last executing test programs: 43.954695861s ago: executing program 1 (id=2412): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x0, 0x0, @prog_id}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r0, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000002c0), 0x0, 0x0}, 0x40) 43.793279683s ago: executing program 1 (id=2413): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000000c0)=0xffffffffffffffe1, 0x12) 43.323761891s ago: executing program 1 (id=2424): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f0000000f40)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c, &(0x7f0000001fc0)=[{&(0x7f0000000f80)="ea", 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000040)="01", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000080)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000180)=0x100) 29.7168748s ago: executing program 1 (id=2424): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f0000000f40)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c, &(0x7f0000001fc0)=[{&(0x7f0000000f80)="ea", 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000040)="01", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000080)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000180)=0x100) 15.444434723s ago: executing program 1 (id=2424): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f0000000f40)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c, &(0x7f0000001fc0)=[{&(0x7f0000000f80)="ea", 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000040)="01", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000080)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000180)=0x100) 6.265369023s ago: executing program 1 (id=2424): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f0000000f40)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c, &(0x7f0000001fc0)=[{&(0x7f0000000f80)="ea", 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000040)="01", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000080)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000180)=0x100) 5.31909431s ago: executing program 0 (id=2877): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x275a, 0x0) pread64(r1, &(0x7f0000000140)=""/130, 0x2df, 0x0) 5.163114515s ago: executing program 0 (id=2880): socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000240), 0x4) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={0x0}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000000206050200000000000000000000000005000400000000000900020073797a300000000014000780080013400000000008000640000019000500050002000000050001000600000012000300686173683a6e6574"], 0x60}}, 0x0) 5.090387942s ago: executing program 0 (id=2882): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000200)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x90) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}}}, &(0x7f0000000380)=0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000003c0)={r2, 0x7ff, 0x1}, 0x8) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003500), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000005d80)={0x0, 0x0, &(0x7f0000005d40)={&(0x7f0000000280)=ANY=[@ANYBLOB="000000000000004d56097ab159fedecad300000000", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000001000028004000180080001000000000004000180"], 0x28}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000033c0), 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="1c00000007"], 0xd) 4.223174017s ago: executing program 0 (id=2896): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 4.13504898s ago: executing program 0 (id=2898): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000580)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r2, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x977e09a95c43052e}, 0x9c) 4.049076407s ago: executing program 0 (id=2900): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002f80)=[{{0x0, 0x0, 0x0}}], 0x4000271, 0x0, 0x0) 2.355423929s ago: executing program 2 (id=2912): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1, 0x840, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ce2a4fa77baa108b"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000180)={0x2, 0x808, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "a9d350ea09a558bbc069972fd6135503414190c502f593570fa6bb0fa85d9b3128353dcadf8bb71c06e619b08986d626a032ff1c224c9e1aa390b57d5bcf9ff7"}}, 0x80}}, 0x0) 2.298935802s ago: executing program 4 (id=2913): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, &(0x7f0000000000)="fcffffff", 0x4) 2.272599267s ago: executing program 2 (id=2915): r0 = socket(0x200000000000011, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x9004}, 0x4) syz_emit_ethernet(0xe80, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbbaa8aaaaaaa0008004500001400000002"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000780)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080)) socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000800)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000000c0), 0x485a) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x0, 0x40000005}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$sock_int(r5, 0x1, 0x20, &(0x7f00000003c0), 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x3, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 2.103750884s ago: executing program 4 (id=2917): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8001, @fixed}, 0xe) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0xffffffffffffffc1, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x48}}, 0x0) sendmmsg(r1, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005f00)=ANY=[@ANYBLOB="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"], 0x1540}}], 0x2, 0x0) 1.973431798s ago: executing program 3 (id=2919): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 1.895745319s ago: executing program 4 (id=2920): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, 0x0, 0x0}, 0x90) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}, {&(0x7f0000001240)="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", 0x450}], 0x27, 0x0, 0x0, 0x448c7}, 0x0) 1.866906613s ago: executing program 4 (id=2921): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e8, 0x418, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x418, 0x3d8, 0x3d8, 0x418, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x24, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000280)={'filter\x00', 0x104, 0x4, 0x410, 0x110, 0x0, 0x110, 0x330, 0x330, 0x330, 0x4, 0x0, {[{{@arp={@local, @multicast1, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac, @broadcast, @local, 0x1}}}, {{@uncond, 0xc0, 0x108}, @mangle={0x0, 'mangle\x00', 0x0, {@empty, @mac=@link_local, @dev={0xac, 0x14, 0x14, 0x3e}, @local, 0xf, 0x1}}}, {{@arp={@empty, @private, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local, {[0xff]}}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'erspan0\x00', 'ipvlan1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="43247bc014cb", @dev, @loopback, 0x4, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x494) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25ADDUID(r2, 0x89e1, &(0x7f0000000240)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@ipv6_delrule={0x30, 0x21, 0x423, 0x0, 0x0, {}, [@FRA_DST={0x14, 0x14, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x30}}, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x363ed198bbed6dcc, &(0x7f0000000000)={@remote, @empty}, &(0x7f0000000040)=0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000000140)=0xfffffffd, 0x4) 1.813978327s ago: executing program 3 (id=2922): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0xf, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xba}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.727740568s ago: executing program 3 (id=2923): setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x0, 0x803, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRESDEC, @ANYRESOCT], 0x30}, 0x1, 0x0, 0x0, 0x2}, 0x20008800) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x0, [@bcast, @default, @default, @null, @bcast, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_hci(r2, 0x0, 0x2, &(0x7f0000000780)=""/3, &(0x7f00000007c0)=0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000", @ANYBLOB="aaf1fac2513d37c7cdfb36bc8e5d1ff8ef7b44e7a88b59ae42895c33f0b05b1d10d31db1ca895e056a1692955f00fe2d", @ANYRESDEC, @ANYRES64, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES16, @ANYRES8, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x71, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.548079678s ago: executing program 3 (id=2924): socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x10, 0x80002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000085000000d000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='ext4_request_inode\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x26e1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) socket$packet(0x11, 0x3, 0x300) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) 1.341175171s ago: executing program 2 (id=2925): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1, 0x840, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ce2a4fa77baa108b"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000180)={0x2, 0x808, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "a9d350ea09a558bbc069972fd6135503414190c502f593570fa6bb0fa85d9b3128353dcadf8bb71c06e619b08986d626a032ff1c224c9e1aa390b57d5bcf9ff7"}}, 0x80}}, 0x0) 1.272933631s ago: executing program 2 (id=2926): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000058299ea6000000b40808f049dd16fa692500000000002020207b07010000f8ffffffb702000008ffffff"], 0x0}, 0x90) socket$inet6_dccp(0xa, 0x6, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000800)="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", 0x2de}, {&(0x7f0000000bc0)="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", 0x1e9}, {&(0x7f00000000c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9d", 0xa0}, {&(0x7f0000000200)="f610e61fc81cc3edc86f0500194d27a5a42cf1880b0dfd1ecda0fd0ed9a444b7fbb161860c18ff851923b530208f", 0x2e}], 0x4, 0x0, 0x0, 0x900}}], 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}}) 153.748387ms ago: executing program 4 (id=2927): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, &(0x7f0000000000)="fcffffff", 0x4) 140.621147ms ago: executing program 3 (id=2928): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="611230000000000061138c0000000000bf2000000000000016000700071b48013d030100000000009500020100000000bc26000000000000bf67080000000000070300000fff0700670200000c000000360600000ee600f0bf050000000000000f250000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586a51309834c1b8894af585e9134cf05d811"], &(0x7f0000000100)='GPL\x00'}, 0x48) 139.548039ms ago: executing program 2 (id=2929): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000100001302000000000072cfd7d0d2a4960f00000000"], &(0x7f0000000080)=""/220, 0x32, 0x31, 0x1}, 0x20) 29.990233ms ago: executing program 4 (id=2930): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x9f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000280)='memory.pressure\x00', 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x840000000002, 0x3, 0x100) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f00000002c0)) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x80800) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000140), 0x4) 14.194756ms ago: executing program 3 (id=2931): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x18, 0x52, 0x1, 0x0, 0x0, {0x2, 0x3}, [@nested={0x4, 0x3}]}, 0x18}}, 0x0) 0s ago: executing program 2 (id=2932): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) kernel console output (not intermixed with test programs): 50400 per kthread [ 101.830322][ T51] team0 (unregistering): Port device team_slave_1 removed [ 101.860282][ T51] team0 (unregistering): Port device team_slave_0 removed [ 102.140960][ T6606] netlink: 'syz.2.604': attribute type 10 has an invalid length. [ 102.262854][ T6475] hsr_slave_0: entered promiscuous mode [ 102.275631][ T6642] __nla_validate_parse: 4 callbacks suppressed [ 102.275647][ T6642] netlink: 100 bytes leftover after parsing attributes in process `syz.2.620'. [ 102.292921][ T6475] hsr_slave_1: entered promiscuous mode [ 102.301346][ T6475] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.318850][ T6475] Cannot create hsr debugfs directory [ 102.329739][ T6644] sctp: [Deprecated]: syz.1.622 (pid 6644) Use of struct sctp_assoc_value in delayed_ack socket option. [ 102.329739][ T6644] Use struct sctp_sack_info instead [ 102.379900][ T5103] Bluetooth: hci1: command tx timeout [ 102.414822][ T6638] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 102.446069][ T6638] macsec1: entered promiscuous mode [ 102.470512][ T6638] macsec1: entered allmulticast mode [ 102.508195][ T6638] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 102.518704][ T6638] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 102.526044][ T6638] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 102.829097][ T6659] netlink: 188 bytes leftover after parsing attributes in process `syz.1.629'. [ 102.851239][ T6659] netlink: 'syz.1.629': attribute type 1 has an invalid length. [ 102.859651][ T6659] netlink: 20 bytes leftover after parsing attributes in process `syz.1.629'. [ 103.132562][ T6675] netlink: 404 bytes leftover after parsing attributes in process `syz.1.637'. [ 103.157590][ T6675] netlink: 28 bytes leftover after parsing attributes in process `syz.1.637'. [ 103.178010][ T6675] netlink: 28 bytes leftover after parsing attributes in process `syz.1.637'. [ 103.199755][ T6675] netlink: 20 bytes leftover after parsing attributes in process `syz.1.637'. [ 103.398515][ T6680] netlink: 'syz.1.638': attribute type 3 has an invalid length. [ 103.466522][ T6475] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.494103][ T6475] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.544793][ T6682] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 103.567853][ T6682] macsec1: entered promiscuous mode [ 103.590010][ T6682] macsec1: entered allmulticast mode [ 103.595332][ T6682] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 103.708761][ T6682] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 103.716532][ T6682] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 103.753152][ T6475] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.786404][ T6475] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.927423][ T6692] team_slave_0: entered promiscuous mode [ 103.933487][ T6692] team_slave_1: entered promiscuous mode [ 103.949999][ T6692] vlan2: entered promiscuous mode [ 103.955050][ T6692] team0: entered promiscuous mode [ 103.961178][ T6692] vlan2: entered allmulticast mode [ 103.966490][ T6692] team0: entered allmulticast mode [ 103.976952][ T6692] team_slave_0: entered allmulticast mode [ 103.993294][ T6692] team_slave_1: entered allmulticast mode [ 104.006573][ T6692] team0: left allmulticast mode [ 104.015295][ T6692] team_slave_0: left allmulticast mode [ 104.025027][ T6692] team_slave_1: left allmulticast mode [ 104.036086][ T6692] team0: left promiscuous mode [ 104.044740][ T6692] team_slave_0: left promiscuous mode [ 104.050264][ T6692] team_slave_1: left promiscuous mode [ 104.078738][ T6694] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 104.271797][ T6475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.310128][ T6703] netlink: 68 bytes leftover after parsing attributes in process `syz.4.648'. [ 104.323691][ T6475] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.341648][ T6703] netlink: 24 bytes leftover after parsing attributes in process `syz.4.648'. [ 104.367613][ T6703] netlink: 16 bytes leftover after parsing attributes in process `syz.4.648'. [ 104.373993][ T932] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.383660][ T932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.450713][ T932] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.457626][ T5103] Bluetooth: hci1: command tx timeout [ 104.457894][ T932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.545213][ T6710] netlink: 'syz.3.651': attribute type 10 has an invalid length. [ 104.566912][ T6710] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 104.932951][ T6475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.963817][ T6726] team_slave_0: entered promiscuous mode [ 104.969620][ T6726] team_slave_1: entered promiscuous mode [ 104.992521][ T6726] vlan3: entered promiscuous mode [ 105.003051][ T6726] team0: entered promiscuous mode [ 105.010813][ T6726] vlan3: entered allmulticast mode [ 105.016202][ T6726] team0: entered allmulticast mode [ 105.026529][ T6726] team_slave_0: entered allmulticast mode [ 105.035591][ T6726] team_slave_1: entered allmulticast mode [ 105.055365][ T6726] team0: left allmulticast mode [ 105.064790][ T6726] team_slave_0: left allmulticast mode [ 105.085310][ T6726] team_slave_1: left allmulticast mode [ 105.093056][ T6726] team0: left promiscuous mode [ 105.099197][ T6726] team_slave_0: left promiscuous mode [ 105.104712][ T6726] team_slave_1: left promiscuous mode [ 105.201561][ T6737] sch_tbf: burst 0 is lower than device veth1_to_bridge mtu (1514) ! [ 105.355312][ T6475] veth0_vlan: entered promiscuous mode [ 105.405150][ T6475] veth1_vlan: entered promiscuous mode [ 105.499392][ T6475] veth0_macvtap: entered promiscuous mode [ 105.517979][ T6475] veth1_macvtap: entered promiscuous mode [ 105.565859][ T6475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.617618][ T6475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.649841][ T6475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.669182][ T6752] netlink: 'syz.1.666': attribute type 3 has an invalid length. [ 105.676961][ T6475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.692666][ T6475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.703387][ T6475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.724337][ T6475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.735772][ T6751] netlink: 'syz.3.665': attribute type 10 has an invalid length. [ 105.752415][ T6751] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 105.809930][ T6475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.850294][ T6475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.868472][ T6475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.886790][ T6475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.906919][ T6475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.928031][ T6475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.959569][ T6475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.978871][ T6475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.012582][ T6475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.066514][ T6758] IPVS: length: 192 != 8 [ 106.107334][ T6475] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.132465][ T6475] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.163615][ T6475] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.180390][ T6475] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.218685][ T6764] syzkaller0: entered allmulticast mode [ 106.464513][ T6776] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 106.504000][ T6776] macsec1: entered promiscuous mode [ 106.523981][ T6776] macsec1: entered allmulticast mode [ 106.537690][ T5103] Bluetooth: hci1: command tx timeout [ 106.551907][ T6776] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 106.586296][ T6776] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 106.607891][ T6776] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 106.730396][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.769474][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.893371][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.924885][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.663681][ T6817] bond0: entered promiscuous mode [ 107.689946][ T6817] bond_slave_0: entered promiscuous mode [ 107.718928][ T6817] bond_slave_1: entered promiscuous mode [ 107.786688][ T6822] netlink: 'syz.2.691': attribute type 3 has an invalid length. [ 107.807700][ T6822] __nla_validate_parse: 6 callbacks suppressed [ 107.807716][ T6822] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.691'. [ 107.949147][ T6822] syzkaller0: entered allmulticast mode [ 107.987251][ T6822] IPVS: length: 192 != 8 [ 108.233320][ T6840] netlink: 'syz.0.698': attribute type 1 has an invalid length. [ 108.376572][ T6847] netlink: 6 bytes leftover after parsing attributes in process `syz.2.700'. [ 108.416450][ T6847] netlink: 6 bytes leftover after parsing attributes in process `syz.2.700'. [ 108.691260][ T6858] batadv_slave_0: mtu less than device minimum [ 108.757438][ T6862] netlink: 4 bytes leftover after parsing attributes in process `syz.1.707'. [ 108.903293][ T6868] netlink: 12 bytes leftover after parsing attributes in process `syz.2.710'. [ 108.932936][ T6868] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 108.940213][ T6868] IPv6: NLM_F_CREATE should be set when creating new route [ 108.947627][ T6868] IPv6: NLM_F_CREATE should be set when creating new route [ 109.208534][ T6882] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.717'. [ 109.228148][ T6882] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 109.237456][ T6882] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 109.301032][ T6886] sch_tbf: burst 0 is lower than device veth1_to_bridge mtu (1514) ! [ 109.323523][ T6888] x_tables: unsorted underflow at hook 4 [ 109.770560][ T6912] x_tables: unsorted underflow at hook 4 [ 109.784874][ T6913] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.266682][ T6942] x_tables: unsorted underflow at hook 4 [ 110.448933][ T6955] netlink: 6 bytes leftover after parsing attributes in process `syz.0.749'. [ 110.472162][ T6955] netlink: 6 bytes leftover after parsing attributes in process `syz.0.749'. [ 111.940351][ T7025] tun0: tun_chr_ioctl cmd 2147767507 [ 111.971761][ T7025] netlink: 'syz.2.781': attribute type 1 has an invalid length. [ 113.062995][ T7084] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 113.083427][ T7088] Bluetooth: hci3: service_discovery: too big uuid_count value 65535 [ 113.132400][ T7084] syzkaller0: entered promiscuous mode [ 113.145298][ T7084] syzkaller0: entered allmulticast mode [ 113.163490][ T7088] netlink: 96 bytes leftover after parsing attributes in process `syz.4.806'. [ 113.851409][ T7118] xt_hashlimit: size too large, truncated to 1048576 [ 113.863803][ T7118] xt_hashlimit: overflow, try lower: 0/0 [ 115.448304][ T7137] tun0: tun_chr_ioctl cmd 2147767507 [ 115.482434][ T7137] netlink: 'syz.0.831': attribute type 1 has an invalid length. [ 116.099748][ T7152] netlink: 64 bytes leftover after parsing attributes in process `syz.2.837'. [ 116.269433][ T7176] netlink: 201400 bytes leftover after parsing attributes in process `syz.3.849'. [ 116.787737][ T7208] netlink: 'syz.3.865': attribute type 1 has an invalid length. [ 117.047129][ T7223] netlink: 1 bytes leftover after parsing attributes in process `syz.3.869'. [ 117.850773][ T7258] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.886'. [ 117.878835][ T7258] openvswitch: netlink: Tunnel attr 8192 out of range max 16 [ 117.949604][ T7262] netlink: 28 bytes leftover after parsing attributes in process `syz.1.884'. [ 118.350795][ T7282] netlink: 4 bytes leftover after parsing attributes in process `syz.4.897'. [ 118.467300][ T7289] netlink: 1 bytes leftover after parsing attributes in process `syz.2.900'. [ 118.568408][ T7293] netlink: 'syz.3.902': attribute type 1 has an invalid length. [ 118.596730][ T7296] netlink: 12 bytes leftover after parsing attributes in process `syz.0.903'. [ 118.953429][ T7306] netlink: 'syz.3.908': attribute type 2 has an invalid length. [ 119.005730][ T7306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.908'. [ 119.236278][ T7314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.912'. [ 119.323238][ T7323] netlink: 12 bytes leftover after parsing attributes in process `syz.0.916'. [ 119.473987][ T7330] netlink: 277 bytes leftover after parsing attributes in process `syz.0.919'. [ 119.506206][ T7333] netlink: 28 bytes leftover after parsing attributes in process `syz.4.920'. [ 119.546772][ T7333] netlink: 'syz.4.920': attribute type 1 has an invalid length. [ 119.619579][ T7338] tap0: tun_chr_ioctl cmd 1074025677 [ 119.641340][ T7338] tap0: linktype set to 768 [ 119.713254][ T7344] netlink: 1 bytes leftover after parsing attributes in process `syz.1.922'. [ 119.916908][ T7355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.929'. [ 120.169746][ T7369] TCP: TCP_TX_DELAY enabled [ 120.287861][ T7379] netlink: 'syz.0.940': attribute type 2 has an invalid length. [ 120.830298][ T7409] netlink: 'syz.2.952': attribute type 2 has an invalid length. [ 121.634006][ T7443] netlink: 'syz.3.970': attribute type 13 has an invalid length. [ 122.038314][ T5094] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 122.050470][ T5094] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 122.084321][ T5094] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 122.093917][ T5094] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 122.102121][ T5094] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 122.113236][ T5094] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 122.363295][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.397585][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.563147][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.584041][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.627579][ T5094] Bluetooth: hci1: command 0x0405 tx timeout [ 122.822389][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.861596][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.035664][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.066744][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.323280][ T7445] chnl_net:caif_netlink_parms(): no params data found [ 123.652182][ T7481] bridge: RTM_NEWNEIGH with invalid ether address [ 123.781531][ T7445] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.799800][ T7445] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.818651][ T7445] bridge_slave_0: entered allmulticast mode [ 123.838590][ T7445] bridge_slave_0: entered promiscuous mode [ 123.865371][ T7445] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.889604][ T7445] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.919779][ T7445] bridge_slave_1: entered allmulticast mode [ 123.944478][ T7445] bridge_slave_1: entered promiscuous mode [ 123.962180][ T11] bridge_slave_1: left allmulticast mode [ 123.977739][ T11] bridge_slave_1: left promiscuous mode [ 124.007876][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.052580][ T11] bridge_slave_0: left allmulticast mode [ 124.068149][ T11] bridge_slave_0: left promiscuous mode [ 124.073902][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.218434][ T5103] Bluetooth: hci0: command tx timeout [ 124.931010][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.974372][ T11] bond0 (unregistering): Released all slaves [ 125.073952][ T11] bond1 (unregistering): (slave bond_slave_0): Releasing active interface [ 125.103479][ T11] bond_slave_0: left promiscuous mode [ 125.162195][ T11] bond1 (unregistering): Released all slaves [ 125.259767][ T7445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.308003][ T7494] syzkaller1: entered promiscuous mode [ 125.330067][ T7494] syzkaller1: entered allmulticast mode [ 125.372477][ T7445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.690274][ T7511] netlink: 'syz.3.996': attribute type 13 has an invalid length. [ 125.713957][ T7445] team0: Port device team_slave_0 added [ 125.776491][ T7445] team0: Port device team_slave_1 added [ 125.951677][ T7522] netlink: 'syz.3.998': attribute type 24 has an invalid length. [ 125.970350][ T7526] dccp_invalid_packet: P.type (CLOSE) not Data || [Data]Ack, while P.X == 0 [ 126.075015][ T7445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.121552][ T7445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.226255][ T7445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.297632][ T5103] Bluetooth: hci0: command tx timeout [ 126.351783][ T11] hsr_slave_0: left promiscuous mode [ 126.374791][ T11] hsr_slave_1: left promiscuous mode [ 126.402450][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.425654][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.463075][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.485904][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.567914][ T11] veth1_macvtap: left promiscuous mode [ 126.573495][ T11] veth0_macvtap: left promiscuous mode [ 126.588412][ T11] veth1_vlan: left promiscuous mode [ 126.614188][ T11] veth0_vlan: left promiscuous mode [ 127.161168][ T11] team0 (unregistering): Port device team_slave_1 removed [ 127.194538][ T11] team0 (unregistering): Port device team_slave_0 removed [ 127.493864][ T7445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.501934][ T7445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.528306][ T7445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.576711][ T7553] __nla_validate_parse: 9 callbacks suppressed [ 127.576728][ T7553] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1011'. [ 127.592541][ T7553] tipc: Started in network mode [ 127.597389][ T7553] tipc: Node identity 1, cluster identity 4711 [ 127.603607][ T7553] tipc: Node number set to 1 [ 127.726125][ T7445] hsr_slave_0: entered promiscuous mode [ 127.767840][ T7445] hsr_slave_1: entered promiscuous mode [ 127.780904][ T7445] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.790442][ T7445] Cannot create hsr debugfs directory [ 128.053113][ T7577] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 128.130070][ T7577] Bluetooth: MGMT ver 1.22 [ 128.378300][ T5103] Bluetooth: hci0: command tx timeout [ 128.990294][ T7605] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1033'. [ 129.025614][ T7605] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1033'. [ 129.137281][ T7605] tipc: Failed to remove unknown binding: 66,1,1/0:2468429895/2468429897 [ 129.166832][ T7605] tipc: Failed to remove unknown binding: 66,1,1/0:2468429895/2468429897 [ 129.188029][ T7611] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1035'. [ 129.210214][ T7605] tipc: Failed to remove unknown binding: 66,1,1/0:2468429895/2468429897 [ 129.227651][ T7611] netlink: 'syz.2.1035': attribute type 2 has an invalid length. [ 129.244206][ T7611] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1035'. [ 129.279276][ T7445] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 129.360180][ T7445] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 129.402538][ T7445] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 129.435347][ T7612] pim6reg1: entered promiscuous mode [ 129.440960][ T7612] pim6reg1: entered allmulticast mode [ 129.508002][ T7445] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 129.784730][ T7445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.872868][ T7445] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.903998][ T5172] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.911233][ T5172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.943005][ T932] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.950194][ T932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.458091][ T5103] Bluetooth: hci0: command tx timeout [ 130.487792][ T7445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.696218][ T7640] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1045'. [ 130.723967][ T7640] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1045'. [ 130.875719][ T7640] tipc: Failed to remove unknown binding: 66,1,1/0:1332869427/1332869429 [ 130.908478][ T7640] tipc: Failed to remove unknown binding: 66,1,1/0:1332869427/1332869429 [ 130.937044][ T7640] tipc: Failed to remove unknown binding: 66,1,1/0:1332869427/1332869429 [ 