last executing test programs: 1m1.571474532s ago: executing program 1 (id=200): ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000003080)={0x29c, 0x23, 0x1, 0x0, 0x0, "", [@nested={0x267, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic="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"]}]}, 0x29c}], 0x1}, 0x0) 52.064547822s ago: executing program 1 (id=200): ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000003080)={0x29c, 0x23, 0x1, 0x0, 0x0, "", [@nested={0x267, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic="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"]}]}, 0x29c}], 0x1}, 0x0) 41.050304553s ago: executing program 1 (id=200): ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000003080)={0x29c, 0x23, 0x1, 0x0, 0x0, "", [@nested={0x267, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic="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"]}]}, 0x29c}], 0x1}, 0x0) 31.299701691s ago: executing program 1 (id=200): ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000003080)={0x29c, 0x23, 0x1, 0x0, 0x0, "", [@nested={0x267, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic="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"]}]}, 0x29c}], 0x1}, 0x0) 21.422145163s ago: executing program 1 (id=200): ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000003080)={0x29c, 0x23, 0x1, 0x0, 0x0, "", [@nested={0x267, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic="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"]}]}, 0x29c}], 0x1}, 0x0) 9.592262648s ago: executing program 1 (id=200): ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000003080)={0x29c, 0x23, 0x1, 0x0, 0x0, "", [@nested={0x267, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic="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"]}]}, 0x29c}], 0x1}, 0x0) 1.380589906s ago: executing program 3 (id=1442): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000003a80)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e24, @loopback}, 0x80, 0x0}}], 0x1, 0x2c000011) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000140)) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendto(r2, &(0x7f0000000340)="ffa3e02283aa251878d0423e8dabf0a5c4b340616b0582eb2b961f43fabff5f6491314b72c1407c88368afc4f941ff2336cd400147ae858bc5b23b9d9d9b1f0b9e86bd34112b239cefe2c3ca9052cc67e8ff79949185e2c35493321fdd235fff2dd046b4717917a8b7bfa11d55dbf75a5f7bb4bd7089b92a73a2d44a3c453c66505f574223b2329b487352c778e294e69b927a3621b5f2fab528141806d8317e518b2754ddd9c7deab2542c8c98778a510707a5b9a06be3803784c303f57c082bd21fbc334cad1af48da349bea3ea33acc9d8169f9bbc2053e19a31b8412c04f0320db40ecfa89a0255a11a3be932fb954b9c75dfcbfda7c99", 0xf9, 0x4000001, &(0x7f0000000040)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x80) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xf, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x6, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0xbb}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmmsg(r2, &(0x7f0000003a80)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e24, @loopback}, 0x80, 0x0}}], 0x1, 0x2c000011) listen(r2, 0x3) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x28004) 1.31837809s ago: executing program 2 (id=1444): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x2, 0x12) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)={0x50, r4, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x1000, 0x2, 0x3, 0x0, {0x3, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x1, 0x1, 0xa3}}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x50}}, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f00000001c0)=0x7f, 0x4) r7 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r7, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[{0x10, 0x84, 0x5}], 0x10}}], 0x2, 0x0) (async) sendmmsg(r7, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[{0x10, 0x84, 0x5}], 0x10}}], 0x2, 0x0) ppoll(&(0x7f0000000080)=[{r3}], 0x1, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r4, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x5, 0x50}}}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000000) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000ec0)=@delsa={0x1070, 0x11, 0x1, 0x70bd2c, 0x25dfdbfb, {@in=@multicast1, 0x4d4, 0x2}, [@algo_crypt={0x1048, 0x2, {{'ecb(arc4)\x00'}, 0x8000, "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"}}]}, 0x1070}, 0x1, 0x0, 0x0, 0x4000080}, 0x884) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000ec0)=@delsa={0x1070, 0x11, 0x1, 0x70bd2c, 0x25dfdbfb, {@in=@multicast1, 0x4d4, 0x2}, [@algo_crypt={0x1048, 0x2, {{'ecb(arc4)\x00'}, 0x8000, "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"}}]}, 0x1070}, 0x1, 0x0, 0x0, 0x4000080}, 0x884) 1.144781454s ago: executing program 0 (id=1445): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001980)=@newtaction={0x1078, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x1064, 0x1, [@m_tunnel_key={0x1060, 0x1d, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010101}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @private=0xa010102}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x1078}, 0x1, 0x0, 0x0, 0x40000080}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x2b0, 0x210, 0x2b0, 0x2b0, 0x98, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) r3 = socket$rds(0x15, 0x5, 0x0) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000000c0)={0x80000018}) r7 = epoll_create1(0x0) shutdown(r5, 0x1) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000100)={0x20000004}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r4, &(0x7f0000000000)={0xa0000001}) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRESOCT=r1, @ANYBLOB="08000100", @ANYRES32=r8], 0x90}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) bind$tipc(r9, &(0x7f0000000200)=@name={0x1e, 0x2, 0x1, {{0x40, 0x1}, 0x1}}, 0x10) 1.085009342s ago: executing program 3 (id=1446): bpf$LINK_DETACH(0x22, &(0x7f0000000340), 0x4) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x8, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0x79}}, @restrict={0xd}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x5, 0x3}]}, {0x0, [0x5f, 0x0, 0x30, 0x0, 0x0, 0x5f]}}, &(0x7f00000000c0)=""/16, 0x54, 0x10, 0x0, 0x2, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88ac5fb5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x50}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1a, 0x1, &(0x7f0000000000)=@raw=[@exit], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000690003"], 0x18}}, 0x0) 1.065336448s ago: executing program 4 (id=1447): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) (async) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="03cef0450d6cf2b8a85adaaf9e4538a7d2650f49e35e"], 0xcfa4) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) (rerun: 32) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x1f4, 0xd50, 0x6558, &(0x7f0000000000)="ff", 0x0, 0x6, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x69) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r3, 0x0, 0x1, &(0x7f0000001780)=""/93, &(0x7f0000001800)=0x5d) 1.012831559s ago: executing program 2 (id=1448): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)={0x48, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x8}]}]}]}, 0x48}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @mcast2}}}}}}, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001e008d2a00000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="80"], 0x30}}, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x11}, [@btf_id={0x18, 0x6, 0x3, 0x0, 0x45}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0xc, &(0x7f00000000c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 921.527971ms ago: executing program 4 (id=1449): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000040)='^\x00\x00', 0x3}], 0x1, 0x0, 0x0, 0x20000000}, 0x4005) recvmsg$unix(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xe5}], 0x1}, 0x2) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="2c0000001d005f80004000000000000002000000000000000000080008000100000000ff5b1844ad30c8ac46", 0x2c) (async) write(r2, &(0x7f0000000280)="2c0000001d005f80004000000000000002000000000000000000080008000100000000ff5b1844ad30c8ac46", 0x2c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000b40)='\x00', 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001) 887.037481ms ago: executing program 0 (id=1450): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030001000000050003335a0000000500030000000000050003008000000005000300020000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x4800}, 0x4000804) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4a23, @remote}, 0x10) sendmmsg(r0, &(0x7f0000003a80)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e24, @loopback}, 0x80, 0x0}}], 0x1, 0x2c000011) sendto$inet(r0, &(0x7f00000007c0)="0fa02118c566c55e889651cb25723c74d626bc5f9aaf3f161303f19c8eeada348899b6152743c76d20421599f89d0224ffb97318d54de24c651e221572a24e9a6df08d8d", 0x44, 0x4000, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, 0x0, &(0x7f0000000080)) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001340)='r', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000080)="4d734e4d98dd87c8bd01cc7108d3ab81fe4ec5634b9e16393232aafe6490df", 0x1f}], 0x2}}], 0x2, 0x4000025) close(r0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030001000000050003335a0000000500030000000000050003008000000005000300020000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x4800}, 0x4000804) (async) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4a23, @remote}, 0x10) (async) sendmmsg(r0, &(0x7f0000003a80)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e24, @loopback}, 0x80, 0x0}}], 0x1, 0x2c000011) (async) sendto$inet(r0, &(0x7f00000007c0)="0fa02118c566c55e889651cb25723c74d626bc5f9aaf3f161303f19c8eeada348899b6152743c76d20421599f89d0224ffb97318d54de24c651e221572a24e9a6df08d8d", 0x44, 0x4000, 0x0, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) (async) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, 0x0, &(0x7f0000000080)) (async) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001340)='r', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000080)="4d734e4d98dd87c8bd01cc7108d3ab81fe4ec5634b9e16393232aafe6490df", 0x1f}], 0x2}}], 0x2, 0x4000025) (async) close(r0) (async) 820.908357ms ago: executing program 2 (id=1451): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xd5, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4020000000000007911000000000000850000006b0000009500000000000000359bb9f4ffffb136000440c89844f3cec063027b45b1bf3fa2cef4363021028e2b63040fcfd3a9b59fed6aa4172c30b77f38d6daaed700"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x54) 819.447053ms ago: executing program 3 (id=1452): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000003b00070100000000000000ff037c0000040000000c0001800600060086dd"], 0x24}}, 0x24040084) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) 815.207997ms ago: executing program 4 (id=1453): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000065c0)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x18, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r4}, 0x8) (async, rerun: 32) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r3) (rerun: 32) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="748b4717", @ANYRES16=r5, @ANYBLOB="090027bd7000fedbdf2501000000050001000000000014000300fc01000000000000000000000000000108000400ac14142c08000400e0000001140006006d6163766c616e30000000000000000008000400ac1414aa"], 0xfffffe43}, 0x1, 0x0, 0x0, 0x20008800}, 0x4040000) 741.02624ms ago: executing program 0 (id=1454): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000001f0000540000000e0001006e657464657673696d0000000f0002"], 0x34}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) 620.663785ms ago: executing program 4 (id=1455): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4048001) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r4 = socket(0x22, 0x2, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000cc0), r6) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d00)={0x24, r7, 0x43ea4d35e0958cf7, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f00000005c0)={'team_slave_0\x00', {0x2, 0x4e21, @rand_addr=0x64010100}}) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, r7, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x804) setsockopt$inet_int(r4, 0x0, 0x1, &(0x7f0000000100), 0x4) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r4) sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)={0x120, r8, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x855}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_MEDIA={0xb4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x35}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x62a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5ca}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf4}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x4050}, 0x20000000) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r9, &(0x7f0000003040)={@val={0x8}, @val={0x0, 0x3}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @multicast2=0xe0000001}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x36) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r10, 0x0, 0xca, &(0x7f0000000440)={0x0, 0x4, 0x1, 0x5, @vifc_lcl_addr=@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendto(r5, &(0x7f0000000200)="dccc9aaa9dd5580a5d297807cc0dc39ac749d2fb79ff75d0b5db3f98c8379905397676425348481522e7d10f93a9f49719ab4c55a1da21bc46d3a4bf8921405d535f56d1d4cf0a2fad5010d005d674c53e88e94c37885618237f5dccf3bd207aeda6cf3756915ceebcfe8acf98eace7c8006f5bd180672e0d11522deb7fadc70fbb3504deee4b49e9bca", 0x8a, 0x40010, 0x0, 0x0) 619.765283ms ago: executing program 2 (id=1456): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffffbb, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="00010000", @ANYRES16, @ANYBLOB="c88845e7e05ae52d00009300000008003117"], 0x1c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000040)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0101000000000000000004000000300001801400030000000000000000000000000000efffff050002"], 0x44}}, 0x0) 594.703344ms ago: executing program 3 (id=1457): r0 = socket(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@dellink={0x2c, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x0, 0x4000}, [@IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, 0x2c}}, 0x0) 545.45167ms ago: executing program 0 (id=1458): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="c0000000000101040000000000000000020000007400018014000180080001000000000008000200e00000020c00028005000100000000004300028005000100060000000c00038005000100000000000c0002"], 0xc0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000008c0), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)=ANY=[@ANYBLOB='K\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000ffdbdf250100000008000700e0000001080002000500000008000800ac1e01010c0001006e6c383032313100"], 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x80) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x38}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c080000", @ANYRES16=r4, @ANYBLOB="0100000000000000000002000000080009"], 0x1c}}, 0x20040000) 396.762665ms ago: executing program 2 (id=1459): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x32}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x34, r5, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x5, 0x8, @multicast1}, @NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x54, r7, 0x11, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @key_params=[@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}]]}, 0x54}}, 0x0) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff) r10 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r11 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x50, r9, 0xc5e55e185b866aa4, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r10}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_MS_ADDR6={0x14, 0xc, @empty}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4) 335.024754ms ago: executing program 4 (id=1460): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@map=0x1, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1000000}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb0}}, 0x0) 282.080796ms ago: executing program 3 (id=1461): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) close(r0) (async) close(r0) socket(0x18, 0x3, 0x3) (async) r1 = socket(0x18, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000230c}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r3, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x79c, 0x28}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x80) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000200)=0xd973, 0x4) (async) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000200)=0xd973, 0x4) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000280), r2) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r5, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r5, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in=@empty, @in=@multicast1}}, {{@in6=@mcast1}, 0x0, @in6=@private2}}, &(0x7f0000000480)=0xe8) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@private2}}, &(0x7f0000000480)=0xe8) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f00000004c0)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r6}) r7 = socket$rds(0x15, 0x5, 0x0) socket$kcm(0x29, 0x2, 0x0) (async) socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000500)={r7}) bind$unix(r8, &(0x7f0000000540)=@file={0x1, './file0\x00'}, 0x6e) (async) bind$unix(r8, &(0x7f0000000540)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$rds(r8, &(0x7f0000003680)={&(0x7f00000005c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000018c0)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/226, 0xe2}, {&(0x7f0000001700)=""/38, 0x26}, {&(0x7f0000001740)=""/39, 0x27}, {&(0x7f0000001780)=""/63, 0x3f}, {&(0x7f00000017c0)=""/223, 0xdf}], 0x6, &(0x7f0000003440)=[@zcopy_cookie={0x18}, @mask_fadd={0x58, 0x114, 0x8, {{0x3, 0x9}, &(0x7f0000001940)=0x4, &(0x7f0000001980)=0x5, 0xffffffff, 0xd6c3, 0x3, 0x7f, 0x11, 0x81}}, @fadd={0x58, 0x114, 0x6, {{0xfffffe00, 0x9}, &(0x7f00000019c0)=0x4, &(0x7f0000001a00)=0x9, 0x3, 0x0, 0x8, 0xf, 0x10, 0x8f9e}}, @cswp={0x58, 0x114, 0x7, {{0xa, 0x4}, &(0x7f0000001a40)=0x3, &(0x7f0000001a80)=0x8000000000000001, 0x6, 0xf, 0x6, 0xd6d1, 0x1, 0x7}}, @rdma_args={0x48, 0x114, 0x1, {{0x4, 0x2}, {&(0x7f0000001ac0)=""/1, 0x1}, &(0x7f0000001e40)=[{&(0x7f0000001b00)=""/64, 0x40}, {&(0x7f0000001b40)=""/239, 0xef}, {&(0x7f0000001c40)=""/146, 0x92}, {&(0x7f0000001d00)=""/232, 0xe8}, {&(0x7f0000001e00)=""/21, 0x15}], 0x5, 0x10, 0xc}}, @rdma_args={0x48, 0x114, 0x1, {{0x2, 0x10001}, {&(0x7f0000001ec0)=""/181, 0xb5}, &(0x7f0000003340)=[{&(0x7f0000001f80)=""/217, 