last executing test programs: 1m5.14107066s ago: executing program 3 (id=987): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'nr0\x00', &(0x7f00000000c0)=@ethtool_modinfo={0x42, 0x5, 0x69a3ea47}}) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1c3607d6030001000000000000000000040000f1800800188009ac0f00"], 0x1c}], 0x1}, 0x0) 1m1.238659978s ago: executing program 4 (id=2068): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0x1) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000000)={0x5, &(0x7f0000000040)=[{0x16, 0x0, 0x3}, {0x7, 0x9e, 0x2, 0x8}, {0x800, 0x1, 0x3, 0x100}, {0x4, 0x2, 0xb, 0x7}, {0xa, 0x3, 0x10, 0x2}]}) close(0x3) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x13, 0x0, 0x0) readv(r0, &(0x7f00000014c0)=[{&(0x7f0000000080)=""/90, 0x5a}, {&(0x7f0000000200)=""/193, 0xc1}, {&(0x7f0000000100)=""/22, 0x16}, {&(0x7f0000000140)=""/101, 0x65}, {&(0x7f0000000300)=""/207, 0xcf}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/182, 0xb6}], 0x7) 52.57852876s ago: executing program 3 (id=987): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'nr0\x00', &(0x7f00000000c0)=@ethtool_modinfo={0x42, 0x5, 0x69a3ea47}}) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1c3607d6030001000000000000000000040000f1800800188009ac0f00"], 0x1c}], 0x1}, 0x0) 50.942626191s ago: executing program 4 (id=2068): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0x1) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000000)={0x5, &(0x7f0000000040)=[{0x16, 0x0, 0x3}, {0x7, 0x9e, 0x2, 0x8}, {0x800, 0x1, 0x3, 0x100}, {0x4, 0x2, 0xb, 0x7}, {0xa, 0x3, 0x10, 0x2}]}) close(0x3) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x13, 0x0, 0x0) readv(r0, &(0x7f00000014c0)=[{&(0x7f0000000080)=""/90, 0x5a}, {&(0x7f0000000200)=""/193, 0xc1}, {&(0x7f0000000100)=""/22, 0x16}, {&(0x7f0000000140)=""/101, 0x65}, {&(0x7f0000000300)=""/207, 0xcf}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/182, 0xb6}], 0x7) 39.733153503s ago: executing program 3 (id=987): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'nr0\x00', &(0x7f00000000c0)=@ethtool_modinfo={0x42, 0x5, 0x69a3ea47}}) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1c3607d6030001000000000000000000040000f1800800188009ac0f00"], 0x1c}], 0x1}, 0x0) 37.514770066s ago: executing program 4 (id=2068): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0x1) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000000)={0x5, &(0x7f0000000040)=[{0x16, 0x0, 0x3}, {0x7, 0x9e, 0x2, 0x8}, {0x800, 0x1, 0x3, 0x100}, {0x4, 0x2, 0xb, 0x7}, {0xa, 0x3, 0x10, 0x2}]}) close(0x3) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x13, 0x0, 0x0) readv(r0, &(0x7f00000014c0)=[{&(0x7f0000000080)=""/90, 0x5a}, {&(0x7f0000000200)=""/193, 0xc1}, {&(0x7f0000000100)=""/22, 0x16}, {&(0x7f0000000140)=""/101, 0x65}, {&(0x7f0000000300)=""/207, 0xcf}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/182, 0xb6}], 0x7) 26.585582645s ago: executing program 3 (id=987): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'nr0\x00', &(0x7f00000000c0)=@ethtool_modinfo={0x42, 0x5, 0x69a3ea47}}) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1c3607d6030001000000000000000000040000f1800800188009ac0f00"], 0x1c}], 0x1}, 0x0) 25.416549797s ago: executing program 4 (id=2068): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0x1) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000000)={0x5, &(0x7f0000000040)=[{0x16, 0x0, 0x3}, {0x7, 0x9e, 0x2, 0x8}, {0x800, 0x1, 0x3, 0x100}, {0x4, 0x2, 0xb, 0x7}, {0xa, 0x3, 0x10, 0x2}]}) close(0x3) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x13, 0x0, 0x0) readv(r0, &(0x7f00000014c0)=[{&(0x7f0000000080)=""/90, 0x5a}, {&(0x7f0000000200)=""/193, 0xc1}, {&(0x7f0000000100)=""/22, 0x16}, {&(0x7f0000000140)=""/101, 0x65}, {&(0x7f0000000300)=""/207, 0xcf}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/182, 0xb6}], 0x7) 14.815446595s ago: executing program 3 (id=987): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'nr0\x00', &(0x7f00000000c0)=@ethtool_modinfo={0x42, 0x5, 0x69a3ea47}}) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1c3607d6030001000000000000000000040000f1800800188009ac0f00"], 0x1c}], 0x1}, 0x0) 13.528705425s ago: executing program 4 (id=2068): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0x1) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000000)={0x5, &(0x7f0000000040)=[{0x16, 0x0, 0x3}, {0x7, 0x9e, 0x2, 0x8}, {0x800, 0x1, 0x3, 0x100}, {0x4, 0x2, 0xb, 0x7}, {0xa, 0x3, 0x10, 0x2}]}) close(0x3) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x13, 0x0, 0x0) readv(r0, &(0x7f00000014c0)=[{&(0x7f0000000080)=""/90, 0x5a}, {&(0x7f0000000200)=""/193, 0xc1}, {&(0x7f0000000100)=""/22, 0x16}, {&(0x7f0000000140)=""/101, 0x65}, {&(0x7f0000000300)=""/207, 0xcf}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/182, 0xb6}], 0x7) 4.45285641s ago: executing program 2 (id=2537): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = epoll_create1(0x0) socket(0x1, 0x80802, 0x0) epoll_create1(0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x2000000d}) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000080)='cpuset\x00'}, 0x30) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000420000003c00128008000100677470003000028008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6], 0x5c}, 0x1, 0xba01}, 0x0) r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) pread64(r7, &(0x7f00000011c0)=""/99, 0x63, 0x500) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x400}, 0x20}}, 0x0) 3.425053837s ago: executing program 0 (id=2543): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x2f}, {0x7, 0x0, 0xb, 0x9}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44e8fe55a1180015000600142603600e1209", 0x1f}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700040005"], 0xfe33) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000002100010000000000000000000a00004000000000000000000500160000000000080017"], 0x2c}}, 0x0) 3.371244564s ago: executing program 2 (id=2544): setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)=0x6, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x2000000000000160, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071121c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)=0x6, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x2000000000000160, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071121c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) 3.30069213s ago: executing program 2 (id=2546): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000140), 0x3d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f0000000480)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x11}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x9, 0x6]}}}}}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWSET={0xc4, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFTA_SET_DESC={0x88, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_DESC_CONCAT={0x6c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc0000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc00}]}]}, @NFTA_SET_DESC_SIZE={0xfffffe45}, @NFTA_SET_DESC_SIZE={0x8}]}]}], {0x14, 0x10}}, 0xec}}, 0x4008050) setsockopt$sock_int(r1, 0x1, 0x26, &(0x7f0000000080)=0x7fff, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0xff, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r5) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)={0x114, r6, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x114}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) 3.199800677s ago: executing program 0 (id=2547): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4101}, 0x10) (async) unshare(0x20000400) r1 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r1, 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001a00010000000000000000000a8080"], 0x24}}, 0x0) (async) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000004c0)={0x0, @loopback, @remote}, &(0x7f0000000500)=0xc) sendmsg$inet(r1, &(0x7f00000005c0)={&(0x7f00000000c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000140)="2b224b24542cc18473b768e48074231be7b58e5b776a8df520da9a8e77354e37f6ed60eb2fd54088942aa7521840030e89bad9dc9c4f59c1d33052dc4766e932578328a00c6dae6f4c1a1ec0d25c5eaf905e2984b3758ab4ea78a9a25bb80fabe8f27827fe83347c3367350d", 0x6c}, {&(0x7f0000000200)="b8a75f3e22cfd423880eb14b147917647167974a636f0eae40", 0x19}, {&(0x7f0000000300)="bfaf5e7959fa3df0bfd20df5a138120c1ce0435b15c188cf3e4be9e56d71754a608d83ff75011c3e91ff7d1171b637c8b0ef7e88ebcec35c0a0c10f1487edaf661bbddaea7dce4bd1f94f243724633bfdb3c43372bb20f1011d9a3d401b6bbdefd837f8d33e260e7687c4af0da9904c87d256504e0ba483662ee95f0fc21b8292e73", 0x82}, {&(0x7f00000003c0)="d723fd7ac42f1584739eb2bb771bccfc05fe14b699ec6455bd57c281e1bddda3b4722b0954184a996d1ec61096c15b614066ef873d374111772eb479f48bff0c36a83a11bba545c435d1d4227004a1e66e85e83168f4d0eb09aeed5d65ab36f756d2834e7981c09ab5b3c25d6a656d6cf99fc021d2916f5146ef8dea8356a93596fd165a825465f60797de5ae1a897a837fa86d06169cf46795af41ff541bb8c09f244b8ebbe8527003388f26558", 0xae}], 0x4, &(0x7f0000000540)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @loopback}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xd}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xc3c5}}], 0x68}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf150000000000003d650000000000006507000002000000070700004c0000001f750000000000006154000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff28, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x67, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}, @multicast1}, @timestamp={0xd, 0x0, 0x0, 0xb, 0x46, 0x0, 0x7, 0x7}}}}}, 0x0) 3.098566719s ago: executing program 0 (id=2549): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c000180140003"], 0xe4}}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async, rerun: 64) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 64) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4) (async, rerun: 32) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f0000000140)={&(0x7f00000001c0)=""/234, 0xea, 0x0, &(0x7f00000002c0)=""/148, 0x94}}, 0x10) (rerun: 32) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113400000000008510000002000000b70089bd000000009500c2000000000095000012697e0800"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) (async) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) (async) recvmmsg(r0, &(0x7f0000001840), 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async, rerun: 32) listen(r6, 0xfff) (async, rerun: 32) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@delpolicy={0x50, 0x27, 0x1, 0x0, 0x0, {{@in=@private=0xa010100, @in6=@remote}}}, 0x50}}, 0x0) (async, rerun: 64) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) (rerun: 64) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}]}, @NFT_MSG_NEWSETELEM={0x140, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x114, 0x3, 0x0, 0x1, [{0x110, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x103, 0x6, 0x1, 0x0, "dce09f159e3c41d9875d174c275a37772f1be66bc06ef9bcc5ac250e2eb39f988872b72523942343da44d17e9811deb802c5e76b0681ef4db58aecff60d9a21a3e02e115ace8ded5b8ff6b84114d3dc6b562a8ed35a4baa5c5a1f46e16ac0b3628493b4836babe282753d065808e95895c54d09d89810e19793239f031e5fcde44eb93c4cc915725dc517763ef035c34a8c02a9b052f117d6fc5887704cd801e823b109559053997bfcb4f376d857466174c56ca2e19890627a39677f560dc67814d5cc8f794f510422c0b48c284e6aa2f3042cc12714371b3403fcf3b4f5d129d8a78c3a1559085d2eccbed752108d9165110518b919a0540d30a176e7d3f"}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x1c4}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001800)={0x14, 0x30, 0x1, 0x70bd2b, 0x0, {0x2}}, 0x14}}, 0x20004840) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) (async) r10 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r10, 0x10d, 0xb4, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{}, &(0x7f0000000400), &(0x7f0000000500)=r5}, 0x20) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680)=r4, 0x4) 2.850300474s ago: executing program 1 (id=2551): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8847, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0007000140020203600e4109000800ac00060311000000160012000a00ff000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x608, 0x2e8, 0x218, 0x3d8, 0x3d8, 0x128, 0x538, 0x538, 0x538, 0x538, 0x538, 0x6, 0x0, {[{{@ipv6={@private1, @local, [], [], 'netdevsim0\x00', 'veth1\x00'}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0xfffc}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@local, 'syzkaller0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@loopback}}}, {{@ipv6={@dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1\x00', 'wg0\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv6=@loopback}}}, {{@ipv6={@private0, @local, [], [], 'vlan0\x00', 'xfrm0\x00'}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @private0}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x668) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000081001000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @remote, 0x1}]}, &(0x7f0000000100)=0x10) sendto$inet6(r2, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000280), 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x36}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) recvmsg$kcm(r0, &(0x7f0000001480)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000100)=[{&(0x7f00000000c0)}, {&(0x7f0000000280)=""/127, 0x7f}, {&(0x7f0000000300)=""/123, 0x7b}, {&(0x7f0000000380)=""/4096, 0x1000}], 0x4, &(0x7f0000001380)=""/240, 0xf0}, 0x1) 2.839080597s ago: executing program 0 (id=2552): r0 = socket$key(0xf, 0x3, 0x2) (async) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @remote, 0x1}]}, &(0x7f0000000100)=0x10) sendto$inet6(r1, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000280), 0xe) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x50}, 0x1, 0x7}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x34, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_TXE_RATE={0x8}]}]}, 0x34}}, 0x0) 2.756080258s ago: executing program 1 (id=2553): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='geneve0\x00', 0x10) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid\x00') ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0x8004b706, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @private1}]}}}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x891}, 0x0) 2.714400875s ago: executing program 3 (id=987): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'nr0\x00', &(0x7f00000000c0)=@ethtool_modinfo={0x42, 0x5, 0x69a3ea47}}) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1c3607d6030001000000000000000000040000f1800800188009ac0f00"], 0x1c}], 0x1}, 0x0) 1.368860237s ago: executing program 0 (id=2554): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async) listen(r2, 0x0) (async) syz_emit_ethernet(0x52, &(0x7f00000000c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x1c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x7, {[@mptcp=@ack={0x1e, 0x6, 0x44e, 0x4, "4bc2"}]}}}}}}}}, 0x0) (async) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140100002c0001000000000000000000040100800c00098008"], 0x114}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000030000000000000000000000791200000000000095"], &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x4b) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r4, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r3, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@deltfilter={0x30, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x0, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x15) r9 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x6c, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x2}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x5}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x4c}, @IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x6c}}, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_SETFSLABEL(r11, 0x8911, &(0x7f0000000000)="37c4a5e33a6081f2a3fcc30a2ea92ef80f6427c344d1178a1c43ca4f0000ec67b9f27cd83b08959c0e471c4ae78b9cc4c7603c7a040782f3c379a03019e3bfd92533743c915077dd984784f531853d184c539dcac54ff2e955ba3fd1c00b016be57263b9695d15c56bbfcc195f2becfab2fc273ea8aee645f9062c6ac6c6c02f59935620d42a59a7e285c4e602b45acbf3e1bfd871e98e4f37b281b5e13b55a48e24a9981b78fe161a9de127f5b2c8ae0a12cbc189b6a1f44e298ff0acca36aac1967ea538fb4d8ca3ddf9884b543d868eac5217ad9b6e5c0f7bba6311f4b36020ec81e814f17062e2d5766abba3d757582a9b922b726173db7a852dc7983fdc") (async) r12 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$ARPT_SO_SET_REPLACE(r12, 0x0, 0x60, &(0x7f0000000e80)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1f8, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast1, @local, 0x8}}}, {{@arp={@remote, @multicast2, 0xffffff00, 0xff, 0x9, 0x9, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x7, 0xe, 0x40, 0xfffd, 0x0, 0x5, 'syz_tun\x00', 'gre0\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x78, 0x8, 0x3}}}, {{@arp={@empty, @dev={0xac, 0x14, 0x14, 0x1a}, 0xffffff00, 0x0, 0x2, 0x0, {@empty, {[0xff, 0x0, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@random="290c176c978f", {[0x7f, 0xff, 0xff, 0x0, 0x0, 0xff]}}, 0xb7, 0x5, 0x0, 0xa7fb, 0x7, 0x800, 'veth1_to_batadv\x00', 'dvmrp1\x00', {}, {0xff}, 0x0, 0x2f2c2646b822bef8}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20315}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) 1.368447294s ago: executing program 1 (id=2555): splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000180)=0x9, 0x1, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x44}}, 0x0) 1.368157025s ago: executing program 2 (id=2556): writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r2, 0x0, r1, 0x0, 0x8000f25, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0x0, 0x0, 0xfffffffc}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) 1.367940687s ago: executing program 4 (id=2068): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0x1) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000000)={0x5, &(0x7f0000000040)=[{0x16, 0x0, 0x3}, {0x7, 0x9e, 0x2, 0x8}, {0x800, 0x1, 0x3, 0x100}, {0x4, 0x2, 0xb, 0x7}, {0xa, 0x3, 0x10, 0x2}]}) close(0x3) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x13, 0x0, 0x0) readv(r0, &(0x7f00000014c0)=[{&(0x7f0000000080)=""/90, 0x5a}, {&(0x7f0000000200)=""/193, 0xc1}, {&(0x7f0000000100)=""/22, 0x16}, {&(0x7f0000000140)=""/101, 0x65}, {&(0x7f0000000300)=""/207, 0xcf}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/182, 0xb6}], 0x7) 653.128276ms ago: executing program 0 (id=2557): pread64(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg1\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfff3, 0x4}, {0x0, 0x1b}}}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)={0x2c, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x2000006) 650.976399ms ago: executing program 1 (id=2558): r0 = epoll_create(0x4) socketpair(0x2a, 0x3, 0x3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x4}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$rose(r2, &(0x7f00000000c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}, 0x1c) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000002800)=0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000002840)={0x0, 0x0, 0x0}, &(0x7f0000002880)=0xc) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000028c0)=0x0) r10 = getgid() ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000002900)=0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000002940)={{{@in6, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@private}}, &(0x7f0000002a40)=0xe8) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000002a80)={0x0, 0x0, 0x0}, &(0x7f0000002ac0)=0xc) r15 = getpid() getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000002b00)={{{@in=@broadcast, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, &(0x7f0000002c00)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002c40)={0x0, 0x0, 0x0}, &(0x7f0000002c80)=0xc) r19 = accept4$inet6(r1, &(0x7f0000002cc0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000002d00)=0x1c, 0x0) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000002d40)=0x0) r21 = getuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000002d80)={0x0, 0x0, 0x0}, &(0x7f0000002dc0)=0xc) sendmsg$netlink(r2, &(0x7f0000002f40)={&(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbfd, 0x4000000}, 0xc, &(0x7f00000027c0)=[{&(0x7f0000000140)={0x1144, 0x3a, 0x2, 0x70bd27, 