last executing test programs: 57.688490637s ago: executing program 2 (id=270): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x67}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8001, 0x1c}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @initdev={0xac, 0x1e, 0x0, 0x0}}, "341517c1"}}}}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x4000) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) 47.828610569s ago: executing program 2 (id=270): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x67}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8001, 0x1c}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @initdev={0xac, 0x1e, 0x0, 0x0}}, "341517c1"}}}}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x4000) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) 36.973038082s ago: executing program 2 (id=270): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x67}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8001, 0x1c}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @initdev={0xac, 0x1e, 0x0, 0x0}}, "341517c1"}}}}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x4000) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) 27.034690471s ago: executing program 2 (id=270): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x67}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8001, 0x1c}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @initdev={0xac, 0x1e, 0x0, 0x0}}, "341517c1"}}}}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x4000) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) 16.898573297s ago: executing program 2 (id=270): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x67}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8001, 0x1c}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @initdev={0xac, 0x1e, 0x0, 0x0}}, "341517c1"}}}}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x4000) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) 8.449428146s ago: executing program 1 (id=991): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000003e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071123b000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000100)={0x0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000040)={@random="e90c610faca2", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0xc, 0x100}}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000001a80)=ANY=[@ANYBLOB="0180c2000002bbbbbbbbbbbb08004500001c000000020011907800000700000000000000000000089078"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYRES64=r2, @ANYBLOB="ceb4553f6a5fac586dc88ec0ab57ef0027e5917961a31c64ca474c7fb82f31ca9705185fd67fc0dbc055555ceb95bc429441e3441597b3ce1ee3921a4cfe7b535ec1971fc563f34d372e84c8f8822be4a25e18aa916350794df1f7302fb21a07c897ed4157530e5a4822de32bb18435706cdebbefc210cddb5de711708572836b0e90caba8085cb172d3ae8d8bc5a547e978b4c22db70ec75886b13027bc9c5186475b6035f715eb208ea4b18b07001b3537de07627ece02dbe580271d9eb873de074db70f62c25f59c612cd44016449227f3a8b538cc4e6", @ANYRESDEC=r0, @ANYRES32=r0, @ANYRESHEX=r1], 0x64}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x40000000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x81}}}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000000c000580040001"], 0x44}}, 0x0) 7.90445969s ago: executing program 1 (id=996): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)={0x1c, 0x34, 0x107, 0xffffffff, 0xfffffffe, {0x1, 0x7c}, [@nested={0x8, 0x4, 0x0, 0x1, [@nested={0x4, 0x149}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00'}, 0x90) 7.764470924s ago: executing program 1 (id=1000): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x80, 0x0}, 0x200ce0c0) write$cgroup_subtree(r0, 0x0, 0xfe33) 7.590745173s ago: executing program 1 (id=1003): socket$kcm(0x2, 0x2, 0x73) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2}, 0x10) socket$l2tp(0x2, 0x2, 0x73) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4400000010000104fcffffff0800000000000000", @ANYRES32=0x0, @ANYBLOB="21e4b39928171dab5a4dab996b000315000000000000140012800b0001006970", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 7.400471555s ago: executing program 1 (id=1006): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000003000090600000000ee00000000000000", @ANYRES32=0x0, @ANYBLOB="adffa888000000000a000200aaaaaaaaaaaa0000"], 0x2c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=@bridge_getvlan={0x18, 0x72, 0x333, 0x6, 0x4}, 0x18}}, 0x20000010) recvmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) 7.117803703s ago: executing program 1 (id=1010): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)={0x20, r1, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="54000000100001002fbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0201000000000000140003006e657464657673696d30000000000000200016801c00018018000c8014000100080088a8"], 0x54}}, 0x24040800) 5.38805272s ago: executing program 2 (id=270): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x67}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8001, 0x1c}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @initdev={0xac, 0x1e, 0x0, 0x0}}, "341517c1"}}}}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x4000) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) 3.08683815s ago: executing program 4 (id=1028): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r1}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff"], 0x3}}, 0x0) r3 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40088a01, &(0x7f0000000000)) sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000000307020e00000000000000000a00000a08000540000000030c00024000000000000000060c00024000000000000000090800054000000000de33c87d6af65bd0f3d78b6dfba8208901580e35bfa161ed6285b0d1126d49a236b24863a53d82b4a40a5bcacd3ac8c6e6dc33ec51f582"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x20040001) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r4, 0x0, 0x20, &(0x7f0000000400)="170000000200020000ffbe8c", 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6f}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000000)={0x1, {{0x2, 0x4e23, @private=0xa010102}}, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3f}}}}, 0x153) 2.496965245s ago: executing program 4 (id=1030): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d80), 0xffffffffffffffff) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x10000}, 0x48) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000140)={r2, 0x0, 0x0}, 0x20) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0xf, '\x00', 0x0, r3, 0x1, 0x2, 0x3}, 0x50) unshare(0x20000400) r4 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r4, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c000000280005801400f48004000200000000000800010000000000080001"], 0x3c}}, 0x0) 2.465847969s ago: executing program 3 (id=1031): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x2c, r1, 0x400, 0x0, 0xfffffffd, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2c}}, 0x0) 1.740284927s ago: executing program 0 (id=1033): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x4, 0x8, 0x22}, 0x50) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x20, r3, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0x4}]}, 0x20}}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x9}]}, 0x3c}}, 0x0) getpeername$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x8c7}, 0x8) 917.092421ms ago: executing program 3 (id=1034): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r2 = socket(0x40000000015, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2716, &(0x7f00000198c0)=""/102393, &(0x7f0000000240)=0x18ff9) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001880)=ANY=[@ANYBLOB="84000000", @ANYRES16=r3, @ANYBLOB="01000000000000000000420000000e008e006e657464657673696dad45590a0002006e657464657673696d3000000d0087006c325f64726f70730000000005008300000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000500830000000000"], 0x84}}, 0x0) 904.090599ms ago: executing program 0 (id=1035): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xaa}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="41000400010006", 0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000240)="7779a04468f04fb03692e89a71d93babc2e9ad4c75b9ccee390442ce4fb77bc0b24043d856971bc372812bbb0e70d1fe980bfd0a", 0x34}, {&(0x7f0000000280)="9c74e749fc8cc81580e3a7a273d99eec36d8c2f30a8271a04b310fde4c8c31683197851b3e5533d8fea24a675e452ea4b09f39be59783fee92b02970873bbbe396ce44dc9018b0f5d17911f182aab497eecd7867ac05256a9845b97b7999f952987eef40e5ea0ffd6bc9a795e1994ba4b8f5771ef28d08238ec35104f40293da96f1e4947ce46a1a7988478c03f65985deea42c2799f5568f349b179d39e628eb79762384a22522b2dcd2c31222b07c64e5913a80c3050aff9a8cfb9556f", 0xbe}, {&(0x7f0000000340)="9e13a1b246fdc0f4be3f22a36569ec80e28cc9be2b00062ac5071b3d021db14b92d73ae065fb0bb5486e163e1befd8f574df0992c0bd3a8fd27bf98d7c931da0bba74d9288bba732bc44d6a35677d1f1267dd39f21eeb6e388b3f8621add126f9851537a937a8f873a01f1cc6b20dd08828cc08e1f0c9bbcbfaedd45055d", 0x7e}, {&(0x7f00000003c0)="d108b54f3a58d384d88b106bbb1b2212686366d4a20861a737c516d1d8ac16e1e93ef34797882cc2575ea6d054ab4b14152811cbaf6ce5fa55689b7b74da9816ef9509f89c8b32a95ae6df824ba035", 0x4f}, {&(0x7f0000000440)="8de728689ea978ac668d9910f12e58852022d0aca718adb1050032bb9a0305a8b8ad13b3a7de19ee1f55d9ad8dfaedbd57c9d94e244e9e2ecdfdd217e347b6695aef5be01a7307060a3ec39aaeab226ca25a8deb5b8d2ac62bb4c6bc94db80108b86a36e60d59e59ccb73d7ed42960c1dbdc455ad5218a21a36c25e03a8e81ae833f1b9e23417de6703edf7a15957152d831e8232e5c28f86052698e480281ecc554cf255271e74d6685380f160cc45a10459bcd4dfd028633dc202145e47b8c16262038f0", 0xc5}, {&(0x7f0000000540)="90802a578f0a5b64ef2fea22ec084aaa9fb5be0e84d9d4f4c164e7e2ba3ca1a3ebd7388642d12f537e44a4ad0e3062b4adca202479d1d5480e48e62e3c5c19e2229b66e16f7a754dde3edcfae2af9bfb561b2588de6995058a468d69f16193264bff52ca398943eb93c8aa7f7c4f73fb886af992a20418e04a5fec67117552923060d86909c8db324ec50ad46861ff0afd64c3a184f16e9c0cf8c381340c07fe658d427e54f614ca33ddb2d03b8c06c085d47e8cd8e8d16df12c8c3e03a5dbe090ff4ea47e4d3034f580000f5c6263204cd92a605da25f2f7ed93813e8357866fb7e", 0xe2}, {&(0x7f0000000640)="203d6151c05f846ec0882669565e2d83f516571bce802aa0c8f68f02c7fac1dc", 0x20}, {&(0x7f0000000680)="15d2cd53f434b5253908511b7e", 0xd}, {&(0x7f00000006c0)="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", 0xfb}], 0x9, &(0x7f0000000880)=[{0x38, 0x1, 0x1, "64198267b1ef5fb72d6d01142ad39862002f0b103028c2f1a2576146e0050994f3471acb4d"}, {0xf8, 0x102, 0x8001, "68eed7efb0b880919935f679ab773546944f3bcd0b0ca33247edc414668b3e4c143ebc69ee330489f6cdecab102f26ec6f0ea230995bf043c0dc8666d99721bf637ddaa86bbf15277c2b4f7dce7c5d708777136da7f772105919dc6581bd1f531e65e201d54c4695cc2d09080b50628366c544329522c50da92250039110f124109fa5f08922338d25e0330409b5cc20fbc86805502e25c97c826f66d322b1f7ca7a1b1cfa4d8dfaa0a71161315d418f8fa56b64a69bc56a4c60cd9e295c33ad1b2851a81ec09e2cfb270b7a994acd2682809290364d40cc53f89267ff8e79df0a11"}, {0xa8, 0x116, 0x2, "e004e42c306d8a14b202dbcf06692b73eb51759ec1632545708438f8f654ff45087f9b08cf9afcecc17d0b75c64f5b3081fd93b353724bc0abf0da4ed2489a89922eb9e523408c44a5e2a22144233afbb6c56f2ebb01cc15bb79bc5dffcd843f71771b940a3c0872f00c79c93b64559c5b85055048655235eeee36142acfcba99449f8891bc6ef2e22a30672de8c6600a9b5ee"}, {0x10, 0x119, 0xfed6}], 0x1e8}, 0x20000010) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x9, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4a}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xaa}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r0, &(0x7f0000000040)="41000400010006", 0x7) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$kcm(0x29, 0x2, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000240)="7779a04468f04fb03692e89a71d93babc2e9ad4c75b9ccee390442ce4fb77bc0b24043d856971bc372812bbb0e70d1fe980bfd0a", 0x34}, {&(0x7f0000000280)="9c74e749fc8cc81580e3a7a273d99eec36d8c2f30a8271a04b310fde4c8c31683197851b3e5533d8fea24a675e452ea4b09f39be59783fee92b02970873bbbe396ce44dc9018b0f5d17911f182aab497eecd7867ac05256a9845b97b7999f952987eef40e5ea0ffd6bc9a795e1994ba4b8f5771ef28d08238ec35104f40293da96f1e4947ce46a1a7988478c03f65985deea42c2799f5568f349b179d39e628eb79762384a22522b2dcd2c31222b07c64e5913a80c3050aff9a8cfb9556f", 0xbe}, {&(0x7f0000000340)="9e13a1b246fdc0f4be3f22a36569ec80e28cc9be2b00062ac5071b3d021db14b92d73ae065fb0bb5486e163e1befd8f574df0992c0bd3a8fd27bf98d7c931da0bba74d9288bba732bc44d6a35677d1f1267dd39f21eeb6e388b3f8621add126f9851537a937a8f873a01f1cc6b20dd08828cc08e1f0c9bbcbfaedd45055d", 0x7e}, {&(0x7f00000003c0)="d108b54f3a58d384d88b106bbb1b2212686366d4a20861a737c516d1d8ac16e1e93ef34797882cc2575ea6d054ab4b14152811cbaf6ce5fa55689b7b74da9816ef9509f89c8b32a95ae6df824ba035", 0x4f}, {&(0x7f0000000440)="8de728689ea978ac668d9910f12e58852022d0aca718adb1050032bb9a0305a8b8ad13b3a7de19ee1f55d9ad8dfaedbd57c9d94e244e9e2ecdfdd217e347b6695aef5be01a7307060a3ec39aaeab226ca25a8deb5b8d2ac62bb4c6bc94db80108b86a36e60d59e59ccb73d7ed42960c1dbdc455ad5218a21a36c25e03a8e81ae833f1b9e23417de6703edf7a15957152d831e8232e5c28f86052698e480281ecc554cf255271e74d6685380f160cc45a10459bcd4dfd028633dc202145e47b8c16262038f0", 0xc5}, {&(0x7f0000000540)="90802a578f0a5b64ef2fea22ec084aaa9fb5be0e84d9d4f4c164e7e2ba3ca1a3ebd7388642d12f537e44a4ad0e3062b4adca202479d1d5480e48e62e3c5c19e2229b66e16f7a754dde3edcfae2af9bfb561b2588de6995058a468d69f16193264bff52ca398943eb93c8aa7f7c4f73fb886af992a20418e04a5fec67117552923060d86909c8db324ec50ad46861ff0afd64c3a184f16e9c0cf8c381340c07fe658d427e54f614ca33ddb2d03b8c06c085d47e8cd8e8d16df12c8c3e03a5dbe090ff4ea47e4d3034f580000f5c6263204cd92a605da25f2f7ed93813e8357866fb7e", 0xe2}, {&(0x7f0000000640)="203d6151c05f846ec0882669565e2d83f516571bce802aa0c8f68f02c7fac1dc", 0x20}, {&(0x7f0000000680)="15d2cd53f434b5253908511b7e", 0xd}, {&(0x7f00000006c0)="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", 0xfb}], 0x9, &(0x7f0000000880)=[{0x38, 0x1, 0x1, "64198267b1ef5fb72d6d01142ad39862002f0b103028c2f1a2576146e0050994f3471acb4d"}, {0xf8, 0x102, 0x8001, "68eed7efb0b880919935f679ab773546944f3bcd0b0ca33247edc414668b3e4c143ebc69ee330489f6cdecab102f26ec6f0ea230995bf043c0dc8666d99721bf637ddaa86bbf15277c2b4f7dce7c5d708777136da7f772105919dc6581bd1f531e65e201d54c4695cc2d09080b50628366c544329522c50da92250039110f124109fa5f08922338d25e0330409b5cc20fbc86805502e25c97c826f66d322b1f7ca7a1b1cfa4d8dfaa0a71161315d418f8fa56b64a69bc56a4c60cd9e295c33ad1b2851a81ec09e2cfb270b7a994acd2682809290364d40cc53f89267ff8e79df0a11"}, {0xa8, 0x116, 0x2, "e004e42c306d8a14b202dbcf06692b73eb51759ec1632545708438f8f654ff45087f9b08cf9afcecc17d0b75c64f5b3081fd93b353724bc0abf0da4ed2489a89922eb9e523408c44a5e2a22144233afbb6c56f2ebb01cc15bb79bc5dffcd843f71771b940a3c0872f00c79c93b64559c5b85055048655235eeee36142acfcba99449f8891bc6ef2e22a30672de8c6600a9b5ee"}, {0x10, 0x119, 0xfed6}], 0x1e8}, 0x20000010) (async) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x9, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4a}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) (async) 820.409673ms ago: executing program 4 (id=1036): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = accept4(r1, &(0x7f00000002c0)=@nfc, &(0x7f0000000100)=0x80, 0x80800) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r3) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800c0001006d6163766c616e0014000280080001000500"/48, @ANYRES32=r2, @ANYBLOB], 0x4c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206ab0d0108000000000000b53a000000000500040000000000120003006861737e3d6e65742c706f72740000071400078005001500050000000800124000000000050005000a00000005000100060000000900020073797a32000000005a2be8fac9c0d810c0d09427d1641d68cc31682de36bff3360f662e5c580f29ca4e65b12ef8749bfbc0669c22c7730b82e34ba3fe7c6ce73a014a61d94e9c22eeb185cd7061cce3121aa8b4e0354b6f4cbed7eb42b9af1a0ef687d0e0d77ff4304916f710f48ad2cf53d67e7bfc64a4b51da40742d2c35f650e83122e37408604f4ba2eec99b9110569c17aaad477b1cd13eb0597f4089fed712ca8d81a4fa"], 0x60}}, 0x0) 736.633322ms ago: executing program 3 (id=1037): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000c0605000000000000000000020000030900020073797a30000000000500010007000000050001"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000009500001b95"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000085100000030000001800000000000000000000000000000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x4e22, @multicast2}, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0000fedbcf25170000000800030000000000", @ANYRES32=r4, @ANYBLOB="0c000000030002e6d5db1cf9fc0766c6f303000000"], 0x28}}, 0x0) 700.380106ms ago: executing program 0 (id=1038): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)=ANY=[@ANYBLOB="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"], 0x9fa8}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x3, @private2, 0x9}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711010000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) ioctl$sock_qrtr_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) 572.40186ms ago: executing program 4 (id=1039): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000800150000000000050016"], 0x4c}}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @empty, 0x287}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000540)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x10, 0x11, 0x0, @remote, @mcast2, {[], {0x4e20, 0xe22, 0x10, 0x0, @gue={{0x2, 0x1, 0x0, 0x9, 0x100}}}}}}}}, 0x0) 482.336803ms ago: executing program 3 (id=1040): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'team_slave_1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x38, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x80}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x38}}, 0x0) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) (async) syz_genetlink_get_family_id$net_dm(&(0x7f0000000140), r2) (async) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='yeah\x00', 0x5) (async) shutdown(r4, 0x2) (async) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000006a00000f0007000000", @ANYRES32=r6, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)={0x100, 0x1403, 0x8, 