last executing test programs: 1m28.130009063s ago: executing program 1 (id=946): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=r0, @ANYBLOB="81ffffff104300003000128008000100687372002400028008000100", @ANYRES32=r1, @ANYRESOCT=r0, @ANYRES32=r2, @ANYBLOB="050006ee020000000500070001"], 0x50}}, 0x1) 1m17.631963552s ago: executing program 1 (id=946): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=r0, @ANYBLOB="81ffffff104300003000128008000100687372002400028008000100", @ANYRES32=r1, @ANYRESOCT=r0, @ANYRES32=r2, @ANYBLOB="050006ee020000000500070001"], 0x50}}, 0x1) 1m12.459145766s ago: executing program 0 (id=1161): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0xffff, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000080)="ff00", 0x2}, {&(0x7f0000000000)="0c080d9614fac7a07295208d5871cc09010000000000", 0x16}, {&(0x7f0000000440)="12647c24b9b9056ea6144758ddc0b82e74a040bf5bc04f7f004c201f3a9785c59a90fb96266b1c1b12295681e366980b2e8ecfd2c0d3374ee65c451ea1c384cd339dea5703858dfa1c3845cef09a5b3e12e661f3bef976d316276af9cddae11e6f36718462d1b4d343b7c9b839e87fabf91647c51c6b0f89d6b5682911728bb88b110f303477ea887c174165aa65c2f60742ddad8c86b1b32cd903a7f43565d0cbe700a0ff2c04aa40148b03ece455be09a41e2ccf59baee1a8e15fff46e35f3f728f47168", 0xc5}, {&(0x7f0000000380)="a1d1e157db251716c1bd7e18462583a461d50f979b845ae8bad91d6ce5c8e8edc81e001cbac7f11e92c2b71071241322534c0a7dd8b341c8a9d443bd6f8a8ad4699743c2dd64263c0c9de864b429f7a1875ab3543077584c6cc97a880f9b34708c11a4b44af9bf60073c38dc98301fa5278917270a1e6f96fbd3776738babd58a973dea04e10ed46da46b0d8caf07072a878f4886bac", 0x96}], 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1c00000700000007000000890b040a0101027f0000013b000000001c000000000000000000000008bc4fbafe38739cee", @ANYRESHEX=r0], 0x40}, 0x4000811) 1m11.899192113s ago: executing program 0 (id=1165): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = socket(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0xbc, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0xfffffff7}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x2}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x9}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x400}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x4d}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x30, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x10}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x6c}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x5556}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xffffff9f}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x6}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xffffffff}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x6}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffff9}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5caa}]}, 0xbc}}, 0x40840) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x6, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3db}, [@map_fd={0x18, 0x2, 0x1, 0x0, r0}, @alu={0x4, 0x0, 0x6, 0x1, 0x9, 0x4, 0x8}]}, &(0x7f0000000280)='GPL\x00', 0xfff, 0x0, 0x0, 0x41000, 0x50, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r0, r0, r0, r0, r0, r0, r0, r0], 0x0, 0x10, 0xfffffffb, @void, @value}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x90, r4, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_PEER_ADDR6={0x14, 0xb, @loopback}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDR6={0x14, 0xb, @private1}, @GTPA_O_TEI={0x8, 0x9, 0xf}, @GTPA_I_TEI={0x8}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00'}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000050}, 0x4c840) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x9, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xd, 0x6c, &(0x7f00000007c0)=ANY=[@ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020702500000000002020207b1af8ff00000000bda1000000000000a7010000f8ffffffb702000008000000b7030000000000007209000006000000bf91000000000000b5020000000000008500000085000000b70000000000000095", @ANYRES32=r0, @ANYBLOB="1807000000000000000000000000000018110000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 59.328543367s ago: executing program 1 (id=946): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=r0, @ANYBLOB="81ffffff104300003000128008000100687372002400028008000100", @ANYRES32=r1, @ANYRESOCT=r0, @ANYRES32=r2, @ANYBLOB="050006ee020000000500070001"], 0x50}}, 0x1) 58.382058063s ago: executing program 0 (id=1165): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = socket(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0xbc, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0xfffffff7}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x2}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x9}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x400}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x4d}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x30, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x10}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x6c}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x5556}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xffffff9f}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x6}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xffffffff}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x6}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffff9}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5caa}]}, 0xbc}}, 0x40840) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x6, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3db}, [@map_fd={0x18, 0x2, 0x1, 0x0, r0}, @alu={0x4, 0x0, 0x6, 0x1, 0x9, 0x4, 0x8}]}, &(0x7f0000000280)='GPL\x00', 0xfff, 0x0, 0x0, 0x41000, 0x50, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r0, r0, r0, r0, r0, r0, r0, r0], 0x0, 0x10, 0xfffffffb, @void, @value}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x90, r4, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_PEER_ADDR6={0x14, 0xb, @loopback}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDR6={0x14, 0xb, @private1}, @GTPA_O_TEI={0x8, 0x9, 0xf}, @GTPA_I_TEI={0x8}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00'}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000050}, 0x4c840) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x9, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xd, 0x6c, &(0x7f00000007c0)=ANY=[@ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020702500000000002020207b1af8ff00000000bda1000000000000a7010000f8ffffffb702000008000000b7030000000000007209000006000000bf91000000000000b5020000000000008500000085000000b70000000000000095", @ANYRES32=r0, @ANYBLOB="1807000000000000000000000000000018110000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 41.880803503s ago: executing program 0 (id=1165): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = socket(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0xbc, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0xfffffff7}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x2}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x9}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x400}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x4d}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x30, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x10}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x6c}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x5556}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xffffff9f}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x6}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xffffffff}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x6}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffff9}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5caa}]}, 0xbc}}, 0x40840) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x6, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3db}, [@map_fd={0x18, 0x2, 0x1, 0x0, r0}, @alu={0x4, 0x0, 0x6, 0x1, 0x9, 0x4, 0x8}]}, &(0x7f0000000280)='GPL\x00', 0xfff, 0x0, 0x0, 0x41000, 0x50, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r0, r0, r0, r0, r0, r0, r0, r0], 0x0, 0x10, 0xfffffffb, @void, @value}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x90, r4, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_PEER_ADDR6={0x14, 0xb, @loopback}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDR6={0x14, 0xb, @private1}, @GTPA_O_TEI={0x8, 0x9, 0xf}, @GTPA_I_TEI={0x8}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00'}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000050}, 0x4c840) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x9, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xd, 0x6c, &(0x7f00000007c0)=ANY=[@ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020702500000000002020207b1af8ff00000000bda1000000000000a7010000f8ffffffb702000008000000b7030000000000007209000006000000bf91000000000000b5020000000000008500000085000000b70000000000000095", @ANYRES32=r0, @ANYBLOB="1807000000000000000000000000000018110000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 41.233262965s ago: executing program 1 (id=946): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=r0, @ANYBLOB="81ffffff104300003000128008000100687372002400028008000100", @ANYRES32=r1, @ANYRESOCT=r0, @ANYRES32=r2, @ANYBLOB="050006ee020000000500070001"], 0x50}}, 0x1) 23.503983111s ago: executing program 1 (id=946): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=r0, @ANYBLOB="81ffffff104300003000128008000100687372002400028008000100", @ANYRES32=r1, @ANYRESOCT=r0, @ANYRES32=r2, @ANYBLOB="050006ee020000000500070001"], 0x50}}, 0x1) 23.33510724s ago: executing program 0 (id=1165): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = socket(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0xbc, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0xfffffff7}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x2}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x9}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x400}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x4d}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x30, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x10}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x6c}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x5556}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xffffff9f}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x6}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xffffffff}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x6}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffff9}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5caa}]}, 0xbc}}, 0x40840) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x6, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3db}, [@map_fd={0x18, 0x2, 0x1, 0x0, r0}, @alu={0x4, 0x0, 0x6, 0x1, 0x9, 0x4, 0x8}]}, &(0x7f0000000280)='GPL\x00', 0xfff, 0x0, 0x0, 0x41000, 0x50, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r0, r0, r0, r0, r0, r0, r0, r0], 0x0, 0x10, 0xfffffffb, @void, @value}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x90, r4, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_PEER_ADDR6={0x14, 0xb, @loopback}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDR6={0x14, 0xb, @private1}, @GTPA_O_TEI={0x8, 0x9, 0xf}, @GTPA_I_TEI={0x8}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00'}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000050}, 0x4c840) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x9, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xd, 0x6c, &(0x7f00000007c0)=ANY=[@ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020702500000000002020207b1af8ff00000000bda1000000000000a7010000f8ffffffb702000008000000b7030000000000007209000006000000bf91000000000000b5020000000000008500000085000000b70000000000000095", @ANYRES32=r0, @ANYBLOB="1807000000000000000000000000000018110000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 9.959418357s ago: executing program 1 (id=946): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=r0, @ANYBLOB="81ffffff104300003000128008000100687372002400028008000100", @ANYRES32=r1, @ANYRESOCT=r0, @ANYRES32=r2, @ANYBLOB="050006ee020000000500070001"], 0x50}}, 0x1) 7.587421803s ago: executing program 0 (id=1165): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = socket(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0xbc, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0xfffffff7}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x2}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x9}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x400}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x4d}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x30, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x10}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x6c}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x5556}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xffffff9f}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x6}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xffffffff}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x6}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffff9}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5caa}]}, 0xbc}}, 0x40840) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x6, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3db}, [@map_fd={0x18, 0x2, 0x1, 0x0, r0}, @alu={0x4, 0x0, 0x6, 0x1, 0x9, 0x4, 0x8}]}, &(0x7f0000000280)='GPL\x00', 0xfff, 0x0, 0x0, 0x41000, 0x50, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r0, r0, r0, r0, r0, r0, r0, r0], 0x0, 0x10, 0xfffffffb, @void, @value}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x90, r4, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_PEER_ADDR6={0x14, 0xb, @loopback}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDR6={0x14, 0xb, @private1}, @GTPA_O_TEI={0x8, 0x9, 0xf}, @GTPA_I_TEI={0x8}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00'}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000050}, 0x4c840) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x9, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xd, 0x6c, &(0x7f00000007c0)=ANY=[@ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020702500000000002020207b1af8ff00000000bda1000000000000a7010000f8ffffffb702000008000000b7030000000000007209000006000000bf91000000000000b5020000000000008500000085000000b70000000000000095", @ANYRES32=r0, @ANYBLOB="1807000000000000000000000000000018110000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 3.343176297s ago: executing program 2 (id=1583): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x1038, 0xffffffffffffffff, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) getpeername$l2tp6(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a30000000005d000000090a010400000000000000000a00008a85fd35f77570540008000a40000000000900020073797a31000000000900010073797a300000000600000000000000232000bdf8d3eb58990a4671dc11800e000100636f6e6e6c696d69740000000c0002800800014000000000140000001000010000002135fdbdb1830aa4ed18e0066e1a54c6422af16949fa8e72b7eb47f6feac54bbf52e111853999b72051203f30fd7cac0e897595a39bb708f3bec44844343c68f95ad5272325e7f1ef55e47a8b6d4f9e383194ecb351eb5767bcd9ac3dd491296a25773a155fdf5e0e2f74e0c345859598b0881784bb20d06b2eff7943958560aeaf3c034e1f728cd1eaf715db81ef91cc00c21ebd16ed6efba68b45c49aaa69d79eb76c51453d61abe1bb8bd58f8df5dfec60405ec5b808b7c"], 0xa4}}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300), &(0x7f0000000340)=0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326bd7000fedbdf250600000006001d00090000000c001000a900000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4040857}, 0x1) 3.244254677s ago: executing program 2 (id=1584): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0xc1, 0x88, &(0x7f0000000000)="3ee9462f3e0be96aeabe9ec9b30891d0417c49072f5f1cedbd42d91bccfecbed5c1167c2fada3b8f731d359046ddf6a7957114eaa64c160021201b1614de728f1a31af717eeee8440894d2df2a92a7c47d1444165488b83abfd425225ab116745ec9a17b7390529fda751bd2ebb7db691b6a012974f3555b5bd088d61ad83b9c8dced0d087512a761bb8ccb234e60ce57519c858f4d13b582c61ce9dac8caba71280912213868acd954e4ff0aecef8d1dda7e999c58287370fd472ba74b1a2bb9c", &(0x7f0000000100)=""/136, 0x9, 0x0, 0x45, 0x97, &(0x7f00000001c0)="2be7b89d65354157cf0aedb528ae6522a26ea9a7348fcb87e3f855a0f3d849fefc2575e5873099223db7cffad7358bfed014d33dc65c73999c8944d392cf9b6ce539fe9647", &(0x7f0000000240)="a8db4d829055dd60a46058a2a55138895bfee05a2444cc56402a4543e78ab93cc8f522357cac0e3ed28c830b42609899f223329af78830529dfe2b46a1946d7ff0336a4446ea7e498f00c3d731422401950c403174ba83b019aae05dc37c6efdbc0851b4cf8e75e54955c9ee6ccfeda0d392f3c4700a9417e8367d0689b068a9589ef69b4575e4e8b56e07e8a29c3d863084bca61cc0e1", 0x1, 0x0, 0xfff}, 0x50) r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000008c0)={&(0x7f0000000380)=@hci={0x1f, 0x4, 0x2}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000400)="a804078eed9c642f58eed4612c0ffe5721d87320808983dd48a9361a886f23a62565f3c886db1fd0812eb34b72bd6442d1edbb4ade52ca477daa1643222ccfb5fac14c2e309490505906733789ccd2b2680343e7b414df3012018d1e94038f0253db977e253181930b18a28139ed858adb9dbdfb1dd52e058947fd98919318ad8b2b31f5292defb6949f7d1776cdbad5e330f79644e127edc3062c264c", 0x9d}, {&(0x7f00000004c0)="e3d8461fa9f3e59025aa2cc6a90d21bb5fda2747873aa3da48c4134816cb65b6e154dab83df666f1e60491f66b94f1db889ec558fe4077e71e6cc1522f295f9536cee788167b2034d527ca130d7fd906fa12f3cbe9dacf803251ef69414bd6a1e7026e6256368d1a7a39acc4fa6221e82eca178d19ba32b27e499ca25afeeda641ba9df6a7b798574f021de8bc430c82a3ae4b99a41adcb616ac166ce8d8f3a699a0f7a9ff0701306a1f19bfeb57bc9b3dddbaa2cf246cd94f562be91d11fd6cd5a6bb12e28b496a2ee216615c5a5f029bef65dc52b8011d00f051a117", 0xdd}, {&(0x7f00000005c0)="2283790b7ead2a0b652da8553a36e55136e629124f4e72bc0dd4cac25b5d577411ac261accc18d352c9692af328ed21c76d6fc78baa07c16e3c3a9580c4aa28e3a500d928bce252223d8c4d61f470e8ab877611beab2b1eaa100af71542f115fd845a7160ccdcfedcd68c28b419bf84d350961db4d8686", 0x77}], 0x3, &(0x7f0000000680)=[{0x100, 0x10e, 0x4, "662e50b469e7bff651e4e8132817872a0972f76f52bf8fcc570c49443af675b92a8abdcc88199d5ce784339319d67bbdba0b04ea078bd40034f46d4dee1d6daf4d6c807a7098e27ccd71f79d202abbd60ab8b39d2fa16ed4ce54f4649f446ba83e3354c4c823b858f91b681e4449c63b9b6569911365fd9ed0800185688eb7ebb87189834bb43bc45e7cc34664dece575e49f5a8b67c71cb8209ecdf1383155aa6e09fccc2810c538f2d10c0775593da2eabf19f36b9b527b2c19025f70e5421aa3c34872e8645e34592d57d2bf84c2b67bad3ae6a2070566a37f59ab6e96c8a49d96845891e17253f0f"}, {0xa8, 0x10f, 0x5, "f3f98f0efdc479dc267b290ace3317ab5f788308553b528f1cd79a38240a0898787c2fd5c2b79aca6703cfc5216f63de73e3b6fb6048e7d2e3ff4f73faa271dc39496ccc85461a6962015f9239db3fd911d29ee1800efa675fe2e8568a1dedb2cb600224c8a313dea08f8c120d98d22dd7db656937f03c232eb7d1846370e5d30d64c61256e6c2a9d8e23f6ef234bdb99431"}, {0x70, 0x117, 0x4, "0594279f306220249c51235ce75c88cd5e5f795fc8cf3b5d223ea529bccd25e47e13baee22ee6a29648c9ae56732677666781620824c1a118112c42b155ceaa6daac59347780275c64b90af801a403cad892c539dc1275aa8c4f892c"}], 0x218}, 0x8000) r1 = socket(0x10, 0xa, 0xc4) r2 = accept4$packet(r1, 0x0, &(0x7f0000000900), 0x81000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000ac0)={'sit0\x00', &(0x7f0000000a40)={'tunl0\x00', 0x0, 0x0, 0x10, 0x7, 0xa, {{0xc, 0x4, 0x1, 0x0, 0x30, 0x64, 0x0, 0x2, 0x29, 0x0, @loopback, @local, {[@timestamp_addr={0x44, 0x1c, 0x9f, 0x1, 0xc, [{@remote, 0xc314}, {@multicast2, 0xd}, {@local, 0x101}]}]}}}}}) sendto$packet(r2, &(0x7f0000000940)="5a05de22550b2a72a8c0178a165c41c98f3f45fcd5ad687e944f73c3dcad18bf908b96701ab877b050a9ba11cc4f85dbd156998b575308b0b63cf527ba9585040724ed66a7bd768034771aa470fc0f203d6decabc0ad97897adb8053a0f979f61ec544683183ad4e2af1c2a06376c8860f983712dfed9693ee4387a332938612fda80136a40ab117a3446d28766417d2d78212da466445cdabdf2e2e6e03dccf0a2a8680ebeb9183972dbacd48a218632fa5e8b34486d927006ed7cffc6113cd3a7cb54dddf7b4792e9caf963aa29c788757", 