0x25dfdbfe, "", [@generic="7ff0cd93137c7447f2d4e5320687f24a6b073bea54e15865fdf817322a25c6a547afc1b4c9aab7fd95a43b24faaf2a9436c5e04af77ed6543c6ecb4c75d253d41030a29a231ca4e977e34c9614cbeab4d6f27fcf66bcf6408c9fc7ff2c1f6503e6951e0b104ff138ebc6745c8772a66a15538f90afbe086738814a877372e5ceab2ebd52c732ad09837b8be1bf1937e9b3aab9a390a342a4c1dd26ea8174d579c1ca08c4a0488cad8f00110122257e3651e2070749", @generic="b86b2869d045cd0ea7bae3659d52b5ff9d32018a29af1a7cdc89a4532206fe66a7a7cc35e17c572c61cdc672b3ba9f29470394f21c2c1877240b9687ca5421b9eec33d20cd39fe17a5abd11f348087a6154ffc1a7ed1eee7a880187a4ad236c3ae024641a16e2819eeb222043c6be8dbeb54642b6c3072c4928ea278", @generic="00fb6943fbdedb04f68c2a6a4f8ccdb764eb5282f1d28fab952a2a5b50a15f9ecb5bb2338f0365d597dac81cd9cddedbf3a25b2449d620208dce4f163e7119d3a976e239e32d1cb7e06385571e3941aaada3b98f68c5e49ffefcebe5d1dafc61598f0a25f2442eebbf17cb6df085c43abde060aba1a66686f851cd411f765a0eb2820a486b4d6d7c13bb1c6c33948f590479fd81e9d30a2c99bbbcd40737b76cfb229b4f8339615af382042649fd820244d6fdea212f3ac841b67c21fde8d661dfc7ca3bc1bca1e64f535726f0b98acd824ab67f99aa713655ac49167ac860091116d593e64812425232818267b4417898e34ad2bff8d2b657f2521262f845d90c15bb1e4c0bc70aacd73bb926c79b0038416555e765aef8493c5170b67ac86af480282c8443d0452b85f8be6ecd16a7919f41e43917f5af419f15b370ba2644d9ecba8d4e6f9cc6683d8f03dfe92916684eb207349257b0eea644d04e9d0f95e71b6f06043b19b9b02e9f8609ee7ee6d93ddca039be2fe2c1b2969ad3ad7b05c75da760d8c00b696d8e6fd9516e6892fa78f666d0ddf4d892664aac1cf29df79285c484f55bb8d9d8c8780f9c39e4c1f076ad7d0f9d704b0d9e3ba7b6ed4027c421fde86b9504b3890bbf41c1467583f1dfd8cb5ee63bd737325b5e7069390786ee721f50de787fde0f8fafb4cc7d5fa643175fbc96628e1edcd6d4a56eb3a8203faf80b43b4ffe1725b9c4c51d986f210fa9ae3a79233e2fb76dc3837be954effb7f85222164c69ef50e71a536016f7f447c43ab5631b7edab9e72094103da5693e58285a73f0f9ef3c11aefdca3012f2d50e5f97fe26058f7e008f95c632912d291ade510974e3d1810935c1c557381399d61d894e6aee3db89ef28688c49418b706ba39e93c7bd8ace7068b2886fa72281f137f9e19938bda4ae4a6b411109ddb2da93ec95d43b18be68e65d9d4a9b4b152c4adafbb7d6c4ae4aea999b3d51fa9ba0c13d883063d80c2c2c7b27fd0725cd9e8fd21cfd04574ddeb81b552705fb284319cb634f92549f8ef3ffc23d8184705bf25b0a113b9be497e66b39798242939a991ef0561022021fd22771f77e1e2ad0afee0491b59446b7ad9c7f7836eb4b6b6adc5f739287de5e7c0d496b9ea57b18309457b972e80b883a0540138555d7628bbd9884ea6e2d06274bb99bbda066a57a575d9702f005241334b5af17eb4b9df0c18a8e3894b006cf945d9c6b772778129408e08a8e89c70d25864af4aa6622a4a9d91234db9af8bd3f101de88370a983994ed466d33d3f2b8ef6615b61b0cf60d4bf49d7c8c084977381a960bbe5e66deb9d837a80e80c06f5f385650a521a676493ace5754ab738687f757a2d9ad55ef0204ae2f973dfd9a880ef5aae86a55f9b3b8a8b74309f4c20ae4fa0fc62f9210da4f6b5dc00bb8191f654c3450965b7ab35e3dab3ab81d1ca2d29ef30bfa3370a69fdf54cc9b90c124e35197b069666b3a28d9d75d507fd221f70580eb7a952a6b497a5ede64ec8b615d05911c5cbf6a91436c90197bf55b865e7569db494f8ee4bb660c043d274daf3d9db6d201be1ca5675bcbbb5cb42aca4d6bec199861614ffb946a5573382b8e94c98eafd4a9a775aa7d699002efe0f94068e70ed1178d660c6bdd24da33ac01966b1ce05f651c2a8edc827ee2c1bce8f268eac46a94f43351840b7d0bae1fb9d947cf168caf60439da9c8b1444285b6975be036b2bae4e1277886f657220c5b2c101eb983e73f2b8ddd4b16adc9161182711db9fbd9e4034744730227b0a8d32b72d53d6f6e5b6e1e00f7345e6191fdb92a0d972533fb3620ba788fe951a6d087e238ad081e1bf3acdd60178f634340f565ae61a956882b0a7e5ea538d23524a256c8151d074b6f647eb447cd94e8af49654ca6db82701ba4fd2ad997e2b8e31e72aea374eb2e8445cd863e015fae5d271f7053ecf0ae55b0c0a03726267c124dac2092c0463768792412504d441cb2488f113022edff130cc90e2213b333e221a5b66d279ce105a4b35ebd874eff45cd60618737f4eaf59aaddce4c0161d17da611da49376ad9d16dacf1bea04e3e97080ca36a7b5fffe5c46926522169afa65d1f24250fd487604652236822b130e39b4571941bd7c2c71eb111f0956a88c37389c1ab00915e8a0c3c08b5b9ee8c379272123943e1823a5c60f7804cdc0da4419cf2f3d9b7d3604880f13f37fe9ae283abbe5f2f72010a1dc64ae1529eb5236a04e18b7930a40c3b1b16899faed2a2eb21ce7a73de19acac24ec00fd6b45dfb8db5d2f25635ce495037e2f6a4859b82017ea8d6f581ce63aa9a21ced27491bebedfe9ba482ac73f881e00a708587317ce879b27faa170e2c7f2773cc8a579b7e99b7dff9d7f428face28a276f3982679b710fbcb681ac7bb0b78be4d4fe2ce37432634554aa4251666939a8ead05a83b68aa615f4b6a93181304254059388a30f20aee04f2b9a7bb5e6a545031feb535cd0c369ee5354d1e19a0c7a2e2ca9694694a67e6de80af8f469f3e0c63faae5220d06bfb43c776cbc40dc296b58b20b384dbdc30471b5dd7e7743ca9a845826244081ea128ca4ae9b7e56460fcb05ce46e44fcd3222adfdece302672b4b7dd3545a49f2aba6518546c3e91932de089cf3ef7c55f29c0f9bb1f69d3191c46d780914eb16fd8c5678c1d02134ad750d7dcabe86b6e2f92e9bc3b22995022379f76d107940327325358e2d46e2ec3cfac9efd3a4a2735a15efa71fc01c2577fedef48066f06fa9243faa868a6ce0524805064ef5eadb4ad77a01fec8db8322154c53c82f63e3aa5b12f19d9f5014fd2e06a4595aec4d6d2fcd43d17d8660c7ec07c43f538cef62386389d7fa5888f5418109ba08605af40808209f215b6963fa19cadddcab595382b8d5e92a19fdde0a1c02c6908d6d4153423bc83ad11d44c942c57ee563c302ce0c6fd3a96a6584ea3a1876a17f22989119d0c1f071690df4ba1560360d496e94890f0bec691fb772b66f7f1a430884572555c21f87f206472fce1773aa7e2641c59b3a0b6b026c188737285276942390ee77d5d3912e4bad4839a0b17dd7039afb0071c74380645a1a3575c81c5a7336e6f6e6c741c0066bacd6c77ad2840e24d82e671fa6c073737c94d782bd262df274778d7d3ef27bd44973af25eb6c99ae720423bd9b4014e0c42c4d82678eaae9d3210244a7a88814ec8e4f71459dce4ff7cfbb1e463bea7fc593323ee10c21e1d55603ff69821b5ced021976bee1f76fc8cfbc73f64996476e5c3e132145aba4e9220f8204ea5861c096b8ec95340672d4727e1c307495f7c873646f349f5d7e73e30528ac7a40e8370aebd08fd2776a72a3dd3c2eae02674b5ecbde93e5546798f2f2eca298baac94b3662ece8f8ff1037621fb8ad0b4018f6d7bea882c2403b04cef04a5ef6a823cc7c902750338d22c5cde1bd35c2419e42c897df3a084f177de12d8f28efe37be748f6873c2bc088dbad0000a1fd8a35f8c531d7d7e9399e6decba8b17b3deb7c917fee70498ca6b44498c21aa3fff99ef7fa6618d49b2572342db8cfbeba1c4dd4a58db4dab3e0780077e530e4a351f4c032e1f49fb3bde7178fc733be2ab97455fa229e9a20519c5bd070dfcbca10632bf7f441f9b97161b7888807285ed2ab367b91f6dba0bea686b16fa6f2185f1619e1a539f263d3c6b5f0048d0850adbc07c6f14e96c7c1085bed5da1a1cbd1f1f1134c3b73ea8f9b01d5289582982c32193b7737e7780d3d721d0cea8092d6af6b43e39c1fd2c23ccba10308dfaa06d70e52dfad8aea306383e6496a3ac9949ab37938350d9452a2fe5d5f84d150ee3f445286b752351df073ca7be8a9f1a4973d8ed2710819d15e5fda580200670861770ffd8ba3b0693520da26ab1d83b522a4e3f672a3da6b1e9a2839e0665148234fb9784d1c6f9625e3fb61392418d451b3acb1e83811aae76ed7c9b537405028cc4b1575f2c48bec5e373697b721a75e5bd8b758cc9ca4d929c90f635b9013940241d360eba82b75957523d82c0922fef8b8d320a1b583efa8cb69182f16f4ed558b374308426ba381c4363067781630fe46b7fd60889d271c5b56efbd0ea8d40b67d22e22d3a34f4785cb622bda0678703c6ccce39c613f3d0411f732f2536d6847d927a292b744aae7e177aec7727a4b6d977f0b096e2378ac92c3bb12f0af7693f91aac780706702a7bfd87489c4d0b22f67c0bb9ce00f3607d04a34696580d6c5d51f0f91d57804b5538c611f675dd518819bfa770a62425801605afb08cebb758f9bb7606c7fcb5fb8614804564acbdad28c20dd77448bcfdf0275bd748d11c207494309f55c76ed1e98dda9fec7be9c894099cab5ab806e8a1c5a2ae38ce3a58f0e57350f971fbe3b363453f1b9e685aa80c011a5f934e34e2923846f7a4866dbde4922d94678dfc4dbb710bc520477fd6f6b63973334907f46b20fc6c3b20d5521dc224f8f78d3b12a9dd61d4cc0fa9dbe794456ad7df8cf3c10e853ce41223386da232e7e0acab140f82087d5f0d81db9b76597d34af74e9c85c837a413cac3e36cc01ba10d65e348f8d04e1b2c2cf7cf52c0318dba8c00e95b38ab578726adde418f7402e004b0da779f5f19bf0f87d34b325e8f8835434d2cce8f4c8bd0f1303f01af48c6d9fbadfaa4a73f623ec668e0e18f5154c3adcd702bf99c73374ff5de00e5b3eb4a597f1dbf304d7a39d288e759eef302f60e250864c06fc79756c4472d1cc34eea206257ac5432cc4bcfcdb4091eb11abec4a14ab787ec516a5771792370e5b0487690b668a0aa4566ea5cf9f798c6c3143338e1ba9c80035bd729b72a287ba69d0bf26027f4844f279a1fec29b5ec206f086b2cd617416af6085741319dad00ba7a8fce40d7df5c742d4ede191ebb359b4ca3b047f5df886408a1e0729db317aefdc61ee8d71b0f93a0cc6d3f31e1577b61b433861104984f0f240a87b5aae971aebd8ac2c0ae1d53f4e7a5558344440078dfffae75e4975289b0ffbf7d0c0d9fb030c45372452502c0a2c622383a12f314addd049c107ff4e98de9514991f9149c225734fcaccbdbf70b91be101cbbbb948ee8824006125058e21abcd1f3a955826f446fc196884932513b518f5f1b4f4b7a5e607b0fa85be6872d2088ea10d3200ca6a10252c623f7774ff067fbb5904beb4e2af6b26c4db02d66ef530eb4e1ac11e2e0825a1c8c9c71f46cd5a8e931ba651c44b4d829de35f154fbc1d5aa5ca53cbe1d8ffdc71576c969e72bd1914fe39e143eba1f4537527671b85f969bf97704b36c99f95785d4740477a6d24496f4b0d6e5ac8a2965b47cefbcceaab409a6fe8a50d3d1ff350d8968613433a2b9adbfa5dd9101d150dace0ad3d48d0ef54171ff868366bdb40b41169693c8035b3b35f8fcf88610e9e62d62e2c345a0f63c0d7d2b1fc83c76c43c4e1bde031df9fef75a028c83d279ba399a06c0f1216b950b2e489c00159a23a415784c5928eca3ae3ed4bc4d66797a7252eb9a563816fd451f059fde4d6fc4c768bc72dcadbea190389f3d75891618d57835a453460f0f68ab7e7771eb3ed6978655e25504c306b475a24f49f27351e39f102f23930993121270778023f9aceafa73acdc936ffeeff34609e0681e86efedd9ccdb1a07df9a07b4e8008630944c6e097e22aacf3158bf50ed9c552faf8b9e2df34c704f8954d8ca69fbb2c484a0a6a4a8ef19bc74d2d4a1923dc7078d4eba060f35ed1d487cff7dbced"]}, 0x1144}, {&(0x7f00000012c0)={0x29c, 0x1d, 0x400, 0x70bd2a, 0x25dfdbfc, "", [@nested={0x18, 0xce, 0x0, 0x1, [@nested={0x4, 0x115}, @nested={0x4, 0x101}, @nested={0x4, 0x129}, @typed={0x8, 0xb3, 0x0, 0x0, @pid=0xffffffffffffffff}]}, @typed={0xd, 0x2, 0x0, 0x0, @str='%%&6*{*}\x00'}, @generic="515f0eda9df8ebec858ac14321f05457488bab87334b233739d79324c48d352f6f4b73df84f1728e8020dc0a80d90b835dbdafb37ca491f698d0036096d5e055d5816b65f32ec4fd66554d365dfa3bc218330457e0133841ab0929f1a1a3f874d6dc7d2ab4a5998da393dae8b6d89c6779534cbef933f0639f5a533ed1f636e5d7a084d1bb5dbaba9c", @nested={0x1d8, 0xf3, 0x0, 0x1, [@typed={0xb, 0x58, 0x0, 0x0, @str='(:%@]+\x00'}, @generic="675f2fed25d50330f8376881228b5d664b1d82fbb1956b3262aa59fa330b4b1c3d0aeae85ee060b8f75a89b5340e1564fa372acb36557e2358d0c6a2865b41066a84529597734ac9f7b56b65ef413bfb51b81e830bbbbcb0557a72cba3e6cc4088ec9a24e4e83669a0b171774e35711fe085a0510d971679cf85a8627025a4f7126ccd8fa1d2e9957e600b7b5044b543ce6b22e61b350f0b84a81b917bce9fac3c6e519424cee4501d181cf70a0b56b6888b9d7c7bd540b4289769e6113dc716", @typed={0x8, 0xce, 0x0, 0x0, @fd=r2}, @nested={0x4, 0x109}, @nested={0x4, 0xea}, @generic="6a6af933f81f9d4cee44ee412ad88856a6f7ddcabf8ac3a8c60c07f16fd349b82b5835983ad3d653a527377a748f093f2d2485ca9e8bda233893819a6a7c94c16cd3b49325c3408349d6b03f4a941402a1d18bd78e2ce57d0251da8089c113e87291c84cf6efd036229c9e3066364f8fbf29381c78fb57acfb8fe5e46a4adafb5a6c0c1739a0706dbc3f396f074cc8eefaa94a94b6382339c2d5c76d4e2ba0a07ccff5264a6f600d3140048b4feb9be4e951555c4909e98fd8bda408c6ca985ce4b6f62e73ba8b31c73095b515223b98a8c3a42a562f8eef5f1ec240090a6f23730a496b03af559630ead20d60de34aa", @nested={0x4, 0x10e}, @nested={0x4, 0x5e}]}]}, 0x29c}, {&(0x7f0000001580)={0x1020, 0x39, 0x2, 0x70bd2d, 0x25dfdbfe, "", [@generic, @typed={0x8, 0x99, 0x0, 0x0, @fd}, @typed={0x8, 0x26, 0x0, 0x0, @str=']$]\x00'}, @generic="15e084153041dc75ea9aaeed9b91e23c3dd0cdf740c0701f082498fd526096f9c781b756306610c27333972f86f7404bc479de46742ff7407a4f9dad845455a0176255dd7b57a59e1ad0c0432378b0de58a91b335b648d0b1ceb728371671f56506850d9e45fc6d777d619e3504f4f419798455ba1ae5bc85fc4761f13cfb05adcfab34278ccec157deb7ec3ec0a2012d99c750f1390b02c595682d9f5ccd57b6e0ffac1c164bf8ba5f6f65c95b6814404f4320e4f35b0639e1fba93bcc016a827393e6d2fca8d2c2774046ebf4f1b79cd30fdb8ebe6d2930bd0984be4c81a365f598669252ec827c76f17537fcfcec2c51d46247b7d26d294c741ad36d48716620439fc009a591772dcc6cb2ebfe5a26a347ed004742f1da0c3220594926facfbc89375bd4dc8618fdc6d5028aa962f349b570afb589e8b37033dd75caa7d0bea5054017f07b191aaf7e45f195709e9c6dba3d8275108e4e9aee4c3e5f403876c858f9935ac3f0d94defe5af6022f6c4c403887fc81fef63eae25a8a279886bb992eff25731933f33aa9e72797fdbc7937c6b21ffb8065b1ccab36dbd9654b4c812bfafd2e8571d7b85f72256c4c2fbc5de6f07f202694bdb9091da46e60bde8e0edec2e60cdab92968b7177773b6441be1c570345f6042424ab09d1683f345cffdbeed180aa9139d1640bcbeef1185390eae1d991000d587a6a4c15973900db1050059efc2e63681a2dbe632632c22a892c5b2f508f3e9ccc383f8ef9c80bfe99b94c7261cabbf02c3108039b9b4011c54e0fab15e42862c9a17305ba0c1c5fb5fd2ccb7f3bea7fce1791fb60ea1bf324395cb28dd64a93d85bb384b88ca1ec94bf1d31a03c6f27f979c8054c83141583a7ccf59a6cc47322ddb50bb8dfcf6ed039669ee0c43722ad5ddaba0e3c54ce597d963224e710e8fd15723c6ce20f329e95ae679a456202bdc0ed7e56d75ad5de3451b145ff37409ee08688a751b136416b85467b8d9e121f573e12a9527a376d369807041d53a7da087cae627cd933fcf243d3d2074de2ec00d9da83795cde1450dd17dc937026a1ff03589946a7f9533cf7082599ca5cc7e033977dbb79501e414508e9f2585553c3598a6480c535be7fff47c83351a5ed13143480a164eefe75480aef9b0b78f9b0ff44853ef145ba2be05287a860af643ee9700296287e242844d4adec5526f3d8faff33e2503c36c40966681f5d7850351eaf7302a3553481bf5484a2167b5a19d3012c3752c09ecaf391d22085c23a07d04fb52bd3091440d92c18d987a7567ac3a561deeaf9c3a99586bd3e01b057330717bd0b7e6cecdc1813781893fcf109ff4cce9f5e232ec7c7bc7536d88520849ff6bb9e167539d9eb4d566ae1790479e165bb201e13566c6c0b1048108e41c12014ac2ef610fabf023f6437c90a8e22ecb34fceb5edfa1f5dfb9d5e6b288614246fa4b90305d053bc272eba578365e58492083b946a3dfa7fa5d69594eee0d54ad0b5d8d273521583453ddc577640f6e47c73c50e64cadd56d8a570c4dcdd058cee45ad828220ac05816294f0eb09b05480a9137148ce39b730f311447f44b23c2132060cd95891e369e596bc29a09fc418778f013d0e80f4212f409242ac522d6eac7c59181e9e661985fa934f63ad1d9a4bc17b98f6311c5868034955cee876349f8dd21f33205c136d07c1da1c1ac7cf946ef8131bfa1db85fe7408d76b90f4bcfd2b4e1caebcd621949aa0b52e58048c68afce6bea068dc119d8d8ed6df33efa21ffe7780ec9e80f221210da3c40d9cf6bb5184a69916ac84c64a76db6b91439a9aa494224bc093ead49f0a090caccbb155ef4471659a27b4ccdc66daa4082df482630190c5f173c32a3d7ef76d83ad5d8f0cdf7595e9554c7bbf43872ad167f5c09312b597f5236c15a766dbd05e1624fd96e5cf27b42b1b2ce1c8cb3d57c23c22638f8a0342a1335b76a842ae4ca0b1f74bcb5957d9bb9d474ca93cb4c444c9dc7dffb2568bd3cc2ab99bf3aba6b29d9db21343fef0fdb1e699f78e5d2d2030743fafb14b15ca34cd2a4d2eb9e7ba26efba18e33c86c432ca70221f3aba4ad237b42c94db4e925a7652aaa759ca3b8312a343acce8d9f929f0bd41333253564a984113797cc81a59944e409aa74a5ce9d09c21126735bbef3e17840badbca9875183e60bebc9eb528c33b70dab85fd2e8bdd36be9f845cac369cf8e99036869d7db191e6ca2f0829645d0e0bc09c34e1295b96e0cd101bbe3b87f3017723fcc43a0078e77d54d9d15863d6663de1136abbe9d3213939271c74e2d8b003ff2cf37f377397b5ee2e562a047ae4fdf5ffdd08c9189f9b91936c84a578d9d8ef289847a9dd0dcad0787f4cd9d9021314809c83138dd092f3144810786917089fc50202fe2bf49706382b2c1a3b7d2ddd633a1bd0de9787c08eb894c7f0f6aeb29b023c912aac6967c5aeee410b1d34331d9d374c2ad890c7de2fcb90efcd4b866a7dc2ac1e202d8039a25de7f8120dd7106e0328a5253e03484feff03dc8fdf142390bc4cf27d49d05380de0d93087a7029908824287e771c7605b649e47026783287da88bf395c019f64cecca50ee1d9e356be89b98738c48e10251cb014abbbd33c8a26a60c8dc332dce15c334db478eb1dd846a0a5245a13d78c61a8f7a768bbeb4fd0d8f2a77e6710c1573a37dbf158ae8c74ecc3a303afb1d97aeba66dd3e260d22d577b7d8c43643731b5013adc819653e023ca21f983373844b861992708acdaf6d0c23c8b56fbf7e356ff96aee9f705ef1a73749b80747b9ce10fa519f8973147112c19af6452219f2d4c1b9d110bef127a748223c3a78810d586280d0e47d33719296cc8989c88acaaa387560469ff7eb0e30089ea242d6cdcae411de5368fe3c5681e24f1bf4c1dcdc439f5f3dda99f7979317c9ad3b2ed485d435cb7ddbd2d0f7710d182d8a05d93beaba98ad5db77474cd8fe90ab48d1ffca4456737777f6118608de6dd2f43eb734ba6a48ed0eab4d29584cb7245522071f085cedf35c49056d33e982e7130d3c51578a5179bebbcad1387241d0d05fe03d9035c923c79ad18fb43599e592ca36f569bbf6782a402a288d39600be3774927410720219de2680917bf0f19749eb89682cfd2c73a0d0a6454ae52951972f396f255e6dd7e4f5a69565a0e30cc29dcb06fa2ea7528cb30ca455077aea9af2cac4ea5119b99cfef178c1a188135284206ce31d54f80a030386ab149a0132a2d249fe786245caec83146833cbbd7d53faa8474cf9234795c417109ae3e2e4b88a8edfa29bce054660ff59c5b8ef464c08b8f2d302c905aa60be4f3ce3bd7ad325c155385b597cd8a1f4063147f1aca02dd3b5b46a601ca4a01ba9ddd5cd6c0be9648de0af529f11886f9bbcd8521f83a818f21ed762784b78c79b9ef3921078d62d98a122bf27df526d2c7d7009d755ed217739c77bd81221a544245cf0242eed2a14cf8809ec04cb7fbc016515816b50da02c2508784e878c532b968b7b2d96600f4ebb2298130fb1e2cbcf23ec43aacf884b0463525b030d6cf61be7bba7c04a944203cca28046be5688b4aed06eb06788c03b757bcd8a11010f4150d5ed99db2dd6eea03661726cc3b1ad31937a19b3d379ee9c1367123cdcc6f7b858b8d4e4b47d1bf0d9459575e0d55bdfcd4b97a4460ef618cf5ac8e833c933e39fc9fae8989d750353b98412c48d8056e87240c9a229cd753458a08a993a8731ebf77853eb2081d699d7226826ac4d197aa484f89c3cbbb484937a59f3948f70726a458dee370f9a93270bc85dfc828f96c4b6390c645ffda339bace1573632fe29d4fa3288afb047ddf173af8b21539fdc987a94cea29f72bdbe9a4f4a2e47b736f35cd5a8e2f81417dabcb75d612b988b78eedea60b869de52e43824249c9f73dc814b05417edc0e33eac73306ebaea1e2ad3a068aba2e0cccb8c3e7c68498162985f16eb8e1d967e3c691d00018c5ef9e841caaf09e18bd40c5c71b1656b6b487010c19ba575cdb7dc06886eb07b3d225794487aef234bc1a1fdac65874058ee9e7d649579a9fd8be7244f24c5a690bd1c0c92a6ddd05b393f1fec41e3da37115a6e0a1284e1a23fc99e70dd5f66f072b91fcd8aab2c64fe6189361c4ea7b65035d72e2b5e9ac08eaa37fe65f1373e532f5d4ab1e63aff54932e0cc1c386a2cc910db8c8219f7bb2d490b2129f28de9f56a8b0e7f30fcdeb7d0c1c8c61efc0aac5fc07757ef43e84462e350c2381663adf0c4ff38045705f8fa1575551f33b1061a58680c9caae7d379c7000b353a14d2be98bea1c92c6d204e3f1978c5edf180c55e76ff1b58fe5984a4940e17ecbedb27362d93b15a17ff6029bd769b93f375fe836b5623362bccf2b892da4a42fa6f5689572e1db9a7ee7b3d6e92c2b36ba2700d868b6b94c502d876538b0754643f41709674dd165d52cf7344439d305695bcfea0091e136725f0b5b0615fc11d9ad97a6a8fb46181362976be059e4f17ec005679e49b9c1bd56c0978cda4b7b6fca79371e8deb906d1d2d7391a32b33de02b9e621011c759895bf77e4c6320dc7d82b2f559f74e405ba7e245b85bde75624945ab8045cac3f12ff77e15ef89909f94fc0d330c63e7629e6687e042aa80b92bdf0bfed2977e01c15811f7e4a608774f16bcc7fa3fe4a2918f4a732b27c75485e713b9b636fb745b36f13eb2c3a7792a0248a0f64734e80e794778798b5bf49871c44d1502d7b3bad60fd020244b7263d8f413b00189100516dd3f79be2f8baa5bcac5fa1bed92a5ae445a4174a618ec869840b978617dc6c03ce8232d7dfa30b029884e44fa13e49f836d198ccedab257ff4e21db543ced0bdc071804581ea6f324c1ec8fdf51aeb051c5c96074812088056c2957b63ba02251fcc323a1aed2f0fb0c78a7677916d52393733e950eb9560c4f15d55b4b881005abefe436836e33eb43641b4aea42b5c83c1762fa176f11e06e5685b0dc9491cc5881449cfe0287b1e6df155e8ad274b5ab5437ed868dc6ed7f9ed7d0b0f28d644a52117f1942cba8d6cfa55d2dadc2a94d01151d31df845654a684fecc36240d102abd700749a15a27f4ee8b97db5f4b8f9edd394cb987b9c8942afbd1d9203b1f03d13a55dacbe580cea7d502d7051212698e90de14690d93f2573c3bd1cf170a3843056b676385b399a7d1e6126ace44c4e1f8a5205e53eae266345a4da2161ef10d02bd6e1dae12845d9846e57fe6265a1273ae97fe11427b846e4a8f1d4324793502f49eb7136100ee5a8ea203bd69413762f31f7965d812d5fa36ec6b28c0c3c9d4420d695f2a627cfb5c013881657d0d8f1ffdd8b39fa4e551645100cb567b3f5f0a7dd8f68c0a725b1cd61d5f611048413481847080afd5e731520b8ee85e92280914ffe70f36e8513ca860d9d76b3e8ef1dc3815a0250ff1051fe37b052b768756878b149c1f7a861ec3a439eca9cb5d04f346e4669bdc4119fe533f8e2a1f86551bb5768c60123ccd29eb281fc51c48797c9793dfb0a34a668221884d3a30e316b53812b3daeddb9762d30dd9ddefcc3f6db0047bface9fd06f69e347d010d68126e4ab78edba29ef304d7236334c8f669652316e140d6d9d6dc2bf5fd4799e1e0a62c41b6e692713e8c36794991f4dff7b36f7cce9726c215eeeebd086cf21a3a348f1b41d0cf9eed67fd8324d92a4869a0cb780f5b6a9d867dd4f9969c51c2603229a902f74370014a2c684c6ffc07f8273352fe3b0be0"]}, 0x1020}, {&(0x7f00000025c0)={0x1d0, 0x38, 0x400, 0x70bd2b, 0x25dfdbff, "", [@generic="e1cc9cba1c1fd25b78b89bb6fea43cae82f9278259de66867e96b11c0471ab0900ccb3136b96f9cb53db38bfa67139eb40e93c61796142c0935155440c32f5a8e258a3134259b35157e53751dd0e8293b6e89524762c29b0b8cb938c9ba01bb7fe338874df705e0c7d8096a76666b2faaf97215096d9018d0bd4f93e98bf31f7b5c86076d925a327bd2f005f90044a27fd518ee7557a2770806b6729a94f8e30fddafd7ae7ab552f0ea8174bb588e9c1d33b0b27f6452020723d42a41673790ec8ed94f404012a4481f3bd", @typed={0xdb, 0x8c, 0x0, 0x0, @binary="3b424246516249dbec61d67c73fb9c9e45f26a5d4460e4e4f500efca14b5a07a5069d9b44a3cf224e4b793f3662cc0b35ae4abe4b9179dfee3501de1399c74ab1bfc5e957207f1cd43b44863eaac1c7200bbf6ef3e3ed7ced2d2800011d03826b4ae40d35dd99732bc92f1d9c5d25ee20bb0413186c0db57d7b90246590c8b03601c35ab5a3637622e0dba44089ffd9adea4dbf979c23cee88db5f56c8cf3e452fa4cc53e73d5bb9054ce6f392391ab6e89559f5d1d51d0a6a5de379b21925fd71ef1c65b9393405f92662abd1f59c18c0cda99cbd1944"}, @typed={0xa, 0x5a, 0x0, 0x0, @str='[$${[\x00'}, @generic="7851312b215cea6e664d"]}, 0x1d0}], 0x4, &(0x7f0000002e00)=[@cred={{0x1c, 0x1, 0x2, {r5, 0xee00, r6}}}, @rights={{0x2c, 0x1, 0x1, [r1, r1, r7, r4, r4, 0xffffffffffffffff, r4]}}, @rights={{0x1c, 0x1, 0x1, [r4, r2, r8]}}, @cred={{0x1c, 0x1, 0x2, {r9, 0x0, r10}}}, @cred={{0x1c, 0x1, 0x2, {r11, r13, r14}}}, @cred={{0x1c, 0x1, 0x2, {r15, r17, r18}}}, @rights={{0x20, 0x1, 0x1, [r19, r3, r1, r3]}}, @cred={{0x1c, 0x1, 0x2, {r20, r21, r22}}}], 0x110, 0x24040045}, 0x4040) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002f80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r24 