last executing test programs: 1m3.284666149s ago: executing program 3 (id=9): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000025c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x48005) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="180000000c140103000000000000000004000100000000008e721fa0f7af7076d4c375613f0176deb0315c30"], 0x18}}, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000080)) unshare(0x20000400) pselect6(0x40, &(0x7f0000000000)={0x10, 0x4, 0x80000000000, 0x3, 0x0, 0x0, 0x0, 0x8f}, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRES16=r4], 0x18}}, 0x801) recvmsg$unix(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000300)=""/252, 0xfc}, {&(0x7f0000000400)=""/211, 0xfffffffffffffebf}, {&(0x7f0000000500)=""/224, 0xffffffffffffff97}, {&(0x7f0000000600)=""/196, 0xc4}, {&(0x7f0000000700)=""/111, 0x6f}, {&(0x7f0000000a00)=""/115, 0x6c}, {&(0x7f0000000780)=""/39, 0x27}, {&(0x7f00000007c0)=""/241, 0xf1}, {&(0x7f00000008c0)}], 0x9}, 0x40010102) bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e00000092000000010100001e01000090000000", @ANYRES32, @ANYBLOB="030000000000000000000000000000952e142aff4dca92144e0ac773e600", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000002000000000000000300"/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) 1m2.31464529s ago: executing program 3 (id=9): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000025c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x48005) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="180000000c140103000000000000000004000100000000008e721fa0f7af7076d4c375613f0176deb0315c30"], 0x18}}, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000080)) unshare(0x20000400) pselect6(0x40, &(0x7f0000000000)={0x10, 0x4, 0x80000000000, 0x3, 0x0, 0x0, 0x0, 0x8f}, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRES16=r4], 0x18}}, 0x801) recvmsg$unix(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000300)=""/252, 0xfc}, {&(0x7f0000000400)=""/211, 0xfffffffffffffebf}, {&(0x7f0000000500)=""/224, 0xffffffffffffff97}, {&(0x7f0000000600)=""/196, 0xc4}, {&(0x7f0000000700)=""/111, 0x6f}, {&(0x7f0000000a00)=""/115, 0x6c}, {&(0x7f0000000780)=""/39, 0x27}, {&(0x7f00000007c0)=""/241, 0xf1}, {&(0x7f00000008c0)}], 0x9}, 0x40010102) bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e00000092000000010100001e01000090000000", @ANYRES32, @ANYBLOB="030000000000000000000000000000952e142aff4dca92144e0ac773e600", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000002000000000000000300"/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) 49.88473965s ago: executing program 3 (id=9): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000025c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x48005) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="180000000c140103000000000000000004000100000000008e721fa0f7af7076d4c375613f0176deb0315c30"], 0x18}}, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000080)) unshare(0x20000400) pselect6(0x40, &(0x7f0000000000)={0x10, 0x4, 0x80000000000, 0x3, 0x0, 0x0, 0x0, 0x8f}, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRES16=r4], 0x18}}, 0x801) recvmsg$unix(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000300)=""/252, 0xfc}, {&(0x7f0000000400)=""/211, 0xfffffffffffffebf}, {&(0x7f0000000500)=""/224, 0xffffffffffffff97}, {&(0x7f0000000600)=""/196, 0xc4}, {&(0x7f0000000700)=""/111, 0x6f}, {&(0x7f0000000a00)=""/115, 0x6c}, {&(0x7f0000000780)=""/39, 0x27}, {&(0x7f00000007c0)=""/241, 0xf1}, {&(0x7f00000008c0)}], 0x9}, 0x40010102) bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e00000092000000010100001e01000090000000", @ANYRES32, @ANYBLOB="030000000000000000000000000000952e142aff4dca92144e0ac773e600", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000002000000000000000300"/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) 39.22016059s ago: executing program 2 (id=368): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2, 0x0, @void, @value}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r4, 0xffffffffffffffff, 0x2, 0x0, 0x4000, @void, @value}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x9) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r6}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x3ed}, [], {0x14, 0x3ed}}, 0x28}}, 0x0) getsockopt$bt_BT_DEFER_SETUP(r1, 0x12, 0x7, 0x0, &(0x7f0000000040)) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="d80000001900ebcd802eeb83db4cb9040a1d080006003c09e8fc55a10a0015000600142603600e1208001200060004012800090008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4ecbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a60881ca3f2ee419ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x90) unshare(0x20040600) pipe(&(0x7f0000000240)={0xffffffffffffffff}) tee(r8, r8, 0x200, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000000)={0x7, 'vlan1\x00', {0xf}, 0xd3c}) socket$pppl2tp(0x18, 0x1, 0x1) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2, 0x0, @void, @value}, 0x10) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r4, 0xffffffffffffffff, 0x2, 0x0, 0x4000, @void, @value}, 0x10) (async) socket$netlink(0x10, 0x3, 0x9) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r6}, 0x10) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x3ed}, [], {0x14, 0x3ed}}, 0x28}}, 0x0) (async) getsockopt$bt_BT_DEFER_SETUP(r1, 0x12, 0x7, 0x0, &(0x7f0000000040)) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="d80000001900ebcd802eeb83db4cb9040a1d080006003c09e8fc55a10a0015000600142603600e1208001200060004012800090008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4ecbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a60881ca3f2ee419ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x90) (async) unshare(0x20040600) (async) pipe(&(0x7f0000000240)) (async) tee(r8, r8, 0x200, 0x0) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000000)={0x7, 'vlan1\x00', {0xf}, 0xd3c}) (async) 38.99206153s ago: executing program 2 (id=370): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000780)={'vxcan1\x00', 0x0}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000200)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7ece1e40ad8871461ab0800", @ANYRES64=r2, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000080)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000080000018160000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000ffe0f505b703000000000000850000002a000000bf0900000000000055090100000000589500000000000001bf91000000000000b7020000020000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb, @void, @value}, 0x90) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r7 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x42}}, 0xe8) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 38.544051787s ago: executing program 2 (id=374): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, 0x0, 0x0) (async) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, 0x0, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000180)=0x200000, 0x4) (async) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000180)=0x200000, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, 0x0, 0x0) bind$xdp(r1, &(0x7f00000002c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000500)={0x0}, 0x20) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x8000a0ffffffff, 0x0, 0x24040004}, 0x0) 37.45206986s ago: executing program 3 (id=9): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000025c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x48005) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="180000000c140103000000000000000004000100000000008e721fa0f7af7076d4c375613f0176deb0315c30"], 0x18}}, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000080)) unshare(0x20000400) pselect6(0x40, &(0x7f0000000000)={0x10, 0x4, 0x80000000000, 0x3, 0x0, 0x0, 0x0, 0x8f}, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRES16=r4], 0x18}}, 0x801) recvmsg$unix(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000300)=""/252, 0xfc}, {&(0x7f0000000400)=""/211, 0xfffffffffffffebf}, {&(0x7f0000000500)=""/224, 0xffffffffffffff97}, {&(0x7f0000000600)=""/196, 0xc4}, {&(0x7f0000000700)=""/111, 0x6f}, {&(0x7f0000000a00)=""/115, 0x6c}, {&(0x7f0000000780)=""/39, 0x27}, {&(0x7f00000007c0)=""/241, 0xf1}, {&(0x7f00000008c0)}], 0x9}, 0x40010102) bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e00000092000000010100001e01000090000000", @ANYRES32, @ANYBLOB="030000000000000000000000000000952e142aff4dca92144e0ac773e600", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000002000000000000000300"/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) 25.960654475s ago: executing program 2 (id=374): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, 0x0, 0x0) (async) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, 0x0, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000180)=0x200000, 0x4) (async) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000180)=0x200000, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, 0x0, 0x0) bind$xdp(r1, &(0x7f00000002c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000500)={0x0}, 0x20) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x8000a0ffffffff, 0x0, 0x24040004}, 0x0) 25.507401766s ago: executing program 3 (id=9): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000025c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x48005) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="180000000c140103000000000000000004000100000000008e721fa0f7af7076d4c375613f0176deb0315c30"], 0x18}}, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000080)) unshare(0x20000400) pselect6(0x40, &(0x7f0000000000)={0x10, 0x4, 0x80000000000, 0x3, 0x0, 0x0, 0x0, 0x8f}, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRES16=r4], 0x18}}, 0x801) recvmsg$unix(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000300)=""/252, 0xfc}, {&(0x7f0000000400)=""/211, 0xfffffffffffffebf}, {&(0x7f0000000500)=""/224, 0xffffffffffffff97}, {&(0x7f0000000600)=""/196, 0xc4}, {&(0x7f0000000700)=""/111, 0x6f}, {&(0x7f0000000a00)=""/115, 0x6c}, {&(0x7f0000000780)=""/39, 0x27}, {&(0x7f00000007c0)=""/241, 0xf1}, {&(0x7f00000008c0)}], 0x9}, 0x40010102) bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e00000092000000010100001e01000090000000", @ANYRES32, @ANYBLOB="030000000000000000000000000000952e142aff4dca92144e0ac773e600", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000002000000000000000300"/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) 12.509412056s ago: executing program 2 (id=374): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, 0x0, 0x0) (async) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, 0x0, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000180)=0x200000, 0x4) (async) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000180)=0x200000, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, 0x0, 0x0) bind$xdp(r1, &(0x7f00000002c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000500)={0x0}, 0x20) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x8000a0ffffffff, 0x0, 0x24040004}, 0x0) 10.142991684s ago: executing program 3 (id=9): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000025c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x48005) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="180000000c140103000000000000000004000100000000008e721fa0f7af7076d4c375613f0176deb0315c30"], 0x18}}, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000080)) unshare(0x20000400) pselect6(0x40, &(0x7f0000000000)={0x10, 0x4, 0x80000000000, 0x3, 0x0, 0x0, 0x0, 0x8f}, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRES16=r4], 0x18}}, 0x801) recvmsg$unix(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000300)=""/252, 0xfc}, {&(0x7f0000000400)=""/211, 0xfffffffffffffebf}, {&(0x7f0000000500)=""/224, 0xffffffffffffff97}, {&(0x7f0000000600)=""/196, 0xc4}, {&(0x7f0000000700)=""/111, 0x6f}, {&(0x7f0000000a00)=""/115, 0x6c}, {&(0x7f0000000780)=""/39, 0x27}, {&(0x7f00000007c0)=""/241, 0xf1}, {&(0x7f00000008c0)}], 0x9}, 0x40010102) bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e00000092000000010100001e01000090000000", @ANYRES32, @ANYBLOB="030000000000000000000000000000952e142aff4dca92144e0ac773e600", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000002000000000000000300"/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) 2.916037414s ago: executing program 0 (id=609): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'batadv0\x00', &(0x7f0000000100)=@ethtool_gstrings={0x1b, 0x1}}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) close(0x4) socket$kcm(0xa, 0x1, 0x106) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x38, r2, 0x2, 0x0, 0x0, {0x38}, [{{@pci={{0x5}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x38}, 0x1, 0x2}, 0xc800) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.swap.events\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @multicast1}}, 0x8}, &(0x7f0000000040)=0x90) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r4, 0x101}, 0x8) 2.260135484s ago: executing program 4 (id=613): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@float={0xd, 0x0, 0x0, 0x10, 0x10}, @float={0x2, 0x0, 0x0, 0x10, 0xc}, @decl_tag={0x2, 0x0, 0x0, 0x11, 0x1, 0x9}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000000)=""/29, 0x44, 0x1d, 0x0, 0x9, 0x0, @void, @value}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x7f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = epoll_create1(0x0) r3 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) close(r4) socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000080)={0xa002a008}) 2.081749023s ago: executing program 4 (id=614): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x36, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x36, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x100000, 0x4) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) (async) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000040), 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) close(r1) (async) close(r1) 2.000022419s ago: executing program 0 (id=615): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x9, 0x3, 0x318, 0x0, 0xffffffff, 0xffffffff, 0x128, 0xffffffff, 0x248, 0xffffffff, 0xffffffff, 0x248, 0xffffffff, 0x3, &(0x7f00000000c0), {[{{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@unspec=@cluster={{0x30}, {0x4, 0x2, 0x2, 0x1}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x0, 0x2}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x8, 0xfffffff7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c) sendmmsg$inet(r1, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="3aae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdf05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf59b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248f086346ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8998c15c3b6302a5f25d910937afd90b1c76e6d7cb59006419331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecaff0f0000ff91deb3efa91762cdecfbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10e6df49ff8e5cbcbd68e11ed0b967add11410dc2e34f08dbfaf8eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049585d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a387549bcabe88684c4dbf0da9a5212f3dbc8d1d20250856691243b203d7edd4d3cc89a38a6c80fdb1229a01044af7aaecb20d5570ebf24b30bbc6dfc3f70d85cd9f0d60ebd8fedd161d199d9997a0e2d18d1c99bc7158564e0ddb4673055de196535d706d142e1dc7d404583923cb1b286c030000004ac7e605d93652dc48ff690894405a0b6abc3c4d0f6a16c0a95c0508bd7eeffcd1da0b17f7701448658864b429e9472edf00"/737, 0x2e1}, {&(0x7f0000000800)="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", 0x29f}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x20000840) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0xa, 0x73, 0x3, 0xc84, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x0, 0x1c, @void, @value, @void, @value}, 0x48) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'tunl0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000100000000000000000007400000a2bc3d10f84fa6e02a2df6cd830d39271d1781e6239a461e8e1b1bf5a5ca3291", @ANYRES32=r4, @ANYBLOB="00000000000000001c0012800900010069706970000000000c00028006000f0007000000"], 0x3c}}, 0x0) 1.754075859s ago: executing program 4 (id=617): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="05"], 0x9) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x66, 0x2, 0x8, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340)="035af6", 0x20000000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x3bb, 0x5, 0x7f, 0x16, r2, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000140), &(0x7f0000000200)=""/137, 0x2}, 0x20) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000140)=ANY=[], 0xb) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025400100000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000014010380100100800800034000000002030106", @ANYRES64=r1, @ANYRESDEC=0x0, @ANYRES8, @ANYRESDEC=r1], 0x1c4}}, 0x0) 1.648180608s ago: executing program 0 (id=618): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x44, r1, 0x1, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=@newtaction={0x8c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x78, 0x1, [@m_tunnel_key={0x74, 0x1, 0x0, 0x0, {{0xf}, {0x44, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0xe, @ipv4={'\x00', '\xff\xff', @private}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) 1.575601384s ago: executing program 4 (id=619): r0 = socket(0x21, 0x2, 0xa) getsockopt$nfc_llcp(r0, 0x110, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r3, 0x10d, 0xb9, &(0x7f0000000000), &(0x7f0000000240)=0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r4, 0x10f, 0x4) sendmsg$IPSET_CMD_GET_BYNAME(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000000e06020900000000000000000700000a0900020073797a31000000000900020073797a32000000000900020073797a3200000000050001000700000900020073797a310000000000"], 0x4c}, 0x1, 0x0, 0x0, 0xc5}, 0x804) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000000)=@newtaction={0xb0, 0x31, 0x12f, 0x0, 0x0, {}, [{0x9c, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x3}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}, @m_ctinfo={0x68, 0x1b, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xc}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x2}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xffffff21}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xf800}]}, {0x19, 0x6, "0391dddb8810bda8256a151b4e008b5f4c8d505270"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0xb0}}, 0x0) 1.530283978s ago: executing program 0 (id=620): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r1, 0x0, 0x2f, 0x0, 0x40) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0x9}, 0x1c) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x6, @dev={0xac, 0x14, 0x14, 0x38}, 0x4e21, 0x0, 'ovf\x00', 0x11, 0x5, 0x55}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x0, 0x7f}, 0x2c) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], &(0x7f0000000040)='syzkaller\x00', 0x22d6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000000080)=0x5) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000180)=0x8, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaa8aaa0180c2000002000060e40000000000000000000000002200fe800000350ab67600"/56, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5008000090780000"], 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000050000000200000000100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000fbffffff00000000000000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000001a00)=ANY=[@ANYBLOB="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", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$inet(0x2, 0x3, 0x1) setsockopt$inet_opts(r6, 0x0, 0xb, &(0x7f0000000000)="89", 0x1) syz_emit_ethernet(0x7e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaa8aaaaffffffffffff08004500007000000000000190782c1e0000000000000000010000ac14140aac1414bb44340001ac1414aa000000007f00000100000000ac1414fc00000000ac14140000000000ac14140000000000ffffffff00000000860a000000000002060200"/126], 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r7, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) sendmmsg$inet(r7, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)='2', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000005c0)="b8", 0x1}, {&(0x7f0000000600)='Z', 0x1}, {&(0x7f0000000700)="c8", 0x1}, {&(0x7f0000000800)="ed", 0x1}, {&(0x7f00000008c0)="d0", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000c40)='&', 0x1}, {&(0x7f0000000d00)="8f", 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000f80)="990e0c0eadc3fb46ba6b74c1b7707224ccfcd08e2e784324433c7fb152c89305f6cabd7938862e09a185cf4f06335008ee96b94e4e7d77591cd4d001524e1c8b7e8eff6132dff8bb6fb86532ceac76c39f2f19b9a55957ba8d6ae96a6f73624a4918af718cbb9732e5eb58c13a976cfbce791d3bb06871722c5dadbf3fa9a151d1", 0x81}, {&(0x7f0000001040)='\f', 0x1}], 0x218}}, {{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000001380)="be", 0x1}], 0x1}}], 0x5, 0x4008440) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000004c000000060a0b04000000000000000002000000200004801c0001800b0001006c756d67656e00000c000280080001400000001b0900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x74}}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x4) 1.456159757s ago: executing program 1 (id=621): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="06000000040000000800000001"], 0x48) r0 = socket$netlink(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x8001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200b274c7c8f0b9, 0x0, 0xc4a3}, 0x50) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="140100001400b99f000000000000c04b06"], 0x114}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000010001fff00000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000088520300500012800b000100697036746e6c00004000028006000f0000000000140003002001000000000000000000000000000004001300050004"], 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x4000080) 1.370133582s ago: executing program 1 (id=622): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000c000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000007d000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000000)) shutdown(r2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.27428995s ago: executing program 4 (id=623): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x80}, [@IFLA_BROADCAST={0xa, 0x2, @local}]}, 0x2c}}, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 32) r4 = socket(0xa, 0x1, 0x0) close(r4) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x24, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000003c00)=0x90) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0x806000) (async) ioctl$FS_IOC_RESVSP(r5, 0x4030582a, &(0x7f0000000380)={0x0, 0x0, 0x10, 0x7}) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40200080}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000084}, 0x40040004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async, rerun: 64) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x191}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0x6}]}}}]}, 0x4c}}, 0x0) (rerun: 64) 1.164146203s ago: executing program 1 (id=624): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x108, 0x1, &(0x7f0000000180)="e2", 0xb, 0x1, 0xc45, 0x1012, 0x3, 0x0, 0x6, 'syz0\x00'}) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r2, 0x10d, 0xe, &(0x7f0000000940), &(0x7f0000000080)=0x4) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x13, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6e, 0x0, 0x0, 0x0, 0x4}, [@alu={0x7, 0x1, 0x5, 0x8, 0x7, 0xffffffffffffffe2, 0x8}, @jmp={0x5, 0x1, 0x8, 0x9fe898075bfb5876, 0x4, 0x50, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xe}]}, &(0x7f0000000040)='GPL\x00', 0x9, 0x39, &(0x7f00000000c0)=""/57, 0x41000, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x3, 0x6, 0x401, 0x2}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000140)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x5, 0x5, 0x0, 0x3}, {0x3, 0x4, 0xe, 0x1}, {0x2, 0x3, 0xb, 0x7}], 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='f2fs_truncate_partial_nodes\x00', r3, 0x0, 0x1}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001780)=@deltclass={0x24, 0x29, 0x10, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0x6}, {0xfff1, 0xb}, {0x10, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000810}, 0x10) 1.051626959s ago: executing program 0 (id=625): r0 = socket(0x1000000010, 0x80002, 0x0) socket(0xa, 0x3, 0x6) (async) r1 = socket(0xa, 0x3, 0x6) ioctl$AUTOFS_IOC_READY(r1, 0x8901, 0x20000002) (async) ioctl$AUTOFS_IOC_READY(r1, 0x8901, 0x20000002) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4004890) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ppoll(&(0x7f0000000000)=[{r3, 0x10}, {r3, 0xc004}], 0x2, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) (async) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) listen(r3, 0x0) shutdown(r3, 0x0) (async) shutdown(r3, 0x0) socket(0x29, 0x3, 0x4000) (async) socket(0x29, 0x3, 0x4000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000080)={0x6, 'lo\x00', {0x80}, 0x2}) socket$packet(0x11, 0x2, 0x300) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x7fffefe1}], 0x2}, 0x0) (async) sendmsg$alg(r5, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x7fffefe1}], 0x2}, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r6, &(0x7f0000005380)=[{&(0x7f0000002c80)=@in={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000002cc0)='\"', 0x1}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000840000000000000000006d"], 0x18, 0x8004}], 0x1, 0x804c0c4) r7 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r7, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@deltfilter={0x34, 0x2c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) 976.643197ms ago: executing program 1 (id=626): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000340)={r0}, 0x8) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINK={0x8, 0x5, r2}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000200), &(0x7f00000002c0)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xec) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x3d}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000ec0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a001700000000040037000900030001632564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5, 0x0, 0x1}, 0x18) mmap(&(0x7f0000000000/0x400000)=nil, 0x1e9000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) 892.12334ms ago: executing program 4 (id=627): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) connect$inet(r0, &(0x7f0000000280)={0x1e, 0x4e24, @empty}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x34, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040047}, 0x8000) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x191}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc}]}}}]}, 0x40}}, 0x0) 833.3835ms ago: executing program 0 (id=628): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2022) ioctl$SIOCSIFHWADDR(r1, 0xff0a, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000010000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 576.727451ms ago: executing program 1 (id=629): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="400000003f000b000000000000000000010000000c00020005000000000000001d0001"], 0x40}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x14, 0x0, 0x5, 0x101}, 0x14}}, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xb, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, 0x0}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x92, 0xff, 0x84, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r3}, 0x38) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000240)="070000000100", 0x6) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r5, 0x104, 0x3, &(0x7f00000006c0)=0x5, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="073db88000f3393f3cd38b3ad63391ffce9a1a2046029059f1545ffd3553e97f5d770541024b688f096707d140712adffdec02c2dc2b1ecd9d02ab47af3c9c4cbc3f6835f27b50940a4bbcf129c02d831b75e3aadf2f416f7ce6bb10e38c8ca9844dd905388398025848f340aa15cea683b34dfd1d5bc38e326a4c5a0fe22d58a79085fbd28c5c54a319ee3f159e42ac0b39d9599545028e9243d23e02f830cf94d6961c3a8a5cd34763e4b5b0ebc47a57a98e4fb914e7880151dd1e4eeabca639c8bc633d52df1744fe4d", 0xcb}, {&(0x7f0000000040)="864cc6e258e96ec210aaeb9f0e4101b116113217783ec50277d0951bd96f78b58bc671cc11cc6b3d1fe68b164726bd6efa4c66f4dbfc452d", 0x38}, {&(0x7f00000000c0)="ed1b422ed17ca376d8280059981266404393868ce83e83d23a2ffebb22d3a0a558b9bc85583be9a2f980bc058ee21068afffcc3f1ce354c77e159e7ed93064e045bd449f0723f03f3e6f6040b3ee911b9155fc8bf67db619de84588dee7569c702973f7f07a94b495696b51f5eebbc33cfde8c2e9f5866b72ce97fe79463876218d595ef15231c8dc9e87ce269e75daa24bd4583c76d0aa63579dc713c1cf665aee073c3bcd586e0ae1611753c", 0xad}], 0x3, &(0x7f0000000380)="9fd3cee5b5a7ebac1ee3b151e959307770bd2002111a8cc1193c2d4999b49f66cba9d91928e203298049e53de22e829372a8fa2308234609ac3d89cb16a156a02cec410b57ba78bb9a2d5e0a5383e0", 0x4f, 0x4}, 0x40800) syz_genetlink_get_family_id$team(&(0x7f0000000000), r6) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r8) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x38, r9, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x38}}, 0x40080) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r7) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r8, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, r12, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x20008000) 59.849984ms ago: executing program 1 (id=630): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="020300090e000000000000000000000005000600000000000a0000000000000000000000000000000000fdffe000000100000000000000000200010000000000000000030000000005000500000000000a00000000000000ff0100000000000000000000000000010000000000000000"], 0x70}, 0x1, 0x7}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000480)="b9ff03008cebded7bd4cd5660b0c", 0x0, 0x5, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socket$kcm(0x10, 0x2, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2b0, 0x138, 0x0, 0x148, 0x138, 0x148, 0x218, 0x240, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@connlabel={{0x28}, {0x2000}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'ip6erspan0\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) socket$inet6(0xa, 0x3, 0x7) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f0000000080)={0x11, 0x800, r5, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) r6 = socket(0x200000000000011, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x2, 0x250, [], 0x2, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000100000000000000000000000000000002000000000ffffffff0000000000000000000000000000050000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000000000000000697036677265300000000000000000007465616d30000000000000000000000076657468305f746f5f626f6e6400000076657468305f746f5f626f6e64000000aaaaaaaaaa0000000000000024ffff"]}, 0x131) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x60, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0xa, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast1}}}}]}]}, 0x60}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) connect$can_bcm(r6, &(0x7f0000000700)={0x1d, r9}, 0x10) bind$packet(r6, &(0x7f0000000080)={0x11, 0x800, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000680)=ANY=[@ANYRES16=r2], 0x0) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r10, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044004) getsockname$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000780)=0x14) socket(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b40)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xb27f}, @TCA_FQ_PIE_LIMIT={0x8}]}}]}, 0x44}}, 0x0) 0s ago: executing program 2 (id=374): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, 0x0, 0x0) (async) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, 0x0, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000180)=0x200000, 0x4) (async) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000180)=0x200000, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, 0x0, 0x0) bind$xdp(r1, &(0x7f00000002c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000500)={0x0}, 0x20) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x8000a0ffffffff, 0x0, 0x24040004}, 0x0) kernel console output (not intermixed with test programs): [ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.996852][ T5841] Cannot create hsr debugfs directory [ 73.004739][ T5850] team0: Port device team_slave_0 added [ 73.011355][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.018735][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.045088][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.058105][ T5843] team0: Port device team_slave_1 added [ 73.083192][ T5850] team0: Port device team_slave_1 added [ 73.141027][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.148552][ T5855] Bluetooth: hci3: command tx timeout [ 73.153904][ T5859] Bluetooth: hci2: command tx timeout [ 73.154237][ T5855] Bluetooth: hci0: command tx timeout [ 73.165643][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.191921][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.203785][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.211345][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.227455][ T5859] Bluetooth: hci1: command tx timeout [ 73.238000][ T5855] Bluetooth: hci4: command tx timeout [ 73.243248][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.276413][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.283452][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.310553][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.322490][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.329655][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.355809][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.398219][ T5849] hsr_slave_0: entered promiscuous mode [ 73.404486][ T5849] hsr_slave_1: entered promiscuous mode [ 73.411290][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.419464][ T5849] Cannot create hsr debugfs directory [ 73.465327][ T5843] hsr_slave_0: entered promiscuous mode [ 73.473113][ T5843] hsr_slave_1: entered promiscuous mode [ 73.479878][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.487630][ T5843] Cannot create hsr debugfs directory [ 73.548381][ T5850] hsr_slave_0: entered promiscuous mode [ 73.554872][ T5850] hsr_slave_1: entered promiscuous mode [ 73.565098][ T5850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.573266][ T5850] Cannot create hsr debugfs directory [ 73.861075][ T5842] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.874618][ T5842] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.897697][ T5842] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.920456][ T5842] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.963460][ T5850] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.983009][ T5850] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.005410][ T5850] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.015090][ T5850] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.081229][ T5841] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.093059][ T5841] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.102683][ T5841] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.134850][ T5841] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.164971][ T5849] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.195148][ T5849] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.206771][ T5849] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.231747][ T5849] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.299112][ T5843] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.328902][ T5843] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.339985][ T5843] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.362018][ T5843] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.398650][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.472565][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.488969][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.511400][ T3532] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.518721][ T3532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.541872][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.571331][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.582271][ T3532] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.589571][ T3532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.633546][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.640704][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.652087][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.659355][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.677188][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.709926][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.759268][ T3532] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.766486][ T3532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.784720][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.812437][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.819565][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.830203][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.837433][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.882765][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.889999][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.911506][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.997549][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.035613][ T3499] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.042794][ T3499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.068825][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.075940][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.228243][ T5855] Bluetooth: hci2: command tx timeout [ 75.233811][ T5855] Bluetooth: hci3: command tx timeout [ 75.241316][ T5855] Bluetooth: hci0: command tx timeout [ 75.281948][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.308251][ T5859] Bluetooth: hci4: command tx timeout [ 75.309769][ T5855] Bluetooth: hci1: command tx timeout [ 75.390356][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.450829][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.488375][ T5842] veth0_vlan: entered promiscuous mode [ 75.543847][ T5842] veth1_vlan: entered promiscuous mode [ 75.585235][ T5841] veth0_vlan: entered promiscuous mode [ 75.623650][ T5842] veth0_macvtap: entered promiscuous mode [ 75.653190][ T5841] veth1_vlan: entered promiscuous mode [ 75.664121][ T5842] veth1_macvtap: entered promiscuous mode [ 75.705871][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.730185][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.755748][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.768236][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.779930][ T5842] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.792036][ T5842] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.803632][ T5842] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.812607][ T5842] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.831857][ T5841] veth0_macvtap: entered promiscuous mode [ 75.859248][ T5841] veth1_macvtap: entered promiscuous mode [ 75.948583][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.959393][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.973828][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.001385][ T5849] veth0_vlan: entered promiscuous mode [ 76.010563][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.022517][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.034939][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.062413][ T5841] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.071614][ T5841] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.080867][ T5841] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.091034][ T5841] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.120374][ T5843] veth0_vlan: entered promiscuous mode [ 76.145003][ T5849] veth1_vlan: entered promiscuous mode [ 76.171513][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.181109][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.185435][ T5843] veth1_vlan: entered promiscuous mode [ 76.269708][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.281098][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.331472][ T5849] veth0_macvtap: entered promiscuous mode [ 76.359087][ T5843] veth0_macvtap: entered promiscuous mode [ 76.364164][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.368788][ T5843] veth1_macvtap: entered promiscuous mode [ 76.390205][ T5850] veth0_vlan: entered promiscuous mode [ 76.404572][ T5849] veth1_macvtap: entered promiscuous mode [ 76.417951][ T5850] veth1_vlan: entered promiscuous mode [ 76.427829][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.435725][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.456766][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.467720][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.478669][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.489654][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.501473][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.520827][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.538064][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.553464][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.565855][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.582408][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.609701][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.629418][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.670227][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.686693][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.696815][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.707367][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.720520][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.734098][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.746700][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.757791][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.768839][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.779189][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.795580][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.814435][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.825904][ T5849] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.844340][ T5849] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.853559][ T5849] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.865843][ T5849] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.956615][ T3532] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.965869][ T3532] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.975810][ T5843] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.991883][ T5843] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.000938][ T5843] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.010581][ T5843] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.023910][ T5850] veth0_macvtap: entered promiscuous mode [ 77.065846][ T5850] veth1_macvtap: entered promiscuous mode [ 77.194747][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.211101][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.238041][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.248989][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.259676][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.270238][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.280337][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.290890][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.302130][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.310590][ T5855] Bluetooth: hci0: command tx timeout [ 77.310602][ T5859] Bluetooth: hci3: command tx timeout [ 77.351493][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.363423][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.373456][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.384033][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.394480][ T5859] Bluetooth: hci1: command tx timeout [ 77.398927][ T5859] Bluetooth: hci4: command tx timeout [ 77.400215][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.417210][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.428333][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.439135][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.450910][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.459029][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.462736][ T5850] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.481514][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.491011][ T5850] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.500928][ T5850] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.510467][ T5850] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.582815][ T1121] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.746827][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.754724][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.813692][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.841318][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.866013][ T5855] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.886943][ T5855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.898973][ T1121] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.917488][ T5855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.927982][ T5855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.935887][ T5855] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.944677][ T5855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.003816][ T5949] netlink: 332 bytes leftover after parsing attributes in process `syz.0.11'. [ 78.024915][ T5949] netlink: 104 bytes leftover after parsing attributes in process `syz.0.11'. [ 78.037173][ T5949] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11'. [ 78.067658][ T1121] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.097445][ T3532] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.107233][ T3532] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.147635][ T5953] Zero length message leads to an empty skb [ 78.224518][ T1121] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.282918][ T5955] netlink: 256 bytes leftover after parsing attributes in process `syz.0.12'. [ 78.301792][ T3532] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.321230][ T3532] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.359380][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.386217][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.457884][ T5961] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.656681][ T1121] bridge_slave_1: left allmulticast mode [ 78.662562][ T1121] bridge_slave_1: left promiscuous mode [ 78.729658][ T1121] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.847898][ T1121] bridge_slave_0: left allmulticast mode [ 78.853634][ T1121] bridge_slave_0: left promiscuous mode [ 78.867891][ T1121] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.387337][ T5859] Bluetooth: hci3: command tx timeout [ 79.387652][ T5855] Bluetooth: hci0: command tx timeout [ 79.470540][ T5855] Bluetooth: hci4: command tx timeout [ 79.470580][ T5859] Bluetooth: hci1: command tx timeout [ 79.623155][ T1121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.637191][ T1121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.648517][ T1121] bond0 (unregistering): Released all slaves [ 79.721139][ T6017] warning: `syz.4.20' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 79.974177][ T5946] chnl_net:caif_netlink_parms(): no params data found [ 80.027540][ T5859] Bluetooth: hci2: command tx timeout [ 80.915100][ T1121] hsr_slave_0: left promiscuous mode [ 80.929178][ T6070] netlink: 24 bytes leftover after parsing attributes in process `syz.4.31'. [ 80.943088][ T1121] hsr_slave_1: left promiscuous mode [ 80.965061][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.976515][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.992500][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.006789][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.041089][ T1121] veth1_macvtap: left promiscuous mode [ 81.047324][ T1121] veth0_macvtap: left promiscuous mode [ 81.052988][ T1121] veth1_vlan: left promiscuous mode [ 81.062396][ T1121] veth0_vlan: left promiscuous mode [ 81.172661][ T6079] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.677805][ T1121] team0 (unregistering): Port device team_slave_1 removed [ 81.722205][ T1121] team0 (unregistering): Port device team_slave_0 removed [ 82.072502][ T5946] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.079859][ T5946] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.089279][ T5946] bridge_slave_0: entered allmulticast mode [ 82.100508][ T5946] bridge_slave_0: entered promiscuous mode [ 82.106716][ T5859] Bluetooth: hci2: command tx timeout [ 82.254766][ T5946] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.265408][ T5946] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.276358][ T5946] bridge_slave_1: entered allmulticast mode [ 82.283577][ T5946] bridge_slave_1: entered promiscuous mode [ 82.464265][ T5946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.572133][ T5946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.600008][ T6095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.36'. [ 82.837312][ T5946] team0: Port device team_slave_0 added [ 82.884714][ T5946] team0: Port device team_slave_1 added [ 82.972866][ T6097] netlink: 28 bytes leftover after parsing attributes in process `syz.4.37'. [ 83.008282][ T6097] netlink: 28 bytes leftover after parsing attributes in process `syz.4.37'. [ 83.037414][ T6097] dummy0: entered promiscuous mode [ 83.043557][ T6097] batadv_slave_1: entered promiscuous mode [ 83.070925][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.083794][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.112372][ T6116] netlink: 'syz.0.40': attribute type 32 has an invalid length. [ 83.117050][ T5946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.188442][ T6115] netlink: 'syz.0.40': attribute type 1 has an invalid length. [ 83.208674][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.215676][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.326662][ T5946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.331174][ T6120] netlink: 248 bytes leftover after parsing attributes in process `syz.0.42'. [ 83.451707][ T6122] bridge1: entered promiscuous mode [ 83.464627][ T6122] bridge1: entered allmulticast mode [ 83.489120][ T6122] team0: Port device bridge1 added [ 83.506752][ T5946] hsr_slave_0: entered promiscuous mode [ 83.521607][ T5946] hsr_slave_1: entered promiscuous mode [ 84.108496][ T6155] x_tables: duplicate underflow at hook 1 [ 84.187861][ T5859] Bluetooth: hci2: command tx timeout [ 84.253806][ T6158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.51'. [ 84.863239][ T6189] netlink: 'syz.4.57': attribute type 39 has an invalid length. [ 84.893954][ T6189] netlink: 4 bytes leftover after parsing attributes in process `syz.4.57'. [ 84.960998][ T6191] netlink: 88 bytes leftover after parsing attributes in process `syz.2.58'. [ 84.986634][ T6189] netlink: 12 bytes leftover after parsing attributes in process `syz.4.57'. [ 85.283740][ T6196] netlink: 'syz.1.60': attribute type 10 has an invalid length. [ 85.400813][ T6216] tipc: Can't bind to reserved service type 1 [ 85.556522][ T6214] netlink: 'syz.0.61': attribute type 1 has an invalid length. [ 85.575749][ T6205] netlink: 'syz.4.63': attribute type 39 has an invalid length. [ 85.666237][ T6206] netlink: 'syz.4.63': attribute type 39 has an invalid length. [ 85.831117][ T5946] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.915390][ T5946] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.979404][ T5946] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.015137][ T5946] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.030287][ T6232] netlink: 36 bytes leftover after parsing attributes in process `syz.2.71'. [ 86.045723][ T6230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.69'. [ 86.075414][ T6230] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.093365][ T6230] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.118108][ T6230] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.135618][ T6230] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.178003][ T6240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.70'. [ 86.200582][ T6234] netlink: 'syz.4.70': attribute type 1 has an invalid length. [ 86.276278][ T5859] Bluetooth: hci2: command tx timeout [ 86.310411][ T6239] netlink: 16 bytes leftover after parsing attributes in process `syz.2.72'. [ 86.506040][ T5946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.524295][ T5946] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.561165][ T5946] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 86.571727][ T5946] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.595609][ T3532] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.602844][ T3532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.700720][ T3532] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.707916][ T3532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.838294][ T6259] netlink: 'syz.4.74': attribute type 10 has an invalid length. [ 86.904269][ T6259] syz_tun: entered promiscuous mode [ 86.959709][ T6259] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 87.007365][ T60] cfg80211: failed to load regulatory.db [ 87.085019][ T6266] netlink: 'syz.4.74': attribute type 6 has an invalid length. [ 87.182924][ T5946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.394059][ T5946] veth0_vlan: entered promiscuous mode [ 87.449426][ T5946] veth1_vlan: entered promiscuous mode [ 87.589313][ T5946] veth0_macvtap: entered promiscuous mode [ 87.670588][ T5946] veth1_macvtap: entered promiscuous mode [ 87.830086][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.895589][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.944921][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.995295][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.031547][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.056596][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.073954][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.117859][ T6313] validate_nla: 2 callbacks suppressed [ 88.117880][ T6313] netlink: 'syz.4.84': attribute type 10 has an invalid length. [ 88.203851][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 88.265248][ T6313] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 88.347362][ T6325] __nla_validate_parse: 2 callbacks suppressed [ 88.347386][ T6325] netlink: 40 bytes leftover after parsing attributes in process `syz.2.87'. [ 88.437441][ T6325] netlink: 40 bytes leftover after parsing attributes in process `syz.2.87'. [ 88.496586][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.508479][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.518427][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.529043][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.538948][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.549481][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.560729][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.571007][ T5946] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.579846][ T5946] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.589908][ T5946] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.599607][ T5946] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.858944][ T3499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.884916][ T3499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.969220][ T6344] Bluetooth: MGMT ver 1.23 [ 89.069178][ T3532] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.089022][ T3532] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.167570][ T6359] netlink: 'syz.1.97': attribute type 10 has an invalid length. [ 89.276717][ T6359] team0: Failed to send options change via netlink (err -105) [ 89.298482][ T6359] team0: Port device netdevsim0 added [ 89.542468][ T6374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.99'. [ 89.580495][ T6374] bridge_slave_1: left allmulticast mode [ 89.596243][ T6374] bridge_slave_1: left promiscuous mode [ 89.618145][ T6374] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.670638][ T6374] bridge_slave_0: left allmulticast mode [ 89.704836][ T6374] bridge_slave_0: left promiscuous mode [ 89.727354][ T6374] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.954745][ T6387] tipc: Started in network mode [ 90.000651][ T6387] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 90.048404][ T6387] tipc: Enabling of bearer rejected, failed to enable media [ 90.661505][ T5855] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.672228][ T5855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.681508][ T5855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.723411][ T5855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.731199][ T5855] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 90.740820][ T5855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.810520][ T1162] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.981279][ T6441] netlink: 'syz.4.111': attribute type 2 has an invalid length. [ 91.002176][ T1162] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.042528][ T6441] netlink: 'syz.4.111': attribute type 39 has an invalid length. [ 91.109215][ T6445] xt_CT: You must specify a L4 protocol and not use inversions on it [ 91.130336][ T5924] IPVS: starting estimator thread 0... [ 91.266423][ T6449] IPVS: using max 18 ests per chain, 43200 per kthread [ 91.291174][ T1162] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.316486][ T6462] syz.2.113 uses obsolete (PF_INET,SOCK_PACKET) [ 91.365387][ T6445] IPVS: set_ctl: invalid protocol: 51 172.20.20.53:20000 [ 91.435281][ T1162] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.485639][ T6468] netlink: 'syz.4.115': attribute type 10 has an invalid length. [ 91.582101][ T6468] syz_tun: left promiscuous mode [ 91.643376][ T6477] raw_sendmsg: syz.1.118 forgot to set AF_INET. Fix it! [ 92.033939][ T6422] chnl_net:caif_netlink_parms(): no params data found [ 92.575783][ T1162] bridge_slave_1: left allmulticast mode [ 92.591748][ T1162] bridge_slave_1: left promiscuous mode [ 92.600763][ T1162] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.686585][ T1162] bridge_slave_0: left allmulticast mode [ 92.692309][ T1162] bridge_slave_0: left promiscuous mode [ 92.729962][ T1162] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.827213][ T5859] Bluetooth: hci2: command tx timeout [ 93.103586][ T1162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.118500][ T1162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.131570][ T1162] bond0 (unregistering): Released all slaves [ 93.152079][ T6515] netlink: 'syz.4.124': attribute type 10 has an invalid length. [ 93.160800][ T6515] bridge0: port 3(team0) entered blocking state [ 93.167836][ T6515] bridge0: port 3(team0) entered disabled state [ 93.174466][ T6515] team0: entered allmulticast mode [ 93.180048][ T6515] team_slave_0: entered allmulticast mode [ 93.186705][ T6515] team_slave_1: entered allmulticast mode [ 93.194149][ T6515] team0: entered promiscuous mode [ 93.206754][ T6515] team_slave_0: entered promiscuous mode [ 93.215872][ T6515] team_slave_1: entered promiscuous mode [ 93.223736][ T6515] bridge0: port 3(team0) entered blocking state [ 93.230155][ T6515] bridge0: port 3(team0) entered forwarding state [ 93.260723][ T6518] netlink: 168 bytes leftover after parsing attributes in process `syz.2.123'. [ 93.423108][ T6516] netlink: 24 bytes leftover after parsing attributes in process `syz.1.122'. [ 93.439917][ T6516] netlink: 24 bytes leftover after parsing attributes in process `syz.1.122'. [ 93.539790][ T6539] netlink: 'syz.2.128': attribute type 1 has an invalid length. [ 93.572844][ T6539] netlink: 'syz.2.128': attribute type 4 has an invalid length. [ 93.582158][ T6539] netlink: 15334 bytes leftover after parsing attributes in process `syz.2.128'. [ 93.625388][ T6422] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.633131][ T6422] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.640965][ T6422] bridge_slave_0: entered allmulticast mode [ 93.648532][ T6422] bridge_slave_0: entered promiscuous mode [ 93.691375][ T5956] IPVS: starting estimator thread 0... [ 93.724000][ T6422] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.746897][ T6422] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.754258][ T6422] bridge_slave_1: entered allmulticast mode [ 93.780724][ T6422] bridge_slave_1: entered promiscuous mode [ 93.826632][ T6550] IPVS: using max 16 ests per chain, 38400 per kthread [ 93.935892][ T6546] netlink: 'syz.2.128': attribute type 58 has an invalid length. [ 93.974380][ T6546] netlink: 20 bytes leftover after parsing attributes in process `syz.2.128'. [ 94.048492][ T6422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.071684][ T6422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.312386][ T1162] hsr_slave_0: left promiscuous mode [ 94.332028][ T6572] netlink: 20 bytes leftover after parsing attributes in process `syz.0.138'. [ 94.357415][ T1162] hsr_slave_1: left promiscuous mode [ 94.367521][ T1162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.385294][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.411719][ T1162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.442680][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.448945][ T6580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.139'. [ 94.468587][ T6580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.139'. [ 94.479923][ T6582] netlink: 'syz.4.137': attribute type 1 has an invalid length. [ 94.485554][ T6580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.139'. [ 94.505969][ T1162] veth1_macvtap: left promiscuous mode [ 94.515946][ T6582] netlink: 'syz.4.137': attribute type 1 has an invalid length. [ 94.533443][ T1162] veth0_macvtap: left promiscuous mode [ 94.541050][ T1162] veth1_vlan: left promiscuous mode [ 94.551071][ T6582] netlink: 'syz.4.137': attribute type 1 has an invalid length. [ 94.561645][ T1162] veth0_vlan: left promiscuous mode [ 94.571126][ T6582] netlink: 'syz.4.137': attribute type 2 has an invalid length. [ 94.588522][ T6582] netlink: 182476 bytes leftover after parsing attributes in process `syz.4.137'. [ 94.916515][ T5859] Bluetooth: hci2: command tx timeout [ 95.182660][ T1162] team0 (unregistering): Port device team_slave_1 removed [ 95.220382][ T1162] team0 (unregistering): Port device team_slave_0 removed [ 95.664844][ T6422] team0: Port device team_slave_0 added [ 95.679015][ T6422] team0: Port device team_slave_1 added [ 95.795178][ T6588] netlink: 44 bytes leftover after parsing attributes in process `syz.2.141'. [ 95.946834][ T6422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.954015][ T6422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.025107][ T6422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.100425][ T6422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.108492][ T6422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.155260][ T6422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.286345][ T6602] bond0: (slave syz_tun): Releasing backup interface [ 96.440597][ T6612] sctp: [Deprecated]: syz.2.146 (pid 6612) Use of struct sctp_assoc_value in delayed_ack socket option. [ 96.440597][ T6612] Use struct sctp_sack_info instead [ 96.512911][ T6422] hsr_slave_0: entered promiscuous mode [ 96.606984][ T6422] hsr_slave_1: entered promiscuous mode [ 96.990396][ T5859] Bluetooth: hci2: command tx timeout [ 97.172046][ T6646] netlink: 'syz.4.153': attribute type 21 has an invalid length. [ 97.233762][ T6647] netlink: 'syz.0.154': attribute type 10 has an invalid length. [ 97.255944][ T6647] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 98.231058][ T6692] x_tables: duplicate underflow at hook 1 [ 98.304783][ T6422] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 98.364284][ T6700] validate_nla: 1 callbacks suppressed [ 98.364304][ T6700] netlink: 'syz.0.168': attribute type 4 has an invalid length. [ 98.482673][ T6422] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 98.589572][ T6422] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 98.647177][ T6422] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 99.015982][ T6422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.080036][ T5859] Bluetooth: hci2: command tx timeout [ 99.162300][ T6422] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.200865][ T6422] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 99.211433][ T6422] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.233430][ T3520] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.240654][ T3520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.250302][ T3520] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.257502][ T3520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.269881][ T6730] __nla_validate_parse: 11 callbacks suppressed [ 99.269904][ T6730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.176'. [ 99.346648][ T6745] sit0: entered promiscuous mode [ 99.364012][ T6745] netlink: 'syz.2.178': attribute type 1 has an invalid length. [ 99.416690][ T6745] netlink: 1 bytes leftover after parsing attributes in process `syz.2.178'. [ 99.451094][ T6738] netlink: 'syz.2.178': attribute type 10 has an invalid length. [ 99.585520][ T6738] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.612613][ T6738] bond0: (slave team0): Enslaving as an active interface with an up link [ 99.648155][ T6746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.180'. [ 99.717580][ T6766] netlink: 'syz.1.183': attribute type 21 has an invalid length. [ 99.745966][ T6766] netlink: 128 bytes leftover after parsing attributes in process `syz.1.183'. [ 99.770800][ T6766] netlink: 'syz.1.183': attribute type 5 has an invalid length. [ 99.790220][ T6766] netlink: 'syz.1.183': attribute type 6 has an invalid length. [ 99.803299][ T6766] netlink: 3 bytes leftover after parsing attributes in process `syz.1.183'. [ 99.858367][ T6755] netlink: 36 bytes leftover after parsing attributes in process `syz.0.181'. [ 100.013609][ T6422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.047358][ T6422] veth0_vlan: entered promiscuous mode [ 100.059382][ T6422] veth1_vlan: entered promiscuous mode [ 100.106625][ T6422] veth0_macvtap: entered promiscuous mode [ 100.119072][ T6422] veth1_macvtap: entered promiscuous mode [ 100.134898][ T6422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.145531][ T6422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.155662][ T6422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.166593][ T6422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.176903][ T6422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.187773][ T6422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.201191][ T6422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.288663][ T6422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.300763][ T6422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.319920][ T6422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.331030][ T6422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.421593][ T6422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.485164][ T6422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.523226][ T6422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.533679][ T6422] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.542552][ T6422] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.551380][ T6422] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.560181][ T6422] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.600760][ T6794] netlink: 20 bytes leftover after parsing attributes in process `syz.4.188'. [ 100.628803][ T6801] netlink: 'syz.2.189': attribute type 1 has an invalid length. [ 100.643673][ T6801] netlink: 'syz.2.189': attribute type 2 has an invalid length. [ 100.663226][ T6801] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 100.896858][ T1121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.904742][ T1121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.988856][ T6823] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 101.020659][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.076282][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.114002][ T6829] netlink: 'syz.1.192': attribute type 10 has an invalid length. [ 101.143941][ T6829] netlink: 55 bytes leftover after parsing attributes in process `syz.1.192'. [ 101.166714][ T6829] team0: Port device virt_wifi0 added [ 101.223928][ T6838] sctp: failed to load transform for md5: -2 [ 101.451752][ T6850] xt_NFQUEUE: number of total queues is 0 [ 101.497276][ T6850] netlink: 12 bytes leftover after parsing attributes in process `syz.4.198'. [ 101.738285][ T6872] netlink: 'syz.2.203': attribute type 1 has an invalid length. [ 101.826790][ T6875] netlink: 116 bytes leftover after parsing attributes in process `syz.1.204'. [ 102.213387][ T6417] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.538978][ T5855] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 102.553494][ T5855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 102.567607][ T5855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 102.707486][ T5855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 102.715969][ T5855] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 102.724094][ T5855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 102.734596][ T6909] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 103.307642][ T6417] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.385692][ T6931] Cannot find set identified by id 632 to match [ 103.450879][ T6933] Cannot find set identified by id 632 to match [ 103.464877][ T6417] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.589512][ T6417] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.127900][ T6417] bridge_slave_1: left allmulticast mode [ 104.133649][ T6417] bridge_slave_1: left promiscuous mode [ 104.168538][ T6417] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.192432][ T5859] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 104.222992][ T5859] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 104.244840][ T5859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 104.274860][ T6417] bridge_slave_0: left allmulticast mode [ 104.298830][ T5859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 104.313713][ T6417] bridge_slave_0: left promiscuous mode [ 104.321119][ T5859] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 104.329879][ T5859] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 104.371992][ T6417] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.912823][ T6417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.925340][ T6417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.938188][ T6417] bond0 (unregistering): Released all slaves [ 105.445338][ T7015] netlink: 'syz.2.226': attribute type 2 has an invalid length. [ 105.638442][ T7009] tipc: Started in network mode [ 105.648013][ T7009] tipc: Node identity ac1414aa, cluster identity 4711 [ 105.670453][ T7009] tipc: Enabled bearer , priority 10 [ 105.687301][ T7017] netlink: 'syz.4.224': attribute type 3 has an invalid length. [ 105.729014][ T7015] netlink: 'syz.2.226': attribute type 2 has an invalid length. [ 105.829558][ T6417] hsr_slave_0: left promiscuous mode [ 105.898405][ T6417] hsr_slave_1: left promiscuous mode [ 105.923175][ T6417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.937412][ T6417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.956416][ T6417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.963898][ T6417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.035960][ T6417] veth1_macvtap: left promiscuous mode [ 106.055064][ T6417] veth0_macvtap: left promiscuous mode [ 106.075614][ T6417] veth1_vlan: left promiscuous mode [ 106.093775][ T6417] veth0_vlan: left promiscuous mode [ 106.430081][ T5859] Bluetooth: hci2: command tx timeout [ 106.622369][ T6417] team0 (unregistering): Port device team_slave_1 removed [ 106.659721][ T6417] team0 (unregistering): Port device team_slave_0 removed [ 106.790804][ T9] tipc: Node number set to 2886997162 [ 107.097279][ T7038] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 107.388060][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.459924][ T6966] chnl_net:caif_netlink_parms(): no params data found [ 107.745638][ T7067] bond0: (slave team0): Releasing backup interface [ 107.818931][ T7067] bridge_slave_0: left allmulticast mode [ 107.824653][ T7067] bridge_slave_0: left promiscuous mode [ 107.850996][ T7067] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.891196][ T7067] bridge_slave_1: left allmulticast mode [ 107.899694][ T7067] bridge_slave_1: left promiscuous mode [ 107.905599][ T7067] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.922383][ T7067] bond0: (slave bond_slave_0): Releasing backup interface [ 107.972955][ T7067] bond0: (slave bond_slave_1): Releasing backup interface [ 108.038268][ T7067] team0: Port device team_slave_0 removed [ 108.072769][ T7067] team0: Port device team_slave_1 removed [ 108.096655][ T7067] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.105493][ T7067] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.135633][ T7067] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.156250][ T7067] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.205023][ T7063] __nla_validate_parse: 2 callbacks suppressed [ 108.205043][ T7063] netlink: 28 bytes leftover after parsing attributes in process `syz.2.235'. [ 108.312995][ T7077] netlink: 20 bytes leftover after parsing attributes in process `syz.2.235'. [ 108.446358][ T6966] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.466010][ T6966] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.484758][ T6966] bridge_slave_0: entered allmulticast mode [ 108.503379][ T6966] bridge_slave_0: entered promiscuous mode [ 108.516343][ T5859] Bluetooth: hci2: command tx timeout [ 108.564507][ T6966] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.626321][ T6966] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.634734][ T6966] bridge_slave_1: entered allmulticast mode [ 108.667382][ T6966] bridge_slave_1: entered promiscuous mode [ 108.861335][ T6966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.890152][ T7106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.241'. [ 108.900424][ T7106] bridge_slave_1: left allmulticast mode [ 108.907471][ T7106] bridge_slave_1: left promiscuous mode [ 108.913403][ T7106] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.952897][ T7118] netlink: 'syz.1.241': attribute type 11 has an invalid length. [ 108.979894][ T7106] bridge_slave_0: left allmulticast mode [ 108.985776][ T7106] bridge_slave_0: left promiscuous mode [ 109.005930][ T7106] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.144056][ T7130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.244'. [ 109.183407][ T6966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.215407][ T7134] netlink: 88 bytes leftover after parsing attributes in process `syz.4.246'. [ 109.425046][ T6966] team0: Port device team_slave_0 added [ 109.432297][ T7131] syzkaller1: entered promiscuous mode [ 109.452104][ T7131] syzkaller1: entered allmulticast mode [ 109.499629][ T6966] team0: Port device team_slave_1 added [ 109.672499][ T6966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.696306][ T6966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.756247][ T6966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.785925][ T6966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.794018][ T6966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.821767][ T6966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.851034][ T7156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.251'. [ 110.089823][ T6966] hsr_slave_0: entered promiscuous mode [ 110.127835][ T6966] hsr_slave_1: entered promiscuous mode [ 110.191599][ T7164] netlink: 32 bytes leftover after parsing attributes in process `syz.0.252'. [ 110.586290][ T5859] Bluetooth: hci2: command tx timeout [ 110.912902][ T7192] netlink: 12 bytes leftover after parsing attributes in process `syz.4.258'. [ 111.153514][ T7204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.262'. [ 111.390707][ T6966] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 111.443274][ T6966] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 111.502070][ T6966] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 111.535931][ T6966] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 111.814524][ T6966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.859697][ T6966] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.882845][ T6417] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.890039][ T6417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.970573][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.977775][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.069598][ T7241] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 112.293926][ T7241] netlink: 'syz.0.271': attribute type 29 has an invalid length. [ 112.323798][ T7241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.271'. [ 112.592469][ T6966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.672564][ T5859] Bluetooth: hci2: command tx timeout [ 112.721159][ T6966] veth0_vlan: entered promiscuous mode [ 112.734930][ T6966] veth1_vlan: entered promiscuous mode [ 112.759903][ T6966] veth0_macvtap: entered promiscuous mode [ 112.770643][ T6966] veth1_macvtap: entered promiscuous mode [ 112.811059][ T6966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.854915][ T6966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.858227][ T7271] xt_cgroup: path and classid specified [ 112.886234][ T6966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.916303][ T6966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.932971][ T6966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.962165][ T6966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.989185][ T6966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.005479][ T6966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.050738][ T6966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.087571][ T6966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.175872][ T6966] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.211683][ T6966] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.240307][ T6966] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.265549][ T6966] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.375305][ T7286] __nla_validate_parse: 2 callbacks suppressed [ 113.375326][ T7286] netlink: 12 bytes leftover after parsing attributes in process `syz.1.283'. [ 113.416417][ T7298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.286'. [ 113.419157][ T7291] sctp: failed to load transform for md5: -2 [ 113.482048][ T7290] sctp: failed to load transform for md5: -2 [ 113.690524][ T6417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.715164][ T6417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.872209][ T1337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.922866][ T1337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.231449][ T7339] IPv6: sit1: Disabled Multicast RS [ 114.292863][ T7331] netlink: 28 bytes leftover after parsing attributes in process `syz.2.290'. [ 114.793177][ T7365] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 115.016787][ T7373] xt_policy: output policy not valid in PREROUTING and INPUT [ 115.474251][ T6417] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.862900][ T7391] netlink: 'syz.0.303': attribute type 1 has an invalid length. [ 115.898966][ T6417] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.992025][ T6417] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.046776][ T7422] sctp: [Deprecated]: syz.2.306 (pid 7422) Use of struct sctp_assoc_value in delayed_ack socket option. [ 116.046776][ T7422] Use struct sctp_sack_info instead [ 116.329803][ T5855] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 116.350921][ T5855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 116.363182][ T5855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 116.457394][ T5855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 116.465177][ T5855] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 116.473082][ T5855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 116.510190][ T6417] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.364313][ T7445] netlink: 4 bytes leftover after parsing attributes in process `syz.4.310'. [ 117.385466][ T7445] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.396980][ T7445] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.404947][ T7445] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.413113][ T7445] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.940509][ T7452] tipc: Started in network mode [ 117.955746][ T7452] tipc: Node identity ac141427, cluster identity 4711 [ 117.965431][ T7452] tipc: Enabled bearer , priority 10 [ 117.983168][ T7472] batadv_slave_1: entered promiscuous mode [ 118.101784][ T7468] batadv_slave_1: left promiscuous mode [ 118.128663][ T7429] chnl_net:caif_netlink_parms(): no params data found [ 118.188043][ T7475] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 118.206359][ T7475] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 118.215337][ T7475] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 118.227739][ T7475] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 118.260897][ T7475] xt_l2tp: v2 sid > 0xffff: 262144 [ 118.481161][ T6417] bridge_slave_1: left allmulticast mode [ 118.496717][ T6417] bridge_slave_1: left promiscuous mode [ 118.502589][ T6417] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.516722][ T5855] Bluetooth: hci2: command tx timeout [ 118.540131][ T6417] bridge_slave_0: left allmulticast mode [ 118.545810][ T6417] bridge_slave_0: left promiscuous mode [ 118.562011][ T6417] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.917824][ T7501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.320'. [ 119.097064][ T970] tipc: Node number set to 2886997031 [ 119.124051][ T6417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.135831][ T6417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.149913][ T6417] bond0 (unregistering): Released all slaves [ 119.213682][ T7429] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.234767][ T7429] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.249171][ T7429] bridge_slave_0: entered allmulticast mode [ 119.258103][ T7429] bridge_slave_0: entered promiscuous mode [ 119.284217][ T7429] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.316518][ T7429] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.323853][ T7429] bridge_slave_1: entered allmulticast mode [ 119.341709][ T7429] bridge_slave_1: entered promiscuous mode [ 119.464004][ T7508] netlink: 24 bytes leftover after parsing attributes in process `syz.4.321'. [ 119.500628][ T7429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.571816][ T7429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.726068][ T7527] xt_recent: hitcount (262144) is larger than allowed maximum (65535) [ 119.786961][ T7519] netlink: 80 bytes leftover after parsing attributes in process `syz.0.325'. [ 120.234425][ T6417] hsr_slave_0: left promiscuous mode [ 120.267036][ T6417] hsr_slave_1: left promiscuous mode [ 120.284918][ T6417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.308544][ T6417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.342795][ T6417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.354668][ T6417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.445236][ T6417] veth1_macvtap: left promiscuous mode [ 120.470423][ T6417] veth0_macvtap: left promiscuous mode [ 120.490077][ T6417] veth1_vlan: left promiscuous mode [ 120.495646][ T6417] veth0_vlan: left promiscuous mode [ 120.586356][ T5855] Bluetooth: hci2: command tx timeout [ 121.262836][ T6417] team0 (unregistering): Port device team_slave_1 removed [ 121.330708][ T6417] team0 (unregistering): Port device team_slave_0 removed [ 121.712943][ T7535] smc: net device bond0 applied user defined pnetid SYZ0 [ 121.779982][ T7429] team0: Port device team_slave_0 added [ 121.801836][ T7429] team0: Port device team_slave_1 added [ 121.883464][ T7429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.895156][ T7429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.933782][ T7429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.973974][ T7561] syzkaller1: entered promiscuous mode [ 121.985209][ T7561] syzkaller1: entered allmulticast mode [ 122.008117][ T7429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.015124][ T7429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.053489][ T7429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.283315][ T7429] hsr_slave_0: entered promiscuous mode [ 122.305168][ T7429] hsr_slave_1: entered promiscuous mode [ 122.318949][ T7572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.335'. [ 122.387214][ T7574] netlink: 104 bytes leftover after parsing attributes in process `syz.2.336'. [ 122.669687][ T5855] Bluetooth: hci2: command tx timeout [ 123.205816][ T7613] netlink: 'syz.0.344': attribute type 4 has an invalid length. [ 123.235723][ T5897] hid-generic 0005:0C45:1010.0001: item fetching failed at offset 0/1 [ 123.275996][ T5897] hid-generic 0005:0C45:1010.0001: probe with driver hid-generic failed with error -22 [ 123.357635][ T7621] netlink: 24 bytes leftover after parsing attributes in process `syz.1.342'. [ 123.619737][ T7429] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 123.725647][ T7429] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 123.769804][ T7429] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 123.926178][ T7648] netlink: 4 bytes leftover after parsing attributes in process `syz.4.351'. [ 123.931928][ T7429] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 123.942413][ T7640] xt_CT: No such helper "syz0" [ 124.410486][ T7429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.436928][ T7429] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.448442][ T3520] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.455634][ T3520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.680172][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.687412][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.746439][ T5855] Bluetooth: hci2: command tx timeout [ 125.311965][ T7685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.361'. [ 125.516364][ T7429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.615383][ T7699] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 125.745520][ T7429] veth0_vlan: entered promiscuous mode [ 125.748264][ T7706] sctp: failed to load transform for md5: -2 [ 125.797509][ T7705] sctp: failed to load transform for md5: -2 [ 125.805843][ T7429] veth1_vlan: entered promiscuous mode [ 125.967082][ T7725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.367'. [ 125.984555][ T7429] veth0_macvtap: entered promiscuous mode [ 126.004694][ T7429] veth1_macvtap: entered promiscuous mode [ 126.015274][ T7727] netlink: 'syz.2.368': attribute type 21 has an invalid length. [ 126.015954][ T7725] x_tables: ip_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 126.027744][ T7727] netlink: 128 bytes leftover after parsing attributes in process `syz.2.368'. [ 126.081392][ T7429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.102788][ T7429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.140850][ T7429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.187544][ T7429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.219792][ T7429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.221917][ T7734] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 126.232641][ T7429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.274212][ T7429] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.281053][ T7734] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 126.293300][ T7429] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.315869][ T7429] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.330176][ T7429] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.441783][ T7742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.371'. [ 126.479497][ T7742] netlink: 'syz.1.371': attribute type 12 has an invalid length. [ 126.575488][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.597591][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.675861][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.719611][ T7750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.373'. [ 126.739460][ T1121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.753450][ T1121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.778128][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.801517][ T7750] netlink: 12 bytes leftover after parsing attributes in process `syz.1.373'. [ 126.896893][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.920674][ T7753] nbd: must specify a size in bytes for the device [ 127.024178][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.172731][ T5859] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 127.189544][ T5859] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 127.202905][ T5859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 127.236013][ T5859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 127.251261][ T5859] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 127.262641][ T5859] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 127.936670][ T52] bond0 (unregistering): Released all slaves [ 127.954366][ T7777] netlink: 12 bytes leftover after parsing attributes in process `syz.4.381'. [ 128.054302][ T52] tipc: Left network mode [ 128.229985][ T7756] chnl_net:caif_netlink_parms(): no params data found [ 128.290275][ T52] hsr_slave_0: left promiscuous mode [ 128.298230][ T52] hsr_slave_1: left promiscuous mode [ 128.313170][ T52] veth1_macvtap: left promiscuous mode [ 128.320138][ T52] veth0_macvtap: left promiscuous mode [ 128.325756][ T52] veth1_vlan: left promiscuous mode [ 128.331830][ T52] veth0_vlan: left promiscuous mode [ 129.003017][ T5859] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 129.013470][ T5859] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 129.022559][ T5859] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 129.031689][ T5859] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 129.070959][ T5859] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 129.079383][ T5859] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 129.306541][ T5855] Bluetooth: hci2: command tx timeout [ 129.640241][ T7809] netlink: 'syz.4.387': attribute type 1 has an invalid length. [ 129.662689][ T7809] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 129.719892][ T7756] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.741744][ T7756] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.750017][ T7756] bridge_slave_0: entered allmulticast mode [ 129.811513][ T7756] bridge_slave_0: entered promiscuous mode [ 129.902199][ T7756] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.913136][ T7756] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.951886][ T7756] bridge_slave_1: entered allmulticast mode [ 129.983591][ T7756] bridge_slave_1: entered promiscuous mode [ 130.169842][ T5885] IPVS: starting estimator thread 0... [ 130.219423][ T7756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.231661][ T7756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.266697][ T7836] IPVS: using max 18 ests per chain, 43200 per kthread [ 130.343341][ T7756] team0: Port device team_slave_0 added [ 130.408063][ T7756] team0: Port device team_slave_1 added [ 130.445371][ T7840] netlink: 12 bytes leftover after parsing attributes in process `syz.4.395'. [ 130.479784][ T7840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.395'. [ 130.489657][ T7840] netlink: 36 bytes leftover after parsing attributes in process `syz.4.395'. [ 130.522671][ T7756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.531192][ T7756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.565518][ T7756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.586606][ T7805] chnl_net:caif_netlink_parms(): no params data found [ 130.608509][ T7840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.395'. [ 130.632153][ T7756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.649893][ T7756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.717086][ T7756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.722897][ T7858] netlink: 48 bytes leftover after parsing attributes in process `syz.0.400'. [ 130.829508][ T52] IPVS: stop unused estimator thread 0... [ 130.943619][ T7756] hsr_slave_0: entered promiscuous mode [ 130.950415][ T7756] hsr_slave_1: entered promiscuous mode [ 130.969528][ T7756] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 130.979520][ T7756] Cannot create hsr debugfs directory [ 131.020045][ T7877] netlink: 'syz.4.404': attribute type 6 has an invalid length. [ 131.045487][ T7880] netlink: 'syz.4.404': attribute type 6 has an invalid length. [ 131.149497][ T5855] Bluetooth: hci3: command tx timeout [ 131.190629][ T7805] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.205439][ T7805] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.214183][ T7805] bridge_slave_0: entered allmulticast mode [ 131.224220][ T7885] nbd: must specify an index to disconnect [ 131.231379][ T7805] bridge_slave_0: entered promiscuous mode [ 131.265237][ T7805] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.287044][ T7805] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.301009][ T7805] bridge_slave_1: entered allmulticast mode [ 131.314726][ T7805] bridge_slave_1: entered promiscuous mode [ 131.379275][ T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.386418][ T5855] Bluetooth: hci2: command tx timeout [ 131.512774][ T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.530741][ T7805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.585429][ T7805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.688751][ T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.790947][ T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.824597][ T7805] team0: Port device team_slave_0 added [ 131.879438][ T7805] team0: Port device team_slave_1 added [ 132.023940][ T7805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.041386][ T7805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.096302][ T7805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.125742][ T7805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.133202][ T7805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.166688][ T7910] netlink: 256 bytes leftover after parsing attributes in process `syz.1.413'. [ 132.175839][ T7805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.395772][ T7805] hsr_slave_0: entered promiscuous mode [ 132.432172][ T7805] hsr_slave_1: entered promiscuous mode [ 132.467283][ T7805] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.480132][ T7805] Cannot create hsr debugfs directory [ 132.485890][ T52] bridge_slave_1: left allmulticast mode [ 132.492064][ T52] bridge_slave_1: left promiscuous mode [ 132.503719][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.524487][ T52] bridge_slave_0: left allmulticast mode [ 132.531700][ T52] bridge_slave_0: left promiscuous mode [ 132.542487][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.985966][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.000110][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.016466][ T52] bond0 (unregistering): Released all slaves [ 133.080885][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.226329][ T5855] Bluetooth: hci3: command tx timeout [ 133.470259][ T5855] Bluetooth: hci2: command tx timeout [ 133.504222][ T7932] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 133.522548][ T7756] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 133.540482][ T7756] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 133.604591][ T7756] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 133.675445][ T7756] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 133.820336][ T52] hsr_slave_0: left promiscuous mode [ 133.840764][ T52] hsr_slave_1: left promiscuous mode [ 133.871356][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.886254][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.894696][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.905745][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.950199][ T52] veth1_macvtap: left promiscuous mode [ 133.962811][ T52] veth0_macvtap: left promiscuous mode [ 133.968590][ T52] veth1_vlan: left promiscuous mode [ 133.973952][ T52] veth0_vlan: left promiscuous mode [ 134.457428][ T52] team0 (unregistering): Port device team_slave_1 removed [ 134.500777][ T52] team0 (unregistering): Port device team_slave_0 removed [ 134.874232][ T7944] vlan4: entered allmulticast mode [ 134.882446][ T7944] bond0: entered allmulticast mode [ 134.887748][ T7944] bond_slave_0: entered allmulticast mode [ 134.893507][ T7944] bond_slave_1: entered allmulticast mode [ 134.899407][ T7944] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 134.908935][ T7944] bond0: left allmulticast mode [ 134.913814][ T7944] bond_slave_0: left allmulticast mode [ 134.919619][ T7944] bond_slave_1: left allmulticast mode [ 134.925124][ T7944] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 135.193823][ T7963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.427'. [ 135.203861][ T7963] netlink: 'syz.1.427': attribute type 6 has an invalid length. [ 135.211908][ T7963] netlink: 12 bytes leftover after parsing attributes in process `syz.1.427'. [ 135.308120][ T5855] Bluetooth: hci3: command tx timeout [ 135.335254][ T7967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.428'. [ 135.532773][ T7756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.552068][ T5855] Bluetooth: hci2: command tx timeout [ 135.608224][ T7756] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.624452][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.631788][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.694426][ T1121] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.701608][ T1121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.836281][ T7980] netlink: 36 bytes leftover after parsing attributes in process `syz.0.433'. [ 135.970417][ T7805] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 136.048590][ T7805] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 136.074255][ T7805] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 136.091554][ T7805] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 136.241493][ T7805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.304695][ T7805] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.327484][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.334650][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.350931][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.358148][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.452556][ T8004] netlink: 'syz.1.441': attribute type 4 has an invalid length. [ 136.462452][ T7998] netlink: 12 bytes leftover after parsing attributes in process `syz.4.438'. [ 136.555475][ T8008] netlink: 4 bytes leftover after parsing attributes in process `syz.4.438'. [ 136.639693][ T8012] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 136.684701][ T8010] bond0: (slave bond_slave_0): Releasing backup interface [ 136.704990][ T8010] bond0: (slave bond_slave_1): Releasing backup interface [ 136.788290][ T8010] team0: Port device team_slave_0 removed [ 136.811239][ T8010] team0: Port device team_slave_1 removed [ 136.846435][ T8010] team0: Port device virt_wifi0 removed [ 136.881736][ T8010] team0: Port device netdevsim0 removed [ 136.925142][ T8014] wg2: entered promiscuous mode [ 136.960981][ T8014] team0: Port device wg2 added [ 137.108605][ T7756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.155139][ T7805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.275205][ T8032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.448'. [ 137.301224][ T8028] xt_CT: No such helper "netbios-ns" [ 137.302612][ T8032] sctp: [Deprecated]: syz.1.448 (pid 8032) Use of int in max_burst socket option deprecated. [ 137.302612][ T8032] Use struct sctp_assoc_value instead [ 137.310240][ T7805] veth0_vlan: entered promiscuous mode [ 137.354381][ T7805] veth1_vlan: entered promiscuous mode [ 137.385233][ T8034] RDS: rds_bind could not find a transport for f955:1446:29ed:4dcf:3c33:679e:a225:2e3, load rds_tcp or rds_rdma? [ 137.404052][ T8037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.449'. [ 137.414124][ T5855] Bluetooth: hci3: command tx timeout [ 137.452193][ T7805] veth0_macvtap: entered promiscuous mode [ 137.482464][ T7756] veth0_vlan: entered promiscuous mode [ 137.500713][ T7756] veth1_vlan: entered promiscuous mode [ 137.509067][ T7805] veth1_macvtap: entered promiscuous mode [ 137.563969][ T8040] vlan4: entered promiscuous mode [ 137.572459][ T8040] bond0: entered promiscuous mode [ 137.578558][ T8040] bond_slave_0: entered promiscuous mode [ 137.584860][ T8040] bond_slave_1: entered promiscuous mode [ 137.591208][ T8040] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 137.599545][ T8040] vlan4: entered allmulticast mode [ 137.604763][ T8040] bond0: entered allmulticast mode [ 137.610378][ T8040] bond_slave_0: entered allmulticast mode [ 137.616572][ T8040] bond_slave_1: entered allmulticast mode [ 137.622375][ T8040] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 137.632516][ T8040] bond0: left allmulticast mode [ 137.640026][ T8040] bond_slave_0: left allmulticast mode [ 137.645512][ T8040] bond_slave_1: left allmulticast mode [ 137.651433][ T8040] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 137.659249][ T8040] bond0: left promiscuous mode [ 137.664045][ T8040] bond_slave_0: left promiscuous mode [ 137.669663][ T8040] bond_slave_1: left promiscuous mode [ 137.675156][ T8040] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 137.718030][ T8041] vlan4: entered promiscuous mode [ 137.723112][ T8041] bond0: entered promiscuous mode [ 137.728353][ T8041] bond_slave_0: entered promiscuous mode [ 137.734130][ T8041] bond_slave_1: entered promiscuous mode [ 137.741543][ T8041] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 137.749186][ T8041] vlan4: entered allmulticast mode [ 137.754328][ T8041] bond0: entered allmulticast mode [ 137.760872][ T8041] bond_slave_0: entered allmulticast mode [ 137.766834][ T8041] bond_slave_1: entered allmulticast mode [ 137.772587][ T8041] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 137.783292][ T8041] bond0: left allmulticast mode [ 137.788913][ T8041] bond_slave_0: left allmulticast mode [ 137.794414][ T8041] bond_slave_1: left allmulticast mode [ 137.800074][ T8041] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 137.807295][ T8041] bond0: left promiscuous mode [ 137.812089][ T8041] bond_slave_0: left promiscuous mode [ 137.817960][ T8041] bond_slave_1: left promiscuous mode [ 137.823515][ T8041] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 137.868169][ T7756] veth0_macvtap: entered promiscuous mode [ 137.880603][ T7805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.893279][ T7805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.905632][ T7805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.914572][ T7756] veth1_macvtap: entered promiscuous mode [ 137.946032][ T7805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.962536][ T7805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.980288][ T7805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.990943][ T7805] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.005919][ T7805] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.040388][ T7805] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.050777][ T7805] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.073269][ T7756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.086106][ T7756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.095993][ T7756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.110773][ T7756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.122556][ T7756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.167344][ T8053] xt_NFQUEUE: number of total queues is 0 [ 138.178377][ T7756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.195297][ T7756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.206441][ T7756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.220888][ T7756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.232431][ T7756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.322169][ T7756] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.331174][ T7756] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.345121][ T7756] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.383941][ T7756] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.539417][ T3520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.580533][ T3520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.657963][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.669389][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.720146][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.733648][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.777501][ T8073] netlink: 'syz.1.461': attribute type 4 has an invalid length. [ 138.788813][ T8075] netlink: 'syz.4.462': attribute type 3 has an invalid length. [ 138.834661][ T3520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.858864][ T3520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.264620][ T1121] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.385722][ T1121] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.596847][ T1121] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.656882][ T8098] netlink: 'syz.1.468': attribute type 1 has an invalid length. [ 139.700689][ T8098] netlink: 'syz.1.468': attribute type 4 has an invalid length. [ 139.714910][ T8098] netlink: 188 bytes leftover after parsing attributes in process `syz.1.468'. [ 139.736311][ T8098] NCSI netlink: No device for ifindex 458760 [ 139.757076][ T8098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.468'. [ 139.833207][ T1121] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.903835][ T8101] tipc: Enabled bearer , priority 10 [ 139.923291][ T8105] netlink: 'syz.0.469': attribute type 1 has an invalid length. [ 140.029097][ T5859] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 140.038979][ T5859] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 140.047449][ T5859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 140.055476][ T5859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 140.064279][ T5859] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 140.072949][ T5859] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 140.135509][ T1121] bridge_slave_1: left allmulticast mode [ 140.145438][ T1121] bridge_slave_1: left promiscuous mode [ 140.151811][ T1121] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.161326][ T1121] bridge_slave_0: left allmulticast mode [ 140.167518][ T1121] bridge_slave_0: left promiscuous mode [ 140.173216][ T1121] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.468464][ T1121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.481173][ T1121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.492431][ T1121] bond0 (unregistering): Released all slaves [ 140.668412][ T8106] chnl_net:caif_netlink_parms(): no params data found [ 140.763243][ T8116] x_tables: duplicate underflow at hook 1 [ 140.777919][ T8115] netlink: 68 bytes leftover after parsing attributes in process `syz.0.470'. [ 140.815719][ T8119] netlink: 16 bytes leftover after parsing attributes in process `syz.4.472'. [ 141.070548][ T5859] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 141.083437][ T5859] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 141.091823][ T1121] hsr_slave_0: left promiscuous mode [ 141.101344][ T1121] hsr_slave_1: left promiscuous mode [ 141.108522][ T5859] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 141.117903][ T5859] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 141.125975][ T5859] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 141.134681][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.142377][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.151247][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.159096][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.167828][ T5859] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 141.205534][ T1121] veth1_macvtap: left promiscuous mode [ 141.211436][ T1121] veth0_macvtap: left promiscuous mode [ 141.218282][ T1121] veth1_vlan: left promiscuous mode [ 141.224851][ T1121] veth0_vlan: left promiscuous mode [ 141.695846][ T1121] team0 (unregistering): Port device team_slave_1 removed [ 141.737604][ T1121] team0 (unregistering): Port device team_slave_0 removed [ 142.108986][ T5855] Bluetooth: hci2: command tx timeout [ 142.217584][ T8106] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.224725][ T8106] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.266932][ T8106] bridge_slave_0: entered allmulticast mode [ 142.273899][ T8106] bridge_slave_0: entered promiscuous mode [ 142.327792][ T8106] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.335276][ T8106] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.342819][ T8106] bridge_slave_1: entered allmulticast mode [ 142.351789][ T8106] bridge_slave_1: entered promiscuous mode [ 142.383965][ T8153] netlink: 16 bytes leftover after parsing attributes in process `syz.4.478'. [ 142.440668][ T8156] TCP: TCP_TX_DELAY enabled [ 142.457593][ T8106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.531604][ T8106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.562608][ T8160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.480'. [ 142.587410][ T8160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.480'. [ 142.597760][ T8160] netlink: 32 bytes leftover after parsing attributes in process `syz.0.480'. [ 142.644651][ T5855] block nbd0: Receive control failed (result -107) [ 142.646801][ T8106] team0: Port device team_slave_0 added [ 142.694612][ T8106] team0: Port device team_slave_1 added [ 142.713599][ T8162] netlink: 4 bytes leftover after parsing attributes in process `syz.1.482'. [ 142.892296][ T8106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.915871][ T8106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.954291][ T8106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.996791][ T8106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.003796][ T8106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.050698][ T8179] netlink: 40 bytes leftover after parsing attributes in