0x70bd27, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pim6reg1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pimreg0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pim6reg0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_batadv\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1\x00'}}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000004}, 0x48008) (async) close(r0) (async) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_RCVMTU(r7, 0x112, 0xf, &(0x7f0000000000)=0x2, &(0x7f0000000180)=0x2) write(r7, &(0x7f0000000300)="0544cfedd1fd7be7b845a5f9881ce72836107ab1a5d70f94f46bf377ff102789ea540a52c8da4665601eb28209d940b36692766d6e188ec5ecd1c0f9b8bfa326c7a44a16af1fcf11d3d6a8d100e70324c5cf49e2f82afca8374dc83b6a3668f235a6518dc88ce22cbe7b88f2aeb4ad4825b77d03a7a3823fcc69a33e4f99bab1bcdf547370df43bb17f863e4f00c8947dd12e455ab0efffff11f46936ca53352651aad", 0xa3) 450.71319ms ago: executing program 0 (id=1041): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000700)={'filter\x00', 0x7, 0x4, 0x3e0, 0x0, 0xe8, 0xe8, 0x2f8, 0x2f8, 0x2f8, 0x4, &(0x7f0000000040), {[{{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg\x00', 'nicvf0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @broadcast}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x20, 'ERROR\x00', 0x0, "d1b7201e6851dcc361a7eb546f513b69c23cd84d078ce2b4e1b29dcf3fb6"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c00048028000180080001006f7366001c0002800800014000000000080003400500000105000200000000000900010073797a30000000000900020073797a32"], 0x80}}, 0x0) 392.990867ms ago: executing program 4 (id=1042): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, 0xffffffffffffffff, 0x11}, 0x20) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'veth0_to_batadv\x00', &(0x7f0000000040)=@ethtool_sfeatures}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x1852, r1, 0xffffe000) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}]}}}]}, 0x50}}, 0x0) 236.371149ms ago: executing program 0 (id=1043): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) (async, rerun: 64) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)='%-5lx \x00'}, 0x20) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x2, 0x0, 0x0, @remote, @remote, 0x40, 0x10, 0x7fff, 0x1ed}}) (async, rerun: 32) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf4, 0xf4, 0x5, [@fwd={0x7}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xf, 0x1}]}, @float={0xe, 0x0, 0x0, 0x10, 0x2}, @enum={0xf, 0x8, 0x0, 0x6, 0x4, [{0xc}, {0x3, 0x8}, {0x5, 0x3}, {0xe, 0x3}, {0x5, 0x7}, {0x9, 0x4}, {0x0, 0x5}, {0xe, 0x6}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0xffff, 0x4, 0xe01}}, @union={0x8, 0x3, 0x0, 0x5, 0x0, 0x0, [{0x4, 0x3, 0x200}, {0x3, 0x2, 0x5}, {0xb, 0x3, 0x1}]}, @decl_tag={0xe, 0x0, 0x0, 0x11, 0x5, 0x4}, @enum64={0xf, 0x2, 0x0, 0x13, 0x1, 0x2, [{0x5, 0x9, 0x7}, {0xc, 0x7a, 0x6}]}]}, {0x0, [0x30, 0x0, 0x61]}}, &(0x7f00000004c0)=""/123, 0x111, 0x7b, 0x1, 0xffff}, 0x28) (rerun: 32) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x4, '\x00', r2, r3, 0x1, 0x4, 0x1}, 0x50) (async) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0x9}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000580)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xfe5f}, {&(0x7f0000000840)="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", 0x113}, {&(0x7f00000003c0)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdcea4714219a2d4c4b985418cc8fbcd2935f4e8b229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0bea0", 0xbf}], 0x3}, 0x8001) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000400007910a800000000005d0a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) 235.788367ms ago: executing program 3 (id=1044): socket(0x10, 0x3, 0x9) (async) r0 = socket(0x10, 0x3, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff?\x11\xc8\xdd\x15\xcc\xd2\xf1\xfb\'%\xa0\x00\x00\x00,'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000003700)={0x0, 0x2f, &(0x7f0000000140)=[{&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80, 0x4}, 0x10}, {&(0x7f00000002c0)=ANY=[@ANYBLOB="10a5cf47b740b3214c1a330b369a5d974e0165a0c1d3c36794f0c0cf09c6fa28d36bb5976508e91e533c72be40c0658d9ac66b172347966cf76d330002315bbd594043f5f47e7b444ea24a3f6efac85f8d092a4ed854578a6a94afd2aa2158833227a13eb847"], 0x10}, {&(0x7f0000000000)={0x0, 0x23, 0x400, 0x70bd2a, 0x25dfdbfb, "", [@nested={0x0, 0x6d, 0x0, 0x1, [@typed={0x0, 0x119}, @typed={0x0, 0x98, 0x0, 0x0, @fd=r1}, @generic, @generic="4917d724d0ffec70f0779238259cbb218a978bd3dd49de9d85f4563942fc12046a41ac467fc00878b4649ff1da82199bb6e3ecf2f3a315588e9702b68bae24a2c5c8df4a8c79b0e687a63d2aac29dd0749968cc857daa56464c34aca8461f4fda60a2b666959230972fa84d67befe2062ff74bedf2aff29ef10e69f41f385fae09b58b8a248afc25cf1d3488658a5f4584a4154efb9f0185443d733db78886e957", @typed={0x0, 0xfd, 0x0, 0x0, @u32=0x10}, @typed={0x0, 0xb5, 0x0, 0x0, @ipv4=@local}, @typed={0x0, 0x73, 0x0, 0x0, @ipv4=@remote}]}]}}, {&(0x7f0000000440)={0x0, 0x2f, 0x4, 0x70bd2a, 0x25dfdbfc, "", [@typed={0x0, 0x5e, 0x0, 0x0, @u64}, @nested={0x0, 0xbd, 0x0, 0x1, [@nested={0x0, 0x13e}, @generic="58c03fcd0b485da9dd348103ba299b5ef93e9d26014052b3e6b3bc22e7941fd10b568aed6025ad2159804222bdc3c17b485942b1535f395063e401c92ffaada376606df2ba42e025d938b6c0902bed19f8f2ad68e56ecb2e289c37818d496f51eab7ab257a38f9a4bf63e644e9b0a9aea258624a9256352741048e5e3345104d928a631c93e430f0e14148f1bf6d79fff4f606fb67b15d3d5d56d25318fdd64862d3a24c552e3d8426da3e3d56c6fcb5631d9f78585e5db0044307bccbce958cff", @generic="20a552243c99553264665a00943a2ffc4f8aceefb66e9c583526cb1dd656fbfda27f1c121c8590c0bcd75a0f0716a4b858bdb2ebfb3337407b368729965411cc", @nested={0x0, 0x56}, @nested={0x0, 0x13c}, @nested={0x0, 0x2b}, @nested={0x0, 0x24}, @generic="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", @typed={0x0, 0x11b}]}, @nested={0x0, 0xe9, 0x0, 0x1, [@typed={0x0, 0x8, 0x0, 0x0, @str='#)(\x00'}]}, @typed={0x0, 0x13f, 0x0, 0x0, @ipv6=@mcast1}]}}, {&(0x7f0000000200)={0x0, 0x20, 0x8, 0x70bd2a, 0x25dfdbfc, "", [@nested={0x0, 0x69, 0x0, 0x1, [@typed={0x0, 0xb9, 0x0, 0x0, @ipv4=@multicast1}, @nested={0x0, 0x14, 0x0, 0x1, [@generic="e8b9e5a86125db7ca320e8748432e22fa4cc9cb347ab5507314ba1bcc9572fb3ebac5e21f4ad6d0612562ff0ffb8872d095715b4a469d2c1c9eb800ff1fa643a3ff728a9aae20858b4d1d3ec5c9be99ad60f13fafb4bc1a3f0fd018f2f83b2eb7c3e972dfe8761988bf45dd90e4fe8a6a1d144a0"]}, @typed={0x0, 0x12c, 0x0, 0x0, @u32=0x80000000}, @nested={0x0, 0x87}, @nested={0x0, 0xf3}]}]}}], 0x2}, 0x40005) 198.426973ms ago: executing program 4 (id=1045): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) poll(0x0, 0x0, 0x200000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x160, 0x1a, 0x713, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffd, 0x8, 0x0, 0x2, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in=@multicast2, 0x4d5, 0x32}, @in=@initdev={0xac, 0x1e, 0x2, 0x0}, {0x2, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x1c00000000000}, {0x11df, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff}, {0x9, 0x4}, 0x70bd25, 0x0, 0xa, 0x1}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x60, "00000000000000000000a1c31b3718243e97a18e6085921a4cf3f6e2bca135414f6bec0c"}}]}, 0x160}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x80, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0xd24f4d577c621d46}, 0x4) 82.383456ms ago: executing program 3 (id=1046): r0 = socket$inet(0x10, 0xa, 0x8000000) accept$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @netrom}, [@null, @netrom, @netrom, @netrom, @remote, @rose, @null]}, &(0x7f0000000080)=0x48) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth1_to_bridge\x00', 0x0}) unshare(0x20040600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) accept$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000100)=@req3={0x1000076, 0x5, 0x5, 0x200000, 0x300000, 0xffffffff, 0x5}, 0x1c) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc, 0x1, 0x0, 0x4], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}]}}]}, 0x8c}}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0xa, &(0x7f0000000140)=[{0x3, 0x3, 0x6, 0xe}, {0x7, 0x2, 0x0, 0xc85}, {0x8, 0x0, 0x66, 0x6}, {0x1, 0x1, 0x80, 0xd}, {0x3, 0x8, 0x5}, {0x5, 0x2, 0xf, 0x8}, {0x2, 0xb7, 0x1, 0x1ff}, {0x5, 0xff, 0x6, 0x2}, {0xb2c, 0x6, 0xfe, 0x3d2}, {0x3, 0x5, 0x5, 0x5}]}, 0x10) 0s ago: executing program 0 (id=1047): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8c}]}, &(0x7f00000001c0)='GPL\x00'}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00800000", @ANYRES16=0x0, @ANYBLOB="010025bd7000000000003b00000008000300", @ANYRES32=0x0, @ANYBLOB="610033008080030008021100000108021100000150505050505000001e000d0100000000000000006400080501003c04010557022d1a004012fd07000000000000070000000b00000006000900000007710700ff00faff8d6076060e3903000200000000"], 0x80}, 0x1, 0x0, 0x0, 0x8090}, 0x20040000) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x77, &(0x7f00000002c0)="1a00000002000000", 0x8) sendfile(r0, r1, &(0x7f0000000340)=0x2, 0x3ff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r3, 0x104, 0x6ba05eb0794edd29, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f0000000240)=0x4, 0x4) r4 = openat$cgroup_ro(r2, &(0x7f0000000680)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d080006067c09e8fe55a10a0015400a00142603600e120800160000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x6000}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="84000000", @ANYRES16=0x0, @ANYBLOB="000826bd7000fbdbdf25450000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0002000000040001007063690011000200010000003a30303a31302e300000000008008e000000000008000100706edca184000200303030303a30303a31302e300000000008008e0002000000"], 0x84}, 0x1, 0x0, 0x0, 0x4008001}, 0x4000) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x7ffc, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x73e0, 0x2, 0x0, 0x3, 0x8, 0x7, 0x3, 0x7}}}}]}, 0x58}}, 0x44080) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2e000000731000030428bd70000000000000000000", @ANYRES32=r11, @ANYBLOB="08000000000000000a000200bbbbbbbbbbbb0000"], 0x2c}}, 0x80) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r12, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="39f4bcf9569b3634d45e404c2dfa0523911f501fc6ce036bd35542fa3f939770353cd1c2399e35dee456ae48d19f051553d50daff21d8fb2fbaf532c4e06273284291d0baeb75e3bb25fa1c36b511ddf8da655ad59de6a2c0f27740b1dc9d6e7e4b1d158a9b916ce62c6caf6b69534ff8bcd82e8396c355f54a09613d3343bde2d95f58557274d094500"/155, @ANYRES16=r13, @ANYBLOB="04002dbd7000ffdbdf25550000000c0099000900000006000000"], 0x20}, 0x1, 0x0, 0x0, 0x4008805}, 0x1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r4, 0x81b21000) kernel console output (not intermixed with test programs): d0 [ 90.281803][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.289055][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.337847][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.359437][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.366678][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.385346][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.412620][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.430935][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.449126][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.456368][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.483393][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.490598][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.502251][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.509420][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.551871][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.573902][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.581107][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.608308][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.615475][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.648421][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.655734][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.900972][ T5844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.209071][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.314883][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.595215][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.617958][ T5841] veth0_vlan: entered promiscuous mode [ 91.638052][ T51] Bluetooth: hci0: command tx timeout [ 91.643554][ T51] Bluetooth: hci2: command tx timeout [ 91.681134][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.699648][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.717742][ T51] Bluetooth: hci1: command tx timeout [ 91.717751][ T5838] Bluetooth: hci3: command tx timeout [ 91.743370][ T5841] veth1_vlan: entered promiscuous mode [ 91.796333][ T5838] Bluetooth: hci4: command tx timeout [ 91.933068][ T5828] veth0_vlan: entered promiscuous mode [ 91.982199][ T5841] veth0_macvtap: entered promiscuous mode [ 91.992558][ T5844] veth0_vlan: entered promiscuous mode [ 92.003296][ T5828] veth1_vlan: entered promiscuous mode [ 92.020635][ T5841] veth1_macvtap: entered promiscuous mode [ 92.044077][ T9] cfg80211: failed to load regulatory.db [ 92.053040][ T5844] veth1_vlan: entered promiscuous mode [ 92.076862][ T5832] veth0_vlan: entered promiscuous mode [ 92.109537][ T5832] veth1_vlan: entered promiscuous mode [ 92.132397][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.143224][ T5834] veth0_vlan: entered promiscuous mode [ 92.166665][ T5834] veth1_vlan: entered promiscuous mode [ 92.182951][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.220303][ T5841] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.230528][ T5841] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.242169][ T5841] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.251268][ T5841] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.283175][ T5844] veth0_macvtap: entered promiscuous mode [ 92.292925][ T5828] veth0_macvtap: entered promiscuous mode [ 92.314303][ T5844] veth1_macvtap: entered promiscuous mode [ 92.335543][ T5828] veth1_macvtap: entered promiscuous mode [ 92.357934][ T5832] veth0_macvtap: entered promiscuous mode [ 92.383996][ T5832] veth1_macvtap: entered promiscuous mode [ 92.457494][ T5834] veth0_macvtap: entered promiscuous mode [ 92.484653][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.495588][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.534640][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.537470][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.544689][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.558691][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.569162][ T5834] veth1_macvtap: entered promiscuous mode [ 92.595250][ T5832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.604925][ T5832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.614816][ T5832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.624020][ T5832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.639049][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.671828][ T5828] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.681233][ T5828] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.690382][ T5828] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.699423][ T5828] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.718360][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.731118][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.748021][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.748065][ T5844] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.765335][ T5844] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.774881][ T5844] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.784231][ T5844] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.834645][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.880977][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.910377][ T5841] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.955076][ T5834] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.986162][ T5834] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.994934][ T5834] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.027426][ T5834] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.102590][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.113238][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.162321][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.190820][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.284427][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.307390][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.340452][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.380816][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.461487][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.496756][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.532906][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.549059][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.638283][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.659044][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.715988][ T5838] Bluetooth: hci0: command tx timeout [ 93.722114][ T5838] Bluetooth: hci2: command tx timeout [ 93.744040][ T5958] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 93.753712][ T5958] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 93.798685][ T5838] Bluetooth: hci3: command tx timeout [ 93.804189][ T5838] Bluetooth: hci1: command tx timeout [ 93.876007][ T5838] Bluetooth: hci4: command tx timeout [ 93.897468][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.923243][ T5960] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4'. [ 93.942637][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.606886][ T5980] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.647250][ T5984] netlink: 16 bytes leftover after parsing attributes in process `syz.4.16'. [ 95.076653][ T5994] ipvlan2: entered promiscuous mode [ 95.099318][ T5994] bridge0: port 3(ipvlan2) entered blocking state [ 95.122157][ T5994] bridge0: port 3(ipvlan2) entered disabled state [ 95.133154][ T5994] ipvlan2: entered allmulticast mode [ 95.140398][ T5994] bridge0: entered allmulticast mode [ 95.167361][ T5994] ipvlan2: left allmulticast mode [ 95.179881][ T5994] bridge0: left allmulticast mode [ 95.225805][ T6007] warning: `syz.2.24' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 95.272044][ T6008] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 95.410930][ T6015] netlink: 60 bytes leftover after parsing attributes in process `syz.0.23'. [ 95.516533][ T6014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25'. [ 95.791854][ T6032] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.845467][ T6035] netlink: 40 bytes leftover after parsing attributes in process `syz.4.31'. [ 95.852714][ T6033] netlink: 'syz.1.30': attribute type 12 has an invalid length. [ 95.866781][ T6033] netlink: 'syz.1.30': attribute type 29 has an invalid length. [ 95.895276][ T6033] netlink: 148 bytes leftover after parsing attributes in process `syz.1.30'. [ 95.915932][ T6033] netlink: 51 bytes leftover after parsing attributes in process `syz.1.30'. [ 95.940126][ T6033] Zero length message leads to an empty skb [ 96.238847][ T6047] Bluetooth: MGMT ver 1.23 [ 96.306244][ T6042] netlink: 16 bytes leftover after parsing attributes in process `syz.2.32'. [ 96.473498][ T6049] netlink: 20 bytes leftover after parsing attributes in process `syz.1.35'. [ 96.867304][ T6063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.39'. [ 97.032369][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 97.068155][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 97.086361][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 97.102321][ T6077] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20001 [ 97.448466][ T6090] netlink: 'syz.1.47': attribute type 7 has an invalid length. [ 97.469733][ T5892] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 97.622714][ T6102] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 97.802660][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 98.110874][ T6117] tipc: Started in network mode [ 98.133332][ T6117] tipc: Node identity ac14142f, cluster identity 4711 [ 98.165000][ T6117] tipc: New replicast peer: 0.0.0.0 [ 98.190407][ T6117] tipc: Enabled bearer , priority 10 [ 98.200282][ T6126] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 98.533238][ T6133] netlink: 'syz.0.60': attribute type 4 has an invalid length. [ 98.850194][ T6152] tipc: Enabled bearer , priority 0 [ 98.872197][ T6152] syzkaller0: entered promiscuous mode [ 98.885538][ T6152] syzkaller0: entered allmulticast mode [ 98.914815][ T6157] netlink: 'syz.0.67': attribute type 9 has an invalid length. [ 98.916550][ T6152] netlink: 'syz.4.66': attribute type 4 has an invalid length. [ 99.032719][ T6160] __nla_validate_parse: 14 callbacks suppressed [ 99.032741][ T6160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.69'. [ 99.431566][ T6174] vlan2: entered promiscuous mode [ 99.470750][ T6174] veth0_to_bond: entered promiscuous mode [ 99.511635][ T6174] vlan2: entered allmulticast mode [ 99.517750][ T6183] x_tables: duplicate underflow at hook 1 [ 99.535957][ T6174] veth0_to_bond: entered allmulticast mode [ 99.554979][ T6185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.74'. [ 99.584825][ T6151] tipc: Resetting bearer [ 99.686476][ T6151] tipc: Disabling bearer [ 99.733661][ T6188] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.743225][ T6191] netlink: 20 bytes leftover after parsing attributes in process `syz.2.76'. [ 99.821565][ T6195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.75'. [ 99.861401][ T6195] netlink: 24 bytes leftover after parsing attributes in process `syz.0.75'. [ 99.882785][ T5833] tipc: Node number set to 2886997039 [ 99.914389][ T6198] netlink: 19 bytes leftover after parsing attributes in process `syz.3.77'. [ 100.113772][ T6202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.78'. [ 100.479169][ T6224] netlink: 16 bytes leftover after parsing attributes in process `syz.2.84'. [ 100.544397][ T6226] trusted_key: syz.1.85 sent an empty control message without MSG_MORE. [ 100.728543][ T6232] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.89'. [ 100.755952][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 100.829828][ T6234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.88'. [ 101.825120][ T6283] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 102.002968][ T6291] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 102.205501][ T6298] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.377555][ T6298] bridge_slave_1 (unregistering): left allmulticast mode [ 102.384687][ T6298] bridge_slave_1 (unregistering): left promiscuous mode [ 102.437705][ T6298] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.310783][ T6344] netlink: 'syz.4.124': attribute type 1 has an invalid length. [ 103.357047][ T6344] netlink: 'syz.4.124': attribute type 2 has an invalid length. [ 103.419133][ T6347] unknown channel width for channel at 909000KHz? [ 103.427905][ T6347] unknown channel width for channel at 909000KHz? [ 103.435097][ T6347] unknown channel width for channel at 909000KHz? [ 103.443968][ T6347] netlink: 'syz.3.125': attribute type 5 has an invalid length. [ 103.683264][ T6355] macvtap1: entered promiscuous mode [ 103.688884][ T6355] vlan0: entered promiscuous mode [ 103.694521][ T6355] macvtap1: entered allmulticast mode [ 103.705976][ T6355] vlan0: entered allmulticast mode [ 103.712268][ T6355] veth0_vlan: entered allmulticast mode [ 103.738592][ T6358] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.766749][ T6358] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.773993][ T6358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.794195][ T6368] x_tables: duplicate underflow at hook 1 [ 103.810954][ T6368] syz.3.131 uses obsolete (PF_INET,SOCK_PACKET) [ 103.950883][ T6372] syz.0.132: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 103.967936][ T6372] CPU: 1 UID: 0 PID: 6372 Comm: syz.0.132 Not tainted 6.16.0-rc3-syzkaller-00144-gbd475eeaaf3c #0 PREEMPT(full) [ 103.967966][ T6372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 103.967986][ T6372] Call Trace: [ 103.967996][ T6372] [ 103.968006][ T6372] dump_stack_lvl+0x189/0x250 [ 103.968083][ T6372] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.968119][ T6372] ? __pfx__printk+0x10/0x10 [ 103.968143][ T6372] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 103.968167][ T6372] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 103.968193][ T6372] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 103.968220][ T6372] warn_alloc+0x214/0x310 [ 103.968245][ T6372] ? stack_depot_save_flags+0x429/0x900 [ 103.968277][ T6372] ? __pfx_warn_alloc+0x10/0x10 [ 103.968311][ T6372] ? kasan_save_track+0x4f/0x80 [ 103.968347][ T6372] ? xskq_create+0x56/0x170 [ 103.968373][ T6372] ? xsk_init_queue+0xb0/0x110 [ 103.968402][ T6372] ? xsk_setsockopt+0x43f/0x710 [ 103.968430][ T6372] ? do_sock_setsockopt+0x257/0x3e0 [ 103.968450][ T6372] ? __x64_sys_setsockopt+0x18b/0x220 [ 103.968468][ T6372] ? do_syscall_64+0xfa/0x3b0 [ 103.968483][ T6372] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.968510][ T6372] __vmalloc_node_range_noprof+0x125/0x12f0 [ 103.968566][ T6372] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 103.968593][ T6372] ? __kasan_kmalloc+0x93/0xb0 [ 103.968615][ T6372] vmalloc_user_noprof+0xad/0xf0 [ 103.968636][ T6372] ? xskq_create+0xbf/0x170 [ 103.968663][ T6372] xskq_create+0xbf/0x170 [ 103.968704][ T6372] xsk_init_queue+0xb0/0x110 [ 103.968731][ T6372] xsk_setsockopt+0x43f/0x710 [ 103.968769][ T6372] ? __pfx_xsk_setsockopt+0x10/0x10 [ 103.968796][ T6372] ? __lock_acquire+0xab9/0xd20 [ 103.968856][ T6372] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 103.968882][ T6372] ? __pfx_xsk_setsockopt+0x10/0x10 [ 103.968911][ T6372] do_sock_setsockopt+0x257/0x3e0 [ 103.968940][ T6372] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 103.968971][ T6372] ? __fget_files+0x2a/0x420 [ 103.969004][ T6372] __x64_sys_setsockopt+0x18b/0x220 [ 103.969037][ T6372] do_syscall_64+0xfa/0x3b0 [ 103.969054][ T6372] ? lockdep_hardirqs_on+0x9c/0x150 [ 103.969084][ T6372] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.969106][ T6372] ? clear_bhb_loop+0x60/0xb0 [ 103.969132][ T6372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.969153][ T6372] RIP: 0033:0x7fa3e2b8e929 [ 103.969181][ T6372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.969200][ T6372] RSP: 002b:00007fa3e3947038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 103.969222][ T6372] RAX: ffffffffffffffda RBX: 00007fa3e2db5fa0 RCX: 00007fa3e2b8e929 [ 103.969238][ T6372] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a [ 103.969250][ T6372] RBP: 00007fa3e2c10b39 R08: 0000000000000004 R09: 0000000000000000 [ 103.969263][ T6372] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.969276][ T6372] R13: 0000000000000000 R14: 00007fa3e2db5fa0 R15: 00007ffec01808d8 [ 103.969311][ T6372] [ 103.969323][ T6372] Mem-Info: [ 104.105153][ T6375] netlink: 'syz.1.134': attribute type 10 has an invalid length. [ 104.169101][ T6372] active_anon:5389 inactive_anon:0 isolated_anon:0 [ 104.169101][ T6372] active_file:1093 inactive_file:39826 isolated_file:0 [ 104.169101][ T6372] unevictable:768 dirty:426 writeback:1014 [ 104.169101][ T6372] slab_reclaimable:10061 slab_unreclaimable:96805 [ 104.169101][ T6372] mapped:30117 shmem:1361 pagetables:1091 [ 104.169101][ T6372] sec_pagetables:0 bounce:0 [ 104.169101][ T6372] kernel_misc_reclaimable:0 [ 104.169101][ T6372] free:1332671 free_pcp:21426 free_cma:0 [ 104.344849][ T6372] Node 0 active_anon:21556kB inactive_anon:0kB active_file:4372kB inactive_file:159104kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116168kB dirty:1688kB writeback:56kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11668kB pagetables:4328kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 104.379232][ T6372] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 104.402473][ T6375] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 104.411122][ T6372] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 104.461888][ T6372] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 104.473007][ T6372] Node 0 DMA32 free:1415140kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21612kB inactive_anon:0kB active_file:4372kB inactive_file:157272kB unevictable:1536kB writepending:1640kB present:3129332kB managed:2561004kB mlocked:0kB bounce:0kB free_pcp:64480kB local_pcp:32136kB free_cma:0kB [ 104.505561][ T6372] lowmem_reserve[]: 0 0 1 1 1 [ 104.510409][ T6372] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1832kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 104.541866][ T6375] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 104.586470][ T6372] lowmem_reserve[]: 0 0 0 0 0 [ 104.591321][ T6372] Node 1 Normal free:3900704kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:16kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:21476kB local_pcp:8960kB free_cma:0kB [ 104.662084][ T6381] __nla_validate_parse: 6 callbacks suppressed [ 104.662106][ T6381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.136'. [ 104.745768][ T6372] lowmem_reserve[]: 0 0 0 0 0 [ 104.813966][ T6372] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 104.897900][ T6372] Node 0 DMA32: 1354*4kB (UM) 333*8kB (UME) 119*16kB (UM) 15*32kB (UME) 7*64kB (UME) 5*128kB (UME) 6*256kB (UME) 6*512kB (UME) 6*1024kB (UM) 4*2048kB (UME) 338*4096kB (M) = 1414944kB [ 105.009339][ T6372] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 105.019605][ T6392] nft_compat: unsupported protocol 0 [ 105.071218][ T6372] Node 1 Normal: 220*4kB (UE) 44*8kB (UME) 39*16kB (UME) 43*32kB (UME) 16*64kB (UME) 5*128kB (UME) 6*256kB (UME) 4*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 949*4096kB (M) = 3900704kB [ 105.113730][ T6394] delete_channel: no stack [ 105.144814][ T6372] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 105.154612][ T6372] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 105.238256][ T6372] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 105.302176][ T6372] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 105.352990][ T6372] 42276 total pagecache pages [ 105.375622][ T6372] 0 pages in swap cache [ 105.380026][ T6372] Free swap = 124996kB [ 105.405809][ T6372] Total swap = 124996kB [ 105.418534][ T6372] 2097051 pages RAM [ 105.438624][ T6372] 0 pages HighMem/MovableOnly [ 105.443841][ T6372] 424694 pages reserved [ 105.455822][ T6372] 0 pages cma reserved [ 105.812135][ T6425] netlink: 'syz.1.150': attribute type 9 has an invalid length. [ 105.819947][ T6427] netlink: 24 bytes leftover after parsing attributes in process `syz.0.152'. [ 105.876071][ T6427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.152'. [ 105.949183][ T6434] netlink: 'syz.4.154': attribute type 4 has an invalid length. [ 105.989811][ T6436] netlink: 'syz.4.154': attribute type 4 has an invalid length. [ 106.180352][ T6445] ip6t_srh: unknown srh match flags 4001 [ 106.250083][ T6445] netlink: 16 bytes leftover after parsing attributes in process `syz.1.158'. [ 106.262090][ T6445] netlink: 'syz.1.158': attribute type 2 has an invalid length. [ 106.640271][ T6472] veth1_macvtap: left promiscuous mode [ 106.674664][ T6472] macsec0: entered promiscuous mode [ 106.682842][ T6472] macsec0: entered allmulticast mode [ 106.811085][ T6480] geneve2: entered promiscuous mode [ 106.839844][ T6480] geneve2: entered allmulticast mode [ 106.861580][ T6483] Dead loop on virtual device ip6_vti0, fix it urgently! [ 106.877577][ T6488] x_tables: duplicate underflow at hook 2 [ 107.109258][ T6501] IPVS: set_ctl: invalid protocol: 0 172.20.20.59:20001 [ 107.139360][ T6503] IPVS: set_ctl: invalid protocol: 0 172.20.20.59:20001 [ 107.444532][ T6515] netdevsim netdevsim2: Direct firmware load for failed with error -2 [ 107.491810][ T6515] netdevsim netdevsim2: Falling back to sysfs fallback for: [ 107.675597][ T6523] netlink: 'syz.0.182': attribute type 10 has an invalid length. [ 107.691886][ T6526] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 107.713093][ T6523] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 108.035883][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 108.108657][ T6537] syzkaller0: entered promiscuous mode [ 108.115428][ T6537] syzkaller0: entered allmulticast mode [ 109.388205][ T6549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.190'. [ 109.593425][ T6566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.194'. [ 109.623743][ T6565] bridge_slave_0: left allmulticast mode [ 109.645185][ T6565] bridge_slave_0: left promiscuous mode [ 109.657972][ T6565] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.665398][ T6568] netlink: 20 bytes leftover after parsing attributes in process `syz.3.196'. [ 109.696083][ T6565] bridge_slave_1: left allmulticast mode [ 109.702084][ T6565] bridge_slave_1: left promiscuous mode [ 109.715243][ T6565] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.729292][ T6579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.198'. [ 109.754725][ T6579] netlink: 20 bytes leftover after parsing attributes in process `syz.4.198'. [ 109.771217][ T6565] bond0: (slave bond_slave_0): Releasing backup interface [ 109.812504][ T6565] bond0: (slave bond_slave_1): Releasing backup interface [ 109.864225][ T6565] team0: Port device team_slave_0 removed [ 109.885384][ T6565] team0: Port device team_slave_1 removed [ 109.893303][ T6565] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.903667][ T6565] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.914187][ T6565] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.922292][ T6565] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.940525][ T6565] bond0: (slave netdevsim0): Releasing backup interface [ 109.965467][ T6570] syzkaller1: entered promiscuous mode [ 109.971713][ T6570] syzkaller1: entered allmulticast mode [ 110.010818][ T6582] team0: Mode changed to "activebackup" [ 110.028700][ T6585] vlan0: entered promiscuous mode [ 110.052437][ T6585] team0: Port device vlan0 added [ 110.150980][ T6573] tipc: Started in network mode [ 110.159250][ T6573] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 110.172405][ T6573] tipc: Enabled bearer , priority 0 [ 110.327713][ T6565] syz.0.195 (6565) used greatest stack depth: 19928 bytes left [ 110.380913][ T6609] netlink: 12 bytes leftover after parsing attributes in process `syz.4.204'. [ 110.430471][ T6610] netlink: 12 bytes leftover after parsing attributes in process `syz.4.204'. [ 110.456944][ T6601] netlink: 'syz.2.203': attribute type 5 has an invalid length. [ 110.591213][ T6622] netlink: 'syz.4.207': attribute type 21 has an invalid length. [ 110.645339][ T6624] netlink: 12 bytes leftover after parsing attributes in process `syz.0.208'. [ 110.671528][ T6624] netlink: 'syz.0.208': attribute type 75 has an invalid length. [ 110.811866][ T6632] sctp: [Deprecated]: syz.4.210 (pid 6632) Use of int in max_burst socket option deprecated. [ 110.811866][ T6632] Use struct sctp_assoc_value instead [ 110.895098][ T6636] netlink: 'syz.0.212': attribute type 2 has an invalid length. [ 110.975768][ T6638] x_tables: unsorted entry at hook 2 [ 111.004940][ T6641] netlink: 277 bytes leftover after parsing attributes in process `syz.1.215'. [ 111.029399][ T6638] vlan2: entered promiscuous mode [ 111.034523][ T6638] bridge0: entered promiscuous mode [ 111.110157][ T6650] netlink: 36 bytes leftover after parsing attributes in process `syz.1.215'. [ 111.121278][ T6642] netlink: 24 bytes leftover after parsing attributes in process `syz.2.214'. [ 111.142574][ T6650] netlink: 16 bytes leftover after parsing attributes in process `syz.1.215'. [ 111.172254][ T6650] netlink: 36 bytes leftover after parsing attributes in process `syz.1.215'. [ 111.228126][ T6654] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 111.282084][ T6658] ieee802154 phy0 wpan0: encryption failed: -22 [ 111.282254][ T6655] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 111.288851][ T5905] tipc: Node number set to 11578026 [ 111.304708][ T6658] xt_hashlimit: max too large, truncated to 1048576 [ 111.649279][ T6677] netlink: 'syz.3.225': attribute type 4 has an invalid length. [ 111.698378][ T6673] netlink: 'syz.0.223': attribute type 