0xd9}, {&(0x7f0000002080)=""/161, 0xa1}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000003140)=""/3, 0x3}, {&(0x7f0000003180)}, {&(0x7f00000031c0)=""/99, 0x63}, {&(0x7f0000003240)=""/238, 0xee}], 0x7, 0x0, 0x2}}, @mask_cswp={0x58, 0x114, 0x9, {{0x400, 0x5}, &(0x7f00000033c0)=0x400, &(0x7f0000003400), 0x7f, 0x174, 0xbc2, 0x7fff, 0xf, 0x9}}], 0x208, 0x4040850}, 0x1) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r8, &(0x7f00000037c0)={&(0x7f00000036c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003780)={&(0x7f0000003700)={0x48, r3, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x32}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x7}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xeb}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}, @NL80211_ATTR_BANDS={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x4000090) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000003940)={&(0x7f0000003800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003900)={&(0x7f0000003840)={0x88, r3, 0x921, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x58}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x148c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7f}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10001}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x234}]]}, 0x88}, 0x1, 0x0, 0x0, 0x2000000}, 0x44001) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r8, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x1c, 0x0, 0x800, 0x4, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000003ac0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r9, &(0x7f0000003b80)={&(0x7f0000003a80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003b40)={&(0x7f0000003b00)={0x14, r10, 0x200, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2008c050}, 0x40090) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000003c00)={&(0x7f0000003bc0)='alarmtimer_suspend\x00', r0, 0x0, 0x1}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000003cc0)={r0, 0x58, &(0x7f0000003c40)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000003d00)={r11, 0x42, 0x10}, 0xc) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000003d00)={r11, 0x42, 0x10}, 0xc) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r8, &(0x7f0000003e80)={&(0x7f0000003d40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003e40)={&(0x7f0000003d80)={0x90, 0x17, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_FLOWTABLE_HOOK={0x64, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x80}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) writev(r1, &(0x7f0000003f00)=[{&(0x7f0000003ec0)="bb1ba17e7f24930c19eeaaf6e6b012edeccf9340", 0x14}], 0x1) 160.882597ms ago: executing program 0 (id=1462): r0 = socket(0x10, 0x1, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24}, 0x24}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="6e617481e6ea5e6faf259800000000000000000000000000000000000000000004"], &(0x7f0000001740)=0x2c) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000004dd8d20000", @ANYRES32=r3, @ANYBLOB="0000000000000000180012800b000100697036746e6c00000800028004001300"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x80}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xffffffffffffff6c}}}]}, 0x34}}, 0x0) 140.937565ms ago: executing program 4 (id=1463): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="4dcde7c6002d5a000002ffff8137", 0xe, 0x0, &(0x7f0000000140)={0x11, 0xf7, r3, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg(r0, &(0x7f0000000840)={&(0x7f00000000c0)=@ll={0x11, 0x15, r1, 0x1, 0x8, 0x6, @local}, 0x80, &(0x7f0000000640)=[{&(0x7f00000001c0)="9d714014b788ac1bc45a6adf8f0c57fa2f99ff73c27e70f428d2c7ace84da33d30da608a2a5728db105fe8126da0025dceb112eb73085b4ae7516bbd0b0344ed5ee152106d923ca1b1abae30aebe211ff7a19c3dfce7d75f84f6f3db6c33cb348d", 0x61}, {&(0x7f0000000240)="cae4d7c05f412d85e04bce808c64a98caa739965939212a3a9eaae7f15afaf654000ffd7037e0935668585e02daef8c6a8d74be79910f1c995b501d50c0dcd992ca34dd789", 0x45}, {&(0x7f00000002c0)="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", 0xfb}, {&(0x7f00000003c0)="91aaa8d5162b3726392ebd5595c64e8c7d4cf8c8f64f12714fb81cf974ab1495332d41db7a90e478d8e41073a3d500e2d05c2824d19cece44a387e2394f1b50c68873ef0fd02f2808b32fd44401802cf39f3abf3a6f3c44446e2f63a233c8261cf2af0013f24d03113edfe630cd79692bff6ae6e71c9876639a48265422b12a5e6893fb29dede66d6be9a35d89bbc14401c40a5845985be087", 0x99}, {&(0x7f0000000480)="cb5b0f465c06e45dbc4e8c9977993449fac5881c8b91a0887e17b4ad2526351cca127370af3acf00602abe41d017b00726940fe5c58c1b113fc606406b3d7a26a2026db8a3f41c733c9ec17dc345b073a5f6eb870a72ae3058039f30517bf2507dff572f2e43f82be978742f87911dc0924b191975fdde7409a350226c03139415f4077c115e97c74882b4bcfdfa2bb65f073e2738dd18f05b8f3f93de18e4104aa7540a1836e1ad04fe4ae5", 0xac}, {&(0x7f0000000140)="ca0a2e01a6d5fd3c40c50910bf1ab7d5", 0x10}, {&(0x7f0000000540)="869ccaa2e185fc0de685e406f07d133d0fd04d070e2434112577affcfddc3188b35b7e034d5d04083b972bbd99a8d67f4b733488af664e10e18b857cb5707479243d54f7673459b3b1946c3ada9bc88268fa40aed29f0d9b723547f9eeb8efc89c1a8fc637277dd3daf9e74ee4f131a8f4416991c0bca3731cb919968d9766247984663189dae118d8dac6635794048bd344bd5c81d1be6b31ae7c4e20ab4a0d9f30d5f5902872c5140ddcc22a416984cf02f2d7aaf3512bd5c9611fc389fdb064bde7e3ff75a0e98563", 0xca}], 0x7, &(0x7f00000006c0)=[{0x70, 0x10e, 0x1000, "856416543a507a54a5d22348bcad38d04ef3f1f432bbcca4e944220063809848df1b9426d7ec30c792517ed3536bfd3049eed80d6a116a5603e8c26ad7d40f7e363d0100642928d242fe8fe288b4188afd5bbf70a1b2316b83b7"}, {0xf0, 0x108, 0x1, "2e998c8bb4fa7378ac6941916cbe83c0f58877495d31ffeb0d271df8f8776374fed84ae4382431af11c4ddcc8523455cfa8f865a5c113e34a9f00539149e69b3261d444edacba8435ea98ae188a3bcf4165228687b487189ce733df85fe7800f23ef13d12f4aa1ba3e204b05a848b0981a71d22a2bc2757e0e402672393412def554dcf47e3cc2d80a1d0f6da6e01226e91e0d95294902f43e3ba62af0a0c0916c07109d288313f57a0499301dca1489f9303b015e188153a1c04d6822cae642723112fbd32c3c4eeadbf4c7d0713955b82205493c9030f2ddf7bb1f9d4d026d"}], 0x160}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001a000100000000000000000002000000000000000000000008000100e0000001080002007f1414aa08000300", @ANYRES32], 0x34}}, 0x0) 50.426243ms ago: executing program 3 (id=1464): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000001800dd8d00000000000000000200000000000007000000000237ce93300600150004007f0f1a33430000140016801000088006000280060001000000000088c2064a1a8811af2d98"], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c000280080001"], 0x44}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x43, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev}}, {{@in6=@empty}, 0x0, @in6=@private1}}, 0xe8) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a00170000000004003700090003", 0x27}], 0x1) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x0, 0x70bd2b, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x11, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="3000000010000100000000000800000000000000", @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYRES32], 0x30}], 0x1}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f00001550000100053582c137153e370248018086dd1700d1bd", 0x33fe0}], 0x1}, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x10001}, 0x1c) 791.598µs ago: executing program 2 (id=1465): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (rerun: 64) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) (async, rerun: 32) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r2}, 0x20) (async, rerun: 32) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/82}, 0x20) close(r0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) (async, rerun: 32) setsockopt$inet6_tcp_int(r3, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) (rerun: 32) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) bind$bt_rfcomm(r4, &(0x7f0000000400)={0x1f, @any, 0x8}, 0xa) (async) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async, rerun: 32) r5 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000640), &(0x7f0000000740)=0x10) (rerun: 32) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000780)='veth1_virt_wifi\x00', 0x10) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xa0}}, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070", @ANYRESOCT=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r9}, 0x10) sendto$inet6(r0, 0x0, 0x4, 0x0, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x26, &(0x7f0000000300)=0x4, 0x4) 0s ago: executing program 0 (id=1466): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000d0003006c6973743a736574000000000500050000000000050001"], 0x5c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000003b0007010000000000000008047c0000ec0000000c00018006000600800a0000100002800c00150007"], 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0xc000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000d0003006c6973743a736574000000000500050000000000050001"], 0x5c}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000003b0007010000000000000008047c0000ec0000000c00018006000600800a0000100002800c00150007"], 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0xc000) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) kernel console output (not intermixed with test programs): gmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.519532][ T7355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.575402][ T7587] validate_nla: 60 callbacks suppressed [ 99.575420][ T7587] netlink: 'syz.3.396': attribute type 4 has an invalid length. [ 99.588099][ T7606] xt_CT: You must specify a L4 protocol and not use inversions on it [ 99.616923][ T7606] netlink: 16 bytes leftover after parsing attributes in process `syz.2.401'. [ 99.719095][ T7355] hsr_slave_0: entered promiscuous mode [ 99.754162][ T7355] hsr_slave_1: entered promiscuous mode [ 99.778118][ T7614] netlink: 'syz.4.404': attribute type 1 has an invalid length. [ 99.814813][ T7355] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.822650][ T7355] Cannot create hsr debugfs directory [ 99.977912][ T7623] netlink: 'syz.4.407': attribute type 4 has an invalid length. [ 100.038022][ T7626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.409'. [ 100.183642][ T7637] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.412'. [ 100.203543][ T7637] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.412'. [ 100.283330][ T7639] netlink: 96 bytes leftover after parsing attributes in process `syz.2.413'. [ 100.297787][ T7639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.413'. [ 100.350186][ T7639] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.370828][ T7639] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.385057][ T53] Bluetooth: hci2: command tx timeout [ 100.393014][ T7639] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.405496][ T7639] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.494019][ T7646] netlink: 'syz.0.415': attribute type 3 has an invalid length. [ 100.503635][ T7646] netlink: 'syz.0.415': attribute type 3 has an invalid length. [ 100.601565][ T7652] netlink: 'syz.3.416': attribute type 25 has an invalid length. [ 100.609679][ T7652] netlink: 'syz.3.416': attribute type 7 has an invalid length. [ 100.749168][ T7355] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 100.761018][ T7355] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 100.778824][ T7355] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 100.806408][ T7355] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 100.868505][ T7355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.912566][ T7355] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.923936][ T6202] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.931136][ T6202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.018926][ T6202] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.026977][ T6202] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.517696][ T7355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.623317][ T7355] veth0_vlan: entered promiscuous mode [ 101.641150][ T7355] veth1_vlan: entered promiscuous mode [ 101.665241][ T7355] veth0_macvtap: entered promiscuous mode [ 101.682157][ T7355] veth1_macvtap: entered promiscuous mode [ 101.698893][ T7355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.709631][ T7355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.721316][ T7355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.731193][ T7355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.741715][ T7355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.751688][ T7355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.762235][ T7355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.773686][ T7355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.785774][ T7355] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.794508][ T7355] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.803661][ T7355] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.812633][ T7355] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.975415][ T6185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.983632][ T6185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.057109][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.080743][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.474369][ T7748] tipc: Started in network mode [ 102.480246][ T7748] tipc: Node identity , cluster identity 4711 [ 102.505501][ T7748] tipc: Failed to obtain node identity [ 102.511323][ T7748] tipc: Enabling of bearer rejected, failed to enable media [ 102.599083][ T7751] xt_CT: No such helper "snmp" [ 103.080471][ T7788] netlink: 'syz.3.455': attribute type 21 has an invalid length. [ 103.147498][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.172872][ T7793] netlink: 'syz.0.456': attribute type 10 has an invalid length. [ 103.748724][ T7820] vxcan1: entered promiscuous mode [ 103.781163][ T7820] vxcan1: left promiscuous mode [ 103.791626][ T7820] vxcan1: entered allmulticast mode [ 103.811069][ T7820] __nla_validate_parse: 15 callbacks suppressed [ 103.811086][ T7820] netlink: 16 bytes leftover after parsing attributes in process `syz.4.464'. [ 103.844318][ T7824] xt_limit: Overflow, try lower: 0/0 [ 104.037052][ T6180] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.142266][ T7827] netlink: 'syz.4.467': attribute type 1 has an invalid length. [ 104.514886][ T7843] ebt_limit: overflow, try lower: 570423552/2483027968 [ 104.693380][ T7828] xt_l2tp: missing protocol rule (udp|l2tpip) [ 104.703587][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 104.717898][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 104.727116][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 104.744558][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 104.755515][ T5846] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 104.763869][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 105.174312][ T7868] netlink: 64 bytes leftover after parsing attributes in process `syz.0.477'. [ 105.469620][ T6180] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.488094][ T7848] chnl_net:caif_netlink_parms(): no params data found [ 105.494407][ T7884] netlink: 'syz.2.482': attribute type 142 has an invalid length. [ 105.562289][ T6180] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.651335][ T7893] netlink: 76 bytes leftover after parsing attributes in process `syz.0.481'. [ 105.697641][ T7893] netlink: 12 bytes leftover after parsing attributes in process `syz.0.481'. [ 105.729126][ T6180] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.866293][ T7848] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.874951][ T7848] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.882208][ T7848] bridge_slave_0: entered allmulticast mode [ 105.889439][ T7848] bridge_slave_0: entered promiscuous mode [ 105.898997][ T7848] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.906289][ T7848] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.913546][ T7848] bridge_slave_1: entered allmulticast mode [ 105.920680][ T7848] bridge_slave_1: entered promiscuous mode [ 105.923694][ T7908] netlink: 68 bytes leftover after parsing attributes in process `syz.4.488'. [ 106.061162][ T7906] tipc: Enabling of bearer rejected, failed to enable media [ 106.083291][ T7848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.098279][ T7848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.107987][ T6180] bridge_slave_1: left allmulticast mode [ 106.108901][ T7906] netlink: 'syz.3.487': attribute type 3 has an invalid length. [ 106.113862][ T6180] bridge_slave_1: left promiscuous mode [ 106.142642][ T6180] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.170368][ T6180] bridge_slave_0: left allmulticast mode [ 106.178079][ T6180] bridge_slave_0: left promiscuous mode [ 106.184348][ T6180] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.437430][ T7926] netlink: 'syz.0.494': attribute type 1 has an invalid length. [ 106.761555][ T6180] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.773537][ T6180] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.788090][ T6180] bond0 (unregistering): Released all slaves [ 106.816332][ T7933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.496'. [ 106.865512][ T53] Bluetooth: hci2: command tx timeout [ 106.905841][ T7848] team0: Port device team_slave_0 added [ 107.062385][ T7954] netlink: 'syz.2.502': attribute type 1 has an invalid length. [ 107.096317][ T7954] netlink: 9348 bytes leftover after parsing attributes in process `syz.2.502'. [ 107.117705][ T7954] netlink: 44 bytes leftover after parsing attributes in process `syz.2.502'. [ 107.133100][ T7848] team0: Port device team_slave_1 added [ 107.221002][ T7956] netlink: 40 bytes leftover after parsing attributes in process `syz.3.501'. [ 107.281768][ T7848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.301471][ T7969] netlink: 76 bytes leftover after parsing attributes in process `syz.2.504'. [ 107.317687][ T7848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.356240][ T7848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.500841][ T7971] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 107.552740][ T7989] netlink: 'syz.3.510': attribute type 1 has an invalid length. [ 107.590692][ T7848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.601155][ T7848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.633283][ T7848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.909811][ T7993] dvmrp0: entered allmulticast mode [ 107.943695][ T7848] hsr_slave_0: entered promiscuous mode [ 108.003675][ T7848] hsr_slave_1: entered promiscuous mode [ 108.010302][ T7848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.019857][ T7848] Cannot create hsr debugfs directory [ 108.084868][ T6180] hsr_slave_0: left promiscuous mode [ 108.090876][ T6180] hsr_slave_1: left promiscuous mode [ 108.109200][ T6180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.127630][ T6180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.136162][ T6180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.145637][ T6180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.172597][ T6180] veth1_macvtap: left promiscuous mode [ 108.179812][ T6180] veth0_macvtap: left promiscuous mode [ 108.194966][ T6180] veth1_vlan: left promiscuous mode [ 108.206316][ T6180] veth0_vlan: left promiscuous mode [ 108.598326][ T6180] team0 (unregistering): Port device team_slave_1 removed [ 108.637752][ T6180] team0 (unregistering): Port device team_slave_0 removed [ 108.949724][ T5846] Bluetooth: hci2: command tx timeout [ 108.987268][ T8001] netlink: 'syz.4.514': attribute type 8 has an invalid length. [ 109.036847][ T8024] netlink: 'syz.3.520': attribute type 3 has an invalid length. [ 109.074021][ T8024] __nla_validate_parse: 11 callbacks suppressed [ 109.074038][ T8024] netlink: 32 bytes leftover after parsing attributes in process `syz.3.520'. [ 109.077627][ T8027] ebt_limit: overflow, try lower: 570423552/2483027968 [ 109.166976][ T8027] netlink: 24 bytes leftover after parsing attributes in process `syz.4.521'. [ 109.189350][ T8027] netlink: 256 bytes leftover after parsing attributes in process `syz.4.521'. [ 109.382146][ T8041] netlink: 'syz.0.525': attribute type 9 has an invalid length. [ 109.401418][ T8041] netlink: 134660 bytes leftover after parsing attributes in process `syz.0.525'. [ 109.622255][ T8054] netlink: 'syz.4.527': attribute type 1 has an invalid length. [ 109.727169][ T8052] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 109.740549][ T8052] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 109.778754][ T8052] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 109.883350][ T8062] Bluetooth: MGMT ver 1.23 [ 110.018499][ T8068] netlink: 12 bytes leftover after parsing attributes in process `syz.2.531'. [ 110.068184][ T8073] bond1: (slave vxcan5): The slave device specified does not support setting the MAC address [ 110.081014][ T8073] bond1: (slave vxcan5): Error -95 calling set_mac_address [ 110.163515][ T8075] netlink: 28 bytes leftover after parsing attributes in process `syz.3.533'. [ 110.183569][ T8075] netlink: 28 bytes leftover after parsing attributes in process `syz.3.533'. [ 110.324104][ T7848] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 110.368371][ T7848] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 110.417532][ T7848] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 110.813712][ T7848] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 110.957850][ T8106] xt_CT: You must specify a L4 protocol and not use inversions on it [ 111.026781][ T5846] Bluetooth: hci2: command tx timeout [ 111.060766][ T8094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.078218][ T8094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.087844][ T8114] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.541'. [ 111.100813][ T8094] bond0 (unregistering): Released all slaves [ 111.120917][ T8113] : renamed from bond_slave_0 (while UP) [ 111.327974][ T7848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.368591][ T8121] IPv6: sit1: Disabled Multicast RS [ 111.398963][ T7848] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.409653][ T8121] netlink: 12 bytes leftover after parsing attributes in process `syz.2.545'. [ 111.441725][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.449038][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.548990][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.556182][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.611272][ T8122] netlink: 12 bytes leftover after parsing attributes in process `syz.0.544'. [ 111.626057][ T8136] netlink: 'syz.3.548': attribute type 3 has an invalid length. [ 111.634907][ T8122] netlink: 'syz.0.544': attribute type 1 has an invalid length. [ 111.642574][ T8122] netlink: 'syz.0.544': attribute type 1 has an invalid length. [ 111.661669][ T7848] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 111.753378][ T8122] netlink: 'syz.0.544': attribute type 2 has an invalid length. [ 111.989685][ T7848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.173041][ T7848] veth0_vlan: entered promiscuous mode [ 112.224471][ T7848] veth1_vlan: entered promiscuous mode [ 112.272387][ T8159] netdevsim netdevsim2: Direct firmware load for €U failed with error -2 [ 112.313929][ T8159] netdevsim netdevsim2: Falling back to sysfs fallback for: €U [ 112.333680][ T7848] veth0_macvtap: entered promiscuous mode [ 112.377656][ T7848] veth1_macvtap: entered promiscuous mode [ 112.423263][ T7848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.463584][ T7848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.491944][ T7848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.503285][ T7848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.530001][ T7848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.543454][ T7848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.561704][ T7848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.575680][ T7848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.600033][ T7848] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.611287][ T7848] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.622051][ T7848] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.654907][ T7848] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.756171][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.781587][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.106705][ T5846] Bluetooth: hci2: command tx timeout [ 113.212050][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.241982][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.498529][ T8224] can: request_module (can-proto-0) failed. [ 113.621558][ T8239] xt_l2tp: unknown flags: 18 [ 113.932426][ T8256] pim6reg1: entered promiscuous mode [ 113.951182][ T8256] pim6reg1: entered allmulticast mode [ 113.998565][ T8259] net_ratelimit: 18 callbacks suppressed [ 113.998726][ T8259] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 114.114503][ T8264] ip6tnl0: mtu less than device minimum [ 114.442171][ T60] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.511315][ T8268] bridge_slave_1: left allmulticast mode [ 114.517467][ T8268] bridge_slave_1: left promiscuous mode [ 114.523528][ T8268] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.547208][ T8268] bond0: (slave bond_slave_0): Releasing backup interface [ 114.580908][ T8268] bond0: (slave bond_slave_1): Releasing backup interface [ 114.618919][ T8268] team0: Port device team_slave_0 removed [ 114.643261][ T8268] team0: Port device team_slave_1 removed [ 114.659895][ T8268] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.668741][ T8268] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.678844][ T8268] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.688100][ T8268] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.715460][ T8269] wg2: entered promiscuous mode [ 114.766659][ T8269] team0: Port device wg2 added [ 114.861304][ T60] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.952917][ T8272] veth0: entered promiscuous mode [ 114.982287][ T8271] veth0: left promiscuous mode [ 115.184445][ T60] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.222963][ T8280] __nla_validate_parse: 9 callbacks suppressed [ 115.222984][ T8280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.591'. [ 115.250357][ T8280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.591'. [ 115.314285][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 115.342347][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 115.355601][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 115.364388][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 115.373658][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 115.377254][ T60] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.391277][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 115.488092][ T8292] RDS: rds_bind could not find a transport for ::ffff:168.64.64.64, load rds_tcp or rds_rdma? [ 115.660692][ T60] bridge_slave_1: left allmulticast mode [ 115.684824][ T60] bridge_slave_1: left promiscuous mode [ 115.715043][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.738861][ T60] bridge_slave_0: left allmulticast mode [ 115.744560][ T60] bridge_slave_0: left promiscuous mode [ 115.775096][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.368774][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.381713][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.398721][ T60] bond0 (unregistering): Released all slaves [ 116.495040][ T8308] netlink: 'syz.4.600': attribute type 1 has an invalid length. [ 116.571216][ T8312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.600'. [ 116.678511][ T8313] netlink: 'syz.2.601': attribute type 9 has an invalid length. [ 116.720717][ T8317] pimreg: entered allmulticast mode [ 116.903455][ T8287] chnl_net:caif_netlink_parms(): no params data found [ 117.291481][ T8287] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.302366][ T8287] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.315236][ T8287] bridge_slave_0: entered allmulticast mode [ 117.322363][ T8287] bridge_slave_0: entered promiscuous mode [ 117.333619][ T60] hsr_slave_0: left promiscuous mode [ 117.341987][ T60] hsr_slave_1: left promiscuous mode [ 117.348530][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.356620][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.365616][ T8340] tipc: Trying to set illegal importance in message [ 117.374602][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.382482][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.403815][ T60] veth1_macvtap: left promiscuous mode [ 117.409509][ T60] veth0_macvtap: left promiscuous mode [ 117.415569][ T60] veth1_vlan: left promiscuous mode [ 117.420887][ T60] veth0_vlan: left promiscuous mode [ 117.426396][ T5846] Bluetooth: hci2: command tx timeout [ 117.986881][ T60] team0 (unregistering): Port device team_slave_1 removed [ 118.039370][ T60] team0 (unregistering): Port device team_slave_0 removed [ 118.565408][ T8287] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.583943][ T8287] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.602622][ T8287] bridge_slave_1: entered allmulticast mode [ 118.617881][ T8287] bridge_slave_1: entered promiscuous mode [ 118.639574][ T8341] netlink: 56 bytes leftover after parsing attributes in process `syz.4.606'. [ 118.695416][ T8345] netlink: 16 bytes leftover after parsing attributes in process `syz.2.607'. [ 118.867282][ T8287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.936506][ T8287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.058645][ T8287] team0: Port device team_slave_0 added [ 119.071440][ T8370] netlink: 76 bytes leftover after parsing attributes in process `syz.4.610'. [ 119.078852][ T8287] team0: Port device team_slave_1 added [ 119.095268][ T8370] netlink: 12 bytes leftover after parsing attributes in process `syz.4.610'. [ 119.117419][ T8372] ieee802154 phy0 wpan0: encryption failed: -22 [ 119.142176][ T8287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.152866][ T8287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.186598][ T8287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.206077][ T8287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.213128][ T8287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.244513][ T8287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.323537][ T8287] hsr_slave_0: entered promiscuous mode [ 119.332115][ T8287] hsr_slave_1: entered promiscuous mode [ 119.339328][ T8287] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 119.351844][ T8287] Cannot create hsr debugfs directory [ 119.515038][ T5846] Bluetooth: hci2: command tx timeout [ 119.788186][ T8388] netlink: 'syz.2.619': attribute type 1 has an invalid length. [ 119.882921][ T8287] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 119.933449][ T8287] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 119.965885][ T8287] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 119.980972][ T8287] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 120.025089][ T8396] netlink: 'syz.2.622': attribute type 21 has an invalid length. [ 120.053377][ T8396] netlink: 132 bytes leftover after parsing attributes in process `syz.2.622'. [ 120.101458][ T8398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.621'. [ 120.161101][ T8395] netlink: 20 bytes leftover after parsing attributes in process `syz.0.621'. [ 120.217027][ T5894] IPVS: starting estimator thread 0... [ 120.229777][ T8287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.244905][ T8395] netlink: 24 bytes leftover after parsing attributes in process `syz.0.621'. [ 120.254839][ T8403] tipc: Started in network mode [ 120.262141][ T8403] tipc: Node identity ac1414aa, cluster identity 4711 [ 120.284781][ T8403] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 120.311494][ T8405] IPVS: using max 18 ests per chain, 43200 per kthread [ 120.324920][ T8403] tipc: Enabled bearer , priority 10 [ 120.420201][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 120.465441][ T8287] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.522136][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.529342][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.554896][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 120.629869][ T8412] netlink: 76 bytes leftover after parsing attributes in process `syz.2.628'. [ 120.642696][ T8412] netlink: 12 bytes leftover after parsing attributes in process `syz.2.628'. [ 120.694770][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 120.834786][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 120.970513][ T6214] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.974782][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 120.977690][ T6214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.004168][ T8417] netlink: 24 bytes leftover after parsing attributes in process `syz.2.629'. [ 121.114839][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 121.254776][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 121.352668][ T8434] netlink: 'syz.2.633': attribute type 4 has an invalid length. [ 121.393036][ T8435] netlink: 'syz.2.633': attribute type 4 has an invalid length. [ 121.396334][ T5891] tipc: Node number set to 2886997162 [ 121.455617][ T8441] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.635'. [ 121.488929][ T8441] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.635'. [ 121.534794][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 121.591098][ T5846] Bluetooth: hci2: command tx timeout [ 121.642099][ T8450] netlink: 792 bytes leftover after parsing attributes in process `syz.0.637'. [ 121.651574][ T8450] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 121.819104][ T8458] netlink: 76 bytes leftover after parsing attributes in process `syz.3.639'. [ 121.834065][ T8458] netlink: 12 bytes leftover after parsing attributes in process `syz.3.639'. [ 121.857813][ T8287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.938873][ T8287] veth0_vlan: entered promiscuous mode [ 121.970732][ T8287] veth1_vlan: entered promiscuous mode [ 122.032433][ T8467] netlink: 76 bytes leftover after parsing attributes in process `syz.3.644'. [ 122.070253][ T8287] veth0_macvtap: entered promiscuous mode [ 122.079608][ T8287] veth1_macvtap: entered promiscuous mode [ 122.096403][ T8287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.130987][ T8287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.141657][ T8287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.155094][ T8287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.175629][ T8287] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.184379][ T8287] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.194505][ T8287] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.203350][ T8287] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.369312][ T6214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.409439][ T6214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.473692][ T8492] geneve2: entered promiscuous mode [ 122.511053][ T8492] geneve2: entered allmulticast mode [ 122.578978][ T8494] netlink: 'syz.0.651': attribute type 2 has an invalid length. [ 122.594953][ T8494] netlink: 'syz.0.651': attribute type 8 has an invalid length. [ 122.625512][ T6198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.643936][ T6198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.852278][ T60] syzkaller0: tun_net_xmit 76 [ 122.859779][ T8503] syzkaller0: create flow: hash 1942707898 index 1 [ 122.886744][ T5891] syzkaller0: tun_net_xmit 76 [ 122.895847][ T60] syzkaller0: tun_net_xmit 48 [ 123.038627][ T8521] netlink: 'syz.4.659': attribute type 3 has an invalid length. [ 123.085041][ T25] syzkaller0: tun_net_xmit 76 [ 123.124906][ T9] syzkaller0: tun_net_xmit 76 [ 123.152328][ T8498] syzkaller0: delete flow: hash 1942707898 index 1 [ 124.785107][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 124.812487][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 124.827657][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 124.853929][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 124.870422][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 124.879132][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 124.932043][ T8549] netlink: 'syz.4.666': attribute type 10 has an invalid length. [ 124.992787][ T8552] IPVS: set_ctl: invalid protocol: 43 10.1.1.1:20001 [ 125.062540][ T60] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.156571][ T8562] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.165494][ T8562] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.174223][ T8562] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.183622][ T8562] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.323917][ T60] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.424902][ C1] net_ratelimit: 5 callbacks suppressed [ 125.424920][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 125.495550][ T8584] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 125.636384][ T60] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.860272][ T8546] chnl_net:caif_netlink_parms(): no params data found [ 125.976199][ T8615] netlink: 'syz.2.683': attribute type 24 has an invalid length. [ 126.083912][ T60] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.172376][ T8546] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.180704][ T8546] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.195387][ T8546] bridge_slave_0: entered allmulticast mode [ 126.207606][ T8546] bridge_slave_0: entered promiscuous mode [ 126.231722][ T8546] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.248815][ T8546] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.262244][ T8546] bridge_slave_1: entered allmulticast mode [ 126.270031][ T8637] __nla_validate_parse: 11 callbacks suppressed [ 126.270048][ T8637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.688'. [ 126.286718][ T8546] bridge_slave_1: entered promiscuous mode [ 126.295179][ T8637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.688'. [ 126.314163][ T8639] netlink: 36 bytes leftover after parsing attributes in process `syz.2.689'. [ 126.314809][ T8637] netlink: 40 bytes leftover after parsing attributes in process `syz.0.688'. [ 126.371331][ T8637] dccp_invalid_packet: P.CsCov 5 exceeds packet length 16 [ 126.397850][ T8546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.458101][ T8546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.464866][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 126.480214][ T8646] Driver unsupported XDP return value 0 on prog (id 123) dev N/A, expect packet loss! [ 126.528529][ T60] bridge_slave_1: left allmulticast mode [ 126.534380][ T60] bridge_slave_1: left promiscuous mode [ 126.549783][ T8651] netlink: 1 bytes leftover after parsing attributes in process `syz.0.693'. [ 126.552649][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.565739][ T8652] netlink: 1 bytes leftover after parsing attributes in process `syz.0.693'. [ 126.577690][ T8653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.590665][ T60] bridge_slave_0: left allmulticast mode [ 126.602078][ T60] bridge_slave_0: left promiscuous mode [ 126.609646][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.639655][ T8653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.725598][ T8653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.952769][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.961440][ T53] Bluetooth: hci2: command tx timeout [ 126.971834][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.982743][ T60] bond0 (unregistering): Released all slaves [ 127.013308][ T8546] team0: Port device team_slave_0 added [ 127.111542][ T8546] team0: Port device team_slave_1 added [ 127.157595][ T8546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.164590][ T8546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.192180][ T8546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.213625][ T8546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.222097][ T8546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.249791][ T8546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.311097][ T8667] netlink: 36 bytes leftover after parsing attributes in process `syz.0.697'. [ 127.323833][ T8667] netlink: 36 bytes leftover after parsing attributes in process `syz.0.697'. [ 127.348584][ T8667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.697'. [ 127.399232][ T8546] hsr_slave_0: entered promiscuous mode [ 127.443993][ T8546] hsr_slave_1: entered promiscuous mode [ 127.459946][ T8546] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.472465][ T8546] Cannot create hsr debugfs directory [ 127.480008][ T8669] netlink: 44 bytes leftover after parsing attributes in process `syz.0.698'. [ 127.496022][ T8669] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.503477][ T8669] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.510683][ T8669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.518253][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 127.633083][ T60] hsr_slave_0: left promiscuous mode [ 127.657390][ T60] hsr_slave_1: left promiscuous mode [ 127.673365][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.691472][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.699772][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.720349][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.756329][ T60] veth1_macvtap: left promiscuous mode [ 127.761900][ T60] veth0_macvtap: left promiscuous mode [ 127.770406][ T60] veth1_vlan: left promiscuous mode [ 127.777102][ T60] veth0_vlan: left promiscuous mode [ 128.162284][ T60] team0 (unregistering): Port device team_slave_1 removed [ 128.202912][ T60] team0 (unregistering): Port device team_slave_0 removed [ 128.545451][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 128.578401][ T8673] netlink: 'syz.3.699': attribute type 1 has an invalid length. [ 128.588999][ T8673] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 129.029102][ T53] Bluetooth: hci2: command tx timeout [ 129.182999][ T8715] netlink: 'syz.3.714': attribute type 9 has an invalid length. [ 129.206532][ T8720] netlink: 'syz.3.714': attribute type 9 has an invalid length. [ 129.317156][ T8726] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 129.405641][ T8729] netlink: 'syz.3.719': attribute type 1 has an invalid length. [ 129.434818][ T8729] netlink: 'syz.3.719': attribute type 1 has an invalid length. [ 129.447441][ T8546] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 129.484074][ T8546] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 129.523015][ T8546] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 129.541325][ T8737] netlink: 'syz.4.722': attribute type 4 has an invalid length. [ 129.551660][ T8546] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 129.584891][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 129.731371][ T8546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.750664][ T8546] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.831364][ T8546] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 129.842483][ T8546] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 129.862302][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.869495][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.880452][ T8752] delete_channel: no stack [ 129.929835][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.937040][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.999899][ T8758] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 130.359880][ T8546] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.463015][ T8546] veth0_vlan: entered promiscuous mode [ 130.509448][ T8546] veth1_vlan: entered promiscuous mode [ 130.536604][ T8546] veth0_macvtap: entered promiscuous mode [ 130.546692][ T8546] veth1_macvtap: entered promiscuous mode [ 130.587330][ T8546] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.624914][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 130.636249][ T8546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.655774][ T8546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.675957][ T8546] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.692319][ T8546] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.701137][ T8546] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.710101][ T8546] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.719156][ T8546] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.951956][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.980489][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.059339][ T6202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.096167][ T6202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.105364][ T53] Bluetooth: hci2: command tx timeout [ 131.569350][ T8852] __nla_validate_parse: 18 callbacks suppressed [ 131.569369][ T8852] netlink: 216 bytes leftover after parsing attributes in process `syz.3.757'. [ 131.586772][ T8852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.757'. [ 131.664867][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 132.116885][ T8875] xt_hashlimit: max too large, truncated to 1048576 [ 132.231330][ T8877] xt_CT: No such helper "snmp" [ 132.260951][ T8880] netlink: 288 bytes leftover after parsing attributes in process `syz.4.766'. [ 132.483229][ T8891] sock: sock_set_timeout: `syz.2.769' (pid 8891) tries to set negative timeout [ 132.493922][ T8890] openvswitch: netlink: Actions may not be safe on all matching packets [ 132.697958][ T6198] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.708597][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 133.028602][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.035063][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.670411][ T6198] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.716100][ T8926] netlink: 20 bytes leftover after parsing attributes in process `syz.0.779'. [ 133.738310][ T8926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.779'. [ 133.754835][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 133.833733][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 133.843421][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 133.852969][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 133.865557][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 133.874818][ T5846] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 133.882386][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 133.929767][ T6198] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.069567][ T8949] netlink: 'syz.4.783': attribute type 1 has an invalid length. [ 134.106948][ T8949] netlink: 9396 bytes leftover after parsing attributes in process `syz.4.783'. [ 134.162378][ T6198] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.482567][ T8976] netlink: 'syz.2.791': attribute type 1 has an invalid length. [ 134.492521][ T6198] bridge_slave_1: left allmulticast mode [ 134.509647][ T6198] bridge_slave_1: left promiscuous mode [ 134.516649][ T8976] openvswitch: netlink: Actions may not be safe on all matching packets [ 134.535156][ T6198] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.564032][ T6198] bridge_slave_0: left allmulticast mode [ 134.574744][ T6198] bridge_slave_0: left promiscuous mode [ 134.581734][ T6198] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.784833][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 135.033087][ T6198] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.048507][ T6198] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.060922][ T6198] bond0 (unregistering): Released all slaves [ 135.073462][ T8972] netlink: 16 bytes leftover after parsing attributes in process `syz.0.789'. [ 135.095058][ T8992] netlink: 12 bytes leftover after parsing attributes in process `syz.2.791'. [ 135.136680][ T8995] netlink: 'syz.3.797': attribute type 1 has an invalid length. [ 135.467582][ T9021] netlink: 'syz.3.804': attribute type 2 has an invalid length. [ 135.475584][ T9021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.804'. [ 135.665746][ T9031] xt_ecn: cannot match TCP bits for non-tcp packets [ 135.678348][ T8939] chnl_net:caif_netlink_parms(): no params data found [ 135.824916][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 135.854512][ T6198] hsr_slave_0: left promiscuous mode [ 135.860813][ T6198] hsr_slave_1: left promiscuous mode [ 135.867370][ T6198] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.890025][ T9041] openvswitch: netlink: Missing key (keys=40, expected=100) [ 135.906633][ T6198] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.918130][ T53] Bluetooth: hci2: command tx timeout [ 135.923252][ T6198] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.931323][ T6198] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.978501][ T6198] veth1_macvtap: left promiscuous mode [ 135.984147][ T6198] veth0_macvtap: left promiscuous mode [ 135.990112][ T6198] veth1_vlan: left promiscuous mode [ 135.995534][ T6198] veth0_vlan: left promiscuous mode [ 136.400365][ T6198] team0 (unregistering): Port device team_slave_1 removed [ 136.439379][ T6198] team0 (unregistering): Port device team_slave_0 removed [ 136.865684][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 136.923519][ T9054] netlink: 'syz.3.814': attribute type 1 has an invalid length. [ 136.954080][ T9055] netlink: 164 bytes leftover after parsing attributes in process `syz.0.813'. [ 136.971392][ T8939] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.004668][ T8939] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.032666][ T8939] bridge_slave_0: entered allmulticast mode [ 137.065122][ T8939] bridge_slave_0: entered promiscuous mode [ 137.073725][ T8939] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.090562][ T8939] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.107133][ T8939] bridge_slave_1: entered allmulticast mode [ 137.114379][ T8939] bridge_slave_1: entered promiscuous mode [ 137.210403][ T8939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.273038][ T8939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.325168][ T8939] team0: Port device team_slave_0 added [ 137.331360][ T9072] netlink: 'syz.4.820': attribute type 10 has an invalid length. [ 137.346832][ T9072] veth1_macvtap: left promiscuous mode [ 137.358214][ T9072] team0: Device macsec0 is of different type [ 137.366395][ T9072] netlink: 4 bytes leftover after parsing attributes in process `syz.4.820'. [ 137.376287][ T9072] IPVS: set_ctl: invalid protocol: 92 172.20.20.170:20004 [ 137.386428][ T8939] team0: Port device team_slave_1 added [ 137.440935][ T8939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.450032][ T8939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.484857][ T8939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.499022][ T8939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.506881][ T8939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.550184][ T8939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.630778][ T8939] hsr_slave_0: entered promiscuous mode [ 137.671025][ T8939] hsr_slave_1: entered promiscuous mode [ 137.682827][ T8939] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 137.690797][ T8939] Cannot create hsr debugfs directory [ 137.709072][ T9087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.716071][ T9087] bond0: (slave vcan2): The slave device specified does not support setting the MAC address [ 137.728254][ T9087] bond0: (slave vcan2): Error -95 calling set_mac_address [ 137.741384][ T9085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.826'. [ 137.751860][ T9085] netlink: 12 bytes leftover after parsing attributes in process `syz.3.826'. [ 137.761487][ T9085] netlink: 'syz.3.826': attribute type 5 has an invalid length. [ 137.904873][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 137.985066][ T53] Bluetooth: hci2: command tx timeout [ 138.235773][ T9106] netlink: 16 bytes leftover after parsing attributes in process `syz.4.833'. [ 138.524093][ T9123] netlink: 'syz.4.838': attribute type 3 has an invalid length. [ 138.531973][ T9123] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.838'. [ 138.867596][ T9140] netlink: 'syz.0.840': attribute type 4 has an invalid length. [ 138.891068][ T9132] netlink: 56 bytes leftover after parsing attributes in process `syz.4.839'. [ 138.944884][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 139.027267][ T8939] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 139.075776][ T8939] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 139.099688][ T8939] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 139.134411][ T8939] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 139.332279][ T9167] unknown channel width for channel at 909000KHz? [ 139.353252][ T9167] unknown channel width for channel at 909000KHz? [ 139.361342][ T8939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.361719][ T9167] unknown channel width for channel at 909000KHz? [ 139.502310][ T9183] tipc: Started in network mode [ 139.507473][ T9183] tipc: Node identity ac1414aa, cluster identity 4711 [ 139.517082][ T9183] tipc: Enabled bearer , priority 10 [ 139.518014][ T9171] openvswitch: netlink: Message has 4096 unknown bytes. [ 139.602247][ T8939] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.642966][ T6180] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.650147][ T6180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.672375][ T6180] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.679542][ T6180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.758802][ T8939] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 139.920462][ T8939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.954580][ T8939] veth0_vlan: entered promiscuous mode [ 139.987623][ T9205] netlink: 16 bytes leftover after parsing attributes in process `syz.2.857'. [ 139.994938][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 140.011399][ T8939] veth1_vlan: entered promiscuous mode [ 140.066593][ T53] Bluetooth: hci2: command tx timeout [ 140.112369][ T8939] veth0_macvtap: entered promiscuous mode [ 140.128918][ T8939] veth1_macvtap: entered promiscuous mode [ 140.168322][ T8939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.193187][ T8939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.216693][ T8939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.246542][ T8939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.267556][ T9213] netlink: 84 bytes leftover after parsing attributes in process `syz.3.861'. [ 140.278345][ T8939] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.288368][ T8939] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.298283][ T8939] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.307789][ T8939] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.417771][ T6185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.418461][ T6202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.431824][ T6185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.435486][ T6202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.531081][ T9217] netlink: 'syz.3.863': attribute type 5 has an invalid length. [ 140.634966][ T5894] tipc: Node number set to 2886997162 [ 140.664339][ T9229] x_tables: duplicate underflow at hook 1 [ 140.911289][ T9243] netlink: 'syz.4.872': attribute type 1 has an invalid length. [ 140.920246][ T9243] netlink: 9320 bytes leftover after parsing attributes in process `syz.4.872'. [ 140.929937][ T9243] netlink: 'syz.4.872': attribute type 1 has an invalid length. [ 141.024856][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 141.301688][ T9267] hsr0: entered allmulticast mode [ 141.315766][ T9267] hsr_slave_0: entered allmulticast mode [ 141.321612][ T9267] hsr_slave_1: entered allmulticast mode [ 141.493868][ C1] Unknown status report in ack skb [ 141.670283][ T9290] openvswitch: netlink: ERSPAN option length err (len 3060, max 255). [ 141.794615][ T9303] xt_SECMARK: invalid mode: 0 [ 141.852858][ T9305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.910533][ T9305] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.997183][ T9307] __nla_validate_parse: 5 callbacks suppressed [ 141.997203][ T9307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.893'. [ 142.024548][ T9308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.893'. [ 142.064941][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 