process `syz.1.487'. [ 143.067663][ T8106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.226365][ T5855] Bluetooth: hci3: command tx timeout [ 143.301362][ T8106] hsr_slave_0: entered promiscuous mode [ 143.334167][ T8106] hsr_slave_1: entered promiscuous mode [ 143.390753][ T1121] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.442279][ T8193] netlink: 'syz.1.490': attribute type 10 has an invalid length. [ 143.450961][ T8193] syz_tun: entered promiscuous mode [ 143.484600][ T8193] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 143.494966][ T8131] chnl_net:caif_netlink_parms(): no params data found [ 143.612010][ T1121] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.745711][ T1121] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.898670][ T1121] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.949177][ T8209] netlink: 24 bytes leftover after parsing attributes in process `syz.1.497'. [ 144.091433][ T8131] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.100249][ T8131] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.113629][ T8131] bridge_slave_0: entered allmulticast mode [ 144.123652][ T8131] bridge_slave_0: entered promiscuous mode [ 144.134796][ T8217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.498'. [ 144.186234][ T5855] Bluetooth: hci2: command tx timeout [ 144.207349][ T8131] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.214554][ T8131] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.222904][ T8131] bridge_slave_1: entered allmulticast mode [ 144.230858][ T8131] bridge_slave_1: entered promiscuous mode [ 144.372125][ T8131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.422136][ T8131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.518185][ T1121] bridge_slave_1: left allmulticast mode [ 144.524218][ T1121] bridge_slave_1: left promiscuous mode [ 144.535640][ T1121] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.568014][ T1121] bridge_slave_0: left allmulticast mode [ 144.581350][ T1121] bridge_slave_0: left promiscuous mode [ 144.597182][ T1121] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.727299][ T8235] netlink: 165 bytes leftover after parsing attributes in process `syz.4.502'. [ 145.014068][ T1121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.025754][ T1121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.037710][ T1121] bond0 (unregistering): Released all slaves [ 145.063052][ T8131] team0: Port device team_slave_0 added [ 145.306483][ T5855] Bluetooth: hci3: command tx timeout [ 146.266496][ T5855] Bluetooth: hci2: command tx timeout [ 146.527765][ T8131] team0: Port device team_slave_1 added [ 146.638806][ T8131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.648784][ T8131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.675711][ T8131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.747019][ T8131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.754375][ T8131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.799336][ T8131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.915974][ T8255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.507'. [ 146.933562][ T8106] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 146.959422][ T1121] hsr_slave_0: left promiscuous mode [ 146.965448][ T1121] hsr_slave_1: left promiscuous mode [ 146.973329][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.982031][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.990590][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.998924][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.023414][ T1121] veth1_macvtap: left promiscuous mode [ 147.029059][ T1121] veth0_macvtap: left promiscuous mode [ 147.034699][ T1121] veth1_vlan: left promiscuous mode [ 147.040094][ T1121] veth0_vlan: left promiscuous mode [ 147.386331][ T5855] Bluetooth: hci3: command tx timeout [ 147.539403][ T1121] team0 (unregistering): Port device team_slave_1 removed [ 147.580951][ T1121] team0 (unregistering): Port device team_slave_0 removed [ 147.962253][ T8131] hsr_slave_0: entered promiscuous mode [ 147.969782][ T8131] hsr_slave_1: entered promiscuous mode [ 147.976039][ T8131] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 147.989068][ T8131] Cannot create hsr debugfs directory [ 147.995423][ T8106] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 148.006710][ T8106] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 148.097230][ T8106] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 148.247922][ T8267] netlink: 'syz.4.510': attribute type 12 has an invalid length. [ 148.363404][ T5855] Bluetooth: hci2: command tx timeout [ 149.467482][ T5855] Bluetooth: hci3: command tx timeout [ 149.476242][ T8283] netlink: 'syz.4.517': attribute type 1 has an invalid length. [ 149.503976][ T8283] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 149.505553][ T8284] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 149.633221][ T8106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.722157][ T8106] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.794212][ T3499] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.801422][ T3499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.821497][ T3499] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.828723][ T3499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.837581][ T8307] Bluetooth: MGMT ver 1.23 [ 150.032995][ T8317] __nla_validate_parse: 1 callbacks suppressed [ 150.033015][ T8317] netlink: 20 bytes leftover after parsing attributes in process `syz.0.527'. [ 150.110423][ T8106] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 150.181745][ T8317] ip6t_rpfilter: unknown options [ 150.402938][ T8131] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 150.449877][ T8131] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 150.472621][ T8131] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 150.534648][ T8131] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 150.575214][ T8333] atomic_op ffff888078e64998 conn xmit_atomic 0000000000000000 [ 150.635878][ T8336] netlink: 'syz.4.533': attribute type 1 has an invalid length. [ 150.653317][ T8106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.692542][ T8336] netlink: 'syz.4.533': attribute type 1 has an invalid length. [ 150.709772][ T8343] netlink: 4 bytes leftover after parsing attributes in process `syz.4.533'. [ 150.756618][ T8343] team0: left allmulticast mode [ 150.761554][ T8343] team_slave_0: left allmulticast mode [ 150.774729][ T8343] team_slave_1: left allmulticast mode [ 150.783044][ T8343] team0: left promiscuous mode [ 150.792456][ T8343] team_slave_0: left promiscuous mode [ 150.799224][ T8343] team_slave_1: left promiscuous mode [ 150.805484][ T8343] bridge0: port 3(team0) entered disabled state [ 150.819139][ T8348] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 150.832551][ T8343] bridge_slave_1: left allmulticast mode [ 150.839066][ T8343] bridge_slave_1: left promiscuous mode [ 150.844874][ T8343] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.857006][ T8343] bridge_slave_0: left allmulticast mode [ 150.862695][ T8343] bridge_slave_0: left promiscuous mode [ 150.868588][ T8343] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.980474][ T8347] geneve2: entered promiscuous mode [ 150.985891][ T8347] geneve2: entered allmulticast mode [ 151.002557][ T8349] netlink: 'syz.1.536': attribute type 4 has an invalid length. [ 151.014306][ T8350] netlink: 'syz.1.536': attribute type 4 has an invalid length. [ 151.162237][ T8131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.174790][ T8106] veth0_vlan: entered promiscuous mode [ 151.208848][ T8106] veth1_vlan: entered promiscuous mode [ 151.215128][ T8357] netlink: 'syz.0.539': attribute type 4 has an invalid length. [ 151.250960][ T8131] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.291119][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.298331][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.366639][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.373855][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.399208][ T8106] veth0_macvtap: entered promiscuous mode [ 151.431861][ T8106] veth1_macvtap: entered promiscuous mode [ 151.504898][ T8106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.516204][ T8106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.528775][ T8106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.553742][ T8106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.577548][ T8106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.593339][ T8106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.613453][ T8131] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 151.617338][ T8367] netlink: 68 bytes leftover after parsing attributes in process `syz.1.544'. [ 151.643235][ T8106] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.673097][ T8106] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.692351][ T8106] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.705048][ T8106] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.918777][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.969370][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.054890][ T1121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.062244][ T8131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.079643][ T1121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.176194][ T8131] veth0_vlan: entered promiscuous mode [ 152.236414][ T8131] veth1_vlan: entered promiscuous mode [ 152.336040][ T8131] veth0_macvtap: entered promiscuous mode [ 152.357973][ T8131] veth1_macvtap: entered promiscuous mode [ 152.398158][ T8131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.419176][ T8131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.440366][ T8131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.461181][ T8131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.500667][ T8131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.569073][ T8411] netlink: 64 bytes leftover after parsing attributes in process `syz.1.551'. [ 152.599166][ T8403] bond0: (slave syz_tun): Releasing backup interface [ 152.658012][ T8403] team0: Port device wg2 removed [ 152.729198][ T8131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.776238][ T8131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.799103][ T8131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.826669][ T8131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.838266][ T8131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.902518][ T3532] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.945505][ T8131] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.960927][ T8131] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.969968][ T8131] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.979064][ T8131] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.076924][ T8416] team0: Port device macvlan1 added [ 153.088077][ T8418] netlink: 72 bytes leftover after parsing attributes in process `syz.1.554'. [ 153.140359][ T3532] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.227161][ T8416] team0: Port device macvlan1 removed [ 153.369191][ T3532] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.399294][ T5859] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 153.436422][ T5859] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 153.444871][ T5859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 153.454354][ T5859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 153.467638][ T5859] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 153.475467][ T5859] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 153.615472][ T8125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.641789][ T8125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.687681][ T3532] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.786739][ T8125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.794622][ T8125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.061199][ T8442] netlink: 36 bytes leftover after parsing attributes in process `syz.0.561'. [ 154.144359][ T3532] bridge_slave_1: left allmulticast mode [ 154.150956][ T3532] bridge_slave_1: left promiscuous mode [ 154.156799][ T3532] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.188291][ T3532] bridge_slave_0: left allmulticast mode [ 154.198251][ T3532] bridge_slave_0: left promiscuous mode [ 154.204068][ T3532] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.734216][ T3532] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.751256][ T3532] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.764456][ T3532] bond0 (unregistering): Released all slaves [ 154.860294][ T8423] chnl_net:caif_netlink_parms(): no params data found [ 155.232955][ T8423] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.240886][ T8423] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.248247][ T8423] bridge_slave_0: entered allmulticast mode [ 155.256347][ T8423] bridge_slave_0: entered promiscuous mode [ 155.264256][ T8423] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.271462][ T8423] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.283510][ T8423] bridge_slave_1: entered allmulticast mode [ 155.292469][ T8423] bridge_slave_1: entered promiscuous mode [ 155.334704][ T3532] hsr_slave_0: left promiscuous mode [ 155.341758][ T3532] hsr_slave_1: left promiscuous mode [ 155.350421][ T3532] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.358621][ T3532] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.366692][ T3532] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.376252][ T3532] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.394439][ T3532] veth1_macvtap: left promiscuous mode [ 155.401051][ T3532] veth0_macvtap: left promiscuous mode [ 155.408090][ T3532] veth1_vlan: left promiscuous mode [ 155.413516][ T3532] veth0_vlan: left promiscuous mode [ 155.549479][ T5859] Bluetooth: hci2: command tx timeout [ 155.819006][ T3532] team0 (unregistering): Port device team_slave_1 removed [ 155.859738][ T3532] team0 (unregistering): Port device team_slave_0 removed [ 156.245151][ T5855] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 156.255060][ T5855] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 156.264165][ T5855] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 156.281390][ T5855] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 156.298914][ T5855] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 156.306549][ T5855] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 156.523148][ T8423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.540785][ T8481] netlink: 12 bytes leftover after parsing attributes in process `syz.1.569'. [ 156.583748][ T8423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.689396][ T8423] team0: Port device team_slave_0 added [ 156.699361][ T8423] team0: Port device team_slave_1 added [ 156.797757][ T8423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.804758][ T8423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.840023][ T8498] Illegal XDP return value 4294967274 on prog (id 167) dev N/A, expect packet loss! [ 156.841065][ T8423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.880397][ T8423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.896848][ T8494] xt_CT: No such helper "netbios-ns" [ 156.905198][ T8423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.960426][ T8423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.161864][ T8512] netlink: 20 bytes leftover after parsing attributes in process `syz.4.576'. [ 157.241267][ T8423] hsr_slave_0: entered promiscuous mode [ 157.243711][ T8515] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 157.257178][ T8423] hsr_slave_1: entered promiscuous mode [ 157.296291][ T8517] netlink: 4 bytes leftover after parsing attributes in process `syz.4.578'. [ 157.322203][ T8517] wireguard0: entered promiscuous mode [ 157.332779][ T8517] wireguard0: entered allmulticast mode [ 157.347103][ T8522] trusted_key: syz.0.579 sent an empty control message without MSG_MORE. [ 157.542474][ T8490] chnl_net:caif_netlink_parms(): no params data found [ 157.626670][ T5855] Bluetooth: hci2: command tx timeout [ 157.643973][ T3520] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.792840][ T3520] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.814651][ T8532] netlink: 24 bytes leftover after parsing attributes in process `syz.4.582'. [ 157.902143][ T3520] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.078447][ T8490] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.096855][ T8543] netlink: 'syz.4.584': attribute type 11 has an invalid length. [ 158.104799][ T8490] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.119119][ T8543] netlink: 224 bytes leftover after parsing attributes in process `syz.4.584'. [ 158.128788][ T8490] bridge_slave_0: entered allmulticast mode [ 158.143540][ T8490] bridge_slave_0: entered promiscuous mode [ 158.208605][ T3520] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.255232][ T8490] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.262609][ T8490] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.271896][ T8490] bridge_slave_1: entered allmulticast mode [ 158.280630][ T8490] bridge_slave_1: entered promiscuous mode [ 158.347863][ T5855] Bluetooth: hci3: command tx timeout [ 158.392784][ T8490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.416607][ T8490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.631797][ T8490] team0: Port device team_slave_0 added [ 158.644530][ T8423] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 158.689605][ T8490] team0: Port device team_slave_1 added [ 158.696396][ T8569] netlink: 'syz.4.590': attribute type 1 has an invalid length. [ 158.703592][ T8423] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 158.714741][ T8423] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 158.729569][ T3520] bridge_slave_1: left allmulticast mode [ 158.740613][ T3520] bridge_slave_1: left promiscuous mode [ 158.752415][ T3520] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.771312][ T3520] bridge_slave_0: left allmulticast mode [ 158.781011][ T3520] bridge_slave_0: left promiscuous mode [ 158.788740][ T3520] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.711070][ T5855] Bluetooth: hci2: command tx timeout [ 159.760717][ T3520] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.777422][ T3520] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.794194][ T3520] bond0 (unregistering): Released all slaves [ 159.822611][ T8423] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 