0xd2, 0x4008881, &(0x7f0000000b00)={0x11, 0x1b, r3, 0x1, 0x6}, 0x14) socket$kcm(0x29, 0x4, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000b40)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @multicast1}, 0x4, 0x2, 0x0, 0x4}}, 0x26) r5 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, &(0x7f0000000b80)=0x1, 0x8) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_TABLE(r6, 0x29, 0xcf, &(0x7f0000000bc0), 0x4) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000c00)=0xbb, &(0x7f0000000c40)=0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0x9, 0x5, 0x9, 0x4, 0x42818, 0xffffffffffffffff, 0x101, '\x00', r3, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) unshare(0xa000000) r8 = accept$inet(r1, 0x0, &(0x7f0000000d00)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d80), r1) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x28, r9, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x80) r10 = accept4$packet(r2, 0x0, &(0x7f0000000e80), 0x80000) setsockopt$packet_int(r10, 0x107, 0x12, &(0x7f0000000ec0)=0x7, 0x4) getsockopt$bt_BT_SNDMTU(r7, 0x112, 0xc, &(0x7f0000000f00)=0x7, &(0x7f0000000f40)=0x2) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001040)=0xffffffffffffffff, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000013c0)={0xffffffffffffffff, 0xe0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001100)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000001140)=[0x0], &(0x7f0000001180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x32, &(0x7f00000011c0)=[{}], 0x8, 0x10, &(0x7f0000001200), &(0x7f0000001240), 0x8, 0x7f, 0x8, 0x8, &(0x7f0000001280)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x1c, 0x10, &(0x7f0000000f80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001000)='GPL\x00', 0xf4, 0x0, 0x0, 0x41100, 0x31, '\x00', r3, @fallback=0x11, r11, 0x8, &(0x7f0000001080)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000010c0)={0x4, 0xc, 0x5, 0x5a03}, 0x10, r12, 0xffffffffffffffff, 0x1, &(0x7f0000001400)=[r7, r7, r7, r7], &(0x7f0000001440)=[{0x1, 0x4, 0x0, 0x8}], 0x10, 0x5, @void, @value}, 0x94) r13 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000001540), 0x2, 0x0) r14 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$BTRFS_IOC_RM_DEV(r13, 0x5000940b, &(0x7f0000001580)={{r14}, "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"}) recvmmsg(r8, &(0x7f0000002b00)=[{{&(0x7f0000002580)=@xdp, 0x80, &(0x7f0000002a00)=[{&(0x7f0000002600)=""/185, 0xb9}, {&(0x7f00000026c0)=""/222, 0xde}, {&(0x7f00000027c0)=""/39, 0x27}, {&(0x7f0000002800)=""/65, 0x41}, {&(0x7f0000002880)=""/163, 0xa3}, {&(0x7f0000002940)=""/149, 0x95}], 0x6, &(0x7f0000002a80)=""/81, 0x51}, 0x800}], 0x1, 0x40002000, &(0x7f0000002b40)) 3.061592591s ago: executing program 2 (id=1586): r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1c, 0x0, &(0x7f0000000280)) (async) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$netlink(0x10, 0x3, 0xb) (async) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x3c, 0x10, 0x609, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa6}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x3c}}, 0x0) (async) r10 = socket(0x10, 0x803, 0x8) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r8, 0x40089416, &(0x7f0000000180)=r11) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r10, 0x84, 0xa, &(0x7f00000001c0)={0xff0, 0x7, 0x200, 0x80000001, 0x2, 0x3, 0x9, 0x7}, &(0x7f0000000240)=0x20) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x38, 0x18, 0x400, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_OPTS={0x10, 0x8, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8, 0x1, 0x9}}}}]}, 0x38}}, 0x0) (async) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r13], 0x5c}}, 0x40) 2.978223336s ago: executing program 3 (id=1588): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x3f, @any, 0x100, 0x3}, 0xe) getpeername(r0, 0x0, 0x0) 2.815220335s ago: executing program 3 (id=1589): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x10) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x0) r3 = socket(0x29, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x4}, @TCA_SAMPLE_RATE, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}]}, {0x4}, {0xc}, {0x6, 0x4}}}]}]}, 0x60}}, 0x0) 2.334902077s ago: executing program 2 (id=1590): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x50, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private1}}}]}]}, 0x50}}, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@bridge_dellink={0x2c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x60a10, 0x10909}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x4}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0c0}, 0x14) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback, 0x7fff}, 0x1c) (async, rerun: 32) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async, rerun: 32) shutdown(r1, 0x1) 2.286117945s ago: executing program 3 (id=1591): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x8b}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2b, 0x1, 0x0) bind$unix(r1, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000800000000000a4c000000060a0104000000000000000002000000200004801c0001800b0001006e756d67656e00000c00028008000140000000000900010073797a30000000000900020073797a3200000000140000001100010001000000000000000000000a"], 0x74}}, 0x0) 2.150990596s ago: executing program 4 (id=1592): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x0, 0x96, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000000000000000014001a80100004800c0005"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x12, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f0000000980)='GPL\x00', 0x80000, 0x0, 0x0, 0x40f00, 0x20, '\x00', r4, @cgroup_sock_addr=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r5) r7 = socket$l2tp(0x2, 0x2, 0x73) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r8, 0x6, 0x20, &(0x7f0000000080)={@in={{0x2, 0x0, @remote}}, 0x3, 0x0, 0x1a, 0x0, "5e3b86774ef89ec669fabcaff49c2eeb8c4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e0662749302c1ffcd1d1190000000000000000000000000000000000000000000200"}, 0xd8) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x9, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x5, 0x4, 0xadd, 0x0, r9, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x3c, r6, 0x917, 0x0, 0xffffffe4, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044011}, 0x4000) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_STOPDAEMON(r7, 0x0, 0x48c, &(0x7f00000001c0)={0x2, 'dvmrp1\x00', 0x2}, 0x18) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0xc100}, 0x4040) 2.140399376s ago: executing program 3 (id=1593): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400400, 0x0) write$tun(r1, &(0x7f00000000c0)={@val={0x0, 0xa01}, @val={0x0, 0x1, 0x3, 0xc, 0x8, 0x5}, @llc={@snap={0x1, 0x1, 'o', "35858c", 0xf9, "3986ded7959f61149d790b692419ac77513c22e3d5a764688408cf6e6d455bb5ada33c0ebf87ddff8a7799ed6c09384bcc5c61eb222bc28ea8d79630a88935acf12752ef014ff46605b9cb5ef1a51a67758bc3280b51f8e58eeccb5cf8fba658e769ba48c6"}}}, 0x7b) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) syz_emit_ethernet(0xf87, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf51, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[@routing={0x84}], "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"}}}}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1.987213208s ago: executing program 3 (id=1594): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) r1 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'erspan0\x00'}) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500000000000000000000000200000000000000000008"], 0x1c}}, 0x0) (async) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = accept$unix(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)=0x6e) bind$unix(r4, &(0x7f00000002c0)=@file={0xa56a5fd772bb0f9d, './file0\x00'}, 0x6e) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) (async) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) (async) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_MCAST_LEAVE_GROUP(r7, 0x0, 0x2d, &(0x7f0000000000)={0x0, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}}}, 0x88) (async) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000086dd0000120000000000000060ec97000f982c00fb8000000000000000000000000000aaff02000000000000000000000000000189"], 0xfce) 1.712281124s ago: executing program 4 (id=1595): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000780)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, @empty, 0x2000001, 0x0, 0x7d, 0x100, 0x4, 0x2930310}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="7c00000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000003c00198008000100400200000800020081040000080002000401000008000100080000000800010040010000080001000000000008000200200f0000080003"], 0x7c}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @loopback, 0x1, 0x0, 0x6, 0x400, 0xcbb0, 0x4000201}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000000040)=0x7, 0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r4, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x21, 0xffffffff, 0x4081, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x10001, @void, @value, @void, @value}, 0x50) 1.409894237s ago: executing program 4 (id=1596): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000208"], 0xe) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x74, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_FLOWINFO={0x8, 0xc, 0x5}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x2}, @IFLA_GRE_OKEY={0x8, 0x5, 0x261}, @IFLA_GRE_ENCAP_FLAGS={0x6}, @IFLA_GRE_FLAGS={0x8, 0xd, 0xf8}]}}}]}, 0x74}}, 0x0) 1.332509336s ago: executing program 2 (id=1597): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x864, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404cf378042f26c43f91f68d8a90767c0bc71f60877974475de3d78efb8abe4697255db0a95d58051bdd88bb7f063e5870df43110ba778743ed0d89fd11c0"], 0xfc}}, 0x0) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005800)={0x28, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}]}, 0x28}], 0x1}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@random="53df2b456239", @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @broadcast}, @timestamp_reply={0xe, 0x0, 0x0, 0x4, 0x1000}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000780)=@newlink={0x2c, 0x10, 0x503, 0x0, 0x25dfdbfb, {}, [@IFLA_BROADCAST={0xa, 0x2, @random="8e0200cff235"}]}, 0x2c}}, 0x0) 1.192281105s ago: executing program 4 (id=1598): socket(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r3, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r4, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r5, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r7, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r8, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r9, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) socket$inet6(0xa, 0x2, 0x0) 1.164180717s ago: executing program 4 (id=1599): sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xffffffffffffffff}, @TCA_CAKE_TARGET={0x8, 0x8, 0x6}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x50}}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) shutdown(r3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r5, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r4, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) 184.732448ms ago: executing program 2 (id=1600): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'macsec0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x54, r5, 0x1, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1f40, 0x8e, 0x2}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x48000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r2], 0x54}}, 0x800) 90.615427ms ago: executing program 4 (id=1601): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet6(0xa, 0x802, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ea0c00", 0x18, 0x88, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[@dstopts={0x1}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x100}}}}}}}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x54, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x1}, @IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}]}}}]}, 0x54}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d80000001c0081064e81f782db44b9040a1d08040e000000000002a1180002000600142603600e1208000f0000810401a8001605200001400200680803600cfab94dcf5c0461c1d67f6f94007134cf61e08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f808db58b45296feb215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x40000) socket(0x15, 0x80000, 0x1) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000080)=@srh, 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pK \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0xbb}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000100)=ANY=[], 0x68) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES8=r0, @ANYRESDEC, @ANYRES32=r0, @ANYRESHEX=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r5, &(0x7f0000000000)="240000001a005f0214f9f4070009040080fffffffe280000000000000800040001000000", 0x24) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r7, 0x84, 0x80, &(0x7f0000001f00)=""/4062, &(0x7f00000001c0)=0xfde) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000005000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r8, 0x20, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/135, 0x87}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 0s ago: executing program 3 (id=1602): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x30}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="00000000d38bc3d1478d5e1bc41d823e626c00001500b7080000000000007b8af8ff00000000000000000007020000f8ffffffb703000008000000b704000000000000850000008a000000950000000000000000000093a67852da446a37aef6980ec5a793e64a442513d5cd9472656a32c0e3c4db3d1f6166d8bce5da8ed5cf3bc8b3536e3a7c31058e0b0981c64eb90b0e2ec319ca51d3c2f456632cb0bcba7a44090dcc7b8573ee1cef1d8bf9385c8c5e74464a4a46cfb8e2168bc55a92b2860a76ee23e1588cf0e861ba41f5dd3ec80a4ae3c33929e459f98e4c33671014267bb97b51b71bd6274e2bf41accc9dced90a70f4817a1"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r3}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}, 0x1c) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000900)=ANY=[@ANYRES8=r2, @ANYRES16=r1, @ANYBLOB="c4c5c40cf1eef5cf6db404e57f5f30823b5faddd23666f7c27d9d84bd4f66c5834598f1bd01c22613e92bccc27393c84af6e34c83d98c72f88b3b22ea35a8c2cbc55b4e61f415d81f716f86a479a4bb84759e0aa3c9836aeecd608a13e4e157d336577a2112375cc241a0a488c8badd0b420a4f2f308a437ec6d09805ad5e981825e0f00b060bd24ac9947c82ed23bd961b63de7a4c04e8a7f9ebb7057ebaa8e9d735df7ce5e6cd1a32c2e9b658422eea2518a4e0e0c070b86a45d15274f91b09e45b40ef87effa2f4c1a92fd5228b4e0700000000000000e9f76839b1f15b2886", @ANYRESOCT=r1, @ANYRESOCT=r3], 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f0000000000)) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff01c}, {0x16}]}, 0x10) syz_emit_ethernet(0xfc8, &(0x7f00000011c0)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0xfba, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @broadcast}, "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"}}}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c000000cc132745598febfe05211000390400000000000000000000000049698ffd79bd9eaf21c80f0ea446a69b9c0661eb95b6ce43451aab7cae5d5df13a20d32d22b0f5f56574982fa5be7649463faa594b6730cdfbcf6f4680cf64aa13bf295e7f02de", @ANYRES32=0x0, @ANYBLOB="00000000000400001c0012800b00010062726964676500000c0002800800020001010000"], 0x3c}}, 0x0) kernel console output (not intermixed with test programs): te+0x358/0xfe0 [ 143.242347][ T8585] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 143.242366][ T8585] ? do_syscall_64+0xfa/0x3b0 [ 143.242413][ T8585] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 143.242450][ T8585] ? rcu_is_watching+0x15/0xb0 [ 143.242477][ T8585] ? hash_ipmac_create+0x358/0xfe0 [ 143.242500][ T8585] ? hash_ipmac_create+0x358/0xfe0 [ 143.242521][ T8585] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 143.242540][ T8585] ? hash_ipmac_create+0x358/0xfe0 [ 143.242564][ T8585] ? hash_ipmac_create+0x2fe/0xfe0 [ 143.242593][ T8585] hash_ipmac_create+0x358/0xfe0 [ 143.242625][ T8585] ? __nla_parse+0x40/0x60 [ 143.242650][ T8585] ? __pfx_hash_ipmac_create+0x10/0x10 [ 143.242676][ T8585] ip_set_create+0xa94/0x1940 [ 143.242703][ T8585] ? ip_set_create+0x4a2/0x1940 [ 143.242740][ T8585] ? __pfx_ip_set_create+0x10/0x10 [ 143.242800][ T8585] nfnetlink_rcv_msg+0xb4d/0x1130 [ 143.242828][ T8585] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 143.242872][ T8585] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 143.242896][ T8585] ? kasan_save_free_info+0x46/0x50 [ 143.242965][ T8585] netlink_rcv_skb+0x205/0x470 [ 143.242986][ T8585] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 143.243014][ T8585] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 143.243045][ T8585] ? bpf_lsm_capable+0x9/0x20 [ 143.243060][ T8585] ? security_capable+0x7e/0x2e0 [ 143.243089][ T8585] nfnetlink_rcv+0x26a/0x2520 [ 143.243119][ T8585] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 143.243148][ T8585] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 143.243178][ T8585] ? __dev_queue_xmit+0x27e/0x3a70 [ 143.243202][ T8585] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.243230][ T8585] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 143.243255][ T8585] ? __pfx___dev_queue_xmit+0x10/0x10 [ 143.243293][ T8585] ? ref_tracker_free+0x63a/0x7d0 [ 143.243319][ T8585] ? __copy_skb_header+0xa7/0x550 [ 143.243344][ T8585] ? __pfx_ref_tracker_free+0x10/0x10 [ 143.243384][ T8585] ? skb_clone+0x246/0x3a0 [ 143.243410][ T8585] ? __netlink_deliver_tap+0x807/0x850 [ 143.243429][ T8585] ? netlink_deliver_tap+0x2e/0x1b0 [ 143.243456][ T8585] ? netlink_deliver_tap+0x2e/0x1b0 [ 143.243475][ T8585] ? netlink_deliver_tap+0x2e/0x1b0 [ 143.243501][ T8585] netlink_unicast+0x758/0x8d0 [ 143.243529][ T8585] netlink_sendmsg+0x805/0xb30 [ 143.243560][ T8585] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.243584][ T8585] ? aa_sock_msg_perm+0x94/0x160 [ 143.243608][ T8585] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 143.243630][ T8585] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.243651][ T8585] __sock_sendmsg+0x219/0x270 [ 143.243681][ T8585] ____sys_sendmsg+0x505/0x830 [ 143.243709][ T8585] ? __pfx_____sys_sendmsg+0x10/0x10 [ 143.243740][ T8585] ? import_iovec+0x74/0xa0 [ 143.243760][ T8585] ___sys_sendmsg+0x21f/0x2a0 [ 143.243785][ T8585] ? __pfx____sys_sendmsg+0x10/0x10 [ 143.243842][ T8585] ? __fget_files+0x2a/0x420 [ 143.243861][ T8585] ? __fget_files+0x3a0/0x420 [ 143.243891][ T8585] __x64_sys_sendmsg+0x19b/0x260 [ 143.243915][ T8585] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 143.243948][ T8585] ? do_user_addr_fault+0xc8a/0x1390 [ 143.243975][ T8585] ? do_syscall_64+0xbe/0x3b0 [ 143.243995][ T8585] do_syscall_64+0xfa/0x3b0 [ 143.244009][ T8585] ? lockdep_hardirqs_on+0x9c/0x150 [ 143.244034][ T8585] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.244050][ T8585] ? clear_bhb_loop+0x60/0xb0 [ 143.244071][ T8585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.244088][ T8585] RIP: 0033:0x7ff71bf8e929 [ 143.244103][ T8585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.244118][ T8585] RSP: 002b:00007ff71cdfd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 143.244136][ T8585] RAX: ffffffffffffffda RBX: 