last executing test programs: 1m5.679125697s ago: executing program 0 (id=383): syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x3, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, @broadcast=0xac14140a, @multicast1}, "040022ebffffffff"}}}}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) (async) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_spirange={0x2, 0x10, 0x0, 0xffffffff}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) listen(r1, 0x5a) close(0x3) (async) close(0x3) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000d0426bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001404028005002c00010000000800040000000000"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000d0426bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001404028005002c00010000000800040000000000"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 54.222835356s ago: executing program 0 (id=383): syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x3, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, @broadcast=0xac14140a, @multicast1}, "040022ebffffffff"}}}}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) (async) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_spirange={0x2, 0x10, 0x0, 0xffffffff}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) listen(r1, 0x5a) close(0x3) (async) close(0x3) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000d0426bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001404028005002c00010000000800040000000000"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000d0426bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001404028005002c00010000000800040000000000"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 42.574227535s ago: executing program 0 (id=383): syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x3, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, @broadcast=0xac14140a, @multicast1}, "040022ebffffffff"}}}}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) (async) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_spirange={0x2, 0x10, 0x0, 0xffffffff}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) listen(r1, 0x5a) close(0x3) (async) close(0x3) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000d0426bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001404028005002c00010000000800040000000000"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000d0426bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001404028005002c00010000000800040000000000"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 31.97785634s ago: executing program 0 (id=383): syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x3, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, @broadcast=0xac14140a, @multicast1}, "040022ebffffffff"}}}}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) (async) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_spirange={0x2, 0x10, 0x0, 0xffffffff}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) listen(r1, 0x5a) close(0x3) (async) close(0x3) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000d0426bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001404028005002c00010000000800040000000000"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000d0426bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001404028005002c00010000000800040000000000"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 20.955576026s ago: executing program 0 (id=383): syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x3, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, @broadcast=0xac14140a, @multicast1}, "040022ebffffffff"}}}}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) (async) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_spirange={0x2, 0x10, 0x0, 0xffffffff}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) listen(r1, 0x5a) close(0x3) (async) close(0x3) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000d0426bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001404028005002c00010000000800040000000000"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000d0426bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001404028005002c00010000000800040000000000"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 10.118489888s ago: executing program 0 (id=383): syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x3, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, @broadcast=0xac14140a, @multicast1}, "040022ebffffffff"}}}}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) (async) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_spirange={0x2, 0x10, 0x0, 0xffffffff}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) listen(r1, 0x5a) close(0x3) (async) close(0x3) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000d0426bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001404028005002c00010000000800040000000000"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000d0426bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001404028005002c00010000000800040000000000"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.090624147s ago: executing program 4 (id=1135): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0x61, 0x7, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x20, 0x40, 0x9, 0x7}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x6}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x4}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x6}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x4}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x9}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x6}, {}, {}, {0x18, 0x6, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000003c0)='ns/pid_for_children\x00') sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x439, 0xffffffff, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, 0x9801}, [@IFLA_NET_NS_FD={0x8, 0x1c, r10}]}, 0x28}}, 0x20008094) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@RTM_NEWMDB={0x58, 0x54, 0x8, 0x70bd28, 0x25dfdbfc, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x1, 0x0, 0x2, {@in6_addr=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x18f67}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x1, 0x1, 0x0, {@ip4=@broadcast, 0x800}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd70000000000005000800180001801400020073797a5f74756e000000000000000000140003800400040008000200000003"], 0x40}}, 0x0) 2.831253276s ago: executing program 1 (id=1137): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x24, r2, 0x121, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVKEY={0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20008040) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005400e501000000000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) connect$ax25(r4, &(0x7f0000000200)={{0x3, @bcast, 0x7}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x24, r2, 0x121, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVKEY={0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20008040) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}}, 0x0) (async) socket(0x10, 0x80002, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005400e501000000000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) connect$ax25(r4, &(0x7f0000000200)={{0x3, @bcast, 0x7}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) (async) 2.460740301s ago: executing program 1 (id=1138): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket(0x10, 0x803, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f00000001c0)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000200"/104], 0x68) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x0, 0x810, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x804}, 0xc014) getsockname$packet(r3, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="54000000100037042cbd7000ffdbdf2500000000", @ANYRES32=r4, @ANYBLOB="83450500000000002c0012800900010069706970000000001c00028006000f000200000008000100", @ANYRES32=r1, @ANYBLOB="050005004700000008001468c4f188c1b0ed0191dd353b2f07c31436912c4d894fb0782cd71e561c9a9b232321b84ce4f4f573c9ad80afbcc3d7a96e2a69492530cb63d3c61fcebfb6bda450d75d08a402bce135ba31b9cca0bbfb8e601ce2"], 0x54}}, 0x0) sendmmsg$inet(r2, &(0x7f0000000d40)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x2e}, @multicast1}}}], 0x20}}], 0x1, 0x80) 2.302326171s ago: executing program 1 (id=1139): unshare(0x42000000) mmap(&(0x7f0000164000/0x2000)=nil, 0x2000, 0x1000005, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x769f00b363895638, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$l2tp(0x2, 0x2, 0x73) r0 = socket$packet(0x11, 0x2, 0x300) sendmsg(r0, &(0x7f0000003b40)={&(0x7f0000000100)=@hci={0x1f, 0x1, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x24}, 0x28048801) unshare(0x62040200) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x20000400) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000200)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r4, @ANYBLOB='/'], 0x20) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0xb4, 0x1, 0x9, 0x3, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xe}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x401}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x48, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1ba}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x1}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x3}, 0x4040030) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000100)={0x7, 'vlan0\x00', {0x6}, 0xa}) close(0xffffffffffffffff) 2.216587823s ago: executing program 2 (id=1141): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000580)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x1c, &(0x7f0000000540)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x8, 0x8, &(0x7f0000000080)="b800000500000000", &(0x7f0000000140)=""/8, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1}, 0x50) 1.967474076s ago: executing program 3 (id=1142): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) (async) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000000)={0x2, 0x4e24, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1c000000000000000000000007000000440c050b"], 0x20}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES32=r1], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000010000c0000000000000000000000000a6c000000060a0104000000000000000002000000400004803c0001800b00010065787468647200002c000280050002000101000008000340000000000800044000000001080006400000000208000140000000130c00010073797a30000000000900020073797a32"], 0x94}}, 0x0) 1.844802459s ago: executing program 2 (id=1143): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r5], 0x54}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r5], 0x54}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r8, @ANYBLOB="01"], 0x20}, 0x1, 0x0, 0x0, 0x40081}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r10, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x2000c011) sendmsg$inet(r10, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)}, 0x0) (async) sendmsg$inet(r10, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)}, 0x0) recvmsg(r9, 0x0, 0x0) r11 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) close(r11) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000008300), r12) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r12, 0x0, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r12, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r13 = socket$inet6_udp(0xa, 0x2, 0x0) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r14, 0x401054d5, &(0x7f00000000c0)={0x5, &(0x7f0000000000)=[{0x15, 0x0, 0x3, 0x10000}, {0x0, 0x4, 0xfd}, {}, {}, {0x6, 0x3, 0x0, 0xffffffff}]}) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000c80)={'lo\x00'}) 1.84066506s ago: executing program 4 (id=1144): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={r2, 0xfe00, 0xc, 0xfffffffb, 0x8, 0x4}, 0x14) 1.706202839s ago: executing program 3 (id=1145): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000100000000000000000000d24c4cf60d8b90be0a05111de896ecacae4eb5f3bb1ef64579000000000000000000010000000900010073797a30000000002c000000fc0a010100000000000000000100000a0900030073797a31000000000900010073797a30000000002c000000060a010400000000000000000100000018000480140001800b00010072656a656374000004000280140000001100010000000000000000000000000a"], 0xa0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x4, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xa000}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0xfffffffa}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) syz_emit_ethernet(0x52, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @broadcast}, @redirect={0x5, 0x0, 0x0, @private=0xa010102, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x65, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@rr={0x7, 0x13, 0x0, [@multicast2, @private, @broadcast, @dev={0xac, 0x14, 0x14, 0x1e}]}]}}}}}}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0x1a) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000000)=0x18, 0x4) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x4c}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$unix(0x1, 0x5, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140100002c0001000000000000000000040100800c00098008"], 0x114}], 0x1}, 0x0) 1.647938333s ago: executing program 2 (id=1146): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x42, 0x42, 0x6, [@volatile={0xd, 0x0, 0x0, 0x9, 0x3}, @var={0x4, 0x0, 0x0, 0xe, 0x1, 0x1}, @datasec={0xa, 0x2, 0x0, 0xf, 0x2, [{0x1, 0xa, 0x597}, {0x1, 0x1, 0x5}], "ce89"}]}, {0x0, [0x5f, 0x30, 0x2e, 0x30]}}, &(0x7f0000000880)=""/4082, 0x62, 0xff2, 0x1, 0x4, 0x0, @void, @value}, 0x28) (async) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xf, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x6, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xbb}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, &(0x7f0000000280)="f5b91efe6e56b5b79727325f1dff56599dd27355ab8692968af98abe706a5cbf8d6a99fbe658f90ff3b8c9909a576f69a2f17d32ed4c2484cac2a34fb467fcbf262a1c7f5ff3c88842e8e3344fd3cd3085b2d22136b333d0ab85c0a1f342a2ddda820554da70f42aff544adf4be3bd23a3eca4e7d5b7460acbc3fd62b481e757d64912893dbdae2fd165e33d0cbd312da9e7cffe39ae47470dad946a1088fefd6976212d8367b732b8250b82bc57a99c8d228b8cd89d490125eff16a3f4d4d002969dcf48b"}, 0x20) 1.511048347s ago: executing program 2 (id=1147): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000340)) sendmsg$nl_route(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001bc0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_PROTO={0x5}]}}}]}, 0x44}}, 0x0) 1.398175382s ago: executing program 3 (id=1148): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r2 = socket$inet6(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10) sendto$inet6(r2, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @info_request={0x3}}}}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x18, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.365068607s ago: executing program 2 (id=1149): socket(0x40000000015, 0x5, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udplite(0xa, 0x2, 0x88) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x9, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611228000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (rerun: 32) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000200)="09975fc56bb27d67192118f773d653bb3ea535b76041b39699d99ba5e7b3f3c052614ff4d6f0e49133b4c0fcfe4c825db024e9f62fcda24ed9782c867b93b896f395b35f1f40f84c4635350b1e5f157d59aa82e14a6929773072201f723e46177f800b2ce86bac54515cff9c3940cba2b848b2efd40777b8b8bce7e2ad4976e497e8814cee98020c3b73b6ebfdd15e78cd96b0dc1cc847e35be0812345fe9abea4dc3b058bb350c3d21b8c9aac38a5d1364eb7e7d628792f8560d235123954b822c90f67722c06f2debb0be15ae8e7b0d5cb20ff3e", &(0x7f0000000040)=""/73}, 0x20) 1.265845332s ago: executing program 3 (id=1150): bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8b2b, &(0x7f0000000040)={'virt_wifi0\x00', @link_local}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c0002400000000000000001090001007379"], 0x80}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a118001500", 0x20}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYRESHEX=r1], 0xfffffefc) r3 = socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000880)=ANY=[@ANYBLOB="e90c610faca20180c20000000800450000241000e0000011907800000000000000000000000000109078a20c000100000000ea45a95e7b9bddf2b8f8a186497c23935311b471ef484e46269db4e98b411b75f1bf45"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000300004"], 0x84}}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) r4 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x4c, 0x2c, 0x100, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc, 0x3}, {}, {0x3}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x2, 0xd}}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfff2, 0x11}}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x9e}}]}, 0x4c}}, 0x20040054) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000200)={0x0, 0x1}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000380)={r7, @in6={{0xa, 0x4e20, 0x6, @empty, 0x2}}, 0x7, 0x7, 0xf9, 0x2, 0x6, 0x7ff, 0xfc}, &(0x7f0000000480)=0x9c) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) getsockname$packet(r6, 0x0, &(0x7f0000001480)) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000780)=@newtaction={0xec, 0x30, 0x1, 0x70bd2d, 0x0, {0x0, 0x0, 0x6a00}, [{0xd8, 0x1, [@m_mirred={0xd4, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x20000080, 0x10000000, 0x0, 0xfffffffd}, 0x1, r9}}]}, {0x85, 0xa, "e8a07c839671f58d1f1724aa7c09791e195ebce89cdb7c4352c98357f1d8be3fe8d144b4cc47a2ac04bc576940229c4193880e1bd10d8506c6fa04152efff3801aae80710597629a01cd4c2d72e4fa5e99021ff558fc1a2ba3ec8f0c88503738ac5d70d333732265db577f312c92dfa5c0e17829e72f4715b03e4d9426808a0188"}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xec}}, 0x0) bind$packet(r4, &(0x7f00000001c0)={0x11, 0xf5, r9, 0x1, 0x9}, 0x14) write$tun(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="00009300ffffffffffffaaaaaaaaaa00a14f08004500001c00000000002f907864010102e0000001a0004e208742b295b2ce91d967367882422312cf1311e607c74c0145b88d07a1fe4c0ef9d8b627fee9c8c7a7c107e4820d9668e66092551d899fd0e03d617dadd5a299350fcc052adc67c54abfa8993bd3428671511849dc1d241e334f7795808d472ed899f28a5cf43a45fc733ab2d3702d922276d9c33f6ea204bfe1ba83ce249dcc95958391a791f6dd08786900d2b2a9a4e25c94aed9c04ec6d433bdad2cf52d0fbd96ef800f86c63de493345d993449"], 0x2e) 1.113748784s ago: executing program 2 (id=1151): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000100)=0xe00) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000600)={{0x0, 0x6, 0x8, 0x3, 0xd40, 0x1, 0x9, 0x8ed6, 0xc96, 0x0, 0x1, 0x6, 0x4, 0x4174f8cc, 0x7}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000ae300)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}], 0x0, "850fea19e7be99"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f00000af300)={0x0, 0x0, "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", "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"}) r12 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x800, 0x0, 0x2, 0x1, 0x0, 0x7}, 0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r12, 0xd000943d, &(0x7f00000ce440)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {r6}], 0xa, "9ab1bf477a6ea5"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000b0300)={{0x0, 0x6, 0x6, 0x1800, 0x10001, 0xc0000000000, 0x5, 0x4, 0x2, 0xa4f, 0x8, 0x401, 0x3, 0x3, 0xf3}}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x800, 