistering): Port device team_slave_0 removed [ 185.500762][ T5864] Bluetooth: hci3: command tx timeout [ 185.784921][T10347] tipc: Resetting bearer [ 185.822182][T10347] tipc: Disabling bearer [ 185.838925][T10167] hsr_slave_0: entered promiscuous mode [ 185.846042][T10167] hsr_slave_1: entered promiscuous mode [ 185.859290][T10167] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 185.872543][T10167] Cannot create hsr debugfs directory [ 186.157062][T10384] netlink: 'syz.0.1269': attribute type 24 has an invalid length. [ 186.502306][T10397] tipc: New replicast peer: 0.0.0.0 [ 186.509991][T10397] tipc: Enabled bearer , priority 10 [ 186.517899][T10397] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 186.579851][T10149] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 186.595963][T10399] netlink: zone id is out of range [ 186.607328][T10399] netlink: zone id is out of range [ 186.613479][T10399] netlink: zone id is out of range [ 186.623520][T10149] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 186.630919][T10399] netlink: zone id is out of range [ 186.640590][T10399] netlink: zone id is out of range [ 186.670921][T10399] netlink: zone id is out of range [ 186.681720][T10399] netlink: zone id is out of range [ 186.692600][T10149] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 186.712615][T10149] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 186.726463][T10399] netlink: zone id is out of range [ 186.732454][T10399] netlink: zone id is out of range [ 186.738434][T10399] netlink: zone id is out of range [ 186.781072][ T5864] Bluetooth: hci2: command tx timeout [ 187.157926][T10149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.380938][T10149] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.507014][ T5936] tipc: Node number set to 1654791928 [ 187.574998][ T7671] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.582517][ T7671] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.595758][ T5864] Bluetooth: hci3: command tx timeout [ 187.598795][T10167] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 187.619349][T10167] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 187.639018][ T7664] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.648581][ T7664] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.697646][T10167] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 187.752387][T10167] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 187.780681][T10452] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 187.823079][T10452] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 187.871400][T10466] __nla_validate_parse: 3 callbacks suppressed [ 187.871412][T10466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1285'. [ 187.912430][T10149] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 187.923118][T10149] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 188.091986][T10167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.155537][T10167] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.193962][ T7672] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.201487][ T7672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.264867][ T7672] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.272111][ T7672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.296013][T10477] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 188.482581][T10149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.635602][T10149] veth0_vlan: entered promiscuous mode [ 188.675810][T10149] veth1_vlan: entered promiscuous mode [ 188.683694][T10494] netlink: 'syz.0.1291': attribute type 4 has an invalid length. [ 188.720865][T10495] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1291'. [ 188.756482][T10494] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1291'. [ 188.783518][T10149] veth0_macvtap: entered promiscuous mode [ 188.815622][T10149] veth1_macvtap: entered promiscuous mode [ 188.875829][T10149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.914625][T10149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.966016][T10149] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.989721][T10149] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.007206][T10149] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.028603][T10508] netlink: 'syz.3.1294': attribute type 10 has an invalid length. [ 189.037511][T10149] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.105013][T10508] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 189.114380][T10508] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 189.154892][T10167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.342158][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.364554][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.389578][T10167] veth0_vlan: entered promiscuous mode [ 189.458122][ T7672] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.469760][T10167] veth1_vlan: entered promiscuous mode [ 189.488903][ T7672] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.571255][T10167] veth0_macvtap: entered promiscuous mode [ 189.641261][T10167] veth1_macvtap: entered promiscuous mode [ 189.824710][T10167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.869839][T10167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.907522][T10539] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1305'. [ 189.908922][T10167] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.932821][T10167] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.943244][T10167] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.955796][T10167] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.303411][ T7664] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.327545][T10554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1306'. [ 190.352780][T10554] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 190.397547][T10554] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 190.483013][ T7664] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.518767][ T7652] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.531704][ T7652] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.561785][ T7664] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.590168][ T7652] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.599002][ T7652] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.781027][ T7664] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.877069][ T7664] bridge_slave_1: left allmulticast mode [ 190.882757][ T7664] bridge_slave_1: left promiscuous mode [ 190.888573][ T7664] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.898613][ T7664] bridge_slave_0: left allmulticast mode [ 190.904289][ T7664] bridge_slave_0: left promiscuous mode [ 190.910610][ T7664] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.165889][T10561] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1308'. [ 191.273624][T10568] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1309'. [ 191.581362][ T7664] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.582231][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 191.606964][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 191.616017][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 191.628315][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 191.637042][ T7664] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.646531][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 191.673269][ T7664] bond0 (unregistering): Released all slaves [ 191.995257][T10571] chnl_net:caif_netlink_parms(): no params data found [ 192.061379][ T7664] hsr_slave_0: left promiscuous mode [ 192.068373][ T7664] hsr_slave_1: left promiscuous mode [ 192.074310][ T7664] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.082390][ T7664] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.091480][ T7664] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.099169][ T7664] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.119549][ T7664] veth1_macvtap: left promiscuous mode [ 192.125514][ T7664] veth0_macvtap: left promiscuous mode [ 192.131451][ T7664] veth1_vlan: left promiscuous mode [ 192.136866][ T7664] veth0_vlan: left promiscuous mode [ 192.760607][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 192.770690][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 192.779349][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 192.817063][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 192.827381][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 193.002777][ T7664] team0 (unregistering): Port device team_slave_1 removed [ 193.041436][ T7664] team0 (unregistering): Port device team_slave_0 removed [ 193.595761][T10571] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.604880][T10571] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.618009][T10571] bridge_slave_0: entered allmulticast mode [ 193.627243][T10571] bridge_slave_0: entered promiscuous mode [ 193.694167][T10571] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.711470][T10571] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.726655][ T5864] Bluetooth: hci2: command tx timeout [ 193.734544][T10571] bridge_slave_1: entered allmulticast mode [ 193.748254][T10571] bridge_slave_1: entered promiscuous mode [ 193.860176][T10571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.905331][T10619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1321'. [ 193.917541][T10571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.946683][T10619] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1321'. [ 194.022246][T10571] team0: Port device team_slave_0 added [ 194.069627][T10571] team0: Port device team_slave_1 added [ 194.209385][T10571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.217102][T10571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.243654][T10571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.258008][T10571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.265081][T10571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.292096][T10571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.432421][T10571] hsr_slave_0: entered promiscuous mode [ 194.443128][T10571] hsr_slave_1: entered promiscuous mode [ 194.455054][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.481028][T10571] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 194.497635][T10571] Cannot create hsr debugfs directory [ 194.630035][T10644] netlink: 'syz.3.1328': attribute type 4 has an invalid length. [ 194.684624][T10649] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1329'. [ 194.741979][T10651] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1329'. [ 194.772835][ T7664] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.784438][T10651] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1329'. [ 194.842476][T10603] chnl_net:caif_netlink_parms(): no params data found [ 194.926781][ T5864] Bluetooth: hci3: command tx timeout [ 194.937202][ T7664] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.962597][T10658] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1332'. [ 194.983436][T10656] bridge5: entered promiscuous mode [ 194.989292][T10656] bridge5: entered allmulticast mode [ 195.077809][ T7664] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.250511][ T7664] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.273516][T10671] netlink: 'syz.0.1336': attribute type 1 has an invalid length. [ 195.284299][T10671] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1336'. [ 195.417837][T10676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1338'. [ 195.430348][T10676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1338'. [ 195.435128][T10603] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.456406][T10603] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.464647][T10603] bridge_slave_0: entered allmulticast mode [ 195.478912][T10603] bridge_slave_0: entered promiscuous mode [ 195.480915][T10678] xt_socket: unknown flags 0x2 [ 195.490612][T10603] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.500729][T10679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1338'. [ 195.505734][T10603] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.522613][T10603] bridge_slave_1: entered allmulticast mode [ 195.528786][T10678] xt_socket: unknown flags 0x2 [ 195.530676][T10603] bridge_slave_1: entered promiscuous mode [ 195.637921][T10679] bond0: entered promiscuous mode [ 195.643126][T10679] bond_slave_0: entered promiscuous mode [ 195.655503][T10679] bond_slave_1: entered promiscuous mode [ 195.661759][T10679] team0: entered promiscuous mode [ 195.673485][T10679] team_slave_0: entered promiscuous mode [ 195.680555][T10679] team_slave_1: entered promiscuous mode [ 195.692189][T10679] bond0: entered allmulticast mode [ 195.698694][T10679] bond_slave_0: entered allmulticast mode [ 195.704649][T10679] bond_slave_1: entered allmulticast mode [ 195.710841][T10679] team0: entered allmulticast mode [ 195.716875][T10679] team_slave_0: entered allmulticast mode [ 195.722603][T10679] team_slave_1: entered allmulticast mode [ 195.767291][T10603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.786774][T10603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.816245][ T5864] Bluetooth: hci2: command tx timeout [ 196.051612][T10603] team0: Port device team_slave_0 added [ 196.159322][T10603] team0: Port device team_slave_1 added [ 196.207413][T10707] netlink: 'syz.0.1346': attribute type 10 has an invalid length. [ 196.231572][T10603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.245479][T10603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.281119][T10603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.315881][T10707] geneve0: entered promiscuous mode [ 196.323628][T10707] geneve0: entered allmulticast mode [ 196.349407][T10707] team0: Port device geneve0 added [ 196.358806][ T7664] bridge_slave_1: left allmulticast mode [ 196.364501][ T7664] bridge_slave_1: left promiscuous mode [ 196.402142][ T7664] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.421155][ T7664] bridge_slave_0: left allmulticast mode [ 196.428848][ T7664] bridge_slave_0: left promiscuous mode [ 196.435236][ T7664] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.811275][ T7664] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.822884][ T7664] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.833315][ T7664] bond0 (unregistering): Released all slaves [ 196.849263][T10603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.870098][T10603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.909576][T10603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.006679][ T5864] Bluetooth: hci3: command tx timeout [ 197.083482][T10731] netlink: 'syz.0.1352': attribute type 3 has an invalid length. [ 197.189911][T10740] netlink: 'syz.0.1352': attribute type 3 has an invalid length. [ 197.262853][T10603] hsr_slave_0: entered promiscuous mode [ 197.277763][T10603] hsr_slave_1: entered promiscuous mode [ 197.284331][T10603] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.293105][T10603] Cannot create hsr debugfs directory [ 197.382641][T10571] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 197.534568][T10571] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 197.680588][T10755] bond0 (unregistering): Released all slaves [ 197.701259][T10571] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 197.760172][ T7664] hsr_slave_0: left promiscuous mode [ 197.776906][ T7664] hsr_slave_1: left promiscuous mode [ 197.783037][ T7664] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.792876][ T7664] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.809481][ T7664] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.819838][ T7664] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.840378][T10771] Cannot find add_set index 4 as target [ 197.859832][ T7664] veth1_macvtap: left promiscuous mode [ 197.865623][ T7664] veth0_macvtap: left promiscuous mode [ 197.874531][ T7664] veth1_vlan: left promiscuous mode [ 197.881757][ T7664] veth0_vlan: left promiscuous mode [ 197.899278][ T5864] Bluetooth: hci2: command tx timeout [ 198.451309][ T7664] team0 (unregistering): Port device team_slave_1 removed [ 198.489562][ T7664] team0 (unregistering): Port device team_slave_0 removed [ 198.903880][T10571] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 198.961008][T10777] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.092882][ T5864] Bluetooth: hci3: command tx timeout [ 199.118207][T10798] net_ratelimit: 7 callbacks suppressed [ 199.118225][T10798] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 199.296740][T10803] __nla_validate_parse: 11 callbacks suppressed [ 199.296761][T10803] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1368'. [ 199.674840][T10571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.822975][T10571] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.841956][T10603] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 199.862586][T10823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1375'. [ 199.893943][ T7652] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.901261][ T7652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.915114][T10823] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1375'. [ 199.936768][T10603] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 199.940238][T10827] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1377'. [ 199.963296][T10603] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 199.976734][ T5864] Bluetooth: hci2: command tx timeout [ 199.992692][T10603] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 200.019647][ T7652] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.026902][ T7652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.124043][T10814] infiniband syz2: set down [ 200.133868][T10814] infiniband syz2: added bond_slave_0 [ 200.346426][T10814] RDS/IB: syz2: added [ 200.353433][T10814] smc: adding ib device syz2 with port count 1 [ 200.397760][T10814] smc: ib device syz2 port 1 has pnetid [ 200.445094][T10603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.527893][T10603] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.573122][ T7652] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.580346][ T7652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.624418][ T7652] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.631653][ T7652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.652584][T10858] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1383'. [ 200.664784][T10858] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1383'. [ 200.689604][T10856] netlink: 'syz.0.1382': attribute type 3 has an invalid length. [ 200.817123][T10863] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1383'. [ 200.875474][T10603] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 200.900377][T10571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.011415][T10869] delete_channel: no stack [ 201.042357][T10571] veth0_vlan: entered promiscuous mode [ 201.082571][T10571] veth1_vlan: entered promiscuous mode [ 201.166927][ T5864] Bluetooth: hci3: command tx timeout [ 201.181659][T10571] veth0_macvtap: entered promiscuous mode [ 201.217335][T10571] veth1_macvtap: entered promiscuous mode [ 201.265638][T10571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.310538][T10571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.340802][T10571] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.352004][T10571] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.361865][T10571] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.371579][T10571] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.398604][T10603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.614499][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.645558][T10603] veth0_vlan: entered promiscuous mode [ 201.651770][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.730113][T10603] veth1_vlan: entered promiscuous mode [ 201.773522][ T7664] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.805943][ T7664] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.858477][T10603] veth0_macvtap: entered promiscuous mode [ 201.870678][T10603] veth1_macvtap: entered promiscuous mode [ 201.952966][T10891] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 201.968866][T10603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.019137][T10603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.040181][T10603] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.066803][T10603] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.085903][T10603] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.116503][T10603] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.249321][T10895] sit0: entered promiscuous mode [ 202.278624][T10895] netlink: 'syz.0.1391': attribute type 1 has an invalid length. [ 202.295380][T10895] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1391'. [ 202.483694][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.508551][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.627421][T10902] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1393'. [ 202.703543][ T7672] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.789359][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.800848][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.009252][ T7672] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.252923][ T7672] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.340614][ T7672] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.635349][ T7672] bridge_slave_1: left allmulticast mode [ 203.652862][ T7672] bridge_slave_1: left promiscuous mode [ 203.672129][ T7672] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.697025][ T7672] bridge_slave_0: left allmulticast mode [ 203.702754][ T7672] bridge_slave_0: left promiscuous mode [ 203.736573][ T7672] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.099181][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 204.110653][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 204.120012][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 204.148871][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 204.183808][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 204.244685][ T7672] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.259115][ T7672] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.271201][ T7672] bond0 (unregistering): Released all slaves [ 204.912656][T10923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1395'. [ 204.950125][T10936] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1398'. [ 205.385159][T10950] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.407399][T10950] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.433315][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 205.440174][T10950] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.456427][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 205.465516][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 205.479104][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 205.483196][T10961] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1403'. [ 205.502795][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 205.536548][T10950] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.899290][T10971] xt_CT: You must specify a L4 protocol and not use inversions on it [ 206.024973][T10975] netlink: 'syz.0.1406': attribute type 26 has an invalid length. [ 206.282731][ T7672] hsr_slave_0: left promiscuous mode [ 206.289769][ T5852] Bluetooth: hci2: command tx timeout [ 206.315097][ T7672] hsr_slave_1: left promiscuous mode [ 206.325265][T10985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1409'. [ 206.327192][ T7672] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.363914][ T7672] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.386462][ T7672] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.405356][ T7672] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.464731][ T7672] veth1_macvtap: left promiscuous mode [ 206.482254][ T7672] veth0_macvtap: left promiscuous mode [ 206.502736][ T7672] veth1_vlan: left promiscuous mode [ 206.517537][ T7672] veth0_vlan: left promiscuous mode [ 206.532821][T10993] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1412'. [ 206.767661][ T5852] Bluetooth: hci4: command 0x0406 tx timeout [ 206.774664][ T5852] Bluetooth: hci1: command 0x0401 tx timeout [ 207.084435][ T7672] team0 (unregistering): Port device team_slave_1 removed [ 207.130351][ T7672] team0 (unregistering): Port device team_slave_0 removed [ 207.566555][ T5864] Bluetooth: hci3: command tx timeout [ 207.586286][T10998] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1411'. [ 207.844303][T11007] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1414'. [ 207.936467][T10910] chnl_net:caif_netlink_parms(): no params data found [ 207.983318][T11020] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1418'. [ 208.366682][ T5864] Bluetooth: hci2: command tx timeout [ 208.415883][T10910] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.436888][T10910] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.444182][T10910] bridge_slave_0: entered allmulticast mode [ 208.503389][T10910] bridge_slave_0: entered promiscuous mode [ 208.518936][T10955] chnl_net:caif_netlink_parms(): no params data found [ 208.545014][T10910] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.561590][T10910] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.572713][T10910] bridge_slave_1: entered allmulticast mode [ 208.602570][T10910] bridge_slave_1: entered promiscuous mode [ 208.737265][ T7672] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.824504][ T7672] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.859549][T10910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.884018][T10910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.951858][ T7672] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.064472][T11074] netlink: 'syz.4.1430': attribute type 11 has an invalid length. [ 209.076586][T11074] netlink: 'syz.4.1430': attribute type 11 has an invalid length. [ 209.085370][T11074] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1430'. [ 209.100398][T11073] netlink: 'syz.4.1430': attribute type 11 has an invalid length. [ 209.108219][T10910] team0: Port device team_slave_0 added [ 209.108662][T11073] netlink: 'syz.4.1430': attribute type 11 has an invalid length. [ 209.125949][T11073] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1430'. [ 209.148244][ T7672] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.164312][T10955] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.178332][T10955] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.187116][T10955] bridge_slave_0: entered allmulticast mode [ 209.195333][T10955] bridge_slave_0: entered promiscuous mode [ 209.215512][T10910] team0: Port device team_slave_1 added [ 209.230442][T10955] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.237895][T10955] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.245419][T10955] bridge_slave_1: entered allmulticast mode [ 209.253791][T10955] bridge_slave_1: entered promiscuous mode [ 209.339045][T11085] bridge0: port 1(31ªX¹¦D) entered blocking state [ 209.346015][T11085] bridge0: port 1(31ªX¹¦D) entered disabled state [ 209.358591][T11085] 1ªX¹¦D: entered promiscuous mode [ 209.365181][T11085] bridge0: port 1(31ªX¹¦D) entered blocking state [ 209.371955][T11085] bridge0: port 1(31ªX¹¦D) entered forwarding state [ 209.387150][T10910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.398558][T11085] ipt_ECN: cannot use operation on non-tcp rule [ 209.404267][T10910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.431774][ T30] audit: type=1107 audit(1752049524.738:4): pid=11091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òЍŠç›' [ 209.452197][T11093] netlink: 'syz.3.1436': attribute type 21 has an invalid length. [ 