last executing test programs: 1m19.358930616s ago: executing program 3 (id=17): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) (async) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x9, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0xc0) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async) shutdown(r0, 0x1) 1m2.387911377s ago: executing program 3 (id=17): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) (async) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x9, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0xc0) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async) shutdown(r0, 0x1) 49.314120473s ago: executing program 3 (id=17): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) (async) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x9, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0xc0) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async) shutdown(r0, 0x1) 39.471430494s ago: executing program 3 (id=17): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) (async) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x9, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0xc0) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async) shutdown(r0, 0x1) 22.17370769s ago: executing program 3 (id=17): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) (async) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x9, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0xc0) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async) shutdown(r0, 0x1) 7.379958525s ago: executing program 3 (id=17): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) (async) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x9, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0xc0) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async) shutdown(r0, 0x1) 2.964319469s ago: executing program 0 (id=951): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) listen(r0, 0x8) accept$ax25(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10) r2 = socket$kcm(0x21, 0x2, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x20) pipe(&(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0xff, 0x0, r3, 0x80000000, '\x00', 0x0, r4, 0x2, 0x5, 0x3, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1.936846451s ago: executing program 0 (id=959): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%+9llu \x00'}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x4, 0x4, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001580)={'gretap0\x00', &(0x7f00000014c0)={'ip_vti0\x00', 0x0, 0x700, 0x700, 0x4, 0x200, {{0x1b, 0x4, 0x1, 0x34, 0x6c, 0x68, 0x0, 0xb, 0x2f, 0x0, @rand_addr=0x64010100, @private=0xa010101, {[@lsrr={0x83, 0x13, 0xe2, [@multicast2, @multicast1, @loopback, @multicast1]}, @generic={0x7, 0x8, "fe219c539dad"}, @rr={0x7, 0x1f, 0x1d, [@loopback, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0x36}, @multicast2, @multicast1]}, @timestamp_addr={0x44, 0x1c, 0x15, 0x1, 0x2, [{@broadcast, 0x6}, {@remote, 0xde2f}, {@loopback, 0x5}]}]}}}}}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000016c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000001640), &(0x7f0000001680)='%pI4 \x00'}, 0x20) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001700)={0x0, 0xa5f}, 0xc) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001740)={0x1b, 0x0, 0x0, 0xfffffff7, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0xe, 0x1b, &(0x7f00000003c0)=@raw=[@map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x7}, @map_fd={0x18, 0xa, 0x1, 0x0, r2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ldst={0x2, 0x0, 0x17126b7b524cf4c3, 0x2, 0x6, 0xc, 0xffffffffffffffff}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @alu={0x7, 0x0, 0x7, 0x0, 0x6, 0xfffffffffffffff4, 0xffffffffffffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}], &(0x7f0000000300)='syzkaller\x00', 0xe465, 0x1000, &(0x7f00000004c0)=""/4096, 0x40f00, 0x26, '\x00', r5, @sk_skb=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000015c0)={0x3, 0xf, 0xcf, 0x5}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f00000017c0)=[0x1, r6, r7, r8, r9, 0xffffffffffffffff, 0xffffffffffffffff, r10], &(0x7f0000001800)=[{0x2, 0x3, 0x9, 0xb}, {0x3, 0x5, 0x3, 0x3}], 0x10, 0x3, @void, @value}, 0x94) close(r0) 1.936303688s ago: executing program 1 (id=960): syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@broadcast, @random="000400", @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x1, 0x0, @rand_addr=0x64010101, {0x5, 0x4, 0x1, 0x32, 0x95, 0x66, 0x8, 0xfb, 0x21, 0x3, @broadcast, @empty}, "3b1222ab89563240"}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0xb5e, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8971, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, &(0x7f0000000240)='g', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x6, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='veno\x00', 0x5) sendmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="d42073", 0x3}], 0x1}}], 0x1, 0x894) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000080), &(0x7f0000000140)=r4}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), r5) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x3c, r6, 0x5, 0x70bd2d, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x1c, 0x4, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6558}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x8040) socket(0xa, 0x1, 0x5) 1.718496255s ago: executing program 2 (id=962): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f0000002880)) recvmmsg(r0, &(0x7f0000002740)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x12000, 0x0) 1.596001909s ago: executing program 0 (id=963): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0x801c581f, 0x30000002000005c) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e00000004000280080040"], 0x3c}}, 0x0) (async, rerun: 64) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001d40), 0xffffffffffffffff) (rerun: 64) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001d80)=ANY=[@ANYBLOB="14007077", @ANYRES16=r3, @ANYBLOB="0100000000000000000011000000"], 0x14}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) 1.595287361s ago: executing program 4 (id=964): socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1e000000010000000200000043c00000a0040100", @ANYRES32, @ANYBLOB="04000000000040000003000040e6ffffff000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000004000000020000000700"/24, @ANYRES32, @ANYBLOB], 0x50) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x7, 0x1, 0x62, @rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x7, 0xa, 0xff}}) r2 = socket$kcm(0x29, 0x5, 0x0) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0xf3e, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000b80)={0x114, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r5}, @generic="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"]}, 0x114}], 0x1}, 0x84) sendmsg$nl_generic(r4, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000840)=ANY=[@ANYBLOB="200100002f00000425bd7000fbdbdf250000000008009500", @ANYRES32=r5, @ANYBLOB="ff000d804037109e6cfe8b8eb63baaf26bb7878aac5dd3d64b0eae47fff714d4b8773930c62c8e6f428dd285fc421ba456e8d619fc46f370ae6d7b1fe53c86fd0ffe8f56ca3e733947f7d85e5875499b7977f3b8ad886f77a08725d228205189473dfb96f50dfb18c258b5bc191e2b310e3199422fe4ee7f195e477f0b3a9cabfef5e552c6680032998df465a1ff46d563140266d2ac00680b4bc7fbdeb0fb239ff14825f3db1cb0b6cd5ece2a02f7d32078925fd10be5db9ad6701b83b200682c2904ed40ee5504dfb60c90a04b7bc990cb8a2bc6cc18aebd69e617e142e5d83ad34aee387c0312a59ea27b266963973715e12a1b694e1d93d9b15f80a3b6000400320047fdc40b8494f2329acb4e417ea6832c9a57763f096d1025bccf736d8be0e0d9"], 0x120}, 0x1, 0x0, 0x0, 0x4c800}, 0x80) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, &(0x7f0000000640)={0x5}, 0x1) (async) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, &(0x7f00000002c0)={0x3}, 0x1) (async) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, &(0x7f0000000400)={0x4}, 0x1) (async) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB='\t\x00'/20, @ANYRES32=r1, @ANYRES32=r7, @ANYBLOB="00000000000000000500"/28], 0x50) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e21, @rand_addr=0x640100ff}}, 0x2, 0x2, 0xfffffffb, 0x1, 0x1, 0x5, 0xf9}, &(0x7f00000001c0)=0x9c) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000600)={r8, 0xde, "84c5575ee2953b59a2adf5e487cb4ecae8d63c3b217a90f82046717f2b7caacba95bbfa2529fb5dbccc2f495768dd8ec1af23c77101474ce3305df827afff5b671aa13c77ee41d616467e2db144516b29ff50c98594e4c0968661beb2758236ad529abb087886439e326416892d25fe904593d0d3c7d75d24eec1816ab8df50c48405fcf8bf81478cf246f781fee0736f2ffde4fcd4e846e4065d9b82290e74bd7e90a0f4c8514fd1c4e16af64fe78209ba4379f12077040b2f29202340f0e773e2932d0e709765ca5d5fce158d704e236280df22a9602a7ed4cbccc4e0f"}, &(0x7f00000003c0)=0xffffffffffffff79) (async) socket(0x10, 0x803, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0) (async) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="43b1d8", @ANYRES32=r11, @ANYBLOB="000000000000ae005c00128011000100627269646765f6736c617665000000004400058005000500000000000500200001cf29b6fb0008a1000000000600", @ANYRES8=r9], 0x7c}}, 0x0) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r13, 0x8946, &(0x7f0000000180)={'wlan0\x00', &(0x7f0000000140)=@ethtool_sset_info={0x37, 0x7, 0x7}}) 1.593896676s ago: executing program 1 (id=965): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'geneve0\x00', &(0x7f0000000000)=@ethtool_gstrings={0x14}}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r2) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x20, r3, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004080}, 0x24044884) setsockopt$inet6_int(r0, 0x29, 0x19, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @broadcast}], 0x10) socket$netlink(0x10, 0x3, 0x15) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000100)="bf8c290a5995aad622ebc60e5d7f11fc3553feb4053a769dd7028c7c1212354c42ed64bf1d553d868b21d86b2e262e43736419d362d366baefd847e190d1fd56007bc6108d1346074029ab1eff3f63bc53c14d121f79cac496f7b56cf86ccf610b5b324a7cd2f78c62c0763bd559429911718f28e4700487fd8c8d9345a2a231f341aec849ec842bf9abca30acc905c90d7d21a9d7331a2185"}, {&(0x7f00000001c0)="bc473d48d9f500743cf02d3ab6adde91661c1dd0967d53d1f0284b66d51e4d13c5ca1d2f56eb750597f52a1e4c8a91ccff4b3fba"}, {&(0x7f0000000240)="45cc8d9592b2d97f4a97b3f17c02d4c5ef0000000400000000000000de27424b1142983e02299e6cb663f49d9a0a363bea4186ef31af3adbb6860436acc6491e65886e18d5f9bcac000000000000002d"}, {&(0x7f00000002c0)="7e5f8949b911af8938df24e64b3120d9d80dc5b5dd95956b3583b6fa4c00d5e373308bc7f796f8e246c0fbd395257033f543c0024ca7dad5f35a5bf92ae759e01e52e0250e"}, {&(0x7f0000000340)="28d94b8df5b4967b905d9b874dc36d0b642fc22b46e98db5d592ccc9ed90c41b8ebc3281de787b5e6d59567becff91fbb15d86a9fd12042ddf299c4da19fa4c9d3c9b301b45fb74b1a950484ffe57c91c727d5fdab596e21bfcd0da165132582bb9a688f697f598fec52775c90ccfe02f2984c850a03ec1d92458b07416f1d0926c7ddc8f6b9777d3d7cf3d53f3469f96a577c2af1496b7c5b03d4a9dda20eea5cafd1a4ad0c45aea085f2ad0c97a2bd934658b6e5800668"}, {&(0x7f0000000400)="76b52a746db22997a7beba9fb7e9281b67f3793066e367f633fd0a12589c89b0bb355e4a62e833bad5d33bdb0c5fb9a4b1972979282fe4f45c009c55ac23cac6"}], 0x1) 1.509964353s ago: executing program 2 (id=966): r0 = socket$netlink(0x10, 0x3, 0x9) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000001d80)={0x0, 0x0, 0x0}, 0x400c885) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x3ec}, [], {0x14, 0x3e8}}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 1.451458059s ago: executing program 2 (id=967): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x2, 0x0, 0x0, 0x11}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r5, 0x10c, 0x5, &(0x7f0000000000), 0x4) getpeername(r0, 0x0, &(0x7f00000000c0)) 1.388767995s ago: executing program 4 (id=968): setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000000)={@local, @broadcast, 0xffffffffffffffff, "c675befd30e5461176e6bf11230febf30d56ee219b89147332cab002fb3d0b40", 0x7, 0x1, 0x47b0, 0x10001}, 0x3c) ioctl$PPPIOCSDEBUG(0xffffffffffffffff, 0x40047440, 0xfffffffffffffffd) (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$ppp(r0, &(0x7f0000000080)="f548470e95f4b7ec", 0x8) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f00000000c0)={{}, "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"}) (async) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f00000010c0)={0x1, 0x3}) (async) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000001100)={@in={{0x2, 0x4e23, @rand_addr=0x64010102}}, 0x0, 0x0, 0x3e, 0x0, "6497424e3a9656016d545b4b19afcd8fb59cba874b163d9d94742df0c3035dcbeadbb3d01ea48d2816d033b77042d9c89964fa77e0e067433429f376a76e2bda6ac34b0db0ffd358acd5968955b34e27"}, 0xd8) (async) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000001200)) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000001240)={r0, 0x5, 0x1, 0x2}) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000001280)={@dev={0xac, 0x14, 0x14, 0x1f}, @local, 0xffffffffffffffff, "46868e5f868263729f6a0ee0cb6516dac510a41ed8d6a614ac06a004905ea5e0", 0x0, 0x2, 0x7fff, 0x8}, 0x3c) write$ppp(0xffffffffffffffff, &(0x7f00000012c0)="28ff69e05f3592714957c93f5ec9c6923519a00e8509bd88e61d1e4768bac094a7137b6734eee35cd532184d5a19e7f7e23df95afb7ddfc888c8f44ee67e30d333d83f77412e763cb1d659f4d03dcac6ca4b6891a21f8b926f8d4d4e3a6149591e9dd8e1096d1ea05e86b541d290ba7edaf6e546535bbc782b70a666232ff0cb63b1c5fef51018cd04188a463fc4bcffa61993625199d1c6384780e9e33ef7f5cf8f8a671c916c5fc8", 0xa9) write$ppp(r0, &(0x7f0000001380)="f77c454617c64022d2d0b2d951aa074402b69e72b45bce06b643dc345127311484", 0x21) (async) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000013c0)={0x9}, 0x4) (async) r2 = accept4$alg(r1, 0x0, 0x0, 0x80000) (async) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f0000001400)) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001440), 0xa00, 0x0) write$ppp(r3, &(0x7f0000001480)="8f036e14d960bee1e682cec011293c278f69c988cdc122699a9d18bc9f73a5e0d6f102858c150fb14efbedfb1f7c33165bc48c4ce8fb40fa87f7eb5e188045056ed4e42c34bde197daf6f50f63564b7f267ddccf8ea22c25420f858a603b40cd38e4a1efc5c36f67994fac375630ffcd", 0x70) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001500), 0x881, 0x0) write$ppp(r4, &(0x7f0000001540)="10d5ae74a948ff0b201cdd75e4145e112fbbf92c5b7442d0618b0455f75e1168c60ecafbc016a9418fa7208a1604dbccc8517670dd2161bec10cceda0eefb2cadb7ce463ac96491ad77a1581e281aba1fba6539146a98c1490737c775df297a7a16b97b01ea94894b7c936e906cf8b69d43ccd7e89b855127a90d1399d579bbfdd3dbb00c4cdd01586d18779cbccc1b2e8e49bd639e146673f6f9d", 0x9b) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000016c0)={'ip6gre0\x00', &(0x7f0000001640)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0x20, 0xef, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x22}, 0x20, 0x80, 0xbe9, 0x8}}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000001700)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000001800)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000017c0)={&(0x7f0000001740)={0x5c, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0xe81}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x84}, 0x4004) (async) ioctl$PPPIOCGIDLE32(r3, 0x8008743f, &(0x7f0000001840)) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000001880)={0x0, 0xb7d}, &(0x7f00000018c0)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r7, 0x84, 0x79, &(0x7f0000001900)={r8, 0x86e4, 0xff}, 0x8) socket$igmp6(0xa, 0x3, 0x2) ioctl$PPPIOCDISCONN(r3, 0x7439) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), r1) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x1c, r9, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) 1.383814531s ago: executing program 2 (id=969): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000008900000008000300", @ANYRES32, @ANYBLOB="180006"], 0x34}}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x2}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x4}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x5c}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x70}}, 0x8000) 1.273506788s ago: executing program 2 (id=970): getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@struct={0x1, 0x2, 0x0, 0x4, 0x1, 0x4, [{0x0, 0x4, 0x9}, {0xc, 0x5, 0x7}]}]}, {0x0, [0x61, 0x2e, 0x5f]}}, &(0x7f0000000f40)=""/4089, 0x41, 0xff9, 0x1, 0x0, 0x0, @void, @value}, 0x20) ioctl$TUNSETIFINDEX(r0, 0x400454da, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r2, 0x11, 0xa, 0x0, &(0x7f0000000100)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x80, 0x700, 0x3ff, 0x7f, {{0x30, 0x4, 0x2, 0x5, 0xc0, 0x67, 0x0, 0x7, 0x2f, 0x0, @empty, @multicast1, {[@timestamp={0x44, 0x2c, 0xf2, 0x0, 0x1, [0xf8, 0x6, 0x4, 0x0, 0xffffffff, 0x1, 0x3ff, 0x100, 0x100, 0x7]}, @timestamp={0x44, 0x24, 0x69, 0x0, 0x2, [0x6, 0x7, 0x0, 0x7, 0xa2d, 0x5, 0x7fff, 0xffff]}, @ra={0x94, 0x4}, @rr={0x7, 0x2b, 0x17, [@remote, @multicast1, @dev={0xac, 0x14, 0x14, 0x3d}, @loopback, @rand_addr=0x64010101, @multicast2, @local, @broadcast, @private=0xa010100, @local]}, @cipso={0x86, 0x21, 0x3, [{0x5, 0x8, "ce42dec1e851"}, {0x5, 0x8, "eb1b9a85cf79"}, {0x1, 0xb, "04e6d0fa33ca22345b"}]}, @generic={0x7, 0xc, "88963a073de3603a6c74"}]}}}}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x6) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000006c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 1.225188728s ago: executing program 0 (id=971): r0 = socket(0x1e, 0x4, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000340)={'veth0_vlan\x00', 0x500}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x4c000000, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000400142603600e120800060000000401a800080008000a400400000004000461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x4c000000, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000400142603600e120800060000000401a800080008000a400400000004000461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) 1.22399208s ago: executing program 1 (id=972): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5f8, 0x2a0, 0x528, 0x1d0, 0x1d0, 0x0, 0x528, 0x528, 0x528, 0x528, 0x528, 0x6, 0x0, {[{{@uncond, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x7400}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x658) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0xfffffead, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffdb2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r4}, 0x10) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x1, 0x0, 0x2, {0x0, 0x0, 0x0, r1, 0x18f40, 0x22108}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x2c0000}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}]}, 