last executing test programs: 8.605014448s ago: executing program 2 (id=6596): syz_emit_ethernet(0x7a, &(0x7f0000000280)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x300, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0xe0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@lsrr={0x83, 0xb, 0x0, [@dev, @empty]}, @cipso={0x86, 0x31, 0x0, [{0x0, 0x5, "df6116"}, {0x0, 0x12, "ffd11634eea26b0faffa0dea2e903528"}, {0x0, 0x7, "02a20948fd"}, {0x7, 0xd, "ccf0294e2a3bdb4aa40b24"}]}]}}}}}}}, 0x0) 8.517068321s ago: executing program 2 (id=6598): sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000012020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r0, 0x20, &(0x7f0000000080)={&(0x7f0000002700)=""/4116, 0x1014, 0x0, &(0x7f0000000000)=""/102, 0x66}}, 0x10) socket$netlink(0x10, 0x3, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg(r1, &(0x7f0000008540)=[{{&(0x7f00000003c0)=@un=@abs={0x0, 0x0, 0x4e22}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000240)="f65dc06008d337ca6fd32a87b23b0ca6bdc47c2376b33da264e4f3b29a6f69e471ce8ce4915f96f45cd95d6d7bb25a5d1935311a22cb83a740933811571e33b9b12eb04e33857edd74046f37dad45aa05856f1258d8164077bbdaf9f9768c8d4527c20b152ca1eca5af8375e2bb69b4c12111578afd5e2d8fb76232243047f10c721d6ba7005e4cd404da032df95f8a7eeab95ed03fd9af6498db22cb911672bae0e39bfb06932d147d8b43a7cfdc1dfae9fcde4171ebac9c4afd0fd5ed9770e25436ac53bd76fade4df192d0c43d190d70142a51c331a", 0xd7}, {&(0x7f0000000500)="33ec018e56a7a77bf15e3505922de3cd9dde6edc4bf0dd8e213688043915ea3cc1d17c4f1c1d6f26282d3574cd75f0c404e9b908ed9d9a3821133abde4cd9cc088108de429a0e6c31b51405d92c31330d3fb2cd008081d73c34e057bce558ecd238d36b4e0d35bd8386a982dab9e1b8028d9923c24cce616fd6f3ca09e7dc11cc5d7e1b48640ef257c5ec4a7863467ced819e54fa728ad1aefa35ceff4c082e26df0c8e8d325a13d4576878e4f4de96a4d68b1953264afb998c70d6ce1", 0xbd}, {&(0x7f00000005c0)="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", 0xfe}, {&(0x7f00000007c0)="0719e04580973538763c12dc18f7b6596b22664c023d6682605bd1df28ea6efac733c5d99e7974507ffd1671b0d32a23194a9022b6b3758f307ae2a925c92066fa5e707281a1946f16c1adbc675ecf2efa8aacd7634ababa18681f11ce89f326c69f455f039a86f54f8fc653fa2893d4fabd22a6ebed2cde81d573468736a549445a35c0c456fb22efb0f3d522010f5f1a4e5377e892783be31446f3e2", 0x9d}, {&(0x7f0000000880)="823f0a739f732953914b48ef43c38390024a706ac204da022813bbd421b65104311d8fdf55b485c594f8dd817cf0037e130bbd8c96bdf6cd8884c4dd67e6b80cb650be47176dd2f4a37c556cae68a1d3648d94bcf9ff7d5bb55fcd8bdb3060c1737fead174c67fd75a1a61b9e2e1cde130433eac2c9795a47417da8f9d35bd8d3a20a9a63b28b9c54607e10546f6c388df16daee86b86817ac6ef2d7f392411aec011db6c3f4f9eb17", 0xa9}, {&(0x7f0000000d40)="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", 0x1ff}], 0x6, &(0x7f0000002d40)}}], 0x2, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="1a00000000", @ANYRES32, @ANYRES32], 0x20) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002d00010026bd7000fcdbdf2504"], 0x2c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008010) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000050030000090a030000000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d04001280080003400000011008000c400000edd8f802098060000280040001803c000180080001400000000108000140000001d0080001400000000008000140000000090800014000000009080901400000800008000140000000091c000180080001407fffffff0800014000009af7080081400000000708000140000003ff700002802c"], 0x398}}, 0x0) sendmsg$kcm(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}, {&(0x7f0000000080)="bbb376b7bd831c7c00000000000000000000000000000000000000000000ef0b00000000000000", 0x27}, {&(0x7f00000000c0)="c7a26c6b1e38a32eff9d181ee85612ba049bc3593c8fc0ae8f1a079bae667206c90cc3c5342e80a962de9b78a4c5ee0aa6aeff35ddfcab2a5e19aa", 0x3b}], 0x3}, 0x0) 8.125588707s ago: executing program 2 (id=6606): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="24000000021401"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x800) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaac4bc9cac968686dd600a843500142bfffe8000000000000000000000000000bbfe8000000000000000000000000000aa00020000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0300000000000000"], 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000440)={0x5}, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000015c0)) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002001, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) close(0xffffffffffffffff) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x20000000) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r3, &(0x7f0000000340)=""/49, 0x31) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x400c845}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) 6.192693408s ago: executing program 3 (id=6631): epoll_create(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x40, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x3}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x40000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e24, 0x3, 'wrr\x00', 0x25, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@private=0xa010101, 0x4e20, 0x10000, 0xf8}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000680)={0x228, r2, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xd0, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6847ae2b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2528f282}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5b177737}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xe98bf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x71}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x21}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd6}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x70e86448}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2f39ccd6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x573e3c1e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51871617}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c40d60f}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ac79afb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6068c8f0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b5b677f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14aa9319}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3503e160}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0xe0, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x44287c9d}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd14b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xb84b532}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9a54}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x477615b9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x542b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa145}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x340f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa71e}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e41670}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x38c4cab9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe120}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4cdcc38c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x62d09e96}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x250435be}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x47c9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x57aa132f}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x22232d28}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x64078f19}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa173}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5034}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x63405a66}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf979}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5ca6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5d90d521}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_TAGLST={0x4}]}, 0x228}, 0x1, 0x0, 0x0, 0x40080}, 0x40800) 5.934640702s ago: executing program 3 (id=6635): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) 4.912458266s ago: executing program 3 (id=6648): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), r0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000380)={0x38, r1, 0x1d, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x1c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) 4.767345202s ago: executing program 3 (id=6650): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r0, @ANYRES32=r2], 0x44}}, 0x0) 4.622740956s ago: executing program 2 (id=6653): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="110025bd7000000000002500000008000300"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 4.564405673s ago: executing program 3 (id=6656): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80680, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8020, {0x0, 0x0, 0x0, r3, {0x5, 0x7}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x5, 0x7}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x84) 4.405890015s ago: executing program 2 (id=6659): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 4.20735682s ago: executing program 2 (id=6662): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) close(0x3) close(0x4) 4.166825103s ago: executing program 3 (id=6664): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="24000000021401"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x800) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaac4bc9cac968686dd600a843500142bfffe8000000000000000000000000000bbfe8000000000000000000000000000aa00020000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0300000000000000"], 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000440)={0x5}, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000015c0)) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002001, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) close(0xffffffffffffffff) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x20000000) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r3, &(0x7f0000000340)=""/49, 0x31) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x400c845}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) 3.82011368s ago: executing program 4 (id=6668): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0xa8, &(0x7f00000007c0)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x9a, 0x0, 0x20, 0xfc, 0x2, 0x0, @private=0xa010100, @multicast1=0xe0000300}, @echo={0x8, 0x0, 0x0, 0x8000, 0x3, "96cee02b2288cf9e57fd9a64ac74278f0dc9517093863d42ff5143b2c5db592d0488e0e42411e668c69bbcaf90bc22b389896afe8af409a7f93486af4fdde26de7241add5c745e949a0c335215e08c8f1ac89266caac4c319230d21be67e9d622674a80be138fad1924050511cffe9f12843cfbbdb705c4279173786c19a"}}}}}, 0x0) syz_emit_ethernet(0x3f, &(0x7f0000000380)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x31, 0x0, 0x20, 0x1, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @redirect={0x5, 0x0, 0x0, @local, {0x5, 0x4, 0x1, 0x19, 0x400, 0x65, 0xfff6, 0x1, 0x33, 0x0, @private=0xa010100, @broadcast}, "ba"}}}}}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "fc79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) 3.550255214s ago: executing program 0 (id=6671): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={r3, 0x6, 0x2, 0x2}, 0x10) 3.508571602s ago: executing program 1 (id=6672): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 3.428100355s ago: executing program 0 (id=6673): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='$\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="1a"], 0x20) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000a300)) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) 3.378636153s ago: executing program 1 (id=6674): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x80680, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8020, {0x0, 0x0, 0x0, r3, {0x5, 0x7}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x5, 0x7}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x84) 1.106084496s ago: executing program 4 (id=6675): epoll_create(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x40, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x3}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x40000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e24, 0x3, 'wrr\x00', 0x25, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@private=0xa010101, 0x4e20, 0x10000, 0xf8}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000680)={0x218, r2, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xc0, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6847ae2b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2528f282}]}, {0x4}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x206ae37e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x21}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd6}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x70e86448}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2f39ccd6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x573e3c1e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51871617}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c40d60f}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ac79afb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6068c8f0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b5b677f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14aa9319}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3503e160}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0xe0, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x44287c9d}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd14b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xb84b532}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9a54}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x477615b9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x542b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa145}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x340f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa71e}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e41670}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x38c4cab9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe120}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4cdcc38c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x62d09e96}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x250435be}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x47c9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x57aa132f}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x22232d28}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x64078f19}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa173}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5034}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x63405a66}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf979}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5ca6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5d90d521}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_TAGLST={0x4}]}, 0x218}, 0x1, 0x0, 0x0, 0x40080}, 0x40800) 1.079738376s ago: executing program 0 (id=6676): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x22020600) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000480)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8000000000000000}, 0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100040000002c000480050003ff800000000500"], 0x50}, 0x1, 0x0, 0x0, 0x20000002}, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) r6 = epoll_create1(0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000140)={0x10000010}) connect$inet6(r3, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x304}, "2c2efc306522f04e", "78f1a871cff3f164d3c298f4c469a2daeb639000f8c9fa341bf59f869af23e72", "b5d2ea29", "04afe2900c0d3d6e"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}, "ba28597967d1b54c", "9712b0d86846b5ecc522bc6f13a6e30c", "ea0292da", "9e87dc79f4c04982"}, 0x28) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000000)={'ipvlan1\x00'}) sendto$inet6(r3, &(0x7f0000000280)='S', 0x1, 0x8000, 0x0, 0x0) close(r3) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r8, 0x89fb, &(0x7f00000001c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000680)='blkio.reset_stats\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r2, 0x58, &(0x7f0000000300)}, 0xfffffffffffffea1) 1.055484921s ago: executing program 1 (id=6677): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r2, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x94) 844.212881ms ago: executing program 4 (id=6679): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x9c, r1, 0x1, 0xfffffffe, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x33, 0xe, {{{}, {}, @device_a, @broadcast, @from_mac}, 0x0, @default, 0x0, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x1, 0x1, 0x0, 0xa, 0x9}}, @void}}, @NL80211_ATTR_IE_PROBE_RESP={0x4}, @NL80211_ATTR_FTM_RESPONDER={0x38, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x2d, 0x2, "571926bf43deb8c8048066e0a95616a5315108ecc3e4f50f1533225beecb0de46aa819a7e2e34308ea"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x9c}}, 