209.493556][T10910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.508976][T10910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.518948][T10910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.545771][T10910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.611891][T11084] bond0: entered promiscuous mode [ 209.617892][T11084] bond0: entered allmulticast mode [ 209.624458][T11084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.648586][ T5864] Bluetooth: hci3: command tx timeout [ 209.739549][T10955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.759793][T10955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.895074][T10955] team0: Port device team_slave_0 added [ 210.037437][T10955] team0: Port device team_slave_1 added [ 210.088427][T10910] hsr_slave_0: entered promiscuous mode [ 210.095676][T10910] hsr_slave_1: entered promiscuous mode [ 210.102922][T10910] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 210.110853][T10910] Cannot create hsr debugfs directory [ 210.183251][T11131] __nla_validate_parse: 1 callbacks suppressed [ 210.183269][T11131] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1446'. [ 210.242443][T10955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.245449][T11128] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 210.255937][T10955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.298950][T10955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.317352][ T7672] bridge_slave_1: left allmulticast mode [ 210.324019][ T7672] bridge_slave_1: left promiscuous mode [ 210.335013][ T7672] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.345504][ T7672] bridge_slave_0: left allmulticast mode [ 210.357281][ T7672] bridge_slave_0: left promiscuous mode [ 210.365682][ T7672] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.448908][ T5864] Bluetooth: hci2: command tx timeout [ 210.820941][ T7672] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.833008][ T7672] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.843298][ T7672] bond0 (unregistering): Released all slaves [ 210.882656][T11130] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1448'. [ 210.897545][T10955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.904534][T10955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.940039][T10955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.095330][T11155] netlink: 404 bytes leftover after parsing attributes in process `syz.0.1452'. [ 211.111037][T11155] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1452'. [ 211.123229][T11155] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1452'. [ 211.137277][T11155] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1452'. [ 211.234387][T11165] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.249671][T11165] netlink: 'syz.4.1454': attribute type 1 has an invalid length. [ 211.380198][T10955] hsr_slave_0: entered promiscuous mode [ 211.397644][T10955] hsr_slave_1: entered promiscuous mode [ 211.412203][T10955] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 211.433518][T10955] Cannot create hsr debugfs directory [ 211.736544][ T5864] Bluetooth: hci3: command tx timeout [ 211.804406][T11181] netlink: 'syz.3.1459': attribute type 2 has an invalid length. [ 211.997375][ T7672] hsr_slave_0: left promiscuous mode [ 212.027451][ T7672] hsr_slave_1: left promiscuous mode [ 212.048167][ T7672] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.066309][ T7672] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.086425][ T7672] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.093952][ T7672] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.191625][ T7672] veth1_macvtap: left promiscuous mode [ 212.204103][ T7672] veth0_macvtap: left promiscuous mode [ 212.217453][ T7672] veth1_vlan: left promiscuous mode [ 212.222948][ T7672] veth0_vlan: left promiscuous mode [ 212.378225][T11191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1462'. [ 212.392421][T11191] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.527077][ T5864] Bluetooth: hci2: command tx timeout [ 212.645399][T11199] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1465'. [ 212.711725][T11200] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1465'. [ 212.882796][ T7672] team0 (unregistering): Port device team_slave_1 removed [ 212.930848][ T7672] team0 (unregistering): Port device team_slave_0 removed [ 213.559012][T11208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1468'. [ 213.738667][T11218] netlink: 'syz.4.1469': attribute type 1 has an invalid length. [ 213.766850][T11218] netlink: 'syz.4.1469': attribute type 3 has an invalid length. [ 213.806696][ T5864] Bluetooth: hci3: command tx timeout [ 213.989442][T11228] can: request_module (can-proto-4) failed. [ 214.030329][T11229] can: request_module (can-proto-4) failed. [ 214.127406][T11237] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 214.142176][T11237] syz.4.1474: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 214.161594][T11237] CPU: 0 UID: 0 PID: 11237 Comm: syz.4.1474 Not tainted 6.16.0-rc4-syzkaller-00136-g3c78f91e82d6 #0 PREEMPT(full) [ 214.161738][T11237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 214.161753][T11237] Call Trace: [ 214.161764][T11237] [ 214.161775][T11237] dump_stack_lvl+0x189/0x250 [ 214.161806][T11237] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.161827][T11237] ? __pfx__printk+0x10/0x10 [ 214.161849][T11237] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 214.161877][T11237] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 214.161903][T11237] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 214.161931][T11237] warn_alloc+0x214/0x310 [ 214.161959][T11237] ? stack_depot_save_flags+0x40/0x900 [ 214.161990][T11237] ? __pfx_warn_alloc+0x10/0x10 [ 214.162017][T11237] ? kasan_save_track+0x4f/0x80 [ 214.162046][T11237] ? xskq_create+0x56/0x170 [ 214.162073][T11237] ? xsk_init_queue+0xb0/0x110 [ 214.162097][T11237] ? xsk_setsockopt+0x43f/0x710 [ 214.162119][T11237] ? do_sock_setsockopt+0x25a/0x3e0 [ 214.162142][T11237] ? __x64_sys_setsockopt+0x18b/0x220 [ 214.162162][T11237] ? do_syscall_64+0xfa/0x3b0 [ 214.162180][T11237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.162206][T11237] __vmalloc_node_range_noprof+0x125/0x12f0 [ 214.162260][T11237] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 214.162292][T11237] ? __kasan_kmalloc+0x93/0xb0 [ 214.162319][T11237] vmalloc_user_noprof+0xad/0xf0 [ 214.162345][T11237] ? xskq_create+0xbf/0x170 [ 214.162373][T11237] xskq_create+0xbf/0x170 [ 214.162403][T11237] xsk_init_queue+0xb0/0x110 [ 214.162434][T11237] xsk_setsockopt+0x43f/0x710 [ 214.162461][T11237] ? __pfx_xsk_setsockopt+0x10/0x10 [ 214.162481][T11237] ? __lock_acquire+0xab9/0xd20 [ 214.162508][T11237] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 214.162523][T11237] ? __pfx_xsk_setsockopt+0x10/0x10 [ 214.162597][T11237] do_sock_setsockopt+0x25a/0x3e0 [ 214.162622][T11237] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 214.162645][T11237] ? __fget_files+0x2a/0x420 [ 214.162674][T11237] __x64_sys_setsockopt+0x18b/0x220 [ 214.162697][T11237] do_syscall_64+0xfa/0x3b0 [ 214.162710][T11237] ? lockdep_hardirqs_on+0x9c/0x150 [ 214.162723][T11237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.162736][T11237] ? clear_bhb_loop+0x60/0xb0 [ 214.162753][T11237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.162766][T11237] RIP: 0033:0x7fa5ff98e929 [ 214.162781][T11237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.162794][T11237] RSP: 002b:00007fa5fd7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 214.162812][T11237] RAX: ffffffffffffffda RBX: 00007fa5ffbb5fa0 RCX: 00007fa5ff98e929 [ 214.162824][T11237] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 214.162833][T11237] RBP: 00007fa5ffa10b39 R08: 0000000000000004 R09: 0000000000000000 [ 214.162841][T11237] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.162850][T11237] R13: 0000000000000000 R14: 00007fa5ffbb5fa0 R15: 00007ffd565d1198 [ 214.162874][T11237] [ 214.162922][T11237] Mem-Info: [ 214.484408][T11237] active_anon:4345 inactive_anon:0 isolated_anon:0 [ 214.484408][T11237] active_file:1442 inactive_file:39908 isolated_file:0 [ 214.484408][T11237] unevictable:775 dirty:48 writeback:0 [ 214.484408][T11237] slab_reclaimable:11147 slab_unreclaimable:116009 [ 214.484408][T11237] mapped:29079 shmem:1363 pagetables:1082 [ 214.484408][T11237] sec_pagetables:0 bounce:0 [ 214.484408][T11237] kernel_misc_reclaimable:0 [ 214.484408][T11237] free:1309057 free_pcp:14023 free_cma:0 [ 214.530907][T11237] Node 0 active_anon:17380kB inactive_anon:0kB active_file:5768kB inactive_file:159432kB unevictable:1564kB isolated(anon):0kB isolated(file):0kB mapped:116316kB dirty:192kB writeback:0kB shmem:3916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12964kB pagetables:4200kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 214.565711][T11237] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 214.577933][T10910] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 214.605983][T11237] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 214.649910][T10910] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 214.662355][T10910] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 214.693223][T10910] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 214.697354][T11237] lowmem_reserve[]: 0 2498 2500 2500 2500 [ 214.706723][T11237] Node 0 DMA32 free:1324004kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17232kB inactive_anon:0kB active_file:5768kB inactive_file:157856kB unevictable:1564kB writepending:188kB present:3129332kB managed:2558400kB mlocked:28kB bounce:0kB free_pcp:34908kB local_pcp:21584kB free_cma:0kB [ 214.786362][T11237] lowmem_reserve[]: 0 0 1 1 1 [ 214.791181][T11237] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 214.833568][T11237] lowmem_reserve[]: 0 0 0 0 0 [ 214.839021][T11237] Node 1 Normal free:3896852kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:21520kB local_pcp:10040kB free_cma:0kB [ 214.900510][T11237] lowmem_reserve[]: 0 0 0 0 0 [ 214.905330][T11237] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 214.921587][T11237] Node 0 DMA32: 117*4kB (UE) 26*8kB (UME) 7*16kB (UME) 82*32kB (UM) 38*64kB (UM) 45*128kB (UME) 13*256kB (UME) 6*512kB (UME) 4*1024kB (UM) 4*2048kB (UM) 316*4096kB (M) = 1324628kB [ 214.962092][T10955] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 214.976884][T11237] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 215.016519][T11237] Node 1 Normal: 193*4kB (UE) 50*8kB (UME) 38*16kB (UME) 79*32kB (UME) 21*64kB (UME) 6*128kB (UME) 3*256kB (ME) 3*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 948*4096kB (M) = 3896852kB [ 215.048832][T10955] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 215.067767][T11237] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 215.072569][T10955] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 215.096570][T11237] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 215.115958][T11237] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 215.133906][T11237] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 215.150911][T10955] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 215.167327][T11237] 42709 total pagecache pages [ 215.174940][T11237] 0 pages in swap cache [ 215.181587][T11237] Free swap = 124996kB [ 215.186953][T11237] Total swap = 124996kB [ 215.191867][T11237] 2097051 pages RAM [ 215.195823][T11237] 0 pages HighMem/MovableOnly [ 215.201369][T11237] 425409 pages reserved [ 215.204839][T11257] geneve1: entered allmulticast mode [ 215.205605][T11237] 0 pages cma reserved [ 215.279651][T11264] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 215.406076][T10910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.515961][T10910] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.599192][ T7671] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.606434][ T7671] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.644879][ T7671] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.652131][ T7671] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.881064][T10955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.959630][T10955] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.995079][ T7664] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.002416][ T7664] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.039765][T11296] __nla_validate_parse: 3 callbacks suppressed [ 216.039783][T11296] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1488'. [ 216.045083][T11298] gtp0: entered promiscuous mode [ 216.094978][T11298] gtp0: entered allmulticast mode [ 216.112511][ T7664] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.120059][ T7664] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.127026][T11301] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1490'. [ 216.291522][T11306] SET target dimension over the limit! [ 216.394695][T11311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1493'. [ 216.417842][T10910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.455923][T11311] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.629299][T10910] veth0_vlan: entered promiscuous mode [ 216.674626][T10910] veth1_vlan: entered promiscuous mode [ 216.738647][T11325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1495'. [ 216.820787][T10955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.838992][T10910] veth0_macvtap: entered promiscuous mode [ 216.870622][T10910] veth1_macvtap: entered promiscuous mode [ 216.944719][T10910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.967788][T11329] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1498'. [ 216.968439][T11331] xt_l2tp: v2 doesn't support IP mode [ 217.008372][T10910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.038746][T10955] veth0_vlan: entered promiscuous mode [ 217.059168][T10955] veth1_vlan: entered promiscuous mode [ 