159.863633][ T8585] netlink: 76 bytes leftover after parsing attributes in process `syz.4.595'. [ 159.898072][ T8490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.905163][ T8490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.973957][ T8490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.029631][ T8490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.049933][ T8490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.100822][ T8490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.386607][ T8490] hsr_slave_0: entered promiscuous mode [ 160.393260][ T8490] hsr_slave_1: entered promiscuous mode [ 160.402655][ T8490] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 160.416650][ T8490] Cannot create hsr debugfs directory [ 160.426268][ T5855] Bluetooth: hci3: command tx timeout [ 160.550493][ T3520] hsr_slave_0: left promiscuous mode [ 160.575264][ T3520] hsr_slave_1: left promiscuous mode [ 160.591827][ T3520] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.599696][ T3520] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.609869][ T3520] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.617455][ T3520] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.648842][ T8611] netlink: 244 bytes leftover after parsing attributes in process `syz.0.599'. [ 160.657547][ T3520] veth1_macvtap: left promiscuous mode [ 160.663398][ T3520] veth0_macvtap: left promiscuous mode [ 160.669404][ T3520] veth1_vlan: left promiscuous mode [ 160.674738][ T3520] veth0_vlan: left promiscuous mode [ 161.160170][ T3520] team0 (unregistering): Port device team_slave_1 removed [ 161.198331][ T3520] team0 (unregistering): Port device team_slave_0 removed [ 161.786360][ T5855] Bluetooth: hci2: command tx timeout [ 161.951026][ T8423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.211152][ T8646] netlink: 20 bytes leftover after parsing attributes in process `syz.1.607'. [ 162.223501][ T8423] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.263246][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.270469][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.394681][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.401983][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.506194][ T5855] Bluetooth: hci3: command tx timeout [ 162.625241][ T8490] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 162.660255][ T8490] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 162.692089][ T8659] macsec0: entered promiscuous mode [ 162.699431][ T8490] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 162.723206][ T8659] veth1_macvtap: left promiscuous mode [ 162.783142][ T8490] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 162.800829][ T8660] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 162.818722][ T8660] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 163.141426][ T8490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.182166][ T8490] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.238859][ T8423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.252146][ T8672] x_tables: duplicate underflow at hook 3 [ 163.281119][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.288317][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.337443][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.344669][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.389256][ T8675] netlink: 28 bytes leftover after parsing attributes in process `syz.0.615'. [ 163.568737][ T8423] veth0_vlan: entered promiscuous mode [ 163.607167][ T8423] veth1_vlan: entered promiscuous mode [ 163.688161][ T8423] veth0_macvtap: entered promiscuous mode [ 163.728904][ T8423] veth1_macvtap: entered promiscuous mode [ 163.772463][ T8423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.816293][ T8423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.843431][ T8423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.873951][ T8423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.895759][ T8423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.941042][ T8423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.983005][ T8423] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.999251][ T8423] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.015402][ T8423] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.024818][ T8423] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.050770][ T25] hid-generic 0005:0C45:1012.0002: item fetching failed at offset 0/1 [ 164.066694][ T8490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.113236][ T25] hid-generic 0005:0C45:1012.0002: probe with driver hid-generic failed with error -22 [ 164.203075][ T8490] veth0_vlan: entered promiscuous mode [ 164.300956][ T8490] veth1_vlan: entered promiscuous mode [ 164.358381][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.360025][ T8718] syz.1.626[8718] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 164.383601][ T8718] syz.1.626[8718] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 164.383739][ T8718] syz.1.626[8718] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 164.386155][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.457068][ T8718] netlink: 9 bytes leftover after parsing attributes in process `syz.1.626'. [ 164.469991][ T8718] 0·: renamed from hsr_slave_1 (while UP) [ 164.489850][ T8718] 0·: entered allmulticast mode [ 164.495408][ T8718] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 164.535083][ T8723] bridge0: entered promiscuous mode [ 164.571037][ T3520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.586423][ T5855] Bluetooth: hci3: command tx timeout [ 164.598824][ T3520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.600419][ T8490] veth0_macvtap: entered promiscuous mode [ 164.653259][ T8490] veth1_macvtap: entered promiscuous mode [ 164.700087][ T8490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.702795][ T8727] netlink: set zone limit has 4 unknown bytes [ 164.715596][ T8490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.733234][ T8490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.745174][ T8490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.762139][ T8490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.816313][ T8490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.831213][ T8490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.842807][ T8490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.853706][ T8490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.865023][ T8490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.875784][ T8490] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.884853][ T8490] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.893947][ T8490] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.903056][ T8490] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.061315][ T3520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.105877][ T3520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.168172][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.206280][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.321213][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.350798][ T8735] tipc: Enabling of bearer rejected, failed to enable media [ 165.474095][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.501118][ T8705] ================================================================== [ 165.509232][ T8705] BUG: KASAN: slab-use-after-free in __mutex_lock+0x6c0/0xd70 [ 165.516741][ T8705] Read of size 8 at addr ffff888028c54060 by task khidpd_0c451012/8705 [ 165.525091][ T8705] [ 165.527453][ T8705] CPU: 0 UID: 0 PID: 8705 Comm: khidpd_0c451012 Not tainted 6.12.0-rc5-syzkaller-01152-gc688a96c432e #0 [ 165.538678][ T8705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 165.548774][ T8705] Call Trace: [ 165.552083][ T8705] [ 165.555016][ T8705] dump_stack_lvl+0x241/0x360 [ 165.559713][ T8705] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.564928][ T8705] ? __pfx__printk+0x10/0x10 [ 165.569528][ T8705] ? _printk+0xd5/0x120 [ 165.573708][ T8705] ? __virt_addr_valid+0x183/0x530 [ 165.578818][ T8705] ? __virt_addr_valid+0x183/0x530 [ 165.583936][ T8705] print_report+0x169/0x550 [ 165.588644][ T8705] ? __virt_addr_valid+0x183/0x530 [ 165.593784][ T8705] ? __virt_addr_valid+0x183/0x530 [ 165.598912][ T8705] ? __virt_addr_valid+0x45f/0x530 [ 165.604035][ T8705] ? __phys_addr+0xba/0x170 [ 165.608545][ T8705] ? __mutex_lock+0x6c0/0xd70 [ 165.613237][ T8705] kasan_report+0x143/0x180 [ 165.617752][ T8705] ? __mutex_lock+0x6c0/0xd70 [ 165.622436][ T8705] __mutex_lock+0x6c0/0xd70 [ 165.626953][ T8705] ? __mutex_lock+0x52a/0xd70 [ 165.631633][ T8705] ? l2cap_unregister_user+0x6a/0x1c0 [ 165.637021][ T8705] ? __pfx___mutex_lock+0x10/0x10 [ 165.642060][ T8705] ? __pfx___timer_delete_sync+0x10/0x10 [ 165.647713][ T8705] l2cap_unregister_user+0x6a/0x1c0 [ 165.652934][ T8705] hidp_session_thread+0x450/0x490 [ 165.658061][ T8705] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 165.663984][ T8705] ? __pfx_hidp_session_thread+0x10/0x10 [ 165.669627][ T8705] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 165.675620][ T8705] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 165.681877][ T8705] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 165.688129][ T8705] ? __kthread_parkme+0x169/0x1d0 [ 165.693184][ T8705] ? __pfx_hidp_session_thread+0x10/0x10 [ 165.698840][ T8705] kthread+0x2f0/0x390 [ 165.703035][ T8705] ? __pfx_hidp_session_thread+0x10/0x10 [ 165.708692][ T8705] ? __pfx_kthread+0x10/0x10 [ 165.713287][ T8705] ret_from_fork+0x4b/0x80 [ 165.717729][ T8705] ? __pfx_kthread+0x10/0x10 [ 165.722341][ T8705] ret_from_fork_asm+0x1a/0x30 [ 165.727134][ T8705] [ 165.730210][ T8705] [ 165.732535][ T8705] Allocated by task 8490: [ 165.736861][ T8705] kasan_save_track+0x3f/0x80 [ 165.741553][ T8705] __kasan_kmalloc+0x98/0xb0 [ 165.746176][ T8705] __kmalloc_noprof+0x1fc/0x400 [ 165.751051][ T8705] hci_alloc_dev_priv+0x27/0x2030 [ 165.756087][ T8705] vhci_create_device+0x116/0x6a0 [ 165.761134][ T8705] vhci_write+0x3cf/0x490 [ 165.765467][ T8705] vfs_write+0xaeb/0xd30 [ 165.769721][ T8705] ksys_write+0x183/0x2b0 [ 165.774151][ T8705] do_syscall_64+0xf3/0x230 [ 165.778658][ T8705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.784566][ T8705] [ 165.786889][ T8705] Freed by task 8490: [ 165.790871][ T8705] kasan_save_track+0x3f/0x80 [ 165.795644][ T8705] kasan_save_free_info+0x40/0x50 [ 165.800684][ T8705] __kasan_slab_free+0x59/0x70 [ 165.805469][ T8705] kfree+0x1a0/0x440 [ 165.809380][ T8705] hci_release_dev+0x1525/0x16b0 [ 165.814330][ T8705] bt_host_release+0x83/0x90 [ 165.818929][ T8705] device_release+0x99/0x1c0 [ 165.823529][ T8705] kobject_put+0x22f/0x480 [ 165.827957][ T8705] vhci_release+0x88/0xd0 [ 165.832290][ T8705] __fput+0x23f/0x880 [ 165.836284][ T8705] task_work_run+0x24f/0x310 [ 165.840880][ T8705] do_exit+0xa2f/0x28e0 [ 165.845297][ T8705] do_group_exit+0x207/0x2c0 [ 165.849919][ T8705] __x64_sys_exit_group+0x3f/0x40 [ 165.854950][ T8705] x64_sys_call+0x2634/0x2640 [ 165.859679][ T8705] do_syscall_64+0xf3/0x230 [ 165.864187][ T8705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.870116][ T8705] [ 165.872448][ T8705] Last potentially related work creation: [ 165.878183][ T8705] kasan_save_stack+0x3f/0x60 [ 165.882892][ T8705] __kasan_record_aux_stack+0xac/0xc0 [ 165.888289][ T8705] insert_work+0x3e/0x330 [ 165.892631][ T8705] __queue_work+0xb66/0xf50 [ 165.897217][ T8705] queue_work_on+0x1c2/0x380 [ 165.901825][ T8705] process_scheduled_works+0xa63/0x1850 [ 165.907380][ T8705] worker_thread+0x870/0xd30 [ 165.911983][ T8705] kthread+0x2f0/0x390 [ 165.916059][ T8705] ret_from_fork+0x4b/0x80 [ 165.920491][ T8705] ret_from_fork_asm+0x1a/0x30 [ 165.925264][ T8705] [ 165.927589][ T8705] Second to last potentially related work creation: [ 165.934173][ T8705] kasan_save_stack+0x3f/0x60 [ 165.938853][ T8705] __kasan_record_aux_stack+0xac/0xc0 [ 165.944235][ T8705] insert_work+0x3e/0x330 [ 165.948767][ T8705] __queue_work+0xc8b/0xf50 [ 165.953280][ T8705] call_timer_fn+0x18e/0x650 [ 165.957896][ T8705] __run_timer_base+0x695/0x8e0 [ 165.962757][ T8705] run_timer_softirq+0xb7/0x170 [ 165.967616][ T8705] handle_softirqs+0x2c5/0x980 [ 165.972413][ T8705] __irq_exit_rcu+0xf4/0x1c0 [ 165.977018][ T8705] irq_exit_rcu+0x9/0x30 [ 165.981269][ T8705] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 165.986912][ T8705] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 165.992906][ T8705] [ 165.995245][ T8705] The buggy address belongs to the object at ffff888028c54000 [ 165.995245][ T8705] which belongs to the cache kmalloc-8k of size 8192 [ 166.009313][ T8705] The buggy address is located 96 bytes inside of [ 166.009313][ T8705] freed 8192-byte region [ffff888028c54000, ffff888028c56000) [ 166.023123][ T8705] [ 166.025448][ T8705] The buggy address belongs to the physical page: [ 166.031864][ T8705] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28c50 [ 166.040631][ T8705] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 166.049140][ T8705] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 166.056707][ T8705] page_type: f5(slab) [ 166.060695][ T8705] raw: 00fff00000000040 ffff88801ac42280 dead000000000122 0000000000000000 [ 166.069286][ T8705] raw: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 166.077876][ T8705] head: 00fff00000000040 ffff88801ac42280 dead000000000122 0000000000000000 [ 166.086752][ T8705] head: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 166.095439][ T8705] head: 00fff00000000003 ffffea0000a31401 ffffffffffffffff 0000000000000000 [ 166.104126][ T8705] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 166.112817][ T8705] page dumped because: kasan: bad access detected [ 166.119237][ T8705] page_owner tracks the page as allocated [ 166.124950][ T8705] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 8423, tgid 8423 (syz-executor), ts 155148453350, free_ts 155142849674 [ 166.146503][ T8705] post_alloc_hook+0x1f3/0x230 [ 166.151290][ T8705] get_page_from_freelist+0x303f/0x3190 [ 166.156841][ T8705] __alloc_pages_noprof+0x292/0x710 [ 166.162072][ T8705] alloc_pages_mpol_noprof+0x3e8/0x680 [ 166.167539][ T8705] alloc_slab_page+0x6a/0x120 [ 166.172229][ T8705] allocate_slab+0x5a/0x2f0 [ 166.176737][ T8705] ___slab_alloc+0xcd1/0x14b0 [ 166.181429][ T8705] __slab_alloc+0x58/0xa0 [ 166.185768][ T8705] __kmalloc_node_noprof+0x286/0x440 [ 166.191071][ T8705] __kvmalloc_node_noprof+0x72/0x190 [ 166.196363][ T8705] wg_packet_queue_init+0x92/0x2f0 [ 166.201488][ T8705] wg_newlink+0x2f5/0x640 [ 166.205821][ T8705] rtnl_newlink_create+0x2df/0xa30 [ 166.210935][ T8705] rtnl_newlink+0xfa9/0x1550 [ 166.215545][ T8705] rtnetlink_rcv_msg+0x73f/0xcf0 [ 166.220527][ T8705] netlink_rcv_skb+0x1e3/0x430 [ 166.225302][ T8705] page last free pid 8474 tgid 8471 stack trace: [ 166.231633][ T8705] free_unref_page+0xcfb/0xf20 [ 166.236408][ T8705] __folio_put+0x2c7/0x440 [ 166.240829][ T8705] free_large_kmalloc+0x105/0x1c0 [ 166.245872][ T8705] kfree+0x21c/0x440 [ 166.249785][ T8705] skb_release_data+0x6a0/0x8a0 [ 166.254836][ T8705] consume_skb+0x9f/0xf0 [ 166.259095][ T8705] netlink_unicast+0x800/0x990 [ 166.263881][ T8705] netlink_sendmsg+0x8e4/0xcb0 [ 166.269096][ T8705] __sock_sendmsg+0x221/0x270 [ 166.273815][ T8705] ____sys_sendmsg+0x52a/0x7e0 [ 166.278589][ T8705] __sys_sendmsg+0x292/0x380 [ 166.283191][ T8705] do_syscall_64+0xf3/0x230 [ 166.287701][ T8705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.293627][ T8705] [ 166.296002][ T8705] Memory state around the buggy address: [ 166.301673][ T8705] ffff888028c53f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 166.309748][ T8705] ffff888028c53f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 166.317824][ T8705] >ffff888028c54000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 166.325888][ T8705] ^ [ 166.333097][ T8705] ffff888028c54080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 166.341176][ T8705] ffff888028c54100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 166.349238][ T8705] ================================================================== [ 166.359255][ T8705] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 166.366510][ T8705] CPU: 0 UID: 0 PID: 8705 Comm: khidpd_0c451012 Not tainted 6.12.0-rc5-syzkaller-01152-gc688a96c432e #0 [ 166.377653][ T8705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 166.387753][ T8705] Call Trace: [ 166.391061][ T8705] [ 166.394016][ T8705] dump_stack_lvl+0x241/0x360 [ 166.398758][ T8705] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.404003][ T8705] ? __pfx__printk+0x10/0x10 [ 166.408648][ T8705] ? vscnprintf+0x5d/0x90 [ 166.413018][ T8705] panic+0x349/0x880 [ 166.416970][ T8705] ? check_panic_on_warn+0x21/0xb0 [ 166.422131][ T8705] ? __pfx_panic+0x10/0x10 [ 166.426597][ T8705] ? mark_lock+0x9a/0x360 [ 166.430964][ T8705] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 166.436900][ T8705] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 166.442831][ T8705] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 166.449179][ T8705] ? print_report+0x502/0x550 [ 166.453974][ T8705] check_panic_on_warn+0x86/0xb0 [ 166.458920][ T8705] ? __mutex_lock+0x6c0/0xd70 [ 166.463601][ T8705] end_report+0x77/0x160 [ 166.467855][ T8705] kasan_report+0x154/0x180 [ 166.472404][ T8705] ? __mutex_lock+0x6c0/0xd70 [ 166.477089][ T8705] __mutex_lock+0x6c0/0xd70 [ 166.481623][ T8705] ? __mutex_lock+0x52a/0xd70 [ 166.486323][ T8705] ? l2cap_unregister_user+0x6a/0x1c0 [ 166.491749][ T8705] ? __pfx___mutex_lock+0x10/0x10 [ 166.496792][ T8705] ? __pfx___timer_delete_sync+0x10/0x10 [ 166.502456][ T8705] l2cap_unregister_user+0x6a/0x1c0 [ 166.507695][ T8705] hidp_session_thread+0x450/0x490 [ 166.512827][ T8705] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 166.518746][ T8705] ? __pfx_hidp_session_thread+0x10/0x10 [ 166.524483][ T8705] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 166.530388][ T8705] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 166.536648][ T8705] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 166.542902][ T8705] ? __kthread_parkme+0x169/0x1d0 [ 166.547942][ T8705] ? __pfx_hidp_session_thread+0x10/0x10 [ 166.553614][ T8705] kthread+0x2f0/0x390 [ 166.557704][ T8705] ? __pfx_hidp_session_thread+0x10/0x10 [ 166.563381][ T8705] ? __pfx_kthread+0x10/0x10 [ 166.568003][ T8705] ret_from_fork+0x4b/0x80 [ 166.572514][ T8705] ? __pfx_kthread+0x10/0x10 [ 166.577133][ T8705] ret_from_fork_asm+0x1a/0x30 [ 166.581931][ T8705] [ 166.585296][ T8705] Kernel Offset: disabled [ 166.589625][ T8705] Rebooting in 86400 seconds..