0x0) 617.597351ms ago: executing program 1 (id=6680): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e60, 0x0, @mcast2, 0xd}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="82", 0x1}, {&(0x7f0000000180)}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f00000003c0)="529a", 0x2, 0x44, 0x0, 0x0) 582.439381ms ago: executing program 0 (id=6681): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRESDEC=0x0], &(0x7f0000000300)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_smc(0x2b, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x9) r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000380)={&(0x7f00000000c0)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)="aff5", 0x2}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="1a0000000000000084000a0000000000ffff070007000400"], 0x18, 0x20000001}, 0x20008000) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000006110000000000000620002000000000095000000000000000e14f6a74254ed5aaa9d0f0aa7df05e56c9419a947b4e6892861b3d73295321c80b60a5487b85a9999f463bc7e65b5ecefd031adb020ceec304926b8d26e9e6e0ee570db13315963ec4a69b7fec7ada34004d40ae8c2dbe1d5b4173aa9bb3cc9c8cf9388d5bc4b3aa5d87a693ef23b648c7e7d4e12acd82dc919d2171c83e94ed5b287"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, 0x94) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$unix(0x1, 0x1, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) accept4(r6, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8002000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0x6, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_RATE64={0xc, 0x8, 0x4526dd370cbcddac}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r8, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r9, &(0x7f0000000140)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) 495.950425ms ago: executing program 4 (id=6682): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/56, 0x38}, 0x1fff}], 0x1, 0x1832b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x6d91fb6102d8910c, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 355.452903ms ago: executing program 1 (id=6683): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}}, 0x0) close(0x3) 260.231069ms ago: executing program 0 (id=6684): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)={0x1c, r0, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 237.330416ms ago: executing program 4 (id=6685): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0xa8, &(0x7f00000007c0)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x9a, 0x0, 0x20, 0xfc, 0x2, 0x0, @private=0xa010100, @multicast1=0xe0000300}, @echo={0x8, 0x0, 0x0, 0x8000, 0x3, "96cee02b2288cf9e57fd9a64ac74278f0dc9517093863d42ff5143b2c5db592d0488e0e42411e668c69bbcaf90bc22b389896afe8af409a7f93486af4fdde26de7241add5c745e949a0c335215e08c8f1ac89266caac4c319230d21be67e9d622674a80be138fad1924050511cffe9f12843cfbbdb705c4279173786c19a"}}}}}, 0x0) syz_emit_ethernet(0x3f, &(0x7f0000000380)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x31, 0x0, 0x20, 0x1, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @redirect={0x5, 0x0, 0x0, @local, {0x5, 0x4, 0x1, 0x19, 0x400, 0x65, 0xfff6, 0x1, 0x33, 0x0, @private=0xa010100, @broadcast}, "ba"}}}}}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "fc79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) 45.552125ms ago: executing program 1 (id=6686): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c00)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002280)=ANY=[@ANYBLOB="480000001000ffff27bd7000fbdbdf25000000", @ANYRES32=0x0, @ANYBLOB="100a0500231a0500280012800b000100697036746e6c00001800028014000300ff"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 12.660384ms ago: executing program 4 (id=6687): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x80680, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8020, {0x0, 0x0, 0x0, r3, {0x5, 0x7}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x5, 0x7}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x84) 0s ago: executing program 0 (id=6688): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r0, 0x0, 0xd, 0x0, &(0x7f0000000080)="3a173357f297c605804ab38284", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): oved [ 457.148470][ T49] team0 (unregistering): Port device team_slave_0 removed [ 457.328731][ T5866] Bluetooth: hci1: command tx timeout [ 457.590042][T15818] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 457.603327][T15818] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 457.613574][T15818] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 457.759367][T15818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.800230][T15818] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.818755][T11801] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.826334][T11801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.844382][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.851618][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.900880][ T49] IPVS: stop unused estimator thread 0... [ 458.078026][T15818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 458.128163][T15818] veth0_vlan: entered promiscuous mode [ 458.141314][T15818] veth1_vlan: entered promiscuous mode [ 458.175004][T15818] veth0_macvtap: entered promiscuous mode [ 458.188329][T15818] veth1_macvtap: entered promiscuous mode [ 458.209738][T15818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 458.228389][T15818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 458.243998][ T3005] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.253679][ T3005] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.266339][ T3005] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.275403][ T3005] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.358301][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.380614][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.410791][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.419792][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.405604][ T5866] Bluetooth: hci1: command tx timeout [ 464.106588][T15867] netlink: 'syz.4.3022': attribute type 6 has an invalid length. [ 464.158490][T15871] tipc: Enabled bearer , priority 0 [ 464.220413][T15869] tipc: Disabling bearer [ 464.276666][T15875] netlink: 'syz.3.3023': attribute type 5 has an invalid length. [ 464.306775][T15875] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.3023'. [ 464.447651][T15881] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 464.481234][T15879] geneve2: left promiscuous mode [ 464.521745][T15879] macsec0: left promiscuous mode [ 464.565953][T15879] mac80211_hwsim hwsim67 wlan0: left promiscuous mode [ 464.665613][T15888] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3027'. [ 464.942433][T15890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3028'. [ 465.092270][ T5861] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 465.107229][ T5861] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 465.124125][ T5861] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 465.149648][ T5861] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 465.152520][T15897] tipc: Enabled bearer , priority 0 [ 465.167000][ T5861] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 465.236547][ T3005] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.378167][T15893] syzkaller0: entered promiscuous mode [ 465.384116][T15893] syzkaller0: entered allmulticast mode [ 465.455211][ T3005] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.546639][T15894] lo speed is unknown, defaulting to 1000 [ 465.589133][T15902] tipc: Resetting bearer [ 465.662627][T15891] tipc: Resetting bearer [ 465.763609][T15910] FAULT_INJECTION: forcing a failure. [ 465.763609][T15910] name failslab, interval 1, probability 0, space 0, times 0 [ 465.779023][T15891] tipc: Disabling bearer [ 465.784931][T15910] CPU: 0 UID: 0 PID: 15910 Comm: syz.4.3033 Not tainted syzkaller #0 PREEMPT(full) [ 465.784959][T15910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 465.784971][T15910] Call Trace: [ 465.784979][T15910] [ 465.784988][T15910] dump_stack_lvl+0x189/0x250 [ 465.785016][T15910] ? __pfx____ratelimit+0x10/0x10 [ 465.785052][T15910] ? __pfx_dump_stack_lvl+0x10/0x10 [ 465.785073][T15910] ? __pfx__printk+0x10/0x10 [ 465.785106][T15910] ? __pfx___might_resched+0x10/0x10 [ 465.785131][T15910] should_fail_ex+0x414/0x560 [ 465.785164][T15910] should_failslab+0xa8/0x100 [ 465.785193][T15910] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 465.785220][T15910] ? __alloc_skb+0x112/0x2d0 [ 465.785246][T15910] __alloc_skb+0x112/0x2d0 [ 465.785271][T15910] netlink_sendmsg+0x5c6/0xb30 [ 465.785300][T15910] ? __pfx_netlink_sendmsg+0x10/0x10 [ 465.785324][T15910] ? aa_sock_msg_perm+0xf1/0x1d0 [ 465.785345][T15910] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 465.785366][T15910] ? __pfx_netlink_sendmsg+0x10/0x10 [ 465.785388][T15910] __sock_sendmsg+0x219/0x270 [ 465.785421][T15910] ____sys_sendmsg+0x505/0x830 [ 465.785450][T15910] ? __pfx_____sys_sendmsg+0x10/0x10 [ 465.785484][T15910] ? import_iovec+0x74/0xa0 [ 465.785511][T15910] ___sys_sendmsg+0x21f/0x2a0 [ 465.785538][T15910] ? __pfx____sys_sendmsg+0x10/0x10 [ 465.785601][T15910] ? __fget_files+0x2a/0x420 [ 465.785618][T15910] ? __fget_files+0x3a0/0x420 [ 465.785657][T15910] __x64_sys_sendmsg+0x19b/0x260 [ 465.785683][T15910] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 465.785717][T15910] ? __pfx_ksys_write+0x10/0x10 [ 465.785740][T15910] ? rcu_is_watching+0x15/0xb0 [ 465.785766][T15910] ? do_syscall_64+0xbe/0x3b0 [ 465.785791][T15910] do_syscall_64+0xfa/0x3b0 [ 465.785810][T15910] ? lockdep_hardirqs_on+0x9c/0x150 [ 465.785829][T15910] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.785848][T15910] ? clear_bhb_loop+0x60/0xb0 [ 465.785873][T15910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.785892][T15910] RIP: 0033:0x7f5703d8ebe9 [ 465.785910][T15910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.785927][T15910] RSP: 002b:00007f5704b4c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 465.785950][T15910] RAX: ffffffffffffffda RBX: 00007f5703fc5fa0 RCX: 00007f5703d8ebe9 [ 465.785964][T15910] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 465.785977][T15910] RBP: 00007f5704b4c090 R08: 0000000000000000 R09: 0000000000000000 [ 465.785990][T15910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.786002][T15910] R13: 00007f5703fc6038 R14: 00007f5703fc5fa0 R15: 00007ffcf0b91dd8 [ 465.786036][T15910] [ 466.086229][ T3005] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.291187][ T3005] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.313792][T15918] netlink: 'syz.1.3036': attribute type 5 has an invalid length. [ 466.362953][T15918] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.3036'. [ 466.813581][T15932] netlink: 788 bytes leftover after parsing attributes in process `syz.2.3040'. [ 467.247627][ T5866] Bluetooth: hci5: command tx timeout [ 467.709810][T15960] netlink: 'syz.3.3048': attribute type 5 has an invalid length. [ 467.718280][T15960] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.3048'. [ 468.648934][ T3005] bond0 (unregistering): Released all slaves [ 468.768582][ T3005] bond1 (unregistering): Released all slaves [ 468.786119][ T3005] bond2 (unregistering): Released all slaves [ 468.812783][T15946] syzkaller0: entered promiscuous mode [ 468.819046][T15946] syzkaller0: entered allmulticast mode [ 469.029247][ T3005] tipc: Left network mode [ 469.306230][T15978] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3054'. [ 469.328818][ T5866] Bluetooth: hci5: command tx timeout [ 469.333233][T15981] netlink: 'syz.1.3053': attribute type 1 has an invalid length. [ 469.372237][T15983] FAULT_INJECTION: forcing a failure. [ 469.372237][T15983] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 469.385937][T15983] CPU: 1 UID: 0 PID: 15983 Comm: syz.4.3055 Not tainted syzkaller #0 PREEMPT(full) [ 469.385964][T15983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 469.385975][T15983] Call Trace: [ 469.385984][T15983] [ 469.385993][T15983] dump_stack_lvl+0x189/0x250 [ 469.386020][T15983] ? __pfx____ratelimit+0x10/0x10 [ 469.386050][T15983] ? __pfx_dump_stack_lvl+0x10/0x10 [ 469.386072][T15983] ? __pfx__printk+0x10/0x10 [ 469.386098][T15983] ? fs_reclaim_acquire+0x7d/0x100 [ 469.386135][T15983] should_fail_ex+0x414/0x560 [ 469.386166][T15983] prepare_alloc_pages+0x213/0x610 [ 469.386193][T15983] __alloc_frozen_pages_noprof+0x123/0x370 [ 469.386215][T15983] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 469.386251][T15983] alloc_pages_bulk_noprof+0x560/0x710 [ 469.386278][T15983] ? alloc_pages_noprof+0xbe/0x190 [ 469.386311][T15983] kasan_populate_vmalloc+0xba/0x1a0 [ 469.386340][T15983] alloc_vmap_area+0xd51/0x1490 [ 469.386380][T15983] ? __pfx_alloc_vmap_area+0x10/0x10 [ 469.386404][T15983] ? __kasan_kmalloc+0x93/0xb0 [ 469.386428][T15983] ? __kmalloc_cache_node_noprof+0x234/0x3d0 [ 469.386453][T15983] ? __get_vm_area_node+0x13f/0x300 [ 469.386478][T15983] ? reuseport_array_alloc+0x98/0x130 [ 469.386501][T15983] __get_vm_area_node+0x1f8/0x300 [ 469.386543][T15983] __vmalloc_node_range_noprof+0x301/0x12f0 [ 469.386570][T15983] ? reuseport_array_alloc+0x98/0x130 [ 469.386602][T15983] ? get_pid_task+0x20/0x1f0 [ 469.386638][T15983] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 469.386668][T15983] ? apparmor_capable+0x137/0x1b0 [ 469.386696][T15983] bpf_map_area_alloc+0x12d/0x180 [ 469.386724][T15983] ? reuseport_array_alloc+0x98/0x130 [ 469.386748][T15983] reuseport_array_alloc+0x98/0x130 [ 469.386770][T15983] map_create+0xaa0/0x14d0 [ 469.386808][T15983] ? security_bpf+0x7e/0x300 [ 469.386837][T15983] __sys_bpf+0x60f/0x870 [ 469.386871][T15983] ? __pfx___sys_bpf+0x10/0x10 [ 469.386919][T15983] ? ksys_write+0x22a/0x250 [ 469.386948][T15983] ? __pfx_ksys_write+0x10/0x10 [ 469.386969][T15983] ? rcu_is_watching+0x15/0xb0 [ 469.387021][T15983] __x64_sys_bpf+0x7c/0x90 [ 469.387041][T15983] do_syscall_64+0xfa/0x3b0 [ 469.387056][T15983] ? lockdep_hardirqs_on+0x9c/0x150 [ 469.387079][T15983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.387105][T15983] ? clear_bhb_loop+0x60/0xb0 [ 469.387137][T15983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.387157][T15983] RIP: 0033:0x7f5703d8ebe9 [ 469.387177][T15983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 469.387193][T15983] RSP: 002b:00007f5704b4c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 469.387217][T15983] RAX: ffffffffffffffda RBX: 00007f5703fc5fa0 RCX: 00007f5703d8ebe9 [ 469.387231][T15983] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 0000000000000000 [ 469.387245][T15983] RBP: 00007f5704b4c090 R08: 0000000000000000 R09: 0000000000000000 [ 469.387258][T15983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 469.387270][T15983] R13: 00007f5703fc6038 R14: 00007f5703fc5fa0 R15: 00007ffcf0b91dd8 [ 469.387305][T15983] [ 469.846713][T15894] chnl_net:caif_netlink_parms(): no params data found [ 470.048954][T15998] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 470.247562][T16010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3062'. [ 470.423470][T16016] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3064'. [ 470.504500][T15894] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.513291][T15894] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.535618][T15894] bridge_slave_0: entered allmulticast mode [ 470.553343][T15894] bridge_slave_0: entered promiscuous mode [ 470.678910][T15894] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.682018][T16027] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3066'. [ 470.713546][T15894] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.729833][T16028] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3067'. [ 470.731267][T15894] bridge_slave_1: entered allmulticast mode [ 470.769361][T15894] bridge_slave_1: entered promiscuous mode [ 470.788394][T16023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3064'. [ 470.835703][T16031] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3066'. [ 471.062479][T15894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.100226][T15894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.405753][ T5866] Bluetooth: hci5: command tx timeout [ 471.636834][T16053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3073'. [ 471.679604][T16056] delete_channel: no stack [ 472.002905][T15894] team0: Port device team_slave_0 added [ 472.027878][T15894] team0: Port device team_slave_1 added [ 472.263304][T16071] FAULT_INJECTION: forcing a failure. [ 472.263304][T16071] name failslab, interval 1, probability 0, space 0, times 0 [ 472.298110][T16071] CPU: 0 UID: 0 PID: 16071 Comm: syz.2.3077 Not tainted syzkaller #0 PREEMPT(full) [ 472.298142][T16071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 472.298154][T16071] Call Trace: [ 472.298163][T16071] [ 472.298172][T16071] dump_stack_lvl+0x189/0x250 [ 472.298203][T16071] ? __pfx____ratelimit+0x10/0x10 [ 