217.120295][T10910] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.148124][T10910] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.176269][T10910] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.185031][T10910] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.282100][T10955] veth0_macvtap: entered promiscuous mode [ 217.309576][T10955] veth1_macvtap: entered promiscuous mode [ 217.438975][T10955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.495011][T10955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.540638][T10955] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.580890][T10955] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.598007][T10955] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.610902][T10955] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.632738][ T7664] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.645747][ T7664] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.766728][ T7673] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.774999][ T7673] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.874239][ T7665] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.911502][ T7665] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.990527][ T7665] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.003016][ T7665] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.134840][T11374] x_tables: duplicate underflow at hook 3 [ 218.203727][T11374] x_tables: duplicate underflow at hook 3 [ 218.341976][T11380] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1514'. [ 218.386844][T11386] netlink: 'syz.4.1516': attribute type 4 has an invalid length. [ 218.481896][T11388] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 218.504966][T11388] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 218.529391][T11388] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 218.541666][T11388] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 218.555379][T11388] geneve2: entered promiscuous mode [ 218.561717][T11388] geneve2: entered allmulticast mode [ 218.580562][T11392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1517'. [ 218.688493][ T7673] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.815735][ T7673] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.920938][ T7673] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.064673][ T7673] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.258520][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 219.270524][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 219.279931][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 219.289158][ T7673] bridge_slave_1: left allmulticast mode [ 219.291400][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 219.294923][ T7673] bridge_slave_1: left promiscuous mode [ 219.303069][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 219.320116][ T7673] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.333762][ T7673] bridge_slave_0: left allmulticast mode [ 219.339553][ T7673] bridge_slave_0: left promiscuous mode [ 219.345265][ T7673] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.026131][T11426] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1525'. [ 220.036182][T11426] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1525'. [ 220.059533][ T7673] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.099620][ T7673] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.112414][ T7673] bond0 (unregistering): Released all slaves [ 220.393515][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 220.409324][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 220.430318][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 220.454278][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 220.466758][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 220.511556][T11446] netlink: 'syz.3.1532': attribute type 32 has an invalid length. [ 220.520045][T11446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1532'. [ 220.584365][T11446] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 220.632603][T11446] netlink: 'syz.3.1532': attribute type 13 has an invalid length. [ 220.641598][T11448] netlink: 'syz.3.1532': attribute type 13 has an invalid length. [ 220.681351][T11446] veth0_macvtap: left promiscuous mode [ 220.721070][T11446] macvtap0: entered allmulticast mode [ 220.738576][T11446] macvtap0: refused to change device tx_queue_len [ 220.762038][T11448] macvtap0: refused to change device tx_queue_len [ 221.017631][T11467] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 221.104495][T11475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1537'. [ 221.327993][ T5850] Bluetooth: hci2: command tx timeout [ 221.517245][T11400] chnl_net:caif_netlink_parms(): no params data found [ 221.789663][ T7673] hsr_slave_0: left promiscuous mode [ 221.800655][ T7673] hsr_slave_1: left promiscuous mode [ 221.811474][ T7673] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.819258][ T7673] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.833613][ T7673] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.841584][ T7673] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.901840][ T7673] veth1_macvtap: left promiscuous mode [ 221.917294][ T7673] veth0_macvtap: left promiscuous mode [ 221.923126][ T7673] veth1_vlan: left promiscuous mode [ 221.934217][ T7673] veth0_vlan: left promiscuous mode [ 221.942322][T11507] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 221.951975][T11507] netlink: 'syz.3.1546': attribute type 2 has an invalid length. [ 221.968126][T11507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1546'. [ 222.472148][ T7673] team0 (unregistering): Port device team_slave_1 removed [ 222.512130][ T7673] team0 (unregistering): Port device team_slave_0 removed [ 222.530363][ T5850] Bluetooth: hci3: command tx timeout [ 223.168207][T11518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1549'. [ 223.323525][T11400] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.340134][T11529] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1553'. [ 223.344198][T11400] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.383256][T11400] bridge_slave_0: entered allmulticast mode [ 223.399348][T11400] bridge_slave_0: entered promiscuous mode [ 223.406586][ T5850] Bluetooth: hci2: command tx timeout [ 223.512597][T11400] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.520736][T11400] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.528373][T11400] bridge_slave_1: entered allmulticast mode [ 223.535638][T11400] bridge_slave_1: entered promiscuous mode [ 224.610232][ T5850] Bluetooth: hci3: command tx timeout [ 225.203832][T11434] chnl_net:caif_netlink_parms(): no params data found [ 225.238379][T11541] A link change request failed with some changes committed already. Interface ªªªªªª†³?ÂHº may have been left with an inconsistent configuration, please check. [ 225.441615][T11400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.453060][T11556] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1561'. [ 225.491576][ T5850] Bluetooth: hci2: command tx timeout [ 225.502516][T11400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.558079][T11564] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1563'. [ 225.623975][T11564] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1563'. [ 225.694516][T11564] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1563'. [ 225.712915][T11434] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.720476][T11434] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.727960][T11434] bridge_slave_0: entered allmulticast mode [ 225.736080][T11434] bridge_slave_0: entered promiscuous mode [ 225.799923][ T7673] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.823619][T11400] team0: Port device team_slave_0 added [ 225.832586][T11434] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.840597][T11434] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.848473][T11434] bridge_slave_1: entered allmulticast mode [ 225.855653][T11434] bridge_slave_1: entered promiscuous mode [ 225.883332][T11400] team0: Port device team_slave_1 added [ 225.941082][ T7673] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.091229][ T7673] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.130922][T11434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.169176][T11400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.178724][T11400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.205923][T11400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.269741][T11590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1571'. [ 226.284519][ T7673] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.286713][T11594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1572'. [ 226.307015][T11595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1572'. [ 226.310540][T11592] netlink: 388 bytes leftover after parsing attributes in process `syz.4.1573'. [ 226.320810][T11434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.339527][T11400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.352203][T11400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.401669][T11400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.550182][T11434] team0: Port device team_slave_0 added [ 226.573579][T11434] team0: Port device team_slave_1 added [ 226.677683][T11400] hsr_slave_0: entered promiscuous mode [ 226.684520][T11400] hsr_slave_1: entered promiscuous mode [ 226.690308][ T5850] Bluetooth: hci3: command tx timeout [ 226.698592][T11400] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.707539][T11400] Cannot create hsr debugfs directory [ 226.787248][T11434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.794324][T11434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.834907][T11434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.942066][T11434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.962389][T11626] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1581'. [ 226.975079][T11434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.009410][T11434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.076559][T11626] nbd: must specify a device to reconfigure [ 227.192280][T11634] sctp: [Deprecated]: syz.3.1583 (pid 11634) Use of int in max_burst socket option deprecated. [ 227.192280][T11634] Use struct sctp_assoc_value instead [ 227.259470][T11434] hsr_slave_0: entered promiscuous mode [ 227.276029][T11434] hsr_slave_1: entered promiscuous mode [ 227.298383][T11434] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.306085][T11434] Cannot create hsr debugfs directory [ 227.549669][ T7673] bridge_slave_1: left allmulticast mode [ 227.555381][ T7673] bridge_slave_1: left promiscuous mode [ 227.566980][ T7673] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.574787][ T5850] Bluetooth: hci2: command tx timeout [ 227.592519][ T7673] bridge_slave_0: left allmulticast mode [ 227.603845][ T7673] bridge_slave_0: left promiscuous mode [ 227.626988][ T7673] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.790141][T11665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1593'. [ 228.074535][ T7673] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.085766][ T7673] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.096199][ T7673] bond0 (unregistering): Released all slaves [ 228.131738][T11665] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1593'. [ 228.513754][T11672] IPVS: ip_vs_add_dest(): server weight less than zero [ 228.561680][T11690] netlink: 'syz.3.1599': attribute type 10 has an invalid length. [ 228.747845][T11694] siw: device registration error -23 [ 228.776959][ T5850] Bluetooth: hci3: command tx timeout [ 229.083697][T11705] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1606'. [ 229.112211][T11705] openvswitch: netlink: Actions may not be safe on all matching packets [ 229.145675][ T7673] hsr_slave_0: left promiscuous mode [ 229.155074][ T7673] hsr_slave_1: left promiscuous mode [ 229.164900][ T7673] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.173455][ T7673] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.184391][ T7673] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.193416][ T7673] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.202030][T11707] xt_TCPMSS: Only works on TCP SYN packets [ 229.238839][ T7673] veth1_macvtap: left promiscuous mode [ 229.252286][ T7673] veth0_macvtap: left promiscuous mode [ 229.262874][ T7673] veth1_vlan: left promiscuous mode [ 229.270628][ T7673] veth0_vlan: left promiscuous mode [ 229.786624][ T7673] team0 (unregistering): Port device team_slave_1 removed [ 229.833535][ T7673] team0 (unregistering): Port device team_slave_0 removed [ 230.288259][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 230.312731][T11713] team0: Mode changed to "loadbalance" [ 230.549189][T11732] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1614'. [ 230.648172][ T7664] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 230.657021][ T7664] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 230.677804][ T48] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 230.817277][T11742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1616'. [ 230.876457][ T48] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 230.977351][T11745] unknown channel width for channel at 909000KHz? [ 230.997343][T11745] unknown channel width for channel at 909000KHz? [ 231.016840][T11745] unknown channel width for channel at 909000KHz? [ 231.040935][T11751] team0: Device vti0 is of different type [ 231.056881][ T5948] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 231.177330][T11434] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 231.212282][T11434] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 231.258566][T11434] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 231.361291][T11434] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 231.432974][T11773] __nla_validate_parse: 3 callbacks suppressed [ 231.432990][T11773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1625'. [ 