142.100890][ T6198] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.026975][ T9317] netlink: 'syz.4.897': attribute type 1 has an invalid length. [ 143.039950][ T9317] netlink: 224 bytes leftover after parsing attributes in process `syz.4.897'. [ 143.105034][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 143.173065][ T9322] tap0: tun_chr_ioctl cmd 1074025676 [ 143.180391][ T9322] tap0: owner set to 0 [ 143.185842][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 143.187192][ T9326] netlink: 24 bytes leftover after parsing attributes in process `syz.2.898'. [ 143.213333][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 143.236535][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 143.253695][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 143.275329][ T5846] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 143.292958][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 143.529101][ T6198] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.658815][ T6198] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.663540][ T9345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.751402][ T9342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.778047][ T6198] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.816854][ T9342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.051721][ T9349] netlink: 'syz.0.904': attribute type 5 has an invalid length. [ 144.060979][ T9349] netlink: 140 bytes leftover after parsing attributes in process `syz.0.904'. [ 144.087737][ T6198] bridge_slave_1: left allmulticast mode [ 144.093431][ T6198] bridge_slave_1: left promiscuous mode [ 144.121775][ T6198] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.140377][ T6198] bridge_slave_0: left allmulticast mode [ 144.154068][ T6198] bridge_slave_0: left promiscuous mode [ 144.154917][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 144.166974][ T6198] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.569638][ T6198] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.581922][ T6198] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.592617][ T6198] bond0 (unregistering): Released all slaves [ 144.751575][ T9370] netlink: 40 bytes leftover after parsing attributes in process `syz.4.909'. [ 144.844784][ T9379] tipc: Started in network mode [ 144.857532][ T9379] tipc: Node identity ac1414aa, cluster identity 4711 [ 144.884958][ T9379] tipc: Enabled bearer , priority 10 [ 144.969415][ T9325] chnl_net:caif_netlink_parms(): no params data found [ 145.184870][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 145.244238][ T9325] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.254825][ T9325] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.262424][ T9325] bridge_slave_0: entered allmulticast mode [ 145.298010][ T9325] bridge_slave_0: entered promiscuous mode [ 145.312380][ T9394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.916'. [ 145.322789][ T9394] netlink: 72 bytes leftover after parsing attributes in process `syz.0.916'. [ 145.356638][ T5846] Bluetooth: hci2: command tx timeout [ 145.372229][ T6198] hsr_slave_0: left promiscuous mode [ 145.454491][ T6198] hsr_slave_1: left promiscuous mode [ 145.461623][ T6198] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.469965][ T6198] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.480809][ T6198] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.492639][ T9401] netlink: 'syz.0.919': attribute type 1 has an invalid length. [ 145.501709][ T6198] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.509827][ T9401] netlink: 9116 bytes leftover after parsing attributes in process `syz.0.919'. [ 145.519855][ T9401] netlink: 'syz.0.919': attribute type 2 has an invalid length. [ 145.528376][ T9401] netlink: 177 bytes leftover after parsing attributes in process `syz.0.919'. [ 145.552831][ T6198] veth1_macvtap: left promiscuous mode [ 145.566519][ T6198] veth0_macvtap: left promiscuous mode [ 145.572276][ T6198] veth1_vlan: left promiscuous mode [ 145.578198][ T6198] veth0_vlan: left promiscuous mode [ 146.008521][ T5921] tipc: Node number set to 2886997162 [ 146.201201][ T6198] team0 (unregistering): Port device team_slave_1 removed [ 146.230812][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 146.280367][ T6198] team0 (unregistering): Port device team_slave_0 removed [ 146.664151][ T9325] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.672158][ T9325] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.681630][ T9325] bridge_slave_1: entered allmulticast mode [ 146.689317][ T9325] bridge_slave_1: entered promiscuous mode [ 146.706383][ T9400] netlink: 'syz.0.919': attribute type 18 has an invalid length. [ 146.764196][ T9325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.812854][ T9429] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.847695][ T9325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.919543][ T9325] team0: Port device team_slave_0 added [ 146.939714][ T9431] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 146.965280][ T9431] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 146.978138][ T9325] team0: Port device team_slave_1 added [ 147.075387][ T9440] xt_CT: You must specify a L4 protocol and not use inversions on it [ 147.077219][ T9325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.097553][ T9325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.127406][ T9325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.169837][ T9325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.183800][ T9325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.238066][ T9325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.264821][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 147.316262][ T9454] FAULT_INJECTION: forcing a failure. [ 147.316262][ T9454] name failslab, interval 1, probability 0, space 0, times 1 [ 147.331735][ T9454] CPU: 1 UID: 0 PID: 9454 Comm: syz.3.932 Not tainted 6.12.0-rc5-syzkaller-00198-g9eaff63bfb59 #0 [ 147.342370][ T9454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 147.352457][ T9454] Call Trace: [ 147.355746][ T9454] [ 147.358691][ T9454] dump_stack_lvl+0x241/0x360 [ 147.363410][ T9454] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.368605][ T9454] ? __pfx__printk+0x10/0x10 [ 147.373211][ T9454] ? ref_tracker_alloc+0x332/0x490 [ 147.378353][ T9454] should_fail_ex+0x3b0/0x4e0 [ 147.380939][ T9455] __nla_validate_parse: 2 callbacks suppressed [ 147.380955][ T9455] netlink: 172 bytes leftover after parsing attributes in process `syz.2.930'. [ 147.383038][ T9454] ? skb_clone+0x20c/0x390 [ 147.383066][ T9454] should_failslab+0xac/0x100 [ 147.383090][ T9454] ? skb_clone+0x20c/0x390 [ 147.411679][ T9454] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 147.417092][ T9454] skb_clone+0x20c/0x390 [ 147.421371][ T9454] __netlink_deliver_tap+0x3cc/0x7c0 [ 147.425354][ T5846] Bluetooth: hci2: command tx timeout [ 147.426673][ T9454] ? netlink_deliver_tap+0x2e/0x1b0 [ 147.437238][ T9454] netlink_deliver_tap+0x19d/0x1b0 [ 147.442382][ T9454] netlink_unicast+0x7c4/0x990 [ 147.447193][ T9454] ? __pfx_netlink_unicast+0x10/0x10 [ 147.452516][ T9454] ? __virt_addr_valid+0x183/0x530 [ 147.457667][ T9454] ? __check_object_size+0x48e/0x900 [ 147.462984][ T9454] netlink_sendmsg+0x8e4/0xcb0 [ 147.467791][ T9454] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.473111][ T9454] ? aa_sock_msg_perm+0x91/0x160 [ 147.478088][ T9454] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.483396][ T9454] __sock_sendmsg+0x221/0x270 [ 147.488101][ T9454] ____sys_sendmsg+0x52a/0x7e0 [ 147.492901][ T9454] ? __pfx_____sys_sendmsg+0x10/0x10 [ 147.498215][ T9454] __sys_sendmmsg+0x3ab/0x730 [ 147.502940][ T9454] ? __pfx___sys_sendmmsg+0x10/0x10 [ 147.508164][ T9454] ? __pfx_lock_release+0x10/0x10 [ 147.513202][ T9454] ? kstrtouint_from_user+0x128/0x190 [ 147.518624][ T9454] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 147.524539][ T9454] ? ksys_write+0x229/0x2b0 [ 147.529056][ T9454] ? __pfx_lock_release+0x10/0x10 [ 147.534091][ T9454] ? vfs_write+0x730/0xd30 [ 147.538522][ T9454] ? __mutex_unlock_slowpath+0x21d/0x750 [ 147.544173][ T9454] ? __fget_files+0x3f3/0x470 [ 147.548857][ T9454] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 147.554848][ T9454] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 147.561200][ T9454] ? do_syscall_64+0x100/0x230 [ 147.565980][ T9454] __x64_sys_sendmmsg+0xa0/0xb0 [ 147.570847][ T9454] do_syscall_64+0xf3/0x230 [ 147.575353][ T9454] ? clear_bhb_loop+0x35/0x90 [ 147.580051][ T9454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.585989][ T9454] RIP: 0033:0x7fa4e337e719 [ 147.590430][ T9454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.610041][ T9454] RSP: 002b:00007fa4e4142038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 147.618486][ T9454] RAX: ffffffffffffffda RBX: 00007fa4e3535f80 RCX: 00007fa4e337e719 [ 147.626483][ T9454] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 147.634476][ T9454] RBP: 00007fa4e4142090 R08: 0000000000000000 R09: 0000000000000000 [ 147.642451][ T9454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.650418][ T9454] R13: 0000000000000000 R14: 00007fa4e3535f80 R15: 00007ffe261cde68 [ 147.658414][ T9454] [ 147.709374][ T9325] hsr_slave_0: entered promiscuous mode [ 147.735636][ T9325] hsr_slave_1: entered promiscuous mode [ 147.753929][ T9325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 147.774932][ T9325] Cannot create hsr debugfs directory [ 148.120648][ T9490] netlink: 5128 bytes leftover after parsing attributes in process `syz.4.939'. [ 148.151498][ T9490] netlink: 5128 bytes leftover after parsing attributes in process `syz.4.939'. [ 148.194876][ T9490] netlink: 332 bytes leftover after parsing attributes in process `syz.4.939'. [ 148.237129][ T9494] netlink: 44 bytes leftover after parsing attributes in process `syz.2.941'. [ 148.276915][ T9494] netlink: 21 bytes leftover after parsing attributes in process `syz.2.941'. [ 148.301544][ T9494] netlink: 21 bytes leftover after parsing attributes in process `syz.2.941'. [ 148.310609][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 148.378418][ T9498] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 148.413554][ T9504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.943'. [ 148.429976][ T9506] FAULT_INJECTION: forcing a failure. [ 148.429976][ T9506] name failslab, interval 1, probability 0, space 0, times 0 [ 148.476767][ T9506] CPU: 1 UID: 0 PID: 9506 Comm: syz.4.944 Not tainted 6.12.0-rc5-syzkaller-00198-g9eaff63bfb59 #0 [ 148.487427][ T9506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 148.497513][ T9506] Call Trace: [ 148.500815][ T9506] [ 148.503767][ T9506] dump_stack_lvl+0x241/0x360 [ 148.508520][ T9506] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.513765][ T9506] ? __pfx__printk+0x10/0x10 [ 148.518387][ T9506] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 148.524399][ T9506] ? __pfx___might_resched+0x10/0x10 [ 148.529723][ T9506] should_fail_ex+0x3b0/0x4e0 [ 148.534433][ T9506] should_failslab+0xac/0x100 [ 148.539135][ T9506] ? __alloc_skb+0x1c3/0x440 [ 148.543747][ T9506] kmem_cache_alloc_node_noprof+0x71/0x320 [ 148.549604][ T9506] __alloc_skb+0x1c3/0x440 [ 148.554054][ T9506] ? __pfx___alloc_skb+0x10/0x10 [ 148.559032][ T9506] ? netlink_ack_tlv_len+0x6e/0x200 [ 148.564248][ T9506] netlink_ack+0x13f/0xa30 [ 148.568670][ T9506] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 148.574150][ T9506] netlink_rcv_skb+0x262/0x430 [ 148.578930][ T9506] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 148.584405][ T9506] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 148.589711][ T9506] ? netlink_deliver_tap+0x2e/0x1b0 [ 148.594946][ T9506] netlink_unicast+0x7f6/0x990 [ 148.599728][ T9506] ? __pfx_netlink_unicast+0x10/0x10 [ 148.605026][ T9506] ? __virt_addr_valid+0x183/0x530 [ 148.610247][ T9506] ? __check_object_size+0x48e/0x900 [ 148.615547][ T9506] netlink_sendmsg+0x8e4/0xcb0 [ 148.620343][ T9506] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.625657][ T9506] ? aa_sock_msg_perm+0x91/0x160 [ 148.630625][ T9506] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.635944][ T9506] __sock_sendmsg+0x221/0x270 [ 148.640658][ T9506] ____sys_sendmsg+0x52a/0x7e0 [ 148.645470][ T9506] ? __pfx_____sys_sendmsg+0x10/0x10 [ 148.650802][ T9506] __sys_sendmmsg+0x3ab/0x730 [ 148.655520][ T9506] ? __pfx___sys_sendmmsg+0x10/0x10 [ 148.660739][ T9506] ? __pfx_lock_release+0x10/0x10 [ 148.665784][ T9506] ? kstrtouint_from_user+0x128/0x190 [ 148.672412][ T9506] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 148.678317][ T9506] ? ksys_write+0x229/0x2b0 [ 148.682833][ T9506] ? __pfx_lock_release+0x10/0x10 [ 148.687877][ T9506] ? vfs_write+0x730/0xd30 [ 148.692323][ T9506] ? __mutex_unlock_slowpath+0x21d/0x750 [ 148.697972][ T9506] ? __fget_files+0x3f3/0x470 [ 148.702670][ T9506] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 148.708652][ T9506] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 148.715027][ T9506] ? do_syscall_64+0x100/0x230 [ 148.719911][ T9506] __x64_sys_sendmmsg+0xa0/0xb0 [ 148.724792][ T9506] do_syscall_64+0xf3/0x230 [ 148.729316][ T9506] ? clear_bhb_loop+0x35/0x90 [ 148.733990][ T9506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.739887][ T9506] RIP: 0033:0x7f058157e719 [ 148.744335][ T9506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.764046][ T9506] RSP: 002b:00007f05823c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 148.772491][ T9506] RAX: ffffffffffffffda RBX: 00007f0581735f80 RCX: 00007f058157e719 [ 148.780474][ T9506] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 148.788469][ T9506] RBP: 00007f05823c9090 R08: 0000000000000000 R09: 0000000000000000 [ 148.796462][ T9506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.804452][ T9506] R13: 0000000000000000 R14: 00007f0581735f80 R15: 00007ffdf6b31b08 [ 148.812429][ T9506] [ 148.843487][ T9515] netlink: 216 bytes leftover after parsing attributes in process `syz.0.946'. [ 148.935161][ T9519] netlink: 'syz.2.948': attribute type 21 has an invalid length. [ 149.102648][ T9530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.952'. [ 149.136715][ T9530] netlink: 'syz.2.952': attribute type 4 has an invalid length. [ 149.161456][ T9325] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 149.209624][ T9325] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 149.239835][ T9325] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 149.290937][ T9325] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 149.344936][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 149.388930][ T9325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.407070][ T9325] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.461441][ T9544] tipc: Started in network mode [ 149.467648][ T9544] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 149.476992][ T9544] tipc: Enabling of bearer rejected, failed to enable media [ 149.505203][ T5846] Bluetooth: hci2: command tx timeout [ 150.386442][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 150.579572][ T9556] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 151.080577][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.087803][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.097110][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.104202][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.424832][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 151.595202][ T5846] Bluetooth: hci2: command tx timeout [ 151.709735][ T9596] openvswitch: netlink: Actions may not be safe on all matching packets [ 151.848875][ T9325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.949145][ T9325] veth0_vlan: entered promiscuous mode [ 152.000021][ T9325] veth1_vlan: entered promiscuous mode [ 152.066769][ T9325] veth0_macvtap: entered promiscuous mode [ 152.081111][ T9325] veth1_macvtap: entered promiscuous mode [ 152.146058][ T9325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.180573][ T9325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.198491][ T9325] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.212318][ T9325] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.223798][ T9325] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.233624][ T9325] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.358553][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.381536][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.431934][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.441747][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.464811][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 152.517989][ T9628] netlink: 'syz.0.980': attribute type 21 has an invalid length. [ 152.698046][ T9636] __nla_validate_parse: 3 callbacks suppressed [ 152.698066][ T9636] netlink: 48 bytes leftover after parsing attributes in process `syz.4.984'. [ 152.721231][ T9637] netlink: 48 bytes leftover after parsing attributes in process `syz.4.984'. [ 152.792540][ T9640] netlink: 20 bytes leftover after parsing attributes in process `syz.0.985'. [ 152.833305][ T9642] netlink: 40 bytes leftover after parsing attributes in process `syz.4.986'. [ 152.901422][ T9645] xt_socket: unknown flags 0x3c [ 153.119067][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.443636][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.504911][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 153.880811][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.075498][ T9662] bond3: entered promiscuous mode [ 154.081253][ T9662] bond3: entered allmulticast mode [ 154.087027][ T9662] 8021q: adding VLAN 0 to HW filter on device bond3 [ 154.256014][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 154.272144][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 154.281248][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 154.295924][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 154.311307][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 154.320754][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 154.353075][ T9685] Bluetooth: MGMT ver 1.23 [ 154.436827][ T9689] openvswitch: netlink: Actions may not be safe on all matching packets [ 154.534371][ T9693] xt_hashlimit: max too large, truncated to 1048576 [ 154.554775][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 154.646351][ T25] hid-generic 0005:07C0:FFF9.0001: item fetching failed at offset 0/1 [ 154.655493][ T25] hid-generic 0005:07C0:FFF9.0001: probe with driver hid-generic failed with error -22 [ 154.757023][ T9705] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 154.792632][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.901277][ T9704] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 155.076526][ T9672] chnl_net:caif_netlink_parms(): no params data found [ 155.168250][ T9720] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1005'. [ 