0x48}}, 0x0) 1.181014192s ago: executing program 4 (id=973): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b000100627269646765"], 0x6c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x5c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x3c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x8}, {0x8, 0x0, 0x4}, {0x8, 0x0, 0x4}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x9}, {0x8, 0x0, 0x5}, {0x8, 0x0, 0xd}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x6}, 0x800) 1.007041088s ago: executing program 0 (id=974): socket$inet_udplite(0x2, 0x2, 0x88) (async) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) ioctl$SIOCAX25CTLCON(0xffffffffffffffff, 0x89e8, &(0x7f00000002c0)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, 0x2, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000013002f0a25bd70000000000007006800", @ANYRES32=r1, @ANYBLOB="000900001020060024001a8009000100766c616e0000000004"], 0x44}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000013002f0a25bd70000000000007006800", @ANYRES32=r1, @ANYBLOB="000900001020060024001a8009000100766c616e0000000004"], 0x44}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r8, {0x10, 0xffe0}, {}, {0x8, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x2c, r3, 0x1, 0x0, 0xfffffffe, {{0x2}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]]}, 0x2c}}, 0x484) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket(0x80000000000000a, 0x2, 0x0) (async) r11 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$MRT_DONE(r11, 0x0, 0xc9, 0x0, 0x0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc01000019000100000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000a00000000020000549dbb61fcccb13d60ce7033b15a5c3a69b382c5cc98c5a0825810e23b711c67a4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000001000000a80c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044010500ac1414aa000000000000000000000000000004d53c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb000000003c00000000000000fe8000000000000000000000000000000000000000000000000800000000000001000000ac1414bb000000000000000000000000000000006c00000000000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000aa00000000330000000000000000000000000000000000ffffac1414bb0300000000008100000000000000000000000000ff010000000000000000000000000001000000006d0000000a000000fc0100000000000000000000000000000000000004000200"/436], 0x1fc}}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x22eb}, @TCA_MPLS_TTL={0x5, 0x7, 0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) (async) sendmsg$nl_route_sched(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x22eb}, @TCA_MPLS_TTL={0x5, 0x7, 0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r11, 0x10e, 0xc, &(0x7f0000000040)=0x81, 0x4) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(r11, 0x10e, 0xc, &(0x7f0000000040)=0x81, 0x4) sendmsg$nl_route(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r13], 0x24}}, 0x0) (async) sendmsg$nl_route(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r13], 0x24}}, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r10, 0x9362, 0x0) (async) ioctl$AUTOFS_IOC_CATATONIC(r10, 0x9362, 0x0) 913.060369ms ago: executing program 2 (id=975): socket$nl_rdma(0x10, 0x3, 0x14) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f000000b4c0)={0x0, 0x0, &(0x7f000000b480)={&(0x7f0000000000)=ANY=[@ANYBLOB="60000000031401002abd7000fddbdf250900020073797a32000000000800410072786500140033006272696467655f736c6176655f3100000900020073797a3000000000080041007278650014003300626f6e645f736c6176655f31"], 0x60}, 0x1, 0x0, 0x0, 0x880}, 0x20044090) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x409c884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @local}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xf}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xf}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001ac0)={0x1, &(0x7f0000000a00)=[{0x1, 0x10, 0x4, 0x4}]}, 0x10) sendto$inet6(r1, &(0x7f0000000780)='\r\n', 0x2, 0x6d91fb6102d8d9cc, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000a40)={@multicast, @remote, @val={@val={0x88a8, 0x7, 0x1, 0x1}, {0x8100, 0x5, 0x1, 0x4}}, {@canfd={0xd, {{0x0, 0x1, 0x1, 0x1}, 0x12, 0x1, 0x0, 0x0, "ba7a368c749ecc03a4fba0e89a24fdd23896ba297005109e181994823498820d30cfcaf4ea25dd3c961e5030dd33ce410f17d0033183dc5fb475cd339b7db1d4"}}}}, 0x0) (async) syz_emit_ethernet(0x5e, &(0x7f0000000a40)={@multicast, @remote, @val={@val={0x88a8, 0x7, 0x1, 0x1}, {0x8100, 0x5, 0x1, 0x4}}, {@canfd={0xd, {{0x0, 0x1, 0x1, 0x1}, 0x12, 0x1, 0x0, 0x0, "ba7a368c749ecc03a4fba0e89a24fdd23896ba297005109e181994823498820d30cfcaf4ea25dd3c961e5030dd33ce410f17d0033183dc5fb475cd339b7db1d4"}}}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) recvmsg(r2, &(0x7f00000009c0)={&(0x7f0000000080)=@isdn, 0x80, &(0x7f0000000840)=[{&(0x7f0000000280)=""/253, 0xfd}, {&(0x7f0000000380)=""/208, 0xd0}, {&(0x7f0000000480)=""/200, 0xc8}, {&(0x7f0000000100)=""/42, 0x2a}, {&(0x7f0000000580)=""/161, 0xa1}, {&(0x7f0000000640)=""/115, 0x73}, {&(0x7f00000006c0)=""/89, 0x59}, {&(0x7f0000000200)=""/62, 0x3e}, {&(0x7f00000007c0)=""/112, 0x70}, {&(0x7f0000000740)=""/61, 0x3d}], 0xa, &(0x7f0000000900)=""/132, 0x84}, 0x0) (async) recvmsg(r2, &(0x7f00000009c0)={&(0x7f0000000080)=@isdn, 0x80, &(0x7f0000000840)=[{&(0x7f0000000280)=""/253, 0xfd}, {&(0x7f0000000380)=""/208, 0xd0}, {&(0x7f0000000480)=""/200, 0xc8}, {&(0x7f0000000100)=""/42, 0x2a}, {&(0x7f0000000580)=""/161, 0xa1}, {&(0x7f0000000640)=""/115, 0x73}, {&(0x7f00000006c0)=""/89, 0x59}, {&(0x7f0000000200)=""/62, 0x3e}, {&(0x7f00000007c0)=""/112, 0x70}, {&(0x7f0000000740)=""/61, 0x3d}], 0xa, &(0x7f0000000900)=""/132, 0x84}, 0x0) ioctl(r0, 0x2, &(0x7f0000000ac0)="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") sendto$inet6(r1, &(0x7f0000000040)="492f00010000f6d3471c8f000000955238602bf5e33aab8723acb16e32059813e27f958b1c5a760b9627fd677960e5001714480c133a65d1eb0e00000200", 0xfffffffffffffc88, 0x0, 0x0, 0x0) 910.546028ms ago: executing program 4 (id=976): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x408, 0x2c8, 0x2c8, 0xffffffff, 0x0, 0x98, 0x370, 0x370, 0xffffffff, 0x370, 0x370, 0x5, &(0x7f0000000040), {[{{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x5}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, 0xffffff00, 0xff000000, 'erspan0\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x0, 0x3, 0x4}, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@addrtype={{0x30}, {0x10a0, 0x41}}, @common=@ah={{0x30}, {[0x7fff, 0x7]}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0xe, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e20, @gre_key=0x2}}}}, {{@ip={@multicast1, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'macsec0\x00', {0xff}, {0xff}, 0x11, 0x0, 0x10}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0x3, 0x9], 0x1}}, @common=@ttl={{0x28}, {0x1, 0x7f}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="3318dcb75077", 0x6, 0x5, [0x13, 0x0, 0x10, 0x2b, 0x38, 0x13, 0x0, 0x22, 0x3e, 0x2a, 0x7, 0x29, 0x36, 0x27, 0x1e, 0x11], 0x2, 0x2}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x6, @multicast1, @private=0xa010101, @icmp_id=0x65, @gre_key=0xfffa}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) splice(r3, &(0x7f0000000040)=0xfffffffffffffffc, r2, 0x0, 0x800000000ff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@cgroup=r0, 0xffffffffffffffff, 0x16, 0x0, 0x0, @void, @value}, 0x20) 788.59383ms ago: executing program 1 (id=977): r0 = socket$inet(0x2, 0x2000000000003, 0x2) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xff, 0x0, @vifc_lcl_ifindex=r6, @empty}, 0x10) syz_emit_ethernet(0xb7, &(0x7f0000000100)={@empty, @local, @void, {@llc={0x4, {@snap={0xaa, 0x1, "ee", "b126d5", 0x883e, "8ddfcddda395cee512b24296a801f3250e519ada6ccce48fc2f618508b57161d5706f9d6ce0fa1f6cc502ec73072d1f22ce689d86e3aca7c71f38631eb7188810b795a970839eee373de2121e6e3133ba7344fff622e7003265d7358bf208c32b1d5e919f2b2bb1b7a921bd325f07b0e174a5bb73e10a9a64a46b603f583ef742c478b4d766f6ce2f545bbdaa11445e4f821337651c954635edb78aedf035b6cf8"}}}}}, &(0x7f0000000080)={0x0, 0x1, [0x566, 0xe59, 0x208, 0x270]}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000090400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001"], 0x5c}}, 0x0) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0x8d2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) sendmsg$nl_xfrm(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000600)=@flushsa={0x14, 0x1c, 0x1, 0x70bd28, 0x25dfdbfb, {0x33}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) 720.399828ms ago: executing program 4 (id=978): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) (async) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, &(0x7f0000000440)={0x0, 0x7, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB="05f1", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYRESDEC=r0], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 600.69263ms ago: executing program 0 (id=979): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002b000b00faff00000000000008040001000c000180060000008848000000000000000000"], 0x28}}, 0x8000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040), 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcc6) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000002c0)={0x0, 0x8, 0x16, 0x1}) ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f00000006c0)={r6, 0xe3e, 0x0, [0x6, 0x0, 0xc16, 0x5, 0x6], [0x1, 0x9, 0x3, 0x200, 0x4, 0x8, 0x7, 0x8, 0x100000001, 0xf2, 0x40, 0x2, 0x8, 0x7, 0x3, 0xf93d, 0x1, 0x9, 0x1, 0xaba, 0x7, 0x3, 0x8000000000000000, 0x5597, 0xc5b0, 0x0, 0x4, 0x100, 0xff, 0x4, 0xf800000000000000, 0x4, 0x6, 0x0, 0x400, 0x0, 0x32d, 0x3, 0x6, 0xb, 0xffff, 0x2, 0xffffffffffffffc0, 0x100, 0x1bce, 0x8000000000000000, 0x9, 0xa, 0x0, 0xfff, 0x8, 0x4, 0x0, 0x7, 0x6, 0x839d, 0x2b, 0x7b, 0x1947, 0x40, 0x7, 0x3, 0x6, 0x9, 0x69, 0x2, 0x8, 0x0, 0x2, 0x1, 0xa975, 0xe, 0x800, 0x8, 0x3, 0xffffffffffffffff, 0x100, 0x6, 0x5, 0x1, 0x0, 0x2, 0x32c22cec, 0x5, 0x9cd7, 0x8, 0x3, 0x2, 0x7, 0x4ef, 0x4, 0x80, 0x965, 0x800, 0x2, 0x0, 0x32, 0x62a7, 0x1, 0xea, 0xc, 0xc, 0x1, 0x6, 0x7, 0x7, 0x81, 0x7, 0x60be, 0x7, 0x10, 0x0, 0x222, 0x1, 0x0, 0xc00, 0x3, 0x8, 0xffffffffffffffff, 0xaa, 0x8]}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000080)={@val={0x0, 0x9}, @void, @eth={@empty, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0xe4, 0x0, 0x1, 0x32, 0x0, @empty, @multicast1}}}}}}, 0x26) sendmsg$802154_raw(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)="88d8ce92d5ad3dd44a5bb374edbeca0340d4e4a988e635195bd364", 0x1b}, 0x1, 0x0, 0x0, 0x20000040}, 0x4c090) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002b000b00faff00000000000008040001000c000180060000008848000000000000000000"], 0x28}}, 0x8000) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040), 0x0) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)) (async) sendto$packet(r3, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcc6) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000002c0)={0x0, 0x8, 0x16, 0x1}) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f00000006c0)={r6, 0xe3e, 0x0, [0x6, 0x0, 0xc16, 0x5, 0x6], [0x1, 0x9, 0x3, 0x200, 0x4, 0x8, 0x7, 0x8, 0x100000001, 0xf2, 0x40, 0x2, 0x8, 0x7, 0x3, 0xf93d, 0x1, 0x9, 0x1, 0xaba, 0x7, 0x3, 0x8000000000000000, 0x5597, 0xc5b0, 0x0, 0x4, 0x100, 0xff, 0x4, 0xf800000000000000, 0x4, 0x6, 0x0, 0x400, 0x0, 0x32d, 0x3, 0x6, 0xb, 0xffff, 0x2, 0xffffffffffffffc0, 0x100, 0x1bce, 0x8000000000000000, 0x9, 0xa, 0x0, 0xfff, 0x8, 0x4, 0x0, 0x7, 0x6, 0x839d, 0x2b, 0x7b, 0x1947, 0x40, 0x7, 0x3, 0x6, 0x9, 0x69, 0x2, 0x8, 0x0, 0x2, 0x1, 0xa975, 0xe, 0x800, 0x8, 0x3, 0xffffffffffffffff, 0x100, 0x6, 0x5, 0x1, 0x0, 0x2, 0x32c22cec, 0x5, 0x9cd7, 0x8, 0x3, 0x2, 0x7, 0x4ef, 0x4, 0x80, 0x965, 0x800, 0x2, 0x0, 0x32, 0x62a7, 0x1, 0xea, 0xc, 0xc, 0x1, 0x6, 0x7, 0x7, 0x81, 0x7, 0x60be, 0x7, 0x10, 0x0, 0x222, 0x1, 0x0, 0xc00, 0x3, 0x8, 0xffffffffffffffff, 0xaa, 0x8]}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r7, &(0x7f0000000080)={@val={0x0, 0x9}, @void, @eth={@empty, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0xe4, 0x0, 0x1, 0x32, 0x0, @empty, @multicast1}}}}}}, 0x26) (async) sendmsg$802154_raw(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)="88d8ce92d5ad3dd44a5bb374edbeca0340d4e4a988e635195bd364", 0x1b}, 0x1, 0x0, 0x0, 0x20000040}, 0x4c090) (async) 578.525085ms ago: executing program 4 (id=980): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @remote}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x22044028}, 0x800) (async, rerun: 32) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (rerun: 32) 358.538649ms ago: executing program 1 (id=981): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) (async) splice(r0, 0x0, r1, &(0x7f00000002c0), 0x6, 0x0) (async) bind$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1b, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000008500000013000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x90) (async) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000300)={'sit0\x00', 0x9}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x48, r3, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x100}, @ETHTOOL_A_EEE_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x810}, 0x4080) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) 0s ago: executing program 1 (id=982): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000080)=@ethtool_dump={0x3e, 0x2, 0x5, 0x65, "0c4b3d625330797e0c40ac0064943955900dfd3e7a11244734eb90ecc179b5eba4f3e8a7e1c1e30f87f4c22032d89f23294b661525eb0cd62bea5177345cc71436e0dd49f386a8b671048efb2727230e2190fe8dde8c3bc3ccc48d624851c30465b492bad2"}}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) (async) r2 = socket$inet6(0xa, 0x3, 0x100) sendmmsg$inet6(r2, &(0x7f0000000940)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x28}}], 0x1, 0x0) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) (async, rerun: 32) write(r2, &(0x7f0000000540)="d8c42d8fc9e5f60b742587b1cfe41b902e8fb7e1c6300f66289a06986bed754fc9d3a2148a815ae8a74b8d18d82db7b52cde4bf24dedb8f5c160596b7043d5590685adb606d5584876560f5d2f831b14bf9441d131ea068d366914a76c6f06da0cdb08789f47c3d640e5f56f030346fa9a970b52adfd110edcd04019a94cff3646d789c6f04e6df8982d981fa9d77d54d43a544f5bb2ebe6ba6b171498c6c49e9620fe77c019bd89a1858e07391ae18c729c6204544085cc987b3a7ff701b4aa6e38aa9d6cf08125d2a61609e9e1201bf4f2fb214d4c80e8e0581ff29941b95c8e8c78ed", 0xe4) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xab}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async, rerun: 64) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 64) connect$inet6(r5, &(0x7f0000000500)={0xa, 0xdfff, 0x0, @loopback, 0x9}, 0x1c) (async) r6 = socket(0xa, 0x3, 0x3a) (async, rerun: 64) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (rerun: 64) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000380)='syzkaller\x00', 0x11d9279, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xc855, r7, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) (async) syz_emit_ethernet(0x6e, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) (async) ioctl$sock_netrom_SIOCDELRT(r4, 0x8916, 0x0) (async, rerun: 64) r8 = socket$igmp6(0xa, 0x3, 0x2) (rerun: 64) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) (async, rerun: 32) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000188"], 0xffe) (rerun: 32) sendmsg(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000640)}, 0x48811) (async, rerun: 32) getsockopt$inet6_mtu(r6, 0x29, 0x17, &(0x7f0000000300), &(0x7f0000000340)=0x4) (rerun: 32) kernel console output (not intermixed with test programs): : batadv_slave_0 [ 94.585252][ T5842] veth1_macvtap: entered promiscuous mode [ 94.589786][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.610822][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.636548][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.647607][ T5840] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.658693][ T5840] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.668440][ T5840] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.677233][ T5840] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.707006][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.717004][ T5850] veth0_macvtap: entered promiscuous mode [ 94.739219][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.775718][ T5961] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 94.794911][ T5850] veth1_macvtap: entered promiscuous mode [ 94.804302][ T5842] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.814656][ T5842] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.823452][ T5842] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.832275][ T5842] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.845746][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.870629][ T5841] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.880195][ T5841] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.901219][ T5841] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.909972][ T5841] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.004187][ T5965] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6'. [ 95.036955][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.118924][ T1340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.134666][ T1340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.148109][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.217876][ T5850] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.228504][ T5850] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.246005][ T5850] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.257389][ T5850] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.314032][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.331197][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.360477][ T5971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8'. [ 95.396163][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.410313][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.510697][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.522790][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.617367][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.625655][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.668453][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.687287][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.785005][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.848018][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.882344][ T1340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.898333][ T1340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.019075][ T5985] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 96.030069][ T5985] netlink: 'syz.1.2': attribute type 10 has an invalid length. [ 96.096477][ T5984] netlink: 116 bytes leftover after parsing attributes in process `syz.3.10'. [ 96.242524][ T5856] Bluetooth: hci3: command tx timeout [ 96.322161][ T5856] Bluetooth: hci2: command tx timeout [ 96.327644][ T5856] Bluetooth: hci1: command tx timeout [ 96.334223][ T5838] Bluetooth: hci0: command tx timeout [ 96.339688][ T5838] Bluetooth: hci4: command tx timeout [ 96.362499][ T5994] Zero length message leads to an empty skb [ 96.427556][ T5997] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12'. [ 96.438007][ T5997] netlink: 'syz.1.12': attribute type 1 has an invalid length. [ 96.446073][ T5997] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12'. [ 96.462262][ T5999] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 96.494510][ T5995] xt_hashlimit: size too large, truncated to 1048576 [ 96.598730][ T5995] syz.4.5: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 96.687448][ T5995] CPU: 0 UID: 0 PID: 5995 Comm: syz.4.5 Not tainted 6.16.0-rc1-syzkaller-00102-g5466491c9e33 #0 PREEMPT(full) [ 96.687478][ T5995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 96.687498][ T5995] Call Trace: [ 96.687507][ T5995] [ 96.687515][ T5995] dump_stack_lvl+0x189/0x250 [ 96.687563][ T5995] ? __pfx_dump_stack_lvl+0x10/0x10 [ 96.687594][ T5995] ? __pfx__printk+0x10/0x10 [ 96.687632][ T5995] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 96.687667][ T5995] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 96.687687][ T5995] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 96.687708][ T5995] warn_alloc+0x214/0x310 [ 96.687734][ T5995] ? __pfx_warn_alloc+0x10/0x10 [ 96.687761][ T5995] ? __get_vm_area_node+0x28f/0x300 [ 96.687781][ T5995] ? htable_create+0xfc/0x7a0 [ 96.687810][ T5995] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 96.687868][ T5995] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 96.687897][ T5995] ? rcu_is_watching+0x15/0xb0 [ 96.687929][ T5995] ? htable_create+0xfc/0x7a0 [ 96.687954][ T5995] ? htable_create+0xfc/0x7a0 [ 96.687977][ T5995] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 96.687997][ T5995] ? htable_create+0xfc/0x7a0 [ 96.688021][ T5995] ? hashlimit_pernet+0x23/0x240 [ 96.688056][ T5995] htable_create+0xfc/0x7a0 [ 96.688091][ T5995] hashlimit_mt_check_common+0x719/0xa10 [ 96.688130][ T5995] xt_check_match+0x3d1/0xab0 [ 96.688157][ T5995] ? __pfx___mutex_lock+0x10/0x10 [ 96.688194][ T5995] ? __pfx_xt_check_match+0x10/0x10 [ 96.688223][ T5995] ? pcpu_alloc_noprof+0xfdd/0x16b0 [ 96.688253][ T5995] ? xt_find_match+0x1f7/0x250 [ 96.688286][ T5995] translate_table+0x1553/0x2040 [ 96.688335][ T5995] ? __pfx_translate_table+0x10/0x10 [ 96.688360][ T5995] ? __might_fault+0xb0/0x130 [ 96.688393][ T5995] ? _copy_from_user+0x94/0xb0 [ 96.688415][ T5995] do_ip6t_set_ctl+0x970/0xce0 [ 96.688447][ T5995] ? rcu_is_watching+0x15/0xb0 [ 96.688478][ T5995] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 96.688526][ T5995] ? __pfx___mutex_lock+0x10/0x10 [ 96.688557][ T5995] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 96.688600][ T5995] ? __pfx_futex_wake+0x10/0x10 [ 96.688632][ T5995] nf_setsockopt+0x26f/0x290 [ 96.688666][ T5995] rawv6_setsockopt+0x23b/0x5b0 [ 96.688695][ T5995] ? __lock_acquire+0xab9/0xd20 [ 96.688725][ T5995] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 96.688755][ T5995] ? aa_sock_opt_perm+0x74/0x110 [ 96.688781][ T5995] ? sock_common_setsockopt+0x36/0xc0 [ 96.688800][ T5995] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 96.688823][ T5995] do_sock_setsockopt+0x257/0x3e0 [ 96.688863][ T5995] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 96.688892][ T5995] ? __fget_files+0x2a/0x420 [ 96.688925][ T5995] __x64_sys_setsockopt+0x18b/0x220 [ 96.688957][ T5995] do_syscall_64+0xfa/0x3b0 [ 96.688974][ T5995] ? lockdep_hardirqs_on+0x9c/0x150 [ 96.689002][ T5995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.689021][ T5995] ? clear_bhb_loop+0x60/0xb0 [ 96.689045][ T5995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.689064][ T5995] RIP: 0033:0x7fe8d5f8e929 [ 96.689088][ T5995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.689105][ T5995] RSP: 002b:00007fe8d6d44038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 96.689125][ T5995] RAX: ffffffffffffffda RBX: 00007fe8d61b5fa0 RCX: 00007fe8d5f8e929 [ 96.689140][ T5995] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 96.689151][ T5995] RBP: 00007fe8d6010b39 R08: 00000000000005c0 R09: 0000000000000000 [ 96.689163][ T5995] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000000 [ 96.689173][ T5995] R13: 0000000000000000 R14: 00007fe8d61b5fa0 R15: 00007ffe6bfd3958 [ 96.689199][ T5995] [ 96.689210][ T5995] Mem-Info: [ 97.079138][ T5995] active_anon:5158 inactive_anon:0 isolated_anon:0 [ 97.079138][ T5995] active_file:1029 inactive_file:39821 isolated_file:0 [ 97.079138][ T5995] unevictable:768 dirty:1387 writeback:0 [ 97.079138][ T5995] slab_reclaimable:10172 slab_unreclaimable:97380 [ 97.079138][ T5995] mapped:29078 shmem:1361 pagetables:1075 [ 97.079138][ T5995] sec_pagetables:0 bounce:0 [ 97.079138][ T5995] kernel_misc_reclaimable:0 [ 97.079138][ T5995] free:1322776 free_pcp:26238 free_cma:0 [ 97.141626][ T5995] Node 0 active_anon:20564kB inactive_anon:0kB active_file:4156kB inactive_file:159088kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116224kB dirty:5608kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11848kB pagetables:4192kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 97.181704][ T5995] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 97.220571][ T5995] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 97.254039][ T5995] lowmem_reserve[]: 0 2501 2502 2502 2502 [ 97.260308][ T5995] Node 0 DMA32 free:1380840kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20520kB inactive_anon:0kB active_file:4156kB inactive_file:157256kB unevictable:1536kB writepending:5600kB present:3129332kB managed:2561036kB mlocked:0kB bounce:0kB free_pcp:82000kB local_pcp:22108kB free_cma:0kB [ 97.296440][ T5995] lowmem_reserve[]: 0 0 1 1 1 [ 97.301320][ T5995] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1832kB unevictable:0kB writepending:8kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 97.330587][ T5995] lowmem_reserve[]: 0 0 0 0 0 [ 97.335455][ T5995] Node 1 Normal free:3897824kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:12kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:21560kB local_pcp:10336kB free_cma:0kB [ 97.375040][ T5995] lowmem_reserve[]: 0 0 0 0 0 [ 97.379874][ T5995] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 97.407479][ T5995] Node 0 DMA32: 132*4kB (UM) 21*8kB (UM) 5*16kB (UM) 2*32kB (UM) 6*64kB (UME) 2*128kB (ME) 3*256kB (M) 6*512kB (UME) 3*1024kB (ME) 4*2048kB (UME) 333*4096kB (M) = 1380552kB [ 97.435262][ T5995] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 97.448381][ T5995] Node 1 Normal: 133*4kB (UME) 53*8kB (UME) 50*16kB (UME) 64*32kB (UME) 25*64kB (UME) 4*128kB (UME) 3*256kB (UM) 4*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 948*4096kB (M) = 3897884kB [ 97.506454][ T5995] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 97.551247][ T5995] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 97.593944][ T5995] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 97.633755][ T5995] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 97.670229][ T5995] 42217 total pagecache pages [ 97.684513][ T5995] 0 pages in swap cache [ 97.689448][ T5995] Free swap = 124996kB [ 97.742315][ T5995] Total swap = 124996kB [ 97.746536][ T5995] 2097051 pages RAM [ 97.755929][ T5995] 0 pages HighMem/MovableOnly [ 97.760741][ T5995] 424686 pages reserved [ 97.768722][ T5995] 0 pages cma reserved [ 97.846544][ T6029] sock: sock_set_timeout: `syz.1.20' (pid 6029) tries to set negative timeout [ 98.106874][ T6035] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.158578][ T6034] syz.4.24 uses obsolete (PF_INET,SOCK_PACKET) [ 98.337555][ T6045] netlink: 36 bytes leftover after parsing attributes in process `syz.0.25'. [ 98.413112][ T6046] x_tables: duplicate underflow at hook 1 [ 98.511543][ T6051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.27'. [ 98.628018][ T6051] netlink: 'syz.2.27': attribute type 11 has an invalid length. [ 98.680960][ T6051] netlink: 'syz.2.27': attribute type 11 has an invalid length. [ 98.733343][ T6051] netlink: 224 bytes leftover after parsing attributes in process `syz.2.27'. [ 98.848132][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.857763][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.865534][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.874096][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.883380][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 99.434710][ T6084] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-xor(2) [ 99.435420][ T6086] netlink: 'syz.4.39': attribute type 15 has an invalid length. [ 99.460604][ T6086] netlink: 24 bytes leftover after parsing attributes in process `syz.4.39'. [ 99.652815][ T6063] chnl_net:caif_netlink_parms(): no params data found [ 99.782981][ T6096] netlink: 'syz.4.42': attribute type 21 has an invalid length. [ 99.884245][ T6063] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.908264][ T6063] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.918365][ T6063] bridge_slave_0: entered allmulticast mode [ 99.933480][ T6103] netlink: 'syz.0.44': attribute type 11 has an invalid length. [ 99.945643][ T6063] bridge_slave_0: entered promiscuous mode [ 99.951863][ T6103] netlink: 'syz.0.44': attribute type 11 has an invalid length. [ 99.984475][ T6103] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.993495][ T6103] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.005419][ T6103] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.015772][ T6103] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.032962][ T6063] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.040238][ T6063] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.047801][ T6063] bridge_slave_1: entered allmulticast mode [ 100.055716][ T6063] bridge_slave_1: entered promiscuous mode [ 100.117901][ T6103] syz.0.44 (6103) used greatest stack depth: 19832 bytes left [ 100.203667][ T6063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.251377][ T6063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.359853][ T6063] team0: Port device team_slave_0 added [ 100.403547][ T6063] team0: Port device team_slave_1 added [ 100.494039][ T6114] tipc: Started in network mode [ 100.499639][ T6114] tipc: Node identity 9281f4f6bcd2, cluster identity 4711 [ 100.510230][ T6114] tipc: Enabled bearer , priority 0 [ 100.520057][ T6063] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.527747][ T6063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.556178][ T6063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.568622][ T6114] syzkaller0: entered promiscuous mode [ 100.595897][ T6114] syzkaller0: entered allmulticast mode [ 100.629159][ T6063] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.643071][ T6063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.700187][ T6063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.715439][ T6114] tipc: Resetting bearer [ 100.746302][ T6114] tipc: Disabling bearer [ 100.811978][ T6120] warning: `syz.4.51' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 100.845319][ T6120] netlink: 'syz.4.51': attribute type 10 has an invalid length. [ 100.960437][ T6063] hsr_slave_0: entered promiscuous mode [ 100.966609][ T5838] Bluetooth: hci1: command tx timeout [ 101.005710][ T6063] hsr_slave_1: entered promiscuous mode [ 101.038423][ T6063] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.046857][ T6063] Cannot create hsr debugfs directory [ 101.114721][ T6135] __nla_validate_parse: 5 callbacks suppressed [ 101.114740][ T6135] netlink: 8 bytes leftover after parsing attributes in process `syz.4.56'. [ 101.222389][ T6135] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 101.271822][ T6140] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.311648][ T6139] netlink: 'syz.0.57': attribute type 1 has an invalid length. [ 101.371462][ T6143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.59'. [ 101.688153][ T6063] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.727713][ T6148] netlink: 'syz.1.60': attribute type 10 has an invalid length. [ 101.737667][ T6148] netlink: 32 bytes leftover after parsing attributes in process `syz.1.60'. [ 101.783550][ T6063] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.821743][ T6155] x_tables: duplicate underflow at hook 1 [ 101.883591][ T6063] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.074341][ T6063] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.197230][ T6164] netlink: 'syz.1.66': attribute type 10 has an invalid length. [ 102.417015][ T6063] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 102.497192][ T6063] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 102.553159][ T6063] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 102.587904][ T6063] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 102.805948][ T6190] netlink: 256 bytes leftover after parsing attributes in process `syz.0.73'. [ 102.921981][ T6198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.75'. [ 103.021979][ T6196] netlink: 256 bytes leftover after parsing attributes in process `syz.0.73'. [ 103.036973][ T6198] netlink: 24 bytes leftover after parsing attributes in process `syz.2.75'. [ 103.048034][ T5838] Bluetooth: hci1: command tx timeout [ 103.134624][ T6063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.213681][ T6063] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.262452][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.269694][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.316423][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.323674][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.365723][ T6213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.81'. [ 103.390791][ T6211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.80'. [ 103.399988][ T6214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.80'. [ 103.554447][ T6215] netlink: 'syz.0.81': attribute type 2 has an invalid length. [ 103.795187][ T6230] netlink: 'syz.0.84': attribute type 33 has an invalid length. [ 104.136656][ T6251] netlink: 'syz.4.88': attribute type 1 has an invalid length. [ 104.424959][ T6063] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.733299][ T6063] veth0_vlan: entered promiscuous mode [ 104.763162][ T6063] veth1_vlan: entered promiscuous mode [ 104.898556][ T6063] veth0_macvtap: entered promiscuous mode [ 104.953900][ T6063] veth1_macvtap: entered promiscuous mode [ 105.109115][ T6063] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.122020][ T5838] Bluetooth: hci1: command tx timeout [ 105.156048][ T6063] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.183190][ T6063] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.206385][ T6063] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.216504][ T6063] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.226310][ T6063] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.479778][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.485272][ T6291] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 105.518182][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.658270][ T6291] netlink: 'syz.4.96': attribute type 10 has an invalid length. [ 105.671555][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.702548][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.913203][ T6299] netlink: 'syz.4.98': attribute type 8 has an invalid length. [ 106.617505][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.795534][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.166842][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.190021][ T6342] __nla_validate_parse: 39 callbacks suppressed [ 107.190041][ T6342] netlink: 13 bytes leftover after parsing attributes in process `syz.4.111'. [ 107.379798][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.577177][ T6353] Bluetooth: MGMT ver 1.23 [ 107.947734][ T6365] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.118'. [ 108.054510][ T36] bridge_slave_1: left allmulticast mode [ 108.111044][ T36] bridge_slave_1: left promiscuous mode [ 108.117791][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.128641][ T6373] netlink: 32 bytes leftover after parsing attributes in process `syz.1.120'. [ 108.190101][ T6373] openvswitch: netlink: Actions may not be safe on all matching packets [ 108.225544][ T36] bridge_slave_0: left allmulticast mode [ 108.256355][ T36] bridge_slave_0: left promiscuous mode [ 108.288390][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.362723][ T5856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 108.377605][ T5856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 108.391144][ T5856] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 108.399947][ T5856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 108.409288][ T5856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 108.752311][ T6393] xt_CT: You must specify a L4 protocol and not use inversions on it [ 108.776444][ T6393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.124'. [ 109.142205][ T6404] netlink: 14 bytes leftover after parsing attributes in process `syz.1.126'. [ 109.269151][ T6408] netlink: 'syz.1.126': attribute type 10 has an invalid length. [ 109.411690][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.439557][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.464652][ T36] bond0 (unregistering): Released all slaves [ 109.817669][ T6424] netlink: 28 bytes leftover after parsing attributes in process `syz.1.130'. [ 109.827347][ T6424] netlink: 12 bytes leftover after parsing attributes in process `syz.1.130'. [ 110.138718][ T6431] netlink: 'syz.4.132': attribute type 10 has an invalid length. [ 110.147091][ T6431] netlink: 40 bytes leftover after parsing attributes in process `syz.4.132'. [ 110.398137][ T6431] team0: Port device geneve0 added [ 110.427498][ T6441] netlink: 104 bytes leftover after parsing attributes in process `syz.2.134'. [ 110.457238][ T6442] netlink: 104 bytes leftover after parsing attributes in process `syz.2.134'. [ 110.485304][ T5856] Bluetooth: hci1: command tx timeout [ 110.635224][ T36] hsr_slave_0: left promiscuous mode [ 110.651792][ T36] hsr_slave_1: left promiscuous mode [ 110.658323][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.666554][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.676393][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.684662][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.729702][ T36] veth1_macvtap: left promiscuous mode [ 110.736227][ T36] veth0_macvtap: left promiscuous mode [ 110.742573][ T36] veth1_vlan: left promiscuous mode [ 110.748279][ T36] veth0_vlan: left promiscuous mode [ 111.365639][ T36] team0 (unregistering): Port device team_slave_1 removed [ 111.412344][ T36] team0 (unregistering): Port device team_slave_0 removed [ 112.357787][ T6382] chnl_net:caif_netlink_parms(): no params data found [ 112.527386][ T6492] x_tables: unsorted underflow at hook 1 [ 112.561848][ T5856] Bluetooth: hci1: command tx timeout [ 112.715208][ T6503] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 113.045576][ T6382] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.050183][ T6520] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 113.074241][ T6382] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.091869][ T6382] bridge_slave_0: entered allmulticast mode [ 113.106726][ T6382] bridge_slave_0: entered promiscuous mode [ 113.125555][ T6382] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.140063][ T6523] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 113.141100][ T6382] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.178409][ T6382] bridge_slave_1: entered allmulticast mode [ 113.204048][ T6382] bridge_slave_1: entered promiscuous mode [ 113.379208][ T6382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.429182][ T6382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.473920][ T6532] __nla_validate_parse: 1 callbacks suppressed [ 113.473938][ T6532] netlink: 20 bytes leftover after parsing attributes in process `syz.0.150'. [ 113.474629][ T6535] netlink: 'syz.2.151': attribute type 1 has an invalid length. [ 113.548797][ T6535] netlink: 212 bytes leftover after parsing attributes in process `syz.2.151'. [ 113.577498][ T6535] netlink: 'syz.2.151': attribute type 1 has an invalid length. [ 113.593645][ T6540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.152'. [ 113.603581][ T6540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.152'. [ 113.762817][ T6382] team0: Port device team_slave_0 added [ 113.924856][ T6382] team0: Port device team_slave_1 added [ 113.978520][ T6552] xt_hashlimit: size too large, truncated to 1048576 [ 114.098099][ T6554] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 114.127448][ T6557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.157'. [ 114.149952][ T6554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.155'. [ 114.156347][ T6382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.211140][ T6382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.306089][ T6382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.406369][ T6557] vlan2: entered allmulticast mode [ 114.413364][ T6557] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 114.445380][ T6382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.463054][ T6382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.505844][ T6382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.626178][ T6572] openvswitch: netlink: Actions may not be safe on all matching packets [ 114.642279][ T5856] Bluetooth: hci1: command tx timeout [ 114.675663][ T6574] netlink: 44 bytes leftover after parsing attributes in process `syz.1.162'. [ 114.746197][ T6382] hsr_slave_0: entered promiscuous mode [ 114.772165][ T6382] hsr_slave_1: entered promiscuous mode [ 114.794733][ T6382] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.822553][ T6382] Cannot create hsr debugfs directory [ 115.333666][ T6601] netlink: 40 bytes leftover after parsing attributes in process `syz.2.168'. [ 115.800610][ T6616] x_tables: duplicate underflow at hook 2 [ 116.048272][ T6634] netlink: 340 bytes leftover after parsing attributes in process `syz.1.177'. [ 116.622182][ T10] IPVS: starting estimator thread 0... [ 116.640457][ T6655] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 116.702937][ T6662] netlink: 24 bytes leftover after parsing attributes in process `syz.4.183'. [ 116.732765][ T6660] IPVS: using max 28 ests per chain, 67200 per kthread [ 116.739925][ T5856] Bluetooth: hci1: command tx timeout [ 116.846276][ T6670] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 116.864353][ T6671] trusted_key: syz.1.184 sent an empty control message without MSG_MORE. [ 117.103763][ T6382] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 117.125500][ T6382] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 117.184076][ T6382] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 117.243238][ T6382] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 117.518080][ T6709] xt_ecn: cannot match TCP bits for non-tcp packets [ 117.739314][ T6382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.836894][ T6382] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.848526][ T6722] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 117.927534][ T49] wlan1: Trigger new scan to find an IBSS to join [ 117.936772][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.944615][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.015727][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.022995][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.172367][ T6734] netlink: 'syz.1.204': attribute type 18 has an invalid length. [ 118.173364][ T6382] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 118.257547][ T6746] tls_set_device_offload: netdev not found [ 118.308099][ T6734] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.317079][ T6734] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.326567][ T6734] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.335986][ T6734] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.418324][ T49] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 118.463318][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 118.471403][ T49] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 118.524515][ T6751] block nbd0: server does not support multiple connections per device. [ 118.558039][ T6751] block nbd0: shutting down sockets [ 118.630841][ T6763] __nla_validate_parse: 7 callbacks suppressed [ 118.630859][ T6763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.208'. [ 118.660525][ T6763] netlink: 'syz.0.208': attribute type 3 has an invalid length. [ 119.176596][ T6382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.220383][ T43] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 119.361886][ T43] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 119.389822][ T6382] veth0_vlan: entered promiscuous mode [ 119.470472][ T6382] veth1_vlan: entered promiscuous mode [ 119.597668][ T6382] veth0_macvtap: entered promiscuous mode [ 119.657592][ T6795] netlink: 11 bytes leftover after parsing attributes in process `syz.4.219'. [ 119.687593][ T6795] netlink: 11 bytes leftover after parsing attributes in process `syz.4.219'. [ 119.736468][ T6382] veth1_macvtap: entered promiscuous mode [ 119.786672][ T6382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.806119][ T6800] Driver unsupported XDP return value 0 on prog (id 41) dev N/A, expect packet loss! [ 119.836661][ T6382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.891206][ T6382] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.921444][ T5856] Bluetooth: hci0: command tx timeout [ 119.924053][ T6382] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.975537][ T6382] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.001980][ T6382] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.427328][ T3479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.469190][ T3479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.578084][ T6823] netlink: 'syz.0.226': attribute type 4 has an invalid length. [ 120.653082][ T6835] netlink: 108 bytes leftover after parsing attributes in process `syz.2.229'. [ 120.684248][ T6835] netlink: 108 bytes leftover after parsing attributes in process `syz.2.229'. [ 120.712001][ T6835] netlink: 84 bytes leftover after parsing attributes in process `syz.2.229'. [ 120.778254][ T2984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.798758][ T2984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.973754][ T6845] netlink: 9 bytes leftover after parsing attributes in process `syz.0.232'. [ 121.025683][ T6845] gretap0: entered promiscuous mode [ 121.035704][ T6847] netlink: 788 bytes leftover after parsing attributes in process `syz.1.233'. [ 121.053852][ T6845] netlink: 5 bytes leftover after parsing attributes in process `syz.0.232'. [ 121.078498][ T6845] 0XD: renamed from gretap0 [ 121.138119][ T6845] 0XD: left promiscuous mode [ 121.158120][ T6845] 0XD: entered allmulticast mode [ 121.167750][ T6845] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 121.200777][ T6853] netlink: 20 bytes leftover after parsing attributes in process `syz.2.234'. [ 121.211320][ T6850] netlink: 'syz.2.234': attribute type 3 has an invalid length. [ 121.247571][ T6858] netlink: 'syz.1.236': attribute type 21 has an invalid length. [ 121.304810][ T6858] netlink: 'syz.1.236': attribute type 8 has an invalid length. [ 121.442169][ T6851] syzkaller0: entered promiscuous mode [ 121.447807][ T6851] syzkaller0: entered allmulticast mode [ 121.642857][ T1340] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.673628][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 122.703272][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 122.717078][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 122.727006][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 122.736753][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 122.811096][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 122.967124][ T79] wlan1: Trigger new scan to find an IBSS to join [ 123.945310][ T2984] wlan1: Creating new IBSS network, BSSID 9a:40:b2:12:fb:96 [ 124.064332][ T1340] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.368501][ T1340] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.575755][ T6941] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.583600][ T6941] bridge0: port 3(bond1) entered blocking state [ 124.591924][ T6941] bridge0: port 3(bond1) entered disabled state [ 124.612637][ T6941] bond1: entered allmulticast mode [ 124.673308][ T6941] bond1: entered promiscuous mode [ 124.693521][ T6941] bridge0: port 3(bond1) entered blocking state [ 124.700210][ T6941] bridge0: port 3(bond1) entered forwarding state [ 124.803203][ T5838] Bluetooth: hci1: command tx timeout [ 124.814443][ T6960] x_tables: unsorted underflow at hook 3 [ 124.827228][ T1340] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.965959][ T6963] veth0: entered promiscuous mode [ 125.054230][ T6956] veth0: left promiscuous mode [ 125.115047][ T79] bridge0: port 3(bond1) entered disabled state [ 125.121985][ T6978] netlink: 'syz.2.251': attribute type 1 has an invalid length. [ 125.129674][ T6978] __nla_validate_parse: 1 callbacks suppressed [ 125.129695][ T6978] netlink: 224 bytes leftover after parsing attributes in process `syz.2.251'. [ 125.193390][ T6978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.251'. [ 125.332328][ T6986] netlink: 'syz.4.252': attribute type 1 has an invalid length. [ 125.740091][ T6893] chnl_net:caif_netlink_parms(): no params data found [ 125.793298][ T1340] bridge_slave_1: left allmulticast mode [ 125.805354][ T1340] bridge_slave_1: left promiscuous mode [ 125.820331][ T1340] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.078592][ T1340] bridge_slave_0: left allmulticast mode [ 126.090477][ T1340] bridge_slave_0: left promiscuous mode [ 126.116919][ T1340] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.719590][ T7021] SET target dimension over the limit! [ 126.800650][ T7022] netlink: 12 bytes leftover after parsing attributes in process `syz.2.259'. [ 126.822908][ T1340] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.844216][ T1340] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.863760][ T1340] bond0 (unregistering): Released all slaves [ 126.891856][ T5838] Bluetooth: hci1: command tx timeout [ 127.037758][ T7024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.260'. [ 127.077838][ T7025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.260'. [ 127.190359][ T7029] rdma_op ffff8880287251f0 conn xmit_rdma 0000000000000000 [ 127.270741][ T7038] netlink: 16 bytes leftover after parsing attributes in process `syz.0.262'. [ 127.328103][ T7029] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 127.448295][ T6893] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.457149][ T7043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.265'. [ 127.485892][ T6893] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.505309][ T6893] bridge_slave_0: entered allmulticast mode [ 127.521729][ T6893] bridge_slave_0: entered promiscuous mode [ 127.560449][ T7045] netlink: 'syz.2.267': attribute type 83 has an invalid length. [ 127.667455][ T6893] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.697691][ T6893] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.733764][ T6893] bridge_slave_1: entered allmulticast mode [ 127.753623][ T6893] bridge_slave_1: entered promiscuous mode [ 127.954819][ T6893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.980373][ T1340] hsr_slave_0: left promiscuous mode [ 128.019455][ T1340] hsr_slave_1: left promiscuous mode [ 128.042619][ T1340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.083762][ T1340] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.128422][ T1340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.174348][ T1340] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.254389][ T7070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.272'. [ 128.282689][ T1340] veth1_macvtap: left promiscuous mode [ 128.292983][ T1340] veth0_macvtap: left promiscuous mode [ 128.298620][ T7070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.272'. [ 128.316503][ T1340] veth1_vlan: left promiscuous mode [ 128.336507][ T1340] veth0_vlan: left promiscuous mode [ 128.971218][ T5838] Bluetooth: hci1: command tx timeout [ 129.053903][ T1340] team0 (unregistering): Port device team_slave_1 removed [ 129.090443][ T1340] team0 (unregistering): Port device team_slave_0 removed [ 129.430117][ T6893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.478544][ T7082] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 129.615612][ T7101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.277'. [ 129.745198][ T6893] team0: Port device team_slave_0 added [ 129.791785][ T6893] team0: Port device team_slave_1 added [ 130.242968][ T6893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.249977][ T6893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.326899][ T6893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.346402][ T6893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.354519][ T6893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.387244][ T7114] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 130.396486][ T6893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.414664][ T7119] __nla_validate_parse: 1 callbacks suppressed [ 130.414681][ T7119] netlink: 28 bytes leftover after parsing attributes in process `syz.0.282'. [ 130.436523][ T7113] netlink: 40 bytes leftover after parsing attributes in process `syz.2.281'. [ 130.447829][ T7114] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 130.495380][ T7119] netlink: 'syz.0.282': attribute type 7 has an invalid length. [ 130.506713][ T7114] netlink: 'syz.1.280': attribute type 1 has an invalid length. [ 130.515624][ T7114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.280'. [ 130.525488][ T7119] netlink: 'syz.0.282': attribute type 8 has an invalid length. [ 130.578392][ T7114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.280'. [ 130.588754][ T7119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.282'. [ 130.589891][ T7114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.280'. [ 130.616257][ T7114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.280'. [ 130.626277][ T7114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.280'. [ 130.716327][ T7127] xt_recent: Unsupported userspace flags (00000061) [ 130.752134][ T6893] hsr_slave_0: entered promiscuous mode [ 130.757672][ T7130] netlink: 12 bytes leftover after parsing attributes in process `syz.1.285'. [ 130.763568][ T6893] hsr_slave_1: entered promiscuous mode [ 130.775846][ T6893] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 130.786758][ T6893] Cannot create hsr debugfs directory [ 130.859128][ T7137] netlink: 12 bytes leftover after parsing attributes in process `syz.0.286'. [ 131.041320][ T5838] Bluetooth: hci1: command tx timeout [ 131.062657][ T7137] macvlan2: entered promiscuous mode [ 131.099955][ T7137] macvlan2: entered allmulticast mode [ 131.100552][ T7152] netlink: 'syz.4.290': attribute type 5 has an invalid length. [ 131.122195][ T7137] batadv0: entered promiscuous mode [ 131.143684][ T7137] batadv0: entered allmulticast mode [ 131.180366][ T7137] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 131.214187][ T7137] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 131.601095][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 131.673148][ T7170] xt_ipcomp: unknown flags B [ 132.521936][ T7207] netlink: 'syz.0.304': attribute type 21 has an invalid length. [ 132.530728][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 132.538604][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 132.554251][ T5945] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 132.658613][ T7207] bridge0: port 3(batadv1) entered blocking state [ 132.684160][ T7207] bridge0: port 3(batadv1) entered disabled state [ 132.698799][ T7207] batadv1: entered allmulticast mode [ 132.709584][ T7216] netlink: 'syz.1.307': attribute type 2 has an invalid length. [ 132.717734][ T7207] batadv1: entered promiscuous mode [ 132.814120][ T5945] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 132.891461][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.898166][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.989397][ T6893] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 133.025326][ T6893] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 133.037708][ T7224] xt_TCPMSS: Only works on TCP SYN packets [ 133.062720][ T6893] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 133.106233][ T6893] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 