39 has an invalid length. [ 111.887325][ T6673] netlink: 'syz.0.223': attribute type 39 has an invalid length. [ 111.926235][ T6673] netlink: 'syz.0.223': attribute type 39 has an invalid length. [ 111.934371][ T6673] netlink: 'syz.0.223': attribute type 39 has an invalid length. [ 111.944124][ T6673] netlink: 'syz.0.223': attribute type 39 has an invalid length. [ 112.170015][ T6699] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 112.235366][ T6705] bond1: entered promiscuous mode [ 112.242405][ T6705] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.313745][ T6713] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 112.329538][ T6713] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 112.694574][ T6729] ip6t_rpfilter: unknown options [ 113.102727][ T6745] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 113.964007][ T6784] openvswitch: netlink: Multiple metadata blocks provided [ 114.084102][ T6788] 8021q: adding VLAN 0 to HW filter on device bond2 [ 114.160839][ T6794] bond2: (slave veth3): Enslaving as an active interface with a down link [ 114.171974][ T6788] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 114.432741][ T1101] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.499324][ T6805] bridge2: entered promiscuous mode [ 114.504713][ T6805] bridge2: entered allmulticast mode [ 114.615097][ T6814] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 114.670202][ T1101] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.748856][ T1101] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.906955][ T1101] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.254433][ T1101] bridge_slave_1: left allmulticast mode [ 115.270443][ T1101] bridge_slave_1: left promiscuous mode [ 115.289278][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 115.290056][ T1101] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.306444][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 115.314888][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 115.331923][ T6836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.345628][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 115.346187][ T1101] bridge_slave_0: left allmulticast mode [ 115.367026][ T1101] bridge_slave_0: left promiscuous mode [ 115.367254][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 115.374024][ T1101] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.229723][ T1101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.243986][ T1101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.256831][ T1101] bond0 (unregistering): Released all slaves [ 116.321327][ T6859] __nla_validate_parse: 17 callbacks suppressed [ 116.321348][ T6859] netlink: 4 bytes leftover after parsing attributes in process `syz.3.285'. [ 116.409536][ T6859] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.498524][ T6865] xt_hashlimit: size too large, truncated to 1048576 [ 116.533360][ T6859] bridge_slave_1 (unregistering): left allmulticast mode [ 116.546153][ T6859] bridge_slave_1 (unregistering): left promiscuous mode [ 116.560579][ T6859] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.648308][ T6867] netlink: 24 bytes leftover after parsing attributes in process `syz.1.287'. [ 116.999169][ T5838] Bluetooth: hci4: command tx timeout [ 117.122600][ T6873] validate_nla: 64 callbacks suppressed [ 117.122622][ T6873] netlink: 'syz.3.289': attribute type 3 has an invalid length. [ 117.369137][ T1101] hsr_slave_0: left promiscuous mode [ 117.390853][ T1101] hsr_slave_1: left promiscuous mode [ 117.419046][ T1101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.430901][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.443229][ T1101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.453635][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.456542][ T6892] netlink: 76 bytes leftover after parsing attributes in process `syz.1.293'. [ 117.477422][ T5838] Bluetooth: hci1: command tx timeout [ 117.495274][ T6893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.294'. [ 117.521238][ T1101] veth0_macvtap: left promiscuous mode [ 117.527330][ T1101] veth1_vlan: left promiscuous mode [ 117.532806][ T1101] veth0_vlan: left promiscuous mode [ 118.350782][ T1101] team0 (unregistering): Port device team_slave_1 removed [ 118.408974][ T1101] team0 (unregistering): Port device team_slave_0 removed [ 119.235982][ T6897] netlink: 12 bytes leftover after parsing attributes in process `syz.1.293'. [ 119.261565][ T6903] dvmrp0: entered allmulticast mode [ 119.269900][ T6892] netlink: 12 bytes leftover after parsing attributes in process `syz.1.293'. [ 119.560424][ T5838] Bluetooth: hci1: command tx timeout [ 119.603308][ T6840] chnl_net:caif_netlink_parms(): no params data found [ 119.784780][ T6920] netlink: 'syz.1.301': attribute type 23 has an invalid length. [ 119.965387][ T6934] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 120.078270][ T6840] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.096077][ T6840] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.111447][ T6840] bridge_slave_0: entered allmulticast mode [ 120.134215][ T6840] bridge_slave_0: entered promiscuous mode [ 120.162683][ T6840] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.186016][ T6840] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.202138][ T6840] bridge_slave_1: entered allmulticast mode [ 120.211434][ T6944] Bluetooth: MGMT ver 1.23 [ 120.220217][ T6840] bridge_slave_1: entered promiscuous mode [ 120.512939][ T6957] netlink: 184296 bytes leftover after parsing attributes in process `syz.3.310'. [ 120.544673][ T6957] netlink: zone id is out of range [ 120.565818][ T6957] netlink: zone id is out of range [ 120.571080][ T6957] netlink: zone id is out of range [ 120.585783][ T6957] netlink: zone id is out of range [ 120.590996][ T6957] netlink: zone id is out of range [ 120.611832][ T6957] netlink: zone id is out of range [ 120.617285][ T6957] netlink: zone id is out of range [ 120.622564][ T6957] netlink: zone id is out of range [ 120.628936][ T6957] netlink: get zone limit has 8 unknown bytes [ 120.722280][ T6840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.737122][ T6955] netlink: 'syz.1.311': attribute type 29 has an invalid length. [ 120.755226][ T6962] netlink: 'syz.1.311': attribute type 29 has an invalid length. [ 120.781828][ T6966] netlink: 'syz.1.311': attribute type 29 has an invalid length. [ 120.806430][ T6840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.840938][ T6966] netlink: 'syz.1.311': attribute type 29 has an invalid length. [ 121.049374][ T6840] team0: Port device team_slave_0 added [ 121.073028][ T6977] netlink: 'syz.0.314': attribute type 4 has an invalid length. [ 121.078199][ T6840] team0: Port device team_slave_1 added [ 121.081430][ T6977] netlink: 17 bytes leftover after parsing attributes in process `syz.0.314'. [ 121.178682][ T6840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.203566][ T6840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.239509][ T6840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.254005][ T6840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.264387][ T6840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.309837][ T6840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.352686][ T6843] Set syz1 is full, maxelem 65536 reached [ 121.474590][ T6986] netlink: 12 bytes leftover after parsing attributes in process `syz.1.317'. [ 121.521660][ T6986] vlan3: entered allmulticast mode [ 121.534299][ T6986] veth1: entered allmulticast mode [ 121.600947][ T6840] hsr_slave_0: entered promiscuous mode [ 121.618197][ T6840] hsr_slave_1: entered promiscuous mode [ 121.631982][ T6840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 121.645934][ T5838] Bluetooth: hci1: command tx timeout [ 121.650826][ T6840] Cannot create hsr debugfs directory [ 122.037935][ T5838] Bluetooth: hci0: command tx timeout [ 122.108942][ T7015] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.323'. [ 122.190046][ T7015] vlan1: entered promiscuous mode [ 122.195525][ T7015] vlan1: entered allmulticast mode [ 122.210570][ T7015] hsr_slave_1: entered allmulticast mode [ 122.424821][ T7027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.326'. [ 122.742746][ T7039] netlink: 16 bytes leftover after parsing attributes in process `syz.0.328'. [ 122.876626][ T7038] syzkaller1: entered promiscuous mode [ 122.882190][ T7038] syzkaller1: entered allmulticast mode [ 122.905243][ T7044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.330'. [ 122.914489][ T6840] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 122.970703][ T6840] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 122.988230][ T6840] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 123.066183][ T6840] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 123.643206][ T6840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.706283][ T6840] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.716219][ T5838] Bluetooth: hci1: command tx timeout [ 123.732169][ T7077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.336'. [ 123.778856][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.786160][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.822577][ T7077] netlink: 24 bytes leftover after parsing attributes in process `syz.0.336'. [ 123.824213][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.838907][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.855811][ T7071] netlink: 'syz.1.338': attribute type 1 has an invalid length. [ 123.864086][ T7067] xt_CT: No such helper "pptp" [ 123.987885][ T7067] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 124.158652][ T6840] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 124.210180][ T6840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 124.447046][ T7103] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 124.587201][ T7109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.345'. [ 124.801587][ T7117] netlink: 12 bytes leftover after parsing attributes in process `syz.1.348'. [ 126.324429][ T7140] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 126.348546][ T7140] macsec1: entered allmulticast mode [ 126.353939][ T7140] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 126.390465][ T7140] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 126.418451][ T7140] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 126.518321][ T7148] net_ratelimit: 2 callbacks suppressed [ 126.518343][ T7148] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 126.562245][ T7152] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 126.636780][ T6840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.800770][ T7156] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 126.838463][ T6840] veth0_vlan: entered promiscuous mode [ 126.855989][ T7156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.356'. [ 126.874961][ T6840] veth1_vlan: entered promiscuous mode [ 126.882037][ T7156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.356'. [ 126.975201][ T7164] netlink: 4 bytes leftover after parsing attributes in process `syz.3.357'. [ 127.030468][ T7170] netlink: 12 bytes leftover after parsing attributes in process `syz.3.357'. [ 127.105919][ T6840] veth0_macvtap: entered promiscuous mode [ 127.124594][ T6840] veth1_macvtap: entered promiscuous mode [ 127.197500][ T6840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.235116][ T6840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.245581][ T7175] netdevsim netdevsim1: Direct firmware load for failed with error -2 [ 127.254496][ T7175] netdevsim netdevsim1: Falling back to sysfs fallback for: [ 127.271417][ T6840] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.286954][ T6840] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.299641][ T6840] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.311147][ T6840] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.381888][ T7184] netlink: 'syz.4.365': attribute type 1 has an invalid length. [ 127.473334][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.495807][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.553785][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.563777][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.795115][ T7201] syzkaller1: entered promiscuous mode [ 127.801450][ T7201] syzkaller1: entered allmulticast mode [ 127.809745][ T7199] syzkaller0: entered promiscuous mode [ 127.817603][ T7199] syzkaller0: entered allmulticast mode [ 128.006145][ T7206] SET target dimension over the limit! [ 128.015945][ T7205] SET target dimension over the limit! [ 128.258428][ T7218] netlink: 'syz.0.377': attribute type 10 has an invalid length. [ 128.289391][ T7218] team0: Device ipvlan1 failed to register rx_handler [ 128.599294][ T1165] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.719799][ T7238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.381'. [ 128.824266][ T1165] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.960119][ T1165] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.173610][ T1165] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.192663][ T7257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.385'. [ 129.382400][ T7261] netlink: 12 bytes leftover after parsing attributes in process `syz.4.386'. [ 129.510635][ T7272] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 129.855248][ T1165] bridge_slave_1: left allmulticast mode [ 129.870772][ T1165] bridge_slave_1: left promiscuous mode [ 129.891772][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 129.900855][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 129.909077][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 129.916796][ T1165] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.927044][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 129.937750][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 129.966649][ T1165] bridge_slave_0: left allmulticast mode [ 129.974111][ T1165] bridge_slave_0: left promiscuous mode [ 129.983386][ T1165] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.115389][ T7295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.396'. [ 130.541290][ T1165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.553020][ T1165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.565323][ T1165] bond0 (unregistering): Released all slaves [ 131.051338][ T1165] hsr_slave_0: left promiscuous mode [ 131.090994][ T1165] hsr_slave_1: left promiscuous mode [ 131.091765][ T7332] openvswitch: netlink: Multiple metadata blocks provided [ 131.097749][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.112432][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.121641][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.131016][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.161081][ T1165] veth1_macvtap: left promiscuous mode [ 131.167570][ T1165] veth0_macvtap: left promiscuous mode [ 131.173361][ T1165] veth1_vlan: left promiscuous mode [ 131.178911][ T1165] veth0_vlan: left promiscuous mode [ 131.639923][ T1165] team0 (unregistering): Port device team_slave_1 removed [ 131.680022][ T1165] team0 (unregistering): Port device team_slave_0 removed [ 131.957425][ T5838] Bluetooth: hci1: command tx timeout [ 132.064635][ T7333] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 132.643490][ T7283] chnl_net:caif_netlink_parms(): no params data found [ 132.823888][ T7372] netlink: 'syz.1.416': attribute type 6 has an invalid length. [ 132.862932][ T7370] netlink: 44 bytes leftover after parsing attributes in process `syz.1.416'. [ 132.924302][ T7370] netlink: 43 bytes leftover after parsing attributes in process `syz.1.416'. [ 132.935602][ T7370] netlink: 'syz.1.416': attribute type 5 has an invalid length. [ 132.950154][ T7370] netlink: 43 bytes leftover after parsing attributes in process `syz.1.416'. [ 133.001206][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.002031][ T7365] syz.3.413 (7365) used greatest stack depth: 19400 bytes left [ 133.012478][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.048967][ T7283] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.056506][ T7283] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.063802][ T7283] bridge_slave_0: entered allmulticast mode [ 133.072414][ T7283] bridge_slave_0: entered promiscuous mode [ 133.083326][ T7283] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.090837][ T7283] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.101123][ T7283] bridge_slave_1: entered allmulticast mode [ 133.134206][ T7283] bridge_slave_1: entered promiscuous mode [ 133.250373][ T7283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.271918][ T7393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.423'. [ 133.295853][ T7283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.443295][ T7283] team0: Port device team_slave_0 added [ 133.470293][ T7283] team0: Port device team_slave_1 added [ 133.600139][ T7409] netlink: 'syz.3.428': attribute type 2 has an invalid length. [ 133.615449][ T7283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.632771][ T7412] netlink: 56 bytes leftover after parsing attributes in process `syz.1.429'. [ 133.633370][ T7283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.644300][ T7412] netlink: 48 bytes leftover after parsing attributes in process `syz.1.429'. [ 133.677666][ T7283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.702004][ T7411] netlink: 56 bytes leftover after parsing attributes in process `syz.1.429'. [ 133.706752][ T7283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.729244][ T7283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.735026][ T7411] netlink: 48 bytes leftover after parsing attributes in process `syz.1.429'. [ 133.786582][ T7283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.971390][ T7422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.432'. [ 133.993548][ T7283] hsr_slave_0: entered promiscuous mode [ 134.010142][ T7283] hsr_slave_1: entered promiscuous mode [ 134.027948][ T7283] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.047112][ T5838] Bluetooth: hci1: command tx timeout [ 