155.184080][ T9726] netlink: 134744 bytes leftover after parsing attributes in process `syz.3.1004'. [ 155.289435][ T11] bridge_slave_1: left allmulticast mode [ 155.295549][ T11] bridge_slave_1: left promiscuous mode [ 155.303686][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.348815][ T11] bridge_slave_0: left allmulticast mode [ 155.361811][ T11] bridge_slave_0: left promiscuous mode [ 155.369719][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.390157][ T9738] openvswitch: netlink: Actions may not be safe on all matching packets [ 155.404559][ T9741] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1009'. [ 155.585051][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 155.749638][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.761376][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.773369][ T11] bond0 (unregistering): Released all slaves [ 155.799188][ T9736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1008'. [ 155.808707][ T9735] netlink: 1044 bytes leftover after parsing attributes in process `syz.0.1009'. [ 156.008489][ T9750] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 156.086921][ T9672] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.102390][ T9672] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.110496][ T9672] bridge_slave_0: entered allmulticast mode [ 156.126026][ T9672] bridge_slave_0: entered promiscuous mode [ 156.196661][ T9672] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.203809][ T9672] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.221116][ T9672] bridge_slave_1: entered allmulticast mode [ 156.231798][ T9672] bridge_slave_1: entered promiscuous mode [ 156.420797][ T9672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.478208][ T53] Bluetooth: hci2: command tx timeout [ 156.520238][ T9672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.552430][ T9773] netlink: 'syz.3.1021': attribute type 9 has an invalid length. [ 156.575182][ T9773] netlink: 134660 bytes leftover after parsing attributes in process `syz.3.1021'. [ 156.624839][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 156.681051][ T11] hsr_slave_0: left promiscuous mode [ 156.694232][ T11] hsr_slave_1: left promiscuous mode [ 156.722886][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.733992][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.760629][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.778363][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.803350][ T11] veth1_macvtap: left promiscuous mode [ 156.812293][ T11] veth0_macvtap: left promiscuous mode [ 156.823347][ T11] veth1_vlan: left promiscuous mode [ 156.828992][ T11] veth0_vlan: left promiscuous mode [ 157.356716][ T11] team0 (unregistering): Port device team_slave_1 removed [ 157.398962][ T11] team0 (unregistering): Port device team_slave_0 removed [ 157.674832][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 157.783029][ T9672] team0: Port device team_slave_0 added [ 157.798711][ T9786] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1026'. [ 157.809892][ T9672] team0: Port device team_slave_1 added [ 157.924505][ T9672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.955103][ T9672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.002406][ T9672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.022519][ T9672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.033779][ T9672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.068374][ T9672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.252971][ T9814] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1033'. [ 158.321769][ T9672] hsr_slave_0: entered promiscuous mode [ 158.333669][ T9672] hsr_slave_1: entered promiscuous mode [ 158.354912][ T9672] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.362527][ T9672] Cannot create hsr debugfs directory [ 158.378903][ T9817] FAULT_INJECTION: forcing a failure. [ 158.378903][ T9817] name failslab, interval 1, probability 0, space 0, times 0 [ 158.397797][ T9817] CPU: 1 UID: 0 PID: 9817 Comm: syz.2.1036 Not tainted 6.12.0-rc5-syzkaller-00198-g9eaff63bfb59 #0 [ 158.408521][ T9817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 158.418606][ T9817] Call Trace: [ 158.421910][ T9817] [ 158.424866][ T9817] dump_stack_lvl+0x241/0x360 [ 158.429590][ T9817] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.434819][ T9817] ? __pfx__printk+0x10/0x10 [ 158.439440][ T9817] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 158.444912][ T9817] ? __pfx___might_resched+0x10/0x10 [ 158.450209][ T9817] ? __mutex_lock+0x2ef/0xd70 [ 158.454897][ T9817] should_fail_ex+0x3b0/0x4e0 [ 158.459588][ T9817] should_failslab+0xac/0x100 [ 158.464264][ T9817] ? tcf_chain_create+0xb2/0x310 [ 158.469295][ T9817] __kmalloc_cache_noprof+0x6c/0x2c0 [ 158.474587][ T9817] tcf_chain_create+0xb2/0x310 [ 158.479357][ T9817] __tcf_chain_get+0x117/0x3c0 [ 158.484130][ T9817] tc_new_tfilter+0x9f4/0x1b70 [ 158.488932][ T9817] ? __pfx_tc_new_tfilter+0x10/0x10 [ 158.494141][ T9817] ? rcu_read_unlock+0x87/0xa0 [ 158.498902][ T9817] ? __dev_queue_xmit+0x171d/0x3ed0 [ 158.504134][ T9817] ? __pfx_tc_new_tfilter+0x10/0x10 [ 158.509443][ T9817] rtnetlink_rcv_msg+0x791/0xcf0 [ 158.514387][ T9817] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 158.519507][ T9817] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 158.524983][ T9817] ? ref_tracker_free+0x643/0x7e0 [ 158.530030][ T9817] netlink_rcv_skb+0x1e3/0x430 [ 158.534808][ T9817] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 158.540281][ T9817] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 158.545585][ T9817] ? netlink_deliver_tap+0x2e/0x1b0 [ 158.550783][ T9817] netlink_unicast+0x7f6/0x990 [ 158.555561][ T9817] ? __pfx_netlink_unicast+0x10/0x10 [ 158.560848][ T9817] ? __virt_addr_valid+0x183/0x530 [ 158.565960][ T9817] ? __check_object_size+0x48e/0x900 [ 158.571245][ T9817] netlink_sendmsg+0x8e4/0xcb0 [ 158.576016][ T9817] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.581306][ T9817] ? aa_sock_msg_perm+0x91/0x160 [ 158.586245][ T9817] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.591527][ T9817] __sock_sendmsg+0x221/0x270 [ 158.596211][ T9817] ____sys_sendmsg+0x52a/0x7e0 [ 158.600982][ T9817] ? __pfx_____sys_sendmsg+0x10/0x10 [ 158.606269][ T9817] ? rcu_is_watching+0x15/0xb0 [ 158.611036][ T9817] ? __might_fault+0xaa/0x120 [ 158.615723][ T9817] __sys_sendmmsg+0x3ab/0x730 [ 158.620409][ T9817] ? __pfx___sys_sendmmsg+0x10/0x10 [ 158.625660][ T9817] ? __pfx_lock_release+0x10/0x10 [ 158.630772][ T9817] ? kstrtouint_from_user+0x128/0x190 [ 158.636168][ T9817] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 158.642060][ T9817] ? ksys_write+0x229/0x2b0 [ 158.646563][ T9817] ? __pfx_lock_release+0x10/0x10 [ 158.651593][ T9817] ? vfs_write+0x730/0xd30 [ 158.656016][ T9817] ? __mutex_unlock_slowpath+0x21d/0x750 [ 158.661657][ T9817] ? __fget_files+0x3f3/0x470 [ 158.666356][ T9817] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 158.672341][ T9817] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 158.678671][ T9817] ? do_syscall_64+0x100/0x230 [ 158.683433][ T9817] __x64_sys_sendmmsg+0xa0/0xb0 [ 158.688296][ T9817] do_syscall_64+0xf3/0x230 [ 158.692800][ T9817] ? clear_bhb_loop+0x35/0x90 [ 158.697482][ T9817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.703374][ T9817] RIP: 0033:0x7f261917e719 [ 158.707785][ T9817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.727405][ T9817] RSP: 002b:00007f2619eda038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 158.735827][ T9817] RAX: ffffffffffffffda RBX: 00007f2619335f80 RCX: 00007f261917e719 [ 158.743792][ T9817] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 158.751765][ T9817] RBP: 00007f2619eda090 R08: 0000000000000000 R09: 0000000000000000 [ 158.759738][ T9817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 158.767719][ T9817] R13: 0000000000000000 R14: 00007f2619335f80 R15: 00007ffd86029ee8 [ 158.775699][ T9817] [ 158.780662][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 158.795924][ T53] Bluetooth: hci2: command tx timeout [ 158.863035][ T9825] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1038'. [ 159.173635][ T9848] ieee802154 phy0 wpan0: encryption failed: -22 [ 159.399375][ T9867] netlink: 'syz.0.1049': attribute type 3 has an invalid length. [ 159.408211][ T9867] netlink: 'syz.0.1049': attribute type 3 has an invalid length. [ 159.413317][ T9862] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 159.688488][ T9672] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 159.713381][ T9672] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 159.753498][ T9672] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 159.797797][ T9672] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 159.824837][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 159.978875][ T9899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1058'. [ 160.008039][ T9899] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1058'. [ 160.037094][ T9672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.056898][ T9899] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 160.101660][ T9672] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.114175][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.121457][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.137370][ T9899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1058'. [ 160.154195][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.161401][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.165002][ T9899] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1058'. [ 160.281794][ T9908] ebtables: ebtables: counters copy to user failed while replacing table [ 160.462612][ T9672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.552384][ T9930] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1064'. [ 160.572444][ T9930] netlink: 'syz.3.1064': attribute type 1 has an invalid length. [ 160.595459][ T9930] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1064'. [ 160.622050][ T9672] veth0_vlan: entered promiscuous mode [ 160.624266][ T9933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1064'. [ 160.668414][ T9672] veth1_vlan: entered promiscuous mode [ 160.723655][ T9672] veth0_macvtap: entered promiscuous mode [ 160.740429][ T9672] veth1_macvtap: entered promiscuous mode [ 160.758975][ T9672] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.774326][ T9672] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.819406][ T9941] IPv6: sit1: Disabled Multicast RS [ 160.858565][ T9672] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.868118][ T9672] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.874907][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 160.877082][ T9672] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.890666][ T53] Bluetooth: hci2: command tx timeout [ 160.892445][ T9672] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.040909][ T9944] netlink: 'syz.2.1069': attribute type 10 has an invalid length. [ 161.073584][ T9944] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.080837][ T9944] bridge0: port 2(bridge_slave_1) entered listening state [ 161.088192][ T9944] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.095364][ T9944] bridge0: port 1(bridge_slave_0) entered listening state [ 161.139002][ T9944] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 161.153854][ T6214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.162328][ T6214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.194485][ T9955] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 161.274041][ T6214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.283417][ T6214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.577931][ T9982] netlink: 'syz.2.1078': attribute type 10 has an invalid length. [ 161.596929][ T9982] team0: Device ipvlan1 failed to register rx_handler [ 161.904901][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 162.850741][ T6202] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.954923][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 163.722755][T10066] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 163.984809][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 164.007579][ T6202] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.027754][T10073] netlink: 'syz.3.1109': attribute type 9 has an invalid length. [ 164.050060][T10073] __nla_validate_parse: 5 callbacks suppressed [ 164.050087][T10073] netlink: 134660 bytes leftover after parsing attributes in process `syz.3.1109'. [ 164.055356][T10076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1108'. [ 164.083977][T10076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1108'. [ 164.136299][T10079] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1109'. [ 164.149360][ T6202] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.158249][T10079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1109'. [ 164.272497][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 164.283391][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 164.293822][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 164.301288][T10073] nbd: must specify a size in bytes for the device [ 164.318357][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 164.333052][ T6202] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.347470][ T5846] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 164.357234][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 164.607668][T10087] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 164.681311][ T6202] bridge_slave_1: left allmulticast mode [ 164.692137][ T6202] bridge_slave_1: left promiscuous mode [ 164.704029][ T6202] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.724042][ T6202] bridge_slave_0: left allmulticast mode [ 164.747078][ T6202] bridge_slave_0: left promiscuous mode [ 164.793608][ T6202] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.034893][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 165.382406][ T6202] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.393665][ T6202] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.407108][ T6202] bond0 (unregistering): Released all slaves [ 165.700153][T10137] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1123'. [ 165.781418][T10081] chnl_net:caif_netlink_parms(): no params data found [ 165.781640][T10133] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1120'. [ 165.866643][T10144] netlink: 'syz.3.1125': attribute type 9 has an invalid length. [ 165.877613][T10144] netlink: 134660 bytes leftover after parsing attributes in process `syz.3.1125'. [ 166.065020][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 166.150408][T10154] geneve2: entered promiscuous mode [ 166.175258][T10154] geneve2: entered allmulticast mode [ 166.202110][T10159] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1128'. [ 166.211458][T10081] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.211538][T10081] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.211729][T10081] bridge_slave_0: entered allmulticast mode [ 166.212723][T10081] bridge_slave_0: entered promiscuous mode [ 166.242875][T10081] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.250618][T10081] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.258384][T10081] bridge_slave_1: entered allmulticast mode [ 166.272498][T10081] bridge_slave_1: entered promiscuous mode [ 166.320652][ T6202] hsr_slave_0: left promiscuous mode [ 166.328275][ T6202] hsr_slave_1: left promiscuous mode [ 166.342282][T10167] xt_policy: too many policy elements [ 166.417128][ T6202] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.418899][T10169] ieee802154 phy0 wpan0: encryption failed: -22 [ 166.425800][ T6202] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.456044][ T6202] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.464866][ T5846] Bluetooth: hci2: command tx timeout [ 166.482134][ T6202] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.524445][ T6202] veth1_macvtap: left promiscuous mode [ 166.535597][ T6202] veth0_macvtap: left promiscuous mode [ 166.541180][ T6202] veth1_vlan: left promiscuous mode [ 166.566654][ T6202] veth0_vlan: left promiscuous mode [ 166.710765][ T53] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 167.054197][ T6202] team0 (unregistering): Port device team_slave_1 removed [ 167.098236][ T6202] team0 (unregistering): Port device team_slave_0 removed [ 167.105568][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 167.541980][T10081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.581834][T10081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.613200][T10180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1132'. [ 167.758922][T10081] team0: Port device team_slave_0 added [ 167.810165][T10081] team0: Port device team_slave_1 added [ 167.846722][T10190] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 167.946707][T10081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.953701][T10081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.972579][T10199] xt_CT: No such helper "pptp" [ 168.075727][T10081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.110478][T10081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.143645][T10081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.174779][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 168.230030][T10081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.388233][T10081] hsr_slave_0: entered promiscuous mode [ 168.403084][T10081] hsr_slave_1: entered promiscuous mode [ 168.423744][T10081] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 168.441358][T10081] Cannot create hsr debugfs directory [ 168.455814][T10225] netlink: 'syz.4.1145': attribute type 1 has an invalid length. [ 168.469537][T10225] netlink: 'syz.4.1145': attribute type 1 has an invalid length. [ 168.479807][T10225] netlink: 'syz.4.1145': attribute type 1 has an invalid length. [ 168.493766][T10225] netlink: 'syz.4.1145': attribute type 1 has an invalid length. [ 168.519267][T10225] netlink: 'syz.4.1145': attribute type 1 has an invalid length. [ 168.544485][T10225] netlink: 'syz.4.1145': attribute type 1 has an invalid length. [ 168.555387][ T53] Bluetooth: hci2: command tx timeout [ 168.569357][T10225] netlink: 'syz.4.1145': attribute type 1 has an invalid length. [ 168.617364][T10225] netlink: 'syz.4.1145': attribute type 1 has an invalid length. [ 168.652545][T10225] netlink: 'syz.4.1145': attribute type 1 has an invalid length. [ 169.067416][T10254] dvmrp0: entered allmulticast mode [ 169.173034][T10260] __nla_validate_parse: 65 callbacks suppressed [ 169.173055][T10260] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1154'. [ 169.194855][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 169.225775][T10268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1157'. [ 