133.115899][ T49] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 133.127232][ T49] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 133.281265][ T5945] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 133.604596][ T7246] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.758713][ T7246] bridge_slave_1 (unregistering): left allmulticast mode [ 133.773914][ T7246] bridge_slave_1 (unregistering): left promiscuous mode [ 133.793317][ T7246] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.972474][ T6893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.979989][ T7261] netlink: 'syz.4.318': attribute type 1 has an invalid length. [ 133.998750][ T7238] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 134.066073][ T6893] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.357807][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.365084][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.455744][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.463005][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.794523][ T7286] delete_channel: no stack [ 134.983632][ T7300] netdevsim netdevsim4: Direct firmware load for failed with error -2 [ 135.023924][ T7300] netdevsim netdevsim4: Falling back to sysfs fallback for: [ 135.266752][ T6893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.277881][ T7313] netlink: 'syz.1.335': attribute type 39 has an invalid length. [ 135.430213][ T6893] veth0_vlan: entered promiscuous mode [ 135.493715][ T6893] veth1_vlan: entered promiscuous mode [ 135.503362][ T7313] netlink: 'syz.1.335': attribute type 39 has an invalid length. [ 135.523638][ T7322] netlink: 'syz.0.337': attribute type 25 has an invalid length. [ 135.536275][ T7313] netlink: 'syz.1.335': attribute type 39 has an invalid length. [ 135.552353][ T7324] netlink: 'syz.0.337': attribute type 25 has an invalid length. [ 135.573177][ T7313] netlink: 'syz.1.335': attribute type 39 has an invalid length. [ 135.577634][ T6893] veth0_macvtap: entered promiscuous mode [ 135.599636][ T6893] veth1_macvtap: entered promiscuous mode [ 135.619407][ T7313] netlink: 'syz.1.335': attribute type 39 has an invalid length. [ 135.642079][ T7313] netlink: 'syz.1.335': attribute type 39 has an invalid length. [ 135.666114][ T6893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.680228][ T7313] netlink: 'syz.1.335': attribute type 39 has an invalid length. [ 135.713173][ T6893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.724340][ T6893] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.742674][ T6893] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.752102][ T6893] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.763399][ T6893] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.776131][ T7313] netlink: 'syz.1.335': attribute type 39 has an invalid length. [ 135.813578][ T7313] netlink: 'syz.1.335': attribute type 39 has an invalid length. [ 136.062132][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.070047][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.196153][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.231605][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.259447][ T7345] __nla_validate_parse: 20 callbacks suppressed [ 136.259466][ T7345] netlink: 4 bytes leftover after parsing attributes in process `syz.4.345'. [ 136.294716][ T7345] netlink: 12 bytes leftover after parsing attributes in process `syz.4.345'. [ 136.369389][ T7348] netlink: 60 bytes leftover after parsing attributes in process `syz.0.347'. [ 136.641263][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 136.702292][ T7356] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 136.850059][ T7362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.349'. [ 136.899479][ T7362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.349'. [ 136.934633][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.029407][ T7368] SET target dimension over the limit! [ 137.030594][ T7362] netlink: 228 bytes leftover after parsing attributes in process `syz.0.349'. [ 137.192720][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.315300][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.558658][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.294457][ T13] bridge_slave_1: left allmulticast mode [ 138.316054][ T13] bridge_slave_1: left promiscuous mode [ 138.361880][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.399808][ T13] bridge_slave_0: left allmulticast mode [ 138.427446][ T13] bridge_slave_0: left promiscuous mode [ 138.448402][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.557677][ T5856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 138.568958][ T5856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 138.578551][ T5856] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 138.592295][ T5856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 138.602091][ T5856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 138.879887][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.895403][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.905960][ T13] bond0 (unregistering): Released all slaves [ 139.374954][ T7430] tipc: Started in network mode [ 139.411266][ T7430] tipc: Node identity a6477c8920da, cluster identity 4711 [ 139.437585][ T7430] tipc: Enabled bearer , priority 0 [ 139.478274][ T7438] netlink: 244 bytes leftover after parsing attributes in process `syz.0.367'. [ 139.487352][ T7432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.367'. [ 139.554834][ T7421] syzkaller0: entered promiscuous mode [ 139.560449][ T7421] syzkaller0: entered allmulticast mode [ 139.571912][ T7421] tipc: Resetting bearer [ 139.656395][ T7432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.367'. [ 139.689003][ T7435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.367'. [ 139.728716][ T7449] nft_compat: unsupported protocol 0 [ 139.764534][ T7440] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 139.840570][ T7417] tipc: Resetting bearer [ 140.563088][ T7465] validate_nla: 61 callbacks suppressed [ 140.563107][ T7465] netlink: 'syz.4.373': attribute type 1 has an invalid length. [ 140.571197][ T10] tipc: Node number set to 2258467977 [ 140.642368][ T5856] Bluetooth: hci1: command tx timeout [ 141.573592][ T7417] tipc: Disabling bearer [ 141.617774][ T13] hsr_slave_0: left promiscuous mode [ 141.625124][ T13] hsr_slave_1: left promiscuous mode [ 141.632740][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.642126][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.650714][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.659873][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.703222][ T13] veth1_macvtap: left promiscuous mode [ 141.708842][ T13] veth0_macvtap: left promiscuous mode [ 141.731688][ T13] veth1_vlan: left promiscuous mode [ 141.737923][ T13] veth0_vlan: left promiscuous mode [ 141.759563][ T7470] netlink: 'syz.1.374': attribute type 1 has an invalid length. [ 142.277160][ T7482] __nla_validate_parse: 1 callbacks suppressed [ 142.277181][ T7482] netlink: 12 bytes leftover after parsing attributes in process `syz.2.379'. [ 142.304437][ T7482] netlink: 12 bytes leftover after parsing attributes in process `syz.2.379'. [ 142.506554][ T13] team0 (unregistering): Port device team_slave_1 removed [ 142.548381][ T13] team0 (unregistering): Port device team_slave_0 removed [ 142.724289][ T5856] Bluetooth: hci1: command tx timeout [ 142.935308][ T7474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.376'. [ 143.188758][ T7493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.384'. [ 143.306609][ T7499] netlink: 'syz.2.383': attribute type 13 has an invalid length. [ 143.448065][ T7414] chnl_net:caif_netlink_parms(): no params data found [ 143.619510][ T7512] rdma_op ffff88805dd9a9f0 conn xmit_rdma 0000000000000000 [ 143.926080][ T7530] netlink: 'syz.0.393': attribute type 7 has an invalid length. [ 144.066216][ T7530] : entered promiscuous mode [ 144.102523][ T7414] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.109729][ T7414] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.147183][ T7414] bridge_slave_0: entered allmulticast mode [ 144.175984][ T7414] bridge_slave_0: entered promiscuous mode [ 144.206328][ T7414] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.224910][ T7414] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.251831][ T7414] bridge_slave_1: entered allmulticast mode [ 144.263718][ T7414] bridge_slave_1: entered promiscuous mode [ 144.634943][ T7414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.740373][ T7414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.765233][ T5945] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 144.805232][ T5856] Bluetooth: hci1: command tx timeout [ 144.966801][ T7414] team0: Port device team_slave_0 added [ 144.984018][ T7572] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.992094][ T7572] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.029599][ T7572] bridge0: entered allmulticast mode [ 145.041152][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 145.079864][ T7579] bond1: left allmulticast mode [ 145.091885][ T7579] bond1: left promiscuous mode [ 145.109181][ T7579] bridge0: port 3(bond1) entered disabled state [ 145.164303][ T7587] netlink: 28 bytes leftover after parsing attributes in process `syz.0.406'. [ 145.173654][ T10] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 145.184207][ T7579] bridge_slave_1: left allmulticast mode [ 145.191061][ T7579] bridge_slave_1: left promiscuous mode [ 145.200434][ T7579] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.233010][ T7579] bridge_slave_0: left allmulticast mode [ 145.239449][ T7579] bridge_slave_0: left promiscuous mode [ 145.254727][ T7579] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.427907][ T7414] team0: Port device team_slave_1 added [ 145.591437][ T7606] netlink: 20 bytes leftover after parsing attributes in process `syz.0.412'. [ 145.667463][ T7608] netlink: 12 bytes leftover after parsing attributes in process `syz.4.413'. [ 145.669159][ T7414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.727216][ T7414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.794770][ T7414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.840175][ T7414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.849121][ T7414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.895033][ T7414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.944895][ T7619] netlink: 12 bytes leftover after parsing attributes in process `syz.4.415'. [ 145.983346][ T7619] netlink: 12 bytes leftover after parsing attributes in process `syz.4.415'. [ 146.051209][ T7626] openvswitch: netlink: IP tunnel dst address not specified [ 146.191786][ T7414] hsr_slave_0: entered promiscuous mode [ 146.198637][ T7414] hsr_slave_1: entered promiscuous mode [ 146.206182][ T7414] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.225315][ T7414] Cannot create hsr debugfs directory [ 146.364369][ T7636] netlink: 20 bytes leftover after parsing attributes in process `syz.1.421'. [ 146.585252][ T7649] netlink: 'syz.2.422': attribute type 72 has an invalid length. [ 146.882992][ T5856] Bluetooth: hci1: command tx timeout [ 147.060027][ T7672] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 147.086065][ T7672] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.094890][ T7672] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.129885][ T7672] ieee802154 phy0 wpan0: encryption failed: -22 [ 147.546949][ T7690] __nla_validate_parse: 1 callbacks suppressed [ 147.546981][ T7690] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.439'. [ 147.575229][ T7690] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 147.599309][ T7692] netlink: 'syz.1.441': attribute type 1 has an invalid length. [ 147.601323][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 147.640494][ T7695] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 147.698905][ T7697] netlink: 'syz.1.441': attribute type 1 has an invalid length. [ 147.755355][ T7414] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 147.892155][ T7414] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 147.995149][ T7414] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 148.051908][ T7716] netlink: 112 bytes leftover after parsing attributes in process `syz.0.445'. [ 148.095223][ T7414] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 148.424474][ T7743] netlink: 24 bytes leftover after parsing attributes in process `syz.2.453'. [ 148.438903][ T7745] sctp: [Deprecated]: syz.4.451 (pid 7745) Use of int in maxseg socket option. [ 148.438903][ T7745] Use struct sctp_assoc_value instead [ 148.630275][ T7414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.696701][ T7414] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.727705][ T7753] sctp: [Deprecated]: syz.1.456 (pid 7753) Use of struct sctp_assoc_value in delayed_ack socket option. [ 148.727705][ T7753] Use struct sctp_sack_info instead [ 148.783082][ T3479] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.790278][ T3479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.827489][ T3479] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.834735][ T3479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.854713][ T7753] sctp: [Deprecated]: syz.1.456 (pid 7753) Use of struct sctp_assoc_value in delayed_ack socket option. [ 148.854713][ T7753] Use struct sctp_sack_info instead [ 149.328260][ T7783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.460'. [ 149.450997][ T7783] netlink: 'syz.4.460': attribute type 1 has an invalid length. [ 149.458707][ T7783] netlink: 'syz.4.460': attribute type 2 has an invalid length. [ 149.718315][ T7795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.465'. [ 149.742512][ T7795] netlink: 12 bytes leftover after parsing attributes in process `syz.0.465'. [ 149.856606][ T7414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.026794][ T5830] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 150.086729][ T7414] veth0_vlan: entered promiscuous mode [ 150.140312][ T7414] veth1_vlan: entered promiscuous mode [ 150.264755][ T7414] veth0_macvtap: entered promiscuous mode [ 150.304687][ T7414] veth1_macvtap: entered promiscuous mode [ 150.374031][ T7414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.424496][ T7414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.479956][ T7414] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.507460][ T7414] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.539385][ T7414] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.550356][ T7414] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.657177][ T7829] xt_ecn: cannot match TCP bits for non-tcp packets [ 150.847791][ T7840] netlink: 808 bytes leftover after parsing attributes in process `syz.2.478'. [ 150.856027][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.899716][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.964730][ T5968] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 151.276694][ T7862] netlink: 'syz.2.482': attribute type 1 has an invalid length. [ 151.304800][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.316010][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.336928][ T7850] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 151.386709][ T7850] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 151.416543][ C1] IPv4: Oversized IP packet from 172.20.20.48 [ 151.419784][ T7867] netlink: 'syz.1.483': attribute type 12 has an invalid length. [ 151.430684][ T7867] netlink: 'syz.1.483': attribute type 29 has an invalid length. [ 151.442220][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 151.444842][ T7867] netlink: 148 bytes leftover after parsing attributes in process `syz.1.483'. [ 151.473419][ T7867] netlink: 'syz.1.483': attribute type 1 has an invalid length. [ 153.517459][ T7902] netlink: 20 bytes leftover after parsing attributes in process `syz.2.492'. [ 153.833961][ T1340] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.026258][ T3479] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 155.317305][ T7938] netlink: 'syz.0.499': attribute type 1 has an invalid length. [ 155.446522][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 155.458724][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 155.467552][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 155.479876][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 155.498771][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 155.959067][ T1340] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.988184][ T7924] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 156.066949][ T7946] netlink: 165 bytes leftover after parsing attributes in process `syz.2.501'. [ 156.115335][ T7941] bond1: (slave gretap0): making interface the new active one [ 156.148695][ T7941] bond1: (slave gretap0): Enslaving as an active interface with an up link [ 156.270438][ T1340] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.353734][ T7953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.504'. [ 156.447013][ T1340] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.635079][ T7962] tipc: MTU too low for tipc bearer [ 157.315975][ T8001] netlink: 'syz.4.521': attribute type 58 has an invalid length. [ 157.324215][ T8001] netlink: 20 bytes leftover after parsing attributes in process `syz.4.521'. [ 157.387874][ T1340] bridge_slave_1: left allmulticast mode [ 157.396899][ T1340] bridge_slave_1: left promiscuous mode [ 157.411655][ T1340] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.436041][ T1340] bridge_slave_0: left allmulticast mode [ 157.450930][ T1340] bridge_slave_0: left promiscuous mode [ 157.464971][ T1340] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.601676][ T5838] Bluetooth: hci1: command tx timeout [ 157.822935][ T1340] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.838477][ T1340] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.852784][ T1340] bond0 (unregistering): Released all slaves [ 157.944045][ T8015] bond2: entered promiscuous mode [ 157.949157][ T8015] bond2: entered allmulticast mode [ 157.954929][ T8015] 8021q: adding VLAN 0 to HW filter on device bond2 [ 158.064233][ T7943] chnl_net:caif_netlink_parms(): no params data found [ 158.281158][ T8033] netlink: 'syz.0.527': attribute type 2 has an invalid length. [ 158.298223][ T8033] netlink: 244 bytes leftover after parsing attributes in process `syz.0.527'. [ 158.307716][ T8030] netlink: 4 bytes leftover after parsing attributes in process `syz.4.525'. [ 158.478884][ T12] bond0: (slave