00007ff71c1b6080 RCX: 00007ff71bf8e929 [ 143.244148][ T8585] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 143.244159][ T8585] RBP: 00007ff71c010b39 R08: 0000000000000000 R09: 0000000000000000 [ 143.244169][ T8585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.244179][ T8585] R13: 0000000000000001 R14: 00007ff71c1b6080 R15: 00007ffc9394f778 [ 143.244206][ T8585] [ 143.244574][ T8585] Mem-Info: [ 143.746139][ T8607] netlink: 'syz.3.812': attribute type 2 has an invalid length. [ 143.747050][ T8585] active_anon:5472 inactive_anon:0 isolated_anon:0 [ 143.747050][ T8585] active_file:1197 inactive_file:39844 isolated_file:0 [ 143.747050][ T8585] unevictable:768 dirty:42 writeback:0 [ 143.747050][ T8585] slab_reclaimable:10170 slab_unreclaimable:103388 [ 143.747050][ T8585] mapped:29605 shmem:1364 pagetables:1283 [ 143.747050][ T8585] sec_pagetables:0 bounce:0 [ 143.747050][ T8585] kernel_misc_reclaimable:0 [ 143.747050][ T8585] free:1327470 free_pcp:15014 free_cma:0 [ 143.811045][ T8585] Node 0 active_anon:21788kB inactive_anon:0kB active_file:4788kB inactive_file:159172kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117020kB dirty:168kB writeback:0kB shmem:3920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12200kB pagetables:4796kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 143.873749][ T8585] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 143.961608][ T8585] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 144.016896][ T8615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.815'. [ 144.025142][ T8621] netlink: 16 bytes leftover after parsing attributes in process `syz.4.817'. [ 144.039755][ T8585] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 144.046438][ T8585] Node 0 DMA32 free:1392444kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21744kB inactive_anon:0kB active_file:4788kB inactive_file:157340kB unevictable:1536kB writepending:168kB present:3129332kB managed:2561020kB mlocked:0kB bounce:0kB free_pcp:40476kB local_pcp:19468kB free_cma:0kB [ 144.122768][ T8585] lowmem_reserve[]: 0 0 1 1 1 [ 144.137307][ T8585] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1832kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 144.241470][ T8585] lowmem_reserve[]: 0 0 0 0 0 [ 144.256600][ T8585] Node 1 Normal free:3902572kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:20192kB local_pcp:12704kB free_cma:0kB [ 144.301151][ T8585] lowmem_reserve[]: 0 0 0 0 0 [ 144.306188][ T8585] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 144.324314][ T8585] Node 0 DMA32: 475*4kB (ME) 386*8kB (UME) 238*16kB (UM) 175*32kB (UM) 82*64kB (UME) 44*128kB (UM) 30*256kB (UME) 16*512kB (UM) 10*1024kB (UM) 5*2048kB (UME) 325*4096kB (M) = 1392828kB [ 144.347364][ T8585] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 144.364557][ T8585] Node 1 Normal: 187*4kB (UME) 50*8kB (UME) 41*16kB (UME) 83*32kB (UME) 32*64kB (UME) 6*128kB (UME) 2*256kB (M) 3*512kB (ME) 2*1024kB (ME) 2*2048kB (UE) 949*4096kB (M) = 3902572kB [ 144.383934][ T8585] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 144.401584][ T8585] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 144.416289][ T8634] netlink: 24 bytes leftover after parsing attributes in process `syz.4.822'. [ 144.426760][ T8585] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 144.456892][ T8585] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 144.474773][ T8585] 42401 total pagecache pages [ 144.479884][ T8585] 0 pages in swap cache [ 144.484150][ T8585] Free swap = 124996kB [ 144.490735][ T8585] Total swap = 124996kB [ 144.494996][ T8585] 2097051 pages RAM [ 144.521409][ T8585] 0 pages HighMem/MovableOnly [ 144.534172][ T8585] 424690 pages reserved [ 144.546191][ T8585] 0 pages cma reserved [ 144.811507][ T8659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.829'. [ 144.826801][ T8658] netlink: 'syz.4.828': attribute type 1 has an invalid length. [ 145.063921][ T8674] netlink: 'syz.4.834': attribute type 6 has an invalid length. [ 145.267337][ T8687] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 145.271840][ T8683] netlink: 68 bytes leftover after parsing attributes in process `syz.2.836'. [ 145.408376][ T8696] x_tables: unsorted entry at hook 2 [ 145.453717][ T8696] bridge0: port 1(batadv1) entered blocking state [ 145.470904][ T8696] bridge0: port 1(batadv1) entered disabled state [ 145.483341][ T8696] batadv1: entered allmulticast mode [ 145.487653][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 145.494950][ T8696] batadv1: entered promiscuous mode [ 145.605507][ T8697] syzkaller0: entered promiscuous mode [ 145.632703][ T8697] syzkaller0: entered allmulticast mode [ 145.723090][ T8711] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.938789][ T2980] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 145.948577][ T2980] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 146.777914][ T8714] veth0: entered promiscuous mode [ 146.804054][ T8714] veth0: left promiscuous mode [ 147.588829][ T8767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.862'. [ 147.638778][ T8767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.862'. [ 147.660082][ T8770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.863'. [ 147.723994][ T8770] netlink: 24 bytes leftover after parsing attributes in process `syz.0.863'. [ 147.767787][ T8772] bridge0: port 3(batadv1) entered blocking state [ 147.775946][ T8772] bridge0: port 3(batadv1) entered disabled state [ 147.785193][ T8772] batadv1: entered allmulticast mode [ 147.789931][ T8774] netlink: 4 bytes leftover after parsing attributes in process `syz.1.864'. [ 147.802543][ T8772] batadv1: entered promiscuous mode [ 147.811133][ T8770] lo: entered promiscuous mode [ 147.824685][ T8770] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 147.989998][ T8787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.867'. [ 148.019754][ T8787] netlink: 12 bytes leftover after parsing attributes in process `syz.1.867'. [ 148.254557][ T8805] IPVS: set_ctl: invalid protocol: 2 224.0.0.2:20004 [ 148.258639][ T2980] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 148.270737][ T2980] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 148.424771][ T8809] netlink: 8 bytes leftover after parsing attributes in process `syz.3.873'. [ 148.424771][ T8808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.873'. [ 148.462277][ T8808] bond0: entered promiscuous mode [ 148.489472][ T8808] bond0: left promiscuous mode [ 148.528723][ T8809] bond0: entered promiscuous mode [ 148.557685][ T8809] bond0: left promiscuous mode [ 148.681589][ T8824] netlink: 32 bytes leftover after parsing attributes in process `syz.3.877'. [ 148.701330][ T8824] tipc: Invalid UDP bearer configuration [ 148.701377][ T8824] tipc: Enabling of bearer rejected, failed to enable media [ 148.929380][ T8836] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 148.936627][ T8836] IPv6: NLM_F_CREATE should be set when creating new route [ 149.046119][ T8841] lo: entered allmulticast mode [ 149.671595][ T8873] syzkaller0: entered promiscuous mode [ 149.677269][ T8873] syzkaller0: entered allmulticast mode [ 149.697875][ T8877] openvswitch: netlink: Key type 12304 is out of range max 32 [ 149.956449][ T8896] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 151.461336][ T8925] netlink: 'syz.4.906': attribute type 1 has an invalid length. [ 152.252494][ T8954] nft_compat: unsupported protocol 0 [ 152.311533][ T8948] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.443648][ T8948] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.509958][ T8959] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 153.019170][ T8993] __nla_validate_parse: 10 callbacks suppressed [ 153.019187][ T8993] netlink: 20 bytes leftover after parsing attributes in process `syz.3.926'. [ 153.102508][ T8999] netlink: 'syz.4.928': attribute type 4 has an invalid length. [ 154.006865][ T9005] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 154.214497][ T9040] netlink: 'syz.4.941': attribute type 2 has an invalid length. [ 154.247453][ T9040] netlink: 'syz.4.941': attribute type 1 has an invalid length. [ 154.274035][ T9043] netlink: 'syz.4.941': attribute type 8 has an invalid length. [ 154.454037][ T9051] netlink: 'syz.4.944': attribute type 11 has an invalid length. [ 154.461944][ T9051] netlink: 20 bytes leftover after parsing attributes in process `syz.4.944'. [ 154.961045][ T5156] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 154.969173][ T5156] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 154.976866][ T5156] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 154.985678][ T5156] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 154.995471][ T5156] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 155.166430][ T9063] chnl_net:caif_netlink_parms(): no params data found [ 155.248674][ T5156] Bluetooth: hci3: command 0x0401 tx timeout [ 155.260248][ T9063] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.267728][ T9063] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.274942][ T9063] bridge_slave_0: entered allmulticast mode [ 155.283216][ T9063] bridge_slave_0: entered promiscuous mode [ 155.292073][ T9063] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.299627][ T9063] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.306864][ T9063] bridge_slave_1: entered allmulticast mode [ 155.315169][ T9063] bridge_slave_1: entered promiscuous mode [ 155.358659][ T9063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.376713][ T9063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.438789][ T9063] team0: Port device team_slave_0 added [ 155.449379][ T9063] team0: Port device team_slave_1 added [ 155.491539][ T9074] netlink: 52 bytes leftover after parsing attributes in process `syz.0.952'. [ 155.505798][ T9063] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.514482][ T9063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.541981][ T9063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.554964][ T9063] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.562535][ T9063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.589913][ T9063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.754075][ T9063] hsr_slave_0: entered promiscuous mode [ 155.766814][ T9082] netlink: 4 bytes leftover after parsing attributes in process `syz.4.955'. [ 155.770200][ T9063] hsr_slave_1: entered promiscuous mode [ 155.790482][ T9063] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.798256][ T9063] Cannot create hsr debugfs directory [ 155.855887][ T9083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.955'. [ 155.921404][ T9082] tipc: Started in network mode [ 155.926316][ T9082] tipc: Node identity ac14140f, cluster identity 4711 [ 155.943492][ T9082] tipc: New replicast peer: 255.255.255.255 [ 155.950580][ T9082] tipc: Enabled bearer , priority 10 [ 155.973399][ T9079] veth3: entered allmulticast mode [ 156.253198][ T9101] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 156.265941][ T9101] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 156.285843][ T9063] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.372878][ T9063] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.510887][ T9063] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.533176][ T9105] netlink: 12 bytes leftover after parsing attributes in process `syz.4.963'. [ 156.551404][ T9115] netlink: 'syz.2.966': attribute type 1 has an invalid length. [ 156.559635][ T9105] netlink: 12 bytes leftover after parsing attributes in process `syz.4.963'. [ 156.576820][ T9115] netlink: 'syz.2.966': attribute type 3 has an invalid length. [ 156.585801][ T9115] netlink: 224 bytes leftover after parsing attributes in process `syz.2.966'. [ 156.589097][ T9063] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.619676][ T9115] NCSI netlink: No device for ifindex 131080 [ 156.634212][ T9119] vlan1: entered allmulticast mode [ 156.641972][ T9119] veth0_vlan: entered allmulticast mode [ 156.864412][ T9131] netlink: 36 bytes leftover after parsing attributes in process `syz.2.970'. [ 156.912598][ T9063] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 156.931904][ T9063] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 156.947108][ T9063] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 156.966140][ T9063] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 157.070283][ T10] tipc: Node number set to 2886997007 [ 157.108166][ T5156] Bluetooth: hci4: command tx timeout [ 157.171392][ T9147] netlink: 'syz.3.973': attribute type 10 has an invalid length. [ 157.187956][ T9063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.212542][ T9063] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.229140][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.236335][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.259000][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.266194][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.431798][ T9063] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 157.481205][ T9151] netlink: 132 bytes leftover after parsing attributes in process `syz.4.975'. [ 157.554041][ T9159] xt_l2tp: v2 tid > 0xffff: 150994944 [ 157.592039][ T9159] xt_l2tp: v2 tid > 0xffff: 150994944 [ 157.936713][ T9063] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.116288][ T9063] veth0_vlan: entered promiscuous mode [ 158.147818][ T9063] veth1_vlan: entered promiscuous mode [ 158.240568][ T9063] veth0_macvtap: entered promiscuous mode [ 158.266643][ T9063] veth1_macvtap: entered promiscuous mode [ 158.322238][ T9063] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.364054][ T9063] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.412481][ T9063] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.437754][ T9063] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.459775][ T9063] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.468984][ T9192] __nla_validate_parse: 1 callbacks suppressed [ 158.468998][ T9192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.991'. [ 158.484533][ T9063] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.501367][ T9192] netlink: 'syz.0.991': attribute type 3 has an invalid length. [ 158.646892][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.666217][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.732897][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.756928][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.867075][ T9205] netlink: 'syz.3.995': attribute type 75 has an invalid length. [ 159.126396][ T9221] netlink: 20 bytes leftover after parsing attributes in process `syz.0.999'. [ 159.139547][ T9221] netlink: 16 bytes leftover after parsing attributes in process `syz.0.999'. [ 159.219728][ T9223] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 159.414291][ T9235] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1004'. [ 159.428954][ T9235] xt_ipcomp: unknown flags B [ 159.640044][ T1143] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.906823][ T9249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1008'. [ 159.927898][ T9252] netdevsim netdevsim4: Direct firmware load for ..€ failed with error -2 [ 159.953272][ T9252] netdevsim netdevsim4: Falling back to sysfs fallback for: ..€ [ 160.321247][ T9266] netlink: 'syz.0.1013': attribute type 10 has an invalid length. [ 160.359805][ T1143] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.415686][ T9266] team0: Device ipvlan1 failed to register rx_handler [ 160.453772][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 160.472919][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 160.481261][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 160.498974][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 160.510625][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 160.561303][ T9275] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1016'. [ 161.006444][ T9271] chnl_net:caif_netlink_parms(): no params data found [ 161.147963][ T1143] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.161061][ T9306] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1024'. [ 161.404657][ T1143] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.487897][ T9319] gtp1: entered promiscuous mode [ 161.493036][ T9319] gtp1: entered allmulticast mode [ 161.570730][ T9322] netlink: 'syz.3.1029': attribute type 4 has an invalid length. [ 161.590336][ T9322] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1029'. [ 161.651894][ T9326] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1030'. [ 161.661209][ T9271] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.662209][ T9322] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1029'. [ 161.669479][ T9271] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.703839][ T9271] bridge_slave_0: entered allmulticast mode [ 161.749803][ T9271] bridge_slave_0: entered promiscuous mode [ 161.766918][ T9322] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 161.789645][ T9322] 0ªî{X¹¦: entered allmulticast mode [ 161.805658][ T9322] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 161.920878][ T9271] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.936297][ T9271] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.951560][ T9271] bridge_slave_1: entered allmulticast mode [ 161.964795][ T9271] bridge_slave_1: entered promiscuous mode [ 162.118912][ T9271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.160732][ T9271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.302156][ T9271] team0: Port device team_slave_0 added [ 162.387789][ T9362] netlink: 'syz.2.1042': attribute type 10 has an invalid length. [ 162.490898][ T9271] team0: Port device team_slave_1 added [ 162.504319][ T9362] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.512946][ T9362] bridge_slave_1: left allmulticast mode [ 162.525167][ T9362] bridge_slave_1: left promiscuous mode [ 162.530897][ T5837] Bluetooth: hci4: command tx timeout [ 162.539606][ T9362] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.552760][ T9362] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 162.681209][ T1143] bridge_slave_1: left allmulticast mode [ 162.687130][ T1143] bridge_slave_1: left promiscuous mode [ 162.728257][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.752039][ T1143] bridge_slave_0: left allmulticast mode [ 162.780260][ T1143] bridge_slave_0: left promiscuous mode [ 162.786099][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.971755][ T9384] x_tables: duplicate underflow at hook 1 [ 163.331711][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.343283][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.354655][ T1143] bond0 (unregistering): Released all slaves [ 163.403263][ T9373] bond0: option mode: unable to set because the bond device has slaves [ 163.426180][ T9271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.446466][ T9271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.515651][ T9271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.532918][ T9271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.543281][ T9271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.570278][ T9271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.807298][ T9406] 8021q: VLANs not supported on sit0 [ 163.867257][ T9412] __nla_validate_parse: 3 callbacks suppressed [ 163.867276][ T9412] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1056'. [ 163.927041][ T9412] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1056'. [ 163.942128][ T9271] hsr_slave_0: entered promiscuous mode [ 163.950928][ T9271] hsr_slave_1: entered promiscuous mode [ 163.968683][ T9271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.976950][ T9271] Cannot create hsr