472.298235][T16071] ? __pfx_dump_stack_lvl+0x10/0x10 [ 472.298257][T16071] ? __pfx__printk+0x10/0x10 [ 472.298288][T16071] ? __pfx___might_resched+0x10/0x10 [ 472.298308][T16071] ? fs_reclaim_acquire+0x7d/0x100 [ 472.298344][T16071] should_fail_ex+0x414/0x560 [ 472.298378][T16071] should_failslab+0xa8/0x100 [ 472.298408][T16071] __kmalloc_noprof+0xcb/0x4f0 [ 472.298432][T16071] ? tomoyo_encode+0x28b/0x550 [ 472.298458][T16071] tomoyo_encode+0x28b/0x550 [ 472.298485][T16071] tomoyo_realpath_from_path+0x58d/0x5d0 [ 472.298508][T16071] ? tomoyo_domain+0xd9/0x130 [ 472.298536][T16071] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 472.298562][T16071] tomoyo_path_number_perm+0x1e8/0x5a0 [ 472.298602][T16071] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 472.298651][T16071] ? __lock_acquire+0xab9/0xd20 [ 472.298706][T16071] ? __fget_files+0x2a/0x420 [ 472.298728][T16071] ? __fget_files+0x2a/0x420 [ 472.298744][T16071] ? __fget_files+0x3a0/0x420 [ 472.298760][T16071] ? __fget_files+0x2a/0x420 [ 472.298783][T16071] security_file_ioctl+0xcb/0x2d0 [ 472.298812][T16071] __se_sys_ioctl+0x47/0x170 [ 472.298840][T16071] do_syscall_64+0xfa/0x3b0 [ 472.298859][T16071] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.298877][T16071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.298897][T16071] ? clear_bhb_loop+0x60/0xb0 [ 472.298921][T16071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.298946][T16071] RIP: 0033:0x7f327bb8ebe9 [ 472.298964][T16071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.298980][T16071] RSP: 002b:00007f327ca44038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 472.299003][T16071] RAX: ffffffffffffffda RBX: 00007f327bdc5fa0 RCX: 00007f327bb8ebe9 [ 472.299017][T16071] RDX: 0000200000000040 RSI: 0000000000008b2a RDI: 0000000000000003 [ 472.299030][T16071] RBP: 00007f327ca44090 R08: 0000000000000000 R09: 0000000000000000 [ 472.299043][T16071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 472.299055][T16071] R13: 00007f327bdc6038 R14: 00007f327bdc5fa0 R15: 00007ffc0894bda8 [ 472.299090][T16071] [ 472.299149][T16071] ERROR: Out of memory at tomoyo_realpath_from_path. [ 472.603236][T16078] netlink: 'syz.4.3079': attribute type 29 has an invalid length. [ 472.631887][T15894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 472.641792][T15894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.690899][T16076] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3079'. [ 472.697704][T15894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 472.737750][T15894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 472.756337][T15894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.804165][T15894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 472.910564][T16082] netlink: 'syz.3.3080': attribute type 29 has an invalid length. [ 472.910680][T16093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3083'. [ 472.971904][T16082] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3080'. [ 473.056487][T16098] delete_channel: no stack [ 473.112279][T15894] hsr_slave_0: entered promiscuous mode [ 473.128681][T15894] hsr_slave_1: entered promiscuous mode [ 473.136240][T15894] debugfs: 'hsr0' already exists in 'hsr' [ 473.142286][T15894] Cannot create hsr debugfs directory [ 473.496598][ T5866] Bluetooth: hci5: command tx timeout [ 473.711005][T16117] tipc: Enabled bearer , priority 0 [ 473.771131][T16118] syzkaller0: entered promiscuous mode [ 473.782316][T16118] syzkaller0: entered allmulticast mode [ 473.901043][T16131] delete_channel: no stack [ 473.931265][T16129] tipc: Resetting bearer [ 474.243842][T16138] netlink: 'syz.3.3098': attribute type 29 has an invalid length. [ 474.271918][T16116] tipc: Resetting bearer [ 474.346049][T16116] tipc: Disabling bearer [ 474.641142][T16148] netlink: 'syz.4.3101': attribute type 11 has an invalid length. [ 474.805932][T16150] netlink: 'syz.1.3102': attribute type 10 has an invalid length. [ 474.843600][T16158] FAULT_INJECTION: forcing a failure. [ 474.843600][T16158] name failslab, interval 1, probability 0, space 0, times 0 [ 474.878792][T16158] CPU: 1 UID: 0 PID: 16158 Comm: syz.4.3104 Not tainted syzkaller #0 PREEMPT(full) [ 474.878848][T16158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 474.878861][T16158] Call Trace: [ 474.878869][T16158] [ 474.878879][T16158] dump_stack_lvl+0x189/0x250 [ 474.878908][T16158] ? __pfx____ratelimit+0x10/0x10 [ 474.878939][T16158] ? __pfx_dump_stack_lvl+0x10/0x10 [ 474.878962][T16158] ? __pfx__printk+0x10/0x10 [ 474.878996][T16158] ? __pfx___might_resched+0x10/0x10 [ 474.879021][T16158] should_fail_ex+0x414/0x560 [ 474.879052][T16158] should_failslab+0xa8/0x100 [ 474.879097][T16158] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 474.879125][T16158] ? __alloc_skb+0x112/0x2d0 [ 474.879151][T16158] __alloc_skb+0x112/0x2d0 [ 474.879176][T16158] netlink_sendmsg+0x5c6/0xb30 [ 474.879208][T16158] ? __pfx_netlink_sendmsg+0x10/0x10 [ 474.879233][T16158] ? aa_sock_msg_perm+0xf1/0x1d0 [ 474.879254][T16158] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 474.879276][T16158] ? __pfx_netlink_sendmsg+0x10/0x10 [ 474.879297][T16158] __sock_sendmsg+0x219/0x270 [ 474.879329][T16158] ____sys_sendmsg+0x505/0x830 [ 474.879358][T16158] ? __pfx_____sys_sendmsg+0x10/0x10 [ 474.879392][T16158] ? import_iovec+0x74/0xa0 [ 474.879426][T16158] ___sys_sendmsg+0x21f/0x2a0 [ 474.879452][T16158] ? __pfx____sys_sendmsg+0x10/0x10 [ 474.879518][T16158] ? __fget_files+0x2a/0x420 [ 474.879534][T16158] ? __fget_files+0x3a0/0x420 [ 474.879563][T16158] __x64_sys_sendmsg+0x19b/0x260 [ 474.879589][T16158] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 474.879623][T16158] ? __pfx_ksys_write+0x10/0x10 [ 474.879645][T16158] ? rcu_is_watching+0x15/0xb0 [ 474.879672][T16158] ? do_syscall_64+0xbe/0x3b0 [ 474.879697][T16158] do_syscall_64+0xfa/0x3b0 [ 474.879716][T16158] ? lockdep_hardirqs_on+0x9c/0x150 [ 474.879735][T16158] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.879755][T16158] ? clear_bhb_loop+0x60/0xb0 [ 474.879780][T16158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.879809][T16158] RIP: 0033:0x7f5703d8ebe9 [ 474.879829][T16158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 474.879847][T16158] RSP: 002b:00007f5704b4c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 474.879868][T16158] RAX: ffffffffffffffda RBX: 00007f5703fc5fa0 RCX: 00007f5703d8ebe9 [ 474.879882][T16158] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 474.879895][T16158] RBP: 00007f5704b4c090 R08: 0000000000000000 R09: 0000000000000000 [ 474.879908][T16158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 474.879920][T16158] R13: 00007f5703fc6038 R14: 00007f5703fc5fa0 R15: 00007ffcf0b91dd8 [ 474.879953][T16158] [ 475.180879][ T3005] hsr_slave_0: left promiscuous mode [ 475.219574][ T3005] veth1_vlan: left promiscuous mode [ 475.382005][T16164] delete_channel: no stack [ 475.426542][ T3005] pimreg (unregistering): left allmulticast mode [ 476.523131][T16176] ip6tnl1: entered promiscuous mode [ 476.560409][T16176] ip6tnl1: entered allmulticast mode [ 476.590645][T16184] bridge0: entered allmulticast mode [ 476.597990][T16184] __nla_validate_parse: 8 callbacks suppressed [ 476.598011][T16184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3112'. [ 476.670380][T16178] lo speed is unknown, defaulting to 1000 [ 476.837882][T15894] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 476.994629][T15894] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 477.114611][T15894] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 477.199470][T15894] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 477.415102][ T3005] IPVS: stop unused estimator thread 0... [ 477.660542][T15894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.779763][T15894] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.840377][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.847746][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.899150][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.906518][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.861591][T15894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.047393][T15894] veth0_vlan: entered promiscuous mode [ 479.174058][T15894] veth1_vlan: entered promiscuous mode [ 479.324829][T15894] veth0_macvtap: entered promiscuous mode [ 479.359300][T15894] veth1_macvtap: entered promiscuous mode [ 479.369521][T16272] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3145'. [ 479.438950][T15894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.489019][T15894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 479.529479][ T3005] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.553052][ T3005] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.659719][ T3005] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.692386][ T3005] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.955516][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.973226][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.052609][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.055530][T16296] netlink: 'syz.2.3158': attribute type 11 has an invalid length. [ 480.084238][T16296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3158'. [ 480.088670][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.244795][T16301] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3161'. [ 480.367772][T16308] netlink: 'syz.0.3018': attribute type 29 has an invalid length. [ 480.439726][T16303] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3018'. [ 480.540906][T16314] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3165'. [ 480.591307][T16316] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3165'. [ 481.391190][ T5861] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 481.403445][ T5861] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 481.422813][ T5861] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 481.436950][ T5861] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 481.455601][ T5861] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 481.606194][T16348] lo speed is unknown, defaulting to 1000 [ 483.107796][T16402] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3205'. [ 483.491454][ T5861] Bluetooth: hci0: command tx timeout [ 483.581886][T16348] chnl_net:caif_netlink_parms(): no params data found [ 484.271442][T16348] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.294964][T16348] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.318774][T16348] bridge_slave_0: entered allmulticast mode [ 484.334374][T16348] bridge_slave_0: entered promiscuous mode [ 484.362851][T16348] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.385407][T16348] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.407197][T16348] bridge_slave_1: entered allmulticast mode [ 484.436010][T16348] bridge_slave_1: entered promiscuous mode [ 484.613529][T16348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 484.644868][T16348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 484.907125][T16348] team0: Port device team_slave_0 added [ 484.917106][T16348] team0: Port device team_slave_1 added [ 485.009813][T16466] netem: change failed [ 485.095342][T16348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.122543][T16348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.159643][T16348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.180938][T16348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.190693][T16348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.218502][T16348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 485.494029][T16348] hsr_slave_0: entered promiscuous mode [ 485.535860][T16348] hsr_slave_1: entered promiscuous mode [ 485.542466][T16348] debugfs: 'hsr0' already exists in 'hsr' [ 485.565733][ T5861] Bluetooth: hci0: command tx timeout [ 485.582975][T16348] Cannot create hsr debugfs directory [ 486.428389][T16520] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3257'. [ 486.534109][T16527] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3260'. [ 486.844530][T16348] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 486.947118][T16348] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 486.979058][T16348] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 487.020356][T16348] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 487.502951][T16348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.570286][T16348] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.627708][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.634901][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.651845][ T5861] Bluetooth: hci0: command tx timeout [ 487.672416][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.679856][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.189445][T16594] bridge0: entered allmulticast mode [ 488.410191][T16348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 488.421580][T16603] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3291'. [ 488.879976][T16623] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3300'. [ 489.031578][T16631] sch_fq: defrate 0 ignored. [ 489.243371][T16348] veth0_vlan: entered promiscuous mode [ 489.264367][T16348] veth1_vlan: entered promiscuous mode [ 489.350316][T16348] veth0_macvtap: entered promiscuous mode [ 489.362471][T16348] veth1_macvtap: entered promiscuous mode [ 489.422814][T16348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 489.461730][T16348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 489.488597][ T1088] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.509535][ T1088] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.535877][ T1088] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.554090][ T1088] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.671059][T16652] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3312'. [ 489.704035][T11801] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.722401][T11801] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.725745][ T5861] Bluetooth: hci0: command tx timeout [ 489.790494][T11801] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.808886][T11801] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.324242][T16669] veth0: entered promiscuous mode [ 490.355323][T16669] macsec1: entered promiscuous mode [ 490.366211][T16669] macsec1: entered allmulticast mode [ 490.415654][T16669] veth0: entered allmulticast mode [ 491.049494][ T5866] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 491.059945][ T5866] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 491.094082][ T5866] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 491.106880][ T5866] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 491.117697][ T5866] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 491.268865][T16692] lo speed is unknown, defaulting to 1000 [ 492.069990][T16720] pim6reg1: entered promiscuous mode [ 492.095349][T16720] pim6reg1: entered allmulticast mode [ 492.231635][T16730] pim6reg1: entered promiscuous mode [ 492.275157][T16730] pim6reg1: entered allmulticast mode [ 493.021251][T16692] chnl_net:caif_netlink_parms(): no params data found [ 493.165760][ T5861] Bluetooth: hci2: command tx timeout [ 493.371407][T16692] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.379227][T16692] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.389895][T16692] bridge_slave_0: entered allmulticast mode [ 493.402781][T16692] bridge_slave_0: entered promiscuous mode [ 493.532472][T16692] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.547875][T16692] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.556066][T16692] bridge_slave_1: entered allmulticast mode [ 493.564490][T16692] bridge_slave_1: entered promiscuous mode [ 495.248935][ T5861] Bluetooth: hci2: command tx timeout [ 496.449283][T16692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 496.508240][T16692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.588618][T16800] lo speed is unknown, defaulting to 1000 [ 496.702028][T16692] team0: Port device team_slave_0 added [ 496.737191][T16692] team0: Port device team_slave_1 added [ 496.885957][T16692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.905732][T16692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 496.998727][T16692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 497.045848][T16692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 497.066993][T16692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 497.132233][T16692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 497.325430][ T5861] Bluetooth: hci2: command tx timeout [ 497.359013][T16692] hsr_slave_0: entered promiscuous mode [ 497.367229][T16692] hsr_slave_1: entered promiscuous mode [ 497.375835][T16692] debugfs: 'hsr0' already exists in 'hsr' [ 497.388716][T16692] Cannot create hsr debugfs directory [ 499.405417][ T5861] Bluetooth: hci2: command tx timeout [ 499.420835][T16692] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.556947][T16692] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.860876][T16692] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.050426][T16692] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.359155][T16873] netlink: 