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000041c0)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x2, '\x00', r12, 0xffffffffffffffff, 0x3, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000042c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000004240), &(0x7f0000004280)='%-010d \x00'}, 0x20) r26 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000004300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfc000000, '\x00', r12, 0xffffffffffffffff, 0x0, 0x3, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004400)={0x6, 0x24, &(0x7f0000002fc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ldst={0x1, 0x1, 0x6, 0xa, 0x1, 0x50, 0xfffffffffffffff0}, @exit, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r23}}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x6}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000003100)='GPL\x00', 0x8, 0x1000, &(0x7f0000003140)=""/4096, 0x41100, 0x8, '\x00', r12, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000004140)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000004180)={0x2, 0xd, 0x906, 0x143}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000004380)=[r24, r25, r26], &(0x7f00000043c0)=[{0x2, 0x4, 0xe, 0x5}, {0x3, 0x4, 0x8, 0x4}, {0x5, 0x4, 0xe, 0xb}, {0x0, 0x3, 0x8, 0x6}], 0x10, 0xfffffffe, @void, @value}, 0x94) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f0000004500)={0x2, &(0x7f00000044c0)=[{0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @link_local}]}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000004700)={&(0x7f0000004540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000046c0)={&(0x7f00000045c0)={0xc8, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20008008}, 0xedd1580d69c00537) 650.522013ms ago: executing program 2 (id=2559): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) (async) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'team_slave_0\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x9, 0x0, 0x0, 0x0, 0x2, 0x1}}) (async) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_stats}) r4 = socket$inet(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(r4, 0x10d, 0xe2, 0xfffffffffffffffe, &(0x7f0000000000)=0x300) (async, rerun: 64) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) (rerun: 64) r6 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25GETINFOOLD(r6, 0x89e9, &(0x7f0000006d00)) (async, rerun: 64) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r5, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x6dd}, @NL80211_ATTR_STA_CAPABILITY={0x6}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x3}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0xe3}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) (rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x2c, 0x24, 0x200, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x6, 0xfff5}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_atm={0x16}]}, 0x2c}}, 0x0) 538.648662ms ago: executing program 1 (id=2560): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x4}, @TCA_SAMPLE_RATE, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}]}, {0x4}, {0xc}, {0x6, 0x4}}}]}]}, 0x60}}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000000)={0x1, "83"}, 0x2) 321.703595ms ago: executing program 2 (id=2561): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0xf, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000ef0000000000000000000a54000000060a09040000000000000000020000000900020073797a32000000000900010073797a30000000002800048024000180090001006d657461000000001400028008000140000000060800024000000015140000001100010000000000000000000000000a"], 0x7c}}, 0x0) syz_emit_ethernet(0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd600a0100002c2b0000000000000000000000000000000000fe8000000000000000000000000000aa3a020201"], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_route={{0xa}, {0x18, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x97}, @TCA_ROUTE4_POLICE={0x4}, @TCA_ROUTE4_TO={0x8, 0x2, 0x100}]}}]}, 0x48}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000004c0)=0x1, 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000180)={0x2, 'vlan0\x00', {0x5}}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000001401050025bd7000fddbdf250a000004abfaa641acf91a380f72671fa043dafd9fc1d0b75a9fb5cea2526a5e0cd399fb9dff85df506b764a4bda06f610acb85214b8261d66b80f042d862691f3469117e315f46f36df745ea439b15f1a1686116a13df67a2d2744ac645c7e64615604c7d7349cd827d2acf4e3aa3a3180e8a8839cc94d0058d43b0c8f7fb6bd999ed1f79c3c6bf76f7c3920b2254573dd4d1578e0a10fc53a53767843fd04d26c5c5570b2f648891050094000000000008003000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00'], 0xcc}, 0x1, 0x0, 0x0, 0x4000000}, 0x5) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x133242, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000080)={'netpci0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0xf, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000ef0000000000000000000a54000000060a09040000000000000000020000000900020073797a32000000000900010073797a30000000002800048024000180090001006d657461000000001400028008000140000000060800024000000015140000001100010000000000000000000000000a"], 0x7c}}, 0x0) (async) syz_emit_ethernet(0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd600a0100002c2b0000000000000000000000000000000000fe8000000000000000000000000000aa3a020201"], 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socket(0x2a, 0x2, 0x0) (async) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_route={{0xa}, {0x18, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x97}, @TCA_ROUTE4_POLICE={0x4}, @TCA_ROUTE4_TO={0x8, 0x2, 0x100}]}}]}, 0x48}}, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000004c0)=0x1, 0x4) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000180)={0x2, 'vlan0\x00', {0x5}}) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) (async) sendmsg$nl_netfilter(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000001401050025bd7000fddbdf250a000004abfaa641acf91a380f72671fa043dafd9fc1d0b75a9fb5cea2526a5e0cd399fb9dff85df506b764a4bda06f610acb85214b8261d66b80f042d862691f3469117e315f46f36df745ea439b15f1a1686116a13df67a2d2744ac645c7e64615604c7d7349cd827d2acf4e3aa3a3180e8a8839cc94d0058d43b0c8f7fb6bd999ed1f79c3c6bf76f7c3920b2254573dd4d1578e0a10fc53a53767843fd04d26c5c5570b2f648891050094000000000008003000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00'], 0xcc}, 0x1, 0x0, 0x0, 0x4000000}, 0x5) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x133242, 0x0) (async) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000080)={'netpci0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}) (async) 0s ago: executing program 1 (id=2562): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="017917000000000020020c00000008000400000000bb"], 0x1c}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r3, 0x300, 0x70bd2d, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x3c}}, 0x80) kernel console output (not intermixed with test programs): 26878][T12736] ? clear_bhb_loop+0x35/0x90 [ 205.131595][T12736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.137540][T12736] RIP: 0033:0x7f1ebef85d29 [ 205.141988][T12736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.161711][T12736] RSP: 002b:00007f1ebfe28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 205.170159][T12736] RAX: ffffffffffffffda RBX: 00007f1ebf175fa0 RCX: 00007f1ebef85d29 [ 205.178162][T12736] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 205.186161][T12736] RBP: 00007f1ebf001aa8 R08: 0000000000000004 R09: 0000000000000000 [ 205.194156][T12736] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.202147][T12736] R13: 0000000000000000 R14: 00007f1ebf175fa0 R15: 00007ffcac8a88d8 [ 205.209990][T12756] bridge_slave_0: left allmulticast mode [ 205.210136][T12736] [ 205.217727][T12756] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.253807][T12712] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 205.292561][T12756] bridge_slave_1: left promiscuous mode [ 205.301467][T12756] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.312984][T12736] Mem-Info: [ 205.333995][T12736] active_anon:4671 inactive_anon:0 isolated_anon:0 [ 205.333995][T12736] active_file:1174 inactive_file:38312 isolated_file:0 [ 205.333995][T12736] unevictable:768 dirty:82 writeback:0 [ 205.333995][T12736] slab_reclaimable:10812 slab_unreclaimable:102637 [ 205.333995][T12736] mapped:28520 shmem:1443 pagetables:718 [ 205.333995][T12736] sec_pagetables:0 bounce:0 [ 205.333995][T12736] kernel_misc_reclaimable:0 [ 205.333995][T12736] free:1337475 free_pcp:347 free_cma:0 [ 205.365896][ T973] net_ratelimit: 2 callbacks suppressed [ 205.365919][ T973] Dead loop on virtual device ip6_vti0, fix it urgently! [ 205.394748][T12736] Node 0 active_anon:18484kB inactive_anon:0kB active_file:4696kB inactive_file:153176kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114080kB dirty:328kB writeback:0kB shmem:4236kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12676kB pagetables:2872kB sec_pagetables:0kB all_unreclaimable? no [ 205.433687][T12736] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 205.466693][T12736] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 205.496554][T12756] bond0: (slave bond_slave_0): Releasing backup interface [ 205.506371][T12736] lowmem_reserve[]: 0 2465 2466 0 0 [ 205.511771][T12736] Node 0 DMA32 free:1428500kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:18544kB inactive_anon:0kB active_file:4696kB inactive_file:152340kB unevictable:1536kB writepending:324kB present:3129332kB managed:2552784kB mlocked:0kB bounce:0kB free_pcp:1464kB local_pcp:520kB free_cma:0kB [ 205.519977][T12761] netlink: 212 bytes leftover after parsing attributes in process `syz.4.1940'. [ 205.542759][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 205.560342][T12736] lowmem_reserve[]: 0 0 0 0 0 [ 205.567360][T12736] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:836kB unevictable:0kB writepending:4kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 205.602651][T12766] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1942'. [ 205.613495][T12756] bond0: (slave bond_slave_1): Releasing backup interface [ 205.622232][T12736] lowmem_reserve[]: 0 0 0 0 0 [ 205.629277][T12736] Node 1 Normal free:3906240kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 205.674003][T12736] lowmem_reserve[]: 0 0 0 0 0 [ 205.683498][T12736] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 205.702207][T12759] tipc: Enabling of bearer rejected, media not registered [ 205.717898][T12736] Node 0 DMA32: 2*4kB (UM) 9*8kB (ME) 54*16kB (ME) 162*32kB (UME) 76*64kB (UME) 81*128kB (UME) 42*256kB (UM) 17*512kB (UM) 6*1024kB (UME) 8*2048kB (UM) 333*4096kB (UM) = 1427312kB [ 205.761352][T12736] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 205.780000][T12736] Node 1 Normal: 240*4kB (UE) 54*8kB (UME) 31*16kB (UME) 215*32kB (UME) 90*64kB (UME) 28*128kB (UME) 16*256kB (UME) 10*512kB (UM) 2*1024kB (ME) 3*2048kB (UE) 945*4096kB (M) = 3906240kB [ 205.835182][T12736] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 205.865213][T12736] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 205.880723][T12736] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 205.921645][T12736] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 205.935078][T12776] xt_policy: neither incoming nor outgoing policy selected [ 205.947532][T12565] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 205.960869][T12736] 40929 total pagecache pages [ 205.977341][T12565] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 205.985785][T12736] 0 pages in swap cache [ 205.990040][T12736] Free swap = 124996kB [ 205.994224][T12736] Total swap = 124996kB [ 206.008405][T12565] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 206.011127][T12736] 2097051 pages RAM [ 206.020726][T12736] 0 pages HighMem/MovableOnly [ 206.038048][T12736] 427005 pages reserved [ 206.042846][T12736] 0 pages cma reserved [ 206.050692][T12565] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 206.204797][T12789] IPVS: set_ctl: invalid protocol: 59 172.30.0.1:20004 [ 206.212769][T12790] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1948'. [ 206.309553][T12565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.341930][T12565] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.355306][ T6197] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.362452][ T6197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.402091][T12794] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 206.411189][ T973] Dead loop on virtual device ip6_vti0, fix it urgently! [ 206.416577][T12794] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1951'. [ 206.442951][T12795] veth0: entered promiscuous mode [ 206.452895][ T6056] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.460089][ T6056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.482717][T12793] veth0: left promiscuous mode [ 206.565404][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 206.574333][ T5842] Bluetooth: hci0: command 0x0401 tx timeout [ 206.629308][T12809] nftables ruleset with unbound chain [ 206.660636][T12806] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1957'. [ 206.744168][ T6199] IPVS: rr: UDP 127.0.0.1:0 - no destination available [ 206.807677][ T5842] Bluetooth: hci3: command tx timeout [ 206.851365][T12819] bond7: entered promiscuous mode [ 206.875958][T12819] bond7: entered allmulticast mode [ 206.881420][T12819] 8021q: adding VLAN 0 to HW filter on device bond7 [ 207.010493][T12565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.122463][T12565] veth0_vlan: entered promiscuous mode [ 207.141578][T12838] netlink: 'syz.0.1964': attribute type 1 has an invalid length. [ 207.173670][T12565] veth1_vlan: entered promiscuous mode [ 207.194031][T12838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1964'. [ 207.324169][T12565] veth0_macvtap: entered promiscuous mode [ 207.354741][T12565] veth1_macvtap: entered promiscuous mode [ 207.443142][T12565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.455032][ T5922] Dead loop on virtual device ip6_vti0, fix it urgently! [ 207.468506][T12565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.479027][T12565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.500146][T12565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.521959][T12565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.590730][ T6199] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.597925][ T6199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.605731][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 207.660003][T12565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.723311][T12565] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.732676][T12565] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.743460][T12565] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.755551][T12565] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.898555][T12867] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.022092][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.044494][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.134017][ T6052] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.152626][ T6052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.455015][T12894] netlink: 'syz.0.1977': attribute type 3 has an invalid length. [ 208.487150][ T973] Dead loop on virtual device ip6_vti0, fix it urgently! [ 208.550584][T12896] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.752813][T12910] __nla_validate_parse: 5 callbacks suppressed [ 208.752833][T12910] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1983'. [ 208.849620][T12914] Unsupported ieee802154 address type: 0 [ 209.172905][T12924] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1988'. [ 209.202134][T12924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1988'. [ 209.222564][T12924] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 209.578933][ T6052] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.157293][T12950] ip6t_srh: unknown srh invflags A757 [ 210.180304][T12953] x_tables: duplicate underflow at hook 1 [ 210.183376][T12952] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1998'. [ 210.258840][ T6052] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.430365][ T6052] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.436770][T12964] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2000'. [ 210.646634][ T6052] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.666387][ T5922] net_ratelimit: 3 callbacks suppressed [ 210.666406][ T5922] Dead loop on virtual device ip6_vti0, fix it urgently! [ 210.718026][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 210.725416][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 210.735949][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 210.752105][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 210.825827][T12984] Dead loop on virtual device ip6_vti0, fix it urgently! [ 210.837325][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 210.844933][ T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 210.853314][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 211.067975][T12999] sctp: [Deprecated]: syz.0.2012 (pid 12999) Use of int in max_burst socket option deprecated. [ 211.067975][T12999] Use struct sctp_assoc_value instead [ 211.123247][T12999] sctp: [Deprecated]: syz.0.2012 (pid 12999) Use of int in max_burst socket option deprecated. [ 211.123247][T12999] Use struct sctp_assoc_value instead [ 211.172782][ T6052] bridge_slave_1: left allmulticast mode [ 211.179325][ T6052] bridge_slave_1: left promiscuous mode [ 211.185298][ T6052] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.259667][ T6052] bridge_slave_0: left allmulticast mode [ 211.267058][ T6052] bridge_slave_0: left promiscuous mode [ 211.290721][ T6052] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.437799][T13015] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2016'. [ 211.694871][ T973] Dead loop on virtual device ip6_vti0, fix it urgently! [ 211.775373][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 211.843276][ T6052] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.856068][ T6199] IPVS: rr: UDP 127.0.0.1:0 - no destination available [ 211.863871][ T6052] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.874558][ T6052] bond0 (unregistering): Released all slaves [ 211.899938][T13010] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2016'. [ 212.148907][T13028] nr0: renamed from macsec0 (while UP) [ 212.189338][T13028] veth1_macvtap: left promiscuous mode [ 212.200368][T13033] netlink: 'syz.0.2022': attribute type 4 has an invalid length. [ 212.202689][T13028] A link change request failed with some changes committed already. Interface nr0 may have been left with an inconsistent configuration, please check. [ 212.506476][ T6052] hsr_slave_0: left promiscuous mode [ 212.513658][ T6052] hsr_slave_1: left promiscuous mode [ 212.533532][ T6052] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.545549][ T6052] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.561277][ T6052] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.575831][ T6052] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.594186][T13049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2024'. [ 212.626155][T13049] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2024'. [ 212.639998][ T6052] veth1_macvtap: left promiscuous mode [ 212.641056][T13049] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2024'. [ 212.660245][ T6052] veth0_macvtap: left promiscuous mode [ 212.671995][ T6052] veth1_vlan: left promiscuous mode [ 212.685561][ T6052] veth0_vlan: left promiscuous mode [ 212.738312][ T5922] Dead loop on virtual device ip6_vti0, fix it urgently! [ 212.805713][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 212.864438][T13057] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 212.969509][ T5842] Bluetooth: hci3: command tx timeout [ 213.243360][ T6052] team0 (unregistering): Port device team_slave_1 removed [ 213.298872][ T6052] team0 (unregistering): Port device team_slave_0 removed [ 213.726863][T12979] chnl_net:caif_netlink_parms(): no params data found [ 213.748800][T13057] geneve2: entered promiscuous mode [ 213.754056][T13057] geneve2: entered allmulticast mode [ 213.844127][T13063] netlink: 