231.531756][T11772] netlink: zone id is out of range [ 231.541347][T11772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1623'. [ 231.583985][T11400] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 231.619124][T11400] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 231.695811][T11400] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 231.798012][T11400] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 231.845928][T11802] sock: sock_timestamping_bind_phc: sock not bind to device [ 231.980006][T11434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.020155][T11811] x_tables: duplicate underflow at hook 2 [ 232.020210][T11434] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.049292][T11811] x_tables: duplicate underflow at hook 2 [ 232.065028][ T7652] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.072568][ T7652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.096026][ T7652] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.103243][ T7652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.145985][T11400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.186718][T11818] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 232.230781][T11819] netlink: 'syz.0.1635': attribute type 1 has an invalid length. [ 232.250573][T11400] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.251033][T11819] netlink: 45 bytes leftover after parsing attributes in process `syz.0.1635'. [ 232.294166][ T7652] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.301422][ T7652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.305488][T11819] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 232.374986][ T7652] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.382531][ T7652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.764285][T11837] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1637'. [ 232.839037][T11846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1639'. [ 232.848252][T11846] netlink: 'syz.4.1639': attribute type 5 has an invalid length. [ 232.856018][T11846] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1639'. [ 232.883239][T11846] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 232.895567][T11846] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 232.936763][T11846] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 232.974631][T11846] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 233.024241][T11846] geneve3: entered promiscuous mode [ 233.038071][T11846] geneve3: entered allmulticast mode [ 233.090169][T11434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.121937][T11400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.232683][T11400] veth0_vlan: entered promiscuous mode [ 233.242874][T11434] veth0_vlan: entered promiscuous mode [ 233.273418][T11434] veth1_vlan: entered promiscuous mode [ 233.284725][T11400] veth1_vlan: entered promiscuous mode [ 233.353776][T11861] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1645'. [ 233.367866][T11400] veth0_macvtap: entered promiscuous mode [ 233.388891][T11434] veth0_macvtap: entered promiscuous mode [ 233.403493][T11400] veth1_macvtap: entered promiscuous mode [ 233.456899][T11434] veth1_macvtap: entered promiscuous mode [ 233.482162][T11400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.525704][T11400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.552026][T11400] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.577180][T11400] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.597221][T11400] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.606089][T11400] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.631742][T11434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.691288][T11434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.721360][T11434] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.733251][T11434] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.744002][T11434] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.753731][T11434] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.887563][ T7665] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.901203][ T7665] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.918365][T11878] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 233.991631][ T7652] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.001547][ T7652] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.042201][ T7673] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.069698][ T7673] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.155386][ T7671] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.187983][ T7671] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.515131][T11898] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1655'. [ 234.535891][T11898] netlink: 'syz.4.1655': attribute type 11 has an invalid length. [ 234.766476][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 234.879352][T11908] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1658'. [ 235.141399][ T7643] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.191899][T11924] netlink: 'syz.0.1662': attribute type 13 has an invalid length. [ 235.545299][T11922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1663'. [ 235.633607][T11924] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.640917][T11924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.648541][T11924] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.655732][T11924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.679344][T11924] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 235.789360][ T7643] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.971887][ T7643] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.077940][ T5864] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 236.088156][ T5864] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 236.098759][ T5864] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 236.108800][ T5864] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 236.125221][ T5864] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 236.134777][ T7643] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.314998][ T7643] bridge_slave_1: left allmulticast mode [ 236.328815][ T7643] bridge_slave_1: left promiscuous mode [ 236.334675][ T7643] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.349639][ T7643] bridge_slave_0: left allmulticast mode [ 236.355557][ T7643] bridge_slave_0: left promiscuous mode [ 236.363199][ T7643] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.815164][ T7643] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.833942][ T7643] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.849276][ T7643] bond0 (unregistering): Released all slaves [ 236.931596][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 236.950951][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 236.960431][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 236.986890][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 236.995687][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 237.152577][T11955] openvswitch: netlink: Missing key (keys=40, expected=80) [ 237.230205][T11961] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 237.246073][T11962] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 237.535805][T11933] chnl_net:caif_netlink_parms(): no params data found [ 237.955002][ T7643] hsr_slave_0: left promiscuous mode [ 237.962469][ T7643] hsr_slave_1: left promiscuous mode [ 237.968895][ T7643] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.981070][ T7643] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.990458][ T7643] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.002894][T11983] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 238.002969][ T7643] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.034040][ T7643] veth1_macvtap: left promiscuous mode [ 238.040898][ T7643] veth0_macvtap: left promiscuous mode [ 238.047213][ T7643] veth1_vlan: left promiscuous mode [ 238.052681][ T7643] veth0_vlan: left promiscuous mode [ 238.209192][ T5864] Bluetooth: hci2: command tx timeout [ 238.592778][ T7643] team0 (unregistering): Port device team_slave_1 removed [ 238.635650][ T7643] team0 (unregistering): Port device team_slave_0 removed [ 239.086553][ T5864] Bluetooth: hci3: command tx timeout [ 239.130474][T11933] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.167419][T11933] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.174699][T11933] bridge_slave_0: entered allmulticast mode [ 239.192103][T11933] bridge_slave_0: entered promiscuous mode [ 239.458095][T11933] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.466024][T11933] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.474656][T11933] bridge_slave_1: entered allmulticast mode [ 239.489847][T11933] bridge_slave_1: entered promiscuous mode [ 239.506112][T11996] netlink: 'syz.0.1678': attribute type 1 has an invalid length. [ 239.517939][T11996] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1678'. [ 239.617038][T12010] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.622975][T11933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.671374][T12010] bridge_slave_0: invalid flags given to default FDB implementation [ 239.685498][T11933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.764463][T11933] team0: Port device team_slave_0 added [ 239.829007][T11933] team0: Port device team_slave_1 added [ 239.943633][T11933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.967617][T11933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.026297][T11933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.048289][T11933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.055277][T11933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.136335][T11933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.159394][T12018] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 240.219727][T11944] chnl_net:caif_netlink_parms(): no params data found [ 240.290411][ T5864] Bluetooth: hci2: command tx timeout [ 240.384841][ T7643] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.520190][T12025] vlan2: entered promiscuous mode [ 240.532665][T12025] bridge0: entered promiscuous mode [ 240.570108][T11933] hsr_slave_0: entered promiscuous mode [ 240.577505][T11933] hsr_slave_1: entered promiscuous mode [ 240.593123][T11933] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 240.604141][T12028] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1689'. [ 240.619930][T11933] Cannot create hsr debugfs directory [ 240.691874][ T7643] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.805042][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 240.815837][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 240.824795][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 240.837450][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 240.845978][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 240.883462][ T7643] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.905056][T12042] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1690'. [ 240.964801][ T7643] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.077537][T11944] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.084822][T11944] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.101719][T11944] bridge_slave_0: entered allmulticast mode [ 241.113683][T11944] bridge_slave_0: entered promiscuous mode [ 241.152860][T11944] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.161511][T12049] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1692'. [ 241.171878][ T5850] Bluetooth: hci3: command tx timeout [ 241.177881][T11944] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.185187][T11944] bridge_slave_1: entered allmulticast mode [ 241.238617][T11944] bridge_slave_1: entered promiscuous mode [ 241.398561][T12055] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1693'. [ 241.481102][T11944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.578486][T11944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.734106][T11944] team0: Port device team_slave_0 added [ 241.823160][T12065] syz.0.1697: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 241.847323][T12065] CPU: 0 UID: 0 PID: 12065 Comm: syz.0.1697 Not tainted 6.16.0-rc4-syzkaller-00136-g3c78f91e82d6 #0 PREEMPT(full) [ 241.847352][T12065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 241.847363][T12065] Call Trace: [ 241.847370][T12065] [ 241.847378][T12065] dump_stack_lvl+0x189/0x250 [ 241.847407][T12065] ? __pfx_dump_stack_lvl+0x10/0x10 [ 241.847427][T12065] ? __pfx__printk+0x10/0x10 [ 241.847448][T12065] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 241.847471][T12065] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 241.847495][T12065] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 241.847520][T12065] warn_alloc+0x214/0x310 [ 241.847549][T12065] ? __pfx_warn_alloc+0x10/0x10 [ 241.847582][T12065] ? __get_vm_area_node+0x28f/0x300 [ 241.847603][T12065] ? hash_ipportnet_create+0x358/0xfe0 [ 241.847632][T12065] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 241.847653][T12065] ? do_syscall_64+0xfa/0x3b0 [ 241.847701][T12065] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 241.847729][T12065] ? rcu_is_watching+0x15/0xb0 [ 241.847749][T12065] ? hash_ipportnet_create+0x358/0xfe0 [ 241.847772][T12065] ? hash_ipportnet_create+0x358/0xfe0 [ 241.847793][T12065] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 241.847823][T12065] ? hash_ipportnet_create+0x358/0xfe0 [ 241.847848][T12065] ? hash_ipportnet_create+0x2fe/0xfe0 [ 241.847876][T12065] hash_ipportnet_create+0x358/0xfe0 [ 241.847909][T12065] ? __nla_parse+0x40/0x60 [ 241.847927][T12065] ? __pfx_hash_ipportnet_create+0x10/0x10 [ 241.847953][T12065] ip_set_create+0xa94/0x1940 [ 241.847971][T12065] ? ip_set_create+0x4a2/0x1940 [ 241.847999][T12065] ? __pfx_ip_set_create+0x10/0x10 [ 241.848052][T12065] nfnetlink_rcv_msg+0xb4d/0x1130 [ 241.848070][T12065] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 