bond_slave_0): interface is now down [ 158.495753][ T12] bond0: (slave bond_slave_1): interface is now down [ 158.523260][ T49] bond0: (slave bond_slave_0): interface is now down [ 158.530554][ T49] bond0: (slave bond_slave_1): interface is now down [ 158.571936][ T36] bond0: (slave bond_slave_0): interface is now down [ 158.590129][ T36] bond0: (slave bond_slave_1): interface is now down [ 158.628808][ T8052] netlink: 12 bytes leftover after parsing attributes in process `syz.4.533'. [ 158.647886][ T36] bond0: (slave bond_slave_0): interface is now down [ 158.664799][ T36] bond0: (slave bond_slave_1): interface is now down [ 158.668881][ T8055] netlink: 14 bytes leftover after parsing attributes in process `syz.2.532'. [ 158.695965][ T49] bond0: (slave bond_slave_0): interface is now down [ 158.709946][ T49] bond0: (slave bond_slave_1): interface is now down [ 158.732341][ T36] bond0: (slave bond_slave_0): interface is now down [ 158.739779][ T36] bond0: (slave bond_slave_1): interface is now down [ 158.761649][ T12] bond0: (slave bond_slave_0): interface is now down [ 158.769800][ T12] bond0: (slave bond_slave_1): interface is now down [ 158.788813][ T12] bond0: now running without any active interface! [ 158.946265][ T8055] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.959242][ T8055] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.980074][ T8055] bond0 (unregistering): Released all slaves [ 159.095304][ T7943] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.116049][ T7943] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.127375][ T7943] bridge_slave_0: entered allmulticast mode [ 159.139343][ T7943] bridge_slave_0: entered promiscuous mode [ 159.159240][ T7943] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.175001][ T7943] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.183899][ T7943] bridge_slave_1: entered allmulticast mode [ 159.191685][ T7943] bridge_slave_1: entered promiscuous mode [ 159.258196][ T1340] hsr_slave_0: left promiscuous mode [ 159.285232][ T1340] hsr_slave_1: left promiscuous mode [ 159.297743][ T1340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.324587][ T1340] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.342657][ T1340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.353415][ T1340] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.394642][ T1340] veth1_macvtap: left promiscuous mode [ 159.439292][ T1340] veth0_macvtap: left promiscuous mode [ 159.450084][ T1340] veth1_vlan: left promiscuous mode [ 159.459461][ T1340] veth0_vlan: left promiscuous mode [ 159.683198][ T5838] Bluetooth: hci1: command tx timeout [ 160.085605][ T1340] team0 (unregistering): Port device team_slave_1 removed [ 160.124825][ T1340] team0 (unregistering): Port device team_slave_0 removed [ 160.561158][ T7943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.592088][ T7943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.744922][ T8096] netlink: 76 bytes leftover after parsing attributes in process `syz.0.542'. [ 160.796996][ T8100] netlink: 12 bytes leftover after parsing attributes in process `syz.0.542'. [ 160.828860][ T8101] netlink: 12 bytes leftover after parsing attributes in process `syz.0.542'. [ 160.895645][ T7943] team0: Port device team_slave_0 added [ 160.924108][ T7943] team0: Port device team_slave_1 added [ 161.025216][ T8096] netlink: 'syz.0.542': attribute type 1 has an invalid length. [ 161.041213][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 161.072069][ T8100] netlink: 'syz.0.542': attribute type 1 has an invalid length. [ 161.204970][ T7943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.231987][ T7943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.314130][ T7943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.352554][ T8121] netlink: 12 bytes leftover after parsing attributes in process `syz.1.548'. [ 161.365882][ T8121] netlink: 24 bytes leftover after parsing attributes in process `syz.1.548'. [ 161.367196][ T7943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.398057][ T7943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.450238][ T7943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.528362][ T8121] syzkaller1: entered promiscuous mode [ 161.538417][ T8121] syzkaller1: entered allmulticast mode [ 161.761994][ T5838] Bluetooth: hci1: command tx timeout [ 161.789882][ T8139] netlink: 27 bytes leftover after parsing attributes in process `syz.2.553'. [ 161.835405][ T7943] hsr_slave_0: entered promiscuous mode [ 161.855248][ T7943] hsr_slave_1: entered promiscuous mode [ 161.869402][ T7943] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.878212][ T8143] netlink: 165 bytes leftover after parsing attributes in process `syz.0.554'. [ 161.887338][ T7943] Cannot create hsr debugfs directory [ 161.896934][ T8143] netlink: 'syz.0.554': attribute type 1 has an invalid length. [ 162.087498][ T8150] 8021q: adding VLAN 0 to HW filter on device bond4 [ 162.100555][ T8150] bond3: (slave bond4): making interface the new active one [ 162.110155][ T8150] bond3: (slave bond4): Enslaving as an active interface with an up link [ 162.444621][ T8164] netlink: 36 bytes leftover after parsing attributes in process `syz.2.558'. [ 162.925801][ T8181] netlink: 'syz.4.565': attribute type 6 has an invalid length. [ 162.934753][ T8181] netlink: 'syz.4.565': attribute type 5 has an invalid length. [ 162.970429][ T8180] netlink: 'syz.0.564': attribute type 13 has an invalid length. [ 162.979160][ T8182] netlink: 'syz.0.564': attribute type 13 has an invalid length. [ 163.125225][ T7943] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 163.167081][ T7943] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 163.247848][ T8193] netlink: 'syz.4.566': attribute type 1 has an invalid length. [ 163.334111][ T7943] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 163.394929][ T7943] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 163.452947][ T8203] xt_connbytes: Forcing CT accounting to be enabled [ 163.460142][ T8203] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 163.676731][ T7943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.733446][ T7943] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.799953][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.807168][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.840585][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.847811][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.858856][ T5838] Bluetooth: hci1: command tx timeout [ 163.910140][ T7943] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 164.014254][ T8229] __nla_validate_parse: 6 callbacks suppressed [ 164.014274][ T8229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.575'. [ 164.063867][ T8229] netlink: 244 bytes leftover after parsing attributes in process `syz.2.575'. [ 164.220569][ T8238] netlink: 72 bytes leftover after parsing attributes in process `syz.1.577'. [ 164.379754][ T8244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.578'. [ 164.455639][ T8244] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 164.588179][ T7943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.788275][ T7943] veth0_vlan: entered promiscuous mode [ 164.843291][ T8261] netlink: 20 bytes leftover after parsing attributes in process `syz.4.584'. [ 164.856292][ T7943] veth1_vlan: entered promiscuous mode [ 165.125756][ T7943] veth0_macvtap: entered promiscuous mode [ 165.153718][ T7943] veth1_macvtap: entered promiscuous mode [ 165.246023][ T7943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.286205][ T7943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.324026][ T7943] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.338846][ T7943] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.349119][ T7943] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.365786][ T7943] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.578481][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.593865][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.655497][ T8292] netlink: 72 bytes leftover after parsing attributes in process `syz.2.591'. [ 165.730176][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.747969][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.869949][ T8297] netlink: 'syz.1.594': attribute type 3 has an invalid length. [ 165.893350][ T8297] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.594'. [ 165.925845][ T8299] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 165.952547][ T8299] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 166.188268][ T8304] bridge0: port 1(vlan2) entered blocking state [ 166.200220][ T8304] bridge0: port 1(vlan2) entered disabled state [ 166.242375][ T8304] vlan2: entered allmulticast mode [ 166.247200][ T8306] netlink: 'syz.4.596': attribute type 1 has an invalid length. [ 166.247537][ T8304] bridge0: entered allmulticast mode [ 166.287260][ T8304] vlan2: left allmulticast mode [ 166.296073][ T8306] netlink: 220 bytes leftover after parsing attributes in process `syz.4.596'. [ 166.311298][ T8304] bridge0: left allmulticast mode [ 166.332414][ T8308] netlink: 12 bytes leftover after parsing attributes in process `syz.1.597'. [ 166.342856][ T8309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.596'. [ 166.373107][ T8306] netlink: 'syz.4.596': attribute type 1 has an invalid length. [ 166.749120][ T8327] sctp: [Deprecated]: syz.4.602 (pid 8327) Use of struct sctp_assoc_value in delayed_ack socket option. [ 166.749120][ T8327] Use struct sctp_sack_info instead [ 167.050175][ T7404] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.222242][ T7404] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.499807][ T7404] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.557569][ T7404] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.695047][ T7404] bridge_slave_1: left allmulticast mode [ 167.700771][ T7404] bridge_slave_1: left promiscuous mode [ 167.707474][ T7404] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.718378][ T7404] bridge_slave_0: left allmulticast mode [ 167.724957][ T7404] bridge_slave_0: left promiscuous mode [ 167.730732][ T7404] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.075584][ T8348] xt_CT: No such helper "syz0" [ 168.461118][ T7404] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.477011][ T7404] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.488400][ T7404] bond0 (unregistering): Released all slaves [ 168.569304][ T5856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 168.579782][ T5856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 168.588324][ T5856] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 168.598437][ T5856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 168.644831][ T5856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 168.918516][ T8378] netlink: 'syz.4.616': attribute type 1 has an invalid length. [ 168.983334][ T8378] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 169.023940][ T8378] 8021q: adding VLAN 0 to HW filter on device bond2 [ 169.035886][ T49] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 169.055843][ T8382] __nla_validate_parse: 7 callbacks suppressed [ 169.055859][ T8382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.617'. [ 169.173080][ T79] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 169.274555][ T8392] netlink: 68 bytes leftover after parsing attributes in process `syz.2.620'. [ 169.311297][ T8392] netlink: 20 bytes leftover after parsing attributes in process `syz.2.620'. [ 169.398270][ T7404] hsr_slave_0: left promiscuous mode [ 169.404678][ T8398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.415700][ T7404] hsr_slave_1: left promiscuous mode [ 169.428270][ T7404] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.436468][ T7404] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.455287][ T7404] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.465841][ T7404] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.507149][ T7404] veth1_macvtap: left promiscuous mode [ 169.518185][ T7404] veth0_macvtap: left promiscuous mode [ 169.525623][ T7404] veth1_vlan: left promiscuous mode [ 169.536817][ T7404] veth0_vlan: left promiscuous mode [ 170.003288][ T7404] team0 (unregistering): Port device team_slave_1 removed [ 170.047791][ T7404] team0 (unregistering): Port device team_slave_0 removed [ 170.729681][ T5838] Bluetooth: hci1: command tx timeout [ 170.945240][ T8418] netlink: 48 bytes leftover after parsing attributes in process `syz.2.625'. [ 170.952559][ T8364] chnl_net:caif_netlink_parms(): no params data found [ 171.022432][ T8419] netlink: 228 bytes leftover after parsing attributes in process `syz.2.625'. [ 171.166432][ T8423] netlink: 'syz.1.627': attribute type 12 has an invalid length. [ 171.174365][ T8423] netlink: 132 bytes leftover after parsing attributes in process `syz.1.627'. [ 171.208821][ T8428] netlink: 24 bytes leftover after parsing attributes in process `syz.2.628'. [ 171.220259][ T8427] netlink: 24 bytes leftover after parsing attributes in process `syz.2.628'. [ 171.314490][ T8427] netlink: 12 bytes leftover after parsing attributes in process `syz.2.628'. [ 171.340763][ T8433] x_tables: duplicate entry at hook 2 [ 171.364656][ T8435] xt_CT: You must specify a L4 protocol and not use inversions on it [ 171.366078][ T8364] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.433251][ T8364] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.440595][ T8364] bridge_slave_0: entered allmulticast mode [ 171.494879][ T8364] bridge_slave_0: entered promiscuous mode [ 171.519010][ T8364] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.568734][ T8364] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.595843][ T8364] bridge_slave_1: entered allmulticast mode [ 171.618782][ T8364] bridge_slave_1: entered promiscuous mode [ 171.729312][ T8364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.778173][ T8364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.918444][ T8364] team0: Port device team_slave_0 added [ 171.984298][ T8457] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 171.998719][ T8364] team0: Port device team_slave_1 added [ 172.131533][ T8459] netlink: 4 bytes leftover after parsing attributes in process `syz.2.637'. [ 172.173089][ T8463] sch_fq: defrate 0 ignored. [ 172.188900][ T8465] tipc: Enabling of bearer rejected, failed to enable media [ 172.249608][ T8364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.266462][ T8364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.326245][ T8364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.344119][ T8364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.375402][ T8364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.408925][ T8364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.750582][ T8485] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 172.766346][ T8364] hsr_slave_0: entered promiscuous mode [ 172.775120][ T8490] netlink: 'syz.1.645': attribute type 10 has an invalid length. [ 172.786256][ T8364] hsr_slave_1: entered promiscuous mode [ 172.802185][ T5856] Bluetooth: hci1: command tx timeout [ 172.805828][ T8364] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 172.815477][ T8364] Cannot create hsr debugfs directory [ 172.835773][ T8492] netlink: 'syz.2.644': attribute type 12 has an invalid length. [ 172.849016][ T8492] netlink: 'syz.2.644': attribute type 29 has an invalid length. [ 172.857554][ T8492] netlink: 'syz.2.644': attribute type 1 has an invalid length. [ 172.872475][ T8490] bridge_slave_1: left allmulticast mode [ 172.879406][ T8490] bridge_slave_1: left promiscuous mode [ 172.886524][ T8490] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.958625][ T8490] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 173.606478][ T8364] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 173.617787][ T8364] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 173.634361][ T8364] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 173.650099][ T8364] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 173.865099][ T8364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.918827][ T8364] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.944799][ T1340] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.952133][ T1340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.009838][ T2972] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.017104][ T2972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.680762][ T8560] __nla_validate_parse: 9 callbacks suppressed [ 174.680783][ T8560] netlink: 60 bytes leftover after parsing attributes in process `syz.0.664'. [ 174.732617][ T8560] unsupported nlmsg_type 40 [ 174.760724][ T8364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.801739][ T5838] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 174.847470][ T8565] netlink: 12 bytes leftover after parsing attributes in process `syz.2.666'. [ 174.865720][ T8364] veth0_vlan: entered promiscuous mode [ 174.881784][ T5838] Bluetooth: hci1: command tx timeout [ 174.893209][ T8364] veth1_vlan: entered promiscuous mode [ 174.913746][ T8565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.666'. [ 174.970241][ T8364] veth0_macvtap: entered promiscuous mode [ 175.009974][ T8364] veth1_macvtap: entered promiscuous mode [ 175.108682][ T8364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.149739][ T8364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.174232][ T8364] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.196298][ T8364] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.221577][ T8364] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.251978][ T8364] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.344804][ T8578] IPVS: Unknown mcast interface: pim6reg1 [ 175.380561][ T8581] netlink: 40 bytes leftover after parsing attributes in process `syz.4.670'. [ 175.380776][ T8578] netlink: 68 bytes leftover after parsing attributes in process `syz.2.668'. [ 175.580268][ T2972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.605485][ T2972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.699147][ T1340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.733222][ T1340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.027269][ T8595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.674'. [ 176.038966][ T8595] batadv0: Device is already in use. [ 176.340675][ T8613] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 176.433159][ T8617] netlink: 16 bytes leftover after parsing attributes in process `syz.0.682'. [ 176.537985][ T8622] vxcan1 speed is unknown, defaulting to 