0x0, 0x2, 0x1, 0x0, 0x7}, 0x20) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000b16c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000ce440)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xa, "9ab1bf477a6ea5"}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="4bce39e066000a006172158ca9243a3d0e59b7000000000000000000000000000000000000000ed7e608f981d79b49523442885115878e1ffcc5765b38bfc6c78e5cf256531b931f2f0df48dca564cbd77ac51b4294aaf19d5fe7311fe6a0ca6cda7eda6efc1cf20f6923a4848be94ef6ea3a1b73aac28d1cc8c91ac1c723383c764a0523bd6c4", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r18 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r18, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r19 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r19, &(0x7f0000000000), 0xffffff6a) sendfile(r18, r19, 0x0, 0xffffffff000) recvmmsg(r18, &(0x7f0000005c00)=[{{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001500)=""/136, 0x88}], 0x2e}, 0xffffffff}], 0x1, 0x32, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r18, 0xc0709411, &(0x7f00000000c0)={{0x0, 0x9, 0x8b, 0xfff, 0x79, 0x6, 0x87d, 0x5, 0xdcfa, 0x1a4, 0x0, 0x19, 0x9, 0x1000, 0x5}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) r20 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r20, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x800, 0x0, 0x2, 0x1, 0x0, 0x7}, 0x20) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000b16c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r20, 0xd000943d, &(0x7f00000ce440)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r21}, {}, {}, {}, {}, {}, {}, {0x0, r17}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0xa, "9ab1bf477a6ea5"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000b1300)) 840.078595ms ago: executing program 4 (id=1152): r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x80000) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000080)={0x1, 'macvtap0\x00', {}, 0x5a0}) recvmmsg(r0, &(0x7f0000001880)=[{{&(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000140)=""/182, 0xb6}, {&(0x7f0000000200)=""/161, 0xa1}, {&(0x7f00000002c0)=""/152, 0x98}, {&(0x7f0000000380)=""/139, 0x8b}, {&(0x7f0000000440)=""/146, 0x92}, {&(0x7f0000000500)=""/2, 0x2}], 0x6}, 0x7}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/37, 0x25}, {&(0x7f0000000600)=""/171, 0xab}], 0x2, &(0x7f0000000700)=""/194, 0xc2}, 0x800c740}, {{&(0x7f0000000800)=@alg, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000880)=""/57, 0x39}, {&(0x7f00000008c0)=""/121, 0x79}, {&(0x7f0000000940)=""/97, 0x61}, {&(0x7f00000009c0)=""/51, 0x33}, {&(0x7f0000000a00)}], 0x5, &(0x7f0000000ac0)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b00)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000b80)=""/84, 0x54}, {&(0x7f0000000c00)=""/38, 0x26}, {&(0x7f0000000c40)=""/54, 0x36}, {&(0x7f0000000c80)=""/98, 0x62}, {&(0x7f0000000d00)=""/220, 0xdc}, {&(0x7f0000000e00)=""/210, 0xd2}, {&(0x7f0000000f00)=""/163, 0xa3}, {&(0x7f0000000fc0)=""/147, 0x93}, {&(0x7f0000001080)=""/255, 0xff}], 0x9}, 0x3}, {{&(0x7f0000001240)=@ax25={{0x3, @bcast}, [@default, @remote, @default, @netrom, @null, @netrom, @null, @netrom]}, 0x80, &(0x7f0000001500)=[{&(0x7f00000012c0)=""/74, 0x4a}, {&(0x7f0000001340)=""/107, 0x6b}, {&(0x7f00000013c0)=""/108, 0x6c}, {&(0x7f0000001440)=""/150, 0x96}], 0x4}, 0xde3}, {{&(0x7f0000001540)=@x25={0x9, @remote}, 0x80, &(0x7f0000001840)=[{&(0x7f00000015c0)=""/223, 0xdf}, {&(0x7f00000016c0)=""/119, 0x77}, {&(0x7f0000001740)=""/177, 0xb1}, {&(0x7f0000001800)}], 0x4}, 0x3dc}], 0x6, 0x162, &(0x7f0000001a00)={0x0, 0x3938700}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001a80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x1c, r1, 0x400, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040c40}, 0x1000) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg(r2, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000001b80)="92aeba815bacd1ab96484cf8834a74594ad0b6332ce8e0c1a7ca7a2f3ffcc884963644875c70f4146e6916a0571af7b82c58aa3135d427f8c60d831dc0471800a0581f", 0x43}, {&(0x7f0000001c00)="eaf091bf62f7acc0552a5c3c0a5709196b855bdc1369fbf4cf29307a63bb08b2d513a39a5122d11809efb6bec54cdccd30f5afc1bfad3b3905131cb8d298aa377dfdfd", 0x43}, {&(0x7f0000001c80)="6948c9a3c8067b2f32628b365ef0765fc224568e56", 0x15}, {&(0x7f0000001cc0)="24e7044a2626a2276926f012af8c351a5b9ba6b5da70a530568ccbca1f75d36daecaab122d4fe3f05fd0460acb2beecfc474e1007ff8230425bc737dc252041cb98ae7b1157ee20453fb61590dfe05974148f8bf3cdd6b64d79bfb808ccca722aa", 0x61}, {&(0x7f0000001d40)="c9b364e60e36a017ba76bee0bf2d84e06df81b11d0091b6e37c4860ddd514e67bbcaeacfa7aadb56d5a179003d9b1795fe8d01046ae275054a75f4adac307d8c36ad87624970168e250570cb80f525acebd818602ad61cdc8bca5efaae69f9c680958bcae2e343300496ae597f94de9486da04150404aa9fdbdab26565382cc704038910d310233bdf3a1b665a874affcfd37c4c6669dbde89c82e0b08c252d52fcfe8b45387485141", 0xa9}, {&(0x7f0000001e00)="43d525e51011716598d4550d7fe62dcc9afd5dc3248cda0d86e082581810cd6a468e812d89aaf595b33670c34080d1eba6346a9d9a07020fe2a7660a696543984960e5ed865f129bafe2a3330c70a103b7899f1381e5f90c6d4893ef407d18d4d87867aec8ea2b40e84f6039390c47d252f37b10ef0d24acdd7a99e001fca0f3c6548ec15663773c5ef22e10328313b17c3062b1a749e3fe94510165ea4b48c3da0f14323e503254b436b4a83ce087cb7752a0bcf438d19cab9f2f67ad41fd8be38e2aa190fbc4cbc7aa67d967481d0ac973a94dfd9c7a5c30fcbdd7f7860be8398c31f2d587214958ec10c393fe908daa4577dcbf32cb290dbb9338", 0xfc}, {&(0x7f0000001f00)="38257348aeb24239e3a822b078cca4d404ae18e9c9806234427da2c40bcc44", 0x1f}], 0x7, &(0x7f0000001fc0)=[{0x108, 0x114, 0x0, "9e10eaa878a1c38b7fbf32c05edd7cd938c9bbaf034e316bc98e1166c5343936bc33b6c7687f4daa0b1428867cc2a0f553c0418bfc9f5e3f7a84261650983812b36513ebc69e848b94feabdb8b112f5a2b6527dc0b4734f4fb0812124a6851f85c330619597ead05a4403868cb38c04b3c0f371b54f975ef9f8f13aeba9990d18d31926df31d21b9dde6a337418a544d6e1ffbc046f9fb330eb41049a2a6c60d662b334fdbdc31f5e66b7bca6b75a2013d7ae1495ba5e009a7dbffa1e43fa501074cec33b818b71868a05dea6bb96e7b36c903ca1182cff263b5d793f5ff29981e02798ecda11f39c8433d0d1bc7ec53b50f7afd"}, {0x58, 0x112, 0x7, "28429fe57faa9843c692f6100ef50d266ac7d3d82c5103ffecc25b523b7f26c7b95b6201f8c7b7c6a0069a9977c5b94c7c8b77d52eb20a3da533bb1d858e1f5117ae743aed0d25"}, {0x30, 0x109, 0x3, "902bc3327d315420b1143ef3408ec181f39aab3613823fb1d28e02"}], 0x190}}], 0x1, 0x4010) bind$inet(r2, &(0x7f00000021c0)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10) pipe(&(0x7f0000002200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048000}, 0x40000000) openat$tun(0xffffffffffffff9c, &(0x7f0000002340), 0x101100, 0x0) socket$l2tp(0x2, 0x2, 0x73) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000023c0), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000024c0)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002480)={&(0x7f0000002400)={0x50, r6, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'virt_wifi0\x00'}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x4004001) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002580)={r4, 0x58, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000025c0)={0x1b, 0x0, 0x0, 0x200, 0x0, r3, 0x3, '\x00', r7, r3, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000002700)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002680)={0x24, r1, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0xfffffff8}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0xef79}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002780), r4) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000002840)={&(0x7f0000002740), 0xc, &(0x7f0000002800)={&(0x7f00000027c0)={0x28, r8, 0x20, 0x5, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x81, 0x4c}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10011}, 0x20000801) socketpair(0x23, 0x6, 0x2b4f, &(0x7f0000002880)={0xffffffffffffffff}) connect$can_j1939(r9, &(0x7f00000028c0)={0x1d, r7, 0x0, {0x0, 0x1}, 0xfe}, 0x18) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000002900), 0x20000, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f0000002940)={'ip6erspan0\x00'}) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000002980)=0xfe0a, 0x4) ioctl$sock_qrtr_TIOCINQ(r9, 0x541b, &(0x7f00000029c0)) r11 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(r11, 0x80044943, &(0x7f0000002a00)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000002a40)=0x5, 0x4) 570.394534ms ago: executing program 4 (id=1153): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000300480000", @ANYRES32=r1, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c0007"], 0x40c}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x2, 0x1, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_address={0x5, 0x5, 0x2b, 0x0, 0x0, @in6={0xa, 0x4e20, 0xfffffffe, @private0={0xfc, 0x0, '\x00', 0x1}, 0x401}}]}, 0x50}}, 0x0) (async) sendmsg$key(r2, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x2, 0x1, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_address={0x5, 0x5, 0x2b, 0x0, 0x0, @in6={0xa, 0x4e20, 0xfffffffe, @private0={0xfc, 0x0, '\x00', 0x1}, 0x401}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x0, 0x890, 0xffffffffffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 323.676894ms ago: executing program 4 (id=1154): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @netrom}, [@remote, @rose, @default, @rose, @netrom, @rose, @default, @bcast]}, &(0x7f00000000c0)=0x48, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond_slave_1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000840)={0x2, 'veth0_to_team\x00', {0x720000}, 0x3ff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x2, 0x0) (async) r6 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f00000002c0)=r5, 0x161) sendmsg$inet(r6, &(0x7f0000000280)={&(0x7f0000000300)={0x2, 0x4e1f, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000000000000001"], 0x20, 0x5}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000300012800b00010065727370616e000020000280040012000500160002000000060018"], 0x50}}, 0x0) sendmsg$inet(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="e43a44209abd97cd2fbbc49cf9f14c006a871a08f72c54e361576558ecf2115c3819a49c06dd114336f515b85f7799d431025674c35582a0d519d90afdf664613af743918f0c707061eba367ed8d31f6cf633f4cbb81a2fca29d84fa4b1a362c48df887e482e85bc760bf956e016b695b460b38fc8b0cfdbab648f0ec471aecec7d8d3c49007cc7ae41b729a0dfaf5", 0x8f}, {&(0x7f0000000300)="67a369f79857d7e26081e52d9191c85ccbc731c8dd086910c3bd1d6ab2e370db56c24f704c9cc3af8b7f0a71a248d9326fce51855f47939fc5da924c8dfac032a5911060d67ab86b4a0e67fe613d508854e74f87e429e32409f5589ef7da8acdca7fb59d6602e1e8cb514a346f06e9d1bc4daf66f214e43273f936ecacc7358a159830dd86c64d5f871a9af204654036f0b352", 0x93}, {&(0x7f00000003c0)="9ea66e5976d882a8411f937f91147d7b90d63615a71292c6f5f9da3d7144dbc2babdff4022d50d0265ad9a2be855eba7e297fb6f21c3a275274aab9ba68121c46fa338b8a648822862b23e9f9f84281733f5170110f0834d5e6bd76cb8bfc717aa6d223d3d933875c47ff0f7e25808083380382741ee6f5e38604ec92181f35a0e130ce12de771bf3a46646070f2dda2527e284ef3a8", 0x96}, {&(0x7f0000000480)="7292bf1e1ae3b52f9e27e9eaadfe19fe4f2e514eaebfb7393b3c878ebdcbf193837f837d2d30801b3052d4aa3cc612993e3ca4e702c74555cf9153208c5c3235cc6d0eb025a645476f5fcae0", 0x4c}, {&(0x7f0000000280)="d0bb074c8813cc", 0x7}], 0x5, &(0x7f0000000600)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @broadcast}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@cipso={0x86, 0x27, 0x0, [{0x5, 0xd, "5c5ca81835ff68dab0d686"}, {0x5, 0xd, "4ef5100572ad7bfc093aea"}, {0x7, 0x7, "3a65f23da9"}]}]}}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@ssrr={0x89, 0x1b, 0x83, [@loopback, @empty, @private=0xa010101, @multicast2, @remote, @remote]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0xd0}, 0x4004000) (async) sendmsg$inet(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="e43a44209abd97cd2fbbc49cf9f14c006a871a08f72c54e361576558ecf2115c3819a49c06dd114336f515b85f7799d431025674c35582a0d519d90afdf664613af743918f0c707061eba367ed8d31f6cf633f4cbb81a2fca29d84fa4b1a362c48df887e482e85bc760bf956e016b695b460b38fc8b0cfdbab648f0ec471aecec7d8d3c49007cc7ae41b729a0dfaf5", 0x8f}, {&(0x7f0000000300)="67a369f79857d7e26081e52d9191c85ccbc731c8dd086910c3bd1d6ab2e370db56c24f704c9cc3af8b7f0a71a248d9326fce51855f47939fc5da924c8dfac032a5911060d67ab86b4a0e67fe613d508854e74f87e429e32409f5589ef7da8acdca7fb59d6602e1e8cb514a346f06e9d1bc4daf66f214e43273f936ecacc7358a159830dd86c64d5f871a9af204654036f0b352", 0x93}, {&(0x7f00000003c0)="9ea66e5976d882a8411f937f91147d7b90d63615a71292c6f5f9da3d7144dbc2babdff4022d50d0265ad9a2be855eba7e297fb6f21c3a275274aab9ba68121c46fa338b8a648822862b23e9f9f84281733f5170110f0834d5e6bd76cb8bfc717aa6d223d3d933875c47ff0f7e25808083380382741ee6f5e38604ec92181f35a0e130ce12de771bf3a46646070f2dda2527e284ef3a8", 0x96}, {&(0x7f0000000480)="7292bf1e1ae3b52f9e27e9eaadfe19fe4f2e514eaebfb7393b3c878ebdcbf193837f837d2d30801b3052d4aa3cc612993e3ca4e702c74555cf9153208c5c3235cc6d0eb025a645476f5fcae0", 0x4c}, {&(0x7f0000000280)="d0bb074c8813cc", 0x7}], 0x5, &(0x7f0000000600)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @broadcast}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@cipso={0x86, 0x27, 0x0, [{0x5, 0xd, "5c5ca81835ff68dab0d686"}, {0x5, 0xd, "4ef5100572ad7bfc093aea"}, {0x7, 0x7, "3a65f23da9"}]}]}}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@ssrr={0x89, 0x1b, 0x83, [@loopback, @empty, @private=0xa010101, @multicast2, @remote, @remote]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0xd0}, 0x4004000) syz_emit_ethernet(0xd7, &(0x7f0000000700)={@random="f4726c08117f", @broadcast, @val={@val={0x88a8, 0x3, 0x1, 0x2}, {0x8100, 0x3, 0x1, 0x4}}, {@x25={0x805, {0x1, 0x1, 0xf1, "adeb5a987cc6f2d113bf591a28a4d3acd54a82830b2084fa26e87b158407637cb138013bce8e6e65056e6dc50a3056188cafbdd370cd0e8c8ebd7efcc26af4d3ef6a3b8331b23a3f8a59d2e75b606d4476ed2e89f91567cf4fccb37223d08033d41cf7fd5d5eef2d578a0d21fc9e640151b5460f108935a52f8b2335deb28ccb99d4836416ee4469c9ab6f2dfe184c4c94a1bf51019a7c5342ff126f466f7aeac0cde865d30443eef5a441c39103288a2e72fc2d60e6d9d586df59fa2c58"}}}}, &(0x7f0000000800)={0x0, 0x3, [0xf61, 0x395, 0xf04, 0xf8d]}) 321.248393ms ago: executing program 1 (id=1155): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="622006"], 0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) sendto$llc(r0, &(0x7f0000000d80)="5ca02049a8825024892f61601e3137d09d6e5d0e54d55be9d6d460eb78e3eb94c0b3866b091d34dc3ed67172ae1e7f390d505c084609e4491d372fe4888a3c3e660cc6fc3fd9b97c6c923389653eb074d96a3f1768e30f818adf94780feeab011de24785dd6cf88777a7806c05d0ed88fa985d77aab6996fa1af1190d1620732d9f2f9712e1182b815f0d415c12e6c42021b43e26578db3f2b475ea0ebb199323d", 0xfffffda9, 0x0, &(0x7f0000000380), 0x10) 213.050883ms ago: executing program 3 (id=1156): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@enum={0x6}]}, {0x0, [0x0, 0x61, 0x61, 0x2e, 0x30, 0x61, 0x2e, 0x9d]}}, 0x0, 0x2e, 0x0, 0x1, 0x4, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006b113e000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000380)=""/76}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x5, 0x3, 0x84, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x5, 0x3, 0x84, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r1}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 165.042322ms ago: executing program 4 (id=1157): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000220c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="0000002100000000050000000000000095c333d4c0a3ecdd69086b8e4c36439a8808b90ea579cdf8bd475a470064827701f4169ebebecb5bba94f06f020fb64e5594a86f5f00000000000008c7533dc98a94008d7d2a7d2c23bc3f4cc1992aebd29fd21e95b3c7c49de340c24cb6ba1a33740825c424ecd87a3b02ae7840be900964b6948074a8f2ed867fd6601b0ca02215f4c2a5157135575fa1903abe92246853cb7cb868a3b2524a92bfa8aaeaf3ff3f08fb97ec0c126bfea903ef567bdf48aecb23342c8102732b7257f65b1f7d82adec836fd77d2f5c6e6c18ae428531d9e4d906b0a19827bffab9ced1e24e8f063d44fb76dd59e75486"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r6, 0x0, 0x11, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@ifindex, r4, 0x11, 0x0, 0x0, @void, @value=r3}, 0x20) mmap(&(0x7f000064e000/0x3000)=nil, 0x3000, 0x2000002, 0x810, r0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x4, 0x8, 0x6bf8}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) 106.32413ms ago: executing program 1 (id=1158): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)={0x98, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x44, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}]}, 0x98}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="440000001800010000000000000000000a000000000400000024000008000400", @ANYRES32=r1, @ANYBLOB="06001500080000001800168014"], 0x44}}, 0x44040) 653.313µs ago: executing program 1 (id=1159): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001180)=@raw={'raw\x00', 0x3c1, 0x3, 0x570, 0x0, 0xffffff80, 0x178, 0x0, 0x178, 0x4a0, 0x230, 0x258, 0x4a0, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x310, 0x358, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x9a, 0x64}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'hsr0\x00'}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ah={{0x30}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@delchain={0x3c, 0x64, 0xf31, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x9, 0xfff2}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS={0x8}]}}]}, 0x3c}}, 0x1000000) 0s ago: executing program 3 (id=1160): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0x2, 0x3, 0x10) r2 = socket$qrtr(0x2a, 0x2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$pptp(0x18, 0x1, 0x2) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000380)=0x8, 0x4) bind$pptp(r4, &(0x7f0000000040)={0x18, 0x2, {0x1, @remote}}, 0x40) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000001c0)=0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000640)={0x38, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r7}, @typed={0xc, 0xd5, 0x0, 0x0, @u64=0x8000000000000001}, @nested={0x14, 0x1, 0x0, 0x1, [@generic="38a5c0a0c25ece1a703d45d83f6241ec"]}]}, 0x38}], 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)={0x2, 0x400000000000003, 0x0, 0x8, 0x12, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_lifetime={0x4, 0x4, 0x0, 0x7}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x90}}, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) sendmsg$netlink(r0, &(0x7f0000000300)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfc, 0x1000}, 0xc, &(0x7f0000000180)=[{&(0x7f0000000080)={0x28, 0x15, 0x4, 0x70bd2d, 0x25dfdbff, "", [@nested={0x18, 0x3, 0x0, 0x1, [@typed={0x14, 0xd5, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}]}]}, 0x28}, {&(0x7f0000000340)=ANY=[@ANYBLOB="28000000150000520125bd7000fddbdf250400bd0008007b8004001f8028ed73bc3967a7d86e0000"], 0x28}, {&(0x7f00000004c0)={0x2e4, 0x1e, 0x800, 0x70bd25, 0x25dfdbfb, "", [@nested={0x1ae, 0x4b, 0x0, 0x1, [@generic="c53278e53edca98e83ec22fecc8e16338b27834537ea0bc8fcdcadb129335672abbe69c2380a0afb907c3967781a406a9363ce445d7e9392c0c3da1d95f5a02ce3d4025810a1c5e2fb1c818537621092c651864feb959ecf9b6ac90cf4edf09dabd54e514f8a2f5ae173407f3fc4878891b1ca6d45c98f8629b0803e8b1922642411760dc5eedbbee71269137d44c0a6bf7ce53fc9a3794c920d29fa173fbe0dbc60499e1bf15173559ff0d015726a7f", @nested={0x4, 0xeb}, @generic="889d4efd4dcfbbee67f2cf3fb49f24004649ac0929726107c71677f0108cd72061aa8ca2a1c590bf441153b4b165048c50136662af0715fcadf90aeb6b4a3e330aae741e4087128d8833da79ac3e3c80398f2542cdc121c5a9c7053c2a844b1d38b6724943b4fbc61f1cf83f53c8bee301d579740c26f2caaa6fdb9af26957593fc72dda84c2748f0e8198c927b55f1eab15deb1962473a382879c4c02f7683190d91806768eb80306fe436f", @nested={0x4, 