131.114460][ T7445] veth0_vlan: entered promiscuous mode [ 131.159513][ T7445] veth1_vlan: entered promiscuous mode [ 131.243453][ T7653] xt_limit: Overflow, try lower: 262144/524288 [ 131.267191][ T7445] veth0_macvtap: entered promiscuous mode [ 131.301894][ T7445] veth1_macvtap: entered promiscuous mode [ 131.353313][ T7445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.388083][ T7445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.403718][ T7445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.422225][ T7445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.450261][ T7445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.477519][ T7445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.499096][ T7445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.544403][ T7445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.570029][ T7445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.594880][ T7445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.617524][ T7445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.627348][ T7445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.647973][ T7445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.691056][ T7445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.712340][ T7445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.739470][ T7445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.762829][ T7664] netlink: 'syz.3.1051': attribute type 3 has an invalid length. [ 131.782926][ T7445] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.802047][ T7445] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.832893][ T7445] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.857666][ T7445] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.059185][ T1052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.067046][ T1052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.149493][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.157350][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.512258][ T7684] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1060'. [ 132.546117][ T7684] netlink: 'syz.2.1060': attribute type 1 has an invalid length. [ 132.574622][ T7684] netlink: 'syz.2.1060': attribute type 2 has an invalid length. [ 132.584628][ T7684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1060'. [ 133.101011][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.108503][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.304883][ T7711] xt_limit: Overflow, try lower: 262144/524288 [ 133.392717][ T7714] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1073'. [ 133.428180][ T7714] netlink: 'syz.1.1073': attribute type 1 has an invalid length. [ 133.456299][ T7714] netlink: 'syz.1.1073': attribute type 2 has an invalid length. [ 133.472052][ T7716] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1074'. [ 133.480856][ T7714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1073'. [ 133.574999][ T7718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1074'. [ 133.697409][ T7720] tipc: Enabling of bearer rejected, failed to enable media [ 134.634526][ T7742] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1084'. [ 134.662058][ T7742] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1084'. [ 134.719871][ T7750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1085'. [ 134.807661][ T7742] tipc: Failed to remove unknown binding: 66,1,1/0:3001996507/3001996509 [ 134.843760][ T7742] tipc: Failed to remove unknown binding: 66,1,1/0:3001996507/3001996509 [ 134.843997][ T7747] tipc: Started in network mode [ 134.874271][ T7747] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 134.887849][ T7742] tipc: Failed to remove unknown binding: 66,1,1/0:3001996507/3001996509 [ 134.917918][ T7747] tipc: Enabling of bearer rejected, failed to enable media [ 135.741523][ T7781] netlink: 'syz.2.1099': attribute type 1 has an invalid length. [ 135.766888][ T7781] netlink: 9324 bytes leftover after parsing attributes in process `syz.2.1099'. [ 135.809936][ T7781] netlink: 'syz.2.1099': attribute type 1 has an invalid length. [ 135.834973][ T7781] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1099'. [ 136.213390][ T7802] Κό: entered promiscuous mode [ 136.624212][ T7822] netlink: 'syz.1.1119': attribute type 2 has an invalid length. [ 136.765789][ T7822] pim6reg1: entered promiscuous mode [ 136.788972][ T7822] pim6reg1: entered allmulticast mode [ 137.208264][ T7834] Κό: entered promiscuous mode [ 137.558412][ T7845] tipc: Can't bind to reserved service type 2 [ 137.735064][ T7851] __nla_validate_parse: 5 callbacks suppressed [ 137.735083][ T7851] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1132'. [ 137.810840][ T7857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1135'. [ 137.856193][ T7860] netlink: 'syz.3.1136': attribute type 8 has an invalid length. [ 137.876371][ T7857] veth0_macvtap: left promiscuous mode [ 138.380367][ T7879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1144'. [ 138.436564][ T7879] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1144'. [ 138.605647][ T7879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1144'. [ 138.806977][ T7898] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1153'. [ 138.838543][ T7898] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1153'. [ 138.871074][ T7898] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1153'. [ 139.136502][ T7913] netlink: 'syz.0.1158': attribute type 8 has an invalid length. [ 139.417314][ T7925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1163'. [ 139.650712][ T7938] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1169'. [ 139.844000][ T7945] netlink: 'syz.2.1172': attribute type 8 has an invalid length. [ 140.601716][ T7973] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 140.641983][ T7968] netlink: 'syz.1.1183': attribute type 63 has an invalid length. [ 141.277828][ T8007] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 142.220725][ T1052] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.244550][ T1052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.853100][ T8087] __nla_validate_parse: 4 callbacks suppressed [ 142.853118][ T8087] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1235'. [ 142.876107][ T8090] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1236'. [ 142.902497][ T8090] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1236'. [ 142.960511][ T8094] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1236'. [ 143.007423][ T8096] netlink: 'syz.2.1237': attribute type 4 has an invalid length. [ 143.024785][ T8096] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1237'. [ 144.576373][ T8113] dccp_close: ABORT with 32 bytes unread [ 145.045024][ T8154] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1263'. [ 145.229216][ T8161] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1267'. [ 145.534485][ T8171] veth0_vlan: left promiscuous mode [ 145.783264][ T8163] delete_channel: no stack [ 145.793566][ T8189] netlink: 'syz.3.1274': attribute type 39 has an invalid length. [ 146.126440][ T8198] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1277'. [ 146.434558][ T8207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1281'. [ 146.457164][ T8209] x_tables: ip_tables: ah match: only valid for protocol 51 [ 147.209718][ T8246] syz.4.1294 (8246) used greatest stack depth: 17936 bytes left [ 147.262974][ T8250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1296'. [ 147.635728][ T8267] trusted_key: syz.0.1304 sent an empty control message without MSG_MORE. [ 147.769598][ T8271] hsr_slave_0: left promiscuous mode [ 147.812595][ T8271] hsr_slave_1: left promiscuous mode [ 147.885152][ T8284] __nla_validate_parse: 2 callbacks suppressed [ 147.885171][ T8284] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1310'. [ 148.522826][ T8308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1319'. [ 148.556674][ T8308] bridge_slave_1: left allmulticast mode [ 148.571164][ T8308] bridge_slave_1: left promiscuous mode [ 148.585123][ T8308] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.640836][ T8308] bridge_slave_0: left allmulticast mode [ 148.646519][ T8308] bridge_slave_0: left promiscuous mode [ 148.658255][ T8308] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.855598][ T8355] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1334'. [ 150.451726][ T8345] dccp_close: ABORT with 32 bytes unread [ 150.568496][ T8370] veth0_vlan: left promiscuous mode [ 150.964758][ T8364] delete_channel: no stack [ 151.135554][ T8383] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1346'. [ 151.330340][ T8391] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1349'. [ 151.513530][ T8395] netlink: 'syz.2.1351': attribute type 10 has an invalid length. [ 151.641392][ T8395] team0: Port device veth0_macvtap added [ 151.823502][ T8407] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1355'. [ 152.277563][ T8424] netlink: 'syz.2.1362': attribute type 1 has an invalid length. [ 152.639736][ T8437] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1368'. [ 152.704286][ T8440] x_tables: ip_tables: ah match: only valid for protocol 51 [ 152.837128][ T8443] xt_limit: Overflow, try lower: 262144/524288 [ 153.208282][ T8451] netlink: 'syz.2.1375': attribute type 1 has an invalid length. [ 153.699562][ T8465] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1381'. [ 153.714044][ T8465] bridge_slave_1: left allmulticast mode [ 153.722879][ T8465] bridge_slave_1: left promiscuous mode [ 153.733609][ T8465] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.745278][ T8465] bridge_slave_0: left allmulticast mode [ 153.766148][ T8465] bridge_slave_0: left promiscuous mode [ 153.780942][ T8465] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.422159][ T8509] netlink: 'syz.0.1395': attribute type 1 has an invalid length. [ 154.540890][ T8513] 8021q: adding VLAN 0 to HW filter on device bond2 [ 154.770089][ T5094] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 154.780963][ T5094] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 154.790182][ T5094] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 154.799086][ T5094] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 154.807372][ T5094] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 154.816241][ T5094] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 155.034802][ T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.193162][ T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.260110][ T8556] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1414'. [ 155.280092][ T8556] netlink: 'syz.2.1414': attribute type 1 has an invalid length. [ 155.320772][ T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.399444][ T8564] netlink: 'syz.3.1416': attribute type 4 has an invalid length. [ 155.464381][ T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.536798][ T8564] netlink: 'syz.3.1416': attribute type 4 has an invalid length. [ 155.665149][ T8527] chnl_net:caif_netlink_parms(): no params data found [ 156.135048][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.154678][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.165612][ T51] bond0 (unregistering): Released all slaves [ 156.187208][ T8586] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 156.215450][ T8590] netlink: 'syz.2.1426': attribute type 6 has an invalid length. [ 156.309720][ T51] tipc: Left network mode [ 156.345526][ T8527] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.397618][ T8527] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.404858][ T8527] bridge_slave_0: entered allmulticast mode [ 156.472956][ T8527] bridge_slave_0: entered promiscuous mode [ 156.596036][ T8527] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.611108][ T8527] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.618902][ T8527] bridge_slave_1: entered allmulticast mode [ 156.625655][ T8527] bridge_slave_1: entered promiscuous mode [ 156.660135][ T8612] netlink: 'syz.2.1431': attribute type 4 has an invalid length. [ 156.758658][ T8612] netlink: 'syz.2.1431': attribute type 4 has an invalid length. [ 156.848485][ T8527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.858470][ T5103] Bluetooth: hci0: command tx timeout [ 156.870630][ T8527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.951124][ T8629] netlink: 'syz.1.1441': attribute type 6 has an invalid length. [ 156.963564][ T8630] netlink: 'syz.2.1442': attribute type 3 has an invalid length. [ 156.981018][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.989114][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.996824][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.004592][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.025522][ T51] veth1_macvtap: left promiscuous mode [ 157.031251][ T51] veth0_macvtap: left promiscuous mode [ 157.037413][ T51] veth1_vlan: left promiscuous mode [ 157.042870][ T51] veth0_vlan: left promiscuous mode [ 157.425372][ T51] team0 (unregistering): Port device team_slave_1 removed [ 157.458968][ T51] team0 (unregistering): Port device team_slave_0 removed [ 157.782748][ T8630] netlink: 'syz.2.1442': attribute type 3 has an invalid length. [ 157.901078][ T8527] team0: Port device team_slave_0 added [ 157.937886][ T8527] team0: Port device team_slave_1 added [ 158.046128][ T8642] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1447'. [ 158.098509][ T8527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.124605][ T8527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.175439][ T8527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.191103][ T8527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.199479][ T8527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.226309][ T8527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.240721][ T8651] netlink: 'syz.1.1450': attribute type 1 has an invalid length. [ 158.352475][ T8663] netlink: 'syz.0.1455': attribute type 3 has an invalid length. [ 158.407174][ T8657] 8021q: adding VLAN 0 to HW filter on device bond1 [ 158.446445][ T8663] netlink: 'syz.0.1455': attribute type 3 has an invalid length. [ 158.739395][ T8685] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1463'. [ 158.940790][ T5103] Bluetooth: hci0: command tx timeout [ 158.964231][ T8527] hsr_slave_0: entered promiscuous mode [ 158.972312][ T8527] hsr_slave_1: entered promiscuous mode [ 158.996311][ T8527] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 159.023942][ T8527] Cannot create hsr debugfs directory [ 159.063330][ T8683] vlan0: entered promiscuous mode [ 159.085827][ T8683] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 159.107810][ T8683] vlan0: entered allmulticast mode [ 159.118479][ T8683] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 159.376182][ T8704] netlink: 'syz.0.1470': attribute type 3 has an invalid length. [ 159.427739][ T8704] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1470'. [ 159.478396][ T8707] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1473'. [ 160.679888][ T8710] ip6gretap0: entered promiscuous mode [ 160.696177][ T8710] batadv_slave_0: entered promiscuous mode [ 161.018700][ T5103] Bluetooth: hci0: command tx timeout [ 161.292819][ T8754] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1490'. [ 161.474365][ T8527] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 161.495763][ T8527] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 161.508795][ T8527] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 161.531334][ T8527] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 161.563583][ T8763] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 161.761152][ T8527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.796538][ T8527] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.818673][ T5172] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.825827][ T5172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.859380][ T5172] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.866565][ T5172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.933965][ T8527] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 162.083447][ T8792] netlink: 'syz.2.1503': attribute type 3 has an invalid length. [ 162.092302][ T8792] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1503'. [ 162.331137][ T8527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.547328][ T8821] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1513'. [ 162.767076][ T8833] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 162.907374][ T8840] netlink: 'syz.3.1522': attribute type 27 has an invalid length. [ 162.913166][ T8527] veth0_vlan: entered promiscuous mode [ 162.964235][ T8527] veth1_vlan: entered promiscuous mode [ 163.036447][ T8527] veth0_macvtap: entered promiscuous mode [ 163.063655][ T8527] veth1_macvtap: entered promiscuous mode [ 163.083656][ T8851] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1524'. [ 163.103613][ T5103] Bluetooth: hci0: command tx timeout [ 163.119507][ T8527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.152661][ T8527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.187541][ T8527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.228024][ T8527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.238956][ T8527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.250070][ T8527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.263512][ T8527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.292090][ T8527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.308116][ T8527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.330213][ T8527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.357658][ T8527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.368011][ T8527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.383794][ T8527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.398771][ T8527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.410384][ T8527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.424198][ T8527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.437434][ T8527] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.448231][ T8527] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.456932][ T8527] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.467810][ T8527] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.611936][ T8881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1536'. [ 163.761971][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.784076][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.842345][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.862066][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.961267][ T8898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1393'. [ 164.369532][ T8916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1551'. [ 164.557867][ T8936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1556'. [ 165.206065][ T8964] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1570'. [ 165.606092][ T8999] xt_TCPMSS: Only works on TCP SYN packets [ 166.303575][ T9043] netlink: 'syz.1.1602': attribute type 3 has an invalid length. [ 166.321858][ T9043] netlink: 'syz.1.1602': attribute type 1 has an invalid length. [ 166.333432][ T9043] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.1602'. [ 166.421642][ T9043] can: request_module (can-proto-0) failed. [ 167.069940][ T9081] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1616'. [ 168.048314][ T9137] netlink: 'syz.1.1642': attribute type 3 has an invalid length. [ 168.067036][ T9137] netlink: 'syz.1.1642': attribute type 1 has an invalid length. [ 168.083830][ T9137] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.1642'. [ 168.187794][ T9137] can: request_module (can-proto-0) failed. [ 168.255514][ T9155] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1650'. [ 168.527354][ T9171] netlink: 580 bytes leftover after parsing attributes in process `syz.2.1657'. [ 168.933891][ T9204] netlink: 'syz.4.1670': attribute type 2 has an invalid length. [ 168.948009][ T9204] netlink: 'syz.4.1670': attribute type 2 has an invalid length. [ 168.983687][ T9211] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1672'. [ 169.508881][ T5094] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 169.518830][ T9231] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 169.526920][ T5094] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 169.536465][ T5094] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 169.552898][ T5094] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 169.562912][ T5094] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 169.571474][ T5094] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 169.633598][ T9240] xt_TCPMSS: Only works on TCP SYN packets [ 169.810140][ T9250] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1689'. [ 170.081695][ T9237] chnl_net:caif_netlink_parms(): no params data found [ 170.179730][ T9270] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 170.216783][ T9276] netlink: 'syz.3.1698': attribute type 2 has an invalid length. [ 170.253210][ T9276] netlink: 'syz.3.1698': attribute type 2 has an invalid length. [ 170.335586][ T9237] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.350586][ T9237] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.358067][ T9237] bridge_slave_0: entered allmulticast mode [ 170.365958][ T9237] bridge_slave_0: entered promiscuous mode [ 170.382640][ T9237] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.390296][ T9237] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.399104][ T9237] bridge_slave_1: entered allmulticast mode [ 170.409777][ T9237] bridge_slave_1: entered promiscuous mode [ 170.494273][ T9237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.517324][ T9237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.585655][ T9237] team0: Port device team_slave_0 added [ 170.595604][ T9237] team0: Port device team_slave_1 added [ 170.683737][ T9237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.712468][ T9237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.745231][ T9237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.765158][ T9237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.773185][ T9237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.814715][ T9237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.891892][ T9237] hsr_slave_0: entered promiscuous mode [ 170.904503][ T9237] hsr_slave_1: entered promiscuous mode [ 170.913933][ T9237] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.925450][ T9237] Cannot create hsr debugfs directory [ 171.171500][ T9321] netlink: 'syz.4.1713': attribute type 21 has an invalid length. [ 171.188226][ T9321] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1713'. [ 171.253182][ T9237] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.269801][ T9237] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.294186][ T9325] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1717'. [ 171.365414][ T9237] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.383107][ T9237] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.518556][ T9237] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.535440][ T9237] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.658748][ T5103] Bluetooth: hci2: command tx timeout [ 171.675995][ T9237] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.686501][ T9237] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.702896][ T9330] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1719'. [ 171.955067][ T9237] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 171.968409][ T9237] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 172.033325][ T9237] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 172.067247][ T9237] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 172.098205][ T9360] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1730'. [ 172.148581][ T9360] netlink: 'syz.0.1730': attribute type 1 has an invalid length. [ 172.175186][ T9360] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1730'. [ 172.378350][ T9237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.441061][ T9237] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.487169][ T784] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.494378][ T784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.531126][ T784] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.538298][ T784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.585141][ T9375] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1738'. [ 172.634009][ T9383] sctp: [Deprecated]: syz.0.1741 (pid 9383) Use of struct sctp_assoc_value in delayed_ack socket option. [ 172.634009][ T9383] Use struct sctp_sack_info instead [ 172.660779][ T9381] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1738'. [ 172.680743][ T9381] bridge_slave_1: left allmulticast mode [ 172.698992][ T9381] bridge_slave_1: left promiscuous mode [ 172.710268][ T9381] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.771783][ T9381] bridge_slave_0: left allmulticast mode [ 172.784594][ T9381] bridge_slave_0: left promiscuous mode [ 172.799981][ T9381] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.520415][ T9420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1751'. [ 173.592318][ T9237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.738039][ T5103] Bluetooth: hci2: command tx timeout [ 173.766811][ T9428] syzkaller0: entered promiscuous mode [ 173.775808][ T9428] syzkaller0: entered allmulticast mode [ 173.825407][ T9237] veth0_vlan: entered promiscuous mode [ 173.865058][ T9237] veth1_vlan: entered promiscuous mode [ 174.110984][ T9445] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1763'. [ 174.206965][ T9451] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1766'. [ 174.273658][ T9453] xt_socket: unknown flags 0x8 [ 175.699693][ T9237] veth0_macvtap: entered promiscuous mode [ 175.747144][ T9237] veth1_macvtap: entered promiscuous mode [ 175.796754][ T9477] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1777'. [ 175.810550][ T9237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.827910][ T5103] Bluetooth: hci2: command tx timeout [ 175.848773][ T9237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.868890][ T9237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.886819][ T9237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.913850][ T9237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.914091][ T9483] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1779'. [ 175.931536][ T9237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.946428][ T9237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.958247][ T9237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.001837][ T9237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.066485][ T9237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.099780][ T9237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.118525][ T9237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.134583][ T9237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.145412][ T9237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.156054][ T9237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.165894][ T9237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.176401][ T9237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.186248][ T9237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.196915][ T9237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.211850][ T9237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.229167][ T9237] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.244347][ T9237] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.253726][ T9237] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.272611][ T9237] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.294532][ T9483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1779'. [ 176.337169][ T9483] vlan2: left allmulticast mode [ 176.343447][ T9483] vlan2: left promiscuous mode [ 176.351694][ T9483] bridge0: port 3(vlan2) entered disabled state [ 176.366093][ T9483] bridge_slave_0: left allmulticast mode [ 176.372071][ T9483] bridge_slave_0: left promiscuous mode [ 176.380716][ T9483] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.462765][ T9497] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1783'. [ 176.473356][ T9497] netlink: 'syz.4.1783': attribute type 1 has an invalid length. [ 176.482092][ T9497] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1783'. [ 176.494893][ T9486] netlink: 'syz.2.1779': attribute type 4 has an invalid length. [ 176.521889][ T9489] netlink: 'syz.2.1779': attribute type 4 has an invalid length. [ 176.722089][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.745733][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.812299][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.841228][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.920270][ T9514] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1788'. [ 176.986397][ T9519] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1791'. [ 177.113362][ T9528] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 177.898585][ T5103] Bluetooth: hci2: command tx timeout [ 179.569375][ T9554] netlink: 'syz.3.1807': attribute type 2 has an invalid length. [ 179.766131][ T9568] netlink: 'syz.2.1813': attribute type 11 has an invalid length. [ 180.183975][ T9593] netlink: 'syz.0.1825': attribute type 1 has an invalid length. [ 180.415534][ T9606] netlink: 'syz.1.1830': attribute type 11 has an invalid length. [ 180.542130][ T9613] x_tables: duplicate underflow at hook 3 [ 180.550740][ T9614] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 180.601815][ T9616] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1835'. [ 180.615539][ T9616] netlink: 'syz.4.1835': attribute type 1 has an invalid length. [ 180.634807][ T9616] netlink: 'syz.4.1835': attribute type 2 has an invalid length. [ 180.643081][ T9616] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1835'. [ 180.886313][ T9629] netlink: 'syz.2.1840': attribute type 11 has an invalid length. [ 181.124609][ T9646] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1849'. [ 181.154895][ T9641] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1846'. [ 181.262181][ T9652] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1850'. [ 181.608501][ T9669] netlink: 'syz.2.1859': attribute type 11 has an invalid length. [ 181.721808][ T9673] netlink: 'syz.2.1860': attribute type 2 has an invalid length. [ 182.036628][ T9685] debugfs: Directory 'netdev:nicvf0' with parent 'phy5' already present! [ 182.180546][ T9691] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1869'. [ 182.299999][ T9699] netlink: 'syz.1.1873': attribute type 2 has an invalid length. [ 182.589653][ T9719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1883'. [ 182.718392][ T9728] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1887'. [ 182.749026][ T9728] netlink: 'syz.4.1887': attribute type 2 has an invalid length. [ 182.766939][ T9728] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1887'. [ 182.856244][ T9728] pim6reg1: entered promiscuous mode [ 182.871803][ T9728] pim6reg1: entered allmulticast mode [ 183.495334][ T9755] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1900'. [ 183.585360][ T9763] netlink: 'syz.1.1903': attribute type 2 has an invalid length. [ 183.670145][ T9763] pim6reg1: entered promiscuous mode [ 183.680227][ T9763] pim6reg1: entered allmulticast mode [ 184.107386][ T9797] x_tables: duplicate entry at hook 3 [ 184.431334][ T9803] netlink: 'syz.3.1916': attribute type 4 has an invalid length. [ 184.513644][ T9810] netlink: 'syz.1.1922': attribute type 2 has an invalid length. [ 184.515254][ T9803] netlink: 'syz.3.1916': attribute type 4 has an invalid length. [ 184.641530][ T9810] pim6reg1: entered promiscuous mode [ 184.652044][ T9810] pim6reg1: entered allmulticast mode [ 185.112772][ T9848] netlink: 'syz.3.1939': attribute type 1 has an invalid length. [ 185.230837][ T9860] macsec1: entered promiscuous mode [ 185.236231][ T9860] macvlan0: entered promiscuous mode [ 185.245716][ T9860] macvlan0: left promiscuous mode [ 185.791958][ T9898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.793647][ T9899] macsec1: entered promiscuous mode [ 185.814009][ T9899] macvlan0: entered promiscuous mode [ 185.824771][ T9899] macvlan0: left promiscuous mode [ 185.955173][ T9904] xt_bpf: check failed: parse error [ 185.993734][ T9906] __nla_validate_parse: 9 callbacks suppressed [ 185.993753][ T9906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1966'. [ 186.040973][ T9910] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1968'. [ 186.266297][ T9927] x_tables: duplicate entry at hook 3 [ 186.472110][ T9938] xt_CT: No such helper "netbios-ns" [ 186.628890][ T9952] netlink: 'syz.3.1987': attribute type 1 has an invalid length. [ 186.645607][ T9952] netlink: 9344 bytes leftover after parsing attributes in process `syz.3.1987'. [ 186.668574][ T9952] netlink: 'syz.3.1987': attribute type 1 has an invalid length. [ 186.682004][ T9952] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1987'. [ 186.692860][ T9957] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 186.816577][ T9962] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1992'. [ 186.915939][ T9974] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1997'. [ 187.028418][ T9978] xt_CT: No such helper "netbios-ns" [ 187.191738][ T9990] netlink: 'syz.1.2003': attribute type 1 has an invalid length. [ 187.207832][ T9990] netlink: 9344 bytes leftover after parsing attributes in process `syz.1.2003'. [ 187.233690][ T9990] netlink: 'syz.1.2003': attribute type 1 has an invalid length. [ 187.245045][ T9990] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2003'. [ 187.307805][ T9996] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2007'. [ 187.476911][T10007] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2011'. [ 187.535018][T10010] xt_bpf: check failed: parse error [ 188.836380][T10087] ip6gretap0: entered promiscuous mode [ 188.867283][T10087] batadv_slave_0: entered promiscuous mode [ 188.893972][T10087] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 188.919319][T10087] Cannot create hsr debugfs directory [ 189.147427][T10107] netlink: 'syz.3.2054': attribute type 1 has an invalid length. [ 189.175568][T10107] netlink: 'syz.3.2054': attribute type 1 has an invalid length. [ 190.580207][T10130] ip6gretap0: entered promiscuous mode [ 190.587032][T10130] batadv_slave_0: entered promiscuous mode [ 190.594588][T10130] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 190.602288][T10130] Cannot create hsr debugfs directory [ 191.015162][T10157] __nla_validate_parse: 4 callbacks suppressed [ 191.015180][T10157] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2075'. [ 191.212538][T10167] netlink: 'syz.0.2080': attribute type 10 has an invalid length. [ 191.502817][ T5094] Bluetooth: hci3: command 0x0406 tx timeout [ 191.545499][T10190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2092'. [ 191.613718][T10184] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2087'. [ 191.625565][T10184] tc_dump_action: action bad kind [ 191.650529][T10186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2090'. [ 192.051143][T10225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2103'. [ 192.183632][T10231] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2107'. [ 192.207947][T10235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2108'. [ 192.467770][T10255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2118'. [ 192.611944][T10263] netlink: 211388 bytes leftover after parsing attributes in process `syz.0.2121'. [ 192.904286][T10284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2133'. [ 194.073240][T10358] Κό: entered promiscuous mode [ 194.545152][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.551911][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.874184][ T5140] IPVS: starting estimator thread 0... [ 194.977788][T10405] IPVS: using max 18 ests per chain, 43200 per kthread [ 194.984878][T10403] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 195.015264][T10403] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 195.674779][T10397] xt_CT: You must specify a L4 protocol and not use inversions on it [ 195.847673][T10435] netlink: 'syz.2.2194': attribute type 6 has an invalid length. [ 196.300094][T10459] __nla_validate_parse: 12 callbacks suppressed [ 196.300113][T10459] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2205'. [ 196.432037][T10463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2206'. [ 196.455681][T10465] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 196.492863][T10467] netlink: 'syz.2.2209': attribute type 6 has an invalid length. [ 196.740795][T10478] netlink: 'syz.1.2212': attribute type 10 has an invalid length. [ 196.764799][T10478] netlink: 157988 bytes leftover after parsing attributes in process `syz.1.2212'. [ 196.903946][T10489] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2219'. [ 197.713290][T10534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2237'. [ 197.978388][T10552] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2246'. [ 198.009990][T10555] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2248'. [ 198.183786][T10561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2251'. [ 198.812136][T10591] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2265'. [ 200.676218][T10604] netlink: 'syz.4.2270': attribute type 1 has an invalid length. [ 200.708101][T10604] netlink: 9344 bytes leftover after parsing attributes in process `syz.4.2270'. [ 200.725575][T10604] netlink: 'syz.4.2270': attribute type 1 has an invalid length. [ 200.735319][ T784] IPVS: starting estimator thread 0... [ 200.762825][T10610] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 200.838492][T10609] IPVS: using max 18 ests per chain, 43200 per kthread [ 200.940630][T10623] netlink: 'syz.1.2278': attribute type 25 has an invalid length. [ 200.958969][T10623] netlink: 'syz.1.2278': attribute type 7 has an invalid length. [ 201.279712][T10638] netlink: 'syz.3.2286': attribute type 21 has an invalid length. [ 201.455409][T10645] __nla_validate_parse: 1 callbacks suppressed [ 201.455428][T10645] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2286'. [ 201.523671][T10638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2286'. [ 201.737610][ T5094] Bluetooth: hci4: command 0x0405 tx timeout [ 201.790392][T10654] netlink: 658 bytes leftover after parsing attributes in process `syz.3.2291'. [ 202.613977][T10691] tipc: Started in network mode [ 202.629791][T10691] tipc: Node identity , cluster identity 4711 [ 202.668980][T10691] tipc: Failed to set node id, please configure manually [ 202.702786][T10691] tipc: Enabling of bearer rejected, failed to enable media [ 203.080577][T10707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2315'. [ 203.225440][T10723] tipc: Started in network mode [ 203.239528][T10723] tipc: Node identity , cluster identity 4711 [ 203.257211][T10723] tipc: Failed to set node id, please configure manually [ 203.275374][T10723] tipc: Enabling of bearer rejected, failed to enable media [ 203.557816][T10752] netlink: 'syz.2.2335': attribute type 10 has an invalid length. [ 203.614249][T10752] team0: Port device geneve1 added [ 203.744912][T10750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2334'. [ 203.796977][T10763] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2338'. [ 203.933300][T10763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2338'. [ 204.116979][T10779] netlink: 'syz.3.2348': attribute type 10 has an invalid length. [ 204.188196][T10779] team0: Port device geneve1 added [ 204.214665][T10783] netlink: 'syz.1.2350': attribute type 21 has an invalid length. [ 204.404520][T10799] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2350'. [ 204.438419][T10802] netlink: 'syz.4.2355': attribute type 29 has an invalid length. [ 204.477820][T10802] netlink: 'syz.4.2355': attribute type 29 has an invalid length. [ 204.507771][T10794] netlink: 'syz.4.2355': attribute type 29 has an invalid length. [ 204.523556][T10793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2354'. [ 204.545468][T10806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2350'. [ 205.074582][T10840] netlink: 'syz.2.2373': attribute type 11 has an invalid length. [ 205.466702][T10863] lo: entered promiscuous mode [ 206.096029][T10896] validate_nla: 2 callbacks suppressed [ 206.096049][T10896] netlink: 'syz.0.2399': attribute type 2 has an invalid length. [ 206.425768][T10858] lo: left promiscuous mode [ 206.615308][T10917] __nla_validate_parse: 10 callbacks suppressed [ 206.615327][T10917] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2409'. [ 206.878788][ T61] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.916804][T10921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2411'. [ 206.926745][ T5094] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 206.937329][ T5094] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 206.945870][T10921] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2411'. [ 206.947424][ T5094] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 206.975590][ T5094] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 206.987199][ T5094] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 207.003854][ T5094] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 207.099884][ T61] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.223689][T10930] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2414'. [ 207.305184][ T61] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.365248][T10943] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2421'. [ 207.434434][ T61] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.200532][ T5094] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 208.210756][ T5094] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 208.219255][ T5094] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 208.228850][ T5094] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 208.238865][ T5094] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 208.246626][ T5094] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 208.394762][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.407232][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.419695][ T61] bond0 (unregistering): Released all slaves [ 208.435268][T10964] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2430'. [ 208.635525][T10981] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.645068][T10981] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.654181][T10981] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.662922][T10981] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.686279][T10981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2435'. [ 208.845893][T10925] chnl_net:caif_netlink_parms(): no params data found [ 208.906991][T10994] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 209.022449][ T61] hsr_slave_0: left promiscuous mode [ 209.031004][ T61] hsr_slave_1: left promiscuous mode [ 209.037244][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.047265][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.056888][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.064597][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.093760][ T61] veth1_macvtap: left promiscuous mode [ 209.099817][ T61] veth0_macvtap: left promiscuous mode [ 209.105480][ T61] veth1_vlan: left promiscuous mode [ 209.107822][ T5094] Bluetooth: hci0: command tx timeout [ 209.111059][ T61] veth0_vlan: left promiscuous mode [ 210.132173][T11011] xt_CT: You must specify a L4 protocol and not use inversions on it [ 210.216916][ T61] team0 (unregistering): Port device team_slave_1 removed [ 210.257279][ T61] team0 (unregistering): Port device team_slave_0 removed [ 210.307677][ T5094] Bluetooth: hci2: command tx timeout [ 210.783357][T11005] lo: entered promiscuous mode [ 210.788501][T11005] lo: left promiscuous mode [ 210.822712][T11013] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2444'. [ 210.866877][T10925] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.899004][T10925] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.922182][T10925] bridge_slave_0: entered allmulticast mode [ 210.938765][T10925] bridge_slave_0: entered promiscuous mode [ 210.951211][T10925] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.961723][T10925] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.972334][T10925] bridge_slave_1: entered allmulticast mode [ 210.980493][T10925] bridge_slave_1: entered promiscuous mode [ 211.009074][T11019] atomic_op ffff888069a8c998 conn xmit_atomic 0000000000000000 [ 211.101034][T10925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.148660][T10925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.177874][ T5094] Bluetooth: hci0: command tx timeout [ 211.314407][T10925] team0: Port device team_slave_0 added [ 211.350696][T10925] team0: Port device team_slave_1 added [ 211.356767][T10966] chnl_net:caif_netlink_parms(): no params data found [ 211.383392][T11028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2449'. [ 211.392778][T11028] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2449'. [ 211.503983][T10925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.517863][T10925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.557542][T10925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.558017][T11030] Bluetooth: MGMT ver 1.22 [ 211.611278][T10925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.636607][T10925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.716812][T10925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.941261][T10925] hsr_slave_0: entered promiscuous mode [ 211.965132][T10925] hsr_slave_1: entered promiscuous mode [ 211.994289][T10925] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.027788][T10925] Cannot create hsr debugfs directory [ 212.088353][T10966] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.110345][T10966] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.146314][T10966] bridge_slave_0: entered allmulticast mode [ 212.155530][T10966] bridge_slave_0: entered promiscuous mode [ 212.204050][T10966] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.216360][T10966] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.235517][T10966] bridge_slave_1: entered allmulticast mode [ 212.249226][T10966] bridge_slave_1: entered promiscuous mode [ 212.295822][T11045] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2455'. [ 212.354321][T11050] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2457'. [ 212.377950][ T5094] Bluetooth: hci2: command tx timeout [ 212.434794][T10966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.497555][T10966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.625230][T10966] team0: Port device team_slave_0 added [ 212.709655][T10966] team0: Port device team_slave_1 added [ 212.787239][T10966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.803925][T10966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.843432][T10966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.900009][T10966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.919898][T10966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.967517][T10966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.014977][T11072] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2467'. [ 213.201800][T10966] hsr_slave_0: entered promiscuous mode [ 213.218311][T10966] hsr_slave_1: entered promiscuous mode [ 213.240599][T10966] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.257613][ T5094] Bluetooth: hci0: command tx timeout [ 213.257634][T10966] Cannot create hsr debugfs directory [ 213.298849][T11077] netlink: 'syz.3.2469': attribute type 10 has an invalid length. [ 213.331489][T11080] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2470'. [ 213.356200][T11080] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2470'. [ 