'syz.4.2029': attribute type 11 has an invalid length. [ 214.139419][T12979] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.148957][T12979] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.151181][T13083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2034'. [ 214.157513][T12979] bridge_slave_0: entered allmulticast mode [ 214.172899][T12979] bridge_slave_0: entered promiscuous mode [ 214.182255][T12979] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.189568][T12979] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.197824][T12979] bridge_slave_1: entered allmulticast mode [ 214.204889][T12979] bridge_slave_1: entered promiscuous mode [ 214.237088][T13086] pimreg: entered allmulticast mode [ 214.331020][T12979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.358040][T12979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.385145][T13089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2036'. [ 214.446386][T13090] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2037'. [ 214.448127][T12979] team0: Port device team_slave_0 added [ 214.469959][T13089] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2036'. [ 214.471966][T13090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2037'. [ 214.491297][T12979] team0: Port device team_slave_1 added [ 214.498642][T13089] 0·: renamed from hsr0 (while UP) [ 214.530703][T13089] 0·: entered promiscuous mode [ 214.621586][T12979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.633580][T12979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.695460][T12979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.722305][T12979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.740617][T12979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.825597][T12979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.029910][T13112] netlink: 'syz.4.2044': attribute type 7 has an invalid length. [ 215.046173][ T5842] Bluetooth: hci3: command tx timeout [ 215.149904][T12979] hsr_slave_0: entered promiscuous mode [ 215.163446][T12979] hsr_slave_1: entered promiscuous mode [ 215.342019][T13130] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2052'. [ 215.858027][ T5881] net_ratelimit: 5 callbacks suppressed [ 215.858049][ T5881] Dead loop on virtual device ip6_vti0, fix it urgently! [ 215.925399][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 215.987340][T12979] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 216.026737][T12979] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 216.057071][T13158] netlink: 'syz.2.2061': attribute type 11 has an invalid length. [ 216.060015][T13164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2062'. [ 216.075176][T13164] netlink: 'syz.4.2062': attribute type 30 has an invalid length. [ 216.081464][T12979] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 216.083874][T13164] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2062'. [ 216.120844][T12979] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 216.174607][T13161] dvmrp1: entered allmulticast mode [ 216.366026][T12979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.472899][T12979] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.512835][ T6056] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.520039][ T6056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.564717][ T6052] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.571892][ T6052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.894315][ T973] Dead loop on virtual device ip6_vti0, fix it urgently! [ 216.896498][T12979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.965703][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 217.044001][T12979] veth0_vlan: entered promiscuous mode [ 217.083025][T12979] veth1_vlan: entered promiscuous mode [ 217.126105][ T5842] Bluetooth: hci3: command tx timeout [ 217.152224][T12979] veth0_macvtap: entered promiscuous mode [ 217.166775][T12979] veth1_macvtap: entered promiscuous mode [ 217.184894][T12979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.201403][T12979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.212295][T12979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.223300][T12979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.235160][T12979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.267006][T12979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.288224][T12979] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.309332][T12979] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.313294][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 217.318491][T12979] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.318526][T12979] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.347420][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 217.356719][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 217.369480][T13199] pimreg: entered allmulticast mode [ 217.383107][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 217.401050][ T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 217.409812][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 217.571595][ T6199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.579701][ T6199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.604584][ T6199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.614500][ T6199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.616811][ T6056] IPVS: rr: UDP 127.0.0.1:0 - no destination available [ 217.714752][T13214] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2079'. [ 217.816542][T13203] chnl_net:caif_netlink_parms(): no params data found [ 217.933916][ T973] Dead loop on virtual device ip6_vti0, fix it urgently! [ 217.989488][T13232] Bluetooth: MGMT ver 1.23 [ 218.005493][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 218.078803][T13203] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.096517][T13203] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.108049][T13203] bridge_slave_0: entered allmulticast mode [ 218.126317][T13203] bridge_slave_0: entered promiscuous mode [ 218.160753][T13203] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.170367][T13203] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.180693][T13203] bridge_slave_1: entered allmulticast mode [ 218.188501][T13203] bridge_slave_1: entered promiscuous mode [ 218.237069][T13203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.260089][T13203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.356267][T13203] team0: Port device team_slave_0 added [ 218.374329][T13203] team0: Port device team_slave_1 added [ 218.436980][T13203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.443974][T13203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.484250][T13203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.500873][T13203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.518570][T13203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.545779][T13203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.612252][T13203] hsr_slave_0: entered promiscuous mode [ 218.630011][T13203] hsr_slave_1: entered promiscuous mode [ 218.643825][T13203] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.665994][T13203] Cannot create hsr debugfs directory [ 218.883203][T13203] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.997713][T13203] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.006131][ T973] Dead loop on virtual device ip6_vti0, fix it urgently! [ 219.045625][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 219.113622][ T6199] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.169767][T13203] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.263494][T13203] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.406994][T13203] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 219.417032][T13203] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 219.426713][T13203] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 219.436196][T13203] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 219.492942][T13203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.509664][T13203] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.522490][ T6052] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.529636][ T6052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.536212][ T5842] Bluetooth: hci0: command tx timeout [ 219.549516][ T6197] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.556658][ T6197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.594186][T13203] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 219.605214][T13203] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 219.715432][T13203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.874162][T13203] veth0_vlan: entered promiscuous mode [ 219.904178][T13203] veth1_vlan: entered promiscuous mode [ 219.990654][T13203] veth0_macvtap: entered promiscuous mode [ 220.038196][T13203] veth1_macvtap: entered promiscuous mode [ 220.085389][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 220.105173][T13203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.135552][T13203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.155955][T13203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.177139][T13203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.220464][T13203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.245590][T13203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.266767][T13203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.363378][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 220.383805][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 220.392873][T13203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.405124][T13203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.425476][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 220.451146][T13203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.470416][T13203] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.495621][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 220.508278][T13203] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.517262][T13203] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.526494][ T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 220.533885][T13203] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.543604][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 220.567406][T13320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2106'. [ 220.587654][T13320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2106'. [ 220.644210][T13325] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2109'. [ 220.663393][ T6199] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.776446][ T6199] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.803203][T13328] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2110'. [ 220.826668][ T6059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.859734][ T6199] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.864463][ T6059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.885040][T13322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.894437][T13322] batadv_slave_0: entered promiscuous mode [ 221.045112][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.054242][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.125596][ C0] net_ratelimit: 1 callbacks suppressed [ 221.125625][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 221.158740][ T973] Dead loop on virtual device ip6_vti0, fix it urgently! [ 221.407120][ T6199] bridge_slave_1: left allmulticast mode [ 221.445645][ T6199] bridge_slave_1: left promiscuous mode [ 221.451421][ T6199] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.472066][T13359] netlink: 'syz.2.2116': attribute type 20 has an invalid length. [ 221.512791][ T6199] bridge_slave_0: left allmulticast mode [ 221.534866][T13363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2118'. [ 221.548646][ T6199] bridge_slave_0: left promiscuous mode [ 221.554434][ T6199] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.999921][ T6199] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.013884][ T6199] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.024440][ T6199] bond0 (unregistering): Released all slaves [ 222.165413][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 222.166633][ T5925] Dead loop on virtual device ip6_vti0, fix it urgently! [ 222.193888][T13381] x_tables: duplicate underflow at hook 2 [ 222.283518][T13385] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2121'. [ 222.312176][T13312] chnl_net:caif_netlink_parms(): no params data found [ 222.646753][ T55] Bluetooth: hci3: command tx timeout [ 222.653729][T13312] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.695961][T13312] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.716519][T13312] bridge_slave_0: entered allmulticast mode [ 222.734531][ T6056] IPVS: rr: UDP 127.0.0.1:0 - no destination available [ 222.755902][T13312] bridge_slave_0: entered promiscuous mode [ 222.765249][T13312] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.772688][T13312] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.780222][T13312] bridge_slave_1: entered allmulticast mode [ 222.788061][T13312] bridge_slave_1: entered promiscuous mode [ 222.798030][T13410] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2128'. [ 222.868106][ T6199] hsr_slave_0: left promiscuous mode [ 222.874968][ T6199] hsr_slave_1: left promiscuous mode [ 222.897700][ T6199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.907705][ T6199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.927808][ T6199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.935799][ T6199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.982785][ T6199] veth1_macvtap: left promiscuous mode [ 222.989129][ T6199] veth0_macvtap: left promiscuous mode [ 222.995543][ T6199] veth1_vlan: left promiscuous mode [ 223.000997][ T6199] veth0_vlan: left promiscuous mode [ 223.207217][ T973] Dead loop on virtual device ip6_vti0, fix it urgently! [ 223.215432][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 223.434104][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 223.465182][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 223.479361][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 223.501491][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 223.528344][ T5842] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 223.538417][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 223.753187][ T6199] team0 (unregistering): Port device team_slave_1 removed [ 223.798802][ T6199] team0 (unregistering): Port device team_slave_0 removed [ 224.246722][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 224.295214][ T5881] Dead loop on virtual device ip6_vti0, fix it urgently! [ 224.320764][T13312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.367814][T13312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.387395][T13438] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 224.548363][T13442] gtp0: entered promiscuous mode [ 224.553355][T13442] gtp0: entered allmulticast mode [ 224.580768][T13312] team0: Port device team_slave_0 added [ 224.599239][T13312] team0: Port device team_slave_1 added [ 224.726508][ T5842] Bluetooth: hci3: command tx timeout [ 224.774035][T13454] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 224.777834][T13456] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2141'. [ 224.801796][T13312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.817145][T13312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.849519][T13312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.930631][T13312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.960502][T13312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.006920][T13471] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2144'. [ 225.029281][T13312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.052278][T13476] Bluetooth: MGMT ver 1.23 [ 225.070923][T13465] syzkaller1: entered promiscuous mode [ 225.083041][T13465] syzkaller1: entered allmulticast mode [ 225.193525][T13312] hsr_slave_0: entered promiscuous mode [ 225.204621][T13312] hsr_slave_1: entered promiscuous mode [ 225.255878][T13428] chnl_net:caif_netlink_parms(): no params data found [ 225.357649][T13486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2148'. [ 225.427762][ T6199] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.605940][ T5842] Bluetooth: hci0: command tx timeout [ 225.626954][ T6199] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.733755][ T6199] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.763729][T13428] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.773542][T13428] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.781605][T13428] bridge_slave_0: entered allmulticast mode [ 225.789069][T13428] bridge_slave_0: entered promiscuous mode [ 225.814872][ T6199] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.832767][T13428] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.841793][T13428] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.849450][T13428] bridge_slave_1: entered allmulticast mode [ 225.856958][T13428] bridge_slave_1: entered promiscuous mode [ 225.969573][T13428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.983218][T13428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.086119][T13428] team0: Port device team_slave_0 added [ 226.130660][T13428] team0: Port device team_slave_1 added [ 226.153964][ T6199] bridge_slave_1: left allmulticast mode [ 226.160193][ T6199] bridge_slave_1: left promiscuous mode [ 226.180298][ T6199] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.191078][ T6199] bridge_slave_0: left allmulticast mode [ 226.197873][ T6199] bridge_slave_0: left promiscuous mode [ 226.203672][ T6199] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.326602][ C0] net_ratelimit: 3 callbacks suppressed [ 226.326626][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 226.415188][ T5922] Dead loop on virtual device ip6_vti0, fix it urgently! [ 226.750381][ T6199] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.763355][ T6199] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.774040][ T6199] bond0 (unregistering): Released all slaves [ 226.806844][ T5842] Bluetooth: hci3: command tx timeout [ 226.871347][T13428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.905643][T13428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.976590][T13428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.007705][T13428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.014689][T13428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.041572][T13428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.146590][T13539] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 227.196235][T13428] hsr_slave_0: entered promiscuous mode [ 227.202638][T13428] hsr_slave_1: entered promiscuous mode [ 227.211246][T13428] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.219276][T13428] Cannot create hsr debugfs directory [ 227.345061][ T6199] hsr_slave_0: left promiscuous mode [ 227.352782][ T6199] hsr_slave_1: left promiscuous mode [ 227.359585][ T6199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.368211][ T6199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.375394][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 227.384638][ T6199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.392368][ T6199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.415009][ T6199] veth1_macvtap: left promiscuous mode [ 227.420698][ T6199] veth0_macvtap: left promiscuous mode [ 227.426905][ T6199] veth1_vlan: left promiscuous mode [ 227.432199][ T6199] veth0_vlan: left promiscuous mode [ 227.445993][ T5922] Dead loop on virtual device ip6_vti0, fix it urgently! [ 227.695534][ T5842] Bluetooth: hci0: command tx timeout [ 227.893836][T13549] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2164'. [ 227.978221][ T6199] team0 (unregistering): Port device team_slave_1 removed [ 228.021754][ T6199] team0 (unregistering): Port device team_slave_0 removed [ 228.415374][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 228.490884][ T6056] IPVS: rr: UDP 127.0.0.1:0 - no destination available [ 228.491845][ T5922] Dead loop on virtual device ip6_vti0, fix it urgently! [ 228.592251][T13312] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 228.632706][T13312] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 