0xc6}, @nested={0x4, 0x13b}, @generic="ee20a6615e60c6e307ff86bce917f15008e43ccf3acfcae9c42b9e114f838e5947ba7344e93d730febcf217ce518f41ddc38413e2c9f8aeea9efefc426f07a478ee2"]}, @typed={0xa, 0xf1, 0x0, 0x0, @str='#{-$[\x00'}, @nested={0x5d, 0x1f, 0x0, 0x1, [@nested={0x4, 0x15}, @typed={0x8, 0x48, 0x0, 0x0, @pid}, @typed={0x8, 0x8, 0x0, 0x0, @fd=r2}, @generic="34ac3991f4f0d9f11b226519e0fc8fcaaedb9719b52c3c49dc5dec3d50aa60e91807ceb089ef2b5013165ca2a8f07be1019c10e3dd8ec3f072cd01276faa9b19910e9bbcb7"]}, @generic="00e2acf4995ddc563bef8120fd78b3baf7f409d03c088829051afff2f6bbfed5aee4807ef455660fead38814f9b9b6330400bd557132db7c8b7d25603b182c29e2253d50dd2b63ac96a46fcd34a22478bdab81be6c6411763ba1b9316cba0acdb892fe2ece97cad51448a53a9cff8c2f21bf3af182345df8bb7fb0cd3c1204b9", @generic="ff5d4e97932028dcac78bbf49fdf81b229a26bddc70aaee5cc11ebf775a08c4e265d62ff59d1192b4746e257ca0022a235190ff2bb"]}, 0x2e4}], 0x3, &(0x7f0000000280)=[@rights={{0x28, 0x1, 0x1, [r3, r1, r1, r0, r0, r0]}}, @rights={{0x20, 0x1, 0x1, [r0, r1, r1, r1]}}, @rights={{0x14, 0x1, 0x1, [r4]}}, @cred={{0x1c, 0x1, 0x2, {r5, r7, r9}}}], 0x80, 0x4000000}, 0x4000000) setsockopt$sock_int(r1, 0x1, 0x5, &(0x7f0000000440)=0x200, 0x4) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x2000, @multicast1}, 0x10, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000001010102000000000000000002000000100002800c000280050200001100000008001a40004000060c001980080002002800000008000340"], 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000440)=@broadcast, &(0x7f0000000480)=@ctrl_frame=@ba={{}, {0x9}, @device_b, @device_a, @compressed={{0x0, 0x0, 0x1, 0x0, 0xd}, {}, "dcd2901f21257758"}}, 0x1c) r10 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendmsg$alg(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000003c0)}, {&(0x7f0000000840)="77e11321bb3c9e20e525a48564564de2408862be9e028ecdebcbfd80dd9937f7415064fcc4b27182375d41f362ed6a2f0f52b7c390281f2db0a24f8ca6c3c41de001e2f5cbe4f53637016d2daff0d2c1b165bcc68da3e12ab0f4df466269b6e9c7be0745dde533c10baca8e1aed6a700dc9e38b7bc079af1061797260b0f69369fef4f56c9a74a274d1f24aea02a047361efafe443a7785caab6c1c04018240fa8d7342d4d2e42c6f685bc81ce40610959df769cfa598a0ffba245193bcc806f43831f37955238cff8cca8b3bf6041a5e5f640991b9f8d76a50fe675c68f26bbe13dbbd90e80ac0e807f34df2808d4f10f464b82624067ea209edb", 0xfb}], 0x2, &(0x7f0000000c40)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x1}, @iv={0xe0, 0x117, 0x2, 0xc7, "dba201f9ca8f9f561cf12fdeb308be2df8cf7dd321b7eb79cad4bd1074765741c85d202ede4e46800026f85f7e7cd327f08961df36c3825c51b2a5a1f16c94735c5ecc1f54702253d88d28499d1e39f4cc980085f3cae6f04490984d765b05646192806db8ccc377997d717600fc7a46426d628abc4cb0a7d49ce977ef073eae25fd2ae4c6bcd80029245a8b6eafa2059ce6c28b52c04053262d37da2f3b485bc03eb8a646c67c53788ba7f1b7a427b620788843d5cfb439a29f10ae61e1c2257df6caef2ecb85"}, @iv={0xf0, 0x117, 0x2, 0xdc, "afd450b1b079114aadf313235e0a7f6e00daf1d626658c0bd5297d696d7a0fe10a13f64d66bd8f09a9027e58ae5053c2f159aa8925d989f4c0463ca7664442c9fd606fcc758fb37cfd83081c5239783ddfeca53bf9faa2e8e42b1a28e8b2a3aaccf5a672782312f3966f51066b0e761319baa61276b62b8eece699da0201c22f7af91aa238557377dfc8973583440f152b482ec3c3be5923e6e3c57c2ca48e461e663841598642fbca78ae0830bf3b4ceff3ad5d3d6da82fd7919a0e037438fcbb16279156ca55e9c247c5c89ececc0e1a91c26f1ccfb58cb9843db8"}, @iv={0xf8, 0x117, 0x2, 0xe1, "c90e618a231a8ebd2af5a16d05cdc1305dbe69fc634c0964f71f891f73076bf5aa3901b47879e8308c60008e1e1bdccb3427d6226fd65e1a3c4f215402d3424e26e75c84a798e7a6a52fe4d2549d9ac73d23d1097b09e78cd06ab35b5dce4a4aac4c00554cce3f1555742f89bfc79eda9501cd593c75294f14bda268ff5deb5517cb5591b5216ec0310fa00d58e4c1c12456db7525a6574b1ac7887e9751ed70b67a04db44ee461bc27dddf22362c838fb758ef8fe6a13f87470aa57378ca0353ef3de51ecf0bb8dd7f6079ab1f5f7794b5792dc908321e46229a8c6f58931e634"}, @iv={0x88, 0x117, 0x2, 0x6f, "81852ef70a0f0e551d6b5527dd9eac83bc04b229210916b8e71b775bf457b8b0fc64e968b611ac4e24a8c0977a1785bc90887b213e97ad6d317c673fa1d3bf6577aa8f76c681dbd5d01bdb07df212908f2279fe65a7127bd671f450126bf9686c4757245dcc7a1e19556f96f850116"}, @iv={0x18, 0x117, 0x2, 0x2, 'X&'}, @iv={0x90, 0x117, 0x2, 0x75, "aa4ea816266e2fdb7531322a5f15134082109671ea5a5aaee217714b36df45a3fb0fc1537a8a6a527e09b68773fd07d1c6c70add5a55f2bd2cb81bae79965b8c097bd2f3a2cb374d28dbe33661f51d45e02de7a4af6110248d011e783adb08b9845868a591365be55b6e8e1d90f5f779c7aa7104dd"}, @assoc={0x18, 0x117, 0x4, 0x13}], 0x440, 0x800}, 0x801) r11 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r11, 0x29, 0x40, &(0x7f0000000140)={'filter\x00', 0x0, [0xec, 0x6, 0x20006, 0x81]}, &(0x7f00000001c0)=0x54) socket$inet6_sctp(0xa, 0x1, 0x84) kernel console output (not intermixed with test programs): an active interface with an up link [ 130.758720][ T7380] team0: Port device team_slave_0 added [ 130.783022][ T7582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.423'. [ 130.805921][ T7380] team0: Port device team_slave_1 added [ 130.814363][ T7582] netlink: 12 bytes leftover after parsing attributes in process `syz.2.423'. [ 130.844511][ T7576] netlink: 16 bytes leftover after parsing attributes in process `syz.2.423'. [ 130.895715][ T7582] netlink: 92 bytes leftover after parsing attributes in process `syz.2.423'. [ 130.905343][ T7582] netlink: 6 bytes leftover after parsing attributes in process `syz.2.423'. [ 130.916600][ T7380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.923988][ T7380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.961821][ T7380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.030666][ T7380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.037761][ T7380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.064394][ T7380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.178315][ T7380] hsr_slave_0: entered promiscuous mode [ 131.193803][ T7380] hsr_slave_1: entered promiscuous mode [ 131.210927][ T7380] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.241235][ T7380] Cannot create hsr debugfs directory [ 131.322479][ T7603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.429'. [ 131.350348][ T7603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.429'. [ 131.427063][ T5829] Bluetooth: hci0: command tx timeout [ 131.830954][ T7608] netlink: 244 bytes leftover after parsing attributes in process `syz.4.430'. [ 131.930654][ T7380] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 131.972694][ T7380] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 132.008418][ T7380] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 132.053797][ T7380] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 132.399240][ T7380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.440470][ T7615] tun0: tun_chr_ioctl cmd 1074025692 [ 132.474711][ T7621] netlink: 'syz.1.434': attribute type 1 has an invalid length. [ 132.512272][ T7380] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.564669][ T6228] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.571857][ T6228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.692700][ T6228] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.699841][ T6228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.110771][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.117272][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.403200][ T7380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.443164][ T7654] netlink: 20 bytes leftover after parsing attributes in process `syz.1.443'. [ 133.594203][ T7658] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.629009][ T7657] netlink: 20 bytes leftover after parsing attributes in process `syz.4.444'. [ 133.684047][ T7662] veth1_to_team: entered allmulticast mode [ 133.723533][ T7380] veth0_vlan: entered promiscuous mode [ 133.781461][ T7380] veth1_vlan: entered promiscuous mode [ 133.869799][ T7664] batadv_slave_0: entered promiscuous mode [ 133.886630][ T7664] batadv_slave_0: entered allmulticast mode [ 133.914345][ T7380] veth0_macvtap: entered promiscuous mode [ 133.924354][ T7380] veth1_macvtap: entered promiscuous mode [ 133.985170][ T7380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.995869][ T7380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.005781][ T7380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.016322][ T7380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.026484][ T7380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.037546][ T7380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.080478][ T7380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.092089][ T7380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.102628][ T7380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.112803][ T7380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.123612][ T7380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.133999][ T7380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.144977][ T7380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.155862][ T7380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.211661][ T7380] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.221070][ T7380] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.231174][ T7380] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.250013][ T7380] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.311256][ T7660] veth1_to_team: left allmulticast mode [ 134.480285][ T7676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.507105][ T7676] netlink: 'syz.4.450': attribute type 10 has an invalid length. [ 134.628944][ T7676] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 134.660763][ T7676] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 134.937703][ T5121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.966270][ T5121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.011581][ T7689] unsupported nlmsg_type 40 [ 135.060205][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.086938][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.689054][ T5143] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 136.706637][ T5143] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 136.720057][ T5143] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 136.730598][ T5143] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 136.742849][ T5143] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 136.762040][ T5143] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 137.691253][ T6234] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.011675][ T6234] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.183198][ T6234] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.382569][ T6234] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.665731][ T7754] __nla_validate_parse: 6 callbacks suppressed [ 138.665752][ T7754] netlink: 32 bytes leftover after parsing attributes in process `syz.4.469'. [ 138.683846][ T7754] netem: unknown loss type 13 [ 138.689379][ T7754] netem: change failed [ 138.762639][ T7716] chnl_net:caif_netlink_parms(): no params data found [ 138.852863][ T7757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.470'. [ 138.865752][ T5829] Bluetooth: hci0: command tx timeout [ 138.876492][ T7759] netlink: 100 bytes leftover after parsing attributes in process `syz.4.471'. [ 138.998085][ T6234] bridge_slave_1: left allmulticast mode [ 139.010017][ T6234] bridge_slave_1: left promiscuous mode [ 139.019022][ T6234] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.034209][ T6234] bridge_slave_0: left allmulticast mode [ 139.059169][ T6234] bridge_slave_0: left promiscuous mode [ 139.072009][ T6234] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.124327][ T7768] netlink: 'syz.1.473': attribute type 10 has an invalid length. [ 139.306522][ T7774] netlink: 16 bytes leftover after parsing attributes in process `syz.4.475'. [ 139.537719][ T6234] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.548890][ T6234] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.561727][ T6234] bond0 (unregistering): Released all slaves [ 139.583430][ T7768] team0: Port device netdevsim0 added [ 139.593976][ T7774] team0: entered promiscuous mode [ 139.599133][ T7774] team_slave_0: entered promiscuous mode [ 139.606521][ T7774] team_slave_1: entered promiscuous mode [ 139.613045][ T7774] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 139.636193][ T7774] team0: left promiscuous mode [ 139.641157][ T7774] team_slave_0: left promiscuous mode [ 139.652674][ T7774] team_slave_1: left promiscuous mode [ 139.847005][ T7789] x_tables: duplicate underflow at hook 2 [ 139.892100][ T7716] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.921592][ T7716] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.944941][ T7716] bridge_slave_0: entered allmulticast mode [ 139.978505][ T7716] bridge_slave_0: entered promiscuous mode [ 140.035224][ T7716] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.044168][ T7716] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.054966][ T7716] bridge_slave_1: entered allmulticast mode [ 140.063838][ T7716] bridge_slave_1: entered promiscuous mode [ 140.179512][ T7716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.250858][ T7716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.350250][ T7795] Bluetooth: MGMT ver 1.23 [ 140.379188][ T6234] hsr_slave_0: left promiscuous mode [ 140.394280][ T6234] hsr_slave_1: left promiscuous mode [ 140.404486][ T6234] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.415479][ T6234] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.423910][ T6234] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.437095][ T6234] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.498808][ T6234] veth1_macvtap: left promiscuous mode [ 140.511548][ T6234] veth0_macvtap: left promiscuous mode [ 140.517440][ T6234] veth1_vlan: left promiscuous mode [ 140.523139][ T6234] veth0_vlan: left promiscuous mode [ 140.953632][ T5829] Bluetooth: hci0: command tx timeout [ 140.987093][ T6234] team0 (unregistering): Port device team_slave_1 removed [ 141.026894][ T6234] team0 (unregistering): Port device team_slave_0 removed [ 141.378128][ T7716] team0: Port device team_slave_0 added [ 141.385286][ T7795] netlink: 'syz.2.481': attribute type 21 has an invalid length. [ 141.394441][ T7795] netlink: 132 bytes leftover after parsing attributes in process `syz.2.481'. [ 141.478396][ T7805] bond0: (slave wlan1): Releasing backup interface [ 141.519658][ T7716] team0: Port device team_slave_1 added [ 141.674471][ T7716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.689845][ T7716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.716661][ T7716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.735097][ T7716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.742271][ T7716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.768437][ T7716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.968737][ T7716] hsr_slave_0: entered promiscuous mode [ 141.975628][ T7716] hsr_slave_1: entered promiscuous mode [ 141.982039][ T7716] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.989763][ T7716] Cannot create hsr debugfs directory [ 142.523717][ T7849] netlink: 92 bytes leftover after parsing attributes in process `syz.3.494'. [ 142.552986][ T7851] netlink: 16 bytes leftover after parsing attributes in process `syz.1.495'. [ 142.597590][ T7851] lo: entered allmulticast mode [ 142.619368][ T7852] dvmrp8: entered allmulticast mode [ 142.763879][ T7858] netlink: 12 bytes leftover after parsing attributes in process `syz.3.496'. [ 143.004080][ T7860] bridge0: port 3(gretap0) entered blocking state [ 143.021240][ T5143] Bluetooth: hci0: command tx timeout [ 143.027297][ T7860] bridge0: port 3(gretap0) entered disabled state [ 143.034900][ T7860] gretap0: entered allmulticast mode [ 143.043793][ T7860] gretap0: entered promiscuous mode [ 143.050997][ T7860] bridge0: port 3(gretap0) entered blocking state [ 143.057521][ T7860] bridge0: port 3(gretap0) entered forwarding state [ 143.065731][ T7864] gretap0: left allmulticast mode [ 143.083079][ T7864] gretap0: left promiscuous mode [ 143.088278][ T7864] bridge0: port 3(gretap0) entered disabled state [ 143.139648][ T7867] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 143.150826][ T7867] macvlan2: entered allmulticast mode [ 143.156528][ T7867] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 143.171635][ T7867] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 143.178522][ T7867] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 143.223119][ T7873] netlink: 'syz.1.501': attribute type 4 has an invalid length. [ 143.258264][ T7873] netlink: 'syz.1.501': attribute type 4 has an invalid length. [ 143.413863][ T7716] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 143.465494][ T7716] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 143.493459][ T7716] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 143.512212][ T7716] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 143.581921][ T7884] netlink: 'syz.3.503': attribute type 5 has an invalid length. [ 143.681631][ T7894] netlink: 20 bytes leftover after parsing attributes in process `syz.1.505'. [ 143.832109][ T7716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.941468][ T7716] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.963063][ T6228] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.970274][ T6228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.028400][ T6228] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.035682][ T6228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.062169][ T7907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.091460][ T7907] netlink: 'syz.1.508': attribute type 10 has an invalid length. [ 144.123765][ T7906] netlink: 'syz.4.509': attribute type 1 has an invalid length. [ 144.202718][ T7907] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 144.256186][ T7911] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 144.393957][ T7914] netlink: 12 bytes leftover after parsing attributes in process `syz.3.512'. [ 144.404186][ T7914] netlink: 8 bytes leftover after parsing attributes in process `syz.3.512'. [ 144.593466][ T7716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.713936][ T7716] veth0_vlan: entered promiscuous mode [ 144.733371][ T7716] veth1_vlan: entered promiscuous mode [ 144.795456][ T7716] veth0_macvtap: entered promiscuous mode [ 144.827748][ T7716] veth1_macvtap: entered promiscuous mode [ 144.861662][ T7716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.889022][ T7716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.909312][ T7716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.925896][ T7937] netlink: 20 bytes leftover after parsing attributes in process `syz.1.516'. [ 144.935787][ T7716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.946857][ T7938] netlink: 20 bytes leftover after parsing attributes in process `syz.1.516'. [ 144.963048][ T7716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.978790][ T7716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.997619][ T7716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.008719][ T7716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.038601][ T7716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.060207][ T7716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.071677][ T7716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.100779][ T5143] Bluetooth: hci0: command 0x0419 tx timeout [ 145.123405][ T7716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.127013][ T7942] netlink: 28 bytes leftover after parsing attributes in process `syz.4.517'. [ 145.138094][ T7716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.154257][ T7942] netlink: 28 bytes leftover after parsing attributes in process `syz.4.517'. [ 145.168781][ T7716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.192126][ T7716] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.206391][ T7716] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.215369][ T7716] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.221950][ T7942] netlink: 28 bytes leftover after parsing attributes in process `syz.4.517'. [ 145.229852][ T7716] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.239236][ T7942] netlink: 28 bytes leftover after parsing attributes in process `syz.4.517'. [ 145.355892][ T7946] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 145.479247][ T7942] netlink: 28 bytes leftover after parsing attributes in process `syz.4.517'. [ 145.488436][ T6234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.500258][ T6234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.526989][ T6234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.550340][ T6234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.799383][ T7955] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 146.724379][ T7989] netlink: 'syz.3.531': attribute type 1 has an invalid length. [ 146.759080][ T7989] netlink: 'syz.3.531': attribute type 2 has an invalid length. [ 146.932998][ T3923] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.462824][ T3923] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.571582][ T5143] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 147.581885][ T5143] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 147.591590][ T5143] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 147.605459][ T5143] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 147.627509][ T5143] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 147.636546][ T5143] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 147.806315][ T3923] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.813095][ T8025] trusted_key: syz.4.542 sent an empty control message without MSG_MORE. [ 149.741060][ T5829] Bluetooth: hci0: command tx timeout [ 149.801989][ T8021] bond0: (slave team0): Releasing backup interface [ 149.817923][ T8021] team0 (unregistering): Port device team_slave_0 removed [ 149.831398][ T8021] team0 (unregistering): Port device team_slave_1 removed [ 149.843210][ T8021] team0 (unregistering): Port device netdevsim0 removed [ 149.922197][ T3923] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.508661][ T3923] bridge_slave_1: left allmulticast mode [ 150.517345][ T3923] bridge_slave_1: left promiscuous mode [ 150.523312][ T3923] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.546796][ T3923] bridge_slave_0: left allmulticast mode [ 150.558470][ T3923] bridge_slave_0: left promiscuous mode [ 150.577893][ T3923] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.720696][ T8062] __nla_validate_parse: 6 callbacks suppressed [ 150.720718][ T8062] netlink: 8 bytes leftover after parsing attributes in process `syz.4.550'. [ 151.446887][ T3923] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.458386][ T3923] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.469267][ T3923] bond0 (unregistering): Released all slaves [ 151.580871][ T8036] netlink: 72 bytes leftover after parsing attributes in process `syz.2.545'. [ 151.600399][ T8011] chnl_net:caif_netlink_parms(): no params data found [ 151.838257][ T5829] Bluetooth: hci0: command tx timeout [ 152.673739][ T8044] Set syz1 is full, maxelem 65536 reached [ 153.910197][ T5829] Bluetooth: hci0: command tx timeout [ 154.182406][ T8085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.557'. [ 154.202881][ T8080] tap0: tun_chr_ioctl cmd 1074025678 [ 154.208259][ T8080] tap0: group set to 0 [ 154.222884][ T8011] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.239085][ T8011] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.247875][ T8088] RDS: rds_bind could not find a transport for 1400::, load rds_tcp or rds_rdma? [ 154.265782][ T8011] bridge_slave_0: entered allmulticast mode [ 154.282656][ T8011] bridge_slave_0: entered promiscuous mode [ 154.359563][ T8011] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.374820][ T8011] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.408684][ T8011] bridge_slave_1: entered allmulticast mode [ 154.419625][ T8011] bridge_slave_1: entered promiscuous mode [ 154.556376][ T8011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.598978][ T8090] dummy0: entered promiscuous mode [ 154.608794][ T8090] macvtap1: entered promiscuous mode [ 154.616650][ T8090] macvtap1: entered allmulticast mode [ 154.640156][ T8090] dummy0: entered allmulticast mode [ 154.718553][ T8011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.811366][ T3923] hsr_slave_0: left promiscuous mode [ 154.820467][ T3923] hsr_slave_1: left promiscuous mode [ 154.826443][ T3923] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.834038][ T3923] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.852839][ T3923] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.861042][ T3923] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.908158][ T3923] veth1_macvtap: left promiscuous mode [ 154.923061][ T3923] veth0_macvtap: left promiscuous mode [ 154.928684][ T3923] veth1_vlan: left promiscuous mode [ 154.950156][ T3923] veth0_vlan: left promiscuous mode [ 155.099230][ T8116] tipc: Trying to set illegal importance in message [ 155.467564][ T3923] team0 (unregistering): Port device team_slave_1 removed [ 155.507434][ T3923] team0 (unregistering): Port device team_slave_0 removed [ 155.897685][ T8011] team0: Port device team_slave_0 added [ 155.945521][ T8011] team0: Port device team_slave_1 added [ 155.982331][ T5829] Bluetooth: hci0: command tx timeout [ 156.089648][ T8011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.103744][ T8011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.130140][ T8011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.152102][ T8011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.159085][ T8011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.186200][ T8011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.293824][ T8011] hsr_slave_0: entered promiscuous mode [ 156.310501][ T8011] hsr_slave_1: entered promiscuous mode [ 156.355169][ T8011] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 156.377043][ T8011] Cannot create hsr debugfs directory [ 156.664440][ T8134] tipc: Started in network mode [ 156.669376][ T8134] tipc: Node identity e0000001, cluster identity 4711 [ 156.681083][ T8134] tipc: Enabling of bearer rejected, failed to enable media [ 156.697574][ T8134] tipc: Enabling of bearer rejected, failed to enable media [ 156.744807][ T8134] tipc: Enabling of bearer rejected, failed to enable media [ 156.764678][ T8134] tipc: Enabling of bearer rejected, failed to enable media [ 156.790574][ T8134] tipc: Enabling of bearer rejected, failed to enable media [ 156.804659][ T8137] netlink: 28 bytes leftover after parsing attributes in process `syz.4.573'. [ 156.847057][ T8134] tipc: Enabling of bearer rejected, failed to enable media [ 156.866956][ T8134] tipc: Enabling of bearer rejected, failed to enable media [ 156.875749][ T8134] tipc: Enabling of bearer rejected, failed to enable media [ 156.908767][ T8134] tipc: Enabling of bearer rejected, failed to enable media [ 156.971427][ T8134] tipc: Enabling of bearer rejected, failed to enable media [ 156.977677][ T8145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.575'. [ 157.166350][ T8134] tipc: Enabling of bearer rejected, failed to enable media [ 157.180638][ T8134] tipc: Enabling of bearer rejected, failed to enable media [ 157.207098][ T8148] pim6reg1: entered promiscuous mode [ 157.212667][ T8148] pim6reg1: entered allmulticast mode [ 157.219766][ T8134] tipc: Enabling of bearer rejected, failed to enable media [ 157.258300][ T8134] tipc: Enabling of bearer rejected, failed to enable media [ 157.314939][ T8134] tipc: Enabling of bearer rejected, failed to enable media [ 157.324830][ T8134] tipc: Enabling of bearer rejected, failed to enable media [ 157.338473][ T8134] tipc: Enabling of bearer rejected, failed to enable media [ 157.347277][ T8134] tipc: Enabling of bearer rejected, failed to enable media [ 157.356689][ T8134] tipc: Enabling of bearer rejected, failed to enable media [ 157.365411][ T8134] tipc: Enabling of bearer rejected, failed to enable media [ 157.381627][ T8134] tipc: Enabling of bearer rejected, failed to enable media [ 157.390660][ T8134] tipc: Enabling of bearer rejected, failed to enable media [ 157.399423][ T8134] tipc: Enabling of bearer rejected, failed to enable media [ 157.565350][ T8156] netlink: 20 bytes leftover after parsing attributes in process `syz.2.578'. [ 157.594170][ T8011] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 157.635506][ T8011] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 157.687890][ T8011] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 157.739153][ T8011] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 157.777150][ T8158] smc: net device wg0 applied user defined pnetid SYZ0 [ 157.876621][ T8166] netlink: 'syz.1.581': attribute type 7 has an invalid length. [ 157.886775][ T8166] netlink: 'syz.1.581': attribute type 8 has an invalid length. [ 157.896280][ T8166] netlink: 'syz.1.581': attribute type 7 has an invalid length. [ 157.904599][ T8166] netlink: 208184 bytes leftover after parsing attributes in process `syz.1.581'. [ 158.003352][ T8011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.056089][ T8011] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.101458][ T6231] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.108633][ T6231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.199524][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.206812][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.498064][ T8192] netlink: 16 bytes leftover after parsing attributes in process `syz.3.589'. [ 158.521050][ T8195] netlink: 44 bytes leftover after parsing attributes in process `syz.4.590'. [ 158.679638][ T8200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.592'. [ 158.735063][ T8011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.958377][ T8011] veth0_vlan: entered promiscuous mode [ 159.036546][ T8208] netlink: 24 bytes leftover after parsing attributes in process `syz.2.594'. [ 159.054155][ T8011] veth1_vlan: entered promiscuous mode [ 159.241402][ T8011] veth0_macvtap: entered promiscuous mode [ 159.254590][ T8011] veth1_macvtap: entered promiscuous mode [ 159.300967][ T8011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.322875][ T8011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.333308][ T8011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.344273][ T8011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.354323][ T8011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.366015][ T8011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.377615][ T8011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.418790][ T8011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.435738][ T8011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.447319][ T8011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.459784][ T8011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.470315][ T8011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.481147][ T8011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.505578][ T8011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.562996][ T8011] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.574878][ T8011] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.584173][ T8011] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.593157][ T8011] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.847202][ T8219] netlink: 68 bytes leftover after parsing attributes in process `syz.2.598'. [ 159.951390][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.951713][ T6231] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.968813][ T8219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.598'. [ 159.991975][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.008404][ T6231] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.130190][ T8224] vlan0: entered promiscuous mode [ 161.137570][ T8271] netlink: 'syz.4.609': attribute type 7 has an invalid length. [ 161.160755][ T8271] netlink: 'syz.4.609': attribute type 8 has an invalid length. [ 161.432262][ T8287] .dXD: renamed from gretap0 (while UP) [ 161.481399][ T8287] .dXD: entered allmulticast mode [ 161.527663][ T8287] A link change request failed with some changes committed already. Interface 3.dXD may have been left with an inconsistent configuration, please check. [ 161.713109][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.737209][ T8290] netlink: 'syz.4.614': attribute type 29 has an invalid length. [ 161.816038][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.895082][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.957156][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.048172][ T11] bridge_slave_1: left allmulticast mode [ 162.054500][ T11] bridge_slave_1: left promiscuous mode [ 162.062731][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.072410][ T11] bridge_slave_0: left allmulticast mode [ 162.078096][ T11] bridge_slave_0: left promiscuous mode [ 162.084640][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.204868][ T8313] __nla_validate_parse: 6 callbacks suppressed [ 162.204891][ T8313] netlink: 92 bytes leftover after parsing attributes in process `syz.3.619'. [ 162.398088][ T8321] netlink: 28 bytes leftover after parsing attributes in process `syz.3.619'. [ 162.415299][ T8321] netlink: 28 bytes leftover after parsing attributes in process `syz.3.619'. [ 162.514583][ T5143] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 162.523356][ T5143] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 162.536404][ T5143] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 162.545758][ T5143] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 162.565000][ T5143] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 162.575414][ T5143] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 162.674405][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.686106][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.697017][ T11] bond0 (unregistering): Released all slaves [ 162.711790][ T8310] ip6gretap0: entered promiscuous mode [ 162.736460][ T8318] netlink: 12 bytes leftover after parsing attributes in process `syz.2.621'. [ 162.758811][ T8320] netlink: 20 bytes leftover after parsing attributes in process `syz.2.621'. [ 163.067211][ T8336] netlink: 4268 bytes leftover after parsing attributes in process `syz.1.624'. [ 163.134704][ T8336] netlink: 4268 bytes leftover after parsing attributes in process `syz.1.624'. [ 163.398682][ T8355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.628'. [ 163.412544][ T8354] netlink: 32 bytes leftover after parsing attributes in process `syz.3.629'. [ 163.431408][ T8354] netlink: 20 bytes leftover after parsing attributes in process `syz.3.629'. [ 163.591618][ T11] hsr_slave_0: left promiscuous mode [ 163.597676][ T11] hsr_slave_1: left promiscuous mode [ 163.603817][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.612831][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.628392][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.636303][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.692959][ T11] veth1_macvtap: left promiscuous mode [ 163.698724][ T11] veth0_macvtap: left promiscuous mode [ 163.704576][ T11] veth1_vlan: left promiscuous mode [ 163.710141][ T11] veth0_vlan: left promiscuous mode [ 164.161385][ T11] team0 (unregistering): Port device team_slave_1 removed [ 164.215854][ T11] team0 (unregistering): Port device team_slave_0 removed [ 164.678052][ T8362] veth1_macvtap: left promiscuous mode [ 164.700130][ T5143] Bluetooth: hci0: command tx timeout [ 164.728494][ T8372] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 165.019239][ T8323] chnl_net:caif_netlink_parms(): no params data found [ 165.092960][ T5849] IPVS: starting estimator thread 0... [ 165.098776][ T8386] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 165.190423][ T8393] IPVS: using max 20 ests per chain, 48000 per kthread [ 165.489548][ T8323] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.496767][ T8323] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.504222][ T8323] bridge_slave_0: entered allmulticast mode [ 165.511460][ T8323] bridge_slave_0: entered promiscuous mode [ 165.519209][ T8323] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.526500][ T8323] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.533809][ T8323] bridge_slave_1: entered allmulticast mode [ 165.541357][ T8323] bridge_slave_1: entered promiscuous mode [ 165.555580][ T8412] lo: left allmulticast mode [ 165.560562][ T8412] dvmrp8: left allmulticast mode [ 165.606154][ T8323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.641779][ T8323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.730821][ T8425] openvswitch: netlink: nsh attr 2 has unexpected len 0 expected 16 [ 165.749259][ T8425] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.772915][ T8323] team0: Port device team_slave_0 added [ 165.806586][ T8425] openvswitch: netlink: nsh attr 2 has unexpected len 0 expected 16 [ 165.815932][ T8323] team0: Port device team_slave_1 added [ 165.823238][ T8425] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.838102][ T8425] openvswitch: netlink: nsh attr 2 has unexpected len 0 expected 16 [ 165.846883][ T8425] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.856323][ T8425] openvswitch: netlink: nsh attr 2 has unexpected len 0 expected 16 [ 165.891374][ T8425] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.030644][ T8323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.042037][ T8323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.126887][ T8323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.185647][ T8323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.203343][ T8323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.244527][ T8451] xt_nfacct: accounting object `syz1' does not exists [ 166.260727][ T8323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.371447][ T8448] pim6reg: entered allmulticast mode [ 166.375801][ T8442] sctp: [Deprecated]: syz.1.651 (pid 8442) Use of struct sctp_assoc_value in delayed_ack socket option. [ 166.375801][ T8442] Use struct sctp_sack_info instead [ 166.511493][ T8323] hsr_slave_0: entered promiscuous mode [ 166.538794][ T8323] hsr_slave_1: entered promiscuous mode [ 166.560741][ T8323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.574389][ T8323] Cannot create hsr debugfs directory [ 166.780236][ T5143] Bluetooth: hci0: command 0x041b tx timeout [ 166.793544][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.809484][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.918859][ T8471] netlink: 'syz.2.657': attribute type 13 has an invalid length. [ 167.068649][ T8471] macvtap0: entered promiscuous mode [ 167.136378][ T8471] macvtap0: refused to change device tx_queue_len [ 167.405932][ T8485] netlink: 'syz.1.663': attribute type 9 has an invalid length. [ 167.451562][ T8494] netlink: 'syz.3.664': attribute type 1 has an invalid length. [ 167.462847][ T8495] netlink: 'syz.3.664': attribute type 1 has an