1000 [ 176.573143][ T8622] vxcan1 speed is unknown, defaulting to 1000 [ 176.587961][ T8622] vxcan1 speed is unknown, defaulting to 1000 [ 176.788078][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.008922][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.031719][ T8622] infiniband syz2: set active [ 177.041560][ T8622] infiniband syz2: added vxcan1 [ 177.047059][ T5924] vxcan1 speed is unknown, defaulting to 1000 [ 177.099753][ T8622] RDS/IB: syz2: added [ 177.105158][ T8622] smc: adding ib device syz2 with port count 1 [ 177.112140][ T8622] smc: ib device syz2 port 1 has pnetid [ 177.119621][ T5924] vxcan1 speed is unknown, defaulting to 1000 [ 177.128556][ T8622] vxcan1 speed is unknown, defaulting to 1000 [ 177.339814][ T8622] vxcan1 speed is unknown, defaulting to 1000 [ 177.389519][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.507599][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.562683][ T8622] vxcan1 speed is unknown, defaulting to 1000 [ 177.736096][ T13] bridge_slave_1: left allmulticast mode [ 177.750745][ T13] bridge_slave_1: left promiscuous mode [ 177.758629][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.776385][ T13] bridge_slave_0: left allmulticast mode [ 177.785067][ T13] bridge_slave_0: left promiscuous mode [ 177.792050][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.878993][ T8637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.689'. [ 177.897678][ T8639] netlink: 516 bytes leftover after parsing attributes in process `syz.4.690'. [ 178.357793][ T5856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 178.368455][ T5856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 178.377425][ T5856] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 178.403752][ T5856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 178.419325][ T5856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 178.506567][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.518361][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.529775][ T13] bond0 (unregistering): Released all slaves [ 178.688875][ T8622] vxcan1 speed is unknown, defaulting to 1000 [ 178.893540][ T8655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.693'. [ 179.162218][ T8669] openvswitch: netlink: IP tunnel dst address not specified [ 179.283816][ T8664] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.297182][ T8664] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.304500][ T8664] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.455343][ T8681] netlink: 'syz.1.699': attribute type 21 has an invalid length. [ 179.540224][ T8686] xt_ecn: cannot match TCP bits for non-tcp packets [ 179.570677][ T8685] netlink: 'syz.4.700': attribute type 2 has an invalid length. [ 179.584402][ T8645] vxcan1 speed is unknown, defaulting to 1000 [ 179.786726][ T8695] __nla_validate_parse: 3 callbacks suppressed [ 179.786746][ T8695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.704'. [ 180.103802][ T8707] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 180.136005][ T8707] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.143890][ T8707] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.168433][ T8710] netlink: 12 bytes leftover after parsing attributes in process `syz.1.709'. [ 180.297641][ T8622] vxcan1 speed is unknown, defaulting to 1000 [ 180.484284][ T5838] Bluetooth: hci1: command tx timeout [ 180.581824][ T7404] batman_adv: batadv1: IGMP Querier appeared [ 180.587913][ T7404] batman_adv: batadv1: MLD Querier appeared [ 180.881318][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 180.958314][ T8622] vxcan1 speed is unknown, defaulting to 1000 [ 181.067921][ T8645] chnl_net:caif_netlink_parms(): no params data found [ 181.263180][ T8748] netlink: 88 bytes leftover after parsing attributes in process `syz.1.721'. [ 181.272372][ T8748] netlink: 24 bytes leftover after parsing attributes in process `syz.1.721'. [ 181.281995][ T8748] netlink: 24 bytes leftover after parsing attributes in process `syz.1.721'. [ 181.323267][ T8748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.721'. [ 182.561928][ T5838] Bluetooth: hci1: command tx timeout [ 184.343062][ T13] hsr_slave_0: left promiscuous mode [ 184.425276][ T13] hsr_slave_1: left promiscuous mode [ 184.452251][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.483891][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.535400][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.582800][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.650681][ T5838] Bluetooth: hci1: command tx timeout [ 184.670362][ T8762] netlink: 16 bytes leftover after parsing attributes in process `syz.1.725'. [ 184.910080][ T8768] openvswitch: netlink: Missing key (keys=40, expected=80) [ 184.910824][ T13] veth1_macvtap: left promiscuous mode [ 184.924259][ T13] veth0_macvtap: left promiscuous mode [ 184.929965][ T13] veth1_vlan: left promiscuous mode [ 184.936108][ T13] veth0_vlan: left promiscuous mode [ 185.052895][ T79] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 185.776056][ T13] team0 (unregistering): Port device team_slave_1 removed [ 185.819342][ T13] team0 (unregistering): Port device team_slave_0 removed [ 185.927810][ T8790] xt_socket: unknown flags 0x50 [ 186.238311][ T8754] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 186.251933][ T8754] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.447700][ T8794] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 186.462631][ T8794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.734'. [ 186.505556][ T8794] netlink: 4 bytes leftover after parsing attributes in process `syz.1.734'. [ 186.566794][ T8794] netlink: 'syz.1.734': attribute type 12 has an invalid length. [ 186.578904][ T8794] netlink: 'syz.1.734': attribute type 11 has an invalid length. [ 186.628976][ T8799] gre2: entered promiscuous mode [ 186.645629][ T8799] gre2: entered allmulticast mode [ 186.709849][ T8645] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.721198][ T5838] Bluetooth: hci1: command tx timeout [ 186.730218][ T8645] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.743345][ T8645] bridge_slave_0: entered allmulticast mode [ 186.752546][ T8645] bridge_slave_0: entered promiscuous mode [ 186.761840][ T8645] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.769181][ T8645] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.777116][ T8645] bridge_slave_1: entered allmulticast mode [ 186.817853][ T8645] bridge_slave_1: entered promiscuous mode [ 187.016477][ T8645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.057293][ T8645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.225109][ T8821] tipc: Enabling of bearer rejected, media not registered [ 187.276490][ T8827] netlink: 12 bytes leftover after parsing attributes in process `syz.2.742'. [ 187.317118][ T8645] team0: Port device team_slave_0 added [ 187.415780][ T8645] team0: Port device team_slave_1 added [ 187.515914][ T8838] netlink: 36 bytes leftover after parsing attributes in process `syz.2.744'. [ 187.527869][ T8645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.537085][ T8645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.577806][ T8645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.600161][ T8645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.610174][ T8645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.670255][ T8645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.853703][ T8645] hsr_slave_0: entered promiscuous mode [ 187.860522][ T8645] hsr_slave_1: entered promiscuous mode [ 187.922793][ T8645] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 187.930418][ T8645] Cannot create hsr debugfs directory [ 187.946586][ T8820] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 187.990821][ T8860] netlink: 36 bytes leftover after parsing attributes in process `syz.1.750'. [ 188.188771][ T8871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.755'. [ 188.303410][ T8876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.758'. [ 188.434658][ T8879] netlink: 80 bytes leftover after parsing attributes in process `syz.4.756'. [ 188.527173][ T8890] xt_l2tp: v2 tid > 0xffff: 150994944 [ 189.096693][ T8912] netlink: 32 bytes leftover after parsing attributes in process `syz.4.765'. [ 189.188072][ T8918] vxcan1 speed is unknown, defaulting to 1000 [ 189.527506][ T8645] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 189.658289][ T8645] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 189.694224][ T8645] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 189.724313][ T8937] netlink: 20 bytes leftover after parsing attributes in process `syz.1.773'. [ 189.824880][ T8935] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.895822][ T8645] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 190.122361][ T8935] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.305256][ T8935] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.510549][ T8935] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.629875][ T8969] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.641550][ T8969] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.755271][ T8969] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.766692][ T8969] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.809491][ T8645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.836306][ T8935] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.877389][ T8969] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.915559][ T8969] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.956683][ T8935] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.987447][ T8935] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.022868][ T8969] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.033423][ T8969] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.054339][ T8645] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.073985][ T8935] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.093604][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.100849][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.173763][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.181101][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.257392][ T8980] netlink: 'syz.2.782': attribute type 5 has an invalid length. [ 191.315046][ T8645] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 191.394123][ T8969] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.446604][ T8969] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.533562][ T8969] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.566768][ T8969] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.631762][ T8969] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.650257][ T8969] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.677507][ T8984] netlink: 'syz.2.783': attribute type 10 has an invalid length. [ 191.708710][ T8969] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.737437][ T8992] __nla_validate_parse: 1 callbacks suppressed [ 191.737458][ T8992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.784'. [ 191.745996][ T8969] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.056813][ T8645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.105874][ T9003] netlink: 32 bytes leftover after parsing attributes in process `syz.2.787'. [ 192.188674][ T9003] netlink: 36 bytes leftover after parsing attributes in process `syz.2.787'. [ 192.227208][ T9003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.787'. [ 192.255275][ T8645] veth0_vlan: entered promiscuous mode [ 192.293264][ T8645] veth1_vlan: entered promiscuous mode [ 192.391807][ T8645] veth0_macvtap: entered promiscuous mode [ 192.401110][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 192.417579][ T8645] veth1_macvtap: entered promiscuous mode [ 192.419328][ T9011] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 192.478653][ T8645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.545047][ T8645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.576711][ T8645] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.610539][ T8645] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.634637][ T8645] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.643520][ T9018] netlink: 12 bytes leftover after parsing attributes in process `syz.1.794'. [ 192.650091][ T8645] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.702487][ T9016] netlink: 576 bytes leftover after parsing attributes in process `syz.2.793'. [ 192.744034][ T9020] netlink: 'syz.0.795': attribute type 1 has an invalid length. [ 192.752465][ T9020] netlink: 244 bytes leftover after parsing attributes in process `syz.0.795'. [ 192.764635][ T9020] netlink: 28 bytes leftover after parsing attributes in process `syz.0.795'. [ 192.779776][ T9014] syz_tun: entered allmulticast mode [ 192.864780][ T9021] team0: entered promiscuous mode [ 192.878331][ T9021] team_slave_0: entered promiscuous mode [ 192.905207][ T9021] team_slave_1: entered promiscuous mode [ 192.922734][ T9017] team0: left promiscuous mode [ 192.927788][ T9017] team_slave_0: left promiscuous mode [ 192.949987][ T9017] team_slave_1: left promiscuous mode [ 193.080372][ T9028] netlink: 32 bytes leftover after parsing attributes in process `syz.0.797'. [ 193.144879][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.202809][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.323748][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.338771][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.407049][ T9013] syz_tun: left allmulticast mode [ 193.413946][ T9040] xt_CT: You must specify a L4 protocol and not use inversions on it [ 193.589985][ T9047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.803'. [ 194.135655][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.245870][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.330085][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.341173][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.371364][ T9059] syz.0.809 (9059) used greatest stack depth: 17992 bytes left [ 194.506540][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.687957][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.816008][ T49] bridge_slave_1: left allmulticast mode [ 194.822515][ T49] bridge_slave_1: left promiscuous mode [ 194.828918][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.839352][ T49] bridge_slave_0: left allmulticast mode [ 194.846565][ T49] bridge_slave_0: left promiscuous mode [ 194.852447][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.168750][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.180592][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.196975][ T49] bond0 (unregistering): Released all slaves [ 195.434964][ T9076] team0: Device gtp1 is of different type [ 195.457446][ T9078] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 195.757674][ T9084] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 195.787496][ T9085] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 195.847748][ T9092] netlink: 'syz.2.816': attribute type 5 has an invalid length. [ 195.993660][ T5856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 196.006194][ T5856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 196.016184][ T5856] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 196.032223][ T5856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 196.042878][ T5856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 196.058883][ T9101] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 196.077968][ T9100] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 197.353986][ T9092] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 197.364021][ T9092] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 197.372825][ T9092] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 197.381644][ T9092] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 197.389860][ T9092] geneve2: entered promiscuous mode [ 197.396305][ T9092] geneve2: entered allmulticast mode [ 197.660543][ T9097] vxcan1 speed is unknown, defaulting to 1000 [ 197.827413][ T9112] __nla_validate_parse: 6 callbacks suppressed [ 197.827477][ T9112] netlink: 20 bytes leftover after parsing attributes in process `syz.1.822'. [ 197.929912][ T9116] netlink: 'syz.2.823': attribute type 10 has an invalid length. [ 197.944040][ T9116] team0: Device ipvlan1 failed to register rx_handler [ 198.094415][ T5838] Bluetooth: hci1: command tx timeout [ 198.250188][ T9124] netlink: 16 bytes leftover after parsing attributes in process `syz.4.826'. [ 198.273081][ T9124] netlink: 92 bytes leftover after parsing attributes in process `syz.4.826'. [ 198.307401][ T49] hsr_slave_0: left promiscuous mode [ 198.321638][ T49] hsr_slave_1: left promiscuous mode [ 198.348360][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.402082][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.430669][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.471054][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.526994][ T49] veth1_macvtap: left promiscuous mode [ 198.546086][ T49] veth0_macvtap: left promiscuous mode [ 198.571838][ T49] veth1_vlan: left promiscuous mode [ 198.588989][ T49] veth0_vlan: left promiscuous mode [ 198.871762][ T9147] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 198.878554][ T9147] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 199.559788][ T49] team0 (unregistering): Port device team_slave_1 removed [ 199.604599][ T49] team0 (unregistering): Port device team_slave_0 removed [ 200.161585][ T5838] Bluetooth: hci1: command tx timeout [ 200.728766][ T9221] netlink: 20 bytes leftover after parsing attributes in process `syz.2.844'. [ 200.740517][ T9221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.844'. [ 200.905206][ T9221] veth5: entered allmulticast mode [ 201.167438][ T9230] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 201.192275][ T9230] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 201.200750][ T9230] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 201.227142][ T9230] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 201.289787][ T9230] geneve2: entered promiscuous mode [ 201.300625][ T9239] netlink: 60 bytes leftover after parsing attributes in process `syz.0.849'. [ 201.320953][ T9230] geneve2: entered allmulticast mode [ 201.377660][ T9097] chnl_net:caif_netlink_parms(): no params data found [ 201.632918][ T9255] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 201.696607][ T9248] netlink: 14374 bytes leftover after parsing attributes in process `syz.4.851'. [ 201.738162][ T9248] tipc: Can't bind to reserved service