241.848105][T12065] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 241.848119][T12065] ? kasan_save_free_info+0x46/0x50 [ 241.848187][T12065] netlink_rcv_skb+0x205/0x470 [ 241.848208][T12065] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 241.848227][T12065] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 241.848259][T12065] ? bpf_lsm_capable+0x9/0x20 [ 241.848277][T12065] ? security_capable+0x7e/0x2e0 [ 241.848311][T12065] nfnetlink_rcv+0x26a/0x2520 [ 241.848331][T12065] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 241.848359][T12065] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 241.848382][T12065] ? __dev_queue_xmit+0x27e/0x3a70 [ 241.848405][T12065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.848433][T12065] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 241.848457][T12065] ? __pfx___dev_queue_xmit+0x10/0x10 [ 241.848494][T12065] ? ref_tracker_free+0x63a/0x7d0 [ 241.848509][T12065] ? __copy_skb_header+0xa7/0x550 [ 241.848533][T12065] ? __pfx_ref_tracker_free+0x10/0x10 [ 241.848569][T12065] ? skb_clone+0x246/0x3a0 [ 241.848594][T12065] ? __netlink_deliver_tap+0x807/0x850 [ 241.848613][T12065] ? netlink_deliver_tap+0x2e/0x1b0 [ 241.848640][T12065] ? netlink_deliver_tap+0x2e/0x1b0 [ 241.848659][T12065] ? netlink_deliver_tap+0x2e/0x1b0 [ 241.848684][T12065] netlink_unicast+0x759/0x8e0 [ 241.848714][T12065] netlink_sendmsg+0x805/0xb30 [ 241.848744][T12065] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.848768][T12065] ? aa_sock_msg_perm+0x94/0x160 [ 241.848792][T12065] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 241.848814][T12065] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.848835][T12065] __sock_sendmsg+0x219/0x270 [ 241.848855][T12065] ____sys_sendmsg+0x505/0x830 [ 241.848884][T12065] ? __pfx_____sys_sendmsg+0x10/0x10 [ 241.848915][T12065] ? import_iovec+0x74/0xa0 [ 241.848937][T12065] ___sys_sendmsg+0x21f/0x2a0 [ 241.848958][T12065] ? __pfx____sys_sendmsg+0x10/0x10 [ 241.849009][T12065] ? __fget_files+0x2a/0x420 [ 241.849028][T12065] ? __fget_files+0x3a0/0x420 [ 241.849054][T12065] __x64_sys_sendmsg+0x19b/0x260 [ 241.849076][T12065] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 241.849103][T12065] ? rcu_is_watching+0x15/0xb0 [ 241.849124][T12065] ? do_syscall_64+0xbe/0x3b0 [ 241.849143][T12065] do_syscall_64+0xfa/0x3b0 [ 241.849158][T12065] ? lockdep_hardirqs_on+0x9c/0x150 [ 241.849174][T12065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.849189][T12065] ? clear_bhb_loop+0x60/0xb0 [ 241.849209][T12065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.849222][T12065] RIP: 0033:0x7f800a18e929 [ 241.849239][T12065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.849252][T12065] RSP: 002b:00007f800af95038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 241.849271][T12065] RAX: ffffffffffffffda RBX: 00007f800a3b5fa0 RCX: 00007f800a18e929 [ 241.849284][T12065] RDX: 0000000000004020 RSI: 0000200000000040 RDI: 0000000000000007 [ 241.849294][T12065] RBP: 00007f800a210b39 R08: 0000000000000000 R09: 0000000000000000 [ 241.849304][T12065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.849315][T12065] R13: 0000000000000000 R14: 00007f800a3b5fa0 R15: 00007ffd78c8e348 [ 241.849341][T12065] [ 241.849347][T12065] Mem-Info: [ 241.849545][T11944] team0: Port device team_slave_1 added [ 241.862057][T12065] active_anon:4284 inactive_anon:0 isolated_anon:0 [ 241.862057][T12065] active_file:1540 inactive_file:39928 isolated_file:0 [ 241.862057][T12065] unevictable:768 dirty:34 writeback:0 [ 241.862057][T12065] slab_reclaimable:11263 slab_unreclaimable:127444 [ 241.862057][T12065] mapped:29128 shmem:1363 pagetables:1033 [ 241.862057][T12065] sec_pagetables:0 bounce:0 [ 241.862057][T12065] kernel_misc_reclaimable:0 [ 241.862057][T12065] free:1298224 free_pcp:13992 free_cma:0 [ 241.862124][T12065] Node 0 active_anon:17136kB inactive_anon:0kB active_file:6160kB inactive_file:159512kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116512kB dirty:136kB writeback:0kB shmem:3916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13168kB pagetables:4004kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 242.366485][ T5850] Bluetooth: hci2: command tx timeout [ 242.398478][T12065] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 242.468597][T12065] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 242.522634][T12065] lowmem_reserve[]: 0 2498 2500 2500 2500 [ 242.569730][T12065] Node 0 DMA32 free:1280608kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16976kB inactive_anon:0kB active_file:6160kB inactive_file:157944kB unevictable:1536kB writepending:184kB present:3129332kB managed:2558400kB mlocked:0kB bounce:0kB free_pcp:33608kB local_pcp:18896kB free_cma:0kB [ 242.624187][T12065] lowmem_reserve[]: 0 0 1 1 1 [ 242.629067][T12065] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 242.631438][T11944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.668335][T12065] lowmem_reserve[]: 0 0 0 0 0 [ 242.673468][T11944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.673528][T11944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.690221][ T7643] bridge_slave_1: left allmulticast mode [ 242.701386][T12065] Node 1 Normal free:3896852kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:21584kB local_pcp:11512kB free_cma:0kB [ 242.717718][ T7643] bridge_slave_1: left promiscuous mode [ 242.750285][T12065] lowmem_reserve[]: 0 0 0 0 0 [ 242.760004][T12065] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 242.761888][ T7643] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.774209][T12065] Node 0 DMA32: 246*4kB (UME) 449*8kB (UME) 224*16kB (M) 58*32kB (UM) 39*64kB (ME) 15*128kB (UME) 12*256kB (UME) 3*512kB (M) 6*1024kB (UM) 1*2048kB (U) 306*4096kB (UM) = 1280608kB [ 242.799084][T12065] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 242.812312][T12065] Node 1 Normal: 193*4kB (UE) 50*8kB (UME) 38*16kB (UME) 79*32kB (UME) 21*64kB (UME) 6*128kB (UME) 3*256kB (ME) 3*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 948*4096kB (M) = 3896852kB [ 242.831152][T12065] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 242.841487][T12065] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 242.851015][T12065] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 242.852088][ T7643] bridge_slave_0: left allmulticast mode [ 242.860743][T12065] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 242.860762][T12065] 42829 total pagecache pages [ 242.860770][T12065] 0 pages in swap cache [ 242.860778][T12065] Free swap = 124996kB [ 242.860786][T12065] Total swap = 124996kB [ 242.860794][T12065] 2097051 pages RAM [ 242.860801][T12065] 0 pages HighMem/MovableOnly [ 242.860808][T12065] 425409 pages reserved [ 242.860816][T12065] 0 pages cma reserved [ 242.911134][ T7643] bridge_slave_0: left promiscuous mode [ 242.921621][ T7643] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.926908][ T5850] Bluetooth: hci1: command tx timeout [ 242.981962][T12080] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1699'. [ 242.991724][T12080] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1699'. [ 243.086391][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 243.246485][ T5850] Bluetooth: hci3: command tx timeout [ 243.307644][ T7643] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.321358][ T7643] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.332904][ T7643] bond0 (unregistering): Released all slaves [ 243.359702][T11944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.376632][T11944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.403949][T11944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.457940][T12080] bridge0: port 3(vlan3) entered blocking state [ 243.465016][T12080] bridge0: port 3(vlan3) entered disabled state [ 243.477049][T12080] vlan3: entered allmulticast mode [ 243.485279][T12083] nbd: socks must be embedded in a SOCK_ITEM attr [ 243.508114][T12080] vlan3: left allmulticast mode [ 243.679015][T11944] hsr_slave_0: entered promiscuous mode [ 243.685680][T11944] hsr_slave_1: entered promiscuous mode [ 243.694282][T11944] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 243.705736][T11944] Cannot create hsr debugfs directory [ 244.062567][T12096] netlink: 'syz.0.1704': attribute type 2 has an invalid length. [ 244.239245][T12039] chnl_net:caif_netlink_parms(): no params data found [ 244.418811][ T7643] hsr_slave_0: left promiscuous mode [ 244.430155][ T7643] hsr_slave_1: left promiscuous mode [ 244.436614][ T7643] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.444099][ T7643] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.456616][ T5850] Bluetooth: hci2: command tx timeout [ 244.467403][ T7643] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.474891][ T7643] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.507015][ T7643] veth1_macvtap: left promiscuous mode [ 244.512611][ T7643] veth0_macvtap: left promiscuous mode [ 244.519051][ T7643] veth1_vlan: left promiscuous mode [ 244.524408][ T7643] veth0_vlan: left promiscuous mode [ 244.912355][T12123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1713'. [ 245.008119][ T5850] Bluetooth: hci1: command tx timeout [ 245.113802][ T7643] team0 (unregistering): Port device team_slave_1 removed [ 245.157623][ T7643] team0 (unregistering): Port device team_slave_0 removed [ 245.326601][ T5850] Bluetooth: hci3: command tx timeout [ 245.625985][T12123] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 245.663194][T11933] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 245.693512][T11933] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 245.760872][T11933] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 245.821945][T12128] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 245.840295][T11933] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 245.902682][T12137] netlink: 66 bytes leftover after parsing attributes in process `syz.0.1715'. [ 245.948383][T12140] veth0: entered promiscuous mode [ 246.036964][T12039] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.045755][T12039] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.053697][T12039] bridge_slave_0: entered allmulticast mode [ 246.061963][T12039] bridge_slave_0: entered promiscuous mode [ 246.095596][T12142] veth0: left promiscuous mode [ 246.103055][T12039] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.114753][T12039] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.122366][T12039] bridge_slave_1: entered allmulticast mode [ 246.134510][T12039] bridge_slave_1: entered promiscuous mode [ 246.212982][T12039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.263480][T12039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.360622][T12039] team0: Port device team_slave_0 added [ 246.378627][T12039] team0: Port device team_slave_1 added [ 246.492342][T12039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.505896][T12039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.541613][T12039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.563092][T12039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.582809][T12039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.619962][T12039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.743478][T11944] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 246.792751][T11944] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 246.818171][T12039] hsr_slave_0: entered promiscuous mode [ 246.841124][T12039] hsr_slave_1: entered promiscuous mode [ 246.863569][T12039] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 246.886778][T12039] Cannot create hsr debugfs directory [ 246.917059][T11944] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 246.952927][T11944] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 247.086727][ T5850] Bluetooth: hci1: command tx timeout [ 247.131245][T12197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1727'. [ 247.143485][T12195] netlink: 'syz.0.1726': attribute type 4 has an invalid length. [ 247.224315][T11933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.375218][T11933] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.411310][T12039] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.422249][T12039] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 247.452697][ T7652] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.459925][ T7652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.496213][ T7652] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.503965][ T7652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.552716][T12039] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.571440][T12039] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 247.598386][T12216] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1731'. [ 247.670955][T12039] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.682360][T12039] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 247.725672][T11944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.768016][T12039] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.782518][T12039] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 247.837817][T11944] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.879376][ T7652] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.886659][ T7652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.929954][ T7652] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.937210][ T7652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.239190][T12039] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 248.282518][T12039] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 248.347660][T12039] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 248.371938][T12039] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 248.468111][T12249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1738'. [ 248.481931][T11933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.489330][T12250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1738'. [ 