invalid length. [ 167.505096][ T8494] bond1: entered promiscuous mode [ 167.514008][ T8494] bond1: entered allmulticast mode [ 167.523472][ T8486] syzkaller1: entered promiscuous mode [ 167.529085][ T8486] syzkaller1: entered allmulticast mode [ 167.647268][ T8504] __nla_validate_parse: 15 callbacks suppressed [ 167.647289][ T8504] netlink: 72 bytes leftover after parsing attributes in process `syz.3.666'. [ 167.698872][ T8504] netlink: 72 bytes leftover after parsing attributes in process `syz.3.666'. [ 167.739174][ T8504] netlink: 'syz.3.666': attribute type 10 has an invalid length. [ 167.780777][ T8504] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 167.800381][ T8504] team0: Failed to send options change via netlink (err -105) [ 167.807900][ T8504] team0: Port device netdevsim0 added [ 167.855627][ T8323] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 167.878094][ T8509] netlink: 28 bytes leftover after parsing attributes in process `syz.2.668'. [ 167.898854][ T8323] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 167.946186][ T8323] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 167.991696][ T8511] netlink: 9 bytes leftover after parsing attributes in process `syz.1.669'. [ 168.010546][ T8323] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 168.045640][ T8511] gretap0: entered promiscuous mode [ 168.062366][ T8511] netlink: 5 bytes leftover after parsing attributes in process `syz.1.669'. [ 168.080280][ T8511] 0XD: renamed from gretap0 [ 168.088311][ T8511] 0XD: left promiscuous mode [ 168.110535][ T8511] 0XD: entered allmulticast mode [ 168.117164][ T8511] net_ratelimit: 122 callbacks suppressed [ 168.117184][ T8511] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 168.246721][ T8521] netlink: 'syz.1.669': attribute type 21 has an invalid length. [ 168.255308][ T8521] netlink: 'syz.1.669': attribute type 6 has an invalid length. [ 168.267293][ T8521] netlink: 156 bytes leftover after parsing attributes in process `syz.1.669'. [ 168.299529][ T8534] netlink: 'syz.3.674': attribute type 4 has an invalid length. [ 168.434799][ T8323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.451048][ T8323] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.466084][ T5121] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.473242][ T5121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.537734][ T5121] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.545024][ T5121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.563930][ T8548] netlink: 32 bytes leftover after parsing attributes in process `syz.3.678'. [ 168.576799][ T8549] netlink: 32 bytes leftover after parsing attributes in process `syz.3.678'. [ 168.586146][ T8548] netlink: 32 bytes leftover after parsing attributes in process `syz.3.678'. [ 168.609163][ T8548] netlink: 'syz.3.678': attribute type 1 has an invalid length. [ 168.637492][ T8548] netlink: 224 bytes leftover after parsing attributes in process `syz.3.678'. [ 168.870345][ T5829] Bluetooth: hci0: command 0x041b tx timeout [ 168.932612][ T8323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.953177][ T8564] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.965669][ T8323] veth0_vlan: entered promiscuous mode [ 169.028687][ T8323] veth1_vlan: entered promiscuous mode [ 169.078718][ T8323] veth0_macvtap: entered promiscuous mode [ 169.106215][ T8323] veth1_macvtap: entered promiscuous mode [ 169.168033][ T8323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.211581][ T8323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.232319][ T8323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.245480][ T8323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.258850][ T8323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.276290][ T8323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.306961][ T8323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.344025][ T8323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.357067][ T8323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.367397][ T8323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.380684][ T8323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.390872][ T8323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.401582][ T8323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.417694][ T8323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.438630][ T8323] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.465567][ T8323] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.482485][ T8323] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.497169][ T8323] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.735908][ T3923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.763552][ T3923] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.793259][ T8576] ip6tnl1: entered promiscuous mode [ 169.843150][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.852136][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.890175][ T8584] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 170.003530][ T8591] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 170.076092][ T8595] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 170.288094][ T8613] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 170.364204][ T8617] IPv6: sit1: Disabled Multicast RS [ 170.897463][ T8639] bridge0: entered promiscuous mode [ 170.910279][ T8639] bridge0: entered allmulticast mode [ 170.930319][ T8639] team0: Port device bridge0 added [ 170.945734][ T8639] netlink: 'syz.3.702': attribute type 10 has an invalid length. [ 170.960416][ T8639] team0: Port device netdevsim0 removed [ 170.968885][ T8639] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 170.996918][ T8639] bridge0: port 1(ip6gretap0) entered blocking state [ 171.009737][ T8639] bridge0: port 1(ip6gretap0) entered disabled state [ 171.017357][ T8639] ip6gretap0: entered allmulticast mode [ 171.032163][ T8639] ip6gretap0: entered promiscuous mode [ 171.040855][ T8639] bridge0: port 1(ip6gretap0) entered blocking state [ 171.047644][ T8639] bridge0: port 1(ip6gretap0) entered listening state [ 171.312903][ T3923] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.369733][ T5143] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 172.402744][ T5143] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 172.417099][ T5143] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 172.444172][ T5143] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 172.464208][ T5143] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 172.473591][ T5143] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 173.280512][ T8647] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 173.313094][ T8657] __nla_validate_parse: 3 callbacks suppressed [ 173.313118][ T8657] netlink: 80 bytes leftover after parsing attributes in process `syz.3.706'. [ 173.427078][ T3923] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.482833][ T8667] netlink: 28 bytes leftover after parsing attributes in process `syz.4.708'. [ 173.559306][ T3923] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.691398][ T3923] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.704237][ T8679] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 173.724407][ T8678] xt_CT: No such helper "snmp" [ 173.743370][ T8675] netdevsim netdevsim4: Direct firmware load for / [ 173.743370][ T8675] failed with error -2 [ 173.796023][ T8675] netdevsim netdevsim4: Falling back to sysfs fallback for: / [ 173.796023][ T8675] [ 173.896746][ T8685] netlink: 44 bytes leftover after parsing attributes in process `syz.3.713'. [ 173.990081][ T8685] syzkaller0: entered promiscuous mode [ 173.995767][ T8685] syzkaller0: entered allmulticast mode [ 174.009628][ T3923] bridge_slave_1: left allmulticast mode [ 174.020520][ T3923] bridge_slave_1: left promiscuous mode [ 174.029067][ T3923] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.051655][ T3923] bridge_slave_0: left allmulticast mode [ 174.057364][ T3923] bridge_slave_0: left promiscuous mode [ 174.070153][ T3923] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.550692][ T5143] Bluetooth: hci0: command tx timeout [ 174.715541][ T8698] netlink: 68 bytes leftover after parsing attributes in process `syz.4.717'. [ 174.972768][ T3923] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.984873][ T3923] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.995312][ T3923] bond0 (unregistering): Released all slaves [ 175.019124][ T8696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.714'. [ 175.049248][ T8705] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.058532][ T8705] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.067534][ T8705] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.076356][ T8705] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.094531][ T8705] vxlan0: entered promiscuous mode [ 175.101306][ T8705] vxlan0: entered allmulticast mode [ 175.124035][ T8705] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.133093][ T8705] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.142073][ T8705] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.151045][ T8705] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.335018][ T8717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.720'. [ 175.375721][ T8717] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.413429][ T8717] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.456089][ T8717] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.476691][ T8717] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.601896][ T8730] netlink: 100 bytes leftover after parsing attributes in process `syz.2.724'. [ 175.613117][ T8730] netlink: 'syz.2.724': attribute type 12 has an invalid length. [ 175.714181][ T8732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.724'. [ 175.788427][ T8661] chnl_net:caif_netlink_parms(): no params data found [ 176.030293][ T8740] netlink: 4 bytes leftover after parsing attributes in process `syz.4.727'. [ 176.057347][ T3923] hsr_slave_0: left promiscuous mode [ 176.074582][ T3923] hsr_slave_1: left promiscuous mode [ 176.096658][ T3923] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.120712][ T3923] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.162016][ T3923] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.179719][ T3923] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.206449][ T3923] veth1_macvtap: left promiscuous mode [ 176.219547][ T3923] veth0_macvtap: left promiscuous mode [ 176.239449][ T3923] veth1_vlan: left promiscuous mode [ 176.245282][ T3923] veth0_vlan: left promiscuous mode [ 176.311858][ T8757] IPVS: length: 24 != 3221225496 [ 176.350364][ T8760] IPVS: length: 24 != 3221225496 [ 176.631306][ T5143] Bluetooth: hci0: command 0x041b tx timeout [ 176.777514][ T3923] team0 (unregistering): Port device team_slave_1 removed [ 176.830968][ T3923] team0 (unregistering): Port device team_slave_0 removed [ 177.287369][ T8756] 8021q: adding VLAN 0 to HW filter on device bond2 [ 177.300682][ T8756] bridge0: port 3(bond2) entered blocking state [ 177.307121][ T8756] bridge0: port 3(bond2) entered disabled state [ 177.314776][ T8756] bond2: entered allmulticast mode [ 177.322758][ T8756] bond2: entered promiscuous mode [ 177.329014][ T8756] bridge0: port 3(bond2) entered blocking state [ 177.335407][ T8756] bridge0: port 3(bond2) entered forwarding state [ 177.343801][ T8764] netlink: 288 bytes leftover after parsing attributes in process `syz.3.732'. [ 177.370748][ T8765] netlink: 'syz.2.731': attribute type 4 has an invalid length. [ 177.518609][ T6233] bridge0: port 3(bond2) entered disabled state [ 177.577451][ T8770] 8021q: adding VLAN 0 to HW filter on device bond1 [ 177.594286][ T8770] bridge0: port 3(bond1) entered blocking state [ 177.605109][ T8770] bridge0: port 3(bond1) entered disabled state [ 177.614095][ T8770] bond1: entered allmulticast mode [ 177.624746][ T8770] bond1: entered promiscuous mode [ 177.637668][ T8770] bridge0: port 3(bond1) entered blocking state [ 177.644088][ T8770] bridge0: port 3(bond1) entered forwarding state [ 177.655951][ T8661] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.664315][ T8661] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.671800][ T8661] bridge_slave_0: entered allmulticast mode [ 177.678758][ T8661] bridge_slave_0: entered promiscuous mode [ 177.687739][ T8661] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.695102][ T8661] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.704498][ T8661] bridge_slave_1: entered allmulticast mode [ 177.715565][ T8661] bridge_slave_1: entered promiscuous mode [ 177.793833][ T8661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.833581][ T8661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.928741][ T8661] team0: Port device team_slave_0 added [ 177.954778][ T8788] netlink: 'syz.3.738': attribute type 1 has an invalid length. [ 177.974177][ T8661] team0: Port device team_slave_1 added [ 178.108777][ T8661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.116510][ T8661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.160357][ T8661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.208578][ T8661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.218850][ T8661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.265335][ T8661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.365341][ T6233] bridge0: port 3(bond1) entered disabled state [ 178.437232][ T8661] hsr_slave_0: entered promiscuous mode [ 178.448576][ T8661] hsr_slave_1: entered promiscuous mode [ 178.454979][ T8661] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.469009][ T8661] Cannot create hsr debugfs directory [ 178.606927][ T8820] Can't find ip_set type hash:p,mac [ 178.708298][ T5143] Bluetooth: hci0: command 0x041b tx timeout [ 179.413107][ T8850] __nla_validate_parse: 1 callbacks suppressed [ 179.413127][ T8850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.751'. [ 179.441551][ T8850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.751'. [ 179.692108][ T8859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.754'. [ 179.702478][ T8661] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 179.725641][ T8661] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 179.766628][ T8661] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 179.838331][ T8661] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 180.058812][ T8661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.224260][ T8661] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.257809][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.265031][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.292210][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.299454][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.427120][ T8887] openvswitch: netlink: IPv4 tun info is not correct [ 180.580046][ T8889] openvswitch: netlink: nsh attr 9472 is out of range max 3 [ 180.780769][ T5143] Bluetooth: hci0: command 0x041b tx timeout [ 181.004090][ T8661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.089394][ T8661] veth0_vlan: entered promiscuous mode [ 181.105088][ T8661] veth1_vlan: entered promiscuous mode [ 181.123000][ T8895] netlink: 12 bytes leftover after parsing attributes in process `syz.2.763'. [ 181.153414][ T8895] 8021q: adding VLAN 0 to HW filter on device bond1 [ 181.184342][ T8661] veth0_macvtap: entered promiscuous mode [ 181.208075][ T8895] 8021q: adding VLAN 0 to HW filter on device bond1 [ 181.215455][ T8895] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 181.228157][ T8895] bond1: (slave vcan1): Error -95 calling set_mac_address [ 181.278570][ T8661] veth1_macvtap: entered promiscuous mode [ 181.305438][ T8661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.318824][ T8661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.333757][ T8661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.344857][ T8661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.356795][ T8661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.376428][ T8661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.389479][ T8661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.402054][ T8661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.413200][ T8661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.427644][ T8904] netlink: 12 bytes leftover after parsing attributes in process `syz.1.765'. [ 181.434994][ T8661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.457022][ T8661] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.470977][ T8904] openvswitch: netlink: Duplicate or invalid key (type 0). [ 181.478279][ T8904] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.490995][ T8661] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.499756][ T8661] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.539207][ T8661] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.693751][ T8911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.768'. [ 181.703747][ T5121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.720018][ T5121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.789539][ T6231] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.808059][ T6231] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.831879][ T8911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.768'. [ 181.863303][ T8911] vlan0: entered allmulticast mode [ 182.368892][ T8924] netlink: 28 bytes leftover after parsing attributes in process `syz.3.772'. [ 182.437056][ T8931] xt_CONNSECMARK: invalid mode: 254 [ 182.476667][ T8931] xt_CONNSECMARK: invalid mode: 254 [ 182.604449][ T8939] netlink: 'syz.1.775': attribute type 1 has an invalid length. [ 182.642576][ T8939] netlink: 'syz.1.775': attribute type 1 has an invalid length. [ 182.953042][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.606625][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.631645][ T8947] netlink: 28 bytes leftover after parsing attributes in process `syz.1.777'. [ 183.963311][ T8970] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 183.999048][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.222064][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.322551][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 184.333614][ T8990] sch_tbf: burst 3631 is lower than device lo mtu (11337746) ! [ 184.341946][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 184.355568][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 184.372720][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 184.387410][ T5829] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 184.414405][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 184.645683][ T35] bridge_slave_1: left allmulticast mode [ 184.645799][ T8999] netlink: 'syz.1.790': attribute type 39 has an invalid length. [ 184.651583][ T35] bridge_slave_1: left promiscuous mode [ 184.670301][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.699198][ T35] bridge_slave_0: left allmulticast mode [ 184.706867][ T35] bridge_slave_0: left promiscuous mode [ 184.737798][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.072710][ T9006] netlink: 4 bytes leftover after parsing attributes in process `syz.4.792'. [ 185.242164][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.260398][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.271104][ T35] bond0 (unregistering): Released all slaves [ 185.487234][ T9012] netlink: 716 bytes leftover after parsing attributes in process `syz.2.793'. [ 186.090075][ T9027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.797'. [ 