debugfs directory [ 164.139204][ T1143] hsr_slave_0: left promiscuous mode [ 164.150285][ T1143] hsr_slave_1: left promiscuous mode [ 164.166480][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.181299][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.204807][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.212756][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.260413][ T1143] veth1_macvtap: left promiscuous mode [ 164.276734][ T1143] veth0_macvtap: left promiscuous mode [ 164.286919][ T1143] veth1_vlan: left promiscuous mode [ 164.308039][ T1143] veth0_vlan: left promiscuous mode [ 164.609849][ T5837] Bluetooth: hci4: command tx timeout [ 164.689272][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 164.887210][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 164.922657][ T1143] team0 (unregistering): Port device team_slave_0 removed [ 165.481894][ T9458] x_tables: duplicate underflow at hook 1 [ 166.225785][ T9494] x_tables: duplicate underflow at hook 1 [ 166.305078][ T9496] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1074'. [ 166.322729][ T9499] netlink: 'syz.2.1075': attribute type 11 has an invalid length. [ 166.353952][ T9499] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1075'. [ 166.626511][ T9512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1077'. [ 166.657303][ T9513] netlink: 165 bytes leftover after parsing attributes in process `syz.4.1078'. [ 166.687966][ T5837] Bluetooth: hci4: command tx timeout [ 166.920557][ T9271] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 166.945100][ T9271] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 166.981220][ T9271] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 167.020430][ T9521] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1079'. [ 167.033125][ T9271] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 167.154800][ T9531] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1081'. [ 167.358234][ T9531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.372385][ T9531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.386940][ T9531] bond0 (unregistering): Released all slaves [ 167.549399][ T9271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.629378][ T9271] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.670803][ T7358] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.678198][ T7358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.743320][ T7358] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.750545][ T7358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.970726][ T9573] netlink: 'syz.0.1088': attribute type 1 has an invalid length. [ 168.031028][ T9573] netlink: 'syz.0.1088': attribute type 6 has an invalid length. [ 168.370675][ T9591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1093'. [ 168.392202][ T9271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.530226][ T9271] veth0_vlan: entered promiscuous mode [ 168.579832][ T9271] veth1_vlan: entered promiscuous mode [ 168.686766][ T9271] veth0_macvtap: entered promiscuous mode [ 168.730262][ T9271] veth1_macvtap: entered promiscuous mode [ 168.781633][ T5837] Bluetooth: hci4: command tx timeout [ 168.793490][ T9271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.821479][ T9271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.834155][ T9271] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.843039][ T9271] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.852375][ T9271] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.861264][ T9271] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.874511][ T9612] Cannot find set identified by id 752 to match [ 169.058424][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.079491][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.148581][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.183398][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.290951][ T9634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1105'. [ 169.315530][ T9631] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 169.338812][ T9634] netlink: 'syz.2.1105': attribute type 30 has an invalid length. [ 169.365566][ T9634] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.374685][ T9634] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.383652][ T9634] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.392421][ T9634] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.464938][ T9631] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 169.478627][ T9634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1105'. [ 169.496518][ T9634] netlink: 'syz.2.1105': attribute type 30 has an invalid length. [ 169.662470][ T9657] gtp0: entered promiscuous mode [ 169.694370][ T9657] gtp0: entered allmulticast mode [ 169.801795][ T9668] Cannot find del_set index 5 as target [ 169.808369][ T9666] tipc: Enabling of bearer rejected, failed to enable media [ 170.072128][ T9681] netlink: 'syz.4.1118': attribute type 11 has an invalid length. [ 170.081656][ T9681] netlink: 65 bytes leftover after parsing attributes in process `syz.4.1118'. [ 170.112426][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.665464][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.043683][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.122169][ T9720] tipc: Started in network mode [ 171.141345][ T9720] tipc: Node identity , cluster identity 4711 [ 171.170131][ T9720] tipc: Failed to obtain node identity [ 171.175631][ T9720] tipc: Enabling of bearer rejected, failed to enable media [ 171.259780][ T9728] openvswitch: netlink: IPv6 tunnel dst address is zero [ 171.320267][ T9728] netlink: 'syz.0.1128': attribute type 1 has an invalid length. [ 171.329782][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.349097][ T9728] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1128'. [ 171.375609][ T9728] netlink: 'syz.0.1128': attribute type 1 has an invalid length. [ 171.383537][ T9728] netlink: 'syz.0.1128': attribute type 2 has an invalid length. [ 171.648766][ T9736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1130'. [ 171.685346][ T5156] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 171.694838][ T5156] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 171.707967][ T5156] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 171.718895][ T5156] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 171.739476][ T5156] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 171.782066][ T12] bridge_slave_1: left allmulticast mode [ 171.807054][ T12] bridge_slave_1: left promiscuous mode [ 171.815466][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.895768][ T12] bridge_slave_0: left allmulticast mode [ 171.912224][ T12] bridge_slave_0: left promiscuous mode [ 171.929466][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.275910][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.287142][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.302061][ T12] bond0 (unregistering): Released all slaves [ 173.126249][ T12] hsr_slave_0: left promiscuous mode [ 173.147555][ T12] hsr_slave_1: left promiscuous mode [ 173.153689][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.169005][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.189457][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.208492][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.280608][ T12] veth1_macvtap: left promiscuous mode [ 173.295173][ T12] veth0_macvtap: left promiscuous mode [ 173.308780][ T12] veth1_vlan: left promiscuous mode [ 173.320193][ T12] veth0_vlan: left promiscuous mode [ 173.417749][ T9812] netlink: 'syz.2.1146': attribute type 1 has an invalid length. [ 173.425520][ T9812] netlink: 'syz.2.1146': attribute type 1 has an invalid length. [ 173.817866][ T5837] Bluetooth: hci4: command tx timeout [ 173.940122][ T12] team0 (unregistering): Port device team_slave_1 removed [ 173.976453][ T12] team0 (unregistering): Port device team_slave_0 removed [ 174.460544][ T9832] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 174.498118][ T9834] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1151'. [ 174.516947][ T9834] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1151'. [ 174.536852][ T9738] chnl_net:caif_netlink_parms(): no params data found [ 174.607638][ T9834] hsr_slave_0: left promiscuous mode [ 174.689216][ T9842] openvswitch: netlink: IP tunnel dst address not specified [ 174.696774][ T9844] openvswitch: netlink: IP tunnel dst address not specified [ 175.080783][ T9738] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.105974][ T9865] netlink: 'syz.0.1158': attribute type 1 has an invalid length. [ 175.114002][ T9738] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.114630][ T9865] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1158'. [ 175.132190][ T9738] bridge_slave_0: entered allmulticast mode [ 175.148500][ T9869] netlink: 'syz.4.1160': attribute type 1 has an invalid length. [ 175.160228][ T9738] bridge_slave_0: entered promiscuous mode [ 175.208039][ T9738] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.215232][ T9738] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.230472][ T9738] bridge_slave_1: entered allmulticast mode [ 175.239631][ T9738] bridge_slave_1: entered promiscuous mode [ 175.351342][ T9869] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1160'. [ 175.387717][ T9869] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1160'. [ 175.422438][ T9873] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1160'. [ 175.440395][ T9738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.475582][ T9738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.679039][ T9884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1163'. [ 175.730429][ T9887] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1163'. [ 175.777271][ T9738] team0: Port device team_slave_0 added [ 175.897827][ T5837] Bluetooth: hci4: command tx timeout [ 176.050061][ T9738] team0: Port device team_slave_1 added [ 176.188918][ T9898] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 176.240919][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.464177][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.534366][ T9738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.555598][ T9738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.657652][ T9738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.701263][ T9738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.709478][ T5156] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 176.720442][ T5156] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 176.728601][ T9738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.755086][ T9738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.755160][ T5156] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 176.790237][ T5156] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 176.800290][ T5156] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 176.833542][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.924555][ T9738] hsr_slave_0: entered promiscuous mode [ 176.936419][ T9738] hsr_slave_1: entered promiscuous mode [ 176.961758][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.090315][ T9928] netlink: 'syz.4.1177': attribute type 1 has an invalid length. [ 177.116507][ T9928] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1177'. [ 177.129720][ T9928] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1177'. [ 177.341296][ T9935] netlink: 'syz.4.1178': attribute type 11 has an invalid length. [ 177.520580][ T9938] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 177.545380][ T9938] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 177.568880][ T9938] gretap2: entered promiscuous mode [ 177.574117][ T9938] gretap2: entered allmulticast mode [ 177.863790][ T12] batadv1: left allmulticast mode [ 177.876519][ T12] batadv1: left promiscuous mode [ 177.887017][ T12] bridge0: port 3(batadv1) entered disabled state [ 177.977455][ T5156] Bluetooth: hci4: command tx timeout [ 178.012740][ T12] bridge_slave_1: left allmulticast mode [ 178.025123][ T12] bridge_slave_1: left promiscuous mode [ 178.037102][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.078844][ T12] bridge_slave_0: left allmulticast mode [ 178.094703][ T12] bridge_slave_0: left promiscuous mode [ 178.104963][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.526183][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.541661][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.552358][ T12] bond0 (unregistering): (slave team0): Releasing backup interface [ 178.564544][ T12] bond0 (unregistering): Released all slaves [ 178.646224][ T12] bond1 (unregistering): (slave wireguard0): Releasing backup interface [ 178.654796][ T12] wireguard0: left promiscuous mode [ 178.662477][ T12] bond1 (unregistering): Released all slaves [ 178.676953][ T12] bond2 (unregistering): Released all slaves [ 178.758919][ T12] bond3 (unregistering): Released all slaves [ 178.795188][ T9969] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 178.796370][ T9972] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 178.848420][ T5156] Bluetooth: hci0: command tx timeout [ 178.902377][ T9987] IPv6: sit1: Disabled Multicast RS [ 178.913439][ T9987] sit1: entered allmulticast mode [ 179.502852][ T9916] chnl_net:caif_netlink_parms(): no params data found [ 179.645681][T10023] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 179.924787][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.943476][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.977186][ T12] veth1_macvtap: left promiscuous mode [ 179.993880][ T12] veth0_macvtap: left promiscuous mode [ 180.003117][ T12] veth1_vlan: left promiscuous mode [ 180.010790][T10040] openvswitch: netlink: VXLAN extension 13 out of range max 1 [ 180.040810][ T12] veth0_vlan: left promiscuous mode [ 180.049948][ T5156] Bluetooth: hci4: command tx timeout [ 180.370237][ T12] vlan1 (unregistering): left allmulticast mode [ 180.376627][ T12] veth0_vlan (unregistering): left allmulticast mode [ 180.556776][ T12] team0 (unregistering): Port device team_slave_1 removed [ 180.588885][ T12] team0 (unregistering): Port device team_slave_0 removed [ 180.927930][ T5156] Bluetooth: hci0: command tx timeout [ 181.101906][T10058] veth1_macvtap: left promiscuous mode [ 181.178965][T10058] macsec0: entered promiscuous mode [ 181.224688][T10058] macsec0: entered allmulticast mode [ 181.251739][T10067] xt_socket: unknown flags 0x50 [ 181.391327][T10063] veth1_macvtap: entered promiscuous mode [ 181.399893][T10063] veth1_macvtap: entered allmulticast mode [ 181.423084][T10063] macsec0: left promiscuous mode [ 181.436572][T10063] macsec0: left allmulticast mode [ 181.444438][T10063] veth1_macvtap: left allmulticast mode [ 181.486196][ T9916] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.493879][ T9916] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.504156][ T9916] bridge_slave_0: entered allmulticast mode [ 181.513273][ T9916] bridge_slave_0: entered promiscuous mode [ 181.521656][ T9916] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.530550][ T9916] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.544801][ T9916] bridge_slave_1: entered allmulticast mode [ 181.552922][ T9916] bridge_slave_1: entered promiscuous mode [ 181.696835][ T9916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.761643][ T9916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.903538][ T9916] team0: Port device team_slave_0 added [ 181.934828][ T9916] team0: Port device team_slave_1 added [ 182.050098][ T9916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.057096][ T9916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.086602][ T9916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.100926][ T9738] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 182.126665][ T9916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.137246][ T9916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.172889][ T9916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.213513][ T9738] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 182.225695][ T9738] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 182.254316][ T9738] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 182.362699][ T9916] hsr_slave_0: entered promiscuous mode [ 182.372309][ T9916] hsr_slave_1: entered promiscuous mode [ 182.381517][ T9916] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 182.390642][ T9916] Cannot create hsr debugfs directory [ 182.492128][T10119] unknown channel width for channel at 909000KHz? [ 182.502785][T10119] unknown channel width for channel at 909000KHz? [ 182.521259][T10119] unknown channel width for channel at 909000KHz? [ 182.669929][T10124] __nla_validate_parse: 2 callbacks suppressed [ 182.669949][T10124] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1219'. [ 183.010661][ T5156] Bluetooth: hci0: command tx timeout [ 183.035684][ T9738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.162225][ T9738] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.190039][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.197258][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.296883][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.304103][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.386507][T10152] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1224'. [ 183.464306][ T9738] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 183.497256][ T9738] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 183.535712][T10152] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1224'. [ 183.556838][ T9916] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 183.634468][ T9916] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 183.672745][ T9916] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 183.722760][ T9916] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 184.194747][ T9738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.274216][ T9916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.395615][ T9738] veth0_vlan: entered promiscuous mode [ 184.407808][ T9916] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.445574][ T9738] veth1_vlan: entered promiscuous mode [ 184.475095][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.482275][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.520009][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.527207][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.698831][ T9738] veth0_macvtap: entered promiscuous mode [ 184.726357][ T9738] veth1_macvtap: entered promiscuous mode [ 184.837291][ T9738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.896162][ T9738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.983645][ T9738] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.017444][ T9738] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.045385][ T9738] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.070969][ T9738] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.092186][ T5156] Bluetooth: hci0: command tx timeout [ 185.164138][T10213] syzkaller0: entered promiscuous mode [ 185.190342][T10213] syzkaller0: entered allmulticast mode [ 185.415419][T10244] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1243'. [ 187.276010][ T9916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.356440][T10297] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1247'. [ 187.406865][T10297] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1247'. [ 187.464122][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.508968][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.660467][ T9916] veth0_vlan: entered promiscuous mode [ 