134.056088][ T7283] Cannot create hsr debugfs directory [ 134.248517][ T7433] netlink: 24 bytes leftover after parsing attributes in process `syz.4.435'. [ 135.049843][ T7481] netlink: 'syz.4.449': attribute type 1 has an invalid length. [ 135.066098][ T7481] netlink: 'syz.4.449': attribute type 1 has an invalid length. [ 135.082388][ T7481] netlink: 'syz.4.449': attribute type 1 has an invalid length. [ 135.161935][ T7485] netlink: 'syz.3.450': attribute type 1 has an invalid length. [ 135.405571][ T7493] ip6gre1: entered promiscuous mode [ 135.550579][ T7283] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 135.563143][ T7283] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 135.623896][ T7283] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 135.662370][ T7509] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:20004 [ 135.673923][ T7283] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 135.697160][ T7511] syz.1.458: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 135.719771][ T7511] CPU: 1 UID: 0 PID: 7511 Comm: syz.1.458 Not tainted 6.16.0-rc3-syzkaller-00144-gbd475eeaaf3c #0 PREEMPT(full) [ 135.719805][ T7511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 135.719819][ T7511] Call Trace: [ 135.719829][ T7511] [ 135.719838][ T7511] dump_stack_lvl+0x189/0x250 [ 135.719882][ T7511] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.719917][ T7511] ? __pfx__printk+0x10/0x10 [ 135.719940][ T7511] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 135.719964][ T7511] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 135.719990][ T7511] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 135.720016][ T7511] warn_alloc+0x214/0x310 [ 135.720041][ T7511] ? stack_depot_save_flags+0x40/0x900 [ 135.720073][ T7511] ? __pfx_warn_alloc+0x10/0x10 [ 135.720100][ T7511] ? kasan_save_track+0x4f/0x80 [ 135.720137][ T7511] ? xskq_create+0x56/0x170 [ 135.720166][ T7511] ? xsk_init_queue+0xb0/0x110 [ 135.720193][ T7511] ? xsk_setsockopt+0x43f/0x710 [ 135.720219][ T7511] ? do_sock_setsockopt+0x257/0x3e0 [ 135.720242][ T7511] ? __x64_sys_setsockopt+0x18b/0x220 [ 135.720265][ T7511] ? do_syscall_64+0xfa/0x3b0 [ 135.720283][ T7511] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.720314][ T7511] __vmalloc_node_range_noprof+0x125/0x12f0 [ 135.720373][ T7511] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 135.720404][ T7511] ? __kasan_kmalloc+0x93/0xb0 [ 135.720427][ T7511] vmalloc_user_noprof+0xad/0xf0 [ 135.720450][ T7511] ? xskq_create+0xbf/0x170 [ 135.720480][ T7511] xskq_create+0xbf/0x170 [ 135.720528][ T7511] xsk_init_queue+0xb0/0x110 [ 135.720561][ T7511] xsk_setsockopt+0x43f/0x710 [ 135.720592][ T7511] ? __pfx_xsk_setsockopt+0x10/0x10 [ 135.720618][ T7511] ? __lock_acquire+0xab9/0xd20 [ 135.720657][ T7511] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 135.720684][ T7511] ? __pfx_xsk_setsockopt+0x10/0x10 [ 135.720714][ T7511] do_sock_setsockopt+0x257/0x3e0 [ 135.720743][ T7511] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 135.720774][ T7511] ? __fget_files+0x2a/0x420 [ 135.720806][ T7511] __x64_sys_setsockopt+0x18b/0x220 [ 135.720838][ T7511] do_syscall_64+0xfa/0x3b0 [ 135.720854][ T7511] ? lockdep_hardirqs_on+0x9c/0x150 [ 135.720883][ T7511] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.720904][ T7511] ? clear_bhb_loop+0x60/0xb0 [ 135.720930][ T7511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.720950][ T7511] RIP: 0033:0x7fbe7958e929 [ 135.720969][ T7511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.720987][ T7511] RSP: 002b:00007fbe7a3d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 135.721010][ T7511] RAX: ffffffffffffffda RBX: 00007fbe797b5fa0 RCX: 00007fbe7958e929 [ 135.721025][ T7511] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 135.721037][ T7511] RBP: 00007fbe79610b39 R08: 0000000000000004 R09: 0000000000000000 [ 135.721050][ T7511] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.721063][ T7511] R13: 0000000000000000 R14: 00007fbe797b5fa0 R15: 00007ffea1bf0098 [ 135.721095][ T7511] [ 135.721399][ T7511] Mem-Info: [ 136.069828][ T7511] active_anon:4263 inactive_anon:0 isolated_anon:0 [ 136.069828][ T7511] active_file:1142 inactive_file:39843 isolated_file:0 [ 136.069828][ T7511] unevictable:772 dirty:89 writeback:0 [ 136.069828][ T7511] slab_reclaimable:10404 slab_unreclaimable:98514 [ 136.069828][ T7511] mapped:28835 shmem:1361 pagetables:1038 [ 136.069828][ T7511] sec_pagetables:0 bounce:0 [ 136.069828][ T7511] kernel_misc_reclaimable:0 [ 136.069828][ T7511] free:1335329 free_pcp:17086 free_cma:0 [ 136.115883][ T51] Bluetooth: hci1: command tx timeout [ 136.159028][ T7511] Node 0 active_anon:17152kB inactive_anon:0kB active_file:4568kB inactive_file:159172kB unevictable:1552kB isolated(anon):0kB isolated(file):0kB mapped:115340kB dirty:356kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11660kB pagetables:3716kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 136.201912][ T7511] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 136.239240][ T7511] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 136.249641][ T7283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.284260][ T7529] netlink: 'syz.3.463': attribute type 1 has an invalid length. [ 136.329670][ T7529] bond4: entered promiscuous mode [ 136.336352][ T7511] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 136.342224][ T7511] Node 0 DMA32 free:1425664kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17208kB inactive_anon:0kB active_file:4568kB inactive_file:157340kB unevictable:1552kB writepending:352kB present:3129332kB managed:2561004kB mlocked:16kB bounce:0kB free_pcp:46332kB local_pcp:20004kB free_cma:0kB [ 136.366421][ T7529] 8021q: adding VLAN 0 to HW filter on device bond4 [ 136.396044][ T7511] lowmem_reserve[]: 0 0 1 1 1 [ 136.400880][ T7511] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1832kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 136.434418][ T7533] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 136.446594][ T7533] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 136.451800][ T7511] lowmem_reserve[]: 0 0 0 0 0 [ 136.461631][ T7511] Node 1 Normal free:3901240kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:21068kB local_pcp:12584kB free_cma:0kB [ 136.494720][ T7511] lowmem_reserve[]: 0 0 0 0 0 [ 136.501094][ T7511] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 136.514254][ T7511] Node 0 DMA32: 189*4kB (UM) 120*8kB (UM) 27*16kB (UE) 7*32kB (U) 1*64kB (U) 2*128kB (U) 15*256kB (UE) 11*512kB (UME) 16*1024kB (UM) 6*2048kB (M) 338*4096kB (M) = 1425284kB [ 136.533884][ T7511] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 136.548269][ T7511] Node 1 Normal: 218*4kB (UE) 44*8kB (UME) 39*16kB (UME) 54*32kB (UME) 19*64kB (UME) 5*128kB (UME) 6*256kB (UME) 4*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 949*4096kB (M) = 3901240kB [ 136.551880][ T7535] 8021q: adding VLAN 0 to HW filter on device bond4 [ 136.577744][ T7535] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 136.587019][ T7511] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 136.591545][ T7535] bond4: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 136.618496][ T7535] bond4: (slave wireguard0): making interface the new active one [ 136.623547][ T7511] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 136.626782][ T7535] wireguard0: entered promiscuous mode [ 136.629139][ T7535] bond4: (slave wireguard0): Enslaving as an active interface with an up link [ 136.683206][ T7511] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 136.697779][ T7511] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 136.708205][ T7511] 42342 total pagecache pages [ 136.745800][ T7511] 0 pages in swap cache [ 136.759754][ T7283] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.767504][ T7511] Free swap = 124996kB [ 136.771730][ T7511] Total swap = 124996kB [ 136.790264][ T7511] 2097051 pages RAM [ 136.794187][ T7511] 0 pages HighMem/MovableOnly [ 136.814473][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.816831][ T7511] 424694 pages reserved [ 136.821756][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.826341][ T7511] 0 pages cma reserved [ 136.902377][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.906345][ T7551] netlink: 'syz.4.468': attribute type 75 has an invalid length. [ 136.909729][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.934211][ T7552] bridge0: entered allmulticast mode [ 137.005205][ T7552] bridge0 (unregistering): left allmulticast mode [ 137.574915][ T7283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.704479][ T7283] veth0_vlan: entered promiscuous mode [ 137.771088][ T7283] veth1_vlan: entered promiscuous mode [ 137.936852][ T7283] veth0_macvtap: entered promiscuous mode [ 137.982701][ T7283] veth1_macvtap: entered promiscuous mode [ 138.088215][ T7283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.135407][ T7283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.157153][ T7609] __nla_validate_parse: 12 callbacks suppressed [ 138.157177][ T7609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.484'. [ 138.179123][ T7283] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.188833][ T7283] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.196810][ T51] Bluetooth: hci1: command 0x0419 tx timeout [ 138.214471][ T7283] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.258138][ T7283] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.328864][ T7619] netlink: 44 bytes leftover after parsing attributes in process `syz.4.486'. [ 138.345400][ T7619] netlink: 20 bytes leftover after parsing attributes in process `syz.4.486'. [ 138.349705][ T7618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.487'. [ 138.687447][ T7233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.695423][ T7233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.724163][ T7630] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 138.804902][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.837146][ T7638] xt_CT: You must specify a L4 protocol and not use inversions on it [ 138.853681][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.024545][ T7646] netlink: 'syz.3.494': attribute type 11 has an invalid length. [ 139.064788][ T7646] netlink: 224 bytes leftover after parsing attributes in process `syz.3.494'. [ 139.152529][ T7644] netlink: 4 bytes leftover after parsing attributes in process `syz.1.492'. [ 139.244035][ T7647] xt_l2tp: missing protocol rule (udp|l2tpip) [ 139.432501][ T7666] netlink: 'syz.0.501': attribute type 1 has an invalid length. [ 139.482256][ T7233] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.553605][ T7674] IPVS: set_ctl: invalid protocol: 115 172.20.20.170:20003 [ 139.638350][ T7666] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.715235][ T7672] macvtap0: entered promiscuous mode [ 139.734323][ T7672] bond1: entered promiscuous mode [ 139.741245][ T7672] macvtap0: entered allmulticast mode [ 139.754759][ T7672] bond1: entered allmulticast mode [ 139.766528][ T7672] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 139.836823][ T7233] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.040512][ T7233] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.106119][ T7689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.505'. [ 140.422944][ T7708] netlink: 'syz.1.508': attribute type 8 has an invalid length. [ 140.443028][ T7707] netlink: 'syz.4.509': attribute type 6 has an invalid length. [ 140.472977][ T7711] netlink: 20 bytes leftover after parsing attributes in process `syz.1.508'. [ 140.498873][ T7710] netlink: 20 bytes leftover after parsing attributes in process `syz.3.510'. [ 140.543870][ T7233] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.648409][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 140.664438][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 140.673035][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 140.684713][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 140.693662][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 140.701625][ T7723] netlink: 'syz.4.512': attribute type 11 has an invalid length. [ 140.701648][ T7723] netlink: 224 bytes leftover after parsing attributes in process `syz.4.512'. [ 140.704764][ T7708] bond1: entered promiscuous mode [ 140.725214][ T7708] bond1: entered allmulticast mode [ 140.731914][ T7708] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.801942][ T7726] xt_CT: You must specify a L4 protocol and not use inversions on it [ 140.931700][ T7729] nbd: must specify a size in bytes for the device [ 141.103697][ T7233] bridge_slave_1: left allmulticast mode [ 141.119718][ T7739] netlink: 'syz.4.516': attribute type 2 has an invalid length. [ 141.128395][ T7233] bridge_slave_1: left promiscuous mode [ 141.141543][ T7233] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.182895][ T7233] bridge_slave_0: left allmulticast mode [ 141.195255][ T7233] bridge_slave_0: left promiscuous mode [ 141.201796][ T7233] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.227684][ T7744] netlink: 'syz.1.519': attribute type 13 has an invalid length. [ 141.566694][ T7233] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.580540][ T7233] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.590843][ T7233] bond0 (unregistering): Released all slaves [ 141.684491][ T7744] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 142.193244][ T7233] hsr_slave_0: left promiscuous mode [ 142.209989][ T7233] hsr_slave_1: left promiscuous mode [ 142.225177][ T7233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.238011][ T7233] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.247382][ T7233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.260266][ T7233] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.300489][ T7233] veth1_macvtap: left promiscuous mode [ 142.307165][ T7233] veth0_macvtap: left promiscuous mode [ 142.313768][ T7233] veth1_vlan: left promiscuous mode [ 142.322509][ T7233] veth0_vlan: left promiscuous mode [ 142.765819][ T5838] Bluetooth: hci1: command tx timeout [ 142.830765][ T7233] team0 (unregistering): Port device team_slave_1 removed [ 142.877616][ T7233] team0 (unregistering): Port device team_slave_0 removed [ 143.425009][ T7720] chnl_net:caif_netlink_parms(): no params data found [ 143.863420][ T7720] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.900438][ T7720] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.925447][ T7720] bridge_slave_0: entered allmulticast mode [ 143.948505][ T7720] bridge_slave_0: entered promiscuous mode [ 143.950796][ T7819] __nla_validate_parse: 1 callbacks suppressed [ 143.950820][ T7819] netlink: 16 bytes leftover after parsing attributes in process `syz.4.536'. [ 143.984493][ T7720] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.995908][ T7720] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.010045][ T7720] bridge_slave_1: entered allmulticast mode [ 144.018255][ T7720] bridge_slave_1: entered promiscuous mode [ 144.180117][ T7720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.217814][ T7720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.320750][ T7720] team0: Port device team_slave_0 added [ 144.354224][ T7720] team0: Port device team_slave_1 added [ 144.432898][ T7720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.449411][ T7720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.496633][ T7720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.539461][ T7720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.559563][ T7720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.631212][ T7720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.747392][ T7720] hsr_slave_0: entered promiscuous mode [ 144.767090][ T7720] hsr_slave_1: entered promiscuous mode [ 144.780029][ T7720] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 144.788777][ T7720] Cannot create hsr debugfs directory [ 144.827833][ T7841] netlink: 16 bytes leftover after parsing attributes in process `syz.0.543'. [ 144.846097][ T5838] Bluetooth: hci1: command tx timeout [ 145.524669][ T7871] netlink: 'syz.0.553': attribute type 7 has an invalid length. [ 145.571544][ T7871] : entered promiscuous mode [ 145.632703][ T7720] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 145.665176][ T7720] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 145.690279][ T7878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.555'. [ 145.699825][ T7720] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 145.715391][ T7720] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 145.941862][ T7720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.041273][ T7720] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.071065][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.078536][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.110746][ T7903] netlink: 40 bytes leftover after parsing attributes in process `syz.1.561'. [ 146.115530][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.127103][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.333697][ T7916] netlink: 4 bytes leftover after parsing attributes in process `syz.3.564'. [ 146.489901][ T7922] netlink: 'syz.1.566': attribute type 11 has an invalid length. [ 146.505311][ T7922] netlink: 224 bytes leftover after parsing attributes in process `syz.1.566'. [ 146.754367][ T7720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.882748][ T7720] veth0_vlan: entered promiscuous mode [ 146.928114][ T5838] Bluetooth: hci1: command tx timeout [ 146.965611][ T7720] veth1_vlan: entered promiscuous mode [ 147.000161][ T7720] veth0_macvtap: entered promiscuous mode [ 147.025400][ T7720] veth1_macvtap: entered promiscuous mode [ 147.034191][ T7940] IPVS: set_ctl: invalid protocol: 236 172.20.20.170:20001 [ 147.138485][ T7720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.194347][ T7720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.244302][ T7720] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.276319][ T7720] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.295719][ T7720] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.315008][ T7720] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.340028][ T7960] netlink: 68 bytes leftover after parsing attributes in process `syz.1.574'. [ 147.357063][ T7955] team0: No ports can be present during mode change [ 147.366499][ T7960] netlink: 12 bytes leftover after parsing attributes in process `syz.1.574'. [ 147.500195][ T7964] netlink: 'syz.4.576': attribute type 1 has an invalid length. [ 147.534460][ T7953] syz.1.574 (7953) used greatest stack depth: 19368 bytes left [ 147.554285][ T7964] netlink: 'syz.4.576': attribute type 1 has an invalid length. [ 147.655941][ T7676] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.672415][ T7676] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.737666][ T7969] netlink: 'syz.1.578': attribute type 1 has an invalid length. [ 147.751901][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.768933][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.963712][ T7982] netlink: 'syz.4.583': attribute type 1 has an invalid length. [ 147.982325][ T7982] netlink: 220 bytes leftover after parsing attributes in process `syz.4.583'. [ 147.995762][ T7982] netlink: 'syz.4.583': attribute type 1 has an invalid length. [ 148.171172][ T7990] vlan2: entered promiscuous mode [ 148.180860][ T7990] bridge0: entered promiscuous mode [ 148.588444][ T8010] netlink: 192 bytes leftover after parsing attributes in process `syz.0.593'. [ 148.766320][ T8016] 8021q: VLANs not supported on sit0 [ 148.801874][ T8017] xt_CT: You must specify a L4 protocol and not use inversions on it [ 148.898599][ T8019] lo: entered allmulticast mode [ 148.978652][ T8023] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 149.138749][ T8022] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 149.165848][ T8022] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 149.202680][ T8028] netlink: 'syz.1.598': attribute type 10 has an invalid length. [ 149.237758][ T8031] __nla_validate_parse: 1 callbacks suppressed [ 149.237780][ T8031] netlink: 92 bytes leftover after parsing attributes in process `syz.3.601'. [ 149.295161][ T8028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.338379][ T8028] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 149.789087][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.255248][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.390847][ T8042] netlink: 'syz.3.604': attribute type 1 has an invalid length. [ 150.411549][ T8042] netlink: 'syz.3.604': attribute type 3 has an invalid length. [ 150.420030][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.430721][ T8042] netlink: 224 bytes leftover after parsing attributes in process `syz.3.604'. [ 150.633145][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.707327][ T8041] netlink: 'syz.4.605': attribute type 29 has an invalid length. [ 150.715928][ T8050] netlink: 'syz.4.605': attribute type 29 has an invalid length. [ 150.726502][ T8053] netlink: 28 bytes leftover after parsing attributes in process `syz.1.606'. [ 150.964527][ T8068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.610'. [ 150.974071][ T8063] netlink: 'syz.1.608': attribute type 1 has an invalid length. [ 150.997969][ T8063] netlink: 224 bytes leftover after parsing attributes in process `syz.1.608'. [ 151.064032][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 151.074322][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 151.084169][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 151.093858][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 151.112017][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 151.219032][ T49] bridge_slave_1: left allmulticast mode [ 151.240402][ T49] bridge_slave_1: left promiscuous mode [ 151.264123][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.344546][ T49] bridge_slave_0: left allmulticast mode [ 151.361671][ T49] bridge_slave_0: left promiscuous mode [ 151.375562][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.546696][ T8099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.619'. [ 151.696756][ T8109] netlink: 12 bytes leftover after parsing attributes in process `syz.3.621'. [ 151.754679][ T8103] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 151.836723][ T8111] netlink: 56 bytes leftover after parsing attributes in process `syz.1.623'. [ 151.846895][ T8111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.623'. [ 151.856094][ T8111] netlink: 31 bytes leftover after parsing attributes in process `syz.1.623'. [ 151.865113][ T8111] netlink: 'syz.1.623': attribute type 3 has an invalid length. [ 151.994117][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.006761][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.017251][ T49] bond0 (unregistering): Released all slaves [ 152.042739][ T8113] IPv6: NLM_F_REPLACE set, but no existing node found! [ 152.508156][ T8132] netlink: 'syz.0.629': attribute type 10 has an invalid length. [ 152.563180][ T8132] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 152.662950][ T49] hsr_slave_0: left promiscuous mode [ 152.685821][ T49] hsr_slave_1: left promiscuous mode [ 152.694502][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.705366][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.716832][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.737356][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.818057][ T49] veth1_macvtap: left promiscuous mode [ 152.839264][ T49] veth0_macvtap: left promiscuous mode [ 152.854136][ T49] veth1_vlan: left promiscuous mode [ 152.875892][ T49] veth0_vlan: left promiscuous mode [ 153.159930][ T51] Bluetooth: hci1: command tx timeout [ 153.441869][ T49] team0 (unregistering): Port device team_slave_1 removed [ 153.483257][ T49] team0 (unregistering): Port device team_slave_0 removed [ 153.913836][ T8151] netlink: 'syz.4.637': attribute type 1 has an invalid length. [ 153.932391][ T8151] netlink: 'syz.4.637': attribute type 2 has an invalid length. [ 154.194054][ T8070] chnl_net:caif_netlink_parms(): no params data found [ 154.294747][ T8176] xt_CT: No such helper "pptp" [ 154.399416][ T8184] __nla_validate_parse: 6 callbacks suppressed [ 154.399437][ T8184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.643'. [ 154.614894][ T8194] netlink: 28 bytes leftover after parsing attributes in process `syz.4.647'. [ 154.636384][ T8195] batadv0: Device is already in use. [ 154.652298][ T8070] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.660848][ T8194] netlink: 28 bytes leftover after parsing attributes in process `syz.4.647'. [ 154.676601][ T8070] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.683932][ T8070] bridge_slave_0: entered allmulticast mode [ 154.711702][ T8070] bridge_slave_0: entered promiscuous mode [ 154.762240][ T8070] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.780427][ T8070] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.796458][ T8070] bridge_slave_1: entered allmulticast mode [ 154.824849][ T8070] bridge_slave_1: entered promiscuous mode [ 154.871039][ T8198] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 154.995054][ T8070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.050003][ T8215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.652'. [ 155.073654][ T8070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.229740][ T8070] team0: Port device team_slave_0 added [ 155.233934][ T8226] netlink: 16 bytes leftover after parsing attributes in process `syz.0.655'. [ 155.245268][ T8226] IPv6: Can't replace route, no match found [ 155.253748][ T51] Bluetooth: hci1: command tx timeout [ 155.257852][ T8070] team0: Port device team_slave_1 added [ 155.368661][ T8070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.376164][ T8070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.424246][ T8070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.464922][ T8070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.480336][ T8070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.528038][ T8070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.723284][ T8070] hsr_slave_0: entered promiscuous mode [ 155.736164][ T8070] hsr_slave_1: entered promiscuous mode [ 155.742645][ T8070] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.752234][ T8070] Cannot create hsr debugfs directory [ 155.810642][ T8251] veth0_to_bond: entered promiscuous mode [ 156.024397][ T8258] veth0: entered promiscuous mode [ 156.151278][ T8264] veth0: left promiscuous mode [ 156.172335][ T8270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.671'. [ 156.215441][ T8273] netlink: zone id is out of range [ 156.221945][ T8273] netlink: zone id is out of range [ 156.227339][ T8273] netlink: zone id is out of range [ 156.233629][ T8273] netlink: zone id is out of range [ 156.239290][ T8273] netlink: zone id is out of range [ 156.245151][ T8273] netlink: zone id is out of range [ 156.250959][ T8273] netlink: zone id is out of range [ 156.256616][ T8273] netlink: zone id is out of range [ 156.261938][ T8273] netlink: zone id is out of range [ 156.287981][ T8273] netlink: 24 bytes leftover after parsing attributes in process `syz.3.672'. [ 156.311233][ T8277] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 156.626145][ T8070] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 156.640119][ T8070] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 156.655505][ T8070] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 156.673708][ T8070] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 156.939399][ T8070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.948280][ T8267] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 157.019152][ T8070] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.051407][ T7233] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.058667][ T7233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.082866][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.090180][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.196160][ T8312] netlink: 'syz.3.684': attribute type 3 has an invalid length. [ 157.216283][ T8312] netlink: 28 bytes leftover after parsing attributes in process `syz.3.684'. [ 157.250550][ T8316] xt_nat: multiple ranges no longer supported [ 157.252393][ T8315] netlink: 4 bytes leftover after parsing attributes in process `syz.4.685'. [ 157.306898][ T8315] netlink: 'syz.4.685': attribute type 1 has an invalid length. [ 157.315138][ T8315] netlink: 224 bytes leftover after parsing attributes in process `syz.4.685'. [ 157.333049][ T51] Bluetooth: hci1: command tx timeout [ 157.492697][ T8325] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 157.526291][ T8325] macsec1: entered allmulticast mode [ 157.531697][ T8325] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 157.572149][ T8325] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 157.592694][ T8325] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 157.716709][ T8331] bridge0: entered allmulticast mode [ 157.754164][ T8331] bridge_slave_1: left allmulticast mode [ 157.763766][ T8331] bridge_slave_1: left promiscuous mode [ 157.797165][ T8331] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.888618][ T8331] bridge_slave_0: left allmulticast mode [ 157.894931][ T8331] bridge_slave_0: left promiscuous mode [ 157.908693][ T8331] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.962518][ T8331] bridge0 (unregistering): left allmulticast mode [ 158.039604][ T8070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.092162][ T8070] veth0_vlan: entered promiscuous mode [ 158.107515][ T8070] veth1_vlan: entered promiscuous mode [ 158.141881][ T8070] veth0_macvtap: entered promiscuous mode [ 158.162276][ T8070] veth1_macvtap: entered promiscuous mode [ 158.182928][ T8070] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.196945][ T8070] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.219211][ T8070] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.229735][ T8070] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.239273][ T8070] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.248149][ T8070] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.321537][ T7233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.338227][ T7233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.368660][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.377903][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.182412][ T8361] erspan0: entered allmulticast mode [ 159.437730][ T8370] Cannot find add_set index 4 as target [ 159.620451][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.342561][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.490490][ T8395] bond0: entered allmulticast mode [ 160.499056][ T8395] bond_slave_0: entered allmulticast mode [ 160.504854][ T8395] bond_slave_1: entered allmulticast mode [ 160.506685][ T8394] __nla_validate_parse: 3 callbacks suppressed [ 160.506704][ T8394] netlink: 12 bytes leftover after parsing attributes in process `syz.0.706'. [ 160.852428][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.914753][ T8418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.715'. [ 161.030518][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 161.040464][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 161.049475][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 161.059063][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 161.068165][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 161.245077][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.676155][ T13] bridge_slave_1: left allmulticast mode [ 161.681896][ T13] bridge_slave_1: left promiscuous mode [ 161.701583][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.721700][ T8453] netlink: 48 bytes leftover after parsing attributes in process `syz.3.725'. [ 161.739864][ T13] bridge_slave_0: left allmulticast mode [ 161.743652][ T8456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.726'. [ 161.750226][ T13] bridge_slave_0: left promiscuous mode [ 161.763576][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.789071][ T8456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.726'. [ 162.320660][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.333946][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.345528][ T13] bond0 (unregistering): Released all slaves [ 162.706829][ T8487] netlink: 830 bytes leftover after parsing attributes in process `syz.4.732'. [ 162.729756][ T8486] netlink: 'syz.3.734': attribute type 10 has an invalid length. [ 162.745012][ T8486] netlink: 40 bytes leftover after parsing attributes in process `syz.3.734'. [ 162.931912][ T8486] team0: Port device geneve0 added [ 163.015931][ T8503] netlink: 12 bytes leftover after parsing attributes in process `syz.4.736'. [ 163.096995][ T13] hsr_slave_0: left promiscuous mode [ 163.118009][ T13] hsr_slave_1: left promiscuous mode [ 163.151746][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.165895][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.167665][ T5838] Bluetooth: hci1: command tx timeout [ 163.186258][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.190075][ T8510] netlink: 68 bytes leftover after parsing attributes in process `syz.0.739'. [ 163.193728][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.242516][ T13] veth1_macvtap: left promiscuous mode [ 163.249448][ T13] veth0_macvtap: left promiscuous mode [ 163.256643][ T13] veth1_vlan: left promiscuous mode [ 163.262206][ T13] veth0_vlan: left promiscuous mode [ 163.770838][ T13] team0 (unregistering): Port device team_slave_1 removed [ 163.817520][ T13] team0 (unregistering): Port device team_slave_0 removed [ 164.237607][ T8422] chnl_net:caif_netlink_parms(): no params data found [ 164.442438][ T8524] netlink: 'syz.3.743': attribute type 1 has an invalid length. [ 164.450903][ T8524] netlink: 'syz.3.743': attribute type 2 has an invalid length. [ 164.489647][ T8524] netlink: 'syz.3.743': attribute type 1 has an invalid length. [ 164.507525][ T8524] netlink: 'syz.3.743': attribute type 2 has an invalid length. [ 164.665346][ T8531] netlink: 'syz.4.747': attribute type 1 has an invalid length. [ 164.730412][ T8531] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 164.741229][ T8422] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.753104][ T8422] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.762135][ T8422] bridge_slave_0: entered allmulticast mode [ 164.783511][ T8422] bridge_slave_0: entered promiscuous mode [ 164.808032][ T8422] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.826501][ T8422] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.833837][ T8422] bridge_slave_1: entered allmulticast mode [ 164.848442][ T8422] bridge_slave_1: entered promiscuous mode [ 164.940961][ T8543] netlink: 'syz.4.750': attribute type 9 has an invalid length. [ 164.970978][ T8422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.031360][ T8422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.177595][ T8422] team0: Port device team_slave_0 added [ 165.193161][ T8422] team0: Port device team_slave_1 added [ 165.235949][ T5838] Bluetooth: hci1: command tx timeout [ 165.345119][ T8422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.360915][ T8565] net_ratelimit: 16 callbacks suppressed [ 165.360937][ T8565] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 165.376890][ T8422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.406353][ T8561] netlink: 12 bytes leftover after parsing attributes in process `syz.1.756'. [ 165.439865][ T8422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.498110][ T8422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.508451][ T8422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.535957][ T8422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.656644][ T8422] hsr_slave_0: entered promiscuous mode [ 165.663728][ T8422] hsr_slave_1: entered promiscuous mode [ 165.676574][ T8422] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 165.695823][ T8422] Cannot create hsr debugfs directory [ 166.182490][ T8584] netlink: 'syz.4.764': attribute type 16 has an invalid length. [ 166.190655][ T8584] netlink: 'syz.4.764': attribute