last executing test programs: 57.431565329s ago: executing program 0 (id=205): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x2, 0x0, r0, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001680)={0xffffffffffffffff, 0x20, &(0x7f0000001640)={&(0x7f00000004c0)=""/214, 0xd6, 0x0, &(0x7f0000000400)=""/57, 0x39}}, 0x10) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001700)=@o_path={&(0x7f00000016c0)='./file0\x00', 0x0, 0x4000, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x9, 0x22, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6ea, 0x0, 0x0, 0x0, 0xb0}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@jmp={0x5, 0x1, 0x3, 0x5, 0x5, 0x8, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffd}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffb}, @func={0x85, 0x0, 0x1, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0xb, 0x1000, &(0x7f0000000640)=""/4096, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x7, r2, 0x8, &(0x7f0000000180)={0x8, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0xb, 0x3, 0x4}, 0x10, r3, 0xffffffffffffffff, 0x3, &(0x7f0000001740)=[0xffffffffffffffff, r4, r0, r0, r0, r0], &(0x7f0000001780)=[{0x5, 0x4, 0x9, 0xc}, {0x2, 0x3, 0xc, 0x3}, {0x5, 0x5, 0xb, 0xb}], 0x10, 0x3, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 57.068713986s ago: executing program 0 (id=209): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001a00010000000000002000000a000000000000000000000006001d000000000005001b0011"], 0x2c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}]}, @NFT_MSG_NEWSETELEM={0x38, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xbc}}, 0x0) 45.115232906s ago: executing program 0 (id=209): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001a00010000000000002000000a000000000000000000000006001d000000000005001b0011"], 0x2c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}]}, @NFT_MSG_NEWSETELEM={0x38, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xbc}}, 0x0) 34.031942845s ago: executing program 0 (id=209): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001a00010000000000002000000a000000000000000000000006001d000000000005001b0011"], 0x2c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}]}, @NFT_MSG_NEWSETELEM={0x38, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xbc}}, 0x0) 22.639773783s ago: executing program 0 (id=209): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001a00010000000000002000000a000000000000000000000006001d000000000005001b0011"], 0x2c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}]}, @NFT_MSG_NEWSETELEM={0x38, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xbc}}, 0x0) 11.855948253s ago: executing program 0 (id=209): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001a00010000000000002000000a000000000000000000000006001d000000000005001b0011"], 0x2c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}]}, @NFT_MSG_NEWSETELEM={0x38, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xbc}}, 0x0) 2.110524515s ago: executing program 3 (id=725): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1.873425542s ago: executing program 3 (id=729): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) syz_emit_ethernet(0x3e, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000300000000000019078ac1e0001ac1414aa0387907803000000450000000000fffc002f00000000000000000000216b9cf524669c6227b444254debc63fc466432852a682ba4cfee4cb0ae62e1c9f4100856536c7f7c0c5cc04bdfa97c6146eec31cc4c51182615e48b1df9705ed054c6dbc76fc8c888ba6779e60adc708b794a964b49ec20080260da08fb48f5584fbf0a7f342b8cddc50a0313"], 0x0) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x64, 0x0, @dev}, 0x10, &(0x7f0000002d40)=[{&(0x7f0000000500)='\b\x00', 0x2}, {&(0x7f0000001600)="6e38844ab2ae", 0x6}], 0x2}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r4) r5 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r5, 0x5421, &(0x7f0000000240)=0x2) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x1}, 0x10) shutdown(r5, 0x1) shutdown(r5, 0x0) poll(&(0x7f0000000040)=[{r5, 0x8}], 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) setsockopt$packet_int(r0, 0x107, 0x3, &(0x7f0000000040)=0x1, 0x4) sendto$packet(r0, &(0x7f00000000c0)='?', 0x1, 0x0, &(0x7f0000000540)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.744454974s ago: executing program 4 (id=731): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000003b0007010000000000000000047c0000040000000c00018006000600800a00001000028004000f"], 0x34}}, 0xc000) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000003b0007010000000000000000047c0000040000000c00018006000600800a00001000028004000f"], 0x34}}, 0xc000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x4, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0x1e, 0x1}]}}}]}, 0x3c}, 0x1, 0x2000000000000000}, 0x0) 1.629808825s ago: executing program 3 (id=732): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x6, 0x4000010, r2, 0x423a8000) close(r2) (async) close(r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000010000000000000000000000711205000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 1.3994237s ago: executing program 4 (id=736): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) socket$vsock_stream(0x28, 0x1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r2}, 0x8) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000400)={r0, 0x0, 0xac, 0x0, &(0x7f0000000340)="eb1c06a691650ad310b1ad6790c7552942bf59fd374139d8055fd907cd1e709f7c37ed852673089002b882d2c289343c8a4bf29bb231b07d5fe59bb82fa620e0a7012e0d67f366d04bfc1578076bd4bada7761d1619743f7c6f0f6d528729f400e9061b10bd8ff8b9d7bc2cf7c8fc48c74863bb22c2fcb63f765fcb8eead94ab863e8ea8524f916cea539ecb9751a7fed6b499326abc1f3766c56d74c0d9d43a41f0bc64e4699f708ec2aa96", 0x0, 0x5, 0x0, 0x28, 0x0, &(0x7f00000000c0)="994821d8c52bcac612024d6af342d0d92a1c7b635fbb8dd36670ccc6ce730bf6c3bd33ad55e1426f", 0x0, 0x2, 0x0, 0x9}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x3, 0x0, &(0x7f0000000000)="259a53", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.219709176s ago: executing program 1 (id=737): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x1, 0x10000000, 0x0, {0x0, 0x0, 0x0, r2, 0x4100}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x3, 0x3, 0x10}}]}]}, @IFLA_TXQLEN={0x8, 0xd, 0x9}]}, 0x40}}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000064660489caba519f20000000000000000"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r3, r3}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r3, r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0x10, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r3, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f00000000c0)='%pI4 \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="60000000020601080000000000000000000000001400078008001140000000000500150003000000050005000a"], 0x60}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac1414000c00090008"], 0x30}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0x1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r8, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) r11 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r11, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r11, &(0x7f0000000280)={&(0x7f0000000040)={0x1d, r10}, 0x10, &(0x7f0000000180)={&(0x7f0000001280)=ANY=[], 0x48}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r14}}, 0x24}}, 0x0) r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=r2, @ANYRES32, @ANYBLOB="010000000200000600ffffffff000400"/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f0000000680)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x27, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000bddf000000000000ff070000b7080000000000007b8af8ff00000000b7080000330000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000b7080000000000007b8af8ff00000000b7080000af0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b71900000000007a1110330f7b2a0ec04897fca44200850000000c000000b70000000000000085100000080000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0xfffffff7, 0x0, 0x0, 0x41100, 0x12, '\x00', r2, @flow_dissector, r8, 0x8, &(0x7f0000000340)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x7, 0x1, 0xf097}, 0x10, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000700)=[r15, r16], &(0x7f0000000740)=[{0x2, 0x3, 0x10, 0x1}, {0x2, 0x2, 0x7}, {0x3, 0x5, 0x9, 0x8}, {0x5, 0x1, 0x6, 0x1}, {0x0, 0x5, 0x9, 0xb}, {0x2, 0x3, 0xa, 0xb}], 0x10, 0x8, @void, @value}, 0x94) 1.132248258s ago: executing program 4 (id=738): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r0, 0x0) (async) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000240)={r3}, &(0x7f00000001c0)=0x8) (async) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r0, 0x0) 1.115868126s ago: executing program 2 (id=739): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'virt_wifi0\x00', 0x0}) r5 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r3, &(0x7f0000000040)={0x20000004}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000000020000000000000000", @ANYRES32=r4], 0x20}}, 0x0) 972.684424ms ago: executing program 1 (id=740): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x12}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x34}}, 0x0) 943.723114ms ago: executing program 4 (id=741): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x20000000) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0xb16, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}}, 0x1c) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x400, 0x4140}}}}}}]}, 0x48}}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000f, 0x12, r2, 0x6000) ioctl(r2, 0x1, &(0x7f0000000000)) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb010018000000000000001000000010000000020000000000000000000001"], 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x20, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, r7, 0x1, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 941.938383ms ago: executing program 2 (id=742): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x3, 0x7, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x2000c040}, 0x80002) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f00000001c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x3, 0x7, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x2000c040}, 0x80002) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f00000001c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) 842.701007ms ago: executing program 1 (id=743): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x25, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @private=0xa010101}}, 0x1, 0x4000}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100687372001c00028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="050007002441d7"], 0x48}}, 0x0) 688.676453ms ago: executing program 4 (id=744): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x3}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'ip6gretap0\x00'}]}}]}, 0x48}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xb4}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000025c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x60000800}, 0x4000010) 687.929971ms ago: executing program 1 (id=745): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x24, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg1\x00', 0x4) 687.28051ms ago: executing program 2 (id=746): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x13, r0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000100)="240000005a001f001007f41108000400020100020800038005000000ffc8bbb86ec81f7d", 0x24) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000005380)=0x9, 0x8) 557.019624ms ago: executing program 3 (id=747): r0 = socket$kcm(0xa, 0x922000000003, 0x11) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0)=r1, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x9b}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000200)="59df6e16da8413433a5699d01f90401ea0082b23ff3086920aa1e7d03e9907233fd04cec2686ae1c01e9cb489c59ffd1e35a508b44977555dc4dd7f20aff4ce74f65c7fed71490e94417355a5a5bb47e4ccd578582b9f82833f86f919002ea3d3ab3749c03af8f98dc18fbc70665d06a9b5460f77f91195a1bba5ac705db8e625ec67060bc7ee48586a4cd03dc46351735d7", 0x92) 481.466167ms ago: executing program 4 (id=748): r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) listen(r1, 0x4) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x1}], 0x1}}], 0x1, 0x0) (async, rerun: 64) r2 = socket$inet_icmp(0x2, 0x2, 0x1) (rerun: 64) setsockopt$inet_buf(r2, 0x0, 0x27, &(0x7f0000000300)="64147e011c3a538e1c64b6ddc461f9b7dbc6ebb4dd9b38b1121a07b63ddd31e9732f402a04333111bb48a3ae2f6fac6d993a022d2bb3571f802f2dc2dd7a7ee0913270ca803f4d67cb1489562d6de4c5320b476b2cf9a4973633b77889c6fc7aa5a76f189c5b57803f4fa4afac1c7156ce3de482a56fc3b3967400c170af73cc620754ced5a85af087bed6a65d60ec93e3e93be5d727fb46550dbef483004bdbe353925db0f2c68e66471300e948443463dff999a33908885ad25cb0b1c30d1ab112ce810b9f90e23ad348a64f12f591dbf592eb09c42266d9a40f0b51021b", 0xdf) (async, rerun: 32) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x168, 0x10, 0x1a0, 0xb, 0x270, 0x250, 0x250, 0x270, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x0, 0xff], [], 'veth1_to_batadv\x00', 'veth1_to_hsr\x00', {}, {}, 0x3a}, 0x6000000, 0x138, 0x1a0, 0x0, {0x0, 0x28e}, [@common=@icmp6={{0x28}, {0x0, 'K\r'}}, @common=@inet=@iprange={{0x68}, {@ipv4=@dev={0xac, 0x14, 0x14, 0xa}, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@multicast2, @ipv6=@local, 0x20}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00', {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) (rerun: 32) 428.662856ms ago: executing program 1 (id=749): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x29, 0x1a, 0x0, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x8000080) connect$qrtr(r3, &(0x7f0000000040), 0xc) readv(r3, &(0x7f0000000180)=[{&(0x7f0000000100)=""/111}], 0x34) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000000)=']', 0x1}], 0x1) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e00010000000000000000000000004e240000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) 428.340725ms ago: executing program 2 (id=750): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x70bd28, 0x25dffbfb, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x200400d4) 277.226006ms ago: executing program 3 (id=751): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0xf}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0xf}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) r1 = socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x274, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xb0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff36}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5626cda7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd3}]}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "13c8c5fef3bd593fd75d9a2d7504e871d048eb8e2e275aac7ddf"}}]}, @TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x786}]}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd3f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xeef1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x400}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xd}]}]}, 