169.258749][T10268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1157'. [ 169.340221][T10260] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1154'. [ 169.500013][T10286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1162'. [ 169.651932][T10289] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1165'. [ 169.667742][T10291] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 169.672618][T10292] netlink: 9412 bytes leftover after parsing attributes in process `syz.2.1163'. [ 169.711657][T10081] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 169.745893][T10081] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 169.808108][T10081] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 169.860680][T10081] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 170.122921][T10321] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1171'. [ 170.143068][T10081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.224871][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 170.253890][T10081] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.282528][ T6214] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.289772][ T6214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.338427][ T6214] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.345640][ T6214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.454213][T10336] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.461536][T10336] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.486756][T10339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.514052][T10339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.570149][T10345] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1177'. [ 170.630833][ T53] Bluetooth: hci2: command tx timeout [ 170.734206][T10360] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1179'. [ 170.760134][T10081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.817026][T10364] delete_channel: no stack [ 170.843776][T10081] veth0_vlan: entered promiscuous mode [ 170.878235][T10081] veth1_vlan: entered promiscuous mode [ 170.923774][T10081] veth0_macvtap: entered promiscuous mode [ 170.942163][T10081] veth1_macvtap: entered promiscuous mode [ 170.972697][T10081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.992959][T10081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.009393][T10081] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.021423][T10081] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.031633][T10081] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.041548][T10081] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.204669][ T6198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.233624][ T6198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.243342][T10382] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20002 [ 171.264833][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 171.282966][T10382] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 171.302027][T10382] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 171.328952][ T6185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.349698][ T6185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.559921][T10394] validate_nla: 57 callbacks suppressed [ 171.559942][T10394] netlink: 'syz.4.1191': attribute type 5 has an invalid length. [ 171.647076][T10400] sch_fq: defrate 0 ignored. [ 171.653521][T10403] netem: change failed [ 171.746787][T10410] netlink: 'syz.2.1196': attribute type 33 has an invalid length. [ 171.823077][T10408] openvswitch: netlink: nsh attribute has 10 unknown bytes. [ 171.831329][T10408] openvswitch: netlink: Actions may not be safe on all matching packets [ 172.218931][T10438] tipc: Enabling of bearer rejected, media not registered [ 172.304907][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 172.336966][T10443] gre0: entered promiscuous mode [ 172.341981][T10443] gre0: entered allmulticast mode [ 172.655376][T10456] xt_CT: No such helper "snmp_trap" [ 172.842989][ T6198] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.884392][T10463] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 173.355019][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 173.470749][ T6198] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.820666][ T6198] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.954513][ T6198] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.103739][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 174.113880][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 174.127426][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 174.150229][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 174.162503][ T5846] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 174.170474][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 174.268042][T10492] __nla_validate_parse: 17 callbacks suppressed [ 174.268062][T10492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1218'. [ 174.339672][T10492] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1218'. [ 174.356931][ T6198] bridge_slave_1: left allmulticast mode [ 174.372883][ T6198] bridge_slave_1: left promiscuous mode [ 174.379791][ T6198] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.387387][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 174.418594][ T6198] bridge_slave_0: left allmulticast mode [ 174.429963][ T6198] bridge_slave_0: left promiscuous mode [ 174.443150][ T6198] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.474297][T10501] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1223'. [ 174.870096][ T6198] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.882368][ T6198] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.894334][ T6198] bond0 (unregistering): Released all slaves [ 174.911610][T10509] IPv6: NLM_F_CREATE should be specified when creating new route [ 174.936990][T10500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.171377][T10498] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 175.244100][T10524] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1229'. [ 175.381250][T10531] No such timeout policy "syz0" [ 175.424773][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 175.493562][T10531] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20001 [ 175.511798][T10535] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1233'. [ 175.535196][T10535] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1233'. [ 175.681026][ T6198] hsr_slave_0: left promiscuous mode [ 175.701025][ T6198] hsr_slave_1: left promiscuous mode [ 175.719558][ T6198] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.735194][ T6198] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.752381][ T6198] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.766820][ T6198] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.799166][ T6198] veth1_macvtap: left promiscuous mode [ 175.810026][ T6198] veth0_macvtap: left promiscuous mode [ 175.826842][ T6198] veth1_vlan: left promiscuous mode [ 175.839002][ T6198] veth0_vlan: left promiscuous mode [ 176.001883][T10565] netlink: 'syz.3.1239': attribute type 1 has an invalid length. [ 176.010575][T10565] netlink: 9328 bytes leftover after parsing attributes in process `syz.3.1239'. [ 176.230886][ T5846] Bluetooth: hci2: command tx timeout [ 176.304359][ T6198] team0 (unregistering): Port device team_slave_1 removed [ 176.352242][ T6198] team0 (unregistering): Port device team_slave_0 removed [ 176.386009][ T5846] Bluetooth: hci1: command 0x0401 tx timeout [ 176.478145][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 176.769888][T10563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1237'. [ 176.879114][T10568] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1240'. [ 177.004126][T10482] chnl_net:caif_netlink_parms(): no params data found [ 177.197776][T10587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1245'. [ 177.312044][T10482] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.355216][T10482] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.383170][T10482] bridge_slave_0: entered allmulticast mode [ 177.400481][T10482] bridge_slave_0: entered promiscuous mode [ 177.427326][T10482] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.434670][T10482] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.444501][T10482] bridge_slave_1: entered allmulticast mode [ 177.453837][T10482] bridge_slave_1: entered promiscuous mode [ 177.504773][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 177.607181][T10482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.653732][T10482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.729552][T10482] team0: Port device team_slave_0 added [ 177.738938][T10482] team0: Port device team_slave_1 added [ 177.794502][T10615] netlink: 'syz.3.1251': attribute type 9 has an invalid length. [ 177.831572][T10482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.874605][T10482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.902785][T10482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.959278][T10482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.974363][T10482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.012395][T10482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.128855][T10630] netlink: 'syz.4.1258': attribute type 1 has an invalid length. [ 178.145575][T10630] netlink: 'syz.4.1258': attribute type 1 has an invalid length. [ 178.185433][T10633] netlink: 'syz.4.1258': attribute type 1 has an invalid length. [ 178.193228][T10633] netlink: 'syz.4.1258': attribute type 1 has an invalid length. [ 178.220619][T10622] syzkaller0: entered promiscuous mode [ 178.237682][T10622] syzkaller0: entered allmulticast mode [ 178.258740][T10482] hsr_slave_0: entered promiscuous mode [ 178.300700][T10482] hsr_slave_1: entered promiscuous mode [ 178.306804][ T5846] Bluetooth: hci2: command tx timeout [ 178.341943][T10482] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.350459][T10482] Cannot create hsr debugfs directory [ 178.551350][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 179.594791][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 180.399185][ T5847] Bluetooth: hci2: command tx timeout [ 180.437169][T10653] __nla_validate_parse: 7 callbacks suppressed [ 180.437189][T10653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1268'. [ 180.458883][T10653] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 180.470030][T10653] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 180.620767][T10682] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1276'. [ 180.634776][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 180.682956][T10687] netlink: 'syz.2.1277': attribute type 13 has an invalid length. [ 180.801869][T10691] tipc: Enabling of bearer rejected, failed to enable media [ 180.863445][T10697] net veth1_virt_wifi p: renamed from virt_wifi0 [ 181.191895][T10718] bridge0: port 3(vlan2) entered blocking state [ 181.195932][ T5847] Bluetooth: hci3: command 0x0406 tx timeout [ 181.200603][T10718] bridge0: port 3(vlan2) entered disabled state [ 181.204329][ T5847] Bluetooth: hci1: command 0x0401 tx timeout [ 181.211008][T10718] vlan2: entered allmulticast mode [ 181.262353][T10718] vlan2: left allmulticast mode [ 181.664892][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 181.689880][T10482] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 181.717334][T10746] netlink: 'syz.2.1296': attribute type 3 has an invalid length. [ 181.737721][T10482] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 181.757670][T10482] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 181.780621][T10748] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1295'. [ 181.795211][T10748] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1295'. [ 181.815530][T10748] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1295'. [ 181.830218][T10482] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 182.093329][T10482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.121693][T10482] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.163322][ T6214] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.170526][ T6214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.207849][ T6185] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.215013][ T6185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.465629][ T53] Bluetooth: hci2: command tx timeout [ 182.501797][T10794] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1307'. [ 182.522890][T10794] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1307'. [ 182.617042][T10482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.704853][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 182.712329][T10482] veth0_vlan: entered promiscuous mode [ 182.743498][T10482] veth1_vlan: entered promiscuous mode [ 182.793084][T10482] veth0_macvtap: entered promiscuous mode [ 182.822838][T10482] veth1_macvtap: entered promiscuous mode [ 182.858630][T10482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.873413][T10482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.894647][T10482] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.904185][T10482] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.921312][T10482] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.932572][T10482] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.229125][ T6185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.252456][ T6185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.296248][T10821] netlink: 'syz.4.1316': attribute type 10 has an invalid length. [ 183.307719][T10821] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1316'. [ 183.319593][T10821] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 183.343414][ T6214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.374815][ T6214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.388949][T10821] netlink: 'syz.4.1316': attribute type 13 has an invalid length. [ 183.412166][T10821] veth0_macvtap: left promiscuous mode [ 183.424638][T10821] macvtap0: entered allmulticast mode [ 183.440607][T10821] macvtap0: refused to change device tx_queue_len [ 183.681292][T10835] macvlan0: entered allmulticast mode [ 183.686826][T10835] veth1_vlan: entered allmulticast mode [ 183.705926][T10835] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1320'. [ 183.740280][T10839] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1319'. [ 183.754862][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 183.762468][T10839] openvswitch: netlink: Tunnel attr 80 out of range max 16 [ 184.358495][T10879] netlink: 'syz.4.1335': attribute type 4 has an invalid length. [ 184.379404][ T8] IPVS: starting estimator thread 0... [ 184.389614][T10884] tipc: Enabling of bearer rejected, already enabled [ 184.491099][T10891] openvswitch: netlink: Actions may not be safe on all matching packets [ 184.504874][T10885] IPVS: using max 18 ests per chain, 43200 per kthread [ 184.621452][ T6185] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.784896][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 185.569675][ T6185] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.824775][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 185.855931][T10902] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 185.941110][T10913] openvswitch: netlink: Missing key (keys=40, expected=80) [ 186.013825][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 186.024293][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 186.043615][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 186.060704][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 186.076848][T10927] sctp: [Deprecated]: syz.4.1349 (pid 10927) Use of struct sctp_assoc_value in delayed_ack socket option. [ 186.076848][T10927] Use struct sctp_sack_info instead [ 186.096168][ T5847] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 186.113408][T10933] __nla_validate_parse: 4 callbacks suppressed [ 186.113428][T10933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1348'. [ 186.130021][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 186.275431][ T6185] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.447881][T10956] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1357'. [ 186.461256][ T6185] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.522187][T10960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1358'. [ 186.566069][T10964] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1357'. [ 186.597811][T10964] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1357'. [ 186.732696][T10973] xt_TCPMSS: Only works on TCP SYN packets [ 186.765237][ T6185] bridge_slave_1: left allmulticast mode [ 186.772569][ T6185] bridge_slave_1: left promiscuous mode [ 186.782819][ T6185] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.799466][ T6185] bridge_slave_0: left allmulticast mode [ 186.806161][ T6185] bridge_slave_0: left promiscuous mode [ 186.812002][ T6185] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.864827][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 187.212656][ T6185] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.224595][ T6185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.237230][ T6185] bond0 (unregistering): Released all slaves [ 187.259505][T10984] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1363'. [ 187.310751][T10988] netlink: 'syz.3.1364': attribute type 2 has an invalid length. [ 187.597435][T11005] netlink: 'syz.3.1369': attribute type 4 has an invalid length. [ 187.639809][T11009] xt_hashlimit: size too large, truncated to 1048576 [ 187.661250][T11009] xt_hashlimit: max too large, truncated to 1048576 [ 187.673098][T11009] xt_hashlimit: overflow, try lower: 0/0 [ 187.699440][T11009] netlink: 'syz.2.1368': attribute type 1 has an invalid length. [ 187.729981][T11009] netlink: 9312 bytes leftover after parsing attributes in process `syz.2.1368'. [ 187.775513][T11009] netlink: 'syz.2.1368': attribute type 1 has an invalid length. [ 187.777768][T11021] xt_CT: You must specify a L4 protocol and not use inversions on it [ 187.818387][T11005] netlink: 'syz.3.1369': attribute type 4 has an invalid length. [ 187.831142][T11014] syzkaller1: entered promiscuous mode [ 187.890145][T11008] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1369'. [ 187.901125][T11025] netlink: 288 bytes leftover after parsing attributes in process `syz.2.1368'. [ 187.910337][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 187.918054][ T53] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 187.972146][T10919] chnl_net:caif_netlink_parms(): no params data found [ 188.129463][ T6185] hsr_slave_0: left promiscuous mode [ 188.138721][ T6185] hsr_slave_1: left promiscuous mode [ 188.146787][ T6185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.154555][ T6185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.172267][ T6185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.183909][ T6185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.220605][ T6185] veth1_macvtap: left promiscuous mode [ 188.229186][ T6185] veth0_macvtap: left promiscuous mode [ 188.235400][ T53] Bluetooth: hci2: command tx timeout [ 188.249122][ T6185] veth1_vlan: left promiscuous mode [ 188.260844][ T6185] veth0_vlan: left promiscuous mode [ 188.698851][T11072] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1381'. [ 188.954778][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 189.114254][ T6185] team0 (unregistering): Port device team_slave_1 removed [ 189.163521][ T6185] team0 (unregistering): Port device team_slave_0 removed [ 189.659867][T11033] pim6reg1: entered promiscuous mode [ 189.665832][T11033] pim6reg1: entered allmulticast mode [ 189.695395][T11084] netlink: 'syz.0.1383': attribute type 4 has an invalid length. [ 189.716063][T11093] netlink: 'syz.0.1383': attribute type 10 has an invalid length. [ 189.757198][T11093] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 189.984907][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 190.048385][T10919] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.077564][T10919] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.078509][T11118] xt_SECMARK: invalid mode: 0 [ 190.124019][T10919] bridge_slave_0: entered allmulticast mode [ 190.131907][T10919] bridge_slave_0: entered promiscuous mode [ 190.144154][T10919] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.178593][T10919] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.206741][T10919] bridge_slave_1: entered allmulticast mode [ 190.223812][T10919] bridge_slave_1: entered promiscuous mode [ 190.240652][T11133] openvswitch: netlink: Actions may not be safe on all matching packets [ 190.305665][ T53] Bluetooth: hci2: command tx timeout [ 190.373538][T10919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.386478][T10919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.526176][ T968] hid-generic 0005:0458:FFF9.0002: unknown main item tag 0xe [ 190.533694][ T968] hid-generic 0005:0458:FFF9.0002: item fetching failed at offset 3/4 [ 190.542533][ T968] hid-generic 0005:0458:FFF9.0002: probe with driver hid-generic failed with error -22 [ 190.565737][T10919] team0: Port device team_slave_0 added [ 190.575772][T10919] team0: Port device team_slave_1 added [ 190.606420][T11152] netlink: zone id is out of range [ 190.611563][T11152] netlink: zone id is out of range [ 190.622108][T11152] netlink: zone id is out of range [ 190.628669][T11152] netlink: zone id is out of range [ 190.633819][T11152] netlink: zone id is out of range [ 190.639617][T11152] netlink: zone id is out of range [ 190.801469][T10919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.812271][T10919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.862777][T10919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.918880][T10919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.947103][T10919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.976933][T10919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.028922][T11179] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 191.052506][T11188] netlink: 'syz.4.1408': attribute type 1 has an invalid length. [ 191.088538][T10919] hsr_slave_0: entered promiscuous mode [ 191.114244][T10919] hsr_slave_1: entered promiscuous mode [ 191.133268][T10919] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 191.145431][T10919] Cannot create hsr debugfs directory [ 191.167673][T11192] __nla_validate_parse: 6 callbacks suppressed [ 191.167693][T11192] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1410'. [ 191.347412][T11202] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1413'. [ 191.362640][T11204] xt_policy: neither incoming nor outgoing policy selected [ 191.387247][T11207] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1415'. [ 191.731161][T11230] x_tables: duplicate underflow at hook 1 [ 191.979108][T10919] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 192.027894][T10919] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 192.051638][T10919] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 192.078987][T10919] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 192.103338][T11256] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1429'. [ 192.146414][T11258] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1430'. [ 192.312911][T10919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.354010][T10919] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.385044][ T53] Bluetooth: hci2: command tx timeout [ 192.418845][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.426022][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.489999][ T6185] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.497233][ T6185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.830516][T11297] netlink: 'syz.3.1442': attribute type 10 has an invalid length. [ 192.870121][T11297] geneve0: entered promiscuous mode [ 192.962355][T10919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.047795][T11314] xt_TPROXY: Can be used only with -p tcp or -p udp [ 193.099036][T11316] ip6_vti0: entered promiscuous mode [ 193.105440][ C1] net_ratelimit: 74 callbacks suppressed [ 193.105458][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 193.130023][T11316] vlan3: entered promiscuous mode [ 193.141659][T11316] vlan3: entered allmulticast mode [ 193.159989][T11316] ip6_vti0: entered allmulticast mode [ 193.218303][T10919] veth0_vlan: entered promiscuous mode [ 193.241688][T10919] veth1_vlan: entered promiscuous mode [ 193.299453][T11331] openvswitch: netlink: Missing key (keys=40, expected=100) [ 193.366762][T10919] veth0_macvtap: entered promiscuous mode [ 193.385642][T10919] veth1_macvtap: entered promiscuous mode [ 193.438623][T10919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.456893][T10919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.488840][T10919] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.507630][T10919] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.527086][T10919] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.545370][T10919] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.573218][T11351] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1458'. [ 193.580971][T11346] netlink: 'syz.2.1456': attribute type 2 has an invalid length. [ 193.604090][T11351] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1458'. [ 193.648464][T11351] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1458'. [ 193.691884][T11351] netlink: 'syz.0.1458': attribute type 3 has an invalid length. [ 193.752560][T11351] netlink: 'syz.0.1458': attribute type 2 has an invalid length. [ 193.773107][ T6180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.784603][T11351] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1458'. [ 193.811874][ T6180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.813788][ T6185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.862347][ T6185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.078253][T11376] netlink: 'syz.3.1464': attribute type 9 has an invalid length. [ 194.100821][T11154] ================================================================== [ 194.108942][T11154] BUG: KASAN: slab-use-after-free in __mutex_lock+0x6c0/0xd70 [ 194.115838][T11376] netlink: 134660 bytes leftover after parsing attributes in process `syz.3.1464'. [ 194.116413][T11154] Read of size 8 at addr ffff88805fdac060 by task khidpd_0458fff9/11154 [ 194.134203][T11154] [ 194.136539][T11154] CPU: 1 UID: 0 PID: 11154 Comm: khidpd_0458fff9 Not tainted 6.12.0-rc5-syzkaller-00198-g9eaff63bfb59 #0 [ 194.147752][T11154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 194.147870][T11380] netlink: 'syz.0.1466': attribute type 1 has an invalid length. [ 194.157893][T11154] Call Trace: [ 194.157910][T11154] [ 194.157919][T11154] dump_stack_lvl+0x241/0x360 [ 194.157947][T11154] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.157965][T11154] ? __pfx__printk+0x10/0x10 [ 194.157983][T11154] ? _printk+0xd5/0x120 [ 194.158000][T11154] ? __virt_addr_valid+0x183/0x530 [ 194.158020][T11154] ? __virt_addr_valid+0x183/0x530 [ 194.158039][T11154] print_report+0x169/0x550 [ 194.158059][T11154] ? __virt_addr_valid+0x183/0x530 [ 194.158077][T11154] ? __virt_addr_valid+0x183/0x530 [ 194.158095][T11154] ? __virt_addr_valid+0x45f/0x530 [ 194.158112][T11154] ? __phys_addr+0xba/0x170 [ 194.158130][T11154] ? __mutex_lock+0x6c0/0xd70 [ 194.158150][T11154] kasan_report+0x143/0x180 [ 194.158171][T11154] ? __mutex_lock+0x6c0/0xd70 [ 194.158195][T11154] __mutex_lock+0x6c0/0xd70 [ 194.158216][T11154] ? __mutex_lock+0x52a/0xd70 [ 194.158237][T11154] ? l2cap_unregister_user+0x6a/0x1c0 [ 194.158260][T11154] ? __pfx___mutex_lock+0x10/0x10 [ 194.158283][T11154] ? __pfx___timer_delete_sync+0x10/0x10 [ 194.158308][T11154] l2cap_unregister_user+0x6a/0x1c0 [ 194.158333][T11154] hidp_session_thread+0x450/0x490 [ 194.158353][T11154] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 194.158373][T11154] ? __pfx_hidp_session_thread+0x10/0x10 [ 194.158392][T11154] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 194.158418][T11154] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 194.158441][T11154] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 194.158464][T11154] ? __kthread_parkme+0x169/0x1d0 [ 194.158490][T11154] ? __pfx_hidp_session_thread+0x10/0x10 [ 194.158510][T11154] kthread+0x2f0/0x390 [ 194.158525][T11154] ? __pfx_hidp_session_thread+0x10/0x10 [ 194.158543][T11154] ? __pfx_kthread+0x10/0x10 [ 194.158558][T11154] ret_from_fork+0x4b/0x80 [ 194.158579][T11154] ? __pfx_kthread+0x10/0x10 [ 194.158596][T11154] ret_from_fork_asm+0x1a/0x30 [ 194.158624][T11154] [ 194.158631][T11154] [ 194.158636][T11154] Allocated by task 10919: [ 194.158645][T11154] kasan_save_track+0x3f/0x80 [ 194.158663][T11154] __kasan_kmalloc+0x98/0xb0 [ 194.158678][T11154] __kmalloc_noprof+0x1fc/0x400 [ 194.205792][T11383] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 194.228229][T11380] openvswitch: netlink: Actions may not be safe on all matching packets [ 194.230275][T11154] hci_alloc_dev_priv+0x27/0x2030 [ 194.390082][T11154] vhci_create_device+0x116/0x6a0 [ 194.395159][T11154] vhci_write+0x3cf/0x490 [ 194.399519][T11154] vfs_write+0xaeb/0xd30 [ 194.403786][T11154] ksys_write+0x183/0x2b0 [ 194.408182][T11154] do_syscall_64+0xf3/0x230 [ 194.412701][T11154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.418610][T11154] [ 194.420943][T11154] Freed by task 10919: [ 194.425014][T11154] kasan_save_track+0x3f/0x80 [ 194.429703][T11154] kasan_save_free_info+0x40/0x50 [ 194.434749][T11154] __kasan_slab_free+0x59/0x70 [ 194.439529][T11154] kfree+0x1a0/0x440 [ 194.443443][T11154] hci_release_dev+0x1525/0x16b0 [ 194.448405][T11154] bt_host_release+0x83/0x90 [ 194.453014][T11154] device_release+0x99/0x1c0 [ 194.457623][T11154] kobject_put+0x22f/0x480 [ 194.462057][T11154] vhci_release+0x88/0xd0 [ 194.466410][T11154] __fput+0x23f/0x880 [ 194.470401][T11154] task_work_run+0x24f/0x310 [ 194.475002][T11154] do_exit+0xa2f/0x28e0 [ 194.476405][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.479151][T11154] do_group_exit+0x207/0x2c0 [ 194.486131][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.489947][T11154] __x64_sys_exit_group+0x3f/0x40 [ 194.489969][T11154] x64_sys_call+0x2634/0x2640 [ 194.489990][T11154] do_syscall_64+0xf3/0x230 [ 194.510420][T11154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.516338][T11154] [ 194.518672][T11154] Last potentially related work creation: [ 194.524392][T11154] kasan_save_stack+0x3f/0x60 [ 194.529088][T11154] __kasan_record_aux_stack+0xac/0xc0 [ 194.534544][T11154] insert_work+0x3e/0x330 [ 194.538895][T11154] __queue_work+0xb66/0xf50 [ 194.543423][T11154] queue_work_on+0x1c2/0x380 [ 194.548038][T11154] process_scheduled_works+0xa63/0x1850 [ 194.553608][T11154] worker_thread+0x870/0xd30 [ 194.558221][T11154] kthread+0x2f0/0x390 [ 194.562393][T11154] ret_from_fork+0x4b/0x80 [ 194.566833][T11154] ret_from_fork_asm+0x1a/0x30 [ 194.571616][T11154] [ 194.573945][T11154] Second to last potentially related work creation: [ 194.580535][T11154] kasan_save_stack+0x3f/0x60 [ 194.585225][T11154] __kasan_record_aux_stack+0xac/0xc0 [ 194.590615][T11154] insert_work+0x3e/0x330 [ 194.594968][T11154] __queue_work+0xc8b/0xf50 [ 194.599495][T11154] call_timer_fn+0x18e/0x650 [ 194.604112][T11154] __run_timer_base+0x695/0x8e0 [ 194.608988][T11154] run_timer_softirq+0xb7/0x170 [ 194.613861][T11154] handle_softirqs+0x2c5/0x980 [ 194.618643][T11154] __irq_exit_rcu+0xf4/0x1c0 [ 194.623252][T11154] irq_exit_rcu+0x9/0x30 [ 194.627513][T11154] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 194.633165][T11154] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 194.639161][T11154] [ 194.641489][T11154] The buggy address belongs to the object at ffff88805fdac000 [ 194.641489][T11154] which belongs to the cache kmalloc-8k of size 8192 [ 194.655559][T11154] The buggy address is located 96 bytes inside of [ 194.655559][T11154] freed 8192-byte region [ffff88805fdac000, ffff88805fdae000) [ 194.669371][T11154] [ 194.671707][T11154] The buggy address belongs to the physical page: [ 194.678135][T11154] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5fda8 [ 194.686909][T11154] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 194.695426][T11154] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 194.703342][T11154] page_type: f5(slab) [ 194.707339][T11154] raw: 00fff00000000040 ffff88801ac42280 ffffea0001bd8600 dead000000000003 [ 194.715936][T11154] raw: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 194.724539][T11154] head: 00fff00000000040 ffff88801ac42280 ffffea0001bd8600 dead000000000003 [ 194.733231][T11154] head: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 194.741922][T11154] head: 00fff00000000003 ffffea00017f6a01 ffffffffffffffff 0000000000000000 [ 194.750625][T11154] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 194.759310][T11154] page dumped because: kasan: bad access detected [ 194.765740][T11154] page_owner tracks the page as allocated [ 194.771464][T11154] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 9323, tgid 9312 (syz.3.896), ts 143207195175, free_ts 142186859133 [ 194.792757][T11154] post_alloc_hook+0x1f3/0x230 [ 194.797549][T11154] get_page_from_freelist+0x303f/0x3190 [ 194.803115][T11154] __alloc_pages_noprof+0x292/0x710 [ 194.808334][T11154] alloc_pages_mpol_noprof+0x3e8/0x680 [ 194.813814][T11154] alloc_slab_page+0x6a/0x120 [ 194.818508][T11154] allocate_slab+0x5a/0x2f0 [ 194.823028][T11154] ___slab_alloc+0xcd1/0x14b0 [ 194.827732][T11154] __slab_alloc+0x58/0xa0 [ 194.832097][T11154] __kmalloc_noprof+0x25a/0x400 [ 194.836969][T11154] ops_init+0x75/0x590 [ 194.841052][T11154] setup_net+0x287/0x9e0 [ 194.845320][T11154] copy_net_ns+0x33f/0x570 [ 194.849762][T11154] create_new_namespaces+0x425/0x7b0 [ 194.855067][T11154] unshare_nsproxy_namespaces+0x124/0x180 [ 194.860818][T11154] ksys_unshare+0x57d/0xa70 [ 194.865339][T11154] __x64_sys_unshare+0x38/0x40 [ 194.870208][T11154] page last free pid 8903 tgid 8903 stack trace: [ 194.876538][T11154] free_unref_page+0xcfb/0xf20 [ 194.881316][T11154] vfree+0x186/0x2e0 [ 194.885229][T11154] kcov_close+0x28/0x50 [ 194.889402][T11154] __fput+0x23f/0x880 [ 194.893486][T11154] task_work_run+0x24f/0x310 [ 194.898106][T11154] do_exit+0xa2f/0x28e0 [ 194.902271][T11154] do_group_exit+0x207/0x2c0 [ 194.906876][T11154] __x64_sys_exit_group+0x3f/0x40 [ 194.911912][T11154] x64_sys_call+0x2634/0x2640 [ 194.916605][T11154] do_syscall_64+0xf3/0x230 [ 194.921122][T11154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.927031][T11154] [ 194.929368][T11154] Memory state around the buggy address: [ 194.935176][T11154] ffff88805fdabf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 194.943248][T11154] ffff88805fdabf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 194.951325][T11154] >ffff88805fdac000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 194.959403][T11154] ^ [ 194.966618][T11154] ffff88805fdac080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 194.974687][T11154] ffff88805fdac100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 194.982761][T11154] ================================================================== [ 194.991361][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 195.001479][T11154] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 195.008693][T11154] CPU: 1 UID: 0 PID: 11154 Comm: khidpd_0458fff9 Not tainted 6.12.0-rc5-syzkaller-00198-g9eaff63bfb59 #0 [ 195.019881][T11154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 195.029928][T11154] Call Trace: [ 195.033197][T11154] [ 195.036118][T11154] dump_stack_lvl+0x241/0x360 [ 195.040792][T11154] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.045985][T11154] ? __pfx__printk+0x10/0x10 [ 195.050571][T11154] ? vscnprintf+0x5d/0x90 [ 195.054899][T11154] panic+0x349/0x880 [ 195.058791][T11154] ? check_panic_on_warn+0x21/0xb0 [ 195.063894][T11154] ? __pfx_panic+0x10/0x10 [ 195.068306][T11154] ? mark_lock+0x9a/0x360 [ 195.072634][T11154] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 195.078522][T11154] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 195.084407][T11154] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 195.090722][T11154] ? print_report+0x502/0x550 [ 195.095398][T11154] check_panic_on_warn+0x86/0xb0 [ 195.100342][T11154] ? __mutex_lock+0x6c0/0xd70 [ 195.105019][T11154] end_report+0x77/0x160 [ 195.109267][T11154] kasan_report+0x154/0x180 [ 195.113783][T11154] ? __mutex_lock+0x6c0/0xd70 [ 195.118476][T11154] __mutex_lock+0x6c0/0xd70 [ 195.122990][T11154] ? __mutex_lock+0x52a/0xd70 [ 195.127665][T11154] ? l2cap_unregister_user+0x6a/0x1c0 [ 195.133044][T11154] ? __pfx___mutex_lock+0x10/0x10 [ 195.138370][T11154] ? __pfx___timer_delete_sync+0x10/0x10 [ 195.144014][T11154] l2cap_unregister_user+0x6a/0x1c0 [ 195.149223][T11154] hidp_session_thread+0x450/0x490 [ 195.154336][T11154] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 195.160226][T11154] ? __pfx_hidp_session_thread+0x10/0x10 [ 195.165875][T11154] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 195.171766][T11154] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 195.178015][T11154] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 195.184251][T11154] ? __kthread_parkme+0x169/0x1d0 [ 195.189277][T11154] ? __pfx_hidp_session_thread+0x10/0x10 [ 195.194912][T11154] kthread+0x2f0/0x390 [ 195.198979][T11154] ? __pfx_hidp_session_thread+0x10/0x10 [ 195.204605][T11154] ? __pfx_kthread+0x10/0x10 [ 195.209196][T11154] ret_from_fork+0x4b/0x80 [ 195.213613][T11154] ? __pfx_kthread+0x10/0x10 [ 195.218195][T11154] ret_from_fork_asm+0x1a/0x30 [ 195.222961][T11154] [ 195.226225][T11154] Kernel Offset: disabled [ 195.230539][T11154] Rebooting in 86400 seconds..