186.090247][ T9030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.797'. [ 186.221575][ C0] bridge0: port 1(ip6gretap0) entered learning state [ 186.336803][ T8987] chnl_net:caif_netlink_parms(): no params data found [ 186.415538][ T35] hsr_slave_0: left promiscuous mode [ 186.422458][ T9047] netlink: 44 bytes leftover after parsing attributes in process `syz.1.801'. [ 186.435294][ T35] hsr_slave_1: left promiscuous mode [ 186.445161][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.455516][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.462785][ T5829] Bluetooth: hci0: command tx timeout [ 186.486150][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.494017][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.546358][ T35] veth1_macvtap: left promiscuous mode [ 186.556300][ T35] veth0_macvtap: left promiscuous mode [ 186.566651][ T35] veth1_vlan: left promiscuous mode [ 186.575470][ T35] veth0_vlan: left promiscuous mode [ 187.200488][ T35] team0 (unregistering): Port device team_slave_1 removed [ 187.253895][ T35] team0 (unregistering): Port device team_slave_0 removed [ 187.646947][ T9061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.803'. [ 187.715161][ T9062] netlink: 12 bytes leftover after parsing attributes in process `syz.3.803'. [ 187.754664][ T9053] bridge0: entered promiscuous mode [ 187.763304][ T9053] macvlan2: entered promiscuous mode [ 187.769817][ T9053] bridge0: port 4(macvlan2) entered blocking state [ 187.776648][ T9053] bridge0: port 4(macvlan2) entered disabled state [ 187.784970][ T9053] macvlan2: entered allmulticast mode [ 187.790667][ T9053] bridge0: entered allmulticast mode [ 187.799411][ T9053] macvlan2: left allmulticast mode [ 187.805171][ T9053] bridge0: left allmulticast mode [ 187.811538][ T9053] bridge0: left promiscuous mode [ 187.912592][ T9059] netlink: 'syz.3.803': attribute type 21 has an invalid length. [ 188.120774][ T8987] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.127933][ T8987] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.149831][ T8987] bridge_slave_0: entered allmulticast mode [ 188.159453][ T8987] bridge_slave_0: entered promiscuous mode [ 188.189612][ T8987] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.222597][ T8987] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.230286][ T8987] bridge_slave_1: entered allmulticast mode [ 188.237414][ T8987] bridge_slave_1: entered promiscuous mode [ 188.335569][ T8987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.377166][ T9078] vlan3: entered promiscuous mode [ 188.385963][ T9078] geneve1: entered promiscuous mode [ 188.402556][ T9078] vlan3: entered allmulticast mode [ 188.418173][ T9078] geneve1: entered allmulticast mode [ 188.442218][ T9080] vlan0: entered promiscuous mode [ 188.447312][ T9080] vlan0: entered allmulticast mode [ 188.477523][ T8987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.540104][ T5829] Bluetooth: hci0: command tx timeout [ 188.567789][ T8987] team0: Port device team_slave_0 added [ 188.598068][ T8987] team0: Port device team_slave_1 added [ 188.673503][ T8987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.683878][ T8987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.712229][ T8987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.726523][ T8987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.733901][ T8987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.760767][ T8987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.848159][ T8987] hsr_slave_0: entered promiscuous mode [ 188.864803][ T8987] hsr_slave_1: entered promiscuous mode [ 188.879466][ T8987] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.898219][ T8987] Cannot create hsr debugfs directory [ 189.142253][ T9111] netlink: 2 bytes leftover after parsing attributes in process `syz.3.817'. [ 189.275143][ T9112] 0XD: left allmulticast mode [ 189.293397][ T9112] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 189.407347][ T9119] ip6gretap0: left allmulticast mode [ 189.422055][ T9119] ip6gretap0: left promiscuous mode [ 189.427639][ T9119] bridge0: port 1(ip6gretap0) entered disabled state [ 189.471234][ T9119] bond0: (slave bond_slave_0): Releasing backup interface [ 189.496091][ T9119] bond0: (slave bond_slave_1): Releasing backup interface [ 189.544002][ T9119] team0: Port device team_slave_0 removed [ 189.565887][ T9119] team0: Port device team_slave_1 removed [ 189.603179][ T9119] bond0: (slave netdevsim0): Releasing backup interface [ 189.710969][ T9119] team0: Port device bridge0 removed [ 189.951733][ T9127] ebt_limit: overflow, try lower: 570423552/2483027968 [ 190.419265][ T8987] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 190.653259][ T8987] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 190.660449][ T5829] Bluetooth: hci0: command tx timeout [ 190.674114][ T8987] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 190.731371][ T8987] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 190.973674][ T8987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.991564][ T8987] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.015860][ T6233] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.023065][ T6233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.055255][ T6233] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.062430][ T6233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.311570][ T9148] bond2: entered promiscuous mode [ 191.316679][ T9148] bond2: entered allmulticast mode [ 191.322298][ T9148] 8021q: adding VLAN 0 to HW filter on device bond2 [ 191.711573][ T9148] bond2 (unregistering): Released all slaves [ 191.994322][ T8987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.181355][ T8987] veth0_vlan: entered promiscuous mode [ 192.272768][ T8987] veth1_vlan: entered promiscuous mode [ 192.358988][ T9175] vlan4: entered promiscuous mode [ 192.370147][ T9175] vlan4: entered allmulticast mode [ 192.424206][ T8987] veth0_macvtap: entered promiscuous mode [ 192.442609][ T9178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.461000][ T8987] veth1_macvtap: entered promiscuous mode [ 192.473672][ T9178] netlink: 'syz.2.835': attribute type 10 has an invalid length. [ 192.512666][ T8987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.536000][ T8987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.568982][ T8987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.602000][ T8987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.621310][ T8987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.632199][ T8987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.644674][ T8987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.655606][ T8987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.666696][ T8987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.678302][ T8987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.700165][ T5829] Bluetooth: hci0: command tx timeout [ 192.722852][ T8987] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.750049][ T8987] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.774950][ T8987] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.799347][ T8987] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.957948][ T6234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.990870][ T6234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.149693][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.183962][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.373537][ T9186] IPVS: set_ctl: invalid protocol: 92 172.30.0.3:20000 [ 193.407623][ T9186] netlink: 'syz.2.838': attribute type 39 has an invalid length. [ 193.531582][ T9186] smc: removing net device wg0 with user defined pnetid SYZ0 [ 193.862834][ T9202] netlink: 16 bytes leftover after parsing attributes in process `syz.2.843'. [ 193.979204][ T9206] netlink: 4 bytes leftover after parsing attributes in process `syz.4.844'. [ 194.041364][ T9206] netlink: 4 bytes leftover after parsing attributes in process `syz.4.844'. [ 194.556984][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.663040][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.505516][ T9223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.848'. [ 195.557296][ T9223] netlink: 48 bytes leftover after parsing attributes in process `syz.1.848'. [ 195.570331][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.649658][ T9230] netlink: 'syz.2.849': attribute type 1 has an invalid length. [ 195.790338][ T9231] x_tables: eb_tables: nfacct.0 match: invalid size 40 (kernel) != (user) 31 [ 195.855284][ T5143] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 195.867226][ T5143] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 195.882251][ T9230] 8021q: adding VLAN 0 to HW filter on device bond2 [ 195.895260][ T5143] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 195.899542][ T9241] netlink: 92 bytes leftover after parsing attributes in process `syz.1.853'. [ 195.921378][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.933992][ T5143] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 195.936175][ T9241] netlink: 16 bytes leftover after parsing attributes in process `syz.1.853'. [ 195.975817][ T5143] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 195.983758][ T5143] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 196.091089][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.158858][ T9248] netlink: 16 bytes leftover after parsing attributes in process `syz.3.855'. [ 196.178993][ T9248] netlink: 4 bytes leftover after parsing attributes in process `syz.3.855'. [ 196.189695][ T9248] netlink: 4 bytes leftover after parsing attributes in process `syz.3.855'. [ 196.505217][ T35] bridge_slave_1: left allmulticast mode [ 196.507619][ T9258] netlink: 'syz.1.857': attribute type 2 has an invalid length. [ 196.524909][ T35] bridge_slave_1: left promiscuous mode [ 196.537700][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.554560][ T35] bridge_slave_0: left allmulticast mode [ 196.560951][ T35] bridge_slave_0: left promiscuous mode [ 196.566760][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.025992][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.037388][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.047828][ T35] bond0 (unregistering): Released all slaves [ 197.077362][ T9260] pim6reg: entered allmulticast mode [ 197.098410][ T9267] syzkaller1: entered promiscuous mode [ 197.133616][ T9267] syzkaller1: entered allmulticast mode [ 197.344295][ T9277] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 197.373060][ T9279] ipip0: entered promiscuous mode [ 197.564199][ T9283] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 197.747747][ T9287] vlan2: entered promiscuous mode [ 197.753517][ T9287] bridge0: entered promiscuous mode [ 197.761532][ T9287] bridge0: port 3(vlan2) entered blocking state [ 197.768101][ T9287] bridge0: port 3(vlan2) entered disabled state [ 197.774729][ T9287] vlan2: entered allmulticast mode [ 197.780288][ T9287] bridge0: entered allmulticast mode [ 197.797715][ T9287] vlan2: left allmulticast mode [ 197.803400][ T9287] bridge0: left allmulticast mode [ 197.809812][ T9287] bridge0: left promiscuous mode [ 197.957000][ T35] hsr_slave_0: left promiscuous mode [ 197.963671][ T35] hsr_slave_1: left promiscuous mode [ 197.971172][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.984942][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.993784][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.002947][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.027025][ T35] veth1_macvtap: left promiscuous mode [ 198.032982][ T35] veth0_macvtap: left promiscuous mode [ 198.038606][ T35] veth1_vlan: left promiscuous mode [ 198.048131][ T35] veth0_vlan: left promiscuous mode [ 198.060298][ T5143] Bluetooth: hci0: command tx timeout [ 198.512746][ T35] team0 (unregistering): Port device team_slave_1 removed [ 198.555349][ T35] team0 (unregistering): Port device team_slave_0 removed [ 199.013331][ T9236] chnl_net:caif_netlink_parms(): no params data found [ 199.088889][ T9306] __nla_validate_parse: 9 callbacks suppressed [ 199.088916][ T9306] netlink: 60 bytes leftover after parsing attributes in process `syz.3.869'. [ 199.224785][ T9313] x_tables: ip6_tables: rpfilter.0 match: invalid size 8 (kernel) != (user) 48 [ 199.301178][ T9236] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.320366][ T9236] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.327624][ T9236] bridge_slave_0: entered allmulticast mode [ 199.358476][ T9236] bridge_slave_0: entered promiscuous mode [ 199.374313][ T9236] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.383201][ T9236] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.398913][ T9236] bridge_slave_1: entered allmulticast mode [ 199.406792][ T9236] bridge_slave_1: entered promiscuous mode [ 199.478974][ T9236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.512004][ T9236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.620937][ T9236] team0: Port device team_slave_0 added [ 199.639383][ T9236] team0: Port device team_slave_1 added [ 199.716524][ T9236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.723910][ T9236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.750103][ T9236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.765129][ T9236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.773267][ T9236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.803055][ T9236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.935642][ T9236] hsr_slave_0: entered promiscuous mode [ 199.970462][ T9308] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 199.987672][ T9236] hsr_slave_1: entered promiscuous mode [ 200.020774][ T9236] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 200.028446][ T9236] Cannot create hsr debugfs directory [ 200.140420][ T5846] Bluetooth: hci0: command tx timeout [ 200.224299][ T9345] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0103 with DS=0xa [ 200.285492][ T9342] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 200.311055][ T118] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 200.355679][ T9348] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 200.392050][ T9348] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 200.671530][ T9361] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 200.690205][ T9361] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 200.698702][ T9361] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 200.711923][ T9363] syz.3.884[9363] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 200.712044][ T9363] syz.3.884[9363] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 200.733590][ T9363] syz.3.884[9363] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 200.756934][ T9363] Bluetooth: MGMT ver 1.23 [ 200.850262][ T118] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 201.156484][ T5849] IPVS: starting estimator thread 0... [ 201.165412][ T9236] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 201.178133][ T9236] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 201.198946][ T9236] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 201.207418][ T9379] x_tables: duplicate underflow at hook 2 [ 201.240647][ T9236] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 201.270090][ T9376] IPVS: using max 20 ests per chain, 48000 per kthread [ 201.364158][ T9236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.421995][ T9382] can: request_module (can-proto-0) failed. [ 201.437256][ T9236] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.471678][ T6228] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.478826][ T6228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.521708][ T9389] netlink: 'syz.3.889': attribute type 10 has an invalid length. [ 201.559727][ T9390] netlink: 'syz.2.890': attribute type 32 has an invalid length. [ 201.571550][ T6234] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.578702][ T6234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.640285][ T9389] bond0: (slave vxcan2): The slave device specified does not support setting the MAC address [ 201.663967][ T9389] bond0: (slave vxcan2): Error -95 calling set_mac_address [ 201.747129][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 201.753461][ T5835] Bluetooth: hci3: command 0x0406 tx timeout [ 201.753476][ T5840] Bluetooth: hci1: command 0x0406 tx timeout [ 201.922958][ T9404] netlink: 'syz.2.895': attribute type 10 has an invalid length. [ 201.954610][ T9404] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 202.221411][ T5143] Bluetooth: hci0: command tx timeout [ 202.225947][ T9419] vlan2: entered promiscuous mode [ 202.260393][ T9419] team0: entered promiscuous mode [ 202.278039][ T9419] team_slave_0: entered promiscuous mode [ 202.304774][ T9419] team_slave_1: entered promiscuous mode [ 202.331516][ T9419] team0: Device vlan2 is already an upper device of the team interface [ 202.350678][ T9419] team0: left promiscuous mode [ 202.371123][ T9419] team_slave_0: left promiscuous mode [ 202.377097][ T9419] team_slave_1: left promiscuous mode [ 202.731357][ T9236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.835224][ T9236] veth0_vlan: entered promiscuous mode [ 202.881978][ T9236] veth1_vlan: entered promiscuous mode [ 202.929218][ T9236] veth0_macvtap: entered promiscuous mode [ 202.940843][ T9236] veth1_macvtap: entered promiscuous mode [ 202.974951][ T9236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.000045][ T9236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.010053][ T9236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.020737][ T9236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.031998][ T9236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.062312][ T9236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.074149][ T9236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.088024][ T9236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.104252][ T9236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.115577][ T9236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.162964][ T9456] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 203.176705][ T9236] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.196210][ T9236] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.216517][ T9236] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.247317][ T9236] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.438849][ T9470] netlink: 32 bytes leftover after parsing attributes in process `syz.3.910'. [ 203.452103][ T9474] netlink: 'syz.3.910': attribute type 2 has an invalid length. [ 203.475983][ T9470] netlink: 44 bytes leftover after parsing attributes in process `syz.3.910'. [ 203.518405][ T9470] netlink: 44 bytes leftover after parsing attributes in process `syz.3.910'. [ 203.529577][ T9476] netlink: 'syz.1.912': attribute type 5 has an invalid length. [ 203.625221][ T9476] ip6erspan0: entered promiscuous mode [ 203.761228][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.769418][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.778975][ T5121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.802737][ T5121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.039388][ T9497] netlink: 'syz.1.920': attribute type 5 has an invalid length. [ 204.214934][ T9497] netlink: 48 bytes leftover after parsing attributes in process `syz.1.920'. [ 204.489308][ T9523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.926'. [ 204.519189][ T9523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.926'. [ 