213.366880][T11080] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2470'. [ 213.654741][T11091] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2475'. [ 213.919910][T10925] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 213.979732][T10966] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.007623][T10925] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 214.021778][T10925] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 214.043528][T10925] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 214.109954][T10966] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.241610][T11118] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 214.269385][T10966] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.372489][T10966] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.461373][ T5094] Bluetooth: hci2: command tx timeout [ 214.487171][T10925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.573706][T10925] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.628278][ T5140] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.635439][ T5140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.683242][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.690413][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.736968][T11143] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 214.767949][T11141] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2499'. [ 214.777018][T11141] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2499'. [ 214.787078][T11141] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2499'. [ 214.890394][T10966] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 214.936587][T10966] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 214.965972][T10966] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 214.993200][T10966] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 215.297228][T10925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.339769][ T5094] Bluetooth: hci0: command tx timeout [ 215.341552][T10966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.390234][T10966] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.404838][ T5140] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.412025][ T5140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.436612][ T5140] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.443801][ T5140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.893585][T11197] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 215.897990][T10966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.983193][T10925] veth0_vlan: entered promiscuous mode [ 216.024131][T10925] veth1_vlan: entered promiscuous mode [ 216.085116][T10966] veth0_vlan: entered promiscuous mode [ 216.119706][T10925] veth0_macvtap: entered promiscuous mode [ 216.135695][T10966] veth1_vlan: entered promiscuous mode [ 216.151100][T10925] veth1_macvtap: entered promiscuous mode [ 216.201182][T10925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.220698][T10925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.241683][T10925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.258537][T10925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.272001][T10925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.282829][T10925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.300273][T10925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.311033][T10925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.323111][T10925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.364169][T10925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.386096][T10925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.400664][T10925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.419656][T10925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.436372][T10925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.449314][T10925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.482114][T10925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.505168][T10925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.516493][T10925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.537415][T10925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.537945][ T5094] Bluetooth: hci2: command tx timeout [ 216.549426][T10925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.579909][T10966] veth0_macvtap: entered promiscuous mode [ 216.589710][T11219] netlink: 'syz.0.2521': attribute type 1 has an invalid length. [ 216.610069][T10925] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.631691][T10925] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.657176][T10925] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.681081][T10925] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.721474][T10966] veth1_macvtap: entered promiscuous mode [ 216.861784][T10966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.874768][T10966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.885551][T10966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.896404][T10966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.906854][T10966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.918494][T10966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.930508][T10966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.943155][T10966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.953077][T10966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.964008][T10966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.976969][T10966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.014312][T10966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.026424][T10966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.052624][T10966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.063830][T10966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.075188][T10966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.085890][T10966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.095980][T10966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.107193][T10966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.117081][T10966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.128098][T10966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.137983][T10966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.148518][T10966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.163781][T10966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.237157][T10966] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.249481][T10966] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.264871][T10966] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.288062][T10966] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.347157][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.377425][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.398789][T11241] lo: entered promiscuous mode [ 217.456306][ T2454] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.477566][ T2454] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.577888][ T5094] Bluetooth: hci0: command 0x0c1a tx timeout [ 217.625551][ T2438] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.670438][ T2438] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.756082][ T2438] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.781248][ T2438] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.804616][T11255] netlink: 'syz.0.2534': attribute type 1 has an invalid length. [ 218.248064][T11238] lo: left promiscuous mode [ 218.540950][T11292] __nla_validate_parse: 3 callbacks suppressed [ 218.540969][T11292] netlink: 15 bytes leftover after parsing attributes in process `syz.3.2549'. [ 218.792479][T11312] veth1_to_team: Caught tx_queue_len zero misconfig [ 220.510039][T11335] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2565'. [ 220.768313][T11353] netlink: 4272 bytes leftover after parsing attributes in process `syz.0.2572'. [ 221.186048][ T2438] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.292930][T11376] netlink: 15 bytes leftover after parsing attributes in process `syz.4.2581'. [ 221.322580][ T2438] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.473624][ T2438] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.599318][ T2438] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.651184][ T5103] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 221.663179][ T5103] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 221.671467][ T5103] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 221.688120][T11390] tap0: tun_chr_ioctl cmd 1074025675 [ 221.693417][T11390] tap0: persist enabled [ 221.706104][ T5103] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 221.714493][T11390] tap0: tun_chr_ioctl cmd 1074025675 [ 221.720734][T11390] tap0: persist disabled [ 221.725813][ T5103] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 221.738187][ T5103] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 221.907382][T11401] netlink: 209840 bytes leftover after parsing attributes in process `syz.2.2587'. [ 221.969090][T11402] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2588'. [ 222.077739][ T2438] bridge_slave_1: left allmulticast mode [ 222.083429][ T2438] bridge_slave_1: left promiscuous mode [ 222.138550][ T2438] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.171992][ T2438] bridge_slave_0: left allmulticast mode [ 222.187746][ T2438] bridge_slave_0: left promiscuous mode [ 222.194309][ T2438] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.692933][ T2438] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.708956][ T2438] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.720962][ T2438] bond0 (unregistering): Released all slaves [ 222.750316][T11412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2589'. [ 223.093537][T11389] chnl_net:caif_netlink_parms(): no params data found [ 223.386334][ T2438] hsr_slave_0: left promiscuous mode [ 223.405144][ T2438] hsr_slave_1: left promiscuous mode [ 223.426169][ T2438] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.458241][ T2438] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.478490][ T2438] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.507537][ T2438] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.577151][ T2438] veth1_macvtap: left promiscuous mode [ 223.589819][ T2438] veth0_macvtap: left promiscuous mode [ 223.602541][ T2438] veth1_vlan: left promiscuous mode [ 223.617965][ T2438] veth0_vlan: left promiscuous mode [ 223.817763][ T5094] Bluetooth: hci2: command tx timeout [ 224.303635][ T2438] team0 (unregistering): Port device team_slave_1 removed [ 224.341270][ T2438] team0 (unregistering): Port device team_slave_0 removed [ 224.761812][T11389] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.788391][T11389] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.818480][T11389] bridge_slave_0: entered allmulticast mode [ 224.825839][T11389] bridge_slave_0: entered promiscuous mode [ 224.847070][T11389] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.862405][T11389] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.889391][T11389] bridge_slave_1: entered allmulticast mode [ 224.896750][T11389] bridge_slave_1: entered promiscuous mode [ 224.991731][T11389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.084573][T11389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.172998][T11389] team0: Port device team_slave_0 added [ 225.234708][T11389] team0: Port device team_slave_1 added [ 225.285932][T11513] tap0: tun_chr_ioctl cmd 1074025675 [ 225.317717][T11513] tap0: persist enabled [ 225.346535][T11389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.349792][T11521] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2626'. [ 225.354493][T11389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.391289][T11389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.417737][T11513] tap0: tun_chr_ioctl cmd 1074025675 [ 225.427760][T11513] tap0: persist disabled [ 225.477101][T11389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.485378][T11389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.511797][T11389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.675087][T11389] hsr_slave_0: entered promiscuous mode [ 225.697996][T11389] hsr_slave_1: entered promiscuous mode [ 225.727818][T11389] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.735729][T11389] Cannot create hsr debugfs directory [ 225.898152][ T5094] Bluetooth: hci2: command tx timeout [ 226.139261][T11547] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2638'. [ 226.564868][T11389] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 226.585864][T11389] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 226.631279][T11389] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 226.674520][T11389] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 227.076213][T11389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.117837][T11594] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2656'. [ 227.260902][T11594] netlink: 'syz.3.2656': attribute type 1 has an invalid length. [ 227.270471][T11594] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2656'. [ 227.281968][T11594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2656'. [ 227.870392][ T5103] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 227.889297][ T5103] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 227.902935][ T5103] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 227.936530][ T5103] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 227.958305][ T5103] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 227.978102][ T5103] Bluetooth: hci2: command tx timeout [ 227.979340][ T5101] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 228.965975][T11596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2656'. [ 228.975909][T11596] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2656'. [ 229.065016][T11389] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.091304][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.098490][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.152692][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.159887][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.294627][T11616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2664'. [ 229.611281][T11633] netlink: 'syz.4.2668': attribute type 21 has an invalid length. [ 229.629838][T11633] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2668'. [ 229.683771][T11603] chnl_net:caif_netlink_parms(): no params data found [ 229.730755][T11389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.994222][T11650] lo speed is unknown, defaulting to 1000 [ 230.006866][T11603] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.034456][T11603] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.056369][T11603] bridge_slave_0: entered allmulticast mode [ 230.058211][ T5101] Bluetooth: hci3: command tx timeout [ 230.068101][ T5094] Bluetooth: hci2: command tx timeout [ 230.070705][T11603] bridge_slave_0: entered promiscuous mode [ 230.093443][T11650] lo speed is unknown, defaulting to 1000 [ 230.171552][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.190944][T11603] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.202168][T11603] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.210692][T11603] bridge_slave_1: entered allmulticast mode [ 230.219692][T11603] bridge_slave_1: entered promiscuous mode [ 230.241150][T11389] veth0_vlan: entered promiscuous mode [ 230.248180][T11650] lo speed is unknown, defaulting to 1000 [ 230.251706][T11667] syzkaller0: entered allmulticast mode [ 230.271731][T11650] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 230.315326][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.346545][T11603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.358607][T11650] lo speed is unknown, defaulting to 1000 [ 230.362099][T11603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.473871][T11650] lo speed is unknown, defaulting to 1000 [ 230.476170][T11389] veth1_vlan: entered promiscuous mode [ 230.510038][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.556251][T11603] team0: Port device team_slave_0 added [ 230.567051][T11650] lo speed is unknown, defaulting to 1000 [ 230.574945][T11603] team0: Port device team_slave_1 added [ 230.594095][ T11] bond0: (slave netdevsim0): Releasing backup interface [ 230.641795][T11650] lo speed is unknown, defaulting to 1000 [ 230.688656][T11603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.696278][T11603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.725209][T11603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.737318][T11650] lo speed is unknown, defaulting to 1000 [ 230.751825][T11603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.766308][T11603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.793864][T11603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.815751][T11650] lo speed is unknown, defaulting to 1000 [ 230.824159][T11650] lo speed is unknown, defaulting to 1000 [ 230.863314][T11650] lo speed is unknown, defaulting to 1000 [ 230.871424][T11389] veth0_macvtap: entered promiscuous mode [ 230.979846][T11389] veth1_macvtap: entered promiscuous mode [ 231.081917][T11603] hsr_slave_0: entered promiscuous mode [ 231.104157][T11603] hsr_slave_1: entered promiscuous mode [ 231.112079][T11603] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.123352][T11603] Cannot create hsr debugfs directory [ 231.222794][T11389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.242140][T11389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.278242][T11389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.316014][T11389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.336281][T11389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.357628][T11389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.377098][T11389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.397596][T11389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.416752][T11389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.436913][T11389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.454005][T11389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.619150][ T11] ip6gretap0 (unregistering): left promiscuous mode [ 231.784314][ T11] team0: Port device geneve1 removed [ 232.015658][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.027045][ T11] bond0 (unregistering): Released all slaves [ 232.043044][ T11] bond1 (unregistering): (slave bond_slave_0): Releasing active interface [ 232.054523][ T11] bond_slave_0: left promiscuous mode [ 232.064175][ T11] bond1 (unregistering): Released all slaves [ 232.077617][ T11] bond2 (unregistering): Released all slaves [ 232.137798][ T5101] Bluetooth: hci3: command tx timeout [ 232.153252][T11389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.197643][T11389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.207816][T11389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.220193][T11389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.231402][T11389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.246406][T11389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.256858][T11389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.280360][T11389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.300096][T11389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.311174][T11389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.321659][T11389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.335357][T11389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.360895][T11389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.374249][T11705] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2692'. [ 232.403683][ T11] Κό: left promiscuous mode [ 232.426131][T11389] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.436594][T11389] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.446912][T11389] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.467974][T11710] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2692'. [ 232.477007][T11389] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.502456][T11705] (unnamed net_device) (uninitialized): option lp_interval: invalid value (18446744073709551614) [ 232.515373][T11705] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 233.270454][ T2438] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.288027][ T2438] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.420080][ T11] batadv_slave_0: left promiscuous mode [ 233.453130][ T11] hsr_slave_0: left promiscuous mode [ 233.466055][ T11] hsr_slave_1: left promiscuous mode [ 233.473591][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.482180][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.491719][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.500316][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.524347][ T11] veth1_macvtap: left promiscuous mode [ 233.530714][ T11] veth1_vlan: left promiscuous mode [ 233.722906][ T11] team0 (unregistering): Port device veth0_macvtap removed [ 233.964322][ T11] team0 (unregistering): Port device team_slave_1 removed [ 233.996319][ T11] team0 (unregistering): Port device team_slave_0 removed [ 234.217966][ T5101] Bluetooth: hci3: command tx timeout [ 234.371386][T11754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2714'. [ 234.417848][T11756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2712'. [ 234.436363][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.458263][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.636419][T11603] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 234.683900][T11603] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 234.826689][T11603] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 234.854883][T11603] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 235.065519][T11603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.114069][T11603] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.125781][T11787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2726'. [ 235.151672][ T5143] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.158862][ T5143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.189168][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.196335][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.407350][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.612722][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.849303][ T5103] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 235.877796][ T5103] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 235.885976][ T5103] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 235.902815][ T5103] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 235.922565][ T5103] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 235.947891][ T5103] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 236.073715][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.179874][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.245967][T11810] lo speed is unknown, defaulting to 1000 [ 236.256365][T11829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2741'. [ 236.290211][T11603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.298211][ T5101] Bluetooth: hci3: command tx timeout [ 236.680526][ T11] bridge_slave_1: left allmulticast mode [ 236.686230][ T11] bridge_slave_1: left promiscuous mode [ 236.699702][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.720664][ T11] bridge_slave_0: left allmulticast mode [ 236.729797][ T11] bridge_slave_0: left promiscuous mode [ 236.736881][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.155111][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.167132][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.185473][ T11] bond0 (unregistering): Released all slaves [ 237.201147][T11603] veth0_vlan: entered promiscuous mode [ 237.304226][T11810] chnl_net:caif_netlink_parms(): no params data found [ 237.395938][T11603] veth1_vlan: entered promiscuous mode [ 237.566400][T11810] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.578074][ T5101] Bluetooth: hci1: command 0x0405 tx timeout [ 237.590706][T11810] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.603226][T11810] bridge_slave_0: entered allmulticast mode [ 237.639100][T11810] bridge_slave_0: entered promiscuous mode [ 237.656470][T11603] veth0_macvtap: entered promiscuous mode [ 237.763526][T11810] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.787667][T11810] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.799586][T11810] bridge_slave_1: entered allmulticast mode [ 237.824922][T11810] bridge_slave_1: entered promiscuous mode [ 237.882644][T11603] veth1_macvtap: entered promiscuous mode [ 237.939569][ T11] hsr_slave_0: left promiscuous mode [ 237.948867][ T11] hsr_slave_1: left promiscuous mode [ 237.955141][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.964958][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.974722][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.983666][ T5094] Bluetooth: hci2: command tx timeout [ 237.986193][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.012087][ T11] veth1_macvtap: left promiscuous mode [ 238.017687][ T11] veth0_macvtap: left promiscuous mode [ 238.023334][ T11] veth1_vlan: left promiscuous mode [ 238.029007][ T11] veth0_vlan: left promiscuous mode [ 238.424821][ T11] team0 (unregistering): Port device team_slave_1 removed [ 238.461097][ T11] team0 (unregistering): Port device team_slave_0 removed [ 238.771036][T11810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.785808][T11810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.839311][T11810] team0: Port device team_slave_0 added [ 238.865661][T11810] team0: Port device team_slave_1 added [ 238.899536][T11603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.910687][T11603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.921208][T11603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.932089][T11603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.942418][T11603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.953643][T11603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.963843][T11603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.974579][T11603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.986468][T11603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.994621][T11810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.001968][T11810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.029596][T11810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.049155][T11603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.061022][T11603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.071411][T11603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.082565][T11603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.093004][T11603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.103795][T11603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.114162][T11603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.124973][T11603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.134815][T11603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.146371][T11603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.158171][T11603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.177031][T11810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.184549][T11810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.212223][T11810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.253249][T11603] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.263195][T11603] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.272724][T11603] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.282022][T11603] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.311903][T11810] hsr_slave_0: entered promiscuous mode [ 239.321573][T11810] hsr_slave_1: entered promiscuous mode [ 239.473764][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.482021][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.545932][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.553989][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.842187][T11810] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 239.880295][T11810] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 239.918148][T11810] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 239.946430][T11810] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 239.975787][T11905] netlink: 'syz.3.2771': attribute type 21 has an invalid length. [ 239.987200][T11905] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2771'. [ 240.059490][ T5094] Bluetooth: hci2: command tx timeout [ 240.238611][T11810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.283305][T11810] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.312491][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.319661][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.344055][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.351257][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.711045][T11810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.837305][T11810] veth0_vlan: entered promiscuous mode [ 240.864577][T11810] veth1_vlan: entered promiscuous mode [ 240.897092][T11948] netlink: 'syz.3.2785': attribute type 21 has an invalid length. [ 240.917007][T11948] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2785'. [ 241.034651][T11810] veth0_macvtap: entered promiscuous mode [ 241.065892][T11810] veth1_macvtap: entered promiscuous mode [ 241.099365][T11810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.138113][T11810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.150001][T11810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.160876][T11810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.172531][T11810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.183411][T11810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.195286][T11810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.205849][T11810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.215998][T11810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.226829][T11810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.242004][T11810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.252757][T11810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.266929][T11810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.285091][T11810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.295924][T11810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.307976][T11810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.327015][T11810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.341476][T11810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.355456][T11810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.365741][T11810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.376426][T11810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.386870][T11810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.398580][T11810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.410416][T11810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.470563][T11810] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.511727][T11810] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.520917][T11810] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.535479][T11810] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.587240][ T5141] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.778082][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.799982][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.905468][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.939031][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.198139][T12007] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2811'. [ 242.280874][T12009] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2810'. [ 242.672599][T12037] netlink: 'syz.2.2825': attribute type 1 has an invalid