'syz.4.3404': attribute type 11 has an invalid length. [ 500.387716][T16873] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3404'. [ 500.443925][T16692] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 500.500780][T16692] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 500.611814][T16876] bond1: entered promiscuous mode [ 500.617400][T16876] bond1: entered allmulticast mode [ 500.623400][T16876] 8021q: adding VLAN 0 to HW filter on device bond1 [ 500.981763][T16876] bond1 (unregistering): Released all slaves [ 501.013875][T16692] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 501.022038][T16888] netlink: 'syz.3.3410': attribute type 30 has an invalid length. [ 501.072568][T16692] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 501.418110][T16692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.517605][T16692] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.546058][T16912] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3419'. [ 501.562427][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.569658][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.617590][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.625163][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.635482][T16914] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3420'. [ 501.730374][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.817006][T16918] tipc: Enabled bearer , priority 0 [ 501.840187][T16918] syzkaller0: entered promiscuous mode [ 501.854430][T16918] syzkaller0: entered allmulticast mode [ 501.897380][T16918] tipc: Resetting bearer [ 501.908705][T16924] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3425'. [ 501.941316][T16917] tipc: Resetting bearer [ 501.992194][T16917] tipc: Disabling bearer [ 502.043245][T16928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3426'. [ 502.068192][T16928] netlink: 348 bytes leftover after parsing attributes in process `syz.3.3426'. [ 502.101345][T16928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3426'. [ 502.133143][T16928] netlink: 348 bytes leftover after parsing attributes in process `syz.3.3426'. [ 502.145701][T16928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3426'. [ 502.455971][T16692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.643557][T16692] veth0_vlan: entered promiscuous mode [ 502.722826][T16692] veth1_vlan: entered promiscuous mode [ 502.778859][T16951] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3435'. [ 502.854949][T16692] veth0_macvtap: entered promiscuous mode [ 502.922466][T16692] veth1_macvtap: entered promiscuous mode [ 503.018360][T16692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.059909][T16692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.132023][ T3005] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.145731][ T3005] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.203892][ T3005] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.230906][ T3005] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.382195][T16974] syz_tun: entered promiscuous mode [ 503.424940][T16974] batadv_slave_0: entered promiscuous mode [ 503.444672][T16974] hsr1: entered allmulticast mode [ 503.451013][T16974] syz_tun: entered allmulticast mode [ 503.487703][T16974] batadv_slave_0: entered allmulticast mode [ 503.689536][ T6073] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.707727][ T6073] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.778280][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.806686][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.996384][T16998] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 504.774958][T17023] tipc: Started in network mode [ 504.797042][T17023] tipc: Node identity dedc49cef6dc, cluster identity 4711 [ 504.817282][T17023] tipc: Enabled bearer , priority 0 [ 504.871414][T17027] syzkaller0: entered promiscuous mode [ 504.905221][T17027] syzkaller0: entered allmulticast mode [ 505.072718][ T5866] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 505.083271][ T5866] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 505.095673][ T5866] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 505.106872][ T5866] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 505.116529][ T5866] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 505.199768][T17023] tipc: Resetting bearer [ 505.234529][T17022] tipc: Resetting bearer [ 505.316622][T17022] tipc: Disabling bearer [ 505.394443][T17051] netlink: 'syz.0.3476': attribute type 10 has an invalid length. [ 505.407076][T17051] macvlan1: entered allmulticast mode [ 505.425286][T17051] veth1_vlan: entered allmulticast mode [ 505.431212][T17051] team0: Device macvlan1 is up. Set it down before adding it as a team port [ 505.535237][T17043] __nla_validate_parse: 7 callbacks suppressed [ 505.535268][T17043] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3473'. [ 505.581513][T17057] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3478'. [ 505.600468][T17057] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3478'. [ 505.639202][ T3005] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.702851][T17043] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3473'. [ 505.713754][T17035] lo speed is unknown, defaulting to 1000 [ 505.763973][ T3005] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.788463][T17064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3480'. [ 505.816753][T17064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3480'. [ 505.917852][ T3005] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.924240][T17067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3481'. [ 506.003383][T17070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3483'. [ 506.084768][ T3005] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.158230][T17112] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3504'. [ 507.169578][ T5866] Bluetooth: hci3: command tx timeout [ 508.120815][ T3005] team0: Port device bond0 removed [ 508.133007][ T3005] bond0 (unregistering): (slave bond2): Releasing backup interface [ 508.143021][ T3005] bond0 (unregistering): Released all slaves [ 508.270145][ T3005] bond1 (unregistering): Released all slaves [ 508.401780][ T3005] bond2 (unregistering): Released all slaves [ 508.418392][T17105] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3500'. [ 508.674378][ T3005] ave_0: left promiscuous mode [ 508.967350][ T3005] tipc: Left network mode [ 509.158366][T17142] lo speed is unknown, defaulting to 1000 [ 509.245183][ T5866] Bluetooth: hci3: command tx timeout [ 509.736437][T17035] chnl_net:caif_netlink_parms(): no params data found [ 510.364021][T17035] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.395783][T17035] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.403206][T17035] bridge_slave_0: entered allmulticast mode [ 510.435897][T17035] bridge_slave_0: entered promiscuous mode [ 510.498402][T17035] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.520348][T17035] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.542470][T17035] bridge_slave_1: entered allmulticast mode [ 510.554271][T17035] bridge_slave_1: entered promiscuous mode [ 510.762694][T17035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 510.796369][T17035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 511.085875][T17035] team0: Port device team_slave_0 added [ 511.203050][T17035] team0: Port device team_slave_1 added [ 511.243903][T17206] bridge0: entered promiscuous mode [ 511.250694][T17206] macvtap0: entered allmulticast mode [ 511.258675][T17206] bridge0: entered allmulticast mode [ 511.272229][T17206] bridge0: port 3(macvtap0) entered blocking state [ 511.308303][T17206] bridge0: port 3(macvtap0) entered disabled state [ 511.326587][ T5866] Bluetooth: hci3: command tx timeout [ 511.352392][T17206] bridge0: left allmulticast mode [ 511.358641][T17206] bridge0: left promiscuous mode [ 511.383176][T17213] __nla_validate_parse: 5 callbacks suppressed [ 511.383197][T17213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3548'. [ 511.398695][T17213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3548'. [ 511.588439][T17214] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3547'. [ 511.625384][T17214] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3547'. [ 511.724735][T17035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.755928][T17035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.841740][T17035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 512.026209][T17218] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3550'. [ 512.085222][T17035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 512.119844][T17035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 512.175116][T17035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 512.552382][T17035] hsr_slave_0: entered promiscuous mode [ 512.578375][T17035] hsr_slave_1: entered promiscuous mode [ 512.585292][T17035] debugfs: 'hsr0' already exists in 'hsr' [ 512.600163][T17035] Cannot create hsr debugfs directory [ 512.710144][T17242] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3560'. [ 512.875924][T17251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3564'. [ 512.907770][T17251] netlink: 348 bytes leftover after parsing attributes in process `syz.0.3564'. [ 512.952636][T17251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3564'. [ 512.963843][T17251] netlink: 348 bytes leftover after parsing attributes in process `syz.0.3564'. [ 513.405322][ T5861] Bluetooth: hci3: command tx timeout [ 513.763918][ T43] IPVS: starting estimator thread 0... [ 513.868578][T17278] IPVS: using max 23 ests per chain, 55200 per kthread [ 514.570378][ T3005] hsr_slave_0: left promiscuous mode [ 514.577261][ T3005] hsr_slave_1: left promiscuous mode [ 514.613822][ T3005] veth1_macvtap: left promiscuous mode [ 514.625983][ T3005] veth0_macvtap: left promiscuous mode [ 514.632444][ T3005] veth1_vlan: left promiscuous mode [ 514.637833][ T3005] veth0_vlan: left promiscuous mode [ 514.879253][ T3005] pim6reg (unregistering): left allmulticast mode [ 516.472562][T17035] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 516.519987][T17329] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 516.556861][T17329] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.565703][T17329] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.595388][T17035] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 516.694488][T17035] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 516.751168][T17035] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 516.839277][ T3005] IPVS: stop unused estimator thread 0... [ 517.400833][T17035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.483218][T17035] 8021q: adding VLAN 0 to HW filter on device team0 [ 517.533904][T11801] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.541503][T11801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 517.579813][ T6073] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.587117][ T6073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 517.605788][T17367] netlink: 'syz.4.3611': attribute type 4 has an invalid length. [ 518.590056][T17035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 518.747059][T17392] vxcan1: entered allmulticast mode [ 518.854621][T17035] veth0_vlan: entered promiscuous mode [ 518.910268][T17035] veth1_vlan: entered promiscuous mode [ 519.038425][T17035] veth0_macvtap: entered promiscuous mode [ 519.079927][T17035] veth1_macvtap: entered promiscuous mode [ 519.236303][T17035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 519.269338][T17035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 519.302664][ T6073] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.445883][ T1160] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.471440][ T1160] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.550675][ T1160] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.571170][T17408] __nla_validate_parse: 7 callbacks suppressed [ 519.571192][T17408] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3628'. [ 519.761151][T17419] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3632'. [ 519.969495][ T6073] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.013003][ T6073] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.151143][T11801] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.160709][T11801] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.171251][T17430] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3638'. [ 520.284855][T17430] bridge_slave_1 (unregistering): left allmulticast mode [ 520.322590][T17430] bridge_slave_1 (unregistering): left promiscuous mode [ 520.335460][T17430] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.762549][T17448] Bluetooth: MGMT ver 1.23 [ 520.985205][ T24] IPVS: starting estimator thread 0... [ 521.075173][T17458] IPVS: using max 23 ests per chain, 55200 per kthread [ 521.815200][T17489] netlink: 'syz.2.3664': attribute type 1 has an invalid length. [ 521.911884][T17494] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3664'. [ 521.977526][T17489] veth3: entered promiscuous mode [ 523.512585][T17552] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3693'. [ 523.899682][T17569] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3697'. [ 524.393955][T17587] netlink: 'syz.1.3709': attribute type 1 has an invalid length. [ 524.418690][T17587] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3709'. [ 524.939755][T17619] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3717'. [ 525.765731][T17600] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.0.3715:17600 [ 525.828628][T17645] : entered promiscuous mode [ 526.000946][T17624] mpoa:mpoad_close: () going down [ 526.966245][T17693] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3746'. [ 527.014719][T17698] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3747'. [ 527.129481][T17695] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3747'. [ 527.145583][T17701] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3747'. [ 527.274151][T17712] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3752'. [ 527.322880][T17709] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3752'. [ 527.333726][T17717] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3752'. [ 527.413317][T17719] netlink: 'syz.4.3757': attribute type 2 has an invalid length. [ 527.445453][T17719] netlink: 136 bytes leftover after parsing attributes in process `syz.4.3757'. [ 527.593116][T17726] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3758'. [ 529.303961][T17815] netlink: 'syz.0.3795': attribute type 3 has an invalid length. [ 529.331263][T17815] netlink: 'syz.0.3795': attribute type 1 has an invalid length. [ 529.889287][T17833] 8021q: adding VLAN 0 to HW filter on device bond1 [ 530.034638][T17835] 8021q: adding VLAN 0 to HW filter on device bond1 [ 530.062293][T17835] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 530.128169][T17835] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 530.174974][T17840] vxcan1: entered allmulticast mode [ 530.207465][T17841] gretap1: entered allmulticast mode [ 530.238406][T17841] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 533.514230][T17901] __nla_validate_parse: 10 callbacks suppressed [ 533.514253][T17901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3827'. [ 533.546250][T17901] netlink: 348 bytes leftover after parsing attributes in process `syz.2.3827'. [ 533.589867][T17901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3827'. [ 533.631707][T17901] netlink: 348 bytes leftover after parsing attributes in process `syz.2.3827'. [ 533.689086][T17901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3827'. [ 534.257028][T17940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3843'. [ 534.305164][T17940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3843'. [ 534.370761][T17947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3847'. [ 534.387496][T17947] netlink: 348 bytes leftover after parsing attributes in process `syz.2.3847'. [ 534.397402][T17947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3847'. [ 534.532135][T17954] tipc: Started in network mode [ 534.563973][T17954] tipc: Node identity 165e89e630ef, cluster identity 4711 [ 534.594575][T17954] tipc: Enabled bearer , priority 0 [ 534.620340][T17958] syzkaller0: entered promiscuous mode [ 534.630492][T17958] syzkaller0: entered allmulticast mode [ 534.654011][T17963] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 534.661345][T17963] IPv6: NLM_F_CREATE should be set when creating new route [ 534.672383][T17954] tipc: Resetting bearer [ 534.724592][T17953] tipc: Resetting bearer [ 534.830484][T17953] tipc: Disabling bearer [ 535.213494][T17987] netlink: 'syz.4.3865': attribute type 9 has an invalid length. [ 535.246808][T17987] netlink: 'syz.4.3865': attribute type 7 has an invalid length. [ 