228.680317][T13312] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 228.712839][T13312] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 228.886524][ T5842] Bluetooth: hci3: command tx timeout [ 228.921147][T13569] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2171'. [ 228.934017][T13569] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2171'. [ 228.945234][T13570] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2169'. [ 229.027168][T13573] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2172'. [ 229.038615][T13572] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20002 [ 229.109570][T13312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.148344][T13312] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.169434][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.176616][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.217970][ T6199] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.225177][ T6199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.332829][T13428] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 229.346188][T13428] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 229.370543][T13428] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 229.397126][T13428] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 229.445528][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 229.527100][ T973] Dead loop on virtual device ip6_vti0, fix it urgently! [ 229.547848][T13428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.600184][T13428] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.633562][T13312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.659130][ T6059] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.666333][ T6059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.696573][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.703836][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.766017][ T5842] Bluetooth: hci0: command tx timeout [ 229.823394][T13428] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 229.867127][T13428] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 229.916507][T13312] veth0_vlan: entered promiscuous mode [ 229.982838][T13312] veth1_vlan: entered promiscuous mode [ 230.061421][T13312] veth0_macvtap: entered promiscuous mode [ 230.079717][T13312] veth1_macvtap: entered promiscuous mode [ 230.136589][T13312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.157140][T13312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.187067][T13312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.195216][T13605] netlink: 'syz.0.2180': attribute type 1 has an invalid length. [ 230.224811][T13312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.226736][T13605] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2180'. [ 230.270795][T13312] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.302564][T13312] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.322933][T13312] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.332805][T13312] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.387794][T13428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.485540][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 230.543145][T13624] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2183'. [ 230.573687][ T6056] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.584859][ T6056] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.631361][T13618] delete_channel: no stack [ 230.653679][T13631] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2184'. [ 230.684801][ T6056] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.685200][T13629] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2184'. [ 230.697061][ T6056] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.040804][T13428] veth0_vlan: entered promiscuous mode [ 231.087525][T13428] veth1_vlan: entered promiscuous mode [ 231.178854][T13428] veth0_macvtap: entered promiscuous mode [ 231.212758][T13428] veth1_macvtap: entered promiscuous mode [ 231.259431][T13428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.261679][T13631] infiniband syz1: set down [ 231.270681][T13428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.287124][T13631] infiniband syz1: added ipvlan1 [ 231.330273][T13428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.356662][T13631] RDS/IB: syz1: added [ 231.361426][T13631] smc: adding ib device syz1 with port count 1 [ 231.368578][T13631] smc: ib device syz1 port 1 has pnetid [ 231.388544][T13428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.417098][T13428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.525420][ C0] net_ratelimit: 1 callbacks suppressed [ 231.525443][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 231.530949][T13428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.592332][T13428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.603599][T13428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.723401][ T5881] Dead loop on virtual device ip6_vti0, fix it urgently! [ 231.758247][T13428] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.769297][T13428] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.782510][T13428] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.791573][T13428] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.832373][ T6059] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.846100][ T5842] Bluetooth: hci0: command tx timeout [ 231.944517][ T6056] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.966731][ T6056] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.008722][ T6056] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.017773][ T6056] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.497569][T13673] netlink: 'syz.1.2193': attribute type 11 has an invalid length. [ 232.518315][T13673] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2193'. [ 232.565379][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 232.700252][T13681] netlink: 'syz.1.2196': attribute type 4 has an invalid length. [ 232.726144][ T5881] Dead loop on virtual device ip6_vti0, fix it urgently! [ 232.932137][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 232.945232][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 232.956237][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 232.987760][ T6059] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.000870][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 233.014947][ T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 233.017244][T13698] __nla_validate_parse: 1 callbacks suppressed [ 233.017260][T13698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2200'. [ 233.023251][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 233.048630][T13698] vlan2: entered allmulticast mode [ 233.053776][T13698] bridge_slave_0: entered allmulticast mode [ 233.132847][ T6059] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.269469][T13707] vcan0: tx drop: invalid da for name 0xfffffffffffffffd [ 233.308894][T13707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2203'. [ 233.374228][ T6059] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.388806][T13713] netlink: 'syz.0.2205': attribute type 1 has an invalid length. [ 233.615381][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 233.722036][ T6059] bridge_slave_1: left allmulticast mode [ 233.746020][ T6059] bridge_slave_1: left promiscuous mode [ 233.765762][ T6059] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.773527][ T5922] Dead loop on virtual device ip6_vti0, fix it urgently! [ 233.794128][ T6059] bridge_slave_0: left allmulticast mode [ 233.805544][ T6059] bridge_slave_0: left promiscuous mode [ 233.811999][ T6059] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.916687][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 233.938009][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 233.948619][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 233.966987][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 233.974664][ T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 233.983090][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 234.256116][ T1105] IPVS: rr: UDP 127.0.0.1:0 - no destination available [ 234.315705][ T6059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.333017][ T6059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.343550][ T6059] bond0 (unregistering): Released all slaves [ 234.594804][T13736] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2209'. [ 234.645432][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 234.752114][T13694] chnl_net:caif_netlink_parms(): no params data found [ 234.753075][T13748] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2213'. [ 234.806671][ T5922] Dead loop on virtual device ip6_vti0, fix it urgently! [ 235.038297][T13694] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.060723][T13694] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.077064][T13694] bridge_slave_0: entered allmulticast mode [ 235.101596][T13694] bridge_slave_0: entered promiscuous mode [ 235.128349][ T55] Bluetooth: hci0: command tx timeout [ 235.170562][T13694] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.190831][T13694] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.212397][T13694] bridge_slave_1: entered allmulticast mode [ 235.226552][T13694] bridge_slave_1: entered promiscuous mode [ 235.281360][ T6059] hsr_slave_0: left promiscuous mode [ 235.307611][ T6059] hsr_slave_1: left promiscuous mode [ 235.317603][ T6059] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.326322][ T6059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.334975][ T6059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.343863][ T6059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.382183][ T6059] veth1_macvtap: left promiscuous mode [ 235.388275][ T6059] veth0_macvtap: left promiscuous mode [ 235.394069][ T6059] veth1_vlan: left promiscuous mode [ 235.400572][ T6059] veth0_vlan: left promiscuous mode [ 235.694872][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 235.972861][ T6059] team0 (unregistering): Port device team_slave_1 removed [ 236.021994][ T6059] team0 (unregistering): Port device team_slave_0 removed [ 236.092389][ T55] Bluetooth: hci3: command tx timeout [ 236.516077][T13694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.593975][T13694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.725379][ C0] net_ratelimit: 1 callbacks suppressed [ 236.725398][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 236.792439][T13694] team0: Port device team_slave_0 added [ 236.821102][T13725] chnl_net:caif_netlink_parms(): no params data found [ 236.886517][ T973] Dead loop on virtual device ip6_vti0, fix it urgently! [ 236.899465][T13694] team0: Port device team_slave_1 added [ 236.962705][T13812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2231'. [ 237.019252][T13817] netlink: 'syz.1.2231': attribute type 2 has an invalid length. [ 237.028752][T13694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.038235][T13817] netlink: 'syz.1.2231': attribute type 1 has an invalid length. [ 237.052941][T13694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.093566][T13694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.107702][T13694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.114819][T13694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.142813][T13694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.206312][ T55] Bluetooth: hci0: command tx timeout [ 237.257125][T13725] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.264263][T13725] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.279769][T13725] bridge_slave_0: entered allmulticast mode [ 237.291737][T13725] bridge_slave_0: entered promiscuous mode [ 237.311256][T13725] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.319282][T13725] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.329401][T13725] bridge_slave_1: entered allmulticast mode [ 237.336508][T13725] bridge_slave_1: entered promiscuous mode [ 237.512864][T13725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.532707][T13694] hsr_slave_0: entered promiscuous mode [ 237.583797][T13694] hsr_slave_1: entered promiscuous mode [ 237.599347][T13855] netlink: 'syz.0.2239': attribute type 1 has an invalid length. [ 237.629447][T13725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.717041][T13725] team0: Port device team_slave_0 added [ 237.765466][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 237.770070][ T6059] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.803945][T13725] team0: Port device team_slave_1 added [ 237.890954][T13865] tipc: Can't bind to reserved service type 0 [ 237.892421][ T6059] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.926006][ T973] Dead loop on virtual device ip6_vti0, fix it urgently! [ 237.926167][T13725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.948920][T13725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.974614][T13868] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 237.991550][T13725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.069272][ T6059] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.091807][T13725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.108973][T13725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.135898][T13725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.166457][ T55] Bluetooth: hci3: command tx timeout [ 238.176805][ T6059] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.289083][T13725] hsr_slave_0: entered promiscuous mode [ 238.304740][T13725] hsr_slave_1: entered promiscuous mode [ 238.312792][T13725] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.329839][T13725] Cannot create hsr debugfs directory [ 238.545524][T13888] pim6reg1: entered promiscuous mode [ 238.551371][T13888] pim6reg1: entered allmulticast mode [ 238.611989][ T6059] bridge_slave_1: left allmulticast mode [ 238.620541][ T6059] bridge_slave_1: left promiscuous mode [ 238.635668][ T6059] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.655079][ T6059] bridge_slave_0: left allmulticast mode [ 238.662220][ T6059] bridge_slave_0: left promiscuous mode [ 238.669446][ T6059] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.815441][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 238.967233][ T5922] Dead loop on virtual device ip6_vti0, fix it urgently! [ 239.022470][ T6059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.033339][ T6059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.044042][ T6059] bond0 (unregistering): Released all slaves [ 239.295972][ T55] Bluetooth: hci0: command tx timeout [ 239.424965][T13896] batadv_slave_0: left promiscuous mode [ 239.437976][T13896] batadv_slave_1: left promiscuous mode [ 239.491464][T13896] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 239.528524][T13896] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.538869][T13896] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.548110][T13896] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.558264][T13896] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.568412][T13896] geneve2: left promiscuous mode [ 239.573433][T13896] geneve2: left allmulticast mode [ 239.582394][T13896] bridge_slave_0: left allmulticast mode [ 239.588570][T13896] vlan2: left allmulticast mode [ 239.604133][T13900] netlink: 'syz.2.2253': attribute type 21 has an invalid length. [ 239.801099][T13913] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2256'. [ 239.845452][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 240.012386][ T6056] IPVS: rr: UDP 127.0.0.1:0 - no destination available [ 240.015774][ T973] Dead loop on virtual device ip6_vti0, fix it urgently! [ 240.114683][ T6059] hsr_slave_0: left promiscuous mode [ 240.134129][ T6059] hsr_slave_1: left promiscuous mode [ 240.153867][ T6059] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.161815][T13927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2261'. [ 240.171561][ T6059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.185435][T13927] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2261'. [ 240.199632][ T6059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.210365][ T6059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.233205][ T6059] veth1_macvtap: left promiscuous mode [ 240.239588][ T6059] veth0_macvtap: left promiscuous mode [ 240.245154][ T6059] veth1_vlan: left promiscuous mode [ 240.250656][ T55] Bluetooth: hci3: command tx timeout [ 240.256565][ T6059] veth0_vlan: left promiscuous mode [ 240.720504][ T6059] team0 (unregistering): Port device team_slave_1 removed [ 240.769340][ T6059] team0 (unregistering): Port device team_slave_0 removed [ 240.895373][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 241.190734][T13694] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 241.283553][T13694] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 241.374923][T13694] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 241.375917][ T55] Bluetooth: hci0: command tx timeout [ 241.403131][T13694] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 241.641367][T13694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.779387][T13694] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.834348][ T6052] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.841522][ T6052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.899511][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.906716][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.925397][ C0] net_ratelimit: 2 callbacks suppressed [ 241.925417][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 241.939996][T13725] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 241.970432][T13725] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 242.007164][T13725] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 242.022070][T13694] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 242.042442][T13725] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 242.088910][ T5881] Dead loop on virtual device ip6_vti0, fix it urgently! [ 242.184721][T13966] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2273'. [ 242.243039][T13725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.294965][T13725] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.333534][ T55] Bluetooth: hci3: command tx timeout [ 242.342063][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.349262][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.370962][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.378155][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.410978][T13725] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 242.414706][T13979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2277'. [ 242.421795][T13725] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 242.459113][T13974] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 242.471602][T13981] xt_CT: You must specify a L4 protocol and not use inversions on it [ 242.489910][T13977] xt_CT: You must specify a L4 protocol and not use inversions on it [ 242.510966][T13976] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2276'. [ 242.578015][T13694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.692133][T13694] veth0_vlan: entered promiscuous mode [ 242.704773][T13694] veth1_vlan: entered promiscuous mode [ 242.746776][T13725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.793874][T13694] veth0_macvtap: entered promiscuous mode [ 242.818165][T13694] veth1_macvtap: entered promiscuous mode [ 242.857359][T13694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.874117][T13694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.886995][T13694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.922753][T13694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.965506][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 242.974609][T13694] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.984424][T13694] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.003706][T13694] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.036231][T13694] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.129602][ T5881] Dead loop on virtual device ip6_vti0, fix it urgently! [ 243.229435][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.253447][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.328150][ T6199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.354672][ T6199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.412739][T14010] tipc: Enabling of bearer rejected, failed to enable media [ 243.585053][T13725] veth0_vlan: entered promiscuous mode [ 243.698787][T13725] veth1_vlan: entered promiscuous mode [ 243.752967][T14021] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2286'. [ 243.762461][T14021] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2286'. [ 243.771832][T14021] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2286'. [ 243.857947][T14024] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2287'. [ 243.857947][T14026] netlink: 'syz.2.2287': attribute type 3 has an invalid length. [ 243.883507][T13725] veth0_macvtap: entered promiscuous mode [ 243.898181][T13725] veth1_macvtap: entered promiscuous mode [ 243.986895][T13725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.015458][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 244.031321][T13725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.056145][T13725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.077479][T13725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.099733][T13725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.120398][T13725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.142054][T13725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.166230][ T5881] Dead loop on virtual device ip6_vti0, fix it urgently! [ 244.185944][T13725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.237293][T13725] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.251234][T13725] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.262731][T13725] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.271964][T13725] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.624366][ T1105] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.661192][T14047] netlink: 'syz.2.2293': attribute type 9 has an invalid length. [ 244.672123][ T6199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.688659][ T6199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.754817][ T6056] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.763276][ T6056] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.045543][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 245.083163][ T1105] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.207044][ T5881] Dead loop on virtual device ip6_vti0, fix it urgently! [ 245.434137][T14050] netlink: 'syz.0.2294': attribute type 13 has an invalid length. [ 245.545426][T14053] __nla_validate_parse: 2 callbacks suppressed [ 245.545446][T14053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2296'. [ 245.607560][ T1105] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.716547][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 245.733042][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 245.743188][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 245.754862][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 245.763147][ T5835] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 245.771339][ T6056] IPVS: rr: UDP 127.0.0.1:0 - no destination available [ 245.772719][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 245.812124][T14061] netlink: 'syz.1.2297': attribute type 1 has an invalid length. [ 245.823503][T14061] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2297'. [ 245.883534][ T1105] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.178959][ T5835] Bluetooth: hci3: command 0x0405 tx timeout [ 246.420043][T14073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2302'. [ 246.440494][T14073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2302'. [ 246.474674][T14073] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2302'. [ 246.499223][ T1105] bridge_slave_1: left allmulticast mode [ 246.504959][ T1105] bridge_slave_1: left promiscuous mode [ 246.513187][ T1105] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.523211][T14086] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2305'. [ 246.535623][ T1105] bridge_slave_0: left allmulticast mode [ 246.540096][T14086] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2305'. [ 246.541298][ T1105] bridge_slave_0: left promiscuous mode [ 246.550482][T14086] netlink: 'syz.0.2305': attribute type 5 has an invalid length. [ 246.585588][ T1105] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.113689][ T1105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.125173][ T1105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.134057][ C0] net_ratelimit: 3 callbacks suppressed [ 247.134074][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 247.151354][ T1105] bond0 (unregistering): Released all slaves [ 247.161560][T14089] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 247.173934][T14089] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 247.202537][T14058] chnl_net:caif_netlink_parms(): no params data found [ 247.300561][ T5922] Dead loop on virtual device ip6_vti0, fix it urgently! [ 247.684300][T14120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2312'. [ 247.699252][T14116] netlink: 'syz.2.2311': attribute type 29 has an invalid length. [ 247.711164][T14121] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 247.723336][T14058] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.751280][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 247.759939][T14058] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.769079][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 247.778649][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 247.789363][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 247.802099][ T5835] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 247.803736][T14058] bridge_slave_0: entered allmulticast mode [ 247.817092][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 247.845695][ T55] Bluetooth: hci0: command tx timeout [ 247.857222][T14058] bridge_slave_0: entered promiscuous mode [ 247.904756][T14123] netlink: 'syz.2.2311': attribute type 29 has an invalid length. [ 247.925689][T14058] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.932807][T14058] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.940494][T14058] bridge_slave_1: entered allmulticast mode [ 247.947631][T14058] bridge_slave_1: entered promiscuous mode [ 248.011971][T14058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.052564][T14058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.069473][T14133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2316'. [ 248.144374][T14058] team0: Port device team_slave_0 added [ 248.165891][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 248.178481][T14058] team0: Port device team_slave_1 added [ 248.259919][T14058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.276330][T14137] IPVS: set_ctl: invalid protocol: 58 172.30.0.2:20000 [ 248.277762][T14058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.321060][T14058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.340957][ T5922] Dead loop on virtual device ip6_vti0, fix it urgently! [ 248.395045][T14058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.403227][T14058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.430841][T14058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.529367][ T1105] hsr_slave_0: left promiscuous mode [ 248.536119][ T1105] hsr_slave_1: left promiscuous mode [ 248.543376][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.552083][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.567481][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.575067][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.577779][T14145] x_tables: duplicate underflow at hook 3 [ 248.607439][ T1105] veth1_macvtap: left promiscuous mode [ 248.614511][ T1105] veth0_macvtap: left promiscuous mode [ 248.622134][ T1105] veth1_vlan: left promiscuous mode [ 248.627656][ T1105] veth0_vlan: left promiscuous mode [ 249.101770][ T1105] team0 (unregistering): Port device team_slave_1 removed [ 249.156862][ T1105] team0 (unregistering): Port device team_slave_0 removed [ 249.205400][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 249.367988][ T5922] Dead loop on virtual device ip6_vti0, fix it urgently! [ 249.634083][T14144] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2318'. [ 249.771131][T14058] hsr_slave_0: entered promiscuous mode [ 249.794291][T14058] hsr_slave_1: entered promiscuous mode [ 249.846151][ T55] Bluetooth: hci3: command tx timeout [ 249.927226][ T55] Bluetooth: hci0: command tx timeout [ 250.245574][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 250.382879][T14122] chnl_net:caif_netlink_parms(): no params data found [ 250.426953][ T6052] Dead loop on virtual device ip6_vti0, fix it urgently! [ 250.494944][T14194] netlink: 'syz.2.2332': attribute type 1 has an invalid length. [ 250.652089][T14122] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.682241][T14122] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.691581][T14122] bridge_slave_0: entered allmulticast mode [ 250.707997][T14122] bridge_slave_0: entered promiscuous mode [ 250.735197][T14122] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.750970][T14122] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.759028][T14122] bridge_slave_1: entered allmulticast mode [ 250.766965][T14122] bridge_slave_1: entered promiscuous mode [ 250.885149][T14122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.981802][ T1105] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.013134][T14122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.107031][ T1105] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.197969][T14122] team0: Port device team_slave_0 added [ 251.237959][ T1105] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.276302][T14122] team0: Port device team_slave_1 added [ 251.285370][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 251.295116][T14058] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 251.361409][ T1105] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.380627][T14058] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 251.392415][T14122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.406300][T14122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.434137][T14122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.446975][T14058] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 251.462905][T14122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.470685][T14122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.498141][T14122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.515897][T14058] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 251.526279][ T11] IPVS: rr: UDP 127.0.0.1:0 - no destination available [ 251.645133][T14122] hsr_slave_0: entered promiscuous mode [ 251.653636][T14122] hsr_slave_1: entered promiscuous mode [ 251.661891][T14122] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 251.685530][T14122] Cannot create hsr debugfs directory [ 251.857047][ T1105] bridge_slave_1: left allmulticast mode [ 251.863764][ T1105] bridge_slave_1: left promiscuous mode [ 251.872075][ T1105] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.904924][ T1105] bridge_slave_0: left allmulticast mode [ 251.919007][ T1105] bridge_slave_0: left promiscuous mode [ 251.924845][ T1105] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.936296][ T55] Bluetooth: hci3: command tx timeout [ 251.978902][T14257] __nla_validate_parse: 2 callbacks suppressed [ 251.978921][T14257] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2352'. [ 252.005855][ T55] Bluetooth: hci0: command tx timeout [ 252.014324][T14259] netlink: 'syz.1.2351': attribute type 1 has an invalid length. [ 252.325382][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 252.450101][ T1105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.462205][ T1105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.475814][ T1105] bond0 (unregistering): Released all slaves [ 252.598048][T14262] bond4: (slave gretap1): making interface the new active one [ 252.638207][T14262] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 252.978319][T14284] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 253.073427][T14058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.360516][T14058] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.365478][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 253.529662][ T1105] hsr_slave_0: left promiscuous mode [ 253.560199][ T1105] hsr_slave_1: left promiscuous mode [ 253.570172][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.577849][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.586373][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.593954][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.661097][ T1105] veth1_macvtap: left promiscuous mode [ 253.667947][ T1105] veth0_macvtap: left promiscuous mode [ 253.673578][ T1105] veth1_vlan: left promiscuous mode [ 253.679208][ T1105] veth0_vlan: left promiscuous mode [ 254.017950][ T55] Bluetooth: hci3: command tx timeout [ 254.095362][ T55] Bluetooth: hci0: command tx timeout [ 254.182881][ T1105] team0 (unregistering): Port device team_slave_1 removed [ 254.232133][ T1105] team0 (unregistering): Port device team_slave_0 removed [ 254.405388][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 254.772800][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.779991][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.823981][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.831169][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.947246][T14315] netlink: 'syz.2.2366': attribute type 8 has an invalid length. [ 254.955033][T14315] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2366'. [ 255.004064][T14320] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2366'. [ 255.050180][T14320] geneve0: entered promiscuous mode [ 255.061876][T14320] geneve0: entered allmulticast mode [ 255.355764][T14331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2369'. [ 255.375132][T14331] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2369'. [ 255.445431][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 255.463751][T14122] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 255.493186][T14122] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 255.527958][T14122] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 255.561143][T14122] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 255.634852][T14058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.774753][T14058] veth0_vlan: entered promiscuous mode [ 255.794451][T14058] veth1_vlan: entered promiscuous mode [ 255.832095][T14122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.902520][T14122] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.938718][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.945898][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.969219][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.976394][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.010570][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.012477][T14058] veth0_macvtap: entered promiscuous mode [ 256.075835][T14357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2376'. [ 256.092468][ T55] Bluetooth: hci3: command tx timeout [ 256.112517][T14058] veth1_macvtap: entered promiscuous mode [ 256.165830][ T55] Bluetooth: hci0: command 0x0c20 tx timeout [ 256.171787][T14058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.219696][T14058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.253379][T14058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.278485][T14369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2378'. [ 256.311280][T14058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.342160][T14374] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.2379'. [ 256.354203][T14058] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.364089][T14373] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.2379'. [ 256.383892][T14374] openvswitch: netlink: Flow actions attr not present in new flow. [ 256.392140][T14058] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.426090][T14058] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.434837][T14058] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.435629][T14373] openvswitch: netlink: Flow actions attr not present in new flow. [ 256.485368][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 256.518718][T14122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.677459][T14391] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2383'. [ 256.696187][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.708022][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.766536][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.778522][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.049222][T14406] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2388'. [ 257.052464][T14407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2387'. [ 257.078979][T14403] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2386'. [ 257.121633][T14122] veth0_vlan: entered promiscuous mode [ 257.144372][T14122] veth1_vlan: entered promiscuous mode [ 257.192835][T14122] veth0_macvtap: entered promiscuous mode [ 257.219471][T14122] veth1_macvtap: entered promiscuous mode [ 257.241930][T14122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.259322][T14122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.273359][T14122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.286863][ T6056] IPVS: rr: UDP 127.0.0.1:0 - no destination available [ 257.300152][T14122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.314320][T14122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.332718][T14414] netlink: 'syz.2.2391': attribute type 3 has an invalid length. [ 257.350995][T14122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.362220][T14122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.387591][T14122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.405894][T14122] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.414668][T14122] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.427452][T14122] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.438405][T14122] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.525442][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 257.752684][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.793214][ T6197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.807276][ T6197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.834519][ T6197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.843639][ T6197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.939776][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.334507][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.394122][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.518570][ T11] bridge_slave_1: left allmulticast mode [ 258.524329][ T11] bridge_slave_1: left promiscuous mode [ 258.531052][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.540215][ T11] bridge_slave_0: left allmulticast mode [ 258.546780][ T11] bridge_slave_0: left promiscuous mode [ 258.552475][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.565485][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 259.053386][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 259.064899][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 259.073197][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 259.083833][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 259.093170][ T5835] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 259.102311][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 259.233663][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.244599][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.255461][ T11] bond0 (unregistering): Released all slaves [ 259.581832][T14442] chnl_net:caif_netlink_parms(): no params data found [ 259.605362][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 259.785103][T14458] team0: No ports can be present during mode change [ 259.810602][T14461] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2402'. [ 259.911250][T14463] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 259.969611][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 259.980702][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 259.990483][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 