type 17 has an invalid length. [ 166.272624][ T8568] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 166.490660][ T8596] netlink: 'syz.0.766': attribute type 33 has an invalid length. [ 166.632865][ T8422] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 166.693328][ T8422] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 166.735228][ T8422] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 166.754359][ T8422] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 166.802917][ T8606] dvmrp0: entered allmulticast mode [ 166.817062][ T8607] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 166.850497][ T8606] dvmrp0: left allmulticast mode [ 167.204828][ T8422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.315935][ T5838] Bluetooth: hci1: command tx timeout [ 167.337410][ T8422] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.380283][ T7233] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.387549][ T7233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.418743][ T7233] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.425979][ T7233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.453560][ T8422] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 167.751640][ T8655] xt_l2tp: v2 doesn't support IP mode [ 168.048197][ T8422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.182815][ T8422] veth0_vlan: entered promiscuous mode [ 168.241146][ T8422] veth1_vlan: entered promiscuous mode [ 168.249457][ T8674] lo speed is unknown, defaulting to 1000 [ 168.262578][ T8674] lo speed is unknown, defaulting to 1000 [ 168.304078][ T8674] lo speed is unknown, defaulting to 1000 [ 168.316456][ T8422] veth0_macvtap: entered promiscuous mode [ 168.338230][ T8422] veth1_macvtap: entered promiscuous mode [ 168.357840][ T8674] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 168.383320][ T8422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.416621][ T8422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.431399][ T8674] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 168.454071][ T8422] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.475753][ T8422] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.484800][ T8422] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.511294][ T8422] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.547445][ T8674] lo speed is unknown, defaulting to 1000 [ 168.567083][ T8674] lo speed is unknown, defaulting to 1000 [ 168.605355][ T8674] lo speed is unknown, defaulting to 1000 [ 168.642790][ T8674] lo speed is unknown, defaulting to 1000 [ 168.746876][ T8674] lo speed is unknown, defaulting to 1000 [ 168.761902][ T7676] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.803197][ T7676] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.836685][ T5838] Bluetooth: hci4: command 0x0401 tx timeout [ 169.029535][ T8685] syzkaller1: entered promiscuous mode [ 169.035228][ T8685] syzkaller1: entered allmulticast mode [ 169.044421][ T7233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.063069][ T7233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.150944][ T8700] x_tables: duplicate underflow at hook 3 [ 169.229560][ T8702] validate_nla: 1 callbacks suppressed [ 169.229582][ T8702] netlink: 'syz.1.794': attribute type 39 has an invalid length. [ 169.230323][ T8704] __nla_validate_parse: 1 callbacks suppressed [ 169.230341][ T8704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.795'. [ 169.580630][ T8715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.799'. [ 170.162828][ T7233] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.311826][ T7233] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.602119][ T7233] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.762827][ T7233] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.881964][ T7233] bridge_slave_1: left allmulticast mode [ 170.887747][ T7233] bridge_slave_1: left promiscuous mode [ 170.894208][ T7233] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.903815][ T7233] bridge_slave_0: left allmulticast mode [ 170.909724][ T7233] bridge_slave_0: left promiscuous mode [ 170.915470][ T7233] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.194007][ T8753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.809'. [ 171.260550][ T8755] netlink: 60 bytes leftover after parsing attributes in process `syz.0.809'. [ 171.454937][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 171.463405][ T7233] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.465998][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 171.481163][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 171.489172][ T7233] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.490164][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 171.509224][ T7233] bond0 (unregistering): Released all slaves [ 171.517282][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 171.583432][ T8753] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 171.924353][ T8767] pim6reg527: entered allmulticast mode [ 171.945724][ T8757] lo speed is unknown, defaulting to 1000 [ 172.035451][ T8779] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.070757][ T8782] netlink: 20 bytes leftover after parsing attributes in process `syz.0.820'. [ 172.095550][ T7233] hsr_slave_0: left promiscuous mode [ 172.109408][ T7233] hsr_slave_1: left promiscuous mode [ 172.131483][ T7233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.139119][ T7233] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.152747][ T8788] xt_HMARK: proto mask must be zero with L3 mode [ 172.156905][ T7233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.171913][ T7233] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.201599][ T8793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.823'. [ 172.204258][ T7233] veth1_macvtap: left promiscuous mode [ 172.216620][ T7233] veth0_macvtap: left promiscuous mode [ 172.222278][ T7233] veth1_vlan: left promiscuous mode [ 172.228271][ T7233] veth0_vlan: left promiscuous mode [ 172.678633][ T7233] team0 (unregistering): Port device team_slave_1 removed [ 172.718451][ T7233] team0 (unregistering): Port device team_slave_0 removed [ 173.423588][ T8806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.826'. [ 173.564193][ T5838] Bluetooth: hci1: command tx timeout [ 173.672746][ T8816] netlink: 16 bytes leftover after parsing attributes in process `syz.4.832'. [ 173.740831][ T8757] chnl_net:caif_netlink_parms(): no params data found [ 173.788415][ T8820] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 173.836657][ T8827] netlink: 24 bytes leftover after parsing attributes in process `syz.4.833'. [ 174.097286][ T8842] ieee802154 phy0 wpan0: encryption failed: -22 [ 174.136813][ T8838] syz.1.837 (8838) used greatest stack depth: 19272 bytes left [ 174.248331][ T8837] lo speed is unknown, defaulting to 1000 [ 174.256638][ T8757] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.263926][ T8757] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.271382][ T8757] bridge_slave_0: entered allmulticast mode [ 174.279048][ T8757] bridge_slave_0: entered promiscuous mode [ 174.296415][ T8757] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.303717][ T8757] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.317211][ T8757] bridge_slave_1: entered allmulticast mode [ 174.333440][ T8757] bridge_slave_1: entered promiscuous mode [ 174.481982][ T8757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.512941][ T8757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.662417][ T8757] team0: Port device team_slave_0 added [ 174.679807][ T8757] team0: Port device team_slave_1 added [ 174.847345][ T8757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.854562][ T8757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.884077][ T8757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.895992][ T8880] netlink: 596 bytes leftover after parsing attributes in process `syz.3.850'. [ 175.015872][ T8875] bond0: left allmulticast mode [ 175.020849][ T8875] bond_slave_0: left allmulticast mode [ 175.029504][ T8875] bond_slave_1: left allmulticast mode [ 175.038806][ T8875] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 175.055216][ T8757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.062779][ T8757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.090254][ T8757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.102374][ T8883] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 175.236947][ T8757] hsr_slave_0: entered promiscuous mode [ 175.243869][ T8757] hsr_slave_1: entered promiscuous mode [ 175.251579][ T8757] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.259670][ T8757] Cannot create hsr debugfs directory [ 175.341616][ T8892] netlink: 20 bytes leftover after parsing attributes in process `syz.4.853'. [ 175.366211][ T8892] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 175.431764][ T8894] netlink: 24 bytes leftover after parsing attributes in process `syz.3.854'. [ 175.636062][ T5838] Bluetooth: hci1: command tx timeout [ 175.715801][ T8910] netlink: 16 bytes leftover after parsing attributes in process `syz.0.858'. [ 175.723040][ T8905] netlink: 'syz.1.855': attribute type 1 has an invalid length. [ 175.758065][ T8912] netlink: 'syz.3.857': attribute type 12 has an invalid length. [ 175.772068][ T8912] netlink: 'syz.3.857': attribute type 29 has an invalid length. [ 175.806634][ T8912] netlink: 148 bytes leftover after parsing attributes in process `syz.3.857'. [ 175.822484][ T8912] netlink: 59 bytes leftover after parsing attributes in process `syz.3.857'. [ 175.908727][ T8919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.860'. [ 175.928687][ T8914] netlink: 'syz.4.859': attribute type 1 has an invalid length. [ 175.937385][ T8919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.860'. [ 175.952275][ T8921] vxcan1: tx address claim with dlc 0 [ 175.952914][ T8914] netlink: 224 bytes leftover after parsing attributes in process `syz.4.859'. [ 175.969264][ T8914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.859'. [ 176.643677][ T8757] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 176.804575][ T8757] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 176.831631][ T8971] netlink: 'syz.3.869': attribute type 2 has an invalid length. [ 176.852570][ T8971] netlink: 'syz.3.869': attribute type 8 has an invalid length. [ 176.889522][ T8968] bridge_slave_0: entered promiscuous mode [ 176.901589][ T8757] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 176.927025][ T8757] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 176.989540][ T8974] netlink: 'syz.3.869': attribute type 9 has an invalid length. [ 177.295097][ T8757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.367149][ T8757] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.405296][ T1085] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.412593][ T1085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.452183][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.459575][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.563659][ T9009] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 177.715914][ T5838] Bluetooth: hci1: command tx timeout [ 178.109866][ T9040] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 178.225519][ T8757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.323593][ T8757] veth0_vlan: entered promiscuous mode [ 178.343784][ T8757] veth1_vlan: entered promiscuous mode [ 178.414729][ T8757] veth0_macvtap: entered promiscuous mode [ 178.421354][ T9048] netlink: 'syz.4.889': attribute type 1 has an invalid length. [ 178.445169][ T8757] veth1_macvtap: entered promiscuous mode [ 178.489968][ T8757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.538848][ T8757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.569266][ T8757] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.581014][ T8757] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.590856][ T8757] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.600076][ T8757] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.731074][ T9058] netlink: 'syz.1.893': attribute type 10 has an invalid length. [ 178.786368][ T9064] netlink: 'syz.1.893': attribute type 10 has an invalid length. [ 178.818468][ T9058] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 178.880361][ T9069] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 178.906836][ T9066] tipc: Enabled bearer , priority 0 [ 178.914048][ T9067] tipc: Enabling of bearer rejected, already enabled [ 178.931776][ T9066] syzkaller0: entered promiscuous mode [ 178.941000][ T9066] syzkaller0: entered allmulticast mode [ 178.972524][ T7233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.987592][ T7233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.064788][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.091193][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.172620][ T9063] tipc: Resetting bearer [ 179.226649][ T9063] tipc: Disabling bearer [ 179.530011][ T9090] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.609822][ T9093] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 179.639116][ T9093] team0: Failed to send options change via netlink (err -105) [ 179.647034][ T9093] team0: Port device geneve0 added [ 179.730836][ T9090] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.866196][ T9090] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.932611][ T9108] __nla_validate_parse: 12 callbacks suppressed [ 179.932633][ T9108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.909'. [ 179.956315][ T9108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.909'. [ 179.998702][ T9090] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.264003][ T7233] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.511476][ T9090] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.546549][ T9090] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.566475][ T9090] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.585595][ T9090] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.088316][ T7233] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.162489][ T7233] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.332375][ T7233] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.741433][ T7233] bridge_slave_1: left allmulticast mode [ 181.748174][ T7233] bridge_slave_1: left promiscuous mode [ 181.766748][ T7233] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.790403][ T7233] bridge_slave_0: left allmulticast mode [ 181.814161][ T7233] bridge_slave_0: left promiscuous mode [ 181.827380][ T7233] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.040449][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 182.050310][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 182.060807][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 182.072864][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 182.091112][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 182.469783][ T7233] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.485571][ T7233] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.496285][ T7233] bond0 (unregistering): Released all slaves [ 182.578151][ T9155] lo speed is unknown, defaulting to 1000 [ 182.920147][ T9176] syz.3.929 (9176) used greatest stack depth: 18136 bytes left [ 182.927895][ T9174] syz.3.929 (9174) used greatest stack depth: 17992 bytes left [ 183.196715][ T7233] hsr_slave_0: left promiscuous mode [ 183.212373][ T7233] hsr_slave_1: left promiscuous mode [ 183.219169][ T7233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.230152][ T7233] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.243527][ T7233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.253395][ T7233] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.282374][ T7233] veth1_macvtap: left promiscuous mode [ 183.290467][ T7233] veth0_macvtap: left promiscuous mode [ 183.301571][ T7233] veth1_vlan: left promiscuous mode [ 183.307187][ T7233] veth0_vlan: left promiscuous mode [ 183.363003][ T9204] netlink: 4 bytes leftover after parsing attributes in process `syz.3.938'. [ 184.023823][ T7233] team0 (unregistering): Port device team_slave_1 removed [ 184.064826][ T7233] team0 (unregistering): Port device team_slave_0 removed [ 184.117929][ T51] Bluetooth: hci1: command tx timeout [ 184.631703][ T9155] chnl_net:caif_netlink_parms(): no params data found [ 184.755202][ T9232] Unknown options in mask 1f4 [ 184.923693][ T9246] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 184.956321][ T9155] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.970871][ T9155] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.984111][ T9155] bridge_slave_0: entered allmulticast mode [ 185.006412][ T9155] bridge_slave_0: entered promiscuous mode [ 185.022193][ T9155] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.030982][ T9155] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.045911][ T9155] bridge_slave_1: entered allmulticast mode [ 185.062713][ T9155] bridge_slave_1: entered promiscuous mode [ 185.197692][ T9155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.219746][ T9155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.258283][ T9263] netlink: 32 bytes leftover after parsing attributes in process `syz.1.950'. [ 185.378937][ T9155] team0: Port device team_slave_0 added [ 185.409211][ T9155] team0: Port device team_slave_1 added [ 185.516228][ T9155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.535759][ T9155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.559128][ T9272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.954'. [ 185.573334][ T9155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.594135][ T9155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.601697][ T9155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.628491][ T9155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.635417][ T9274] SET target dimension over the limit! [ 185.816288][ T9283] validate_nla: 3 callbacks suppressed [ 185.816312][ T9283] netlink: 'syz.3.959': attribute type 1 has an invalid length. [ 185.855073][ T9155] hsr_slave_0: entered