0x274}, 0x1, 0x0, 0x0, 0x20008080}, 0x4000054) (async) r5 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) read$alg(r5, &(0x7f0000003380)=""/4111, 0x100f) (async) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x400000000000003, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_x_sa2={0x2, 0x13, 0x3}]}, 0x60}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'geneve0\x00', &(0x7f0000000680)=@ethtool_drvinfo={0x3, "375ab1cbb3f7c6eca020449b335ddf61f5f42c0ced358fa80d843fb49c2cb669", "ea29430930b2eef11cfb2282cfa37438f0e8128dcae0136a4dc9858bc2418b08", "1bae5bb9dae39d38ba77fefcee81b2020dfa1a382644b1800faa001d9b787419", "3c7295149203e18ae4cef26446e5afdfcf746b75a333fc2df4eba7ca666f2b6a", "7b145332ade510f186511a20def495e3618bf549ed4e944fdf92b6709c576294", "244b010e411c09e15a2437ba", 0xb45}}) (async) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000040)) 256.548349ms ago: executing program 2 (id=752): socket(0x1e, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000010000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)=ANY=[@ANYBLOB="140000001000090000000000000000000000000a2c000000050a03030000000000000000020000000c0002400000000000f4ff010900010073797a30"], 0x54}}, 0x60048000) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet_sctp(r2, &(0x7f0000001780)=[{&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x92b, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000200)="9b57", 0x2}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000008400000007000000000000060000000018000000000000008400000207000000ac1414aa00000000180000000000000084000000060000000101000000000000200000000000000084000000020000000600008003000000008000005cd3fde76f0040e6e51af1332c9ad80cceae12c78db893bab35946a80b79ae7177f56e7b0e8c82d05f34bd1693c9f7defbbbc1de2515c8d6e6f05c789d0587a05b0570a3bb68c40ac10839ff67aa649eaf6957ebdca5f6e74fb641743e55dba6f261e09a6ff32e8edb1e2d10a087395f20eb33c3a9a127075ac848825affca3bfbde61bbce2980cc31866addd9abb41baa280f326cbf4aa516d5936d38f11814b9c2f9783f355a9292", @ANYRES32=0x0], 0x68, 0x24048885}], 0x1, 0x0) 51.497056ms ago: executing program 1 (id=753): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007665746830"], 0xfc}, 0x1, 0x0, 0x0, 0x4040040}, 0x880) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x24}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) recvfrom$x25(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$int_in(r1, 0x5421, &(0x7f0000001100)=0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000038000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r4}, 0x10) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) pipe(&(0x7f0000000080)) close(r1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000d40000000000000000000000000a20000000000a03000000000000000000010000000900010073797a3000000000bc000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000009000038008000240000000007c00038014000100626f6e64300000000000000000000000140001006970766c616e31000000000000000000140001006970766c616e300000000000000000001400010073697430000000000000fbffffffffffffff0100776c616e300000000000000000000000140001006772653000000000000000000000040008000140000000005c000000180a01010000000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014000100626f6e64300000000000000000000000140001006970766c616e31"], 0x4b0}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}, 0x1, 0x0, 0x0, 0x44}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007665746830"], 0xfc}, 0x1, 0x0, 0x0, 0x4040040}, 0x880) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x24}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) recvfrom$x25(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) ioctl$int_in(r1, 0x5421, &(0x7f0000001100)=0x9) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_int(r2, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000038000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r4}, 0x10) (async) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) (async) pipe(&(0x7f0000000080)) (async) close(r1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}, 0x1, 0x0, 0x0, 0x44}, 0x0) (async) 50.413173ms ago: executing program 3 (id=754): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x328, 0xffffffff, 0xffffffff, 0x328, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @ipv4={'\x00', '\xff\xff', @loopback}, [], [], 'veth0_to_batadv\x00', 'vlan0\x00'}, 0x0, 0xd0, 0x118, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@ecn={{0x28}, {0xa}}]}, @unspec=@CT0={0x48}}, {{@uncond, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}, @common=@inet=@set2={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x22b}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0x80}}, 0x4814) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x0, 0x61, 0x10, 0x64}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=r4, @ANYRESHEX=r1], 0x4c}}, 0x0) 0s ago: executing program 2 (id=755): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x7d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffdd, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xae, 0x66}, [@call={0x16}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x12, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000003900000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x6c, 0x2, 0x6, 0x1, 0x6000006, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x5, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="181c9f121100e50100000000008000b82f000000", @ANYRES32=r3], 0x18}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000400142603600e120800140000000401a80029000800024004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b302277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecb3800000000000000ffffc1c9b6278754ca397c388b0dd6e4edef3d930000000000000000000056000000000000", 0xd8}], 0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.81' (ED25519) to the list of known hosts. [ 53.728658][ T5826] cgroup: Unknown subsys name 'net' [ 53.861165][ T5826] cgroup: Unknown subsys name 'cpuset' [ 53.869101][ T5826] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 55.130645][ T5826] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 59.490191][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.500004][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 59.518835][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 59.527890][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 59.543095][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 59.563998][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 59.572599][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 59.573189][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 59.580197][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 59.594408][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 59.595685][ T5856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 59.603293][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 59.609861][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 59.623178][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 59.630062][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 59.631617][ T5853] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 59.645880][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 59.653709][ T5856] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 59.654649][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 59.661544][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 59.675449][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 59.678223][ T5851] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 59.683710][ T5853] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 59.690803][ T5856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 59.699312][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 59.712172][ T5152] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 59.719873][ T5856] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 59.733190][ T5856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 59.740992][ T5152] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 59.760716][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 60.120781][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 60.211715][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 60.225077][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 60.254343][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.262074][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.269839][ T5849] bridge_slave_0: entered allmulticast mode [ 60.276950][ T5849] bridge_slave_0: entered promiscuous mode [ 60.297226][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 60.327064][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.334460][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.341872][ T5849] bridge_slave_1: entered allmulticast mode [ 60.349314][ T5849] bridge_slave_1: entered promiscuous mode [ 60.439831][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.476043][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.503460][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 60.550415][ T5849] team0: Port device team_slave_0 added [ 60.583283][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.592448][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.601231][ T5845] bridge_slave_0: entered allmulticast mode [ 60.609945][ T5845] bridge_slave_0: entered promiscuous mode [ 60.619328][ T5849] team0: Port device team_slave_1 added [ 60.625282][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.634448][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.641899][ T5845] bridge_slave_1: entered allmulticast mode [ 60.649223][ T5845] bridge_slave_1: entered promiscuous mode [ 60.655685][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.663090][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.670506][ T5836] bridge_slave_0: entered allmulticast mode [ 60.677057][ T5836] bridge_slave_0: entered promiscuous mode [ 60.684013][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.691621][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.699101][ T5838] bridge_slave_0: entered allmulticast mode [ 60.705769][ T5838] bridge_slave_0: entered promiscuous mode [ 60.713955][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.721242][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.728637][ T5838] bridge_slave_1: entered allmulticast mode [ 60.735184][ T5838] bridge_slave_1: entered promiscuous mode [ 60.784782][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.793318][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.801031][ T5836] bridge_slave_1: entered allmulticast mode [ 60.808534][ T5836] bridge_slave_1: entered promiscuous mode [ 60.834296][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.841527][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.867727][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.881184][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.888531][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.915137][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.936251][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.954786][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.973225][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.992077][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.025061][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.032370][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.039641][ T5854] bridge_slave_0: entered allmulticast mode [ 61.046545][ T5854] bridge_slave_0: entered promiscuous mode [ 61.064295][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.083470][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.090855][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.098372][ T5854] bridge_slave_1: entered allmulticast mode [ 61.104933][ T5854] bridge_slave_1: entered promiscuous mode [ 61.122006][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.141671][ T5838] team0: Port device team_slave_0 added [ 61.170732][ T5845] team0: Port device team_slave_0 added [ 61.188855][ T5838] team0: Port device team_slave_1 added [ 61.212357][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.225135][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.235866][ T5845] team0: Port device team_slave_1 added [ 61.260344][ T5836] team0: Port device team_slave_0 added [ 61.270142][ T5849] hsr_slave_0: entered promiscuous mode [ 61.276436][ T5849] hsr_slave_1: entered promiscuous mode [ 61.314595][ T5836] team0: Port device team_slave_1 added [ 61.339487][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.346468][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.372873][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.384934][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.392384][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.418630][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.448382][ T5854] team0: Port device team_slave_0 added [ 61.454879][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.462009][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.488105][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.505152][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.512345][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.538579][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.555070][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.562491][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.588468][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.601042][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.608085][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.634194][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.651733][ T5854] team0: Port device team_slave_1 added [ 61.718212][ T5844] Bluetooth: hci3: command tx timeout [ 61.724080][ T5844] Bluetooth: hci0: command tx timeout [ 61.737056][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.744115][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.770736][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.784712][ T5845] hsr_slave_0: entered promiscuous mode [ 61.792733][ T5845] hsr_slave_1: entered promiscuous mode [ 61.798272][ T5844] Bluetooth: hci2: command tx timeout [ 61.798988][ T5844] Bluetooth: hci1: command tx timeout [ 61.809508][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.817279][ T5845] Cannot create hsr debugfs directory [ 61.843294][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.850417][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.876417][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.887099][ T5844] Bluetooth: hci4: command tx timeout [ 61.910041][ T5838] hsr_slave_0: entered promiscuous mode [ 61.916167][ T5838] hsr_slave_1: entered promiscuous mode [ 61.925300][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.932956][ T5838] Cannot create hsr debugfs directory [ 61.947079][ T5836] hsr_slave_0: entered promiscuous mode [ 61.953709][ T5836] hsr_slave_1: entered promiscuous mode [ 61.963242][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.970965][ T5836] Cannot create hsr debugfs directory [ 62.084090][ T5854] hsr_slave_0: entered promiscuous mode [ 62.092059][ T5854] hsr_slave_1: entered promiscuous mode [ 62.098592][ T5854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.106139][ T5854] Cannot create hsr debugfs directory [ 62.298641][ T5849] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.309475][ T5849] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.321529][ T5849] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.336477][ T5849] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.411659][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.438395][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.468385][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.478271][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.497719][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.509629][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.541622][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.561067][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.576718][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.594090][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.605720][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.629441][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.639807][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.669754][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.702130][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.709358][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.740352][ T5854] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.756871][ T957] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.764211][ T957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.802976][ T5854] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.814791][ T5854] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.825193][ T5854] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.970894][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.998281][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.010077][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.035818][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.065305][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.072443][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.131592][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.147384][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.154511][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.183101][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.205937][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.213037][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.234033][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.248690][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.255805][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.283093][ T3554] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.290267][ T3554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.341894][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.349001][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.363414][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.381779][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.411316][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.418568][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.473523][ T957] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.480685][ T957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.603882][ T5854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.753466][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.800086][ T5844] Bluetooth: hci0: command tx timeout [ 63.805557][ T5844] Bluetooth: hci3: command tx timeout [ 63.861212][ T5845] veth0_vlan: entered promiscuous mode [ 63.877705][ T5844] Bluetooth: hci2: command tx timeout [ 63.883354][ T5844] Bluetooth: hci1: command tx timeout [ 63.890930][ T5845] veth1_vlan: entered promiscuous mode [ 63.953398][ T5849] veth0_vlan: entered promiscuous mode [ 63.970814][ T5844] Bluetooth: hci4: command tx timeout [ 63.976934][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.005945][ T5845] veth0_macvtap: entered promiscuous mode [ 64.028769][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.041939][ T5849] veth1_vlan: entered promiscuous mode [ 64.059081][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.072375][ T5845] veth1_macvtap: entered promiscuous mode [ 64.123278][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.142284][ T5849] veth0_macvtap: entered promiscuous mode [ 64.156022][ T5849] veth1_macvtap: entered promiscuous mode [ 64.171222][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.184517][ T5845] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.195019][ T5845] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.205778][ T5845] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.216017][ T5845] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.235381][ T5838] veth0_vlan: entered promiscuous mode [ 64.256854][ T5838] veth1_vlan: entered promiscuous mode [ 64.273935][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.285217][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.297795][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.328406][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.341559][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.353966][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.370228][ T5849] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.379785][ T5849] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.388886][ T5849] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.398063][ T5849] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.433229][ T5836] veth0_vlan: entered promiscuous mode [ 64.452490][ T5854] veth0_vlan: entered promiscuous mode [ 64.494511][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.508552][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.521751][ T5836] veth1_vlan: entered promiscuous mode [ 64.538890][ T5854] veth1_vlan: entered promiscuous mode [ 64.553284][ T5838] veth0_macvtap: entered promiscuous mode [ 64.575589][ T5838] veth1_macvtap: entered promiscuous mode [ 64.590225][ T5919] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.600340][ T5919] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.672625][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 64.685398][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.696076][ T5836] veth0_macvtap: entered promiscuous mode [ 64.711663][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.720309][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.734678][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.745666][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.756428][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.771381][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.810428][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.825770][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.836012][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.848228][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.870545][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.886238][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.899470][ T5854] veth0_macvtap: entered promiscuous mode [ 64.907114][ T5836] veth1_macvtap: entered promiscuous mode [ 64.913359][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.925322][ T5838] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.935011][ T5838] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.944127][ T5838] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.953837][ T5838] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.990687][ T5854] veth1_macvtap: entered promiscuous mode [ 65.006940][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.019941][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.037567][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.048105][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.064719][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.075280][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.078463][ T5928] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.090347][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.129188][ T5928] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 65.165736][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.181679][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.191795][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.202382][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.212492][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.223454][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.234052][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.245963][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.259263][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.271285][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.284292][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.294908][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.305798][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.315728][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.326591][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.339193][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.402342][ T5836] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.423414][ T5836] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.432651][ T5836] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.443368][ T5836] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.474660][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.487895][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.500905][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.511882][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.522400][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.525205][ T5939] trusted_key: syz.0.8 sent an empty control message without MSG_MORE. [ 65.535679][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.551878][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.563957][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.575185][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.627823][ T5854] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.636576][ T5854] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.645940][ T5854] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.648261][ T5939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8'. [ 65.656122][ T5854] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.700019][ T957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.711340][ T957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.815759][ T5943] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) ! [ 65.851134][ T4404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.874303][ T4404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.887847][ T5844] Bluetooth: hci3: command tx timeout [ 65.887939][ T5846] Bluetooth: hci0: command tx timeout [ 65.903652][ T4404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.926955][ T4404] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.958426][ T5846] Bluetooth: hci2: command tx timeout [ 65.963898][ T5846] Bluetooth: hci1: command tx timeout [ 65.995618][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.005368][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.040822][ T5844] Bluetooth: hci4: command tx timeout [ 66.110631][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.120624][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.190159][ T4404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.200591][ T4404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.482363][ T5953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 66.506266][ T5955] delete_channel: no stack [ 66.549230][ T5959] Zero length message leads to an empty skb [ 66.829279][ T1212] IPVS: starting estimator thread 0... [ 66.947667][ T5980] IPVS: using max 20 ests per chain, 48000 per kthread [ 67.195793][ T5987] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.19'. [ 67.500981][ T5999] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.707012][ T6007] netlink: 'syz.4.23': attribute type 64 has an invalid length. [ 67.715618][ T6007] netlink: 5 bytes leftover after parsing attributes in process `syz.4.23'. [ 67.738039][ T6005] veth1: entered promiscuous mode [ 67.785248][ T6009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25'. [ 67.793950][ T6012] syz.4.29 uses obsolete (PF_INET,SOCK_PACKET) [ 67.868235][ T6009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.25'. [ 67.899900][ T6003] veth1: left promiscuous mode [ 67.905582][ T6009] netlink: 32 bytes leftover after parsing attributes in process `syz.2.25'. [ 67.957865][ T5844] Bluetooth: hci3: command tx timeout [ 67.958601][ T5846] Bluetooth: hci0: command tx timeout [ 68.014383][ T5846] block nbd0: Receive control failed (result -107) [ 68.038861][ T5846] Bluetooth: hci1: command tx timeout [ 68.044321][ T5846] Bluetooth: hci2: command tx timeout [ 68.090957][ T6009] nbd0: detected capacity change from 0 to 256 [ 68.113679][ T6021] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.30'. [ 68.119128][ T5859] block nbd0: Dead connection, failed to find a fallback [ 68.130861][ T5846] Bluetooth: hci4: command tx timeout [ 68.178199][ T5859] block nbd0: shutting down sockets [ 68.206646][ T5859] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 68.263039][ T5859] Buffer I/O error on dev nbd0, logical block 0, async page read [ 68.297668][ T5859] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 68.307081][ T5859] Buffer I/O error on dev nbd0, logical block 0, async page read [ 68.356222][ T5859] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 68.370722][ T5859] Buffer I/O error on dev nbd0, logical block 0, async page read [ 68.379855][ T5859] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 68.394516][ T5859] Buffer I/O error on dev nbd0, logical block 0, async page read [ 68.402603][ T5859] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 68.412826][ T5859] Buffer I/O error on dev nbd0, logical block 0, async page read [ 68.434705][ T5859] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 