535.272304][T17987] netlink: 'syz.4.3865': attribute type 8 has an invalid length. [ 535.322628][T17996] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 535.549537][T18008] netlink: 'syz.3.3869': attribute type 4 has an invalid length. [ 535.618494][T18004] lo speed is unknown, defaulting to 1000 [ 536.583611][T18037] netlink: 'syz.1.3882': attribute type 2 has an invalid length. [ 538.538488][T18110] __nla_validate_parse: 25 callbacks suppressed [ 538.538510][T18110] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3907'. [ 539.353764][T18145] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3919'. [ 539.526373][T18156] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3922'. [ 540.469990][T18188] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3936'. [ 542.494846][T18263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3969'. [ 542.523823][T18263] vlan2: entered allmulticast mode [ 542.667779][T18273] vxcan1: entered allmulticast mode [ 543.104462][T18290] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3981'. [ 545.233332][T18307] tipc: Enabling of bearer rejected, failed to enable media [ 545.620665][T18329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3995'. [ 545.688859][T18337] tipc: Enabled bearer , priority 10 [ 546.233635][T18361] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4010'. [ 546.805488][ T5873] tipc: Node number set to 671107534 [ 547.911956][T18441] wg2: entered promiscuous mode [ 547.927945][T18441] wg2: entered allmulticast mode [ 551.230802][T18467] bridge: RTM_NEWNEIGH with invalid ether address [ 551.478159][T18516] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 551.793055][T18532] bridge: RTM_NEWNEIGH with invalid ether address [ 553.118941][T18590] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4107'. [ 553.457459][T18601] sit0: entered promiscuous mode [ 553.463027][T18601] sit0: entered allmulticast mode [ 553.720350][T18605] bridge0: entered promiscuous mode [ 553.734967][T18605] macvtap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 553.751114][T18605] macvtap1: entered allmulticast mode [ 553.765506][T18605] bridge0: entered allmulticast mode [ 553.908655][T18613] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4119'. [ 554.037897][T18620] syzkaller0: create flow: hash 4079853763 index 1 [ 554.221641][T18629] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 554.445269][T18615] syzkaller0: delete flow: hash 4079853763 index 1 [ 557.367034][T18659] wg2: left promiscuous mode [ 557.371790][T18659] wg2: left allmulticast mode [ 557.689793][T18678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4140'. [ 557.712483][T18678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4140'. [ 557.992911][T18694] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4147'. [ 558.139930][T18701] siw: device registration error -23 [ 558.173995][T18704] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4152'. [ 559.384509][T18764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4174'. [ 559.427396][T18764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4174'. [ 559.534798][T18767] sock: sock_timestamping_bind_phc: sock not bind to device [ 559.559411][T18768] netlink: 'syz.2.4177': attribute type 29 has an invalid length. [ 559.589200][T18768] netlink: 'syz.2.4177': attribute type 29 has an invalid length. [ 559.933423][T18784] netlink: 136 bytes leftover after parsing attributes in process `syz.2.4185'. [ 560.660973][T18823] netlink: 136 bytes leftover after parsing attributes in process `syz.0.4200'. [ 560.773308][T18832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4203'. [ 560.797156][T18832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4203'. [ 560.800216][T18827] netlink: 'syz.1.4205': attribute type 29 has an invalid length. [ 561.313457][T18857] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4214'. [ 561.528658][T18866] netlink: 'syz.2.4219': attribute type 10 has an invalid length. [ 561.543430][T18866] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 561.597373][T18868] openvswitch: netlink: IPv4 tunnel dst address is zero [ 562.078066][T18886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4227'. [ 562.156418][T18886] : entered promiscuous mode [ 562.313927][T18899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4232'. [ 563.554003][T18964] __nla_validate_parse: 3 callbacks suppressed [ 563.554028][T18964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4264'. [ 563.612662][T18964] netlink: 'syz.0.4264': attribute type 2 has an invalid length. [ 563.964221][T18984] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4274'. [ 564.399831][T19010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4286'. [ 564.474739][T19010] : entered promiscuous mode [ 564.851228][T19032] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4297'. [ 564.884683][T19032] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4297'. [ 564.928660][T19031] syzkaller0: entered promiscuous mode [ 564.949270][T19031] syzkaller0: entered allmulticast mode [ 564.985914][T19031] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 565.747740][T19078] syzkaller0: entered promiscuous mode [ 565.753508][T19078] syzkaller0: entered allmulticast mode [ 565.764307][T19078] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 566.097547][T19095] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4327'. [ 566.515854][T19114] syzkaller0: entered promiscuous mode [ 566.521626][T19114] syzkaller0: entered allmulticast mode [ 566.539971][T19114] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 567.187765][T19148] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4352'. [ 567.321541][T19156] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 567.793458][T19185] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4367'. [ 567.837192][T19185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4367'. [ 568.008094][T19192] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4370'. [ 568.280622][T19207] : entered promiscuous mode [ 569.130390][T19253] __nla_validate_parse: 4 callbacks suppressed [ 569.130412][T19253] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4400'. [ 569.174862][T19255] netlink: 184 bytes leftover after parsing attributes in process `syz.1.4401'. [ 569.209092][T19257] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4402'. [ 569.255707][T19257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4402'. [ 570.714451][T19334] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4436'. [ 570.948764][T19345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4442'. [ 573.043570][T19345] : entered promiscuous mode [ 573.062194][T19368] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4450'. [ 573.560408][T19393] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 573.632719][T19399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4464'. [ 573.658407][T19400] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4465'. [ 573.807258][T19404] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 574.185821][T19423] tipc: Enabled bearer , priority 0 [ 574.303081][T19423] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 574.312248][T19426] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4478'. [ 574.385700][T19423] tipc: Resetting bearer [ 574.540320][T19421] tipc: Disabling bearer [ 574.635439][T19444] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 574.967034][T19463] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4495'. [ 575.391302][T19491] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 575.398682][T19491] IPv6: NLM_F_CREATE should be set when creating new route [ 575.405997][T19491] IPv6: NLM_F_CREATE should be set when creating new route [ 575.501759][ T5866] Bluetooth: hci1: command 0x0406 tx timeout [ 575.566329][T19497] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4512'. [ 576.187198][T19534] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4530'. [ 576.601970][T19555] lo speed is unknown, defaulting to 1000 [ 577.211374][T19588] netlink: 388 bytes leftover after parsing attributes in process `syz.4.4557'. [ 577.522806][T19599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4562'. [ 577.901317][T19615] netlink: 388 bytes leftover after parsing attributes in process `syz.0.4570'. [ 578.392180][T19634] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4581'. [ 579.192788][T19672] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4597'. [ 579.496202][T19678] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 579.893780][T19697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4608'. [ 579.973182][T19697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4608'. [ 580.205668][T19711] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4613'. [ 580.778901][T19739] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4630'. [ 581.248022][T19767] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4645'. [ 581.508354][T19778] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 582.942102][T19858] netlink: 'syz.0.4688': attribute type 4 has an invalid length. [ 583.004617][T19865] netlink: 'syz.1.4692': attribute type 2 has an invalid length. [ 583.498364][T19888] lo speed is unknown, defaulting to 1000 [ 583.582305][T19897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4706'. [ 585.277710][T19967] netlink: 'syz.0.4735': attribute type 4 has an invalid length. [ 585.504878][T19975] netlink: 120 bytes leftover after parsing attributes in process `syz.3.4741'. [ 586.100247][T19998] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 586.132263][T20001] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4754'. [ 586.684462][T20030] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4768'. [ 586.745775][T20033] netlink: 'syz.2.4771': attribute type 4 has an invalid length. [ 587.752550][T20092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4798'. [ 587.781221][T20094] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4799'. [ 587.802123][T20094] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4799'. [ 587.817380][T20094] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4799'. [ 588.109146][T20107] netlink: 'syz.4.4805': attribute type 4 has an invalid length. [ 588.787297][T20140] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4820'. [ 589.065787][T20154] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4827'. [ 589.096836][T20154] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4827'. [ 590.286693][T20224] tipc: Started in network mode [ 590.295636][T20224] tipc: Node identity 5e1d0ae90dd9, cluster identity 4711 [ 590.302995][T20224] tipc: Enabled bearer , priority 0 [ 590.336528][T20224] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 590.371676][T20224] tipc: Resetting bearer [ 590.409835][T20221] tipc: Disabling bearer [ 590.590423][T20238] __nla_validate_parse: 14 callbacks suppressed [ 590.590447][T20238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4870'. [ 590.922805][T20256] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4878'. [ 592.565646][T20335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4916'. [ 593.361816][T20377] lo speed is unknown, defaulting to 1000 [ 594.575998][T20416] veth0_vlan: entered allmulticast mode [ 594.738955][T20418] veth0_vlan: left promiscuous mode [ 594.751782][T20418] veth0_vlan: entered promiscuous mode [ 594.791132][T20421] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4956'. [ 595.289134][T20437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4964'. [ 595.564427][T20446] netlink: 'syz.0.4968': attribute type 4 has an invalid length. [ 595.879488][T20462] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.887482][T20462] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.138083][T20478] netlink: 'syz.0.4983': attribute type 4 has an invalid length. [ 597.765281][T20502] netlink: 'syz.3.4995': attribute type 4 has an invalid length. [ 598.152738][T20525] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5004'. [ 598.173642][T20525] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5004'. [ 598.377018][T20535] netlink: 120 bytes leftover after parsing attributes in process `syz.4.5010'. [ 598.400060][T20539] netlink: 'syz.0.5011': attribute type 4 has an invalid length. [ 598.891821][T20562] netlink: 120 bytes leftover after parsing attributes in process `syz.4.5024'. [ 598.995986][T20568] netlink: 'syz.3.5026': attribute type 4 has an invalid length. [ 599.153694][T20576] Dead loop on virtual device ip6_vti0, fix it urgently! [ 599.411185][T20591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5035'. [ 599.435331][T20591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5035'. [ 599.447619][T20593] netlink: 'syz.2.5040': attribute type 4 has an invalid length. [ 599.483725][T20596] netlink: 120 bytes leftover after parsing attributes in process `syz.4.5038'. [ 599.847280][T20613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5048'. [ 600.348755][T20636] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 600.392476][T20643] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5062'. [ 600.588103][T20651] netlink: 'syz.4.5066': attribute type 4 has an invalid length. [ 600.863329][T20667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5070'. [ 601.085511][ T5866] Bluetooth: hci5: command 0x0406 tx timeout [ 603.266028][T20779] __nla_validate_parse: 2 callbacks suppressed [ 603.266052][T20779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5121'. [ 603.808956][T20806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5134'. [ 604.278605][T20825] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 604.860305][T20852] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 604.995147][T20854] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5158'. [ 606.207504][ T5866] Bluetooth: hci0: command 0x0406 tx timeout [ 607.689464][T20988] netlink: 'syz.0.5221': attribute type 4 has an invalid length. [ 614.087154][T21145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5294'. [ 614.642719][T21175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5308'. [ 614.658544][T21176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5309'. [ 614.718920][T21176] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5309'. [ 614.741378][T21178] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5312'. [ 614.782704][T21178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5312'. [ 615.203899][T21205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5323'. [ 615.305846][T21209] netlink: 'syz.4.5324': attribute type 12 has an invalid length. [ 615.352056][T21209] netlink: 248 bytes leftover after parsing attributes in process `syz.4.5324'. [ 616.445662][ T5866] Bluetooth: hci2: command 0x0406 tx timeout [ 616.531230][T21271] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5355'. [ 616.690866][T21271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5355'. [ 617.894210][T21347] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 617.901578][T21347] IPv6: NLM_F_CREATE should be set when creating new route [ 620.076550][T21456] netlink: 'syz.1.5440': attribute type 1 has an invalid length. [ 620.228640][T21462] bond1: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 620.359255][T21456] veth3: entered promiscuous mode [ 620.401637][T21456] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 620.813535][T21492] syzkaller1: tun_chr_ioctl cmd 1074025680 [ 622.355614][T21576] __nla_validate_parse: 5 callbacks suppressed [ 622.355638][T21576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5498'. [ 622.394244][T21576] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5498'. [ 622.504118][T21585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5502'. [ 622.522851][T21585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5502'. [ 622.674854][T21590] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5505'. [ 622.698169][T21590] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5505'. [ 624.362557][T21679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5547'. [ 624.734398][T21696] netlink: 'syz.2.5556': attribute type 29 has an invalid length. [ 624.758818][T21696] netlink: 'syz.2.5556': attribute type 29 has an invalid length. [ 625.267716][T21725] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.354590][T21731] netlink: 'syz.0.5572': attribute type 29 has an invalid length. [ 625.390832][T21731] netlink: 'syz.0.5572': attribute type 29 has an invalid length. [ 625.984498][T21766] netlink: 'syz.2.5587': attribute type 29 has an invalid length. [ 626.006535][T21766] netlink: 'syz.2.5587': attribute type 29 has an invalid length. [ 626.286198][T21779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5595'. [ 626.573238][T21795] netlink: 'syz.0.5603': attribute type 29 has an invalid length. [ 626.625680][T21795] netlink: 'syz.0.5603': attribute type 29 has an invalid length. [ 626.741451][T21804] netlink: 'syz.2.5608': attribute type 4 has an invalid length. [ 627.198244][T21826] netlink: 'syz.0.5619': attribute type 29 has an invalid length. [ 628.133274][ T5950] IPVS: starting estimator thread 0... [ 628.161981][T21879] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 628.180711][T21879] tipc: Enabled bearer , priority 10 [ 628.235787][T21880] IPVS: using max 28 ests per chain, 67200 per kthread [ 628.295239][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 628.435311][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 628.575106][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 628.715050][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 628.834380][T21916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5662'. [ 628.855936][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 628.995554][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 629.135091][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 629.275570][ T5950] tipc: Node number set to 649169382 [ 629.415171][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 629.685538][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 629.764318][T21958] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.791012][T21965] tipc: Enabling of bearer rejected, failed to enable media [ 630.018135][T21979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5691'. [ 630.424232][T21999] validate_nla: 5 callbacks suppressed [ 630.424254][T21999] netlink: 'syz.2.5702': attribute type 29 has an invalid length. [ 630.457085][T21999] netlink: 'syz.2.5702': attribute type 29 has an invalid length. [ 632.391409][T22109] syzkaller0: create flow: hash 4079853763 index 1 [ 632.440454][ T6073] syzkaller0: tun_net_xmit 76 [ 632.448751][ T6073] syzkaller0: tun_net_xmit 48 [ 632.467458][ T24] syzkaller0: tun_net_xmit 76 [ 632.575774][ T43] syzkaller0: tun_net_xmit 76 [ 632.688238][T22104] syzkaller0: delete flow: hash 4079853763 index 1 [ 632.935809][T22133] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5766'. [ 633.117565][T22144] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5766'. [ 633.329769][ C0] net_ratelimit: 3 callbacks suppressed [ 633.329793][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 634.375108][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 635.294359][T22155] tipc: Enabling of bearer rejected, failed to enable media [ 635.337734][T22155] syzkaller0: entered promiscuous mode [ 635.344045][T22155] syzkaller0: entered allmulticast mode [ 635.362496][T22155] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 635.405079][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 635.790090][T22175] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5784'. [ 636.313303][T22195] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.438089][T22213] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 636.455224][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 636.630928][T22195] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.838626][T22195] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.029874][T22195] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.075596][T22243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5815'. [ 637.427239][ T72] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.456894][ T72] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.485269][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 637.524367][ T6073] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.632549][ T3005] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.535207][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 638.847599][T22320] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5850'. [ 639.303140][T22330] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 639.412950][T15818] syz_tun (unregistering): left promiscuous mode [ 639.489880][ T5866] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 639.505233][ T5866] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 639.519349][ T5866] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 639.532302][ T5866] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 639.540908][ T5866] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 639.565088][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 639.774622][ T3005] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.859266][T22336] lo speed is unknown, defaulting to 1000 [ 640.077573][ T3005] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.368539][T22366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5871'. [ 640.391726][ T3005] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.484609][T22362] ip6tnl1: entered allmulticast mode [ 640.605368][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 640.713320][ T3005] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.227159][ T3005] bridge_slave_1: left allmulticast mode [ 641.232881][ T3005] bridge_slave_1: left promiscuous mode [ 641.267375][ T3005] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.312219][ T3005] bridge_slave_0: left promiscuous mode [ 641.331702][ T3005] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.565945][ T5866] Bluetooth: hci1: command tx timeout [ 641.645293][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 642.306462][ T3005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 642.338190][ T3005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 642.374530][ T3005] bond0 (unregistering): Released all slaves [ 642.460983][T22416] tap0: tun_chr_ioctl cmd 1074025681 [ 642.481150][ T3005] : left promiscuous mode [ 642.643192][ T3005] tipc: Disabling bearer [ 642.657904][ T3005] tipc: Left network mode [ 642.685316][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 643.023210][T22454] syzkaller1: tun_chr_ioctl cmd 35108 [ 643.268493][T22464] veth1_macvtap: left promiscuous mode [ 643.316598][T22336] chnl_net:caif_netlink_parms(): no params data found [ 643.657830][ T5866] Bluetooth: hci1: command tx timeout [ 643.725241][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 643.809775][T22480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5920'. [ 644.442890][T22487] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.573526][ T3005] batadv_slave_0: left promiscuous mode [ 644.597234][ T3005] hsr_slave_0: left promiscuous mode [ 644.603647][ T3005] hsr_slave_1: left promiscuous mode [ 644.610424][ T3005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 644.624578][ T3005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 644.636161][ T3005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 644.643705][ T3005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 644.670229][ T3005] veth1_macvtap: left promiscuous mode [ 644.677944][ T3005] veth0_macvtap: left promiscuous mode [ 644.683610][ T3005] veth1_vlan: left promiscuous mode [ 644.689674][ T3005] veth0_vlan: left promiscuous mode [ 644.765054][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 645.374379][T22509] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5932'. [ 645.480550][ T3005] team0 (unregistering): Port device team_slave_1 removed [ 645.531906][ T3005] team0 (unregistering): Port device team_slave_0 removed [ 645.741877][ T5866] Bluetooth: hci1: command tx timeout [ 645.810201][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 646.263126][T22487] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.324743][T22336] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.342307][T22336] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.358724][T22336] bridge_slave_0: entered allmulticast mode [ 646.377203][T22336] bridge_slave_0: entered promiscuous mode [ 646.394238][T22336] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.403486][T22336] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.411145][T22336] bridge_slave_1: entered allmulticast mode [ 646.419851][T22336] bridge_slave_1: entered promiscuous mode [ 646.497687][T22487] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.667735][T22487] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.691801][T22336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 646.710322][T22336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 646.762443][T22336] team0: Port device team_slave_0 added [ 646.772749][T22336] team0: Port device team_slave_1 added [ 646.843414][T22336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 646.851506][T22336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 646.855027][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 646.878256][T22336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 646.901532][T22336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 646.911870][T22336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 646.939632][T22336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 646.974022][ T72] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.054215][T22336] hsr_slave_0: entered promiscuous mode [ 647.063381][T22336] hsr_slave_1: entered promiscuous mode [ 647.121607][ T72] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.192284][ T72] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.320611][T22530] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5939'. [ 647.330342][ T72] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.805195][ T5866] Bluetooth: hci1: command tx timeout [ 647.819204][T22547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5950'. acpid: input device has been disconnected, fd 10 [ 647.885181][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 648.100621][T22563] ip6tnl2: entered allmulticast mode [ 648.219512][T22567] netlink: 10 bytes leftover after parsing attributes in process `syz.0.5958'. [ 648.498014][T22336] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 648.547243][T22336] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 648.595734][T22336] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 648.625617][T22336] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 648.925335][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 648.984043][T22336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 649.025856][T22336] 8021q: adding VLAN 0 to HW filter on device team0 [ 649.061692][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.068905][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 649.152886][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.160158][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 649.788433][T22336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 649.903094][T22336] veth0_vlan: entered promiscuous mode [ 649.958448][T22336] veth1_vlan: entered promiscuous mode [ 649.965034][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 650.062508][T22651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5993'. [ 650.081737][T22336] veth0_macvtap: entered promiscuous mode [ 650.094410][T22336] veth1_macvtap: entered promiscuous mode [ 650.163811][T22336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 650.216572][T22336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 650.244021][ T3005] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.266096][ T3005] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.300626][ T3005] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.314679][ T3005] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.426663][T22661] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5998'. [ 650.442463][ T3005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.461908][ T3005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.588893][ T6073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.611794][ T6073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.837817][T22680] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6005'. [ 651.005180][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 651.101459][T22696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6013'. [ 651.354489][T22705] sit0: left promiscuous mode [ 651.362075][T22705] sit0: left allmulticast mode [ 651.381547][T22705] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.389009][T22705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 651.430589][T22705] 8021q: adding VLAN 0 to HW filter on device team0 [ 651.451359][T22705] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 651.533684][T22714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6021'. [ 651.718410][T22724] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6026'. [ 651.729120][T22724] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6026'. [ 652.045087][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 652.498746][T22750] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6040'. [ 652.746996][T22759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6042'. [ 652.807312][T22760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6043'. [ 652.827929][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 652.834419][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 652.841544][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 652.848216][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 652.856217][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 652.864141][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 652.872895][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 652.881125][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 652.889375][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 652.897425][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 652.905587][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 652.913437][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 652.921567][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 652.929550][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 652.937622][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 652.945504][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 652.953461][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 652.961420][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 652.969411][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 652.977368][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 652.985428][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 652.993452][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 653.001534][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 653.009410][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 653.017405][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 653.025434][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 653.033397][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 653.041269][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 653.049274][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 653.057583][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 653.065779][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 653.073969][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 653.082035][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 653.089989][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 653.098249][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 653.106171][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 653.114139][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 653.122013][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 653.130113][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 653.137986][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 653.145965][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 653.154017][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 653.162156][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 653.170134][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 653.178132][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 653.186183][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 653.194241][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 653.202127][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 653.210111][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 653.218016][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 653.226081][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 653.233918][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 653.241953][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 653.249923][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 653.258001][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 653.265883][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 653.273898][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 653.281817][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 653.289993][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 653.297959][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 653.305987][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 653.313849][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 653.321949][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 653.329829][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 653.337940][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 653.345910][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 653.354062][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 