248.520240][T12249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1738'. [ 248.550438][T12250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1738'. [ 248.693263][T11944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.711428][T11933] veth0_vlan: entered promiscuous mode [ 248.727506][T12261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1741'. [ 248.768556][T11933] veth1_vlan: entered promiscuous mode [ 248.931513][T11944] veth0_vlan: entered promiscuous mode [ 248.952935][T11933] veth0_macvtap: entered promiscuous mode [ 248.997875][T12039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.018455][T11933] veth1_macvtap: entered promiscuous mode [ 249.033399][T11944] veth1_vlan: entered promiscuous mode [ 249.093706][T12276] pimreg3: entered allmulticast mode [ 249.110654][T12039] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.129712][T11933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.158316][T11933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.167417][ T5850] Bluetooth: hci1: command tx timeout [ 249.181419][T11933] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.190771][T11933] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.200419][T11933] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.209614][T11933] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.225253][ T7672] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.232485][ T7672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.276778][ T7672] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.283947][ T7672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.360113][T11944] veth0_macvtap: entered promiscuous mode [ 249.375958][T11944] veth1_macvtap: entered promiscuous mode [ 249.504893][ T7650] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.521958][T11944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.536714][ T7650] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.622143][T11944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.636112][ T7664] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.666849][ T7664] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.679613][T11944] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.702536][T11944] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.713077][T11944] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.723001][T11944] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.995803][T12294] netlink: 'syz.0.1751': attribute type 6 has an invalid length. [ 250.031727][T12294] x_tables: duplicate entry at hook 2 [ 250.059966][ T7664] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.089958][ T7664] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.158276][T12039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.335776][ T7664] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.375484][ T7643] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.425309][ T7643] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.475742][ T7664] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.745942][ T7664] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.812049][T12039] veth0_vlan: entered promiscuous mode [ 250.835732][ T7664] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.874794][T12039] veth1_vlan: entered promiscuous mode [ 250.930969][T12039] veth0_macvtap: entered promiscuous mode [ 250.970508][T12039] veth1_macvtap: entered promiscuous mode [ 251.001906][T12039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.027708][T12039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.045194][T12039] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.054648][T12039] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.067326][T12039] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.076074][T12039] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.262698][ T7665] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.282423][ T7665] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.319865][ T7664] bridge_slave_1: left allmulticast mode [ 251.325561][ T7664] bridge_slave_1: left promiscuous mode [ 251.343333][ T7664] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.344184][T12313] netlink: 'syz.0.1753': attribute type 1 has an invalid length. [ 251.370359][ T7664] bridge_slave_0: left allmulticast mode [ 251.383895][ T7664] bridge_slave_0: left promiscuous mode [ 251.386216][T12313] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1753'. [ 251.390213][ T7664] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.619749][ T5864] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 251.630353][ T5864] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 251.645068][ T5864] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 251.654022][ T5864] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 251.666853][ T5864] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 251.824126][ T7664] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.835132][ T7664] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.845342][ T7664] bond0 (unregistering): Released all slaves [ 251.883329][ T7652] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.921244][ T7652] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.688847][T12334] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1757'. [ 252.708664][T12333] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 252.883846][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 252.893905][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 252.916412][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 252.930762][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 252.942893][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 252.975672][ T7664] hsr_slave_0: left promiscuous mode [ 252.984101][ T7664] hsr_slave_1: left promiscuous mode [ 252.997217][ T7664] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.004796][ T7664] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.020749][ T7664] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.030464][ T7664] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.077664][ T7664] veth1_macvtap: left promiscuous mode [ 253.100884][ T7664] veth0_macvtap: left promiscuous mode [ 253.112069][ T7664] veth1_vlan: left promiscuous mode [ 253.133632][ T7664] veth0_vlan: left promiscuous mode [ 253.434267][ T5864] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 253.446050][ T5864] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 253.462232][ T5864] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 253.473635][ T5864] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 253.482322][ T5864] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 253.602445][T12356] netlink: 'syz.3.1762': attribute type 10 has an invalid length. [ 253.726928][ T5864] Bluetooth: hci2: command tx timeout [ 253.921676][ T7664] team0 (unregistering): Port device team_slave_1 removed [ 253.965514][ T7664] team0 (unregistering): Port device team_slave_0 removed [ 254.718106][T12314] chnl_net:caif_netlink_parms(): no params data found [ 254.928121][T12376] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 255.007646][ T5864] Bluetooth: hci1: command tx timeout [ 255.117265][T12314] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.124445][T12314] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.136750][T12314] bridge_slave_0: entered allmulticast mode [ 255.144812][T12314] bridge_slave_0: entered promiscuous mode [ 255.197322][T12314] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.209441][T12314] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.219664][T12314] bridge_slave_1: entered allmulticast mode [ 255.229033][T12314] bridge_slave_1: entered promiscuous mode [ 255.361705][T12314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.384544][T12314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.404325][T12391] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1771'. [ 255.547274][T12314] team0: Port device team_slave_0 added [ 255.566309][ T5864] Bluetooth: hci3: command tx timeout [ 255.615920][T12403] netlink: 'syz.0.1774': attribute type 1 has an invalid length. [ 255.628449][T12403] netlink: 'syz.0.1774': attribute type 3 has an invalid length. [ 255.633110][T12314] team0: Port device team_slave_1 added [ 255.642420][T12403] netlink: 'syz.0.1774': attribute type 235 has an invalid length. [ 255.661239][T12405] netlink: 'syz.0.1774': attribute type 1 has an invalid length. [ 255.676835][T12405] netlink: 'syz.0.1774': attribute type 3 has an invalid length. [ 255.704940][T12405] netlink: 'syz.0.1774': attribute type 235 has an invalid length. [ 255.717884][ T7664] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.779765][T12314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.793622][T12314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.820311][T12314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.827412][ T5864] Bluetooth: hci2: command tx timeout [ 255.896957][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.962260][ T7664] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.979857][T12314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.988619][T12314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.993481][T12417] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1777'. [ 256.015415][T12314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.161458][ T7664] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.196513][T12425] netlink: 'syz.0.1779': attribute type 1 has an invalid length. [ 256.204294][T12425] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1779'. [ 256.225339][T12423] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1778'. [ 256.333899][T12314] hsr_slave_0: entered promiscuous mode [ 256.353810][T12314] hsr_slave_1: entered promiscuous mode [ 256.373779][T12314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 256.393441][T12314] Cannot create hsr debugfs directory [ 256.412496][T12347] chnl_net:caif_netlink_parms(): no params data found [ 256.431508][T12431] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1779'. [ 256.512558][ T7664] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.548888][T12336] chnl_net:caif_netlink_parms(): no params data found [ 256.988963][T12336] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.996459][T12336] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.003784][T12336] bridge_slave_0: entered allmulticast mode [ 257.025401][T12336] bridge_slave_0: entered promiscuous mode [ 257.052852][T12460] netlink: 'syz.0.1786': attribute type 10 has an invalid length. [ 257.083105][T12460] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1786'. [ 257.097263][ T5864] Bluetooth: hci1: command tx timeout [ 257.105693][T12347] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.113835][T12347] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.121429][T12347] bridge_slave_0: entered allmulticast mode [ 257.129472][T12347] bridge_slave_0: entered promiscuous mode [ 257.137165][T12336] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.144522][T12336] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.152783][T12336] bridge_slave_1: entered allmulticast mode [ 257.160156][T12336] bridge_slave_1: entered promiscuous mode [ 257.227154][T12460] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 257.239896][T12347] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.257838][T12347] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.265139][T12347] bridge_slave_1: entered allmulticast mode [ 257.282724][T12347] bridge_slave_1: entered promiscuous mode [ 257.427258][T12347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.444207][T12336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.467537][T12336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.493232][T12347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.547865][ T7664] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.647864][ T5864] Bluetooth: hci3: command tx timeout [ 257.691247][T12336] team0: Port device team_slave_0 added [ 257.707948][T12336] team0: Port device team_slave_1 added [ 257.737188][ T7664] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.768106][T12347] team0: Port device team_slave_0 added [ 257.807953][T12480] bond0: (slave team0): Releasing backup interface [ 257.828689][T12480] team0 (unregistering): left promiscuous mode [ 257.835030][T12480] team_slave_0: left promiscuous mode [ 257.851443][T12480] team_slave_1: left promiscuous mode [ 257.866390][T12480] geneve0: left promiscuous mode [ 257.876483][T12480] team0 (unregistering): left allmulticast mode [ 257.882890][T12480] team_slave_0: left allmulticast mode [ 257.889091][ T5864] Bluetooth: hci2: command tx timeout [ 257.895478][T12480] team_slave_1: left allmulticast mode [ 257.905467][T12480] geneve0: left allmulticast mode [ 257.934968][T12480] team0 (unregistering): Port device team_slave_0 removed [ 257.954813][T12480] team0 (unregistering): Port device team_slave_1 removed [ 257.968912][T12480] team0 (unregistering): Port device geneve0 removed [ 258.120561][ T7664] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.143921][T12347] team0: Port device team_slave_1 added [ 258.209455][T12336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.230910][T12336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.267532][T12336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.356080][ T7664] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.380943][T12336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.389078][T12336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.415477][T12336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.449294][T12347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.456351][T12347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.485315][T12347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.498259][T12503] netlink: 'syz.0.1799': attribute type 21 has an invalid length. [ 