68.455403][ T5859] Buffer I/O error on dev nbd0, logical block 0, async page read [ 68.468775][ T6036] netlink: 'syz.2.34': attribute type 1 has an invalid length. [ 68.487635][ T5859] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 68.496740][ T5859] Buffer I/O error on dev nbd0, logical block 0, async page read [ 68.516023][ T6036] netlink: 224 bytes leftover after parsing attributes in process `syz.2.34'. [ 68.522544][ T5859] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 68.599593][ T5859] Buffer I/O error on dev nbd0, logical block 0, async page read [ 68.623263][ T5859] ldm_validate_partition_table(): Disk read failed. [ 68.637441][ T5859] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 68.657088][ T5859] Buffer I/O error on dev nbd0, logical block 0, async page read [ 68.686486][ T5859] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 68.717773][ T5859] Buffer I/O error on dev nbd0, logical block 0, async page read [ 68.725854][ T5859] Dev nbd0: unable to read RDB block 0 [ 68.764631][ T5859] nbd0: unable to read partition table [ 68.794068][ T5859] ldm_validate_partition_table(): Disk read failed. [ 68.827881][ T5859] Dev nbd0: unable to read RDB block 0 [ 68.853673][ T5859] nbd0: unable to read partition table [ 68.867506][ T6044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.39'. [ 68.982478][ T6051] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 69.177857][ T5892] IPVS: starting estimator thread 0... [ 69.297617][ T6061] IPVS: using max 21 ests per chain, 50400 per kthread [ 70.433001][ T6130] Bluetooth: MGMT ver 1.23 [ 70.501071][ T6135] netlink: 'syz.3.69': attribute type 1 has an invalid length. [ 70.786804][ T6143] netlink: 'syz.0.72': attribute type 12 has an invalid length. [ 70.817983][ T6145] tipc: Can't bind to reserved service type 0 [ 70.850805][ T6148] __nla_validate_parse: 7 callbacks suppressed [ 70.850824][ T6148] netlink: 72 bytes leftover after parsing attributes in process `syz.1.74'. [ 70.860436][ T6143] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 70.884878][ T6151] netlink: 'syz.4.75': attribute type 3 has an invalid length. [ 70.918861][ T6148] nbd: illegal input index -8454144 [ 70.964043][ T6148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.74'. [ 70.990160][ T6148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.74'. [ 71.056828][ T6161] netlink: 'syz.1.74': attribute type 2 has an invalid length. [ 71.389768][ T6179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.84'. [ 71.421504][ T6180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.82'. [ 71.441794][ T6181] warning: `syz.1.83' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 71.452560][ T6180] nbd: nbd0 already in use [ 71.476478][ T6184] netlink: 12 bytes leftover after parsing attributes in process `syz.4.85'. [ 71.642762][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.653830][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.742846][ T6199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.91'. [ 71.774366][ T6192] Illegal XDP return value 4294944269 on prog (id 14) dev N/A, expect packet loss! [ 71.960777][ T6199] xt_CT: No such helper "snmp_trap" [ 72.009929][ T6206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.92'. [ 72.047411][ T6206] netlink: 20 bytes leftover after parsing attributes in process `syz.4.92'. [ 72.095010][ T6207] netlink: 'syz.1.93': attribute type 1 has an invalid length. [ 72.376075][ T6228] netlink: 240 bytes leftover after parsing attributes in process `syz.4.100'. [ 72.671695][ T6244] netlink: 'syz.0.105': attribute type 4 has an invalid length. [ 72.863915][ T6260] netlink: 'syz.4.109': attribute type 2 has an invalid length. [ 72.872380][ T6260] netlink: 'syz.4.109': attribute type 1 has an invalid length. [ 73.197597][ T6281] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 75.047411][ T6352] syzkaller1: entered allmulticast mode [ 75.936083][ T6407] netlink: 'syz.4.151': attribute type 11 has an invalid length. [ 75.944921][ T6407] __nla_validate_parse: 9 callbacks suppressed [ 75.944937][ T6407] netlink: 64 bytes leftover after parsing attributes in process `syz.4.151'. [ 76.121858][ T6413] IPVS: set_ctl: invalid protocol: 51 0.0.0.0:20001 [ 76.145646][ T6415] veth0_to_team: entered promiscuous mode [ 76.166960][ T6415] veth0_to_team: entered allmulticast mode [ 76.221427][ T6421] sctp: [Deprecated]: syz.4.153 (pid 6421) Use of int in maxseg socket option. [ 76.221427][ T6421] Use struct sctp_assoc_value instead [ 76.243042][ T6421] IPVS: set_ctl: invalid protocol: 4 172.30.1.5:20004 [ 76.449982][ T6435] netlink: 'syz.1.156': attribute type 1 has an invalid length. [ 76.458070][ T6435] netlink: 9332 bytes leftover after parsing attributes in process `syz.1.156'. [ 76.459453][ T6393] syz.0.145 (6393) used greatest stack depth: 18224 bytes left [ 76.467252][ T6435] netlink: 'syz.1.156': attribute type 1 has an invalid length. [ 76.484751][ T6435] netlink: 12 bytes leftover after parsing attributes in process `syz.1.156'. [ 76.769348][ T970] cfg80211: failed to load regulatory.db [ 79.338334][ T6440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.163'. [ 79.355032][ T6442] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 79.704589][ T6462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.170'. [ 79.907770][ T6475] nbd: socks must be embedded in a SOCK_ITEM attr [ 79.961643][ T6480] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 80.011965][ T6479] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 80.243149][ T6491] ieee802154 phy0 wpan0: encryption failed: -22 [ 80.432980][ T6513] netlink: 'syz.0.184': attribute type 10 has an invalid length. [ 80.673873][ T6528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.188'. [ 80.900882][ T6544] netlink: 3084 bytes leftover after parsing attributes in process `syz.3.192'. [ 80.917493][ T6544] netlink: 'syz.3.192': attribute type 1 has an invalid length. [ 80.931693][ T6544] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.192'. [ 80.956533][ T6544] netlink: 36 bytes leftover after parsing attributes in process `syz.3.192'. [ 81.100885][ T6552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.195'. [ 81.118914][ T6553] netlink: 12 bytes leftover after parsing attributes in process `syz.1.195'. [ 81.303753][ T6561] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 81.345522][ T6561] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -1 [ 81.416721][ T6570] netlink: 'syz.4.199': attribute type 3 has an invalid length. [ 81.684865][ T6578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.204'. [ 82.002948][ T5919] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.178083][ T5919] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.351342][ T5919] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.614271][ T6613] netlink: 64 bytes leftover after parsing attributes in process `syz.3.218'. [ 82.642844][ T5919] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.674603][ T6609] netlink: 44 bytes leftover after parsing attributes in process `syz.1.217'. [ 82.731108][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.740233][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.748846][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.756819][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.766709][ T5844] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 82.775265][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.796681][ T6621] netlink: 'syz.4.219': attribute type 3 has an invalid length. [ 82.804612][ T6621] netlink: 171088 bytes leftover after parsing attributes in process `syz.4.219'. [ 83.536873][ T6642] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 83.555342][ T5919] bridge_slave_1: left allmulticast mode [ 83.563126][ T5919] bridge_slave_1: left promiscuous mode [ 83.571347][ T5919] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.585666][ T5919] bridge_slave_0: left allmulticast mode [ 83.591758][ T5919] bridge_slave_0: left promiscuous mode [ 83.599111][ T5919] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.901062][ T5919] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.913741][ T5919] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.924794][ T5919] bond0 (unregistering): Released all slaves [ 83.936997][ T6646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.225'. [ 83.948233][ T6655] netlink: 2 bytes leftover after parsing attributes in process `syz.2.228'. [ 84.060921][ T5906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.078075][ T5906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.100345][ T6615] chnl_net:caif_netlink_parms(): no params data found [ 84.171609][ T6662] bridge0: port 3(vlan2) entered blocking state [ 84.204524][ T6662] bridge0: port 3(vlan2) entered disabled state [ 84.238456][ T6662] vlan2: entered allmulticast mode [ 84.268779][ T6662] vlan2: left allmulticast mode [ 84.611587][ T6683] netlink: 'syz.2.234': attribute type 1 has an invalid length. [ 84.667567][ T6683] netlink: 9348 bytes leftover after parsing attributes in process `syz.2.234'. [ 84.693047][ T6683] netlink: 'syz.2.234': attribute type 1 has an invalid length. [ 84.889329][ T5844] Bluetooth: hci2: command tx timeout [ 84.923648][ T6701] netlink: 'syz.1.238': attribute type 10 has an invalid length. [ 84.942483][ T6701] geneve0: entered promiscuous mode [ 84.965859][ T6701] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 85.193921][ T6615] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.201518][ T6615] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.209131][ T6615] bridge_slave_0: entered allmulticast mode [ 85.218559][ T6615] bridge_slave_0: entered promiscuous mode [ 85.228411][ T6615] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.249645][ T6615] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.285514][ T6615] bridge_slave_1: entered allmulticast mode [ 85.296313][ T6615] bridge_slave_1: entered promiscuous mode [ 85.347698][ T5919] hsr_slave_0: left promiscuous mode [ 85.358993][ T5919] hsr_slave_1: left promiscuous mode [ 85.366115][ T5919] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.374577][ T5919] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.384104][ T5919] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.392821][ T5919] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.438633][ T5919] veth1_macvtap: left promiscuous mode [ 85.444650][ T5919] veth0_macvtap: left promiscuous mode [ 85.450597][ T5919] veth1_vlan: left promiscuous mode [ 85.456195][ T5919] veth0_vlan: left promiscuous mode [ 85.832020][ T5919] team0 (unregistering): Port device team_slave_1 removed [ 85.867409][ T5919] team0 (unregistering): Port device team_slave_0 removed [ 86.200981][ T6717] bridge0: port 3(syz_tun) entered blocking state [ 86.212237][ T6717] bridge0: port 3(syz_tun) entered disabled state [ 86.220753][ T6717] syz_tun: entered allmulticast mode [ 86.228702][ T6717] syz_tun: entered promiscuous mode [ 86.235450][ T6717] bridge0: port 3(syz_tun) entered blocking state [ 86.242312][ T6717] bridge0: port 3(syz_tun) entered forwarding state [ 86.300047][ T6615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.310283][ T6728] __nla_validate_parse: 2 callbacks suppressed [ 86.310490][ T6728] netlink: 4 bytes leftover after parsing attributes in process `syz.3.246'. [ 86.380702][ T6615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.571065][ T6615] team0: Port device team_slave_0 added [ 86.599063][ T6744] dvmrp1: entered allmulticast mode [ 86.670351][ T6615] team0: Port device team_slave_1 added [ 86.721482][ T6745] dvmrp1: left allmulticast mode [ 86.807622][ T6753] netlink: 32 bytes leftover after parsing attributes in process `syz.2.251'. [ 86.881646][ T6756] netlink: 12 bytes leftover after parsing attributes in process `syz.2.251'. [ 86.918007][ T5844] Bluetooth: hci2: command tx timeout [ 86.953281][ T6615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.962123][ T6615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.999144][ T6615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.059325][ T6615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.077446][ T6615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.118976][ T6615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.349596][ T6781] bridge_slave_0: left allmulticast mode [ 87.355304][ T6781] bridge_slave_0: left promiscuous mode [ 87.390357][ T6786] openvswitch: netlink: Actions may not be safe on all matching packets [ 87.401061][ T6781] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.434631][ T6781] bridge_slave_1: left allmulticast mode [ 87.442202][ T6781] bridge_slave_1: left promiscuous mode [ 87.448263][ T6781] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.464103][ T6781] bond0: (slave bond_slave_0): Releasing backup interface [ 87.485012][ T6781] bond0: (slave bond_slave_1): Releasing backup interface [ 87.537100][ T6781] team0: Port device team_slave_0 removed [ 87.549619][ T6781] team0: Port device team_slave_1 removed [ 87.555901][ T6781] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.563769][ T6781] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.572475][ T6781] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.582789][ T6781] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.604492][ T6773] netlink: 56 bytes leftover after parsing attributes in process `syz.4.256'. [ 87.618220][ T6615] hsr_slave_0: entered promiscuous mode [ 87.625662][ T6615] hsr_slave_1: entered promiscuous mode [ 87.632675][ T6615] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.641493][ T6615] Cannot create hsr debugfs directory [ 87.663243][ T6783] wg2: entered promiscuous mode [ 87.677953][ T6783] team0: Port device wg2 added [ 87.694158][ T5919] IPVS: stop unused estimator thread 0... [ 88.313062][ T6810] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 88.394315][ T6831] netlink: 28 bytes leftover after parsing attributes in process `syz.2.267'. [ 88.406733][ T6831] netlink: 'syz.2.267': attribute type 8 has an invalid length. [ 88.418639][ T6831] netlink: 16 bytes leftover after parsing attributes in process `syz.2.267'. [ 88.494764][ T6831] gretap0: entered promiscuous mode [ 88.511029][ T6831] batadv_slave_1: entered promiscuous mode [ 88.849987][ T6853] sctp: [Deprecated]: syz.4.273 (pid 6853) Use of int in max_burst socket option deprecated. [ 88.849987][ T6853] Use struct sctp_assoc_value instead [ 88.980478][ T6615] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.994781][ T6859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.273'. [ 89.004070][ T5844] Bluetooth: hci2: command tx timeout [ 89.012172][ T6859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.273'. [ 89.021597][ T6615] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.068140][ T6615] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.113613][ T6615] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.275091][ T6869] netlink: 20 bytes leftover after parsing attributes in process `syz.2.275'. [ 89.297690][ T6869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.275'. [ 89.475678][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.506819][ T6615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.513924][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.591957][ T6615] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.623478][ T5919] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.630682][ T5919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.724798][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.731977][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.898406][ T6615] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.163578][ T6919] netlink: 'syz.4.286': attribute type 1 has an invalid length. [ 90.187139][ T6919] netlink: 'syz.4.286': attribute type 1 has an invalid length. [ 90.218423][ T6615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.350007][ T6615] veth0_vlan: entered promiscuous mode [ 90.384017][ T6615] veth1_vlan: entered promiscuous mode [ 90.473486][ T6615] veth0_macvtap: entered promiscuous mode [ 90.510501][ T6615] veth1_macvtap: entered promiscuous mode [ 90.559867][ T6931] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 90.615667][ T6615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.688157][ T6615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.723276][ T6615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.767774][ T6615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.814039][ T6615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.856723][ T6615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.889386][ T6615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.077473][ T5846] Bluetooth: hci2: command tx timeout [ 91.103829][ T6615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.135934][ T6615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.164933][ T6615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.185954][ T6615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.207363][ T6615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.249424][ T6615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.279754][ T6615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.294903][ T6954] ip6tnl1: entered promiscuous mode [ 91.304947][ T6954] ip6tnl1: entered allmulticast mode [ 91.332906][ T6615] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.362218][ T6615] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.385457][ T6615] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.404793][ T6615] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.464643][ T6971] __nla_validate_parse: 6 callbacks suppressed [ 91.464660][ T6971] netlink: 60 bytes leftover after parsing attributes in process `syz.2.299'. [ 91.522576][ T6979] macvlan2: entered promiscuous mode [ 91.544835][ T6979] macvlan2: entered allmulticast mode [ 91.627066][ T6977] lo: entered promiscuous mode [ 91.691334][ T6976] lo: left promiscuous mode [ 91.763159][ T5906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.817581][ T5906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.870183][ T6997] netlink: 12 bytes leftover after parsing attributes in process `syz.3.305'. [ 91.888362][ T6994] netlink: 'syz.4.303': attribute type 4 has an invalid length. [ 91.915834][ T6994] netlink: 17 bytes leftover after parsing attributes in process `syz.4.303'. [ 91.928299][ T6997] netlink: 12 bytes leftover after parsing attributes in process `syz.3.305'. [ 92.021978][ T6991] netlink: 52 bytes leftover after parsing attributes in process `syz.2.304'. [ 92.031093][ T6991] netlink: 52 bytes leftover after parsing attributes in process `syz.2.304'. [ 92.048166][ T6991] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 92.112661][ T4404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.127829][ T4404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.157142][ T7010] netlink: 'syz.3.307': attribute type 10 has an invalid length. [ 92.190138][ T7010] geneve0: entered promiscuous mode [ 92.222213][ T7010] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 92.369753][ T7018] IPv6: sit1: Disabled Multicast RS [ 92.468500][ T7028] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 92.999685][ T7058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.324'. [ 93.053281][ T7062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.326'. [ 93.157791][ T5846] Bluetooth: hci2: command 0x0405 tx timeout [ 93.283108][ T7069] netdevsim netdevsim4 netdevsim1: Unsupported IPsec algorithm [ 93.658768][ T7089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.332'. [ 93.682502][ T7090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.332'. [ 94.006589][ T5919] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.232799][ T5919] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.418897][ T5919] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.444202][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.459848][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.468130][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.518077][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.552972][ T5846] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 94.561999][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.690692][ T5919] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.717153][ T7123] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (4084) [ 94.730119][ T7123] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 94.785853][ T7128] lo: entered promiscuous mode [ 94.797231][ T7128] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 95.187624][ T5919] bridge_slave_1: left allmulticast mode [ 95.210315][ T5919] bridge_slave_1: left promiscuous mode [ 95.221637][ T5919] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.233885][ T5919] bridge_slave_0: left allmulticast mode [ 95.243382][ T5919] bridge_slave_0: left promiscuous mode [ 95.255864][ T5919] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.863594][ T5919] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.876897][ T5919] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.891302][ T5919] bond0 (unregistering): Released all slaves [ 96.023856][ T7182] x_tables: arp_tables: MARK.2 target: invalid size 8 (kernel) != (user) 0 [ 96.159687][ T7118] chnl_net:caif_netlink_parms(): no params data found [ 96.270860][ T7182] syzkaller0: mtu less than device minimum [ 96.303779][ T7182] syzkaller0: entered allmulticast mode [ 96.342444][ T7196] netlink: 'syz.2.354': attribute type 37 has an invalid length. [ 96.603279][ T5844] Bluetooth: hci2: command tx timeout [ 96.616686][ T7118] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.647631][ T7118] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.668772][ T7118] bridge_slave_0: entered allmulticast mode [ 96.675828][ T7118] bridge_slave_0: entered promiscuous mode [ 96.744149][ T5919] hsr_slave_0: left promiscuous mode [ 96.762579][ T5919] hsr_slave_1: left promiscuous mode [ 96.772094][ T5919] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.784944][ T5919] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.804652][ T5919] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.819795][ T5919] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.856288][ T5919] veth1_macvtap: left promiscuous mode [ 96.883636][ T5919] veth0_macvtap: left promiscuous mode [ 96.895182][ T5919] veth1_vlan: left promiscuous mode [ 96.916016][ T5919] veth0_vlan: left promiscuous mode [ 97.192489][ T7236] xt_CT: You must specify a L4 protocol and not use inversions on it [ 97.674194][ T5919] team0 (unregistering): Port device team_slave_1 removed [ 97.712521][ T5919] team0 (unregistering): Port device team_slave_0 removed [ 98.091954][ T7118] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.099298][ T7118] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.106573][ T7118] bridge_slave_1: entered allmulticast mode [ 98.115003][ T7118] bridge_slave_1: entered promiscuous mode [ 98.122802][ T7220] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 98.137972][ T7225] __nla_validate_parse: 5 callbacks suppressed [ 98.137990][ T7225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.359'. [ 98.157279][ T7225] netlink: 12 bytes leftover after parsing attributes in process `syz.1.359'. [ 98.171507][ T7228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.359'. [ 98.181945][ T7228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.359'. [ 98.409065][ T7118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.440598][ T7264] netlink: 52 bytes leftover after parsing attributes in process `syz.2.370'. [ 98.447006][ T7118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.528086][ T7118] team0: Port device team_slave_0 added [ 98.536828][ T7118] team0: Port device team_slave_1 added [ 98.650088][ T7272] netlink: 80 bytes leftover after parsing attributes in process `syz.2.375'. [ 98.686505][ T5844] Bluetooth: hci2: command tx timeout [ 98.776809][ T7118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.803607][ T7118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.869024][ T7282] netlink: 12 bytes leftover after parsing attributes in process `syz.2.378'. [ 98.877940][ T7283] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20001 [ 98.900663][ T7118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.912758][ T7278] netlink: 'syz.1.376': attribute type 10 has an invalid length. [ 98.925675][ T7278] team0: Device hsr_slave_0 failed to register rx_handler [ 98.947213][ T7282] netlink: 5 bytes leftover after parsing attributes in process `syz.2.378'. [ 98.997890][ T7118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.004885][ T7118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.078657][ T7118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.348546][ T7118] hsr_slave_0: entered promiscuous mode [ 99.406757][ T7118] hsr_slave_1: entered promiscuous mode [ 99.414400][ T7118] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.437454][ T7118] Cannot create hsr debugfs directory [ 99.572413][ T7312] bridge0: port 3(ipvlan2) entered blocking state [ 99.595525][ T7312] bridge0: port 3(ipvlan2) entered disabled state [ 99.628687][ T7312] ipvlan2: entered allmulticast mode [ 99.634033][ T7312] bridge0: entered allmulticast mode [ 99.679590][ T7312] ipvlan2: left allmulticast mode [ 99.694431][ T7312] bridge0: left allmulticast mode [ 100.475551][ T7358] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 100.758107][ T5844] Bluetooth: hci2: command tx timeout [ 100.791957][ T7384] netlink: 64 bytes leftover after parsing attributes in process `syz.4.399'. [ 100.792692][ T7390] xt_bpf: check failed: parse error [ 100.839146][ T7384] netlink: 64 bytes leftover after parsing attributes in process `syz.4.399'. [ 100.972075][ T7401] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 101.184712][ T7118] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.193778][ T7118] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.205541][ T7118] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.214960][ T7118] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.296187][ T7118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.343209][ T7118] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.380524][ T5919] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.387715][ T5919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.414853][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.422069][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.595822][ T7118] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 101.647578][ T7118] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 101.813160][ T7437] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 102.172440][ T7458] (unnamed net_device) (uninitialized): option mode: invalid value (9) [ 102.457984][ T7118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.835618][ T7118] veth0_vlan: entered promiscuous mode [ 102.847694][ T5844] Bluetooth: hci2: command tx timeout [ 102.948640][ T7118] veth1_vlan: entered promiscuous mode [ 103.025320][ T7118] veth0_macvtap: entered promiscuous mode [ 103.031875][ T7498] xt_hashlimit: Unknown mode mask 115, kernel too old? [ 103.073925][ T7118] veth1_macvtap: entered promiscuous mode [ 103.136162][ T7118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.173626][ T7118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.217430][ T7118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.243846][ T7118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.282888][ T7118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.310764][ T7118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.327152][ T7118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.340276][ T7513] netlink: 'syz.3.424': attribute type 20 has an invalid length. [ 103.361118][ T7514] netlink: 'syz.4.425': attribute type 1 has an invalid length. [ 103.381320][ T7506] __nla_validate_parse: 7 callbacks suppressed [ 103.381341][ T7506] netlink: 28 bytes leftover after parsing attributes in process `syz.2.423'. [ 103.397868][ T7506] netlink: 'syz.2.423': attribute type 7 has an invalid length. [ 103.419360][ T7506] netlink: 'syz.2.423': attribute type 8 has an invalid length. [ 103.430914][ T7506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.423'. [ 103.489443][ T7118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.504745][ T7118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.516018][ T7118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.533564][ T7118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.544344][ T7118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.562484][ T7118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.574009][ T7118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.660292][ T7118] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.678142][ T7118] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.686995][ T7118] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.702482][ T7118] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.935764][ T5919] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.966227][ T5919] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.041582][ T4404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.066500][ T4404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.357774][ T7567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.432'. [ 104.593017][ T7581] netlink: 'syz.2.435': attribute type 13 has an invalid length. [ 104.610638][ T7586] netlink: 20 bytes leftover after parsing attributes in process `syz.4.436'. [ 104.885728][ T7595] netlink: 24 bytes leftover