promiscuous mode [ 185.878090][ T9155] hsr_slave_1: entered promiscuous mode [ 185.894548][ T9155] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 185.916673][ T9155] Cannot create hsr debugfs directory [ 185.930291][ T9289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.961'. [ 185.979631][ T9291] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 186.194978][ T9300] netlink: 'syz.4.965': attribute type 11 has an invalid length. [ 186.203246][ T9300] netlink: 224 bytes leftover after parsing attributes in process `syz.4.965'. [ 186.205826][ T51] Bluetooth: hci1: command tx timeout [ 186.230560][ T9301] netlink: 'syz.4.965': attribute type 11 has an invalid length. [ 186.245544][ T9301] netlink: 224 bytes leftover after parsing attributes in process `syz.4.965'. [ 186.291973][ T9300] netlink: 24 bytes leftover after parsing attributes in process `syz.4.965'. [ 186.420454][ T9310] netlink: 88 bytes leftover after parsing attributes in process `syz.4.969'. [ 186.461037][ T9310] gtp0: entered promiscuous mode [ 186.468282][ T9312] !: renamed from dummy0 (while UP) [ 186.651996][ T9318] netlink: 32 bytes leftover after parsing attributes in process `syz.0.970'. [ 186.693685][ T9318] netlink: 'syz.0.970': attribute type 11 has an invalid length. [ 186.714587][ T9318] netlink: 224 bytes leftover after parsing attributes in process `syz.0.970'. [ 186.727571][ T9318] netlink: 32 bytes leftover after parsing attributes in process `syz.0.970'. [ 187.177362][ T9155] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 187.302080][ T9155] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 187.394774][ T9155] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 187.472723][ T9155] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 187.604625][ T9353] tipc: Started in network mode [ 187.614154][ T9353] tipc: Node identity ac14140f, cluster identity 4711 [ 187.641724][ T9353] tipc: New replicast peer: 255.255.255.255 [ 187.662268][ T9353] tipc: Enabled bearer , priority 10 [ 187.911350][ T9155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.010338][ T9155] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.084421][ T9380] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 188.143665][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.150960][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.218367][ T7233] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.225679][ T7233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.276835][ T51] Bluetooth: hci1: command tx timeout [ 188.411770][ T9385] netlink: 'syz.4.987': attribute type 1 has an invalid length. [ 188.785757][ T5833] tipc: Node number set to 2886997007 [ 189.120615][ T9155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.301479][ T9155] veth0_vlan: entered promiscuous mode [ 189.310358][ T9420] Driver unsupported XDP return value 0 on prog (id 194) dev N/A, expect packet loss! [ 189.397636][ T9419] ip6erspan1: entered promiscuous mode [ 189.415260][ T9155] veth1_vlan: entered promiscuous mode [ 189.547774][ T9155] veth0_macvtap: entered promiscuous mode [ 189.599612][ T9155] veth1_macvtap: entered promiscuous mode [ 189.680159][ T9155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.711295][ T9155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.882758][ T9155] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.892309][ T9155] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.901435][ T9155] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.911804][ T9155] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.012054][ T1165] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.090744][ T1165] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.154889][ T1165] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.203315][ T1165] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.224087][ T7233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.239131][ T7233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.308376][ T7233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.323098][ T7233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.356056][ T51] Bluetooth: hci1: command tx timeout [ 190.540995][ T1165] bridge_slave_0: left allmulticast mode [ 190.561011][ T1165] bridge_slave_0: left promiscuous mode [ 190.572153][ T1165] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.846667][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 190.858437][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 190.873848][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 190.883240][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 190.897188][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 190.986698][ T1165] team0: Port device geneve0 removed [ 191.261810][ T1165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.272982][ T1165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.284987][ T1165] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 191.296305][ T1165] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 191.308091][ T1165] bond0 (unregistering): Released all slaves [ 191.401568][ T1165] bond1 (unregistering): Released all slaves [ 191.418061][ T1165] bond2 (unregistering): Released all slaves [ 191.511897][ T9458] dvmrp4: entered allmulticast mode [ 191.605286][ T9462] lo speed is unknown, defaulting to 1000 [ 191.726636][ T9474] __nla_validate_parse: 9 callbacks suppressed [ 191.726657][ T9474] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1018'. [ 192.110960][ T9462] chnl_net:caif_netlink_parms(): no params data found [ 192.202064][ T9462] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.209482][ T9462] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.216845][ T9462] bridge_slave_0: entered allmulticast mode [ 192.224219][ T9462] bridge_slave_0: entered promiscuous mode [ 192.233901][ T9462] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.241432][ T9462] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.248840][ T9462] bridge_slave_1: entered allmulticast mode [ 192.256359][ T9462] bridge_slave_1: entered promiscuous mode [ 192.292558][ T9462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.306046][ T9462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.347310][ T9462] team0: Port device team_slave_0 added [ 192.358152][ T9462] team0: Port device team_slave_1 added [ 192.391681][ T9462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.398995][ T9462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.425509][ T9462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.439642][ T9462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.446932][ T9462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.473963][ T9462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.525239][ T9462] hsr_slave_0: entered promiscuous mode [ 192.532628][ T9462] hsr_slave_1: entered promiscuous mode [ 192.540337][ T9462] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 192.548157][ T9462] Cannot create hsr debugfs directory [ 192.928564][ T9495] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1022'. [ 192.955266][ T9495] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1022'. [ 192.996146][ T5838] Bluetooth: hci1: command tx timeout [ 193.008924][ T9495] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1022'. [ 193.038583][ T9495] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1022'. [ 193.104437][ T9498] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1022'. [ 193.185992][ T9498] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1022'. [ 193.215332][ T9498] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1022'. [ 193.246595][ T9498] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1022'. [ 193.280492][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 193.301015][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 193.310713][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 193.320520][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 193.349289][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 193.388545][ T9502] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 193.666202][ T9517] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20003 [ 193.687063][ T9517] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20002 [ 193.696888][ T9513] bond0: (slave bridge_slave_1): Releasing backup interface [ 193.768367][ T9513] team0: Port device vlan0 removed [ 193.862679][ T9520] x_tables: unsorted entry at hook 2 [ 193.954243][ T9507] lo speed is unknown, defaulting to 1000 [ 194.439824][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.446431][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.728085][ T1165] hsr_slave_0: left promiscuous mode [ 194.751637][ T1165] hsr_slave_1: left promiscuous mode [ 194.771318][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.792221][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.807279][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.822306][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.854299][ T1165] veth1_macvtap: left promiscuous mode [ 194.874893][ T1165] veth0_macvtap: left promiscuous mode [ 194.892161][ T1165] veth1_vlan: left promiscuous mode [ 194.906094][ T1165] veth0_vlan: left promiscuous mode [ 195.080807][ T5838] Bluetooth: hci1: command tx timeout [ 195.396300][ T5838] Bluetooth: hci3: command tx timeout [ 195.647098][ T1165] team0 (unregistering): Port device team_slave_1 removed [ 195.687521][ T1165] team0 (unregistering): Port device team_slave_0 removed [ 196.034778][ T9462] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 196.051865][ T9551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1030'. [ 196.135033][ T9462] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 196.170377][ T9462] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 196.182304][ T9567] netlink: 'syz.3.1034': attribute type 142 has an invalid length. [ 196.200500][ T9462] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 196.246795][ T9570] Bluetooth: MGMT ver 1.23 [ 196.530233][ T9462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.579535][ T9462] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.613280][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.620553][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.664041][ T9590] team_slave_1: entered allmulticast mode [ 196.691689][ T9507] chnl_net:caif_netlink_parms(): no params data found [ 196.718627][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.725887][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.978199][ T9507] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.987544][ T9507] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.994949][ T9507] bridge_slave_0: entered allmulticast mode [ 197.019251][ T9507] bridge_slave_0: entered promiscuous mode [ 197.034686][ T9507] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.076144][ T9507] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.083467][ T9507] bridge_slave_1: entered allmulticast mode [ 197.117656][ T9507] bridge_slave_1: entered promiscuous mode [ 197.146861][ T9618] __nla_validate_parse: 5 callbacks suppressed [ 197.146882][ T9618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1047'. [ 197.163778][ T5838] Bluetooth: hci1: command tx timeout [ 197.176092][ T9618] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 197.222322][ T9618] netlink: 'syz.0.1047': attribute type 21 has an invalid length. [ 197.240134][ T9507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.257708][ T9507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.306049][ T9618] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000035: 0000 [#1] SMP KASAN PTI [ 197.318012][ T9618] KASAN: null-ptr-deref in range [0x00000000000001a8-0x00000000000001af] [ 197.326486][ T9618] CPU: 0 UID: 0 PID: 9618 Comm: syz.0.1047 Not tainted 6.16.0-rc3-syzkaller-00144-gbd475eeaaf3c #0 PREEMPT(full) [ 197.338497][ T9618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 197.348567][ T9618] RIP: 0010:htb_qlen_notify+0x31/0xc0 [ 197.353985][ T9618] Code: 41 56 41 55 41 54 53 49 89 f6 49 89 ff 49 bc 00 00 00 00 00 fc ff df e8 3d c6 46 f8 49 8d 9e a8 01 00 00 49 89 dd 49 c1 ed 03 <43> 0f b6 44 25 00 84 c0 75 4d 8b 2b 31 ff 89 ee e8 5a ca 46 f8 85 [ 197.373604][ T9618] RSP: 0018:ffffc90003047070 EFLAGS: 00010206 [ 197.379703][ T9618] RAX: ffffffff89798833 RBX: 00000000000001a8 RCX: 0000000000080000 [ 197.387689][ T9618] RDX: ffffc9000c039000 RSI: 0000000000000381 RDI: 0000000000000382 [ 197.395771][ T9618] RBP: dffffc0000000000 R08: ffff888029ea3c00 R09: 0000000000000002 [ 197.403776][ T9618] R10: 00000000ffffffff R11: ffffffff89798810 R12: dffffc0000000000 [ 197.411767][ T9618] R13: 0000000000000035 R14: 0000000000000000 R15: ffff8880574dc000 [ 197.419754][ T9618] FS: 00007fa3e39476c0(0000) GS:ffff888125c50000(0000) knlGS:0000000000000000 [ 197.428705][ T9618] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 197.435299][ T9618] CR2: 00007f55d2f5e000 CR3: 0000000077340000 CR4: 00000000003526f0 [ 197.443384][ T9618] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 197.451368][ T9618] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 197.459352][ T9618] Call Trace: [ 197.462643][ T9618] [ 197.465587][ T9618] qdisc_tree_reduce_backlog+0x29c/0x480 [ 197.471258][ T9618] ? qdisc_tree_reduce_backlog+0x3c/0x480 [ 197.477005][ T9618] fq_codel_change+0xa96/0xef0 [ 197.481789][ T9618] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 197.487365][ T9618] ? __pfx_fq_codel_change+0x10/0x10 [ 197.492685][ T9618] ? __sock_sendmsg+0x21c/0x270 [ 197.497568][ T9618] fq_codel_init+0x355/0x960 [ 197.502173][ T9618] ? lockdep_rtnl_is_held+0x26/0x40 [ 197.507395][ T9618] ? __pfx_fq_codel_init+0x10/0x10 [ 197.512519][ T9618] qdisc_create+0x7ac/0xea0 [ 197.517049][ T9618] tc_modify_qdisc+0x1426/0x2010 [ 197.522015][ T9618] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 197.527339][ T9618] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 197.532650][ T9618] rtnetlink_rcv_msg+0x779/0xb70 [ 197.537601][ T9618] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 197.542723][ T9618] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 197.548192][ T9618] ? ref_tracker_free+0x63a/0x7d0 [ 197.553234][ T9618] ? __copy_skb_header+0xa7/0x550 [ 197.558280][ T9618] ? __pfx_ref_tracker_free+0x10/0x10 [ 197.563671][ T9618] ? __skb_clone+0x63/0x7a0 [ 197.568199][ T9618] netlink_rcv_skb+0x208/0x470 [ 197.572981][ T9618] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 197.578462][ T9618] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 197.583770][ T9618] ? netlink_deliver_tap+0x2e/0x1b0 [ 197.588986][ T9618] ? netlink_deliver_tap+0x2e/0x1b0 [ 197.594473][ T9618] netlink_unicast+0x75b/0x8d0 [ 197.599259][ T9618] netlink_sendmsg+0x805/0xb30 [ 197.604042][ T9618] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.609348][ T9618] ? aa_sock_msg_perm+0x94/0x160 [ 197.614322][ T9618] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 197.619644][ T9618] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.624948][ T9618] __sock_sendmsg+0x21c/0x270 [ 197.629650][ T9618] ____sys_sendmsg+0x505/0x830 [ 197.634522][ T9618] ? __pfx_____sys_sendmsg+0x10/0x10 [ 197.639829][ T9618] ? import_iovec+0x74/0xa0 [ 197.644345][ T9618] ___sys_sendmsg+0x21f/0x2a0 [ 197.649043][ T9618] ? __pfx____sys_sendmsg+0x10/0x10 [ 197.654281][ T9618] ? __fget_files+0x2a/0x420 [ 197.658889][ T9618] ? __fget_files+0x3a0/0x420 [ 197.663586][ T9618] __x64_sys_sendmsg+0x19b/0x260 [ 197.668546][ T9618] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 197.674053][ T9618] ? rcu_is_watching+0x15/0xb0 [ 197.678872][ T9618] ? do_syscall_64+0xbe/0x3b0 [ 197.683575][ T9618] do_syscall_64+0xfa/0x3b0 [ 197.688097][ T9618] ? lockdep_hardirqs_on+0x9c/0x150 [ 197.693316][ T9618] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.699397][ T9618] ? clear_bhb_loop+0x60/0xb0 [ 197.704105][ T9618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.710018][ T9618] RIP: 0033:0x7fa3e2b8e929 [ 197.714470][ T9618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.734102][ T9618] RSP: 002b:00007fa3e3947038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.742537][ T9618] RAX: ffffffffffffffda RBX: 00007fa3e2db5fa0 RCX: 00007fa3e2b8e929 [ 197.750531][ T9618] RDX: 0000000000000800 RSI: 0000200000000100 RDI: 000000000000000a [ 197.758519][ T9618] RBP: 00007fa3e2c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 197.766510][ T9618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.774492][ T9618] R13: 0000000000000000 R14: 00007fa3e2db5fa0 R15: 00007ffec01808d8 [ 197.782489][ T9618] [ 197.785524][ T9618] Modules linked in: [ 197.789649][ T9618] ---[ end trace 0000000000000000 ]--- [ 197.795146][ T9618] RIP: 0010:htb_qlen_notify+0x31/0xc0 [ 197.798626][ T5838] Bluetooth: hci3: command tx timeout [ 197.800579][ T9618] Code: 41 56 41 55 41 54 53 49 89 f6 49 89 ff 49 bc 00 00 00 00 00 fc ff df e8 3d c6 46 f8 49 8d 9e a8 01 00 00 49 89 dd 49 c1 ed 03 <43> 0f b6 44 25 00 84 c0 75 4d 8b 2b 31 ff 89 ee e8 5a ca 46 f8 85 [ 197.825649][ T9618] RSP: 0018:ffffc90003047070 EFLAGS: 00010206 [ 197.831775][ T9618] RAX: ffffffff89798833 RBX: 00000000000001a8 RCX: 0000000000080000 [ 197.839825][ T9618] RDX: ffffc9000c039000 RSI: 0000000000000381 RDI: 0000000000000382 [ 197.847874][ T9618] RBP: dffffc0000000000 R08: ffff888029ea3c00 R09: 0000000000000002 [ 197.855920][ T9618] R10: 00000000ffffffff R11: ffffffff89798810 R12: dffffc0000000000 [ 197.864032][ T9618] R13: 0000000000000035 R14: 0000000000000000 R15: ffff8880574dc000 [ 197.872450][ T9618] FS: 00007fa3e39476c0(0000) GS:ffff888125c50000(0000) knlGS:0000000000000000 [ 197.881465][ T9618] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 197.888131][ T9618] CR2: 00007f55d2f5e000 CR3: 0000000077340000 CR4: 00000000003526f0 [ 197.896640][ T9618] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 197.904678][ T9618] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 197.912708][ T9618] Kernel panic - not syncing: Fatal exception in interrupt [ 197.920251][ T9618] Kernel Offset: disabled [ 197.924593][ T9618] Rebooting in 86400 seconds..