length. [ 242.979778][T12058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2830'. [ 243.236606][T12069] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2837'. [ 243.479035][ T25] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.970944][T12105] netlink: 'syz.3.2852': attribute type 4 has an invalid length. [ 244.242219][T12121] openvswitch: netlink: Flow actions attr not present in new flow. [ 244.596683][ T51] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.628557][T12143] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2868'. [ 245.462727][ T5101] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 245.472846][ T5101] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 245.482750][ T5101] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 245.491976][ T5101] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 245.524548][ T5101] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 245.532101][ T5101] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 245.629181][T12161] lo speed is unknown, defaulting to 1000 [ 245.814082][T12187] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2885'. [ 246.043292][T12161] chnl_net:caif_netlink_parms(): no params data found [ 246.119238][ T51] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.174396][T12198] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2888'. [ 246.222497][ T51] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.356678][ T51] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.385204][T12161] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.401037][T12161] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.417110][T12161] bridge_slave_0: entered allmulticast mode [ 246.425136][T12161] bridge_slave_0: entered promiscuous mode [ 246.451188][T12161] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.473340][T12161] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.490263][T12161] bridge_slave_1: entered allmulticast mode [ 246.505273][T12161] bridge_slave_1: entered promiscuous mode [ 246.600757][T12161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.644677][T12221] netlink: 'syz.2.2897': attribute type 9 has an invalid length. [ 246.644996][T12161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.663279][T12221] netlink: 'syz.2.2897': attribute type 6 has an invalid length. [ 246.832479][T12161] team0: Port device team_slave_0 added [ 246.890201][T12161] team0: Port device team_slave_1 added [ 246.953486][ T51] bridge_slave_1: left allmulticast mode [ 246.961293][ T51] bridge_slave_1: left promiscuous mode [ 246.967052][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.991062][ T51] bridge_slave_0: left allmulticast mode [ 246.996808][ T51] bridge_slave_0: left promiscuous mode [ 247.010138][T12237] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2904'. [ 247.026667][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.578051][ T5101] Bluetooth: hci2: command tx timeout [ 247.878317][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.911225][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.934002][ T51] bond0 (unregistering): Released all slaves [ 248.008042][T12161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.022861][T12161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.051241][T12161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.156011][T12161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.197919][T12161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.263226][T12161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.506757][T12161] hsr_slave_0: entered promiscuous mode [ 248.534236][T12161] hsr_slave_1: entered promiscuous mode [ 248.561661][T12161] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 248.569785][T12161] Cannot create hsr debugfs directory [ 248.701306][T12272] netlink: 'syz.2.2915': attribute type 3 has an invalid length. [ 248.713847][T12272] netlink: 'syz.2.2915': attribute type 3 has an invalid length. [ 248.723146][T12273] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2917'. [ 248.817243][ T51] hsr_slave_0: left promiscuous mode [ 248.826766][ T51] hsr_slave_1: left promiscuous mode [ 248.860616][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.878655][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.908395][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.915815][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.002056][ T51] veth1_macvtap: left promiscuous mode [ 249.020819][ T51] veth0_macvtap: left promiscuous mode [ 249.047005][ T51] veth1_vlan: left promiscuous mode [ 249.057038][ T51] veth0_vlan: left promiscuous mode [ 249.658066][ T5101] Bluetooth: hci2: command tx timeout [ 249.910802][ T51] team0 (unregistering): Port device team_slave_1 removed [ 249.974282][ T51] team0 (unregistering): Port device team_slave_0 removed [ 250.875192][ T5142] ================================================================== [ 250.883296][ T5142] BUG: KASAN: slab-use-after-free in nf_tables_trans_destroy_work+0x152b/0x1750 [ 250.892340][ T5142] Read of size 2 at addr ffff88801c7f05c4 by task kworker/0:5/5142 [ 250.900239][ T5142] [ 250.902576][ T5142] CPU: 0 PID: 5142 Comm: kworker/0:5 Not tainted 6.10.0-rc5-syzkaller-01202-g0b8774586be5 #0 [ 250.912732][ T5142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 250.922790][ T5142] Workqueue: events nf_tables_trans_destroy_work [ 250.929158][ T5142] Call Trace: [ 250.932442][ T5142] [ 250.935380][ T5142] dump_stack_lvl+0x241/0x360 [ 250.940080][ T5142] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.945289][ T5142] ? __pfx__printk+0x10/0x10 [ 250.949888][ T5142] ? _printk+0xd5/0x120 [ 250.954055][ T5142] ? __virt_addr_valid+0x183/0x520 [ 250.959183][ T5142] ? __virt_addr_valid+0x183/0x520 [ 250.964309][ T5142] print_report+0x169/0x550 [ 250.968829][ T5142] ? __virt_addr_valid+0x183/0x520 [ 250.973951][ T5142] ? __virt_addr_valid+0x183/0x520 [ 250.979077][ T5142] ? __virt_addr_valid+0x44e/0x520 [ 250.984200][ T5142] ? __phys_addr+0xba/0x170 [ 250.988718][ T5142] ? nf_tables_trans_destroy_work+0x152b/0x1750 [ 250.994966][ T5142] kasan_report+0x143/0x180 [ 250.999483][ T5142] ? nf_tables_trans_destroy_work+0x152b/0x1750 [ 251.005740][ T5142] nf_tables_trans_destroy_work+0x152b/0x1750 [ 251.011826][ T5142] ? __pfx_nf_tables_trans_destroy_work+0x10/0x10 [ 251.018248][ T5142] ? lockdep_hardirqs_on_prepare+0x43d/0x780 SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 251.024243][ T5142] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 251.030591][ T5142] ? process_scheduled_works+0x945/0x1830 [ 251.036327][ T5142] process_scheduled_works+0xa2c/0x1830 [ 251.041898][ T5142] ? __pfx_process_scheduled_works+0x10/0x10 [ 251.047889][ T5142] ? assign_work+0x364/0x3d0 [ 251.052486][ T5142] worker_thread+0x86d/0xd50 [ 251.057175][ T5142] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 251.063079][ T5142] ? __kthread_parkme+0x169/0x1d0 [ 251.068128][ T5142] ? __pfx_worker_thread+0x10/0x10 [ 251.073247][ T5142] kthread+0x2f0/0x390 [ 251.077326][ T5142] ? __pfx_worker_thread+0x10/0x10 [ 251.082447][ T5142] ? __pfx_kthread+0x10/0x10 [ 251.087049][ T5142] ret_from_fork+0x4b/0x80 [ 251.091478][ T5142] ? __pfx_kthread+0x10/0x10 [ 251.096077][ T5142] ret_from_fork_asm+0x1a/0x30 [ 251.100864][ T5142] [ 251.103886][ T5142] [ 251.106214][ T5142] Allocated by task 12306: [ 251.110628][ T5142] kasan_save_track+0x3f/0x80 [ 251.115314][ T5142] __kasan_kmalloc+0x98/0xb0 [ 251.119916][ T5142] kmalloc_trace_noprof+0x19c/0x2c0 [ 251.125121][ T5142] nf_tables_newtable+0x52e/0x1dc0 [ 251.130239][ T5142] nfnetlink_rcv+0x1427/0x2a90 [ 251.135011][ T5142] netlink_unicast+0x7f0/0x990 [ 251.139782][ T5142] netlink_sendmsg+0x8e4/0xcb0 [ 251.144556][ T5142] __sock_sendmsg+0x221/0x270 [ 251.149239][ T5142] ____sys_sendmsg+0x525/0x7d0 [ 251.154014][ T5142] __sys_sendmsg+0x2b0/0x3a0 [ 251.158620][ T5142] do_syscall_64+0xf3/0x230 [ 251.163130][ T5142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.169032][ T5142] [ 251.171367][ T5142] Freed by task 12305: [ 251.175432][ T5142] kasan_save_track+0x3f/0x80 [ 251.180121][ T5142] kasan_save_free_info+0x40/0x50 [ 251.185151][ T5142] poison_slab_object+0xe0/0x150 [ 251.190098][ T5142] __kasan_slab_free+0x37/0x60 [ 251.194870][ T5142] kfree+0x149/0x360 [ 251.198778][ T5142] __nft_release_table+0xe80/0xf40 [ 251.203895][ T5142] nft_rcv_nl_event+0x55f/0x6d0 [ 251.208759][ T5142] notifier_call_chain+0x19f/0x3e0 [ 251.213879][ T5142] blocking_notifier_call_chain+0x69/0x90 [ 251.219603][ T5142] netlink_release+0x11a6/0x1b10 [ 251.224551][ T5142] sock_close+0xbc/0x240 [ 251.228799][ T5142] __fput+0x406/0x8b0 [ 251.232787][ T5142] task_work_run+0x24f/0x310 [ 251.237387][ T5142] syscall_exit_to_user_mode+0x168/0x370 [ 251.243028][ T5142] do_syscall_64+0x100/0x230 [ 251.247628][ T5142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.253529][ T5142] [ 251.255855][ T5142] Last potentially related work creation: [ 251.261570][ T5142] kasan_save_stack+0x3f/0x60 [ 251.266255][ T5142] __kasan_record_aux_stack+0xac/0xc0 [ 251.271634][ T5142] insert_work+0x3e/0x330 [ 251.276004][ T5142] __queue_work+0xc16/0xee0 [ 251.280515][ T5142] queue_work_on+0x1c2/0x380 [ 251.285114][ T5142] rhltable_remove+0x1097/0x1160 [ 251.290063][ T5142] __nft_release_table+0xc57/0xf40 [ 251.295180][ T5142] nft_rcv_nl_event+0x55f/0x6d0 [ 251.300044][ T5142] notifier_call_chain+0x19f/0x3e0 [ 251.305163][ T5142] blocking_notifier_call_chain+0x69/0x90 [ 251.310889][ T5142] netlink_release+0x11a6/0x1b10 [ 251.315834][ T5142] sock_close+0xbc/0x240 [ 251.320082][ T5142] __fput+0x406/0x8b0 [ 251.324070][ T5142] task_work_run+0x24f/0x310 [ 251.328669][ T5142] syscall_exit_to_user_mode+0x168/0x370 [ 251.334311][ T5142] do_syscall_64+0x100/0x230 [ 251.338914][ T5142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.344813][ T5142] [ 251.347135][ T5142] The buggy address belongs to the object at ffff88801c7f0400 [ 251.347135][ T5142] which belongs to the cache kmalloc-cg-512 of size 512 [ 251.361452][ T5142] The buggy address is located 452 bytes inside of [ 251.361452][ T5142] freed 512-byte region [ffff88801c7f0400, ffff88801c7f0600) [ 251.375250][ T5142] [ 251.377576][ T5142] The buggy address belongs to the physical page: [ 251.383999][ T5142] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1c7f0 [ 251.392766][ T5142] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 251.401265][ T5142] memcg:ffff888023249a01 [ 251.405501][ T5142] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 251.413056][ T5142] page_type: 0xffffefff(slab) [ 251.417736][ T5142] raw: 00fff00000000040 ffff88801504f140 dead000000000100 dead000000000122 [ 251.426328][ T5142] raw: 0000000000000000 0000000080100010 00000001ffffefff ffff888023249a01 [ 251.434918][ T5142] head: 00fff00000000040 ffff88801504f140 dead000000000100 dead000000000122 [ 251.443593][ T5142] head: 0000000000000000 0000000080100010 00000001ffffefff ffff888023249a01 [ 251.452259][ T5142] head: 00fff00000000002 ffffea000071fc01 ffffffffffffffff 0000000000000000 [ 251.460916][ T5142] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 251.469579][ T5142] page dumped because: kasan: bad access detected [ 251.475988][ T5142] page_owner tracks the page as allocated [ 251.481688][ T5142] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4548, tgid 4548 (udevd), ts 18237999651, free_ts 18176145255 [ 251.502430][ T5142] post_alloc_hook+0x1f3/0x230 [ 251.507187][ T5142] get_page_from_freelist+0x2e4c/0x2f10 [ 251.512723][ T5142] __alloc_pages_noprof+0x256/0x6c0 [ 251.517912][ T5142] alloc_slab_page+0x5f/0x120 [ 251.522573][ T5142] allocate_slab+0x5a/0x2f0 [ 251.527060][ T5142] ___slab_alloc+0xcd1/0x14b0 [ 251.531721][ T5142] __slab_alloc+0x58/0xa0 [ 251.536032][ T5142] kmalloc_node_track_caller_noprof+0x281/0x440 [ 251.542258][ T5142] kmalloc_reserve+0x111/0x2a0 [ 251.547007][ T5142] __alloc_skb+0x1f3/0x440 [ 251.551409][ T5142] alloc_skb_with_frags+0xc3/0x770 [ 251.556507][ T5142] sock_alloc_send_pskb+0x91a/0xa60 [ 251.561692][ T5142] unix_dgram_sendmsg+0x6d3/0x1f80 [ 251.566784][ T5142] __sock_sendmsg+0x221/0x270 [ 251.571444][ T5142] sock_write_iter+0x2dd/0x400 [ 251.576190][ T5142] vfs_write+0xa72/0xc90 [ 251.580422][ T5142] page last free pid 4546 tgid 4546 stack trace: [ 251.586732][ T5142] free_unref_page+0xd22/0xea0 [ 251.591493][ T5142] __slab_free+0x31b/0x3d0 [ 251.595897][ T5142] qlist_free_all+0x9e/0x140 [ 251.600472][ T5142] kasan_quarantine_reduce+0x14f/0x170 [ 251.605916][ T5142] __kasan_slab_alloc+0x23/0x80 [ 251.610755][ T5142] kmem_cache_alloc_noprof+0x135/0x2a0 [ 251.616233][ T5142] vm_area_dup+0x27/0x290 [ 251.620725][ T5142] copy_mm+0xd05/0x2020 [ 251.624864][ T5142] copy_process+0x187a/0x3dc0 [ 251.629524][ T5142] kernel_clone+0x226/0x8f0 [ 251.634009][ T5142] __x64_sys_clone+0x258/0x2a0 [ 251.638758][ T5142] do_syscall_64+0xf3/0x230 [ 251.643244][ T5142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.649127][ T5142] [ 251.651432][ T5142] Memory state around the buggy address: [ 251.657040][ T5142] ffff88801c7f0480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 251.665181][ T5142] ffff88801c7f0500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 251.673223][ T5142] >ffff88801c7f0580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 251.681261][ T5142] ^ [ 251.687393][ T5142] ffff88801c7f0600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 251.695437][ T5142] ffff88801c7f0680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 251.703479][ T5142] ================================================================== [ 251.764581][ T5101] Bluetooth: hci2: command tx timeout [ 252.136037][ T5142] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 252.143277][ T5142] CPU: 0 PID: 5142 Comm: kworker/0:5 Not tainted 6.10.0-rc5-syzkaller-01202-g0b8774586be5 #0 [ 252.153436][ T5142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 252.163498][ T5142] Workqueue: events nf_tables_trans_destroy_work [ 252.169845][ T5142] Call Trace: [ 252.173125][ T5142] [ 252.176055][ T5142] dump_stack_lvl+0x241/0x360 [ 252.180744][ T5142] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.185947][ T5142] ? __pfx__printk+0x10/0x10 [ 252.190539][ T5142] ? preempt_schedule+0xe1/0xf0 [ 252.195387][ T5142] ? vscnprintf+0x5d/0x90 [ 252.199712][ T5142] panic+0x349/0x860 [ 252.203595][ T5142] ? check_panic_on_warn+0x21/0xb0 [ 252.208696][ T5142] ? __pfx_panic+0x10/0x10 [ 252.213101][ T5142] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 252.219071][ T5142] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 252.225384][ T5142] ? print_report+0x502/0x550 [ 252.230052][ T5142] check_panic_on_warn+0x86/0xb0 [ 252.234978][ T5142] ? nf_tables_trans_destroy_work+0x152b/0x1750 [ 252.241208][ T5142] end_report+0x77/0x160 [ 252.245437][ T5142] kasan_report+0x154/0x180 [ 252.249932][ T5142] ? nf_tables_trans_destroy_work+0x152b/0x1750 [ 252.256160][ T5142] nf_tables_trans_destroy_work+0x152b/0x1750 [ 252.262220][ T5142] ? __pfx_nf_tables_trans_destroy_work+0x10/0x10 [ 252.268620][ T5142] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 252.274587][ T5142] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 252.280902][ T5142] ? process_scheduled_works+0x945/0x1830 [ 252.286606][ T5142] process_scheduled_works+0xa2c/0x1830 [ 252.292145][ T5142] ? __pfx_process_scheduled_works+0x10/0x10 [ 252.298115][ T5142] ? assign_work+0x364/0x3d0 [ 252.302692][ T5142] worker_thread+0x86d/0xd50 [ 252.307449][ T5142] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 252.313342][ T5142] ? __kthread_parkme+0x169/0x1d0 [ 252.318354][ T5142] ? __pfx_worker_thread+0x10/0x10 [ 252.323451][ T5142] kthread+0x2f0/0x390 [ 252.327511][ T5142] ? __pfx_worker_thread+0x10/0x10 [ 252.332607][ T5142] ? __pfx_kthread+0x10/0x10 [ 252.337184][ T5142] ret_from_fork+0x4b/0x80 [ 252.341587][ T5142] ? __pfx_kthread+0x10/0x10 [ 252.346163][ T5142] ret_from_fork_asm+0x1a/0x30 [ 252.350920][ T5142] [ 252.354149][ T5142] Kernel Offset: disabled [ 252.358459][ T5142] Rebooting in 86400 seconds..