187.668831][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.676857][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.734421][ T9916] veth1_vlan: entered promiscuous mode [ 187.842818][ T9916] veth0_macvtap: entered promiscuous mode [ 188.194352][ T9916] veth1_macvtap: entered promiscuous mode [ 188.259620][ T9916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.500640][ T2980] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.554616][ T9916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.600133][ T9916] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.627827][ T9916] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.636557][ T9916] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.657488][ T9916] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.726717][ T2980] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.815605][ T2980] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.892694][ T7358] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.913398][ T7358] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.960043][ T7358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.968787][ T7358] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.330269][ T2980] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.353474][T10372] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1259'. [ 189.475204][T10374] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 189.723223][ T2980] bridge_slave_1: left allmulticast mode [ 189.747550][ T2980] bridge_slave_1: left promiscuous mode [ 189.753365][ T2980] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.845190][ T2980] bridge_slave_0: left allmulticast mode [ 189.868046][ T2980] bridge_slave_0: left promiscuous mode [ 189.873834][ T2980] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.952643][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 189.973848][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 189.981708][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 189.996836][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 190.005179][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 190.042917][T10388] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1263'. [ 190.068381][T10390] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1264'. [ 190.108777][T10394] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1263'. [ 190.475427][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 190.488259][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 190.496442][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 190.505093][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 190.513242][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 190.769383][ T2980] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.785190][ T2980] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.795854][ T2980] bond0 (unregistering): Released all slaves [ 190.835030][T10390] 8021q: adding VLAN 0 to HW filter on device bond2 [ 190.885426][T10397] netdevsim netdevsim4: Direct firmware load for  failed with error -2 [ 190.910739][T10397] netdevsim netdevsim4: Falling back to sysfs fallback for:  [ 191.290185][T10432] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 191.309071][T10432] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 191.317203][T10432] gretap0: entered promiscuous mode [ 191.323272][T10432] gretap0: entered allmulticast mode [ 191.500817][T10441] x_tables: duplicate underflow at hook 3 [ 191.573154][ T2980] hsr_slave_0: left promiscuous mode [ 191.585883][ T2980] hsr_slave_1: left promiscuous mode [ 191.595016][ T2980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.609448][ T2980] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.622161][ T2980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.634995][ T2980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.672327][ T2980] veth1_macvtap: left promiscuous mode [ 191.683505][ T2980] veth0_macvtap: left promiscuous mode [ 191.693097][ T2980] veth1_vlan: left promiscuous mode [ 191.703779][ T2980] veth0_vlan: left promiscuous mode [ 192.050391][ T5156] Bluetooth: hci0: command tx timeout [ 192.329844][ T2980] team0 (unregistering): Port device team_slave_1 removed [ 192.363908][ T2980] team0 (unregistering): Port device team_slave_0 removed [ 192.608047][ T5156] Bluetooth: hci4: command tx timeout [ 192.966074][T10476] bond3: entered promiscuous mode [ 192.977046][T10476] bond3: entered allmulticast mode [ 192.980972][T10483] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1278'. [ 192.986397][T10476] 8021q: adding VLAN 0 to HW filter on device bond3 [ 193.084311][T10476] bond3 (unregistering): Released all slaves [ 193.122052][T10483] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 193.184020][T10381] chnl_net:caif_netlink_parms(): no params data found [ 193.276568][T10488] xt_hashlimit: size too large, truncated to 1048576 [ 193.344297][T10494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1280'. [ 193.383293][T10492] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1281'. [ 193.433542][T10492] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1281'. [ 193.799821][T10406] chnl_net:caif_netlink_parms(): no params data found [ 193.873894][T10381] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.895163][T10381] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.902447][T10381] bridge_slave_0: entered allmulticast mode [ 193.910216][T10381] bridge_slave_0: entered promiscuous mode [ 193.960267][T10381] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.998071][T10381] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.005287][T10381] bridge_slave_1: entered allmulticast mode [ 194.029155][T10381] bridge_slave_1: entered promiscuous mode [ 194.133946][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.140510][ T5156] Bluetooth: hci0: command tx timeout [ 194.146187][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.161304][T10381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.193171][T10530] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 194.234539][T10381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.265505][T10530] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1287'. [ 194.278470][ T2980] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.423496][T10381] team0: Port device team_slave_0 added [ 194.433881][T10381] team0: Port device team_slave_1 added [ 194.459187][ T2980] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.476377][T10406] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.499791][T10406] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.507030][T10406] bridge_slave_0: entered allmulticast mode [ 194.532310][T10406] bridge_slave_0: entered promiscuous mode [ 194.546116][T10406] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.556570][T10406] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.568096][T10406] bridge_slave_1: entered allmulticast mode [ 194.575225][T10406] bridge_slave_1: entered promiscuous mode [ 194.638200][ T2980] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.688392][ T5156] Bluetooth: hci4: command tx timeout [ 194.724436][T10548] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1291'. [ 194.754949][T10381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.770886][T10381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.828292][T10381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.848392][T10381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.855359][T10381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.891085][T10381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.992656][ T2980] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.132426][T10406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.144811][T10406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.168519][T10564] IPVS: set_ctl: invalid protocol: 60 172.30.4.5:20001 [ 195.220543][T10381] hsr_slave_0: entered promiscuous mode [ 195.235195][T10381] hsr_slave_1: entered promiscuous mode [ 195.252562][T10565] Bluetooth: MGMT ver 1.23 [ 195.395485][T10406] team0: Port device team_slave_0 added [ 195.469405][T10406] team0: Port device team_slave_1 added [ 195.741499][T10406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.760509][T10406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.832173][T10406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.940869][T10406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.964277][T10406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.995673][T10406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.123995][T10596] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1300'. [ 196.217474][ T5156] Bluetooth: hci0: command tx timeout [ 196.228458][T10598] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1301'. [ 196.242617][ T2980] bridge_slave_1: left allmulticast mode [ 196.262419][ T2980] bridge_slave_1: left promiscuous mode [ 196.274626][ T2980] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.302785][ T2980] bridge_slave_0: left allmulticast mode [ 196.317612][ T2980] bridge_slave_0: left promiscuous mode [ 196.324895][ T2980] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.768980][ T5156] Bluetooth: hci4: command tx timeout [ 196.804401][ T2980] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.816074][ T2980] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.828076][ T2980] bond0 (unregistering): Released all slaves [ 196.935838][T10406] hsr_slave_0: entered promiscuous mode [ 196.954795][T10406] hsr_slave_1: entered promiscuous mode [ 196.966053][T10406] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 196.989606][T10406] Cannot create hsr debugfs directory [ 197.322580][T10634] netlink: 'syz.4.1305': attribute type 2 has an invalid length. [ 197.427493][T10638] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1306'. [ 197.545285][T10649] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1309'. [ 197.634782][T10652] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1309'. [ 197.941791][ T2980] hsr_slave_0: left promiscuous mode [ 197.964251][ T2980] hsr_slave_1: left promiscuous mode [ 197.970818][ T2980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.978554][ T2980] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.986571][ T2980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.994152][ T2980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.047132][ T2980] veth1_macvtap: left promiscuous mode [ 198.053438][ T2980] veth0_macvtap: left promiscuous mode [ 198.059520][ T2980] veth1_vlan: left promiscuous mode [ 198.064982][ T2980] veth0_vlan: left promiscuous mode [ 198.287844][ T5156] Bluetooth: hci0: command tx timeout [ 198.455445][ T2980] team0 (unregistering): Port device team_slave_1 removed [ 198.487173][ T2980] team0 (unregistering): Port device team_slave_0 removed [ 198.847799][ T5156] Bluetooth: hci4: command tx timeout [ 199.163102][T10682] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1320'. [ 199.215084][T10685] netlink: 'syz.2.1321': attribute type 12 has an invalid length. [ 199.241127][T10685] netlink: 'syz.2.1321': attribute type 29 has an invalid length. [ 199.273707][T10685] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1321'. [ 199.288476][T10685] netlink: 'syz.2.1321': attribute type 1 has an invalid length. [ 199.307651][T10685] netlink: 47 bytes leftover after parsing attributes in process `syz.2.1321'. [ 199.600786][T10704] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1325'. [ 199.662561][T10406] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 199.716408][T10406] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 199.781477][T10406] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 199.908489][T10717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1329'. [ 199.936762][T10406] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 200.080978][T10381] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 200.114632][T10725] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1331'. [ 200.121498][T10381] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 200.175978][T10381] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 200.227645][T10741] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 200.242936][T10381] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 200.397776][T10751] netlink: 'syz.2.1337': attribute type 3 has an invalid length. [ 200.409756][T10751] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1337'. [ 200.428266][T10754] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1335'. [ 200.527599][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 200.584594][T10762] batadv1: left allmulticast mode [ 200.619820][T10762] batadv1: left promiscuous mode [ 200.625518][T10762] bridge0: port 1(batadv1) entered disabled state [ 200.672191][T10764] team0: Mode changed to "activebackup" [ 200.706998][T10757] vlan0: entered promiscuous mode [ 200.745099][T10757] team0: Port device vlan0 added [ 200.789324][T10406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.816099][T10762] tipc: Started in network mode [ 200.822457][T10762] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 200.830824][T10762] tipc: Enabled bearer , priority 0 [ 200.863746][T10406] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.894430][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.901603][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.910011][T10775] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1340'. [ 201.012102][T10780] TCP: TCP_TX_DELAY enabled [ 201.061223][T10381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.085810][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.093007][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.132958][T10775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1340'. [ 201.188785][T10381] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.236861][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.244054][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.285170][ T7358] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.292412][ T7358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.706308][T10800] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 201.879056][T10406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.944541][T10807] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1344'. [ 201.947500][ T5897] tipc: Node number set to 11578026 [ 201.986166][T10381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.130268][T10406] veth0_vlan: entered promiscuous mode [ 202.173905][T10381] veth0_vlan: entered promiscuous mode [ 202.191633][T10817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1347'. [ 202.205152][T10406] veth1_vlan: entered promiscuous mode [ 202.250731][T10381] veth1_vlan: entered promiscuous mode [ 202.329123][T10406] veth0_macvtap: entered promiscuous mode [ 202.403972][T10406] veth1_macvtap: entered promiscuous mode [ 202.481515][T10406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.496409][T10381] veth0_macvtap: entered promiscuous mode [ 202.514367][T10406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.532557][T10381] veth1_macvtap: entered promiscuous mode [ 202.549367][T10406] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.559711][T10406] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.569959][T10406] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.579741][T10406] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.653087][T10381] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.724001][T10381] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.741419][T10381] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.750991][T10381] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.762853][T10381] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.773539][T10381] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.793568][ T2980] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.824200][ T2980] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.502938][T10862] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1353'. [ 204.699266][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.719918][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.894759][T10885] xt_hashlimit: size too large, truncated to 1048576 [ 204.903326][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.943218][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.973287][T10885] syz.2.1356: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 205.023807][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.037533][T10885] CPU: 1 UID: 0 PID: 10885 Comm: syz.2.1356 Not tainted 6.16.0-rc2-syzkaller-00159-ge0fca6f2cebf #0 PREEMPT(full) [ 205.037560][T10885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 205.037573][T10885] Call Trace: [ 205.037581][T10885] [ 205.037590][T10885] dump_stack_lvl+0x189/0x250 [ 205.037640][T10885] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 205.037669][T10885] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.037700][T10885] ? __pfx__printk+0x10/0x10 [ 205.037723][T10885] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 205.037745][T10885] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 205.037776][T10885] warn_alloc+0x214/0x310 [ 205.037808][T10885] ? __pfx_warn_alloc+0x10/0x10 [ 205.037842][T10885] ? __get_vm_area_node+0x28f/0x300 [ 205.037864][T10885] ? htable_create+0xfc/0x7a0 [ 205.037898][T10885] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 205.037954][T10885] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 205.037985][T10885] ? rcu_is_watching+0x15/0xb0 [ 205.038018][T10885] ? htable_create+0xfc/0x7a0 [ 205.038045][T10885] ? htable_create+0xfc/0x7a0 [ 205.038081][T10885] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 205.038113][T10885] ? htable_create+0xfc/0x7a0 [ 205.038151][T10885] ? hashlimit_pernet+0x23/0x240 [ 205.038184][T10885] htable_create+0xfc/0x7a0 [ 205.038229][T10885] hashlimit_mt_check_common+0x719/0xa10 [ 205.038264][T10885] hashlimit_mt_check_v1+0x221/0x360 [ 205.038292][T10885] ? __pfx_hashlimit_mt_check_v1+0x10/0x10 [ 205.038323][T10885] ? xt_find_match+0x1f7/0x250 [ 205.038352][T10885] xt_check_match+0x3d1/0xab0 [ 205.038375][T10885] ? __pfx___mutex_lock+0x10/0x10 [ 205.038396][T10885] ? __pfx_xt_check_match+0x10/0x10 [ 205.038422][T10885] ? pcpu_alloc_noprof+0xfdd/0x16b0 [ 205.038450][T10885] ? xt_find_match+0x1f7/0x250 [ 205.038479][T10885] translate_table+0x1553/0x2040 [ 205.038525][T10885] ? __pfx_translate_table+0x10/0x10 [ 205.038550][T10885] ? __might_fault+0xb0/0x130 [ 205.038586][T10885] ? _copy_from_user+0x94/0xb0 [ 205.038609][T10885] do_ip6t_set_ctl+0x970/0xce0 [ 205.038639][T10885] ? rcu_is_watching+0x15/0xb0 [ 205.038669][T10885] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 205.038711][T10885] ? __pfx___mutex_lock+0x10/0x10 [ 205.038728][T10885] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 205.038751][T10885] ? __pfx_futex_wait+0x10/0x10 [ 205.038783][T10885] nf_setsockopt+0x26f/0x290 [ 205.038812][T10885] rawv6_setsockopt+0x23b/0x5b0 [ 205.038835][T10885] ? __lock_acquire+0xab9/0xd20 [ 205.038862][T10885] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 205.038887][T10885] ? aa_sock_opt_perm+0x74/0x110 [ 205.038910][T10885] ? sock_common_setsockopt+0x36/0xc0 [ 205.038928][T10885] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 205.038948][T10885] do_sock_setsockopt+0x257/0x3e0 [ 205.038972][T10885] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 205.038998][T10885] ? __fget_files+0x2a/0x420 [ 205.039027][T10885] __x64_sys_setsockopt+0x18b/0x220 [ 205.039059][T10885] do_syscall_64+0xfa/0x3b0 [ 205.039075][T10885] ? lockdep_hardirqs_on+0x9c/0x150 [ 