260.007603][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 260.034706][ T5835] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 260.052167][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 260.070190][ T11] hsr_slave_0: left promiscuous mode [ 260.079146][ T11] hsr_slave_1: left promiscuous mode [ 260.096463][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.106952][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.128666][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.140472][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.164559][ T11] veth1_macvtap: left promiscuous mode [ 260.170781][ T11] veth0_macvtap: left promiscuous mode [ 260.180095][ T11] veth1_vlan: left promiscuous mode [ 260.185641][ T11] veth0_vlan: left promiscuous mode [ 260.199639][T14469] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2404'. [ 260.653867][ T11] team0 (unregistering): Port device team_slave_1 removed [ 260.655376][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 260.701523][ T11] team0 (unregistering): Port device team_slave_0 removed [ 261.188465][T14474] tipc: Started in network mode [ 261.193408][T14474] tipc: Node identity ac14142f, cluster identity 4711 [ 261.206514][ T5835] Bluetooth: hci0: command tx timeout [ 261.224092][T14474] tipc: Enabling of bearer rejected, failed to enable media [ 261.271403][T14485] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2407'. [ 261.393733][T14442] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.405418][T14442] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.412672][T14442] bridge_slave_0: entered allmulticast mode [ 261.475793][T14442] bridge_slave_0: entered promiscuous mode [ 261.524272][T14442] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.565203][T14442] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.576475][T14488] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2409'. [ 261.595587][T14442] bridge_slave_1: entered allmulticast mode [ 261.602685][T14442] bridge_slave_1: entered promiscuous mode [ 261.685364][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 261.726165][T14442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.738338][T14442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.750303][T14491] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2408'. [ 261.761124][T14491] netlink: 'syz.2.2408': attribute type 1 has an invalid length. [ 261.817300][T14442] team0: Port device team_slave_0 added [ 261.848222][T14442] team0: Port device team_slave_1 added [ 261.918866][T14442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.928954][T14442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.967719][T14442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.987693][T14442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.014409][T14442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.093696][T14442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.166340][ T5835] Bluetooth: hci3: command tx timeout [ 262.286554][T14442] hsr_slave_0: entered promiscuous mode [ 262.292829][T14442] hsr_slave_1: entered promiscuous mode [ 262.394593][T14513] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2417'. [ 262.406221][ T6191] IPVS: rr: UDP 127.0.0.1:0 - no destination available [ 262.425110][T14465] chnl_net:caif_netlink_parms(): no params data found [ 262.444713][T14513] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2417'. [ 262.456919][T14513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2417'. [ 262.534828][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.564338][T14513] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2417'. [ 262.576480][T14513] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 262.686210][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.725348][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 262.887595][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.948970][T14536] veth9: entered allmulticast mode [ 263.173853][T14553] xt_socket: unknown flags 0x2 [ 263.192193][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.295943][ T5835] Bluetooth: hci0: command tx timeout [ 263.370387][T14465] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.384108][T14465] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.394270][T14465] bridge_slave_0: entered allmulticast mode [ 263.405116][T14465] bridge_slave_0: entered promiscuous mode [ 263.417490][T14465] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.425013][T14465] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.433368][T14465] bridge_slave_1: entered allmulticast mode [ 263.441013][T14465] bridge_slave_1: entered promiscuous mode [ 263.664484][T14465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.736273][T14465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.765412][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 263.941906][T14465] team0: Port device team_slave_0 added [ 263.978822][T14465] team0: Port device team_slave_1 added [ 264.044397][T14592] macvlan0: entered allmulticast mode [ 264.054975][ T11] bridge_slave_1: left allmulticast mode [ 264.073055][ T11] bridge_slave_1: left promiscuous mode [ 264.080927][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.094816][ T11] bridge_slave_0: left allmulticast mode [ 264.103826][ T11] bridge_slave_0: left promiscuous mode [ 264.110703][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.245685][ T5835] Bluetooth: hci3: command tx timeout [ 264.506385][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.522370][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.533668][ T11] bond0 (unregistering): Released all slaves [ 264.554390][T14465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.579251][T14465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.606839][T14465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.644923][T14592] macvlan0 (unregistering): left allmulticast mode [ 264.682116][T14465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.689905][T14465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.718850][T14465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.805395][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 264.840592][T14442] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 264.921001][T14442] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 264.939939][T14442] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 264.942948][T14604] No such timeout policy "syz0" [ 265.022738][T14442] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 265.067878][T14465] hsr_slave_0: entered promiscuous mode [ 265.082216][T14465] hsr_slave_1: entered promiscuous mode [ 265.115689][T14465] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 265.123305][T14465] Cannot create hsr debugfs directory [ 265.271065][ T11] hsr_slave_0: left promiscuous mode [ 265.294325][ T11] hsr_slave_1: left promiscuous mode [ 265.301029][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.309572][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.318935][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.326853][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.356731][ T11] veth1_macvtap: left promiscuous mode [ 265.362378][ T11] veth0_macvtap: left promiscuous mode [ 265.369299][ T11] veth1_vlan: left promiscuous mode [ 265.374709][ T11] veth0_vlan: left promiscuous mode [ 265.380557][ T5835] Bluetooth: hci0: command tx timeout [ 265.855384][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 265.900381][ T11] team0 (unregistering): Port device team_slave_1 removed [ 265.952040][ T11] team0 (unregistering): Port device team_slave_0 removed [ 266.325558][ T5835] Bluetooth: hci3: command tx timeout [ 266.414549][T14618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2446'. [ 266.429266][T14619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2446'. [ 266.583256][T14635] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20004 [ 266.630356][T14638] tipc: Enabling of bearer rejected, already enabled [ 266.844852][T14442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.879505][T14442] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.889156][T14648] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 266.895401][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 266.970035][ T6059] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.977227][ T6059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.006588][T14655] Bluetooth: MGMT ver 1.23 [ 267.016940][ T6059] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.024070][ T6059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.411230][T14465] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 267.443922][T14465] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 267.452469][ T5835] Bluetooth: hci0: command tx timeout [ 267.482681][T14465] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 267.506542][T14677] tipc: Started in network mode [ 267.511468][T14677] tipc: Node identity ac14140f, cluster identity 4711 [ 267.526607][T14677] tipc: New replicast peer: 255.255.255.255 [ 267.527627][ T6056] IPVS: rr: UDP 127.0.0.1:0 - no destination available [ 267.534192][T14677] tipc: Enabled bearer , priority 10 [ 267.565096][T14465] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 267.611710][T14686] xt_policy: neither incoming nor outgoing policy selected [ 267.624293][T14442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.801848][T14442] veth0_vlan: entered promiscuous mode [ 267.830107][T14442] veth1_vlan: entered promiscuous mode [ 267.925460][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 267.946565][T14465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.013809][T14465] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.034619][T14442] veth0_macvtap: entered promiscuous mode [ 268.065116][ T6056] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.072315][ T6056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.105156][ T6056] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.112340][ T6056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.131336][T14442] veth1_macvtap: entered promiscuous mode [ 268.220792][T14442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.240784][T14442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.261351][T14442] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.297468][T14442] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.328692][T14442] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.346795][T14442] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.370184][T14442] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.381374][T14442] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.406823][ T5835] Bluetooth: hci3: command tx timeout [ 268.570858][ T6059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.599834][ T6059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.653353][ T25] tipc: Node number set to 2886997007 [ 268.716004][ T6059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.716551][T14465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.735914][ T6059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.965457][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 269.042589][T14465] veth0_vlan: entered promiscuous mode [ 269.053559][T14465] veth1_vlan: entered promiscuous mode [ 269.083862][T14465] veth0_macvtap: entered promiscuous mode [ 269.092884][T14465] veth1_macvtap: entered promiscuous mode [ 269.108354][T14465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.120023][T14465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.131872][T14465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.143109][T14465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.154499][T14465] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.169873][T14465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.181678][T14465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.194073][T14465] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.220044][T14465] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.229229][T14465] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.242788][T14465] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.252263][T14465] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.363589][T14750] netlink: 'syz.1.2480': attribute type 33 has an invalid length. [ 269.388372][T14750] netlink: 'syz.1.2480': attribute type 33 has an invalid length. [ 269.434719][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.511733][ T6059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.553098][ T6059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.621272][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.652457][ T6052] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.662301][ T6052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.781568][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.947748][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.015594][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 270.284732][ T11] bridge_slave_1: left allmulticast mode [ 270.291664][ T11] bridge_slave_1: left promiscuous mode [ 270.297882][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.308041][ T11] bridge_slave_0: left allmulticast mode [ 270.313713][ T11] bridge_slave_0: left promiscuous mode [ 270.319764][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.761199][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 270.780950][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.823220][ T11] bond0 (unregistering): Released all slaves [ 271.055396][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 271.108108][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 271.123135][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 271.140718][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 271.157330][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 271.169480][ T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 271.177471][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 271.400680][ T11] hsr_slave_0: left promiscuous mode [ 271.412408][ T11] hsr_slave_1: left promiscuous mode [ 271.420465][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.428103][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.439797][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.447384][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.472551][ T11] veth1_macvtap: left promiscuous mode [ 271.481955][ T11] veth0_macvtap: left promiscuous mode [ 271.489464][ T11] veth1_vlan: left promiscuous mode [ 271.494758][ T11] veth0_vlan: left promiscuous mode [ 271.639735][T14774] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2486'. [ 271.951422][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 271.970902][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 271.980290][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 271.997068][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 272.007732][ T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 272.015141][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 272.086834][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 272.221250][ T11] team0 (unregistering): Port device team_slave_1 removed [ 272.270033][ T11] team0 (unregistering): Port device team_slave_0 removed [ 272.919867][T14774] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 272.930122][T14774] batadv1: entered promiscuous mode [ 272.956502][T14774] team0: Port device batadv1 added [ 273.073550][T14795] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2489'. [ 273.125571][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 273.228549][T14769] chnl_net:caif_netlink_parms(): no params data found [ 273.290368][ T6197] IPVS: rr: UDP 127.0.0.1:0 - no destination available [ 273.297508][ T5835] Bluetooth: hci0: command tx timeout [ 273.374180][T14805] veth0: entered promiscuous mode [ 273.523097][T14805] lo: entered promiscuous mode [ 273.561038][T14802] netlink: 'syz.0.2491': attribute type 1 has an invalid length. [ 273.568970][T14802] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2491'. [ 273.584084][T14769] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.592238][T14769] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.599671][T14769] bridge_slave_0: entered allmulticast mode [ 273.607104][T14769] bridge_slave_0: entered promiscuous mode [ 273.633235][T14769] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.640798][T14769] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.648837][T14769] bridge_slave_1: entered allmulticast mode [ 273.659179][T14769] bridge_slave_1: entered promiscuous mode [ 273.682325][T14801] lo: left promiscuous mode [ 273.689442][T14801] veth0: left promiscuous mode [ 273.793891][T14824] set match dimension is over the limit! [ 273.879448][T14826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2494'. [ 273.890128][T14826] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2494'. [ 273.915569][T14826] netlink: 'syz.0.2494': attribute type 11 has an invalid length. [ 273.963767][T14769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.008612][T14769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.091318][ T5835] Bluetooth: hci3: command tx timeout [ 274.162685][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.175584][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 274.212278][T14769] team0: Port device team_slave_0 added [ 274.221454][T14769] team0: Port device team_slave_1 added [ 274.311030][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.332539][T14784] chnl_net:caif_netlink_parms(): no params data found [ 274.359026][T14769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.372773][T14769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.400177][T14769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.453746][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.480625][T14769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.492617][T14769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.520668][T14769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.558593][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.752141][T14784] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.761041][T14784] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.769023][T14784] bridge_slave_0: entered allmulticast mode [ 274.777295][T14784] bridge_slave_0: entered promiscuous mode [ 274.797674][T14769] hsr_slave_0: entered promiscuous mode [ 274.814348][T14769] hsr_slave_1: entered promiscuous mode [ 274.844089][T14784] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.852266][T14784] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.860470][T14784] bridge_slave_1: entered allmulticast mode [ 274.871664][T14784] bridge_slave_1: entered promiscuous mode [ 275.018889][T14784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.070901][T14784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.205590][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 275.233492][ T11] bridge_slave_1: left allmulticast mode [ 275.239457][ T11] bridge_slave_1: left promiscuous mode [ 275.245346][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.255188][ T11] bridge_slave_0: left allmulticast mode [ 275.262345][ T11] bridge_slave_0: left promiscuous mode [ 275.269909][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.290920][T14869] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2505'. [ 275.365884][ T5835] Bluetooth: hci0: command tx timeout [ 275.728945][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.742442][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.756950][ T11] bond0 (unregistering): Released all slaves [ 275.776170][T14784] team0: Port device team_slave_0 added [ 275.812719][T14867] bond0: entered promiscuous mode [ 275.834051][T14867] bond_slave_0: entered promiscuous mode [ 275.840763][T14867] bond_slave_1: entered promiscuous mode [ 275.858935][T14867] batadv_slave_0: entered promiscuous mode [ 275.882197][T14867] bond0: left allmulticast mode [ 275.887645][T14867] bond_slave_0: left allmulticast mode [ 275.893167][T14867] bond_slave_1: left allmulticast mode [ 275.900128][T14867] batadv_slave_0: left allmulticast mode [ 275.963075][T14784] team0: Port device team_slave_1 added [ 276.116990][T14891] Bluetooth: MGMT ver 1.23 [ 276.131784][T14784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.161393][T14784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.171779][ T5835] Bluetooth: hci3: command tx timeout [ 276.228125][T14784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.245457][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 276.268701][T14901] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2512'. [ 276.311434][T14784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.340818][T14784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.391554][T14784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.629933][ T11] hsr_slave_0: left promiscuous mode [ 276.640706][ T11] hsr_slave_1: left promiscuous mode [ 276.647721][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.655178][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.667857][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.676116][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.730235][ T11] veth1_macvtap: left promiscuous mode [ 276.738454][ T11] veth0_macvtap: left promiscuous mode [ 276.744036][ T11] veth1_vlan: left promiscuous mode [ 276.750356][ T11] veth0_vlan: left promiscuous mode [ 277.195632][ T11] team0 (unregistering): Port device team_slave_1 removed [ 277.253093][ T11] team0 (unregistering): Port device team_slave_0 removed [ 277.295453][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 277.450348][ T5835] Bluetooth: hci0: command tx timeout [ 277.737265][T14784] hsr_slave_0: entered promiscuous mode [ 277.762208][T14784] hsr_slave_1: entered promiscuous mode [ 277.771410][T14784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 277.780461][T14784] Cannot create hsr debugfs directory [ 277.852411][T14910] 8021q: adding VLAN 0 to HW filter on device bond9 [ 277.869258][T14886] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 277.939021][T14913] netlink: 64985 bytes leftover after parsing attributes in process `syz.1.2517'. [ 278.138343][T14922] netlink: 'syz.0.2520': attribute type 11 has an invalid length. [ 278.250570][ T5835] Bluetooth: hci3: command tx timeout [ 278.277972][T14769] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 278.308059][T14925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2521'. [ 278.323578][T14769] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 278.330520][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 278.331474][ T6197] IPVS: rr: UDP 127.0.0.1:0 - no destination available [ 278.351221][T14769] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 278.375252][T14924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2521'. [ 278.394565][T14769] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 278.487819][T14938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2524'. [ 278.609046][T14946] vcan0: tx drop: invalid da for name 0xfffffffffffffffe [ 278.632164][T14769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.674696][T14769] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.792308][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.799509][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.832676][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.839860][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.008329][T14784] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 279.028553][T14784] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 279.047684][T14784] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 279.060094][T14969] openvswitch: netlink: Missing key (keys=40, expected=100) [ 279.069820][T14784] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 279.079480][T14971] openvswitch: netlink: Missing key (keys=40, expected=100) [ 279.224928][T14784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.233757][T14976] netlink: 'syz.1.2534': attribute type 12 has an invalid length. [ 279.249149][T14976] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2534'. [ 279.284020][T14784] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.313889][ T6197] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.321080][ T6197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.351556][ T6197] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.358751][ T6197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.375416][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 279.404710][T14769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.499926][T14769] veth0_vlan: entered promiscuous mode [ 279.523659][T14769] veth1_vlan: entered promiscuous mode [ 279.529524][ T5835] Bluetooth: hci0: command 0x0419 tx timeout [ 279.582119][T14769] veth0_macvtap: entered promiscuous mode [ 279.638834][T14769] veth1_macvtap: entered promiscuous mode [ 279.697643][T14769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.742312][T14769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.756976][T14769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.785476][T14991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2536'. [ 279.805794][T14991] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2536'. [ 279.831502][T14991] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 279.849294][T14996] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2536'. [ 279.878015][T14769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.908637][T14784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.924834][T14998] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2537'. [ 279.941691][T14769] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.979159][T14769] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.004818][T14769] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.024891][T14769] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.330670][ T5835] Bluetooth: hci3: command tx timeout [ 280.340160][ T6197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.348889][ T6197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.362866][ T6056] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.372193][ T6056] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.405459][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 280.502569][T14784] veth0_vlan: entered promiscuous mode [ 280.526984][T15019] openvswitch: netlink: IP tunnel dst address not specified [ 280.555978][T14784] veth1_vlan: entered promiscuous mode [ 280.617527][T15022] netlink: 'syz.0.2542': attribute type 1 has an invalid length. [ 280.736490][T14784] veth0_macvtap: entered promiscuous mode [ 280.762626][T14784] veth1_macvtap: entered promiscuous mode [ 280.780212][T15025] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.2543'. [ 280.801515][T14784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.828807][T14784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.848410][T14784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.863888][T14784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.876395][T14784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.913954][T14784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.930103][T14784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.941784][T14784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.953251][T14784] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.983694][T14784] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.002443][T14784] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.012391][T14784] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.189597][ T6052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.200177][ T6052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.257712][ T6052] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.265999][ T6052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.300868][T15048] netlink: 'syz.1.2551': attribute type 7 has an invalid length. [ 281.445460][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 281.670598][ T6059] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.405690][ T6059] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.485447][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 282.666172][ T6059] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.778157][ T6059] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.039633][ T6059] bridge_slave_1: left allmulticast mode [ 283.052787][ T6059] bridge_slave_1: left promiscuous mode [ 283.064390][ T6059] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.083049][ T6059] bridge_slave_0: left allmulticast mode [ 283.091535][ T6059] bridge_slave_0: left promiscuous mode [ 283.102773][ T6059] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.103182][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 283.123363][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 283.132289][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 283.141595][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 283.149678][ T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 283.157423][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 283.451496][ T11] IPVS: rr: UDP 127.0.0.1:0 - no destination available [ 283.526689][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 283.584828][T15073] __nla_validate_parse: 7 callbacks suppressed [ 283.584846][T15073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2557'. [ 283.607104][ T6059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.638285][ T6059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.663023][ T6059] bond0 (unregistering): Released all slaves [ 283.854273][T15073] infiniband syz1: set down [ 283.906525][ T62] smc: removing ib device syz1 [ 283.979590][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 283.990409][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 284.008151][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 284.018031][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 284.033482][ T5835] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 284.051160][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 284.074558][T15079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2560'. [ 284.083824][T15079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2560'. [ 284.094119][T15079] netlink: 'syz.1.2560': attribute type 3 has an invalid length. [ 284.157669][T13826] ================================================================== [ 284.165779][T13826] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x6e/0x190 [ 284.174576][T13826] Read of size 8 at addr ffff88805cbe82e8 by task kworker/0:11/13826 [ 284.182658][T13826] [ 284.184993][T13826] CPU: 0 UID: 0 PID: 13826 Comm: kworker/0:11 Not tainted 6.13.0-rc3-syzkaller-00167-gb3a69c559899 #0 [ 284.195944][T13826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 284.206019][T13826] Workqueue: events smc_ib_port_event_work [ 284.211852][T13826] Call Trace: [ 284.215127][T13826] [ 284.218063][T13826] dump_stack_lvl+0x241/0x360 [ 284.222847][T13826] ? __pfx_dump_stack_lvl+0x10/0x10 [ 284.228063][T13826] ? __pfx__printk+0x10/0x10 [ 284.232670][T13826] ? _printk+0xd5/0x120 [ 284.236840][T13826] ? __virt_addr_valid+0x183/0x530 [ 284.241975][T13826] ? __virt_addr_valid+0x183/0x530 [ 284.247103][T13826] print_report+0x169/0x550 [ 284.251618][T13826] ? __virt_addr_valid+0x183/0x530 [ 284.256742][T13826] ? __virt_addr_valid+0x183/0x530 [ 284.261875][T13826] ? __virt_addr_valid+0x45f/0x530 [ 284.267004][T13826] ? __phys_addr+0xba/0x170 [ 284.271515][T13826] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 284.277491][T13826] kasan_report+0x143/0x180 [ 284.281986][T13826] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 284.287959][T13826] __ethtool_get_link_ksettings+0x6e/0x190 [ 284.293758][T13826] ib_get_eth_speed+0x160/0x800 [ 284.298601][T13826] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 284.303967][T13826] ? rxe_query_port+0x4f/0x260 [ 284.308729][T13826] rxe_query_port+0x76/0x260 [ 284.313313][T13826] ib_query_port+0x166/0x7d0 [ 284.317898][T13826] smc_ib_port_event_work+0x14e/0xa50 [ 284.323267][T13826] ? process_scheduled_works+0x976/0x1840 [ 284.328980][T13826] process_scheduled_works+0xa66/0x1840 [ 284.334531][T13826] ? __pfx_process_scheduled_works+0x10/0x10 [ 284.340510][T13826] ? assign_work+0x364/0x3d0 [ 284.345112][T13826] worker_thread+0x870/0xd30 [ 284.349703][T13826] ? __kthread_parkme+0x169/0x1d0 [ 284.354722][T13826] ? __pfx_worker_thread+0x10/0x10 [ 284.359823][T13826] kthread+0x2f0/0x390 [ 284.363886][T13826] ? __pfx_worker_thread+0x10/0x10 [ 284.368985][T13826] ? __pfx_kthread+0x10/0x10 [ 284.373565][T13826] ret_from_fork+0x4b/0x80 [ 284.377972][T13826] ? __pfx_kthread+0x10/0x10 [ 284.382554][T13826] ret_from_fork_asm+0x1a/0x30 [ 284.387314][T13826] [ 284.390321][T13826] [ 284.392628][T13826] Allocated by task 5831: [ 284.396939][T13826] kasan_save_track+0x3f/0x80 [ 284.401605][T13826] __kasan_kmalloc+0x98/0xb0 [ 284.406184][T13826] __kmalloc_node_noprof+0x290/0x4d0 [ 284.411460][T13826] __kvmalloc_node_noprof+0x72/0x190 [ 284.416732][T13826] alloc_netdev_mqs+0xa4/0x1080 [ 284.421571][T13826] rtnl_create_link+0x2f9/0xc20 [ 284.426406][T13826] rtnl_newlink_create+0x210/0xa40 [ 284.431507][T13826] rtnl_newlink+0x1c7e/0x2210 [ 284.436174][T13826] rtnetlink_rcv_msg+0x791/0xcf0 [ 284.441103][T13826] netlink_rcv_skb+0x1e3/0x430 [ 284.445858][T13826] netlink_unicast+0x7f6/0x990 [ 284.450611][T13826] netlink_sendmsg+0x8e4/0xcb0 [ 284.455360][T13826] __sock_sendmsg+0x221/0x270 [ 284.460031][T13826] __sys_sendto+0x363/0x4c0 [ 284.464518][T13826] __x64_sys_sendto+0xde/0x100 [ 284.469270][T13826] do_syscall_64+0xf3/0x230 [ 284.473763][T13826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.479657][T13826] [ 284.481976][T13826] Freed by task 15073: [ 284.486026][T13826] kasan_save_track+0x3f/0x80 [ 284.490697][T13826] kasan_save_free_info+0x40/0x50 [ 284.495720][T13826] __kasan_slab_free+0x59/0x70 [ 284.500480][T13826] kfree+0x196/0x430 [ 284.504367][T13826] device_release+0x99/0x1c0 [ 284.508947][T13826] kobject_put+0x22f/0x480 [ 284.513357][T13826] netdev_run_todo+0xe79/0x1000 [ 284.518199][T13826] rtnl_dellink+0x760/0x8d0 [ 284.522690][T13826] rtnetlink_rcv_msg+0x791/0xcf0 [ 284.527618][T13826] netlink_rcv_skb+0x1e3/0x430 [ 284.532385][T13826] netlink_unicast+0x7f6/0x990 [ 284.537147][T13826] netlink_sendmsg+0x8e4/0xcb0 [ 284.541899][T13826] __sock_sendmsg+0x221/0x270 [ 284.546565][T13826] ____sys_sendmsg+0x52a/0x7e0 [ 284.551324][T13826] __sys_sendmsg+0x269/0x350 [ 284.555992][T13826] do_syscall_64+0xf3/0x230 [ 284.560489][T13826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.566375][T13826] [ 284.568699][T13826] The buggy address belongs to the object at ffff88805cbe8000 [ 284.568699][T13826] which belongs to the cache kmalloc-cg-4k of size 4096 [ 284.582999][T13826] The buggy address is located 744 bytes inside of [ 284.582999][T13826] freed 4096-byte region [ffff88805cbe8000, ffff88805cbe9000) [ 284.596915][T13826] [ 284.599230][T13826] The buggy address belongs to the physical page: [ 284.605637][T13826] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5cbe8 [ 284.614407][T13826] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 284.622902][T13826] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 284.630446][T13826] page_type: f5(slab) [ 284.634886][T13826] raw: 00fff00000000040 ffff88801ac4f500 dead000000000122 0000000000000000 [ 284.643456][T13826] raw: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000 [ 284.652031][T13826] head: 00fff00000000040 ffff88801ac4f500 dead000000000122 0000000000000000 [ 284.660691][T13826] head: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000 [ 284.669371][T13826] head: 00fff00000000003 ffffea000172fa01 ffffffffffffffff 0000000000000000 [ 284.678040][T13826] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 284.686888][T13826] page dumped because: kasan: bad access detected [ 284.693305][T13826] page_owner tracks the page as allocated [ 284.699009][T13826] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5831, tgid 5831 (syz-executor), ts 62058625187, free_ts 16363146276 [ 284.722108][T13826] post_alloc_hook+0x1f3/0x230 [ 284.726877][T13826] get_page_from_freelist+0x365c/0x37a0 [ 284.732420][T13826] __alloc_pages_noprof+0x292/0x710 [ 284.737615][T13826] alloc_pages_mpol_noprof+0x3e8/0x680 [ 284.743080][T13826] alloc_slab_page+0x6a/0x110 [ 284.747745][T13826] allocate_slab+0x5a/0x2b0 [ 284.752236][T13826] ___slab_alloc+0xc27/0x14a0 [ 284.756908][T13826] __slab_alloc+0x58/0xa0 [ 284.761231][T13826] __kmalloc_node_noprof+0x2ee/0x4d0 [ 284.766511][T13826] __kvmalloc_node_noprof+0x72/0x190 [ 284.771789][T13826] alloc_netdev_mqs+0xa4/0x1080 [ 284.776632][T13826] rtnl_create_link+0x2f9/0xc20 [ 284.781483][T13826] rtnl_newlink_create+0x210/0xa40 [ 284.786592][T13826] rtnl_newlink+0x1c7e/0x2210 [ 284.791288][T13826] rtnetlink_rcv_msg+0x791/0xcf0 [ 284.796232][T13826] netlink_rcv_skb+0x1e3/0x430 [ 284.800993][T13826] page last free pid 1 tgid 1 stack trace: [ 284.806788][T13826] free_unref_page+0xd3f/0x1010 [ 284.811642][T13826] free_contig_range+0x14c/0x430 [ 284.816664][T13826] destroy_args+0x92/0x910 [ 284.821074][T13826] debug_vm_pgtable+0x4be/0x550 [ 284.825926][T13826] do_one_initcall+0x248/0x870 [ 284.830702][T13826] do_initcall_level+0x157/0x210 [ 284.835647][T13826] do_initcalls+0x3f/0x80 [ 284.839973][T13826] kernel_init_freeable+0x435/0x5d0 [ 284.845164][T13826] kernel_init+0x1d/0x2b0 [ 284.849485][T13826] ret_from_fork+0x4b/0x80 [ 284.853892][T13826] ret_from_fork_asm+0x1a/0x30 [ 284.858647][T13826] [ 284.860958][T13826] Memory state around the buggy address: [ 284.866576][T13826] ffff88805cbe8180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 284.874632][T13826] ffff88805cbe8200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 284.882680][T13826] >ffff88805cbe8280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 284.890735][T13826] ^ [ 284.898206][T13826] ffff88805cbe8300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 284.906255][T13826] ffff88805cbe8380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 284.914311][T13826] ================================================================== [ 284.924361][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 285.097085][T13826] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 285.104327][T13826] CPU: 0 UID: 0 PID: 13826 Comm: kworker/0:11 Not tainted 6.13.0-rc3-syzkaller-00167-gb3a69c559899 #0 [ 285.115274][T13826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 285.125350][T13826] Workqueue: events smc_ib_port_event_work [ 285.131192][T13826] Call Trace: [ 285.134490][T13826] [ 285.137435][T13826] dump_stack_lvl+0x241/0x360 [ 285.142131][T13826] ? __pfx_dump_stack_lvl+0x10/0x10 [ 285.147344][T13826] ? __pfx__printk+0x10/0x10 [ 285.151949][T13826] ? preempt_schedule+0xe1/0xf0 [ 285.156817][T13826] ? vscnprintf+0x5d/0x90 [ 285.161164][T13826] panic+0x349/0x880 [ 285.165080][T13826] ? check_panic_on_warn+0x21/0xb0 [ 285.170203][T13826] ? __pfx_panic+0x10/0x10 [ 285.174605][T13826] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 285.180570][T13826] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 285.186891][T13826] ? print_report+0x502/0x550 [ 285.191569][T13826] check_panic_on_warn+0x86/0xb0 [ 285.196508][T13826] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 285.202480][T13826] end_report+0x77/0x160 [ 285.206717][T13826] kasan_report+0x154/0x180 [ 285.211220][T13826] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 285.217196][T13826] __ethtool_get_link_ksettings+0x6e/0x190 [ 285.222997][T13826] ib_get_eth_speed+0x160/0x800 [ 285.227842][T13826] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 285.233207][T13826] ? rxe_query_port+0x4f/0x260 [ 285.237970][T13826] rxe_query_port+0x76/0x260 [ 285.242556][T13826] ib_query_port+0x166/0x7d0 [ 285.247148][T13826] smc_ib_port_event_work+0x14e/0xa50 [ 285.252517][T13826] ? process_scheduled_works+0x976/0x1840 [ 285.258323][T13826] process_scheduled_works+0xa66/0x1840 [ 285.263870][T13826] ? __pfx_process_scheduled_works+0x10/0x10 [ 285.269845][T13826] ? assign_work+0x364/0x3d0 [ 285.274428][T13826] worker_thread+0x870/0xd30 [ 285.279015][T13826] ? __kthread_parkme+0x169/0x1d0 [ 285.284030][T13826] ? __pfx_worker_thread+0x10/0x10 [ 285.289137][T13826] kthread+0x2f0/0x390 [ 285.293200][T13826] ? __pfx_worker_thread+0x10/0x10 [ 285.298305][T13826] ? __pfx_kthread+0x10/0x10 [ 285.302889][T13826] ret_from_fork+0x4b/0x80 [ 285.307296][T13826] ? __pfx_kthread+0x10/0x10 [ 285.311880][T13826] ret_from_fork_asm+0x1a/0x30 [ 285.316637][T13826] [ 285.319777][T13826] Kernel Offset: disabled [ 285.324089][T13826] Rebooting in 86400 seconds..