258.595637][T12347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.606728][T12347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.633461][T12347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.701423][T12510] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1802'. [ 258.719483][T12336] hsr_slave_0: entered promiscuous mode [ 258.732875][T12336] hsr_slave_1: entered promiscuous mode [ 258.742259][T12336] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 258.756917][T12336] Cannot create hsr debugfs directory [ 258.763193][T12507] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1801'. [ 258.780454][T12508] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1801'. [ 258.843924][T12513] IPVS: set_ctl: invalid protocol: 58 172.30.1.1:20004 [ 258.934122][T12517] netlink: 'syz.0.1805': attribute type 1 has an invalid length. [ 258.943100][T12517] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1805'. [ 258.994510][T12347] hsr_slave_0: entered promiscuous mode [ 259.002422][T12347] hsr_slave_1: entered promiscuous mode [ 259.017050][T12347] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.024661][T12347] Cannot create hsr debugfs directory [ 259.032450][T12526] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1806'. [ 259.096751][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 259.167682][ T5864] Bluetooth: hci1: command tx timeout [ 259.352102][ T7664] bridge_slave_1: left allmulticast mode [ 259.359666][ T7664] bridge_slave_1: left promiscuous mode [ 259.369959][ T7664] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.420935][ T7664] bridge_slave_0: left allmulticast mode [ 259.438055][ T7664] bridge_slave_0: left promiscuous mode [ 259.444536][ T7664] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.472744][ T7664] bridge_slave_1: left allmulticast mode [ 259.486545][ T7664] bridge_slave_1: left promiscuous mode [ 259.492335][ T7664] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.525929][ T7664] bridge_slave_0: left allmulticast mode [ 259.536647][ T7664] bridge_slave_0: left promiscuous mode [ 259.542601][ T7664] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.728972][ T5864] Bluetooth: hci3: command tx timeout [ 259.978497][ T5864] Bluetooth: hci2: command tx timeout [ 260.005087][ T7664] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.021622][ T7664] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.031702][ T7664] bond0 (unregistering): Released all slaves [ 260.319035][ T7664] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.331196][ T7664] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.341236][ T7664] bond0 (unregistering): Released all slaves [ 260.397406][T12547] tipc: Enabled bearer , priority 0 [ 260.537593][T12314] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 260.641770][T12314] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 260.744032][T12314] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 260.824037][T12569] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1814'. [ 260.859820][T12314] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 261.068841][T12579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.246999][ T5864] Bluetooth: hci1: command tx timeout [ 261.255339][T12314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.298270][T12314] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.391369][ T7672] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.398622][ T7672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.439291][ T7672] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.446636][ T7672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.631062][T12592] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1819'. [ 261.675031][T12592] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 261.807336][ T5864] Bluetooth: hci3: command tx timeout [ 261.831397][T12600] validate_nla: 1 callbacks suppressed [ 261.831409][T12600] netlink: 'syz.3.1821': attribute type 12 has an invalid length. [ 261.846018][T12600] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1821'. [ 261.888236][T12602] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1822'. [ 261.904333][ T7664] hsr_slave_0: left promiscuous mode [ 261.917061][ T7664] hsr_slave_1: left promiscuous mode [ 261.933606][ T7664] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.941191][ T7664] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.949377][T12604] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1822'. [ 261.959525][ T7664] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.967576][ T7664] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.981759][ T7664] hsr_slave_0: left promiscuous mode [ 261.992454][ T7664] hsr_slave_1: left promiscuous mode [ 261.995710][T12606] openvswitch: netlink: IPv4 tunnel dst address is zero [ 261.998647][ T7664] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.013631][ T7664] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.023772][ T7664] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.032251][ T7664] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.071209][ T7664] veth1_macvtap: left promiscuous mode [ 262.077921][ T7664] veth0_macvtap: left promiscuous mode [ 262.083857][ T7664] veth1_vlan: left promiscuous mode [ 262.089271][ T7664] veth0_vlan: left promiscuous mode [ 262.095279][ T7664] veth1_macvtap: left promiscuous mode [ 262.101033][ T7664] veth0_macvtap: left promiscuous mode [ 262.107188][ T7664] veth1_vlan: left promiscuous mode [ 262.112543][ T7664] veth0_vlan: left promiscuous mode [ 262.657602][ T7664] team0 (unregistering): Port device team_slave_1 removed [ 262.700398][ T7664] team0 (unregistering): Port device team_slave_0 removed [ 263.459102][ T7664] team0 (unregistering): Port device team_slave_1 removed [ 263.497886][ T7664] team0 (unregistering): Port device team_slave_0 removed [ 263.919019][T12607] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1823'. [ 264.241475][T12347] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 264.257884][T12618] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1827'. [ 264.281053][T12347] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 264.333947][T12347] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 264.363251][T12347] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 264.512643][T12314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.525591][T12336] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 264.554153][T12336] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 264.572645][T12336] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 264.599754][T12336] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 264.797733][T12314] veth0_vlan: entered promiscuous mode [ 264.845381][T12314] veth1_vlan: entered promiscuous mode [ 264.856029][T12644] syzkaller1: entered promiscuous mode [ 264.862189][T12644] syzkaller1: entered allmulticast mode [ 265.001919][T12347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.029367][T12336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.042960][T12314] veth0_macvtap: entered promiscuous mode [ 265.090899][T12347] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.103457][T12314] veth1_macvtap: entered promiscuous mode [ 265.129996][ T7664] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.137218][ T7664] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.174000][T12336] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.202647][ T7664] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.209885][ T7664] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.282027][ T7650] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.289255][ T7650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.350774][T12314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.369297][ T7650] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.376636][ T7650] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.424392][T12658] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] SMP KASAN PTI [ 265.436334][T12658] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027] [ 265.444758][T12658] CPU: 1 UID: 0 PID: 12658 Comm: syz.0.1836 Not tainted 6.16.0-rc4-syzkaller-00136-g3c78f91e82d6 #0 PREEMPT(full) [ 265.457092][T12658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 265.467143][T12658] RIP: 0010:qdisc_tree_reduce_backlog+0x223/0x480 [ 265.473564][T12658] Code: 89 ef e8 a0 17 ab f8 4d 89 ef 85 db 74 0d e8 c4 94 47 f8 4c 89 f5 e9 88 00 00 00 48 8b 6d 00 48 8d 45 20 48 89 c3 48 c1 eb 03 <42> 80 3c 33 00 48 89 04 24 74 0d 48 8b 3c 24 e8 69 17 ab f8 48 8b [ 265.493262][T12658] RSP: 0018:ffffc900054ef128 EFLAGS: 00010202 [ 265.499328][T12658] RAX: 0000000000000020 RBX: 0000000000000004 RCX: 0000000000000002 [ 265.507381][T12658] RDX: ffff88807d230000 RSI: 0000000000000000 RDI: 0000000000000000 [ 265.515345][T12658] RBP: 0000000000000000 R08: ffff88807d230000 R09: 0000000000000002 [ 265.523313][T12658] R10: 00000000ffffffff R11: 0000000000000002 R12: 00000000000b0002 [ 265.531275][T12658] R13: ffff88807ba14000 R14: dffffc0000000000 R15: ffff88807ba14000 [ 265.539240][T12658] FS: 00007f800af746c0(0000) GS:ffff888125d1d000(0000) knlGS:0000000000000000 [ 265.548251][T12658] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 265.554822][T12658] CR2: 00007f800af72fb8 CR3: 0000000027918000 CR4: 00000000003526f0 [ 265.563048][T12658] Call Trace: [ 265.566324][T12658] [ 265.569253][T12658] ? qdisc_tree_reduce_backlog+0x3c/0x480 [ 265.574966][T12658] hhf_change+0x764/0xad0 [ 265.579288][T12658] ? __pfx_hhf_change+0x10/0x10 [ 265.584130][T12658] ? __raw_spin_lock_init+0x45/0x100 [ 265.589408][T12658] ? qdisc_alloc+0x7a1/0xaa0 [ 265.594000][T12658] ? __pfx_hhf_init+0x10/0x10 [ 265.598670][T12658] hhf_init+0x213/0x950 [ 265.602826][T12658] ? __pfx_hhf_init+0x10/0x10 [ 265.607538][T12658] qdisc_create+0x7a9/0xea0 [ 265.612036][T12658] tc_modify_qdisc+0x1426/0x2010 [ 265.616995][T12658] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 265.622389][T12658] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 265.627683][T12658] rtnetlink_rcv_msg+0x77c/0xb70 [ 265.632621][T12658] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 265.637983][T12658] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 265.643429][T12658] ? ref_tracker_free+0x63a/0x7d0 [ 265.648507][T12658] ? __copy_skb_header+0xa7/0x550 [ 265.653525][T12658] ? __pfx_ref_tracker_free+0x10/0x10 [ 265.658909][T12658] netlink_rcv_skb+0x205/0x470 [ 265.663679][T12658] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 265.669128][T12658] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 265.674405][T12658] ? netlink_deliver_tap+0x2e/0x1b0 [ 265.679594][T12658] ? netlink_deliver_tap+0x2e/0x1b0 [ 265.684794][T12658] netlink_unicast+0x759/0x8e0 [ 265.689577][T12658] netlink_sendmsg+0x805/0xb30 [ 265.694357][T12658] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.699652][T12658] ? aa_sock_msg_perm+0x94/0x160 [ 265.704608][T12658] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 265.709886][T12658] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.715164][T12658] __sock_sendmsg+0x219/0x270 [ 265.719855][T12658] ____sys_sendmsg+0x505/0x830 [ 265.725480][T12658] ? __pfx_____sys_sendmsg+0x10/0x10 [ 265.730780][T12658] ? import_iovec+0x74/0xa0 [ 265.735380][T12658] ___sys_sendmsg+0x21f/0x2a0 [ 265.740086][T12658] ? __pfx____sys_sendmsg+0x10/0x10 [ 265.745295][T12658] ? __fget_files+0x2a/0x420 [ 265.749901][T12658] ? __fget_files+0x3a0/0x420 [ 265.754611][T12658] __x64_sys_sendmsg+0x19b/0x260 [ 265.759581][T12658] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 265.765061][T12658] ? rcu_is_watching+0x15/0xb0 [ 265.769828][T12658] ? do_syscall_64+0xbe/0x3b0 [ 265.774517][T12658] do_syscall_64+0xfa/0x3b0 [ 265.779023][T12658] ? lockdep_hardirqs_on+0x9c/0x150 [ 265.784221][T12658] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.790283][T12658] ? clear_bhb_loop+0x60/0xb0 [ 265.794953][T12658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.800840][T12658] RIP: 0033:0x7f800a18e929 [ 265.805269][T12658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.824885][T12658] RSP: 002b:00007f800af74038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 265.833455][T12658] RAX: ffffffffffffffda RBX: 00007f800a3b6080 RCX: 00007f800a18e929 [ 265.841467][T12658] RDX: 0000000004008000 RSI: 0000200000000200 RDI: 000000000000000a [ 265.849468][T12658] RBP: 00007f800a210b39 R08: 0000000000000000 R09: 0000000000000000 [ 265.857447][T12658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 265.865410][T12658] R13: 0000000000000000 R14: 00007f800a3b6080 R15: 00007ffd78c8e348 [ 265.873391][T12658] [ 265.876408][T12658] Modules linked in: [ 265.880478][T12658] ---[ end trace 0000000000000000 ]--- [ 265.886038][T12658] RIP: 0010:qdisc_tree_reduce_backlog+0x223/0x480 [ 265.892522][T12658] Code: 89 ef e8 a0 17 ab f8 4d 89 ef 85 db 74 0d e8 c4 94 47 f8 4c 89 f5 e9 88 00 00 00 48 8b 6d 00 48 8d 45 20 48 89 c3 48 c1 eb 03 <42> 80 3c 33 00 48 89 04 24 74 0d 48 8b 3c 24 e8 69 17 ab f8 48 8b [ 265.912784][T12658] RSP: 0018:ffffc900054ef128 EFLAGS: 00010202 [ 265.918899][T12658] RAX: 0000000000000020 RBX: 0000000000000004 RCX: 0000000000000002 [ 265.926906][T12658] RDX: ffff88807d230000 RSI: 0000000000000000 RDI: 0000000000000000 [ 265.934897][T12658] RBP: 0000000000000000 R08: ffff88807d230000 R09: 0000000000000002 [ 265.942931][T12658] R10: 00000000ffffffff R11: 0000000000000002 R12: 00000000000b0002 [ 265.950931][T12658] R13: ffff88807ba14000 R14: dffffc0000000000 R15: ffff88807ba14000 [ 265.958922][T12658] FS: 00007f800af746c0(0000) GS:ffff888125d1d000(0000) knlGS:0000000000000000 [ 265.967880][T12658] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 265.974557][T12658] CR2: 00007f800af72fb8 CR3: 0000000027918000 CR4: 00000000003526f0 [ 265.982753][T12658] Kernel panic - not syncing: Fatal exception in interrupt [ 265.990189][T12658] Kernel Offset: disabled [ 265.994516][T12658] Rebooting in 86400 seconds..