205.039100][T10885] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.039117][T10885] ? clear_bhb_loop+0x60/0xb0 [ 205.039138][T10885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.039155][T10885] RIP: 0033:0x7fa70118e929 [ 205.039178][T10885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.039193][T10885] RSP: 002b:00007fa702085038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 205.039212][T10885] RAX: ffffffffffffffda RBX: 00007fa7013b5fa0 RCX: 00007fa70118e929 [ 205.039224][T10885] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 205.039235][T10885] RBP: 00007fa701210b39 R08: 00000000000004c0 R09: 0000000000000000 [ 205.039246][T10885] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000000 [ 205.039256][T10885] R13: 0000000000000000 R14: 00007fa7013b5fa0 R15: 00007ffeba19a998 [ 205.039285][T10885] [ 205.039364][T10885] Mem-Info: [ 205.088630][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.115745][T10885] active_anon:5554 inactive_anon:0 isolated_anon:0 [ 205.115745][T10885] active_file:1231 inactive_file:39882 isolated_file:0 [ 205.115745][T10885] unevictable:768 dirty:66 writeback:0 [ 205.115745][T10885] slab_reclaimable:10702 slab_unreclaimable:106588 [ 205.115745][T10885] mapped:29276 shmem:1367 pagetables:1129 [ 205.115745][T10885] sec_pagetables:0 bounce:0 [ 205.115745][T10885] kernel_misc_reclaimable:0 [ 205.115745][T10885] free:1322868 free_pcp:14791 free_cma:0 [ 205.306063][T10897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1358'. [ 205.341669][T10885] Node 0 active_anon:22316kB inactive_anon:0kB active_file:4924kB inactive_file:159324kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117104kB dirty:260kB writeback:0kB shmem:3932kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12488kB pagetables:4584kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 205.534906][T10897] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1358'. [ 205.544218][T10885] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 205.580823][T10885] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 205.619903][T10901] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1358'. [ 205.632718][T10885] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 205.657754][T10885] Node 0 DMA32 free:1372556kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22372kB inactive_anon:0kB active_file:4924kB inactive_file:157492kB unevictable:1536kB writepending:256kB present:3129332kB managed:2561020kB mlocked:0kB bounce:0kB free_pcp:39536kB local_pcp:18776kB free_cma:0kB [ 205.818112][T10885] lowmem_reserve[]: 0 0 1 1 1 [ 205.830100][T10885] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1832kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 205.932327][T10885] lowmem_reserve[]: 0 0 0 0 0 [ 205.937176][T10885] Node 1 Normal free:3903340kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:19456kB local_pcp:6976kB free_cma:0kB [ 206.007876][T10885] lowmem_reserve[]: 0 0 0 0 0 [ 206.017707][T10885] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 206.020427][ T2980] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.056757][T10885] Node 0 DMA32: 900*4kB (UME) 146*8kB (UME) 28*16kB (UM) 76*32kB (UME) 93*64kB (UM) 57*128kB (UME) 55*256kB (UM) 25*512kB (UME) 18*1024kB (UME) 8*2048kB (UME) 319*4096kB (M) = 1389216kB [ 206.095618][T10885] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 206.124054][T10885] Node 1 Normal: 187*4kB (UME) 50*8kB (UME) 41*16kB (UME) 95*32kB (UME) 36*64kB (UME) 7*128kB (UME) 2*256kB (M) 3*512kB (ME) 2*1024kB (ME) 2*2048kB (UE) 949*4096kB (M) = 3903340kB [ 206.177766][T10885] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 206.218592][T10885] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 206.249083][T10885] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 206.306405][T10885] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 206.330431][ T2980] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.338400][T10885] 42479 total pagecache pages [ 206.345511][T10885] 0 pages in swap cache [ 206.368589][T10885] Free swap = 124996kB [ 206.372784][T10885] Total swap = 124996kB [ 206.376959][T10885] 2097051 pages RAM [ 206.401946][T10885] 0 pages HighMem/MovableOnly [ 206.406782][T10885] 424690 pages reserved [ 206.437448][T10885] 0 pages cma reserved [ 206.449373][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 206.450127][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 206.455422][ T5841] Bluetooth: hci3: command 0x0401 tx timeout [ 206.606272][ T2980] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.853456][ T2980] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.074660][ T2980] bridge_slave_1: left allmulticast mode [ 207.081587][ T2980] bridge_slave_1: left promiscuous mode [ 207.087441][ T2980] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.121191][ T2980] bridge_slave_0: left allmulticast mode [ 207.126863][ T2980] bridge_slave_0: left promiscuous mode [ 207.146768][ T2980] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.163438][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 207.173362][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 207.181580][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 207.195173][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 207.208275][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 208.085589][ T5156] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 208.095590][ T5156] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 208.103595][ T5156] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 208.134906][ T5156] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 208.143551][ T5156] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 208.150825][ T2980] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.183923][ T2980] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.204878][ T2980] bond0 (unregistering): Released all slaves [ 208.234735][T10954] syzkaller1: entered promiscuous mode [ 208.243893][T10954] syzkaller1: entered allmulticast mode [ 208.401126][T10977] netlink: 'syz.2.1368': attribute type 1 has an invalid length. [ 209.002236][ T2980] hsr_slave_0: left promiscuous mode [ 209.011326][ T2980] hsr_slave_1: left promiscuous mode [ 209.017182][ T2980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.029158][ T2980] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.036900][ T2980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.047056][ T2980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.067962][ T2980] veth1_macvtap: left promiscuous mode [ 209.074199][ T2980] veth0_macvtap: left promiscuous mode [ 209.080461][ T2980] veth1_vlan: left promiscuous mode [ 209.085758][ T2980] veth0_vlan: left promiscuous mode [ 209.247645][ T5156] Bluetooth: hci0: command tx timeout [ 209.543720][ T2980] team0 (unregistering): Port device team_slave_1 removed [ 209.642316][ T2980] team0 (unregistering): Port device team_slave_0 removed [ 209.723189][T11016] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1376'. [ 209.732913][T11016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1376'. [ 210.205584][T11012] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1375'. [ 210.214827][ T5156] Bluetooth: hci4: command tx timeout [ 210.256261][T11020] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 210.418768][T11026] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1380'. [ 210.557239][T10969] chnl_net:caif_netlink_parms(): no params data found [ 210.573906][T11028] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 210.770626][T11038] lo speed is unknown, defaulting to 1000 [ 210.778930][T11038] lo speed is unknown, defaulting to 1000 [ 210.786575][T11038] lo speed is unknown, defaulting to 1000 [ 210.823830][T11038] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 210.841357][T11038] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 210.949149][T11038] lo speed is unknown, defaulting to 1000 [ 210.968466][T11050] netem: incorrect gi model size [ 210.973609][T11050] netem: change failed [ 210.998020][T11038] lo speed is unknown, defaulting to 1000 [ 211.055167][T11038] lo speed is unknown, defaulting to 1000 [ 211.076959][T11038] lo speed is unknown, defaulting to 1000 [ 211.077687][T10930] chnl_net:caif_netlink_parms(): no params data found [ 211.141682][T11038] lo speed is unknown, defaulting to 1000 [ 211.183188][T10969] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.190619][T10969] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.200881][T10969] bridge_slave_0: entered allmulticast mode [ 211.208748][T10969] bridge_slave_0: entered promiscuous mode [ 211.244403][T11038] lo speed is unknown, defaulting to 1000 [ 211.325483][ T2980] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.336093][ T5156] Bluetooth: hci0: command tx timeout [ 211.352857][T10969] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.359224][T11070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1386'. [ 211.375710][T10969] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.383411][T10969] bridge_slave_1: entered allmulticast mode [ 211.400270][T10969] bridge_slave_1: entered promiscuous mode [ 211.408744][T11038] lo speed is unknown, defaulting to 1000 [ 211.605523][ T2980] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.742336][ T2980] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.795674][T10969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.845561][T10969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.912004][ T2980] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.996554][T10969] team0: Port device team_slave_0 added [ 212.019955][T10930] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.042247][T10930] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.065221][T10930] bridge_slave_0: entered allmulticast mode [ 212.076475][T10930] bridge_slave_0: entered promiscuous mode [ 212.096266][T10969] team0: Port device team_slave_1 added [ 212.148255][T10930] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.165730][T10930] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.185976][T10930] bridge_slave_1: entered allmulticast mode [ 212.199598][T10930] bridge_slave_1: entered promiscuous mode [ 212.294558][ T5156] Bluetooth: hci4: command tx timeout [ 212.400581][T10969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.434304][T10969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.501166][T10969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.641244][T10930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.668362][T10969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.675349][T10969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.714660][T10969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.835998][T10930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.094608][T10930] team0: Port device team_slave_0 added [ 213.150236][T10969] hsr_slave_0: entered promiscuous mode [ 213.158323][T10969] hsr_slave_1: entered promiscuous mode [ 213.180741][T10969] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.214048][T10969] Cannot create hsr debugfs directory [ 213.291473][T10930] team0: Port device team_slave_1 added [ 213.408500][ T5156] Bluetooth: hci0: command tx timeout [ 213.542370][T10930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.550154][T10930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.579518][T10930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.591453][ T2980] bridge_slave_1: left allmulticast mode [ 213.598408][ T2980] bridge_slave_1: left promiscuous mode [ 213.604995][ T2980] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.617208][ T2980] bridge_slave_0: left allmulticast mode [ 213.665757][ T2980] bridge_slave_0: left promiscuous mode [ 213.692528][ T2980] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.943833][T11163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1409'. [ 214.281855][ T2980] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.297230][ T2980] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.310439][ T2980] bond0 (unregistering): Released all slaves [ 214.343165][T10930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.352300][T10930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.367602][ T5156] Bluetooth: hci4: command tx timeout [ 214.400820][T10930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.417004][T11165] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 214.434537][T11166] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1409'. [ 214.599268][T11178] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 214.631607][ T977] lo speed is unknown, defaulting to 1000 [ 214.718918][T11183] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1413'. [ 214.812901][T11185] bridge: RTM_NEWNEIGH with invalid ether address [ 214.846486][T10930] hsr_slave_0: entered promiscuous mode [ 214.871155][T10930] hsr_slave_1: entered promiscuous mode [ 214.877568][T10930] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.885232][T10930] Cannot create hsr debugfs directory [ 215.071678][T11201] sctp: [Deprecated]: syz.4.1418 (pid 11201) Use of struct sctp_assoc_value in delayed_ack socket option. [ 215.071678][T11201] Use struct sctp_sack_info instead [ 215.256709][T11215] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1420'. [ 215.487740][ T5156] Bluetooth: hci0: command tx timeout [ 215.627717][ T2980] hsr_slave_0: left promiscuous mode [ 215.643333][ T2980] hsr_slave_1: left promiscuous mode [ 215.658236][ T2980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.675736][ T2980] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.705265][ T2980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.723712][ T2980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.805268][ T2980] veth1_macvtap: left promiscuous mode [ 215.823698][ T2980] veth0_macvtap: left promiscuous mode [ 215.841803][ T2980] veth1_vlan: left promiscuous mode [ 215.847199][ T2980] veth0_vlan: left promiscuous mode [ 216.413648][ T2980] team0 (unregistering): Port device team_slave_1 removed [ 216.447879][ T5156] Bluetooth: hci4: command tx timeout [ 216.454063][ T2980] team0 (unregistering): Port device team_slave_0 removed [ 216.815299][T11231] netlink: 'syz.2.1423': attribute type 2 has an invalid length. [ 217.014067][T11258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1428'. [ 217.065749][T11255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1428'. [ 217.212353][T11260] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1430'. [ 217.447019][T11272] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1434'. [ 217.473820][T10969] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 217.518923][T10969] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 217.562654][T10969] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 217.578137][ T5156] Bluetooth: hci0: command 0x0c1a tx timeout [ 217.583387][T10969] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 217.722793][T11290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1434'. [ 217.742332][T11290] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1434'. [ 219.142156][T11302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1438'. [ 219.483566][T10969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.644342][T11328] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 219.693118][T11328] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 219.711799][T11328] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 219.763114][T11328] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 219.773787][T11328] geneve2: entered promiscuous mode [ 219.779840][T11328] geneve2: entered allmulticast mode [ 219.873984][T10969] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.896199][T11336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1445'. [ 219.913022][T11336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1445'. [ 219.941922][T11336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1445'. [ 219.946058][T11344] Cannot find add_set index 1 as target [ 220.004152][T11336] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 220.061337][T10930] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 220.093427][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.100630][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.134610][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.141837][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.171571][T10930] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 220.199824][T10930] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 220.234918][T10930] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 220.432909][T10969] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 220.556315][T10930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.611230][T10930] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.772801][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.780176][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.822153][T11377] IPVS: Unknown mcast interface: pim6reg1 [ 220.856308][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.863534][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.976817][T11389] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 221.005334][T11389] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 221.138689][T10969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.299623][T11399] ieee802154 phy0 wpan0: encryption failed: -22 [ 221.359697][T10969] veth0_vlan: entered promiscuous mode [ 221.423414][T10969] veth1_vlan: entered promiscuous mode [ 221.536542][T10969] veth0_macvtap: entered promiscuous mode [ 221.586845][T10969] veth1_macvtap: entered promiscuous mode [ 221.700241][T10969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.749673][T10969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.796303][T11415] netlink: 'syz.2.1458': attribute type 10 has an invalid length. [ 221.804870][T11418] ieee802154 phy0 wpan0: encryption failed: -22 [ 221.815725][T10969] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.829053][T10969] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.838219][T10969] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.855552][T10969] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.866792][T11423] ipt_REJECT: TCP_RESET invalid for non-tcp [ 221.884151][T10930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.898984][T11424] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 221.909507][T11418] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 221.918038][T11418] openvswitch: netlink: Duplicate key (type 0). [ 221.934668][T11424] openvswitch: netlink: Duplicate key (type 0). [ 222.030212][T11427] netlink: 'syz.4.1461': attribute type 10 has an invalid length. [ 222.038337][T11427] __nla_validate_parse: 20 callbacks suppressed [ 222.038352][T11427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1461'. [ 222.177736][T11435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1463'. [ 222.195364][T10930] veth0_vlan: entered promiscuous mode [ 222.201884][T11435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1463'. [ 222.313912][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.358569][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.440127][T11436] : entered promiscuous mode [ 222.457942][T11443] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 222.494214][ T2972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.505461][T10930] veth1_vlan: entered promiscuous mode [ 222.528993][ T2972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.666114][T10930] veth0_macvtap: entered promiscuous mode [ 222.705936][T11457] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1466'. [ 222.720219][T10930] veth1_macvtap: entered promiscuous mode [ 222.736168][T11457] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1466'. [ 222.764911][T11457] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1466'. [ 222.783373][T10930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.817142][T10930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.842746][T11457] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1466'. [ 222.856655][T11457] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1466'. [ 222.858973][T10930] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.888612][T10930] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.903325][T10930] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.913321][T10930] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.933987][T11457] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1466'. [ 222.976039][T11457] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1466'. [ 223.162553][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.187461][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.224710][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.384915][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.435512][ T7358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.459581][ T7358] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.532194][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.672404][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.979217][ T12] bridge_slave_1: left allmulticast mode [ 223.985008][ T12] bridge_slave_1: left promiscuous mode [ 224.008706][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.021525][ T12] bridge_slave_0: left allmulticast mode [ 224.037515][ T12] bridge_slave_0: left promiscuous mode [ 224.043284][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.809828][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.885521][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.925791][ T12] bond0 (unregistering): Released all slaves [ 225.158680][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 225.172207][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 225.180724][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 225.199755][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 225.210240][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 225.565824][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 225.588667][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 225.596310][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 225.606313][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 225.614694][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 225.829600][T11515] lo speed is unknown, defaulting to 1000 [ 226.126484][T11530] lo speed is unknown, defaulting to 1000 [ 226.200901][ T12] hsr_slave_0: left promiscuous mode [ 226.223194][ T12] hsr_slave_1: left promiscuous mode [ 226.232652][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.248323][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.265749][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.275312][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.335688][ T12] veth1_macvtap: left promiscuous mode [ 226.349694][ T12] veth0_macvtap: left promiscuous mode [ 226.361762][ T12] veth1_vlan: left promiscuous mode [ 226.373588][ T12] veth0_vlan: left promiscuous mode [ 226.996605][T11587] xt_CT: No such helper "snmp" [ 227.252419][ T12] team0 (unregistering): Port device team_slave_1 removed [ 227.257936][ T5156] Bluetooth: hci0: command tx timeout [ 227.288870][ T12] team0 (unregistering): Port device team_slave_0 removed [ 227.624689][T11560] __nla_validate_parse: 60 callbacks suppressed [ 227.624709][T11560] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1478'. [ 227.641254][T11560] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1478'. [ 227.657588][ T5156] Bluetooth: hci4: command tx timeout [ 227.826564][T11603] sctp: [Deprecated]: syz.4.1486 (pid 11603) Use of int in max_burst socket option. [ 227.826564][T11603] Use struct sctp_assoc_value instead [ 228.081769][T11624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1490'. [ 228.290980][T11515] chnl_net:caif_netlink_parms(): no params data found [ 228.696931][T11530] chnl_net:caif_netlink_parms(): no params data found [ 228.741952][T11634] lo speed is unknown, defaulting to 1000 [ 228.745512][T11515] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.755206][T11515] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.777300][T11515] bridge_slave_0: entered allmulticast mode [ 228.801902][T11515] bridge_slave_0: entered promiscuous mode [ 228.822161][T11515] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.834080][T11515] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.842949][T11655] netlink: 'syz.3.1494': attribute type 13 has an invalid length. [ 228.854512][T11515] bridge_slave_1: entered allmulticast mode [ 228.862446][T11515] bridge_slave_1: entered promiscuous mode [ 228.933756][T11655] veth0_macvtap: left promiscuous mode [ 228.957703][T11655] macvtap0: entered allmulticast mode [ 228.979370][T11655] macvtap0: refused to change device tx_queue_len [ 229.058458][T11658] geneve3: entered promiscuous mode [ 229.063827][T11658] geneve3: entered allmulticast mode [ 229.168104][T11515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.186350][T11515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.217263][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.302884][T11664] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1495'. [ 229.337595][ T5156] Bluetooth: hci0: command tx timeout [ 229.345327][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.366982][T11515] team0: Port device team_slave_0 added [ 229.402440][T11515] team0: Port device team_slave_1 added [ 229.421286][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.453097][T11530] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.460357][T11530] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.469982][T11530] bridge_slave_0: entered allmulticast mode [ 229.480327][T11530] bridge_slave_0: entered promiscuous mode [ 229.606615][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.622904][T11530] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.630688][T11530] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.638159][T11530] bridge_slave_1: entered allmulticast mode [ 229.645981][T11530] bridge_slave_1: entered promiscuous mode [ 229.731498][ T5156] Bluetooth: hci4: command tx timeout [ 229.741222][T11515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.757850][T11515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.785400][T11515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.798767][T11515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.805735][T11515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.832843][T11515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.934134][T11530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.004527][T11530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.019317][T11685] tls_set_device_offload_rx: netdev not found [ 230.081383][T11688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1500'. [ 230.195759][T11694] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1500'. [ 230.222015][T11515] hsr_slave_0: entered promiscuous mode [ 230.229190][T11515] hsr_slave_1: entered promiscuous mode [ 230.263792][T11530] team0: Port device team_slave_0 added [ 230.276280][T11530] team0: Port device team_slave_1 added [ 230.299784][T11693] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1501'. [ 230.342725][T11693] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1501'. [ 230.523045][T11530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.531059][T11530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.558321][T11530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.585395][T11705] IPVS: set_ctl: invalid protocol: 135 100.1.1.2:20003 [ 230.611864][T11530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.648758][T11530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.696087][T11530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.978871][T11717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1505'. [ 231.014806][ T12] bridge_slave_1: left allmulticast mode [ 231.025522][ T12] bridge_slave_1: left promiscuous mode [ 231.033497][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.049878][ T12] bridge_slave_0: left allmulticast mode [ 231.056727][ T12] bridge_slave_0: left promiscuous mode [ 231.062725][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.073173][T11720] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1506'. [ 231.396291][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.407664][ T5156] Bluetooth: hci0: command tx timeout [ 231.414311][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.424882][ T12] bond0 (unregistering): Released all slaves [ 231.445495][T11530] hsr_slave_0: entered promiscuous mode [ 231.452334][T11530] hsr_slave_1: entered promiscuous mode [ 231.462682][T11530] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.483546][T11530] Cannot create hsr debugfs directory [ 231.711941][T11723] pimreg: entered allmulticast mode [ 231.718518][T11724] pimreg: left allmulticast mode [ 231.808621][ T5156] Bluetooth: hci4: command tx timeout [ 231.843495][T11726] x_tables: duplicate underflow at hook 2 [ 232.070911][T11738] x_tables: duplicate underflow at hook 1 [ 232.206272][ T12] hsr_slave_0: left promiscuous mode [ 232.222042][ T12] hsr_slave_1: left promiscuous mode [ 232.239516][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.256653][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.264668][T11751] ip6t_REJECT: ECHOREPLY is not supported [ 232.277834][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.305629][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.375072][ T12] veth1_macvtap: left promiscuous mode [ 232.393910][ T12] veth0_macvtap: left promiscuous mode [ 232.411434][ T12] veth1_vlan: left promiscuous mode [ 232.433390][ T12] veth0_vlan: left promiscuous mode [ 233.066054][ T12] team0 (unregistering): Port device team_slave_1 removed [ 233.103733][ T12] team0 (unregistering): Port device team_slave_0 removed [ 233.487786][ T5156] Bluetooth: hci0: command tx timeout [ 233.692321][T11779] __nla_validate_parse: 4 callbacks suppressed [ 233.692338][T11779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1519'. [ 233.776236][T11784] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1518'. [ 233.792887][T11783] x_tables: duplicate underflow at hook 1 [ 233.888731][ T5156] Bluetooth: hci4: command tx timeout [ 233.945200][T11784] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1518'. [ 234.264804][T11515] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 234.284922][T11515] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 234.323622][T11515] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 234.380249][T11515] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 234.580626][T11818] netlink: 'syz.2.1527': attribute type 4 has an invalid length. [ 234.714060][T11826] xt_socket: unknown flags 0x50 [ 234.935436][T11515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.961379][T11836] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1531'. [ 234.980669][T11836] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1531'. [ 234.983815][T11530] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 235.030055][T11515] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.040674][T11530] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 235.073638][T11530] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 235.112153][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.119368][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.137232][T11530] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 235.163725][ T2980] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.170913][ T2980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.425260][T11530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.459875][T11530] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.493144][ T7358] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.500380][ T7358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.514327][ C0] vcan0: j1939_tp_rxtimer: 0xffff888141bda400: rx timeout, send abort [ 235.545216][ T7358] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.552412][ T7358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.693669][T11530] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 235.723198][T11515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.746732][T11863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1535'. [ 235.781742][T11865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1535'. [ 235.885343][T11515] veth0_vlan: entered promiscuous mode [ 235.933009][T11515] veth1_vlan: entered promiscuous mode [ 236.023375][ C0] vcan0: j1939_tp_rxtimer: 0xffff888141bda400: abort rx timeout. Force session deactivation [ 236.070764][T11515] veth0_macvtap: entered promiscuous mode [ 236.104283][T11515] veth1_macvtap: entered promiscuous mode [ 236.174622][T11882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1538'. [ 236.197215][T11515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.233044][T11515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.274074][T11515] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.325649][T11515] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.361381][T11515] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.377541][T11515] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.514238][T11530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.793117][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.805562][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.030532][T11906] netlink: 'syz.4.1546': attribute type 3 has an invalid length. [ 237.057694][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.061632][T11530] veth0_vlan: entered promiscuous mode [ 237.086286][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.165012][T11530] veth1_vlan: entered promiscuous mode [ 237.234378][T11917] netlink: 'syz.2.1548': attribute type 1 has an invalid length. [ 237.267231][T11530] veth0_macvtap: entered promiscuous mode [ 237.315356][T11921] bond4 (unregistering): Released all slaves [ 237.483388][T11530] veth1_macvtap: entered promiscuous mode [ 237.533837][T11936] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 237.583085][T11939] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1553'. [ 237.796045][T11946] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 237.852286][ T1143] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.905207][T11530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.973818][T11530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.032185][T11530] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.084601][T11530] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.119309][T11530] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.150513][T11530] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.229299][ T1143] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.359565][ T1143] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.476853][ T1143] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.565484][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.596207][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.666080][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.684290][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.765895][ T1143] bridge_slave_1: left allmulticast mode [ 238.782198][ T1143] bridge_slave_1: left promiscuous mode [ 238.795030][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.839677][ T1143] bridge_slave_0: left allmulticast mode [ 238.845405][ T1143] bridge_slave_0: left promiscuous mode [ 238.853941][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.523163][T11999] delete_channel: no stack [ 239.691846][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 239.703074][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 239.722305][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 239.735270][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 239.744124][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 239.751928][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.780747][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.794101][ T1143] bond0 (unregistering): Released all slaves [ 239.899944][T11990] netlink: 'syz.3.1557': attribute type 2 has an invalid length. [ 240.145896][T12003] lo speed is unknown, defaulting to 1000 [ 240.506664][T12018] lo speed is unknown, defaulting to 1000 [ 240.608850][ T1143] hsr_slave_0: left promiscuous mode [ 240.623093][ T1143] hsr_slave_1: left promiscuous mode [ 240.629544][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.636967][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.674240][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.682294][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.714498][ T1143] veth1_macvtap: left promiscuous mode [ 240.735090][ T1143] veth0_macvtap: left promiscuous mode [ 240.741027][ T1143] veth1_vlan: left promiscuous mode [ 240.746376][ T1143] veth0_vlan: left promiscuous mode [ 241.137799][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 241.171571][ T1143] team0 (unregistering): Port device team_slave_0 removed [ 241.652008][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 241.667664][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 241.675783][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 241.688647][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 241.697111][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 241.807933][ T5156] Bluetooth: hci0: command tx timeout [ 241.943634][T12040] syzkaller0: entered promiscuous mode [ 241.949458][T12040] syzkaller0: entered allmulticast mode [ 242.132296][T12037] lo speed is unknown, defaulting to 1000 [ 242.636645][T12003] chnl_net:caif_netlink_parms(): no params data found [ 242.829025][ T1143] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.934468][ T1143] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.016039][T12037] chnl_net:caif_netlink_parms(): no params data found [ 243.081875][ T1143] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.142881][T12093] tipc: Enabling not permitted [ 243.159938][T12093] tipc: Enabling of bearer rejected, failed to enable media [ 243.294784][ T1143] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.494530][T12003] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.504365][T12003] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.519052][T12003] bridge_slave_0: entered allmulticast mode [ 243.526836][T12003] bridge_slave_0: entered promiscuous mode [ 243.593172][T12116] IPVS: persistence engine module ip_vs_pe_À not found [ 243.604802][T12003] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.612225][T12003] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.621754][T12003] bridge_slave_1: entered allmulticast mode [ 243.630887][T12003] bridge_slave_1: entered promiscuous mode [ 243.715976][T12003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.737223][T12003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.747105][ T5156] Bluetooth: hci4: command tx timeout [ 243.836987][T12126] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1580'. [ 243.854789][T12037] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.862496][T12037] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.870134][T12037] bridge_slave_0: entered allmulticast mode [ 243.878397][T12037] bridge_slave_0: entered