after parsing attributes in process `syz.2.440'. [ 105.118372][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.343830][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.563793][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.630834][ T7629] ip6gre1: entered allmulticast mode [ 105.738806][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.076491][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 106.090537][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 106.104745][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 106.115513][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 106.115821][ T7649] netlink: 48 bytes leftover after parsing attributes in process `syz.4.451'. [ 106.135253][ T35] bridge_slave_1: left allmulticast mode [ 106.135302][ T5846] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 106.151651][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 106.176415][ T35] bridge_slave_1: left promiscuous mode [ 106.197888][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.206153][ T7649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.451'. [ 106.230055][ T35] bridge_slave_0: left allmulticast mode [ 106.235807][ T35] bridge_slave_0: left promiscuous mode [ 106.255608][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.403458][ T7663] netlink: 'syz.1.454': attribute type 2 has an invalid length. [ 106.612981][ T7671] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x9 [ 106.626740][ T7671] openvswitch: netlink: Actions may not be safe on all matching packets [ 106.705229][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.716661][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.735055][ T35] bond0 (unregistering): Released all slaves [ 106.744843][ T7656] netlink: 92 bytes leftover after parsing attributes in process `syz.3.453'. [ 107.482950][ T7712] x_tables: unsorted entry at hook 3 [ 107.603112][ T7700] netlink: 'syz.3.459': attribute type 10 has an invalid length. [ 107.634132][ T7719] netlink: 191384 bytes leftover after parsing attributes in process `syz.1.466'. [ 107.653602][ T7700] syz_tun: entered promiscuous mode [ 107.667865][ T7700] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 107.802757][ T35] hsr_slave_0: left promiscuous mode [ 107.814957][ T35] hsr_slave_1: left promiscuous mode [ 107.830146][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.837843][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.845680][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.854271][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.875327][ T35] veth1_macvtap: left promiscuous mode [ 107.881128][ T35] veth0_macvtap: left promiscuous mode [ 107.887205][ T35] veth1_vlan: left promiscuous mode [ 107.892823][ T35] veth0_vlan: left promiscuous mode [ 108.210125][ T5846] Bluetooth: hci2: command tx timeout [ 108.315905][ T35] team0 (unregistering): Port device team_slave_1 removed [ 108.367182][ T35] team0 (unregistering): Port device team_slave_0 removed [ 108.731675][ T7721] netlink: 48 bytes leftover after parsing attributes in process `syz.2.465'. [ 108.776513][ T7726] veth0: entered promiscuous mode [ 108.793796][ T7728] netlink: 88 bytes leftover after parsing attributes in process `syz.3.468'. [ 108.881353][ T7731] veth0: left promiscuous mode [ 108.962677][ T7650] chnl_net:caif_netlink_parms(): no params data found [ 109.024679][ T7739] netlink: 40 bytes leftover after parsing attributes in process `syz.2.469'. [ 109.093730][ T7739] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.189791][ T7739] bridge_slave_0 (unregistering): left allmulticast mode [ 109.193315][ T7750] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 109.200022][ T7739] bridge_slave_0 (unregistering): left promiscuous mode [ 109.216327][ T7739] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.719204][ T7650] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.728411][ T7650] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.735605][ T7650] bridge_slave_0: entered allmulticast mode [ 109.768056][ T7650] bridge_slave_0: entered promiscuous mode [ 109.832523][ T7650] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.845062][ T7650] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.857077][ T7650] bridge_slave_1: entered allmulticast mode [ 109.888345][ T7650] bridge_slave_1: entered promiscuous mode [ 109.926964][ T7775] netlink: 24 bytes leftover after parsing attributes in process `syz.1.476'. [ 110.063339][ T7779] netlink: 48 bytes leftover after parsing attributes in process `syz.4.478'. [ 110.083239][ T7783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.479'. [ 110.084125][ T7650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.106024][ T7650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.150754][ T7650] team0: Port device team_slave_0 added [ 110.170174][ T7650] team0: Port device team_slave_1 added [ 110.278873][ T5846] Bluetooth: hci2: command tx timeout [ 110.301616][ T7788] netlink: 'syz.3.481': attribute type 9 has an invalid length. [ 110.325863][ T7791] netlink: 12 bytes leftover after parsing attributes in process `syz.4.480'. [ 110.330587][ T7788] netlink: 134660 bytes leftover after parsing attributes in process `syz.3.481'. [ 110.449984][ T7650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.467235][ T7650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.567197][ T7650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.624158][ T7650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.644127][ T7650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.680263][ T7807] netlink: 'syz.4.485': attribute type 11 has an invalid length. [ 110.700791][ T7807] netlink: 16 bytes leftover after parsing attributes in process `syz.4.485'. [ 110.714607][ T7650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.852475][ T7809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.486'. [ 110.876590][ T7816] netlink: 'syz.1.487': attribute type 1 has an invalid length. [ 110.890734][ T7821] netlink: 'syz.1.487': attribute type 1 has an invalid length. [ 110.895419][ T7650] hsr_slave_0: entered promiscuous mode [ 110.907122][ T7819] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 110.943158][ T7650] hsr_slave_1: entered promiscuous mode [ 110.978716][ T7650] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.011664][ T7650] Cannot create hsr debugfs directory [ 111.954905][ T7882] netlink: 'syz.3.500': attribute type 21 has an invalid length. [ 112.194885][ T7898] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 112.248072][ T7898] openvswitch: netlink: Actions may not be safe on all matching packets [ 112.357652][ T5846] Bluetooth: hci2: command tx timeout [ 112.573872][ T7650] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 112.630750][ T7650] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 112.702132][ T7650] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 112.748405][ T7650] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 112.879229][ T7939] netlink: 'syz.1.512': attribute type 1 has an invalid length. [ 113.081403][ T7950] ɶƣ0GC¦: entered promiscuous mode [ 113.176508][ T7958] netlink: 'syz.1.516': attribute type 11 has an invalid length. [ 113.226176][ T7650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.301504][ T7650] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.343686][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.350922][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.405449][ T5919] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.412647][ T5919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.612505][ T7975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.655863][ T47] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 113.678307][ T47] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 113.687200][ T7975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.687769][ T12] wlan1: authenticated [ 113.742095][ T5906] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 113.786709][ T35] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 113.798513][ T7988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.827792][ T35] wlan1: associated [ 114.051862][ T7999] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 114.070556][ T7999] __nla_validate_parse: 14 callbacks suppressed [ 114.070573][ T7999] netlink: 4 bytes leftover after parsing attributes in process `syz.4.524'. [ 114.247131][ T8006] netlink: 40 bytes leftover after parsing attributes in process `syz.4.525'. [ 114.283092][ T7650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.324870][ T8006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.525'. [ 114.355031][ T8006] netlink: 48 bytes leftover after parsing attributes in process `syz.4.525'. [ 114.373283][ T8006] netlink: 36 bytes leftover after parsing attributes in process `syz.4.525'. [ 114.396874][ T8006] vlan2: entered allmulticast mode [ 114.418500][ T8006] erspan0: entered allmulticast mode [ 114.437641][ T5846] Bluetooth: hci2: command tx timeout [ 114.487102][ T7650] veth0_vlan: entered promiscuous mode [ 114.542669][ T7650] veth1_vlan: entered promiscuous mode [ 114.614918][ T7650] veth0_macvtap: entered promiscuous mode [ 114.637329][ T7650] veth1_macvtap: entered promiscuous mode [ 114.695373][ T7650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.720726][ T7650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.739114][ T7650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.751098][ T8034] Unsupported ieee802154 address type: 0 [ 114.759413][ T7650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.787961][ T7650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.807388][ T7650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.828879][ T7650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.864799][ T7650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.903855][ T7650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.925120][ T7650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.936802][ T8039] netlink: 'syz.4.531': attribute type 1 has an invalid length. [ 114.956468][ T7650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.976721][ T7650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.997375][ T7650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.014680][ T7650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.053930][ T8039] netlink: 28 bytes leftover after parsing attributes in process `syz.4.531'. [ 115.073787][ T7650] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.097149][ T7650] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.132761][ T7650] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.165353][ T7650] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.309737][ T8058] netlink: 312 bytes leftover after parsing attributes in process `syz.2.533'. [ 115.432335][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.471778][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.541239][ T4404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.571185][ T4404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.955942][ T8086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.542'. [ 116.012623][ T8092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.543'. [ 116.052258][ T8092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.543'. [ 116.362754][ T8108] SET target dimension over the limit! [ 116.465172][ T70] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.666090][ T8117] team0 (unregistering): Port device team_slave_0 removed [ 116.697714][ T8117] team0 (unregistering): Port device team_slave_1 removed [ 116.800806][ T70] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.083784][ T70] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.291041][ T70] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.311835][ T8154] No such timeout policy "syz0" [ 117.607695][ T70] bridge_slave_1: left allmulticast mode [ 117.615212][ T70] bridge_slave_1: left promiscuous mode [ 117.646980][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.721969][ T70] bridge_slave_0: left allmulticast mode [ 117.752477][ T70] bridge_slave_0: left promiscuous mode [ 117.774175][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.943778][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 117.953436][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 117.963709][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 117.979890][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 118.008963][ T5844] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 118.016390][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 118.412308][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.423480][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.434479][ T70] bond0 (unregistering): Released all slaves [ 118.444098][ T8167] netlink: 'syz.3.557': attribute type 12 has an invalid length. [ 119.152208][ T8238] netlink: 'syz.1.568': attribute type 1 has an invalid length. [ 119.208603][ T8238] __nla_validate_parse: 5 callbacks suppressed [ 119.208623][ T8238] netlink: 9348 bytes leftover after parsing attributes in process `syz.1.568'. [ 119.244809][ T8186] chnl_net:caif_netlink_parms(): no params data found [ 119.302903][ T8247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.569'. [ 119.379446][ T70] hsr_slave_0: left promiscuous mode [ 119.467529][ T70] hsr_slave_1: left promiscuous mode [ 119.524808][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.539849][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.564874][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.588484][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.639406][ T70] veth1_macvtap: left promiscuous mode [ 119.646756][ T70] veth0_macvtap: left promiscuous mode [ 119.652557][ T70] veth1_vlan: left promiscuous mode [ 119.658258][ T70] veth0_vlan: left promiscuous mode [ 120.085324][ T70] team0 (unregistering): Port device team_slave_1 removed [ 120.121803][ T5846] Bluetooth: hci2: command tx timeout [ 120.133364][ T70] team0 (unregistering): Port device team_slave_0 removed [ 120.551085][ T8262] netlink: 64 bytes leftover after parsing attributes in process `syz.1.575'. [ 120.577666][ T8262] netlink: 64 bytes leftover after parsing attributes in process `syz.1.575'. [ 120.633218][ T8274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.577'. [ 121.048245][ T8301] netlink: 'syz.3.584': attribute type 1 has an invalid length. [ 121.091918][ T8301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.584'. [ 121.160347][ T8186] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.168159][ T8186] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.175504][ T8186] bridge_slave_0: entered allmulticast mode [ 121.182493][ T8186] bridge_slave_0: entered promiscuous mode [ 121.190310][ T8186] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.198643][ T8186] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.205874][ T8186] bridge_slave_1: entered allmulticast mode [ 121.213792][ T8186] bridge_slave_1: entered promiscuous mode [ 121.303746][ T8186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.336204][ T8186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.626183][ T8186] team0: Port device team_slave_0 added [ 121.656231][ T8186] team0: Port device team_slave_1 added [ 121.799434][ T8186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.806429][ T8186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.882437][ T8186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.998819][ T8348] netlink: 48 bytes leftover after parsing attributes in process `syz.2.595'. [ 122.042320][ T8186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.051371][ T8186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.083034][ T8352] netlink: 48 bytes leftover after parsing attributes in process `syz.2.595'. [ 122.092565][ T8186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.167021][ T8186] hsr_slave_0: entered promiscuous mode [ 122.196970][ T8186] hsr_slave_1: entered promiscuous mode [ 122.209460][ T5846] Bluetooth: hci2: command tx timeout [ 122.237759][ T8186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.245828][ T8186] Cannot create hsr debugfs directory [ 122.323682][ T8367] netlink: 'syz.4.599': attribute type 4 has an invalid length. [ 122.339646][ T8367] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 122.703537][ T8382] ip_vti0: entered promiscuous mode [ 122.714620][ T8382] vlan2: entered promiscuous mode [ 122.742646][ T8382] ip_vti0: left promiscuous mode [ 123.025109][ T8391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.606'. [ 123.431208][ T8413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.611'. [ 123.479593][ T8416] tipc: Started in network mode [ 123.484611][ T8416] tipc: Node identity fffffff4, cluster identity 3 [ 123.492633][ T8415] netlink: 'syz.1.612': attribute type 2 has an invalid length. [ 123.501973][ T8416] tipc: Node number set to 4294967284 [ 123.517969][ T8416] tipc: Cannot configure node identity twice [ 123.539136][ T8186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 123.583216][ T8186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 123.658829][ T8186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 123.679030][ T8425] netlink: 'syz.2.615': attribute type 2 has an invalid length. [ 123.698960][ T8186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 123.856270][ T8431] netlink: 'syz.3.616': attribute type 12 has an invalid length. [ 123.879586][ T8431] netlink: 'syz.3.616': attribute type 11 has an invalid length. [ 123.969154][ T8186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.032391][ T8186] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.066085][ T8440] xt_l2tp: invalid flags combination: 4 [ 124.086413][ T4404] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.093656][ T4404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.150040][ T4404] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.157252][ T4404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.255611][ T8454] sctp: [Deprecated]: syz.4.622 (pid 8454) Use of int in max_burst socket option. [ 124.255611][ T8454] Use struct sctp_assoc_value instead [ 124.288803][ T5844] Bluetooth: hci2: command tx timeout [ 124.585362][ T8465] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.693588][ T8470] __nla_validate_parse: 2 callbacks suppressed [ 124.693610][ T8470] netlink: 12 bytes leftover after parsing attributes in process `syz.1.626'. [ 124.990723][ T8186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.076202][ T8186] veth0_vlan: entered promiscuous mode [ 125.112273][ T8186] veth1_vlan: entered promiscuous mode [ 125.205281][ T8186] veth0_macvtap: entered promiscuous mode [ 125.260153][ T8186] veth1_macvtap: entered promiscuous mode [ 125.322749][ T8186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.357439][ T8186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.382667][ T8186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.406427][ T8186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.427120][ T8510] ip6t_REJECT: ECHOREPLY is not supported [ 125.449707][ T8186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.471666][ T8186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.482260][ T8515] netlink: 9412 bytes leftover after parsing attributes in process `syz.4.633'. [ 125.502913][ T8186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.565383][ T8186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.586652][ T8186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.616987][ T8186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.641595][ T8186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.677387][ T8186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.707049][ T8518] netlink: 'syz.1.636': attribute type 1 has an invalid length. [ 125.715400][ T8186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.716740][ T8186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.763397][ T8186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.784389][ T8518] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.636'. [ 125.792870][ T8186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.815730][ T8186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.825718][ T8527] netlink: 40 bytes leftover after parsing attributes in process `syz.3.638'. [ 125.857777][ T8186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.150900][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.172005][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.242141][ T8551] wlan1: deauthenticating from 08:02:11:00:00:00 by local choice (Reason: 3=DEAUTH_LEAVING) [ 126.256146][ T3554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.283804][ T3554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.357682][ T5844] Bluetooth: hci2: command tx timeout [ 126.402653][ T8560] TCP: TCP_TX_DELAY enabled [ 126.439448][ T8560] IPVS: set_ctl: invalid protocol: 103 172.20.20.37:20003 [ 126.460750][ T8563] xt_policy: output policy not valid in PREROUTING and INPUT [ 126.477675][ T8565] netlink: 12 bytes leftover after parsing attributes in process `syz.2.645'. [ 126.523138][ T8566] netlink: 12 bytes leftover after parsing attributes in process `syz.2.645'. [ 126.632651][ T8574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.645'. [ 127.064009][ T8597] netlink: 'syz.4.652': attribute type 3 has an invalid length. [ 127.094415][ T8597] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.652'. [ 127.315510][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.790493][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.879783][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.964675][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.080530][ T8640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.654'. [ 128.365540][ T8654] netlink: 'syz.1.659': attribute type 10 has an invalid length. [ 128.413916][ T8654] macvlan0: entered promiscuous mode [ 128.427519][ T8654] macvlan0: entered allmulticast mode [ 128.468454][ T8654] veth1_vlan: entered allmulticast mode [ 128.483225][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 128.493611][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 128.502371][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 128.510693][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 128.519584][ T5846] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 128.527960][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 128.543520][ T8654] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 128.621117][ T8659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.661'. [ 128.639303][ T8662] ipt_ECN: cannot use operation on non-tcp rule [ 128.744508][ T11] bridge_slave_1: left allmulticast mode [ 128.760322][ T11] bridge_slave_1: left promiscuous mode [ 128.766116][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.826701][ T11] bridge_slave_0: left allmulticast mode [ 128.858593][ T11] bridge_slave_0: left promiscuous mode [ 128.864367][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.551251][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.568964][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.583357][ T11] bond0 (unregistering): Released all slaves [ 129.980732][ T8699] __nla_validate_parse: 3 callbacks suppressed [ 129.980754][ T8699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.671'. [ 130.089619][ T8704] netlink: 44 bytes leftover after parsing attributes in process `syz.1.671'. [ 130.402896][ T8731] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 130.516502][ T8727] netlink: 4 bytes leftover after parsing attributes in process `syz.4.674'. [ 130.543979][ T8727] netlink: 'syz.4.674': attribute type 8 has an invalid length. [ 130.608435][ T5846] Bluetooth: hci2: command tx timeout [ 130.718702][ T11] hsr_slave_0: left promiscuous mode [ 130.731339][ T11] hsr_slave_1: left promiscuous mode [ 130.738490][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.745938][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.767603][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.775622][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.812548][ T11] veth1_macvtap: left promiscuous mode [ 130.819208][ T11] veth0_macvtap: left promiscuous mode [ 130.824861][ T11] veth1_vlan: left promiscuous mode [ 130.830342][ T11] veth0_vlan: left promiscuous mode [ 130.934689][ T8761] netlink: 28 bytes leftover after parsing attributes in process `syz.4.681'. [ 131.065082][ T8765] nftables ruleset with unbound chain [ 131.085281][ T8765] netlink: 12 bytes leftover after parsing attributes in process `syz.4.681'. [ 131.432471][ T11] team0 (unregistering): Port device team_slave_1 removed [ 131.479204][ T11] team0 (unregistering): Port device team_slave_0 removed [ 131.979841][ T8768] netlink: 40 bytes leftover after parsing attributes in process `syz.2.682'. [ 132.001110][ T8656] chnl_net:caif_netlink_parms(): no params data found [ 132.183267][ T8774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.685'. [ 132.422621][ T8788] netlink: 28 bytes leftover after parsing attributes in process `syz.3.687'. [ 132.554236][ T8656] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.581413][ T8656] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.682712][ T5846] Bluetooth: hci2: command tx timeout [ 132.715959][ T8656] bridge_slave_0: entered allmulticast mode [ 132.730782][ T8656] bridge_slave_0: entered promiscuous mode [ 132.780727][ T8794] netlink: 36 bytes leftover after parsing attributes in process `syz.1.688'. [ 132.800532][ T8807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.691'. [ 132.844452][ T8656] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.877757][ T8656] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.916052][ T8656] bridge_slave_1: entered allmulticast mode [ 132.939574][ T8656] bridge_slave_1: entered promiscuous mode [ 133.080641][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.090778][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.201613][ T8656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.231184][ T8656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.534021][ T8831] tipc: Started in network mode [ 133.539518][ T8831] tipc: Node identity -name-of, cluster identity 4711 [ 133.546685][ T8831] tipc: Enabling of bearer rejected, failed to enable media [ 133.581846][ T8822] netlink: 'syz.2.693': attribute type 4 has an invalid length. [ 133.805382][ T8656] team0: Port device team_slave_0 added [ 133.821063][ T8656] team0: Port device team_slave_1 added [ 133.840912][ T8849] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 133.954588][ T8656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.981093][ T8656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.010442][ T8656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.036481][ T8656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.043548][ T8656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.088605][ T8656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.204767][ T8656] hsr_slave_0: entered promiscuous mode [ 134.214021][ T8656] hsr_slave_1: entered promiscuous mode [ 134.220870][ T8656] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.228846][ T8656] Cannot create hsr debugfs directory [ 134.695879][ T8875] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 134.719908][ T8875] netlink: 'syz.1.703': attribute type 1 has an invalid length. [ 134.768267][ T5846] Bluetooth: hci2: command tx timeout [ 134.790397][ T8875] netlink: 'syz.1.703': attribute type 1 has an invalid length. [ 134.851726][ T8656] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 134.907414][ T8656] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 134.970381][ T8656] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 135.064411][ T8656] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 135.094572][ T8891] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20001 [ 135.425970][ T8656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.487121][ T8656] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.506330][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.513595][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.550593][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.557793][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.864951][ T8656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.956383][ T8656] veth0_vlan: entered promiscuous mode [ 135.984971][ T8656] veth1_vlan: entered promiscuous mode [ 136.031888][ T8656] veth0_macvtap: entered promiscuous mode [ 136.042352][ T8656] veth1_macvtap: entered promiscuous mode [ 136.069454][ T8656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.085262][ T8656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.096390][ T8656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.111082][ T8656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.122616][ T8656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.133828][ T8656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.145826][ T8656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.162501][ T8656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.173273][ T8656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.185160][ T8656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.204358][ T8656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.225866][ T8656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.262859][ T8656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.293248][ T8656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.340504][ T8656] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.366867][ T8656] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.406676][ T8656] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.422357][ T8656] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.458882][ T8960] __nla_validate_parse: 11 callbacks suppressed [ 136.458900][ T8960] netlink: 4 bytes leftover after parsing attributes in process `syz.4.720'. [ 136.496388][ T8964] netlink: 'syz.2.719': attribute type 1 has an invalid length. [ 136.512261][ T8964] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 136.764833][ T8976] xt_l2tp: wrong L2TP version: 0 [ 136.796736][ T8977] netlink: 'syz.1.722': attribute type 49 has an invalid length. [ 136.829799][ T8977] ebt_limit: overflow, try lower: 0/0 [ 136.838415][ T5844] Bluetooth: hci2: command tx timeout [ 136.974887][ T8988] netlink: 12 bytes leftover after parsing attributes in process `syz.4.726'. [ 137.007934][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.026491][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.131471][ T4404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.150080][ T4404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.253329][ T9010] openvswitch: netlink: Actions may not be safe on all matching packets [ 137.265380][ T9011] openvswitch: netlink: Actions may not be safe on all matching packets [ 137.274314][ T9010] netlink: 'syz.4.731': attribute type 30 has an invalid length. [ 137.592527][ T9027] netlink: 28 bytes leftover after parsing attributes in process `syz.1.735'. [ 137.772388][ T9041] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 137.791837][ T9041] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 138.113904][ T9057] netlink: 4 bytes leftover after parsing attributes in process `syz.4.741'. [ 138.723432][ T9083] xt_CT: No such helper "pptp" [ 138.836773][ T9083] xt_CT: No such helper "pptp" [ 138.917845][ T5844] Bluetooth: hci2: command 0x0405 tx timeout [ 139.024650][ T9083] xt_CT: No such helper "pptp" [ 139.124866][ T9106] netlink: 'syz.2.755': attribute type 1 has an invalid length. [ 139.143817][ T9083] xt_CT: No such helper "pptp" [ 139.246991][ T9083] xt_CT: No such helper "pptp" [ 139.331050][ T8715] ================================================================== [ 139.339158][ T8715] BUG: KASAN: slab-use-after-free in device_for_each_child+0xbb/0x1b0 [ 139.347364][ T8715] Read of size 8 at addr ffff888079b85308 by task kbnepd bnep0/8715 [ 139.355348][ T8715] [ 139.357831][ T8715] CPU: 1 UID: 0 PID: 8715 Comm: kbnepd bnep0 Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0 [ 139.368681][ T8715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 139.378764][ T8715] Call Trace: [ 139.382034][ T8715] [ 139.384955][ T8715] dump_stack_lvl+0x241/0x360 [ 139.389638][ T8715] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.394867][ T8715] ? __pfx__printk+0x10/0x10 [ 139.399460][ T8715] ? _printk+0xd5/0x120 [ 139.403616][ T8715] ? __virt_addr_valid+0x183/0x530 [ 139.408736][ T8715] ? __virt_addr_valid+0x183/0x530 [ 139.413867][ T8715] print_report+0x169/0x550 [ 139.418380][ T8715] ? __virt_addr_valid+0x183/0x530 [ 139.423497][ T8715] ? __virt_addr_valid+0x183/0x530 [ 139.428625][ T8715] ? __virt_addr_valid+0x45f/0x530 [ 139.433751][ T8715] ? __phys_addr+0xba/0x170 [ 139.438266][ T8715] ? device_for_each_child+0xbb/0x1b0 [ 139.443675][ T8715] kasan_report+0x143/0x180 [ 139.448182][ T8715] ? device_for_each_child+0xbb/0x1b0 [ 139.453550][ T8715] ? __pfx_dev_memalloc_noio+0x10/0x10 [ 139.458998][ T8715] device_for_each_child+0xbb/0x1b0 [ 139.464210][ T8715] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 139.470536][ T8715] ? __pfx_device_for_each_child+0x10/0x10 [ 139.476334][ T8715] ? _raw_spin_unlock_irq+0x23/0x50 [ 139.481563][ T8715] ? lockdep_hardirqs_on+0x99/0x150 [ 139.486853][ T8715] pm_runtime_set_memalloc_noio+0x114/0x260 [ 139.492743][ T8715] netdev_unregister_kobject+0x178/0x250 [ 139.498487][ T8715] unregister_netdevice_many_notify+0x1851/0x1da0 [ 139.505007][ T8715] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 139.511780][ T8715] ? __pfx___mutex_trylock_common+0x10/0x10 [ 139.517672][ T8715] ? rcu_is_watching+0x15/0xb0 [ 139.522426][ T8715] ? trace_contention_end+0x3c/0x120 [ 139.527708][ T8715] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 139.534030][ T8715] unregister_netdevice_queue+0x303/0x370 [ 139.539745][ T8715] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 139.545980][ T8715] ? down_write+0x18c/0x220 [ 139.550477][ T8715] ? __pfx_down_write+0x10/0x10 [ 139.555342][ T8715] unregister_netdev+0x1c/0x30 [ 139.560099][ T8715] bnep_session+0x2e0e/0x3000 [ 139.564791][ T8715] ? __pfx_bnep_session+0x10/0x10 [ 139.569814][ T8715] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 139.576130][ T8715] ? __pfx_woken_wake_function+0x10/0x10 [ 139.581756][ T8715] ? __kthread_parkme+0x169/0x1d0 [ 139.586779][ T8715] ? __pfx_bnep_session+0x10/0x10 [ 139.591795][ T8715] kthread+0x2f0/0x390 [ 139.595856][ T8715] ? __pfx_bnep_session+0x10/0x10 [ 139.600877][ T8715] ? __pfx_kthread+0x10/0x10 [ 139.605467][ T8715] ret_from_fork+0x4b/0x80 [ 139.609899][ T8715] ? __pfx_kthread+0x10/0x10 [ 139.614481][ T8715] ret_from_fork_asm+0x1a/0x30 [ 139.619263][ T8715] [ 139.622267][ T8715] [ 139.624576][ T8715] Allocated by task 8656: [ 139.628887][ T8715] kasan_save_track+0x3f/0x80 [ 139.633553][ T8715] __kasan_kmalloc+0x98/0xb0 [ 139.638139][ T8715] __kmalloc_noprof+0x1fc/0x400 [ 139.642983][ T8715] hci_alloc_dev_priv+0x27/0x2030 [ 139.648000][ T8715] vhci_create_device+0x116/0x6a0 [ 139.653011][ T8715] vhci_write+0x3cf/0x490 [ 139.657331][ T8715] vfs_write+0xaeb/0xd30 [ 139.661561][ T8715] ksys_write+0x183/0x2b0 [ 139.665876][ T8715] do_syscall_64+0xf3/0x230 [ 139.670371][ T8715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.676279][ T8715] [ 139.678594][ T8715] Freed by task 8656: [ 139.682558][ T8715] kasan_save_track+0x3f/0x80 [ 139.687224][ T8715] kasan_save_free_info+0x40/0x50 [ 139.692256][ T8715] __kasan_slab_free+0x59/0x70 [ 139.697020][ T8715] kfree+0x1a0/0x440 [ 139.700909][ T8715] hci_release_dev+0x1525/0x16b0 [ 139.705837][ T8715] bt_host_release+0x83/0x90 [ 139.710421][ T8715] device_release+0x99/0x1c0 [ 139.715007][ T8715] kobject_put+0x22f/0x480 [ 139.719416][ T8715] vhci_release+0x88/0xd0 [ 139.723734][ T8715] __fput+0x23f/0x880 [ 139.727716][ T8715] task_work_run+0x24f/0x310 [ 139.732295][ T8715] do_exit+0xa2f/0x28e0 [ 139.736441][ T8715] do_group_exit+0x207/0x2c0 [ 139.741022][ T8715] __x64_sys_exit_group+0x3f/0x40 [ 139.746062][ T8715] x64_sys_call+0x2634/0x2640 [ 139.750738][ T8715] do_syscall_64+0xf3/0x230 [ 139.755234][ T8715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.761119][ T8715] [ 139.763464][ T8715] Last potentially related work creation: [ 139.769168][ T8715] kasan_save_stack+0x3f/0x60 [ 139.773837][ T8715] __kasan_record_aux_stack+0xac/0xc0 [ 139.779203][ T8715] insert_work+0x3e/0x330 [ 139.783524][ T8715] __queue_work+0xc8b/0xf50 [ 139.788022][ T8715] call_timer_fn+0x18e/0x650 [ 139.792608][ T8715] __run_timer_base+0x695/0x8e0 [ 139.797448][ T8715] run_timer_softirq+0xb7/0x170 [ 139.802327][ T8715] handle_softirqs+0x2c5/0x980 [ 139.807111][ T8715] __irq_exit_rcu+0xf4/0x1c0 [ 139.811715][ T8715] irq_exit_rcu+0x9/0x30 [ 139.815964][ T8715] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 139.821598][ T8715] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 139.827574][ T8715] [ 139.829886][ T8715] Second to last potentially related work creation: [ 139.836453][ T8715] kasan_save_stack+0x3f/0x60 [ 139.841128][ T8715] __kasan_record_aux_stack+0xac/0xc0 [ 139.846526][ T8715] insert_work+0x3e/0x330 [ 139.850848][ T8715] __queue_work+0xb66/0xf50 [ 139.855344][ T8715] queue_work_on+0x1c2/0x380 [ 139.859928][ T8715] process_scheduled_works+0xa63/0x1850 [ 139.865469][ T8715] worker_thread+0x870/0xd30 [ 139.870057][ T8715] kthread+0x2f0/0x390 [ 139.874115][ T8715] ret_from_fork+0x4b/0x80 [ 139.878524][ T8715] ret_from_fork_asm+0x1a/0x30 [ 139.883281][ T8715] [ 139.885590][ T8715] The buggy address belongs to the object at ffff888079b84000 [ 139.885590][ T8715] which belongs to the cache kmalloc-8k of size 8192 [ 139.899635][ T8715] The buggy address is located 4872 bytes inside of [ 139.899635][ T8715] freed 8192-byte region [ffff888079b84000, ffff888079b86000) [ 139.913954][ T8715] [ 139.916268][ T8715] The buggy address belongs to the physical page: [ 139.922672][ T8715] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79b80 [ 139.931459][ T8715] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 139.939960][ T8715] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 139.947865][ T8715] page_type: f5(slab) [ 139.951836][ T8715] raw: 00fff00000000040 ffff88801ac42280 ffffea0001f2e200 dead000000000003 [ 139.960410][ T8715] raw: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 139.968988][ T8715] head: 00fff00000000040 ffff88801ac42280 ffffea0001f2e200 dead000000000003 [ 139.977647][ T8715] head: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 139.986317][ T8715] head: 00fff00000000003 ffffea0001e6e001 ffffffffffffffff 0000000000000000 [ 139.994999][ T8715] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 140.003669][ T8715] page dumped because: kasan: bad access detected [ 140.010089][ T8715] page_owner tracks the page as allocated [ 140.015816][ T8715] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5501, tgid 5501 (sh), ts 33091298981, free_ts 33061075515 [ 140.035543][ T8715] post_alloc_hook+0x1f3/0x230 [ 140.040321][ T8715] get_page_from_freelist+0x3649/0x3790 [ 140.045866][ T8715] __alloc_pages_noprof+0x292/0x710 [ 140.051152][ T8715] alloc_pages_mpol_noprof+0x3e8/0x680 [ 140.056646][ T8715] alloc_slab_page+0x6a/0x140 [ 140.061330][ T8715] allocate_slab+0x5a/0x2f0 [ 140.065829][ T8715] ___slab_alloc+0xcd1/0x14b0 [ 140.070503][ T8715] __slab_alloc+0x58/0xa0 [ 140.074826][ T8715] __kmalloc_cache_noprof+0x1d5/0x2c0 [ 140.080191][ T8715] tomoyo_init_log+0x11cd/0x2050 [ 140.085132][ T8715] tomoyo_supervisor+0x38a/0x11f0 [ 140.090162][ T8715] tomoyo_env_perm+0x178/0x210 [ 140.094927][ T8715] tomoyo_find_next_domain+0x146e/0x1d40 [ 140.100548][ T8715] tomoyo_bprm_check_security+0x114/0x180 [ 140.106263][ T8715] security_bprm_check+0x86/0x250 [ 140.111295][ T8715] bprm_execve+0xa56/0x1770 [ 140.115789][ T8715] page last free pid 5500 tgid 5500 stack trace: [ 140.122115][ T8715] free_unref_page+0xdf9/0x1140 [ 140.127055][ T8715] __put_partials+0xeb/0x130 [ 140.131638][ T8715] put_cpu_partial+0x17c/0x250 [ 140.136396][ T8715] __slab_free+0x2ea/0x3d0 [ 140.140816][ T8715] qlist_free_all+0x9a/0x140 [ 140.145404][ T8715] kasan_quarantine_reduce+0x14f/0x170 [ 140.150854][ T8715] __kasan_slab_alloc+0x23/0x80 [ 140.155695][ T8715] __kmalloc_noprof+0x1a6/0x400 [ 140.160536][ T8715] tomoyo_realpath_from_path+0xcf/0x5e0 [ 140.166076][ T8715] tomoyo_path_perm+0x2b7/0x740 [ 140.170914][ T8715] security_inode_getattr+0x130/0x330 [ 140.176274][ T8715] vfs_getattr+0x45/0x430 [ 140.180594][ T8715] vfs_fstatat+0xe4/0x190 [ 140.184913][ T8715] __x64_sys_newfstatat+0x11d/0x1a0 [ 140.190101][ T8715] do_syscall_64+0xf3/0x230 [ 140.194598][ T8715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.200484][ T8715] [ 140.202798][ T8715] Memory state around the buggy address: [ 140.208415][ T8715] ffff888079b85200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 140.216464][ T8715] ffff888079b85280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 140.224530][ T8715] >ffff888079b85300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 140.232592][ T8715] ^ [ 140.236904][ T8715] ffff888079b85380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 140.244960][ T8715] ffff888079b85400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 140.253025][ T8715] ================================================================== [ 140.265000][ T8715] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 140.272323][ T8715] CPU: 1 UID: 0 PID: 8715 Comm: kbnepd bnep0 Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0 [ 140.283194][ T8715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 140.293268][ T8715] Call Trace: [ 140.296561][ T8715] [ 140.299526][ T8715] dump_stack_lvl+0x241/0x360 [ 140.304219][ T8715] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.309451][ T8715] ? __pfx__printk+0x10/0x10 [ 140.314159][ T8715] ? preempt_schedule+0xe1/0xf0 [ 140.319038][ T8715] ? vscnprintf+0x5d/0x90 [ 140.323393][ T8715] panic+0x349/0x880 [ 140.327388][ T8715] ? check_panic_on_warn+0x21/0xb0 [ 140.332514][ T8715] ? __pfx_panic+0x10/0x10 [ 140.336935][ T8715] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 140.342934][ T8715] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 140.349288][ T8715] ? print_report+0x502/0x550 [ 140.353981][ T8715] check_panic_on_warn+0x86/0xb0 [ 140.358926][ T8715] ? device_for_each_child+0xbb/0x1b0 [ 140.364301][ T8715] end_report+0x77/0x160 [ 140.368557][ T8715] kasan_report+0x154/0x180 [ 140.373080][ T8715] ? device_for_each_child+0xbb/0x1b0 [ 140.378472][ T8715] ? __pfx_dev_memalloc_noio+0x10/0x10 [ 140.383940][ T8715] device_for_each_child+0xbb/0x1b0 [ 140.389146][ T8715] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 140.395483][ T8715] ? __pfx_device_for_each_child+0x10/0x10 [ 140.401298][ T8715] ? _raw_spin_unlock_irq+0x23/0x50 [ 140.406504][ T8715] ? lockdep_hardirqs_on+0x99/0x150 [ 140.411709][ T8715] pm_runtime_set_memalloc_noio+0x114/0x260 [ 140.417614][ T8715] netdev_unregister_kobject+0x178/0x250 [ 140.423256][ T8715] unregister_netdevice_many_notify+0x1851/0x1da0 [ 140.429691][ T8715] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 140.436464][ T8715] ? __pfx___mutex_trylock_common+0x10/0x10 [ 140.442376][ T8715] ? rcu_is_watching+0x15/0xb0 [ 140.447156][ T8715] ? trace_contention_end+0x3c/0x120 [ 140.452456][ T8715] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 140.458798][ T8715] unregister_netdevice_queue+0x303/0x370 [ 140.464540][ T8715] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 140.470802][ T8715] ? down_write+0x18c/0x220 [ 140.475324][ T8715] ? __pfx_down_write+0x10/0x10 [ 140.480208][ T8715] unregister_netdev+0x1c/0x30 [ 140.485000][ T8715] bnep_session+0x2e0e/0x3000 [ 140.489718][ T8715] ? __pfx_bnep_session+0x10/0x10 [ 140.494768][ T8715] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 140.501124][ T8715] ? __pfx_woken_wake_function+0x10/0x10 [ 140.506880][ T8715] ? __kthread_parkme+0x169/0x1d0 [ 140.511934][ T8715] ? __pfx_bnep_session+0x10/0x10 [ 140.516996][ T8715] kthread+0x2f0/0x390 [ 140.521088][ T8715] ? __pfx_bnep_session+0x10/0x10 [ 140.526139][ T8715] ? __pfx_kthread+0x10/0x10 [ 140.530752][ T8715] ret_from_fork+0x4b/0x80 [ 140.535195][ T8715] ? __pfx_kthread+0x10/0x10 [ 140.539891][ T8715] ret_from_fork_asm+0x1a/0x30 [ 140.544684][ T8715] [ 140.547967][ T8715] Kernel Offset: disabled [ 140.552295][ T8715] Rebooting in 86400 seconds..