653.361936][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 653.370263][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 653.378136][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 653.386115][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 653.394128][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 653.402114][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 653.409991][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 653.420225][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 653.603726][ T5861] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 653.614179][ T5861] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 653.635606][ T5861] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 653.657901][ T5861] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 653.667097][ T5861] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 653.724210][T22774] lo speed is unknown, defaulting to 1000 [ 654.110715][ T3005] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.369058][ T3005] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.445225][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 654.568827][ T3005] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.697294][ T3005] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.006692][ T3005] bridge_slave_1: left allmulticast mode [ 655.012408][ T3005] bridge_slave_1: left promiscuous mode [ 655.044385][ T3005] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.069172][ T3005] bridge_slave_0: left allmulticast mode [ 655.075552][ T3005] bridge_slave_0: left promiscuous mode [ 655.081564][ T3005] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.121949][T22830] __nla_validate_parse: 2 callbacks suppressed [ 655.121972][T22830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6075'. [ 655.485278][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 655.735765][ T5866] Bluetooth: hci0: command tx timeout [ 656.157350][ T3005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 656.178457][ T3005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 656.189527][ T3005] bond0 (unregistering): Released all slaves [ 656.246982][T22830] hsr_slave_1 (unregistering): left promiscuous mode [ 656.317768][ T3005] : left promiscuous mode [ 656.540723][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 656.589872][ T5959] IPVS: starting estimator thread 0... [ 656.685481][T22874] IPVS: using max 26 ests per chain, 62400 per kthread [ 657.106465][T22774] chnl_net:caif_netlink_parms(): no params data found [ 657.565333][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 657.581643][ T3005] hsr_slave_0: left promiscuous mode [ 657.593758][ T3005] hsr_slave_1: left promiscuous mode [ 657.600492][ T3005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 657.614842][ T3005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 657.626996][ T3005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 657.634772][ T3005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 657.672280][ T3005] veth0: left allmulticast mode [ 657.677944][ T3005] veth0: left promiscuous mode [ 657.683006][ T3005] veth1_vlan: left promiscuous mode [ 657.688986][ T3005] veth0_vlan: left promiscuous mode [ 657.815853][ T5866] Bluetooth: hci0: command tx timeout [ 658.606556][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 658.614894][ T3005] team0 (unregistering): Port device team_slave_1 removed [ 658.673327][ T3005] team0 (unregistering): Port device team_slave_0 removed [ 659.645159][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 659.672136][T22774] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.695235][T22774] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.702609][T22960] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6124'. [ 659.712292][T22774] bridge_slave_0: entered allmulticast mode [ 659.727598][T22774] bridge_slave_0: entered promiscuous mode [ 659.748393][T22774] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.763637][T22774] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.772355][T22774] bridge_slave_1: entered allmulticast mode [ 659.801344][T22774] bridge_slave_1: entered promiscuous mode [ 659.888376][ T5866] Bluetooth: hci0: command tx timeout [ 659.993039][T22774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 660.046245][T22774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 660.128842][ T3005] IPVS: stop unused estimator thread 0... [ 660.184416][T22774] team0: Port device team_slave_0 added [ 660.212204][T22774] team0: Port device team_slave_1 added [ 660.363049][T22774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 660.373640][T22774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 660.410329][T22774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 660.424761][T22774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 660.439054][T22774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 660.490235][T22774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 660.516551][T22980] tipc: Enabled bearer , priority 0 [ 660.525899][T22989] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 660.630731][T22980] tipc: Resetting bearer [ 660.695342][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 660.695842][T22979] tipc: Disabling bearer [ 660.725847][ T6010] hid-generic 0005:16C0:5505.0002: item fetching failed at offset 0/2 [ 660.744607][ T6010] hid-generic 0005:16C0:5505.0002: probe with driver hid-generic failed with error -22 [ 660.902256][T22774] hsr_slave_0: entered promiscuous mode [ 660.919999][T22774] hsr_slave_1: entered promiscuous mode [ 660.947767][T22774] debugfs: 'hsr0' already exists in 'hsr' [ 660.953616][T22774] Cannot create hsr debugfs directory [ 660.956130][T23009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6147'. [ 661.336875][T23028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6154'. [ 661.641048][T23038] netlink: 544 bytes leftover after parsing attributes in process `syz.3.6160'. [ 661.725826][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 661.877952][T23052] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6166'. [ 661.903775][T23053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6164'. [ 661.965290][ T5866] Bluetooth: hci0: command tx timeout [ 662.155719][T23064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6170'. [ 662.278475][T22774] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 662.346856][T22774] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 662.393166][T22774] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 662.442496][T22774] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 662.618754][T23088] geneve2: entered promiscuous mode [ 662.765305][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 662.938159][T22774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 663.132473][T22774] 8021q: adding VLAN 0 to HW filter on device team0 [ 663.171166][ T3005] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.178676][ T3005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 663.214238][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.221594][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 663.805229][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 663.897238][T22774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 663.912867][T23147] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6205'. [ 663.960966][T23147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6205'. [ 664.068785][ T5959] IPVS: starting estimator thread 0... [ 664.165179][T23154] IPVS: using max 29 ests per chain, 69600 per kthread [ 664.395317][T23169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 664.620441][T22774] veth0_vlan: entered promiscuous mode [ 664.675744][T22774] veth1_vlan: entered promiscuous mode [ 664.787996][T22774] veth0_macvtap: entered promiscuous mode [ 664.809212][T22774] veth1_macvtap: entered promiscuous mode [ 664.845249][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 664.878171][T22774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 664.923818][T22774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 664.955141][ T3005] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.019277][ T3005] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.058944][ T3005] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.113818][ T3005] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.343567][T11801] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 665.370115][T11801] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.489198][T11801] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 665.501219][T11801] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.769324][T23221] bridge1: entered promiscuous mode [ 665.857710][T23227] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6236'. [ 665.895323][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 666.767815][T23259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6253'. [ 666.925602][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 666.974051][ T5861] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 667.002063][ T5861] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 667.014566][ T5861] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 667.027188][ T5861] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 667.049615][ T5861] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 667.243464][T23279] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6262'. [ 667.309260][ T36] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.480747][ T36] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.527779][T23268] lo speed is unknown, defaulting to 1000 [ 667.639663][ T36] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.827532][ T36] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.965175][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 669.015852][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 669.182836][ T5861] Bluetooth: hci4: command tx timeout [ 669.424219][T23350] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6294'. [ 670.055285][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 670.960778][ T36] bridge_slave_0: left allmulticast mode [ 670.975063][ T36] bridge_slave_0: left promiscuous mode [ 670.988849][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.085300][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 671.246431][ T5861] Bluetooth: hci4: command tx timeout [ 672.125131][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 672.497397][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 672.510667][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 672.521449][ T36] bond0 (unregistering): Released all slaves [ 672.603665][T23384] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6305'. [ 672.647853][ T36] : left promiscuous mode [ 673.165267][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 673.327835][ T5861] Bluetooth: hci4: command tx timeout [ 673.377565][T23268] chnl_net:caif_netlink_parms(): no params data found [ 674.205152][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 674.362556][T23268] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.398904][T23268] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.425535][T23268] bridge_slave_0: entered allmulticast mode [ 674.434607][T23268] bridge_slave_0: entered promiscuous mode [ 674.476176][ T36] hsr_slave_0: left promiscuous mode [ 674.490595][ T36] hsr_slave_1: left promiscuous mode [ 674.502803][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 674.519798][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 674.537755][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 674.556857][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 674.602599][ T36] veth1_vlan: left allmulticast mode [ 674.632161][ T36] veth1_vlan: left promiscuous mode [ 674.643184][ T36] veth0_vlan: left promiscuous mode [ 674.789381][T23483] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6347'. [ 675.194733][T23497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6348'. [ 675.253828][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 675.319589][ T36] team0 (unregistering): Port device team_slave_1 removed [ 675.383489][ T36] team0 (unregistering): Port device team_slave_0 removed [ 675.405292][ T5861] Bluetooth: hci4: command tx timeout [ 675.914312][T23268] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.921869][T23268] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.933531][T23268] bridge_slave_1: entered allmulticast mode [ 675.941187][T23268] bridge_slave_1: entered promiscuous mode [ 676.044621][T23500] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6349'. [ 676.057124][T23491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6347'. [ 676.085560][T23495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6348'. [ 676.216726][T23497] bridge_slave_1: left allmulticast mode [ 676.231890][T23497] bridge_slave_1: left promiscuous mode [ 676.246052][T23497] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.273430][T23497] bridge_slave_0: left allmulticast mode [ 676.285444][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 676.289810][T23497] bridge_slave_0: left promiscuous mode [ 676.313678][T23497] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.552181][T23500] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6349'. [ 676.754606][T23268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 676.789074][T23268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 677.127702][T23268] team0: Port device team_slave_0 added [ 677.147815][T23533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6360'. [ 677.177822][T23268] team0: Port device team_slave_1 added [ 677.197778][T23533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6360'. [ 677.318861][T23268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 677.329667][T23268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 677.335239][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 677.362362][T23268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 677.431046][T23268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 677.444108][T23268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 677.514198][T23268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 677.741583][T23543] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6367'. [ 677.769447][T23268] hsr_slave_0: entered promiscuous mode [ 677.787374][T23268] hsr_slave_1: entered promiscuous mode [ 677.794055][T23268] debugfs: 'hsr0' already exists in 'hsr' [ 677.807323][T23268] Cannot create hsr debugfs directory [ 677.813182][T23548] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6367'. [ 677.822935][T23549] netlink: 452 bytes leftover after parsing attributes in process `syz.4.6368'. [ 677.915561][T23553] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6370'. [ 678.366733][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 678.570864][T23572] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6379'. [ 678.598457][T23574] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6380'. [ 678.636391][T23574] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6380'. [ 678.708386][T23572] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6379'. [ 678.833391][ T36] IPVS: stop unused estimator thread 0... [ 678.855462][T23580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6381'. [ 678.873172][T23580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6381'. [ 679.079815][T23268] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 679.096102][T23268] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 679.122056][T23268] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 679.143480][T23268] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 679.301962][T23268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 679.333786][T23268] 8021q: adding VLAN 0 to HW filter on device team0 [ 679.351215][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.358438][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 679.383124][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.390477][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 679.405621][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 679.653168][T23605] netlink: 'syz.4.6390': attribute type 10 has an invalid length. [ 679.722539][T23605] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 679.767134][T23582] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 679.793114][T23614] tipc: Enabled bearer , priority 0 [ 679.832131][T23614] syzkaller0: entered promiscuous mode [ 679.844400][T23614] syzkaller0: entered allmulticast mode [ 679.897578][T23614] tipc: Resetting bearer [ 679.931029][T23613] tipc: Resetting bearer [ 679.988046][T23613] tipc: Disabling bearer [ 680.161096][T23268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 680.352039][T23268] veth0_vlan: entered promiscuous mode [ 680.392849][T23268] veth1_vlan: entered promiscuous mode [ 680.445250][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 