204.712788][ T9532] xt_CT: No such helper "snmp" [ 204.719760][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.770823][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.790949][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 204.944153][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.543364][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.717238][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.789131][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.881569][ T11] bridge_slave_1: left allmulticast mode [ 205.887350][ T11] bridge_slave_1: left promiscuous mode [ 205.893316][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.904591][ T11] bridge_slave_0: left allmulticast mode [ 205.911547][ T11] bridge_slave_0: left promiscuous mode [ 205.917232][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.028460][ T9545] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 206.125517][ T9556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.933'. [ 206.381338][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 206.400857][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 206.410031][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 206.430020][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 206.437795][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 206.445313][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 206.544640][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.555876][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.568904][ T11] bond0 (unregistering): Released all slaves [ 206.591173][ T9555] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present [ 206.600776][ T9555] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9) [ 206.665800][ T9559] bridge3: entered allmulticast mode [ 206.928357][ T9573] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 206.994080][ T29] audit: type=1107 audit(1737042126.483:2): pid=9574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=' [ 206.994080][ T29] ' [ 207.049330][ T29] audit: type=1107 audit(1737042126.523:3): pid=9574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=' [ 207.049330][ T29] ' [ 207.101207][ T9580] netlink: 12 bytes leftover after parsing attributes in process `syz.3.936'. [ 207.138289][ T9579] dvmrp5: entered allmulticast mode [ 207.205178][ T9585] netlink: 28 bytes leftover after parsing attributes in process `syz.4.940'. [ 207.239337][ T9584] netlink: 28 bytes leftover after parsing attributes in process `syz.4.940'. [ 207.466291][ T9597] netlink: 12 bytes leftover after parsing attributes in process `syz.4.943'. [ 207.564793][ T9597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.943'. [ 207.593962][ T9597] netlink: 4 bytes leftover after parsing attributes in process `syz.4.943'. [ 207.604652][ T9597] netlink: 'syz.4.943': attribute type 1 has an invalid length. [ 207.697908][ T9597] nbd: socks must be embedded in a SOCK_ITEM attr [ 207.711029][ T9597] block nbd1: shutting down sockets [ 207.725190][ T11] hsr_slave_0: left promiscuous mode [ 207.750426][ T11] hsr_slave_1: left promiscuous mode [ 207.761205][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.776295][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.828749][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.837811][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.883437][ T11] veth1_macvtap: left promiscuous mode [ 207.889102][ T11] veth0_macvtap: left promiscuous mode [ 207.910198][ T11] veth1_vlan: left promiscuous mode [ 207.915509][ T11] veth0_vlan: left promiscuous mode [ 208.383336][ T11] team0 (unregistering): Port device team_slave_1 removed [ 208.426316][ T11] team0 (unregistering): Port device team_slave_0 removed [ 208.541143][ T53] Bluetooth: hci0: command tx timeout [ 208.804490][ T9571] dvmrp5: left allmulticast mode [ 209.157381][ T9560] chnl_net:caif_netlink_parms(): no params data found [ 209.403410][ T9560] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.417361][ T9560] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.424827][ T9560] bridge_slave_0: entered allmulticast mode [ 209.433135][ T9560] bridge_slave_0: entered promiscuous mode [ 209.450441][ T9560] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.457793][ T9560] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.465615][ T9560] bridge_slave_1: entered allmulticast mode [ 209.473151][ T9560] bridge_slave_1: entered promiscuous mode [ 209.528438][ T9560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.543182][ T9560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.601790][ T9560] team0: Port device team_slave_0 added [ 209.622114][ T9560] team0: Port device team_slave_1 added [ 209.669687][ T9560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.677069][ T9560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.705181][ T9560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.724170][ T9560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.732056][ T9560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.758369][ T9560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.817806][ T9560] hsr_slave_0: entered promiscuous mode [ 209.826033][ T9560] hsr_slave_1: entered promiscuous mode [ 209.832567][ T9560] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.840238][ T9560] Cannot create hsr debugfs directory [ 210.310401][ T9662] xt_CT: You must specify a L4 protocol and not use inversions on it [ 210.393655][ T9671] netlink: 'syz.1.960': attribute type 10 has an invalid length. [ 210.629905][ T53] Bluetooth: hci0: command tx timeout [ 210.771771][ T9682] __nla_validate_parse: 5 callbacks suppressed [ 210.771794][ T9682] netlink: 20 bytes leftover after parsing attributes in process `syz.1.963'. [ 210.808685][ T9682] netlink: 12 bytes leftover after parsing attributes in process `syz.1.963'. [ 211.007948][ T9560] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 211.068922][ T9560] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 211.120035][ T9693] ieee802154 phy0 wpan0: encryption failed: -22 [ 211.129203][ T9560] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 211.157272][ T9693] ieee802154 phy0 wpan0: encryption failed: -22 [ 211.174364][ T9694] netlink: 'syz.4.965': attribute type 3 has an invalid length. [ 211.199542][ T9560] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 211.235083][ T9696] IPVS: stopping backup sync thread 9698 ... [ 211.235404][ T9694] netlink: 'syz.4.965': attribute type 3 has an invalid length. [ 211.243796][ T9698] IPVS: sync thread started: state = BACKUP, mcast_ifn = gre0, syncid = 4, id = 0 [ 211.370751][ T9704] netlink: 20 bytes leftover after parsing attributes in process `syz.3.967'. [ 211.425180][ T9560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.443292][ T9560] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.467978][ T9704] netlink: 'syz.3.967': attribute type 5 has an invalid length. [ 211.477155][ T9560] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 211.487606][ T9560] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 211.512398][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.519573][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.552171][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.559331][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.998038][ T9560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.031964][ T9560] veth0_vlan: entered promiscuous mode [ 212.042779][ T9560] veth1_vlan: entered promiscuous mode [ 212.069679][ T9560] veth0_macvtap: entered promiscuous mode [ 212.078953][ T9560] veth1_macvtap: entered promiscuous mode [ 212.095358][ T9560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.106221][ T9560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.116406][ T9560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.127164][ T9560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.146027][ T9560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.155841][ T9560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.166510][ T9560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.176584][ T9560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.187232][ T9560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.202024][ T9560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.218755][ T9733] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (7) [ 212.244848][ T9560] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.254199][ T9560] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.289934][ T9560] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.308997][ T9560] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.331892][ T9733] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (7) [ 212.348753][ T9733] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (7) [ 212.349081][ T9736] netlink: 'syz.3.975': attribute type 49 has an invalid length. [ 212.407540][ T9733] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (7) [ 212.417917][ T9733] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (7) [ 212.458313][ T9733] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (7) [ 212.485540][ T9733] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (7) [ 212.583223][ T9739] tc_dump_action: action bad kind [ 212.608415][ T9733] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (7) [ 212.631972][ T9733] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (7) [ 212.694550][ T9743] bond3: entered promiscuous mode [ 212.699746][ T9743] bond3: entered allmulticast mode [ 212.710245][ T53] Bluetooth: hci0: command tx timeout [ 212.713485][ T9743] 8021q: adding VLAN 0 to HW filter on device bond3 [ 212.814032][ T9733] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (7) [ 212.860433][ T9733] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (7) [ 212.890903][ T9733] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (7) [ 212.926634][ T9733] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (7) [ 212.950700][ T9733] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (7) [ 212.982105][ T6234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.008860][ T6234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.149176][ T5121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.187857][ T5121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.351710][ T9762] netlink: 52 bytes leftover after parsing attributes in process `syz.3.982'. [ 213.372123][ T9762] nbd: must specify at least one socket [ 213.374092][ T9763] netlink: 80 bytes leftover after parsing attributes in process `syz.4.981'. [ 213.387460][ T53] Bluetooth: hci4: link tx timeout [ 213.388381][ T9762] netlink: 80 bytes leftover after parsing attributes in process `syz.3.982'. [ 213.393098][ T53] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 213.412410][ T53] Bluetooth: hci4: link tx timeout [ 213.419536][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.442750][ T9764] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 213.453640][ T9764] tipc: Enabled bearer , priority 10 [ 213.581497][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 213.719961][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 213.860074][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 213.999991][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 214.150027][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 214.245040][ T9785] ipip0: entered promiscuous mode [ 214.267649][ T9788] netlink: 5 bytes leftover after parsing attributes in process `syz.1.991'. [ 214.275000][ T9791] netlink: 32 bytes leftover after parsing attributes in process `syz.3.992'. [ 214.289923][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 214.297301][ T9788] 1XD: renamed from 30XD [ 214.320569][ T9788] 1XD: entered allmulticast mode [ 214.329683][ T9788] A link change request failed with some changes committed already. Interface 31XD may have been left with an inconsistent configuration, please check. [ 214.392118][ T9798] dccp_invalid_packet: P.Data Offset(0) too small [ 214.409479][ T9798] netem: incorrect ge model size [ 214.421171][ T9798] netem: change failed [ 214.429217][ T9799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.992'. [ 214.441215][ T9789] netlink: 'syz.4.990': attribute type 1 has an invalid length. [ 214.442728][ T7349] tipc: Node number set to 3758096385 [ 214.589971][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 214.811520][ T9820] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 214.848945][ T9820] x_tables: ip_tables: osf match: only valid for protocol 6 [ 214.871158][ T9822] netlink: 'syz.3.999': attribute type 13 has an invalid length. [ 214.878237][ T9824] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1000'. [ 215.157060][ T6231] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.500232][ T53] Bluetooth: hci4: command 0x0405 tx timeout [ 215.608132][ T6231] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.676619][ T6231] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.770437][ T6231] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.882540][ T6231] bridge_slave_1: left allmulticast mode [ 215.888309][ T6231] bridge_slave_1: left promiscuous mode [ 215.894341][ T6231] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.903206][ T6231] bridge_slave_0: left allmulticast mode [ 215.908863][ T6231] bridge_slave_0: left promiscuous mode [ 215.915693][ T6231] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.310480][ T9847] __nla_validate_parse: 1 callbacks suppressed [ 216.310500][ T9847] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1008'. [ 216.354259][ T6231] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.391892][ T6231] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.406390][ T6231] bond0 (unregistering): Released all slaves [ 216.420195][ T9854] netlink: 'syz.3.1008': attribute type 4 has an invalid length. [ 216.586191][ T9852] syzkaller1: entered promiscuous mode [ 216.600791][ T9852] syzkaller1: entered allmulticast mode [ 216.759839][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 216.803671][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 216.813078][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 216.827325][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 216.851416][ T5829] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 216.863093][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 216.955527][ T9872] netlink: 'syz.3.1012': attribute type 1 has an invalid length. [ 217.602732][ T5829] Bluetooth: hci4: command 0x0405 tx timeout [ 217.702262][ T9892] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1020'. [ 217.720300][ T6231] hsr_slave_0: left promiscuous mode [ 217.730642][ T6231] hsr_slave_1: left promiscuous mode [ 217.758838][ T6231] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.786397][ T6231] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.838018][ T6231] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.854626][ T6231] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.896651][ T9906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1023'. [ 217.944109][ T6231] veth1_macvtap: left promiscuous mode [ 217.949694][ T6231] veth0_macvtap: left promiscuous mode [ 217.965655][ T6231] veth1_vlan: left promiscuous mode [ 217.978263][ T6231] veth0_vlan: left promiscuous mode [ 218.258392][ T9931] xt_CT: No such helper "snmp" [ 218.535472][ T6231] team0 (unregistering): Port device team_slave_1 removed [ 218.549986][ C0] net_ratelimit: 4 callbacks suppressed [ 218.550008][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 218.584105][ T6231] team0 (unregistering): Port device team_slave_0 removed [ 218.940819][ T5143] Bluetooth: hci0: command tx timeout [ 219.006665][ T9928] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1023'. [ 219.282312][ T9863] chnl_net:caif_netlink_parms(): no params data found [ 219.579938][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 219.591587][ T9972] netlink: 'syz.1.1034': attribute type 39 has an invalid length. [ 219.669947][ T5143] Bluetooth: hci4: command 0x0405 tx timeout [ 219.702006][ T9863] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.709161][ T9863] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.716624][ T9863] bridge_slave_0: entered allmulticast mode [ 219.725086][ T9863] bridge_slave_0: entered promiscuous mode [ 219.770426][ T9980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1036'. [ 219.802674][ T9863] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.810549][ T9863] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.817903][ T9863] bridge_slave_1: entered allmulticast mode [ 219.826120][ T9863] bridge_slave_1: entered promiscuous mode [ 219.909633][ T9985] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1038'. [ 219.930748][ T9863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.949470][ T9981] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1036'. [ 220.013894][ T9985] bond0: (slave wlan1): Releasing backup interface [ 220.026569][ T9985] mac80211_hwsim hwsim11 wlan1 (unregistering): left promiscuous mode [ 220.047959][ T9863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.228148][ T9990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.238745][ T9863] team0: Port device team_slave_0 added [ 220.263274][ T9863] team0: Port device team_slave_1 added [ 220.275114][ T9990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.335608][ T9990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1039'. [ 220.360870][ T9993] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.373072][ T9990] netlink: 'syz.4.1039': attribute type 10 has an invalid length. [ 220.446998][ T9863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.464657][ T9863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.493466][ T9863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.506141][ T9863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.513223][ T9863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.539415][ T9863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.585283][ T9997] tipc: Enabled bearer , priority 0 [ 220.609192][ T9992] tipc: Disabling bearer [ 220.629991][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 220.717577][ T9863] hsr_slave_0: entered promiscuous mode [ 220.725973][ T9863] hsr_slave_1: entered promiscuous mode [ 220.732231][ T9863] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 220.739998][ T9863] Cannot create hsr debugfs directory [ 220.777793][T10003] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1041'. [ 220.802774][T10003] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.812042][T10003] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.820843][T10003] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.829567][T10003] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.865774][T10006] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1042'. [ 220.912170][T10006] netlink: 'syz.3.1042': attribute type 10 has an invalid length. [ 220.984700][T10006] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 220.997623][T10006] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 221.020119][ T5143] Bluetooth: hci0: command tx timeout [ 221.025900][T10009] dvmrp0: entered allmulticast mode [ 221.314865][T10022] bridge0: entered promiscuous mode [ 221.321307][T10022] __nla_validate_parse: 1 callbacks suppressed [ 221.321326][T10022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1046'. [ 221.336552][T10022] bond2: left allmulticast mode [ 221.363589][T10022] bond2: left promiscuous mode [ 221.368611][T10022] bridge0: port 3(bond2) entered disabled state [ 221.457464][T10022] bridge_slave_1: left allmulticast mode [ 221.478880][T10022] bridge_slave_1: left promiscuous mode [ 221.491567][T10030] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 221.500266][T10022] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.522053][ T29] audit: type=1107 audit(1737042141.013:4): pid=10031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Dȿ [ 221.522053][ T29] Dąg[|#5QC􁜖2qn>wT Y_ A/I~JyՏ{_aˊ&|snбNt ȋ'0l#"g ibj?Af4R8yNUjjv8nW$Bv,{먴 *VWz *E64' [ 221.555205][T10022] bridge_slave_0: left allmulticast mode [ 221.564045][T10022] bridge_slave_0: left promiscuous mode [ 221.584182][T10022] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.633390][T10022] bridge0 (unregistering): left promiscuous mode [ 221.662040][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 221.687741][T10041] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1051'. [ 221.697264][T10041] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1051'. [ 221.793504][T10043] dccp_v6_rcv: dropped packet with invalid checksum [ 221.804711][T10045] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1052'. [ 221.873125][T10045] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1052'. [ 221.925948][ T9863] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 221.938600][T10045] Bluetooth: MGMT ver 1.23 [ 221.951483][ T9863] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 222.012254][ T9863] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 222.024200][ T9863] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 222.114035][T10054] raw_sendmsg: syz.3.1054 forgot to set AF_INET. Fix it! [ 222.223606][ T9863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.282870][ T9863] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.293105][T10058] lo: entered promiscuous mode [ 222.309447][ T6234] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.316663][ T6234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.334056][T10057] lo: left promiscuous mode [ 222.344105][T10059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1055'. [ 222.365362][ T6228] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.372593][ T6228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.710058][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 222.733376][T10073] netlink: 'syz.4.1060': attribute type 1 has an invalid length. [ 222.758032][T10073] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1060'. [ 222.810181][T10073] bridge2: entered promiscuous mode [ 222.833518][ T9863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.915251][ T9863] veth0_vlan: entered promiscuous mode [ 222.942043][ T9863] veth1_vlan: entered promiscuous mode [ 222.991861][ T9863] veth0_macvtap: entered promiscuous mode [ 223.012871][ T9863] veth1_macvtap: entered promiscuous mode [ 223.047726][ T9863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.068809][ T9863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.089017][ T9863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.110042][ T5829] Bluetooth: hci0: command tx timeout [ 223.119605][ T9863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.150901][ T9863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.179126][ T9863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.209887][ T9863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.229996][ T9863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.245022][ T9863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.273056][ T9863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.289126][ T9863] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.298489][ T9863] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.307932][ T9863] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.318417][ T9863] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.494469][T10088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1065'. [ 223.750002][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 223.990099][ T5143] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 224.789984][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 225.179990][ T5143] Bluetooth: hci0: command 0x0419 tx timeout [ 225.432453][ T3923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.456973][ T3923] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.495989][ T6228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.520145][ T6228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.539422][T10099] xt_CT: You must specify a L4 protocol and not use inversions on it [ 225.824078][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 226.195540][T10124] netlink: 'syz.4.1075': attribute type 5 has an invalid length. [ 226.267537][T10125] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 226.810305][ T6234] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.859928][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 226.999390][T10141] openvswitch: netlink: Actions may not be safe on all matching packets [ 227.017699][T10141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1078'. [ 227.135593][ T6234] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.216251][ T6234] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.290585][ T6234] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.375177][ T6234] bridge_slave_1: left allmulticast mode [ 227.381276][ T6234] bridge_slave_1: left promiscuous mode [ 227.387031][ T6234] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.398295][ T6234] bridge_slave_0: left allmulticast mode [ 227.404441][ T6234] bridge_slave_0: left promiscuous mode [ 227.410406][ T6234] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.723418][ T6234] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.734347][ T6234] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.744461][ T6234] bond0 (unregistering): Released all slaves [ 227.914786][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 228.093281][T10157] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1082'. [ 228.391379][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 228.401027][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 228.412000][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 228.432289][ T6234] hsr_slave_0: left promiscuous mode [ 228.438168][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 228.446644][ T5829] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 228.455487][ T6234] hsr_slave_1: left promiscuous mode [ 228.462224][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 228.470475][ T6234] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.478177][ T6234] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.505836][ T6234] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.513561][ T6234] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.597566][ T6234] veth1_macvtap: left promiscuous mode [ 228.609117][ T6234] veth0_macvtap: left promiscuous mode [ 228.619586][ T6234] veth1_vlan: left promiscuous mode [ 228.629714][ T6234] veth0_vlan: left promiscuous mode [ 228.954245][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 228.997092][T10200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1089'. [ 229.150131][ T6234] team0 (unregistering): Port device team_slave_1 removed [ 229.192100][ T6234] team0 (unregistering): Port device team_slave_0 removed [ 229.989922][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 230.016237][T10217] tipc: Started in network mode [ 230.021369][T10217] tipc: Node identity 080211000001, cluster identity 4711 [ 230.037539][T10217] tipc: Enabled bearer , priority 0 [ 230.129064][T10220] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 230.146328][T10225] netlink: 'syz.2.1094': attribute type 11 has an invalid length. [ 230.160884][T10225] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1094'. [ 230.175669][T10225] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1094'. [ 230.342749][T10178] chnl_net:caif_netlink_parms(): no params data found [ 230.498093][T10178] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.505619][T10178] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.513100][T10178] bridge_slave_0: entered allmulticast mode [ 230.520366][T10178] bridge_slave_0: entered promiscuous mode [ 230.531991][T10178] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.541555][ T5143] Bluetooth: hci0: command tx timeout [ 230.547944][T10178] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.565567][T10178] bridge_slave_1: entered allmulticast mode [ 230.578699][T10178] bridge_slave_1: entered promiscuous mode [ 230.697436][T10178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.743284][T10178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.863138][T10178] team0: Port device team_slave_0 added [ 230.872968][T10178] team0: Port device team_slave_1 added [ 231.020129][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 231.121790][T10178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.137552][T10178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.150102][ T5883] tipc: Node number set to 134418688 [ 231.200733][T10178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.240513][T10178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.247641][T10178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.280918][T10285] netlink: 'syz.2.1111': attribute type 1 has an invalid length. [ 231.299135][T10178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.323988][T10282] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1110'. [ 231.335685][T10282] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1110'. [ 231.366198][T10282] netlink: 'syz.1.1110': attribute type 10 has an invalid length. [ 231.429679][T10292] team0: Device gtp0 is of different type [ 231.519692][T10178] hsr_slave_0: entered promiscuous mode [ 231.527270][T10178] hsr_slave_1: entered promiscuous mode [ 231.534422][T10178] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.560283][T10178] Cannot create hsr debugfs directory [ 231.670348][T10303] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1116'. [ 231.697513][T10303] netlink: 'syz.2.1116': attribute type 9 has an invalid length. [ 232.070304][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 232.471183][T10333] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1123'. [ 232.620218][ T5143] Bluetooth: hci0: command tx timeout [ 232.736317][T10334] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1121'. [ 232.811015][T10178] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 232.857184][T10178] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 232.907411][T10178] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 232.919338][T10178] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 232.945562][T10349] IPv6: Can't replace route, no match found [ 233.100729][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 233.156692][T10178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.174019][T10354] erspan0: entered promiscuous mode [ 233.209241][T10178] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.259020][ T6228] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.266412][ T6228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.326134][ T6228] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.333356][ T6228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.604823][T10370] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 233.793752][T10376] can: request_module (can-proto-0) failed. [ 233.824254][T10178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.915723][T10178] veth0_vlan: entered promiscuous mode [ 233.937503][T10178] veth1_vlan: entered promiscuous mode [ 233.997839][T10178] veth0_macvtap: entered promiscuous mode [ 234.018853][T10178] veth1_macvtap: entered promiscuous mode [ 234.051832][T10178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.079993][T10178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.099969][T10178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.110718][T10178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.131339][T10178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.150133][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 234.159795][T10178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.171786][T10178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.189881][T10178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.200766][T10178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.212287][T10178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.223186][T10178] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.250078][T10178] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.269066][T10178] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.278669][T10178] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.448882][ T6233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.481730][ T6233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.566923][ T3923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.597718][ T3923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.725094][ T5829] Bluetooth: hci0: command tx timeout [ 235.018338][T10408] netlink: 'syz.2.1143': attribute type 1 has an invalid length. [ 235.105640][T10412] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 235.169564][T10417] netlink: 'syz.3.1145': attribute type 9 has an invalid length. [ 235.180016][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 235.187437][T10417] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1145'. [ 235.344325][T10415] netlink: 'syz.1.1139': attribute type 2 has an invalid length. [ 235.380040][T10415] netlink: 'syz.1.1139': attribute type 1 has an invalid length. [ 235.387852][T10415] netlink: 'syz.1.1139': attribute type 2 has an invalid length. [ 235.469816][T10429] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1148'. [ 235.746417][T10436] netlink: 'syz.3.1150': attribute type 1 has an invalid length. [ 235.764111][T10436] netlink: 'syz.3.1150': attribute type 4 has an invalid length. [ 235.817514][T10436] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.1150'. [ 236.220077][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 236.523520][T10458] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 236.550333][T10458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1154'. [ 236.779942][ T53] Bluetooth: hci0: command 0x0419 tx timeout [ 236.855091][T10471] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1159'. [ 236.871120][T10207] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] PREEMPT SMP KASAN PTI [ 236.883759][T10207] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 236.892232][T10207] CPU: 1 UID: 0 PID: 10207 Comm: kbnepd bnep0 Not tainted 6.13.0-rc6-syzkaller-01077-g9eb8069d9940 #0 [ 236.903193][T10207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 236.913262][T10207] RIP: 0010:klist_del+0x49/0x110 [ 236.918223][T10207] Code: f5 4d 89 f5 49 c1 ed 03 43 80 7c 25 00 00 74 08 4c 89 f7 e8 69 20 44 f6 49 8b 1e 48 83 e3 fe 48 8d 7b 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 4b 20 44 f6 4c 8b 7b 58 48 89 df e8 0f 51 [ 236.937847][T10207] RSP: 0018:ffffc900040b7828 EFLAGS: 00010202 [ 236.943934][T10207] RAX: 000000000000000b RBX: 0000000000000000 RCX: ffff888075358000 [ 236.951909][T10207] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 236.959889][T10207] RBP: ffffc900040b7950 R08: ffffffff82429f6a R09: 1ffff1100ad54cb4 [ 236.967871][T10207] R10: dffffc0000000000 R11: ffffed100ad54cb5 R12: dffffc0000000000 [ 236.975858][T10207] R13: 1ffff110042de98c R14: ffff8880216f4c60 R15: ffff88807cb38b88 [ 236.983843][T10207] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 236.992775][T10207] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 236.999363][T10207] CR2: 0000000020f48000 CR3: 000000005fd4c000 CR4: 00000000003526f0 [ 237.007353][T10207] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 237.015345][T10207] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 237.023324][T10207] Call Trace: [ 237.026602][T10207] [ 237.029554][T10207] ? __die_body+0x5f/0xb0 [ 237.033889][T10207] ? die_addr+0xb0/0xe0 [ 237.038052][T10207] ? exc_general_protection+0x3dd/0x5d0 [ 237.043627][T10207] ? asm_exc_general_protection+0x26/0x30 [ 237.049369][T10207] ? kernfs_put+0x20a/0x370 [ 237.053884][T10207] ? klist_del+0x49/0x110 [ 237.058222][T10207] ? klist_del+0x20/0x110 [ 237.062994][T10207] device_del+0x2c9/0x9b0 [ 237.067332][T10207] ? __pfx_device_del+0x10/0x10 [ 237.072189][T10207] ? netdev_unregister_kobject+0x178/0x250 [ 237.078004][T10207] unregister_netdevice_many_notify+0x1859/0x1da0 [ 237.084439][T10207] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 237.091211][T10207] ? rcu_is_watching+0x15/0xb0 [ 237.096039][T10207] ? trace_contention_end+0x3c/0x120 [ 237.101378][T10207] ? __mutex_lock+0x37f/0xee0 [ 237.106078][T10207] ? __pfx_lock_acquire+0x10/0x10 [ 237.111128][T10207] ? unregister_netdev+0x17/0x30 [ 237.116111][T10207] unregister_netdevice_queue+0x303/0x370 [ 237.121865][T10207] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 237.128114][T10207] ? down_write+0x18c/0x220 [ 237.132628][T10207] ? __pfx_down_write+0x10/0x10 [ 237.137495][T10207] unregister_netdev+0x21/0x30 [ 237.142271][T10207] bnep_session+0x2e3c/0x3030 [ 237.146979][T10207] ? __pfx_bnep_session+0x10/0x10 [ 237.152014][T10207] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 237.157910][T10207] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 237.164255][T10207] ? __pfx_woken_wake_function+0x10/0x10 [ 237.169895][T10207] ? __kthread_parkme+0x169/0x1d0 [ 237.174949][T10207] ? __pfx_bnep_session+0x10/0x10 [ 237.179980][T10207] kthread+0x2f0/0x390 [ 237.184057][T10207] ? __pfx_bnep_session+0x10/0x10 [ 237.189092][T10207] ? __pfx_kthread+0x10/0x10 [ 237.193773][T10207] ret_from_fork+0x4b/0x80 [ 237.198195][T10207] ? __pfx_kthread+0x10/0x10 [ 237.202798][T10207] ret_from_fork_asm+0x1a/0x30 [ 237.207576][T10207] [ 237.210592][T10207] Modules linked in: [ 237.215444][T10207] ---[ end trace 0000000000000000 ]--- [ 237.221216][T10207] RIP: 0010:klist_del+0x49/0x110 [ 237.226188][T10207] Code: f5 4d 89 f5 49 c1 ed 03 43 80 7c 25 00 00 74 08 4c 89 f7 e8 69 20 44 f6 49 8b 1e 48 83 e3 fe 48 8d 7b 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 4b 20 44 f6 4c 8b 7b 58 48 89 df e8 0f 51 [ 237.246087][T10207] RSP: 0018:ffffc900040b7828 EFLAGS: 00010202 [ 237.252393][T10207] RAX: 000000000000000b RBX: 0000000000000000 RCX: ffff888075358000 [ 237.261327][T10207] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 237.262316][T10473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1160'. [ 237.269316][T10207] RBP: ffffc900040b7950 R08: ffffffff82429f6a R09: 1ffff1100ad54cb4 [ 237.269336][T10207] R10: dffffc0000000000 R11: ffffed100ad54cb5 R12: dffffc0000000000 [ 237.269353][T10207] R13: 1ffff110042de98c R14: ffff8880216f4c60 R15: ffff88807cb38b88 [ 237.278329][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 237.286320][T10207] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 237.318229][T10207] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 237.324905][T10207] CR2: 0000000020f48000 CR3: 000000005fd4c000 CR4: 00000000003526f0 [ 237.333001][T10207] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 237.341080][T10207] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 237.349447][T10207] Kernel panic - not syncing: Fatal exception [ 237.355843][T10207] Kernel Offset: disabled [ 237.360170][T10207] Rebooting in 86400 seconds..