type 1 [ 201.984276][ T9097] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.026315][ T9097] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.055844][ T9097] bridge_slave_0: entered allmulticast mode [ 202.073679][ T9097] bridge_slave_0: entered promiscuous mode [ 202.092420][ T9097] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.099612][ T9097] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.112820][ T9097] bridge_slave_1: entered allmulticast mode [ 202.120780][ T9097] bridge_slave_1: entered promiscuous mode [ 202.248420][ T5838] Bluetooth: hci1: command tx timeout [ 202.315844][ T9275] netlink: 'syz.2.858': attribute type 1 has an invalid length. [ 202.319160][ T9097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.426867][ T9283] netlink: 44 bytes leftover after parsing attributes in process `syz.4.856'. [ 202.482896][ T9275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.528917][ T9097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.588333][ T9273] netlink: 180 bytes leftover after parsing attributes in process `syz.4.856'. [ 202.620633][ T9276] ip6erspan0: entered promiscuous mode [ 202.737473][ T9097] team0: Port device team_slave_0 added [ 202.773824][ T9097] team0: Port device team_slave_1 added [ 202.966727][ T9295] gtp1: entered promiscuous mode [ 203.003985][ T9295] gtp1: entered allmulticast mode [ 203.016460][ T9097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.051816][ T9097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.133180][ T9097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.163209][ T9303] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 203.174362][ T9097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.198011][ T9306] netlink: 12 bytes leftover after parsing attributes in process `syz.2.866'. [ 203.213115][ T9097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.293783][ T9097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.643769][ T9314] bridge0: port 2(gretap0) entered blocking state [ 203.676564][ T9314] bridge0: port 2(gretap0) entered disabled state [ 203.694241][ T9318] IPVS: length: 141 != 8 [ 203.712472][ T9314] gretap0: entered allmulticast mode [ 203.719912][ T9314] gretap0: entered promiscuous mode [ 203.853982][ T9097] hsr_slave_0: entered promiscuous mode [ 203.900780][ T9097] hsr_slave_1: entered promiscuous mode [ 203.928344][ T9097] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.965028][ T9097] Cannot create hsr debugfs directory [ 204.325871][ T5838] Bluetooth: hci1: command tx timeout [ 205.431779][ T9351] netlink: 36 bytes leftover after parsing attributes in process `syz.1.879'. [ 205.739851][ T9368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.882'. [ 205.779583][ T9097] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 205.782944][ T9368] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 205.831661][ T9368] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.852125][ T9097] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 205.883125][ T9097] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 205.918055][ T9097] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 206.103760][ T9392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.885'. [ 206.126320][ T9392] netlink: 12 bytes leftover after parsing attributes in process `syz.1.885'. [ 206.150353][ T9392] netlink: 'syz.1.885': attribute type 14 has an invalid length. [ 206.199172][ T9398] netlink: 'syz.0.888': attribute type 5 has an invalid length. [ 206.268000][ T9097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.349147][ T9097] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.376584][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.383821][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.418054][ T9410] xt_addrtype: ipv6 does not support BROADCAST matching [ 206.430753][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.438009][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.595333][ T9416] ipvlan1: mtu less than device minimum [ 206.751789][ T9421] netlink: 24 bytes leftover after parsing attributes in process `syz.1.895'. [ 206.864541][ T9428] netlink: 16 bytes leftover after parsing attributes in process `syz.2.897'. [ 207.058627][ T9441] netlink: 12 bytes leftover after parsing attributes in process `syz.0.899'. [ 207.112648][ T9441] netlink: 516 bytes leftover after parsing attributes in process `syz.0.899'. [ 207.188623][ T9097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.268543][ T9450] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 207.290031][ T9448] vxcan1: tx address claim with different name [ 207.332897][ T9448] netlink: 16 bytes leftover after parsing attributes in process `syz.2.901'. [ 207.333482][ T9097] veth0_vlan: entered promiscuous mode [ 207.367615][ T9097] veth1_vlan: entered promiscuous mode [ 207.480355][ T9097] veth0_macvtap: entered promiscuous mode [ 207.504104][ T9097] veth1_macvtap: entered promiscuous mode [ 207.613953][ T9097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.652781][ T9097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.669967][ T9097] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.680481][ T9097] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.694734][ T9097] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.704981][ T9097] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.878187][ T9468] netlink: 'syz.1.909': attribute type 1 has an invalid length. [ 207.897920][ T9468] netlink: 'syz.1.909': attribute type 2 has an invalid length. [ 207.950107][ T1340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.001473][ T1340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.074123][ T1340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.089461][ T1340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.204031][ T9479] __nla_validate_parse: 6 callbacks suppressed [ 208.204050][ T9479] netlink: 24 bytes leftover after parsing attributes in process `syz.4.913'. [ 208.520104][ T9489] vxcan1 speed is unknown, defaulting to 1000 [ 208.833825][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.058721][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.199165][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.299227][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.453801][ T49] bridge_slave_1: left allmulticast mode [ 209.459531][ T49] bridge_slave_1: left promiscuous mode [ 209.466514][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.476578][ T49] bridge_slave_0: left allmulticast mode [ 209.483684][ T49] bridge_slave_0: left promiscuous mode [ 209.489531][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.823227][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.844646][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.858859][ T49] bond0 (unregistering): Released all slaves [ 210.060591][ T9516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.922'. [ 210.081838][ T9515] netlink: 20 bytes leftover after parsing attributes in process `syz.0.921'. [ 210.101194][ T9515] netlink: 120 bytes leftover after parsing attributes in process `syz.0.921'. [ 210.182800][ T9515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.921'. [ 210.700567][ T9538] netlink: 12 bytes leftover after parsing attributes in process `syz.0.930'. [ 210.855025][ T9544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.932'. [ 210.872899][ T5854] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 210.888329][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 210.899287][ T5854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 210.901756][ T9549] netlink: 'syz.1.933': attribute type 1 has an invalid length. [ 210.918906][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 210.927373][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 211.014719][ T9550] bridge_slave_0: entered promiscuous mode [ 211.032109][ T9550] bridge_slave_0: entered allmulticast mode [ 211.073050][ T9549] 8021q: adding VLAN 0 to HW filter on device bond1 [ 211.093890][ T9551] ip6erspan0: entered promiscuous mode [ 211.157643][ T49] hsr_slave_0: left promiscuous mode [ 211.196236][ T49] hsr_slave_1: left promiscuous mode [ 211.225710][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.242249][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.258500][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.281888][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.308074][ T9562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.935'. [ 211.335763][ T9562] netlink: 12 bytes leftover after parsing attributes in process `syz.0.935'. [ 211.349829][ T49] veth1_macvtap: left promiscuous mode [ 211.375076][ T49] veth0_macvtap: left promiscuous mode [ 211.392229][ T49] veth1_vlan: left promiscuous mode [ 211.404502][ T49] veth0_vlan: left promiscuous mode [ 211.762109][ T5854] Bluetooth: hci2: command 0x0406 tx timeout [ 211.763644][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 211.895500][ T49] team0 (unregistering): Port device team_slave_1 removed [ 211.936784][ T49] team0 (unregistering): Port device team_slave_0 removed [ 212.310343][ T9556] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 212.336441][ T9565] netlink: 'syz.2.938': attribute type 1 has an invalid length. [ 212.371880][ T9567] bond0: option ad_select: unable to set because the bond device is up [ 212.465133][ T9545] vxcan1 speed is unknown, defaulting to 1000 [ 212.851853][ T9587] x_tables: duplicate underflow at hook 3 [ 212.875856][ T9587] x_tables: duplicate underflow at hook 3 [ 213.042445][ T5856] Bluetooth: hci1: command tx timeout [ 213.277862][ T9610] netlink: 176908 bytes leftover after parsing attributes in process `syz.4.953'. [ 213.289606][ T9610] openvswitch: netlink: Message has 5 unknown bytes. [ 213.330787][ T9611] netlink: 12 bytes leftover after parsing attributes in process `syz.1.952'. [ 214.015949][ T9627] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 214.022609][ T9627] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 214.277981][ T9545] chnl_net:caif_netlink_parms(): no params data found [ 214.355609][ T9642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.961'. [ 214.745532][ T9668] netlink: 'syz.2.969': attribute type 11 has an invalid length. [ 214.804772][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 214.890531][ T9545] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.899608][ T9545] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.910186][ T9545] bridge_slave_0: entered allmulticast mode [ 214.929122][ T9545] bridge_slave_0: entered promiscuous mode [ 214.973393][ T9678] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 214.988564][ T9683] netlink: 'syz.0.971': attribute type 21 has an invalid length. [ 214.989133][ T9545] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.997973][ T9676] netlink: 'syz.0.971': attribute type 21 has an invalid length. [ 215.004100][ T9681] netlink: 28 bytes leftover after parsing attributes in process `syz.4.973'. [ 215.004122][ T9681] netlink: 32 bytes leftover after parsing attributes in process `syz.4.973'. [ 215.009282][ T9545] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.013821][ T9683] IPv6: NLM_F_CREATE should be specified when creating new route [ 215.021820][ T9545] bridge_slave_1: entered allmulticast mode [ 215.024003][ T9545] bridge_slave_1: entered promiscuous mode [ 215.121775][ T5856] Bluetooth: hci1: command tx timeout [ 215.169269][ T9678] ip6gretap0: entered promiscuous mode [ 215.214876][ T9545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.229311][ T9545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.273974][ T9692] x_tables: duplicate underflow at hook 1 [ 215.305835][ T9690] netlink: 324 bytes leftover after parsing attributes in process `syz.0.974'. [ 215.478301][ T9545] team0: Port device team_slave_0 added [ 215.499905][ T9698] syz_tun: entered allmulticast mode [ 215.526872][ T9702] netlink: 20 bytes leftover after parsing attributes in process `syz.0.979'. [ 215.550466][ T9545] team0: Port device team_slave_1 added [ 215.568979][ T9698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.977'. [ 215.618480][ T9702] ieee802154 phy0 wpan0: encryption failed: -22 [ 215.638197][ T9706] netlink: 'syz.4.980': attribute type 1 has an invalid length. [ 215.652432][ T9706] netlink: 224 bytes leftover after parsing attributes in process `syz.4.980'. [ 215.684645][ T9545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.695088][ T9545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.738924][ T9545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.842241][ T9545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.849521][ T9545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.863347][ T9687] infiniband syz0: set down [ 215.881171][ T9545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.896458][ T9687] infiniband syz0: added bond_slave_1 [ 215.925079][ T9706] netlink: 'syz.4.980': attribute type 1 has an invalid length. [ 215.939986][ T9706] netlink: 224 bytes leftover after parsing attributes in process `syz.4.980'. [ 215.969957][ T9706] netlink: 'syz.4.980': attribute type 1 has an invalid length. [ 215.980837][ T9687] RDS/IB: syz0: added [ 215.986269][ T9687] smc: adding ib device syz0 with port count 1 [ 215.995597][ T9706] netlink: 'syz.4.980': attribute type 1 has an invalid length. [ 216.002554][ T9687] smc: ib device syz0 port 1 has pnetid [ 216.005079][ T9706] netlink: 'syz.4.980': attribute type 1 has an invalid length. [ 216.018213][ T9706] netlink: 'syz.4.980': attribute type 1 has an invalid length. [ 216.026784][ T9706] netlink: 'syz.4.980': attribute type 1 has an invalid length. [ 216.079274][ T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 216.090801][ T49] ------------[ cut here ]------------ [ 216.102364][ T49] UBSAN: array-index-out-of-bounds in net/mac80211/scan.c:1223:5 [ 216.113380][ T49] index 11 is out of range for type 'struct ieee80211_channel *[] __counted_by(n_channels)' (aka 'struct ieee80211_channel *[]') [ 216.127743][ T49] CPU: 1 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted 6.16.0-rc1-syzkaller-00102-g5466491c9e33 #0 PREEMPT(full) [ 216.127771][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 216.127785][ T49] Workqueue: events_unbound cfg80211_wiphy_work [ 216.127883][ T49] Call Trace: [ 216.127893][ T49] [ 216.127902][ T49] dump_stack_lvl+0x189/0x250 [ 216.127942][ T49] ? __pfx_dump_stack_lvl+0x10/0x10 [ 216.127981][ T49] ? __pfx__printk+0x10/0x10 [ 216.128028][ T49] ubsan_epilogue+0xa/0x40 [ 216.128058][ T49] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 216.128103][ T49] ieee80211_request_ibss_scan+0x600/0x8b0 [ 216.128155][ T49] ieee80211_ibss_work+0xd85/0x1060 [ 216.128187][ T49] ? lockdep_hardirqs_on+0x9c/0x150 [ 216.128222][ T49] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 216.128254][ T49] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 216.128282][ T49] ? kcov_remote_stop+0x17e/0x6d0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 216.128311][ T49] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 216.128346][ T49] ? skb_dequeue+0x10e/0x150 [ 216.128376][ T49] ? ieee80211_iface_work+0xcd4/0xfe0 [ 216.128411][ T49] ? ieee80211_iface_work+0xf39/0xfe0 [ 216.128456][ T49] cfg80211_wiphy_work+0x2dc/0x460 [ 216.128480][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 216.128514][ T49] process_scheduled_works+0xae1/0x17b0 [ 216.128579][ T49] ? __pfx_process_scheduled_works+0x10/0x10 [ 216.128633][ T49] worker_thread+0x8a0/0xda0 [ 216.128698][ T49] kthread+0x70e/0x8a0 [ 216.128726][ T49] ? __pfx_worker_thread+0x10/0x10 [ 216.128759][ T49] ? __pfx_kthread+0x10/0x10 [ 216.128786][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 216.128814][ T49] ? lockdep_hardirqs_on+0x9c/0x150 [ 216.128843][ T49] ? __pfx_kthread+0x10/0x10 [ 216.128869][ T49] ret_from_fork+0x3fc/0x770 [ 216.128903][ T49] ? __pfx_ret_from_fork+0x10/0x10 [ 216.128942][ T49] ? __switch_to_asm+0x39/0x70 [ 216.128961][ T49] ? __switch_to_asm+0x33/0x70 [ 216.128982][ T49] ? __pfx_kthread+0x10/0x10 [ 216.129014][ T49] ret_from_fork_asm+0x1a/0x30 [ 216.129056][ T49] [ 216.129064][ T49] ---[ end trace ]--- [ 216.494250][ T49] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 216.501520][ T49] CPU: 1 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted 6.16.0-rc1-syzkaller-00102-g5466491c9e33 #0 PREEMPT(full) [ 216.513540][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 216.523632][ T49] Workqueue: events_unbound cfg80211_wiphy_work [ 216.529925][ T49] Call Trace: [ 216.533246][ T49] [ 216.536212][ T49] dump_stack_lvl+0x99/0x250 [ 216.540856][ T49] ? __asan_memcpy+0x40/0x70 [ 216.545489][ T49] ? __pfx_dump_stack_lvl+0x10/0x10 [ 216.550738][ T49] ? __pfx__printk+0x10/0x10 [ 216.555402][ T49] panic+0x2db/0x790 [ 216.559352][ T49] ? __pfx_panic+0x10/0x10 [ 216.563815][ T49] ? _printk+0xcf/0x120 [ 216.568108][ T49] ? __pfx__printk+0x10/0x10 [ 216.572742][ T49] check_panic_on_warn+0x89/0xb0 [ 216.577706][ T49] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 216.583459][ T49] ieee80211_request_ibss_scan+0x600/0x8b0 [ 216.590184][ T49] ieee80211_ibss_work+0xd85/0x1060 [ 216.595418][ T49] ? lockdep_hardirqs_on+0x9c/0x150 [ 216.600644][ T49] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 216.606577][ T49] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 216.612929][ T49] ? kcov_remote_stop+0x17e/0x6d0 [ 216.617976][ T49] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 216.623637][ T49] ? skb_dequeue+0x10e/0x150 [ 216.628251][ T49] ? ieee80211_iface_work+0xcd4/0xfe0 [ 216.633651][ T49] ? ieee80211_iface_work+0xf39/0xfe0 [ 216.639053][ T49] cfg80211_wiphy_work+0x2dc/0x460 [ 216.644183][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 216.649928][ T49] process_scheduled_works+0xae1/0x17b0 [ 216.655527][ T49] ? __pfx_process_scheduled_works+0x10/0x10 [ 216.661545][ T49] worker_thread+0x8a0/0xda0 [ 216.666184][ T49] kthread+0x70e/0x8a0 [ 216.670275][ T49] ? __pfx_worker_thread+0x10/0x10 [ 216.675587][ T49] ? __pfx_kthread+0x10/0x10 [ 216.680191][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 216.685406][ T49] ? lockdep_hardirqs_on+0x9c/0x150 [ 216.690632][ T49] ? __pfx_kthread+0x10/0x10 [ 216.695239][ T49] ret_from_fork+0x3fc/0x770 [ 216.699889][ T49] ? __pfx_ret_from_fork+0x10/0x10 [ 216.705038][ T49] ? __switch_to_asm+0x39/0x70 [ 216.709821][ T49] ? __switch_to_asm+0x33/0x70 [ 216.714601][ T49] ? __pfx_kthread+0x10/0x10 [ 216.719203][ T49] ret_from_fork_asm+0x1a/0x30 [ 216.723994][ T49] [ 216.727344][ T49] Kernel Offset: disabled [ 216.731739][ T49] Rebooting in 86400 seconds..