680.516575][T23268] veth0_macvtap: entered promiscuous mode [ 680.544796][T23268] veth1_macvtap: entered promiscuous mode [ 680.679268][T23645] netlink: 'syz.3.6406': attribute type 10 has an invalid length. [ 680.703520][T23268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 680.753225][T23645] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 680.791277][ T6073] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 680.803831][ T1160] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 680.844891][T23268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 680.865632][ T1160] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 680.881119][ T72] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 680.954702][ T1160] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.977677][ T1160] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.014067][ T5861] Bluetooth: hci3: command 0x0401 tx timeout [ 681.029258][ T1160] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.050817][ T1160] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.103034][T23662] netlink: 'syz.3.6410': attribute type 10 has an invalid length. [ 681.337792][T11801] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 681.359425][T11801] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 681.454012][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 681.480115][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 681.487778][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 681.617793][T23681] netlink: 'syz.3.6419': attribute type 10 has an invalid length. [ 681.662825][T23687] netlink: 'syz.3.6419': attribute type 10 has an invalid length. [ 681.731677][T23681] 8021q: adding VLAN 0 to HW filter on device team0 [ 681.808434][T23681] bond0: (slave team0): Enslaving as an active interface with an up link [ 681.861382][T23687] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 682.525141][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 683.314801][ T5866] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 683.330808][ T5866] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 683.350629][ T5866] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 683.371383][ T5866] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 683.383326][ T5866] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 683.457014][T23746] __nla_validate_parse: 27 callbacks suppressed [ 683.457037][T23746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6447'. [ 683.582199][T23737] lo speed is unknown, defaulting to 1000 [ 683.586264][T23750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6449'. [ 685.170694][T23737] chnl_net:caif_netlink_parms(): no params data found [ 685.371150][T23816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6478'. [ 685.411034][T23816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6478'. [ 685.485142][ T5866] Bluetooth: hci2: command tx timeout [ 685.564611][T23737] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.593124][T23737] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.618203][T23737] bridge_slave_0: entered allmulticast mode [ 685.648213][T23737] bridge_slave_0: entered promiscuous mode [ 685.678558][T23737] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.696119][T23737] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.717836][T23737] bridge_slave_1: entered allmulticast mode [ 685.754649][T23737] bridge_slave_1: entered promiscuous mode [ 685.971752][T23737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 686.018153][T23737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 686.164008][T23838] netlink: 108 bytes leftover after parsing attributes in process `syz.0.6488'. [ 686.290654][T23737] team0: Port device team_slave_0 added [ 686.321105][T23737] team0: Port device team_slave_1 added [ 686.420670][T23737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 686.436944][T23849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6490'. [ 686.472045][T23737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 686.512577][T23737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 686.663366][T23737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 686.681331][T23737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 686.713307][T23737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 686.872867][T23737] hsr_slave_0: entered promiscuous mode [ 686.898762][T23737] hsr_slave_1: entered promiscuous mode [ 686.926199][T23737] debugfs: 'hsr0' already exists in 'hsr' [ 686.934567][T23737] Cannot create hsr debugfs directory [ 686.979559][T23870] netlink: 108 bytes leftover after parsing attributes in process `syz.0.6501'. [ 687.450007][T23737] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.565347][ T5866] Bluetooth: hci2: command tx timeout [ 687.704452][T23737] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.842849][T23905] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6518'. [ 687.864262][T23737] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.987049][T23737] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.283489][T23737] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 688.308786][T23737] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 688.333563][T23737] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 688.369383][T23737] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 688.439587][T23926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6527'. [ 688.541289][T23936] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6529'. [ 688.629638][T23737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 688.702116][T23737] 8021q: adding VLAN 0 to HW filter on device team0 [ 688.784894][T11801] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.792236][T11801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 688.813865][T11801] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.821126][T11801] bridge0: port 2(bridge_slave_1) entered forwarding state [ 689.561249][T23737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 689.646679][ T5866] Bluetooth: hci2: command tx timeout [ 689.693968][T23737] veth0_vlan: entered promiscuous mode [ 689.713223][T23737] veth1_vlan: entered promiscuous mode [ 689.789220][T23737] veth0_macvtap: entered promiscuous mode [ 689.804120][T23737] veth1_macvtap: entered promiscuous mode [ 689.848568][T23737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 689.865470][T23737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 689.890273][ T6073] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.919980][ T72] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.937448][ T72] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.957497][T23957] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 689.960863][ T72] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.167518][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 690.176514][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 690.368414][T23998] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6557'. [ 690.411120][T11801] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 690.433586][T11801] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 690.538775][T24008] lo speed is unknown, defaulting to 1000 [ 690.731470][T24019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6431'. [ 690.901563][T24023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6563'. [ 691.245466][ T5866] Bluetooth: hci3: command 0x0401 tx timeout [ 691.725649][ T5866] Bluetooth: hci2: command tx timeout [ 691.775780][T24050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6576'. [ 691.994131][T24060] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6580'. [ 692.073783][T24064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6580'. [ 692.143855][T24065] netlink: 'syz.3.6580': attribute type 10 has an invalid length. [ 692.170685][T24064] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6580'. [ 692.215262][T24064] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6580'. [ 692.252942][T24064] netlink: 540 bytes leftover after parsing attributes in process `syz.3.6580'. [ 693.213745][T24074] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 693.336928][T24106] tipc: Started in network mode [ 693.342632][T24106] tipc: Node identity 0eb6d4b25fba, cluster identity 4711 [ 693.352010][T24106] tipc: Enabled bearer , priority 0 [ 693.360560][T24106] syzkaller0: entered promiscuous mode [ 693.366219][T24106] syzkaller0: entered allmulticast mode [ 693.383960][T24106] tipc: Resetting bearer [ 693.430803][T24105] tipc: Resetting bearer [ 693.463396][T24113] netlink: 'syz.2.6598': attribute type 10 has an invalid length. [ 693.463902][T24105] tipc: Disabling bearer [ 693.854695][T24131] __nla_validate_parse: 5 callbacks suppressed [ 693.854718][T24131] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6606'. [ 694.057971][T24135] lo speed is unknown, defaulting to 1000 [ 694.124534][T24148] netlink: 'syz.0.6611': attribute type 2 has an invalid length. [ 694.154025][T24148] netlink: 136 bytes leftover after parsing attributes in process `syz.0.6611'. [ 694.357983][T24156] netlink: 'syz.4.6614': attribute type 10 has an invalid length. [ 694.424558][T24157] netlink: 'syz.4.6614': attribute type 10 has an invalid length. [ 694.445358][ T5866] Bluetooth: hci3: command 0x0401 tx timeout [ 694.447099][T24156] 8021q: adding VLAN 0 to HW filter on device team0 [ 694.477994][T24156] bond0: (slave team0): Enslaving as an active interface with an up link [ 694.509774][T24157] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 694.527161][T24162] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6616'. [ 694.593316][T24162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6616'. [ 694.603819][T24162] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6616'. [ 694.613493][T24162] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6616'. [ 694.625312][T24162] netlink: 540 bytes leftover after parsing attributes in process `syz.1.6616'. [ 694.646202][T24162] netlink: 'syz.1.6616': attribute type 10 has an invalid length. [ 694.703685][T24156] 8021q: adding VLAN 0 to HW filter on device bond1 [ 694.753462][T24162] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 695.526361][T24193] syz_tun: entered allmulticast mode [ 695.544520][T24194] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6628'. [ 695.572905][T24191] syz_tun: left allmulticast mode [ 695.596620][T24198] netlink: 'syz.0.6630': attribute type 10 has an invalid length. [ 695.688341][T24198] 8021q: adding VLAN 0 to HW filter on device team0 [ 695.698401][T24201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6631'. [ 695.709375][T24202] netlink: 'syz.0.6630': attribute type 10 has an invalid length. [ 695.729452][T24198] bond0: (slave team0): Enslaving as an active interface with an up link [ 695.779517][T24202] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 695.848580][T24198] 8021q: adding VLAN 0 to HW filter on device bond1 [ 696.415313][T24228] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6642'. [ 696.424080][T24231] syz_tun: entered allmulticast mode [ 696.472820][T24226] syz_tun: left allmulticast mode [ 697.117181][T24251] netlink: 'syz.4.6649': attribute type 12 has an invalid length. [ 697.165638][T24251] netlink: 'syz.4.6649': attribute type 29 has an invalid length. [ 700.695817][T24294] lo speed is unknown, defaulting to 1000 [ 700.819051][T24324] __nla_validate_parse: 4 callbacks suppressed [ 700.819072][T24324] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6675'. [ 700.835601][T24325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6676'. [ 700.887431][T17040] IPVS: starting estimator thread 0... [ 700.985338][T24329] IPVS: using max 23 ests per chain, 55200 per kthread [ 701.578278][T24341] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6683'. [ 701.838031][T17035] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 701.850070][T17035] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 701.858507][T17035] CPU: 0 UID: 0 PID: 17035 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 701.868072][T17035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 701.878155][T17035] RIP: 0010:klist_remove+0x14a/0x340 [ 701.883468][T17035] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 99 d3 b2 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 7a d3 b2 f6 49 8b 44 24 58 48 89 44 24 08 [ 701.903111][T17035] RSP: 0018:ffffc900045875e0 EFLAGS: 00010202 [ 701.909365][T17035] RAX: 000000000000000b RBX: ffff88802e37bc00 RCX: 0000000000000000 [ 701.917519][T17035] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 701.925543][T17035] RBP: ffffc900045876e0 R08: ffffffff8f8a0983 R09: 1ffffffff1f14130 [ 701.933512][T17035] R10: dffffc0000000000 R11: fffffbfff1f14131 R12: 0000000000000000 [ 701.941481][T17035] R13: 1ffff1100b06608c R14: ffff888058330460 R15: dffffc0000000000 [ 701.949552][T17035] FS: 0000000000000000(0000) GS:ffff888125c17000(0000) knlGS:0000000000000000 [ 701.958627][T17035] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 701.965210][T17035] CR2: 0000555586a8b808 CR3: 0000000073f1c000 CR4: 00000000003526f0 [ 701.973286][T17035] Call Trace: [ 701.976663][T17035] [ 701.979594][T17035] ? __pfx_klist_remove+0x10/0x10 [ 701.984623][T17035] ? __pfx_kobject_move+0x10/0x10 [ 701.989675][T17035] ? do_raw_spin_unlock+0x122/0x240 [ 701.994875][T17035] ? get_device_parent+0x366/0x3a0 [ 701.999985][T17035] device_move+0x193/0x700 [ 702.004410][T17035] hci_conn_del_sysfs+0xb8/0x170 [ 702.009523][T17035] hci_conn_del+0xc33/0x11b0 [ 702.014118][T17035] hci_conn_hash_flush+0x191/0x230 [ 702.019283][T17035] hci_dev_close_sync+0xaef/0x1330 [ 702.024427][T17035] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 702.030006][T17035] ? up_write+0x1c4/0x420 [ 702.034357][T17035] hci_unregister_dev+0x21a/0x510 [ 702.039496][T17035] vhci_release+0x80/0xd0 [ 702.043946][T17035] ? __pfx_vhci_release+0x10/0x10 [ 702.049102][T17035] __fput+0x449/0xa70 [ 702.053104][T17035] task_work_run+0x1d4/0x260 [ 702.057790][T17035] ? __pfx_task_work_run+0x10/0x10 [ 702.062910][T17035] ? kmem_cache_free+0x18f/0x400 [ 702.067855][T17035] do_exit+0x6b5/0x2300 [ 702.072015][T17035] ? do_raw_spin_lock+0x121/0x290 [ 702.077046][T17035] ? __pfx_do_exit+0x10/0x10 [ 702.081827][T17035] do_group_exit+0x21c/0x2d0 [ 702.086422][T17035] ? lockdep_hardirqs_on+0x9c/0x150 [ 702.091620][T17035] get_signal+0x1286/0x1340 [ 702.096217][T17035] arch_do_signal_or_restart+0x9a/0x750 [ 702.101956][T17035] ? fput_close_sync+0x119/0x200 [ 702.106933][T17035] ? kmem_cache_free+0x309/0x400 [ 702.111875][T17035] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 702.118047][T17035] ? exit_to_user_mode_loop+0x40/0x110 [ 702.123540][T17035] exit_to_user_mode_loop+0x75/0x110 [ 702.128941][T17035] do_syscall_64+0x2bd/0x3b0 [ 702.133728][T17035] ? lockdep_hardirqs_on+0x9c/0x150 [ 702.138927][T17035] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.145083][T17035] ? clear_bhb_loop+0x60/0xb0 [ 702.149759][T17035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.155657][T17035] RIP: 0033:0x7f352898d5fc [ 702.160093][T17035] Code: Unable to access opcode bytes at 0x7f352898d5d2. [ 702.167129][T17035] RSP: 002b:00007ffc713b1780 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 702.175635][T17035] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 00007f352898d5fc [ 702.183624][T17035] RDX: 0000000000000030 RSI: 00007ffc713b1840 RDI: 00000000000000f9 [ 702.191625][T17035] RBP: 00007ffc713b17ec R08: 0000000000000000 R09: 00007ffc713b14f7 [ 702.199708][T17035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000258 [ 702.207685][T17035] R13: 0000000000000022 R14: 00000000000aa856 R15: 00007ffc713b1840 [ 702.215665][T17035] [ 702.218688][T17035] Modules linked in: [ 702.224307][T17035] ---[ end trace 0000000000000000 ]--- [ 702.257412][T24347] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6686'. [ 702.272470][T17035] RIP: 0010:klist_remove+0x14a/0x340 [ 702.282577][T17035] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 99 d3 b2 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 7a d3 b2 f6 49 8b 44 24 58 48 89 44 24 08 [ 702.313708][T17035] RSP: 0018:ffffc900045875e0 EFLAGS: 00010202 [ 702.329935][T17035] RAX: 000000000000000b RBX: ffff88802e37bc00 RCX: 0000000000000000 [ 702.338783][T17035] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 702.351961][T17035] RBP: ffffc900045876e0 R08: ffffffff8f8a0983 R09: 1ffffffff1f14130 [ 702.360253][T17035] R10: dffffc0000000000 R11: fffffbfff1f14131 R12: 0000000000000000 [ 702.372349][T17035] R13: 1ffff1100b06608c R14: ffff888058330460 R15: dffffc0000000000 [ 702.391012][T17035] FS: 0000000000000000(0000) GS:ffff888125c17000(0000) knlGS:0000000000000000 [ 702.412506][T17035] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 702.426531][T17035] CR2: 00007fe2490b6890 CR3: 0000000030260000 CR4: 00000000003526f0 [ 702.434795][T17035] Kernel panic - not syncing: Fatal exception [ 702.448520][T17035] Kernel Offset: disabled [ 702.452960][T17035] Rebooting in 86400 seconds..