promiscuous mode [ 243.888373][ T5156] Bluetooth: hci0: command tx timeout [ 243.936650][T12003] team0: Port device team_slave_0 added [ 243.951000][T12129] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1581'. [ 243.954404][T12003] team0: Port device team_slave_1 added [ 243.983756][T12037] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.991215][T12037] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.999537][T12037] bridge_slave_1: entered allmulticast mode [ 244.008660][T12037] bridge_slave_1: entered promiscuous mode [ 244.183418][T12003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.190621][T12003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.219315][T12003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.288231][T12003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.304461][T12003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.329622][T12143] netlink: 73 bytes leftover after parsing attributes in process `syz.2.1583'. [ 244.339480][T12003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.373970][T12037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.434480][ T1143] bridge_slave_1: left allmulticast mode [ 244.443779][ T1143] bridge_slave_1: left promiscuous mode [ 244.454820][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.482259][ T1143] bridge_slave_0: left allmulticast mode [ 244.497862][ T1143] bridge_slave_0: left promiscuous mode [ 244.512781][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.594022][T12154] netlink: 'syz.2.1586': attribute type 1 has an invalid length. [ 245.194736][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.213545][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.226193][ T1143] bond0 (unregistering): Released all slaves [ 245.249636][T12037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.261431][T12154] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 245.578510][T12037] team0: Port device team_slave_0 added [ 245.698907][T12003] hsr_slave_0: entered promiscuous mode [ 245.705187][T12003] hsr_slave_1: entered promiscuous mode [ 245.726448][T12037] team0: Port device team_slave_1 added [ 245.783350][T12194] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1592'. [ 245.817568][ T5156] Bluetooth: hci4: command tx timeout [ 245.877067][T12037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.904294][T12037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.917584][T12197] netlink: 'syz.3.1594': attribute type 4 has an invalid length. [ 245.944347][T12037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.975199][ T5156] Bluetooth: hci0: command tx timeout [ 246.017159][T12037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.024600][T12037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.064345][T12037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.108387][T12200] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 246.237079][ T1143] hsr_slave_0: left promiscuous mode [ 246.262918][ T1143] hsr_slave_1: left promiscuous mode [ 246.283503][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.303640][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.352589][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.370634][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.442012][T12217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1597'. [ 246.466932][ T1143] veth1_macvtap: left promiscuous mode [ 246.481688][ T1143] veth0_macvtap: left promiscuous mode [ 246.490026][ T1143] veth1_vlan: left promiscuous mode [ 246.495367][ T1143] veth0_vlan: left promiscuous mode [ 247.016632][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 247.052051][ T1143] team0 (unregistering): Port device team_slave_0 removed [ 247.515639][T12037] hsr_slave_0: entered promiscuous mode [ 247.551915][T12037] hsr_slave_1: entered promiscuous mode [ 247.560990][T12037] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 247.569942][T12037] Cannot create hsr debugfs directory [ 247.572370][T12232] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1600'. [ 247.593020][T12232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1600'. [ 247.627291][T12233] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1601'. [ 247.672786][T12232] macsec0: entered promiscuous mode [ 247.678314][T12232] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:579 [ 247.687671][T12232] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 12232, name: syz.2.1600 [ 247.696811][T12232] preempt_count: 201, expected: 0 [ 247.701881][T12232] RCU nest depth: 0, expected: 0 [ 247.706850][T12232] 3 locks held by syz.2.1600/12232: [ 247.712105][T12232] #0: ffffffff8fa14db8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 247.721681][T12232] #1: ffffffff8f510348 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 247.730814][T12232] #2: ffff8880569d2368 (&macsec_netdev_addr_lock_key/1){+...}-{3:3}, at: dev_uc_add+0x67/0x120 [ 247.741341][T12232] Preemption disabled at: [ 247.741354][T12232] [] dev_uc_add+0x56/0x120 [ 247.751748][T12232] CPU: 1 UID: 0 PID: 12232 Comm: syz.2.1600 Not tainted 6.16.0-rc2-syzkaller-00159-ge0fca6f2cebf #0 PREEMPT(full) [ 247.751771][T12232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 247.751782][T12232] Call Trace: [ 247.751790][T12232] [ 247.751798][T12232] dump_stack_lvl+0x189/0x250 [ 247.751832][T12232] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.751861][T12232] ? __pfx__printk+0x10/0x10 [ 247.751884][T12232] ? print_lock_name+0xde/0x100 [ 247.751902][T12232] ? dev_uc_add+0x56/0x120 [ 247.751929][T12232] __might_resched+0x495/0x610 [ 247.751956][T12232] ? stack_depot_save_flags+0x40/0x900 [ 247.751983][T12232] ? dev_uc_add+0x56/0x120 [ 247.752005][T12232] ? __pfx___might_resched+0x10/0x10 [ 247.752035][T12232] ? kasan_save_track+0x4f/0x80 [ 247.752075][T12232] __mutex_lock+0x106/0xe80 [ 247.752104][T12232] ? dev_set_promiscuity+0x10e/0x260 [ 247.752127][T12232] ? __pfx___mutex_lock+0x10/0x10 [ 247.752142][T12232] ? netdev_info+0x10a/0x160 [ 247.752170][T12232] ? __pfx_netdev_info+0x10/0x10 [ 247.752202][T12232] dev_set_promiscuity+0x10e/0x260 [ 247.752227][T12232] ? __pfx_macsec_dev_change_rx_flags+0x10/0x10 [ 247.752254][T12232] __dev_set_promiscuity+0x531/0x740 [ 247.752280][T12232] ? __hw_addr_add_ex+0x3c5/0x770 [ 247.752307][T12232] __dev_set_rx_mode+0x17c/0x260 [ 247.752331][T12232] dev_uc_add+0xc8/0x120 [ 247.752357][T12232] macsec_dev_open+0xd9/0x530 [ 247.752384][T12232] ? ib_device_get_by_netdev+0x46b/0x4d0 [ 247.752410][T12232] ? __pfx_macsec_dev_open+0x10/0x10 [ 247.752445][T12232] ? ib_device_get_by_netdev+0x84/0x4d0 [ 247.752469][T12232] ? hsr_netdev_notify+0x29e/0xcf0 [ 247.752490][T12232] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 247.752517][T12232] ? udp_tunnel_nic_netdevice_event+0x1b6/0x1500 [ 247.752546][T12232] ? ip6_route_dev_notify+0x9a/0x5b0 [ 247.752570][T12232] ? notifier_call_chain+0x3bf/0x3e0 [ 247.752605][T12232] __dev_open+0x46d/0x880 [ 247.752629][T12232] ? __pfx___dev_open+0x10/0x10 [ 247.752657][T12232] __dev_change_flags+0x1ea/0x6d0 [ 247.752680][T12232] ? validate_linkmsg+0x765/0x950 [ 247.752707][T12232] ? __pfx___dev_change_flags+0x10/0x10 [ 247.752740][T12232] rtnl_newlink_create+0x555/0xb00 [ 247.752775][T12232] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 247.752794][T12232] ? rtnl_newlink+0x8db/0x1c70 [ 247.752816][T12232] ? __pfx___mutex_lock+0x10/0x10 [ 247.752842][T12232] ? ns_capable+0x8a/0xf0 [ 247.752872][T12232] rtnl_newlink+0x16d6/0x1c70 [ 247.752892][T12232] ? netlink_sendmsg+0x805/0xb30 [ 247.752925][T12232] ? __pfx_rtnl_newlink+0x10/0x10 [ 247.752969][T12232] ? kasan_quarantine_put+0xdd/0x220 [ 247.752995][T12232] ? lockdep_hardirqs_on+0x9c/0x150 [ 247.753027][T12232] ? nlmon_xmit+0xb0/0x100 [ 247.753051][T12232] ? kmem_cache_free+0x18f/0x400 [ 247.753076][T12232] ? __local_bh_enable_ip+0x12d/0x1c0 [ 247.753103][T12232] ? lockdep_hardirqs_on+0x9c/0x150 [ 247.753130][T12232] ? __local_bh_enable_ip+0x12d/0x1c0 [ 247.753155][T12232] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 247.753186][T12232] ? __dev_queue_xmit+0x27e/0x3a70 [ 247.753223][T12232] ? __lock_acquire+0xab9/0xd20 [ 247.753275][T12232] ? __pfx_rtnl_newlink+0x10/0x10 [ 247.753293][T12232] rtnetlink_rcv_msg+0x7cf/0xb70 [ 247.753315][T12232] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 247.753333][T12232] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 247.753349][T12232] ? ref_tracker_free+0x63a/0x7d0 [ 247.753371][T12232] ? __copy_skb_header+0xa7/0x550 [ 247.753397][T12232] ? __pfx_ref_tracker_free+0x10/0x10 [ 247.753439][T12232] netlink_rcv_skb+0x205/0x470 [ 247.753462][T12232] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 247.753483][T12232] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 247.753518][T12232] ? netlink_deliver_tap+0x2e/0x1b0 [ 247.753538][T12232] ? netlink_deliver_tap+0x2e/0x1b0 [ 247.753566][T12232] netlink_unicast+0x758/0x8d0 [ 247.753597][T12232] netlink_sendmsg+0x805/0xb30 [ 247.753628][T12232] ? __pfx_netlink_sendmsg+0x10/0x10 [ 247.753654][T12232] ? aa_sock_msg_perm+0x94/0x160 [ 247.753679][T12232] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 247.753702][T12232] ? __pfx_netlink_sendmsg+0x10/0x10 [ 247.753724][T12232] __sock_sendmsg+0x219/0x270 [ 247.753755][T12232] ____sys_sendmsg+0x505/0x830 [ 247.753785][T12232] ? __pfx_____sys_sendmsg+0x10/0x10 [ 247.753817][T12232] ? import_iovec+0x74/0xa0 [ 247.753840][T12232] ___sys_sendmsg+0x21f/0x2a0 [ 247.753865][T12232] ? __pfx____sys_sendmsg+0x10/0x10 [ 247.753926][T12232] ? __fget_files+0x2a/0x420 [ 247.753945][T12232] ? __fget_files+0x3a0/0x420 [ 247.753976][T12232] __x64_sys_sendmsg+0x19b/0x260 [ 247.754001][T12232] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 247.754035][T12232] ? rcu_is_watching+0x15/0xb0 [ 247.754069][T12232] ? do_syscall_64+0xbe/0x3b0 [ 247.754090][T12232] do_syscall_64+0xfa/0x3b0 [ 247.754105][T12232] ? lockdep_hardirqs_on+0x9c/0x150 [ 247.754130][T12232] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.754148][T12232] ? clear_bhb_loop+0x60/0xb0 [ 247.754169][T12232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.754186][T12232] RIP: 0033:0x7fa70118e929 [ 247.754203][T12232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.754218][T12232] RSP: 002b:00007fa702085038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 247.754235][T12232] RAX: ffffffffffffffda RBX: 00007fa7013b5fa0 RCX: 00007fa70118e929 [ 247.754248][T12232] RDX: 0000000000000800 RSI: 0000200000000280 RDI: 0000000000000005 [ 247.754259][T12232] RBP: 00007fa701210b39 R08: 0000000000000000 R09: 0000000000000000 [ 247.754270][T12232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.754281][T12232] R13: 0000000000000000 R14: 00007fa7013b5fa0 R15: 00007ffeba19a998 [ 247.754310][T12232] [ 247.754332][T12232] [ 248.304268][T12232] ============================= [ 248.309112][T12232] [ BUG: Invalid wait context ] [ 248.313954][T12232] 6.16.0-rc2-syzkaller-00159-ge0fca6f2cebf #0 Tainted: G W [ 248.322618][T12232] ----------------------------- [ 248.327461][T12232] syz.2.1600/12232 is trying to lock: [ 248.332833][T12232] ffff88807bfb8d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_set_promiscuity+0x10e/0x260 [ 248.343286][T12232] other info that might help us debug this: [ 248.349166][T12232] context-{5:5} [ 248.352616][T12232] 3 locks held by syz.2.1600/12232: [ 248.357811][T12232] #0: ffffffff8fa14db8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 248.367324][T12232] #1: ffffffff8f510348 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 248.376402][T12232] #2: ffff8880569d2368 (&macsec_netdev_addr_lock_key/1){+...}-{3:3}, at: dev_uc_add+0x67/0x120 [ 248.386853][T12232] stack backtrace: [ 248.390587][T12232] CPU: 1 UID: 0 PID: 12232 Comm: syz.2.1600 Tainted: G W 6.16.0-rc2-syzkaller-00159-ge0fca6f2cebf #0 PREEMPT(full) [ 248.390608][T12232] Tainted: [W]=WARN [ 248.390613][T12232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 248.390623][T12232] Call Trace: [ 248.390629][T12232] [ 248.390636][T12232] dump_stack_lvl+0x189/0x250 [ 248.390661][T12232] ? __pfx_dump_stack_lvl+0x10/0x10 [ 248.390683][T12232] ? __pfx__printk+0x10/0x10 [ 248.390700][T12232] ? print_lock_name+0xde/0x100 [ 248.390716][T12232] __lock_acquire+0xbcb/0xd20 [ 248.390743][T12232] ? dev_set_promiscuity+0x10e/0x260 [ 248.390759][T12232] lock_acquire+0x120/0x360 [ 248.390778][T12232] ? dev_set_promiscuity+0x10e/0x260 [ 248.390799][T12232] __mutex_lock+0x182/0xe80 [ 248.390812][T12232] ? dev_set_promiscuity+0x10e/0x260 [ 248.390832][T12232] ? dev_set_promiscuity+0x10e/0x260 [ 248.390849][T12232] ? __pfx___mutex_lock+0x10/0x10 [ 248.390861][T12232] ? netdev_info+0x10a/0x160 [ 248.390880][T12232] ? __pfx_netdev_info+0x10/0x10 [ 248.390900][T12232] dev_set_promiscuity+0x10e/0x260 [ 248.390918][T12232] ? __pfx_macsec_dev_change_rx_flags+0x10/0x10 [ 248.390941][T12232] __dev_set_promiscuity+0x531/0x740 [ 248.390959][T12232] ? __hw_addr_add_ex+0x3c5/0x770 [ 248.390978][T12232] __dev_set_rx_mode+0x17c/0x260 [ 248.390995][T12232] dev_uc_add+0xc8/0x120 [ 248.391014][T12232] macsec_dev_open+0xd9/0x530 [ 248.391035][T12232] ? ib_device_get_by_netdev+0x46b/0x4d0 [ 248.391056][T12232] ? __pfx_macsec_dev_open+0x10/0x10 [ 248.391077][T12232] ? ib_device_get_by_netdev+0x84/0x4d0 [ 248.391096][T12232] ? hsr_netdev_notify+0x29e/0xcf0 [ 248.391112][T12232] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 248.391132][T12232] ? udp_tunnel_nic_netdevice_event+0x1b6/0x1500 [ 248.391151][T12232] ? ip6_route_dev_notify+0x9a/0x5b0 [ 248.391168][T12232] ? notifier_call_chain+0x3bf/0x3e0 [ 248.391193][T12232] __dev_open+0x46d/0x880 [ 248.391209][T12232] ? __pfx___dev_open+0x10/0x10 [ 248.391226][T12232] __dev_change_flags+0x1ea/0x6d0 [ 248.391243][T12232] ? validate_linkmsg+0x765/0x950 [ 248.391265][T12232] ? __pfx___dev_change_flags+0x10/0x10 [ 248.391285][T12232] rtnl_newlink_create+0x555/0xb00 [ 248.391307][T12232] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 248.391323][T12232] ? rtnl_newlink+0x8db/0x1c70 [ 248.391338][T12232] ? __pfx___mutex_lock+0x10/0x10 [ 248.391354][T12232] ? ns_capable+0x8a/0xf0 [ 248.391377][T12232] rtnl_newlink+0x16d6/0x1c70 [ 248.391392][T12232] ? netlink_sendmsg+0x805/0xb30 [ 248.391413][T12232] ? __pfx_rtnl_newlink+0x10/0x10 [ 248.391436][T12232] ? kasan_quarantine_put+0xdd/0x220 [ 248.391457][T12232] ? lockdep_hardirqs_on+0x9c/0x150 [ 248.391482][T12232] ? nlmon_xmit+0xb0/0x100 [ 248.391502][T12232] ? kmem_cache_free+0x18f/0x400 [ 248.391518][T12232] ? __local_bh_enable_ip+0x12d/0x1c0 [ 248.391540][T12232] ? lockdep_hardirqs_on+0x9c/0x150 [ 248.391561][T12232] ? __local_bh_enable_ip+0x12d/0x1c0 [ 248.391581][T12232] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 248.391603][T12232] ? __dev_queue_xmit+0x27e/0x3a70 [ 248.391628][T12232] ? __lock_acquire+0xab9/0xd20 [ 248.391656][T12232] ? __pfx_rtnl_newlink+0x10/0x10 [ 248.391670][T12232] rtnetlink_rcv_msg+0x7cf/0xb70 [ 248.391685][T12232] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 248.391699][T12232] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 248.391712][T12232] ? ref_tracker_free+0x63a/0x7d0 [ 248.391737][T12232] ? __copy_skb_header+0xa7/0x550 [ 248.391756][T12232] ? __pfx_ref_tracker_free+0x10/0x10 [ 248.391779][T12232] netlink_rcv_skb+0x205/0x470 [ 248.391795][T12232] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 248.391810][T12232] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 248.391831][T12232] ? netlink_deliver_tap+0x2e/0x1b0 [ 248.391846][T12232] ? netlink_deliver_tap+0x2e/0x1b0 [ 248.391864][T12232] netlink_unicast+0x758/0x8d0 [ 248.391882][T12232] netlink_sendmsg+0x805/0xb30 [ 248.391902][T12232] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.391921][T12232] ? aa_sock_msg_perm+0x94/0x160 [ 248.391940][T12232] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 248.391958][T12232] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.391974][T12232] __sock_sendmsg+0x219/0x270 [ 248.391998][T12232] ____sys_sendmsg+0x505/0x830 [ 248.392017][T12232] ? __pfx_____sys_sendmsg+0x10/0x10 [ 248.392038][T12232] ? import_iovec+0x74/0xa0 [ 248.392053][T12232] ___sys_sendmsg+0x21f/0x2a0 [ 248.392071][T12232] ? __pfx____sys_sendmsg+0x10/0x10 [ 248.392102][T12232] ? __fget_files+0x2a/0x420 [ 248.392118][T12232] ? __fget_files+0x3a0/0x420 [ 248.392137][T12232] __x64_sys_sendmsg+0x19b/0x260 [ 248.392155][T12232] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 248.392177][T12232] ? rcu_is_watching+0x15/0xb0 [ 248.392201][T12232] ? do_syscall_64+0xbe/0x3b0 [ 248.392215][T12232] do_syscall_64+0xfa/0x3b0 [ 248.392227][T12232] ? lockdep_hardirqs_on+0x9c/0x150 [ 248.392247][T12232] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.392261][T12232] ? clear_bhb_loop+0x60/0xb0 [ 248.392277][T12232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.392291][T12232] RIP: 0033:0x7fa70118e929 [ 248.392304][T12232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.392317][T12232] RSP: 002b:00007fa702085038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 248.392332][T12232] RAX: ffffffffffffffda RBX: 00007fa7013b5fa0 RCX: 00007fa70118e929 [ 248.392343][T12232] RDX: 0000000000000800 RSI: 0000200000000280 RDI: 0000000000000005 [ 248.392352][T12232] RBP: 00007fa701210b39 R08: 0000000000000000 R09: 0000000000000000 [ 248.392361][T12232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.392369][T12232] R13: 0000000000000000 R14: 00007fa7013b5fa0 R15: 00007ffeba19a998 [ 248.392385][T12232] [ 248.945249][ T5156] Bluetooth: hci4: command tx timeout [ 248.945291][ T5840] Bluetooth: hci0: command tx timeout [ 249.414307][T12003] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 249.422995][T12003] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 249.433240][T12003] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 249.441915][T12003] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 249.508021][T12003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.531937][T12003] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.542708][ T7358] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.549841][ T7358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.568564][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.575647][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.676649][T12037] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 249.688664][T12037] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 249.700190][T12037] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 249.720869][T12037] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 249.791210][T12037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.810769][T12037] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.823860][ T1006] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.830996][ T1006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.846306][T12003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.858925][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.866022][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.919974][T12003] veth0_vlan: entered promiscuous mode [ 249.932472][T12003] veth1_vlan: entered promiscuous mode [ 249.979760][T12003] veth0_macvtap: entered promiscuous mode [ 250.000518][T12003] veth1_macvtap: entered promiscuous mode [ 250.041331][T12003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.054580][T12003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.081296][T12003] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.091151][T12003] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.101845][T12003] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.110792][T12003] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.150397][T12003] ieee80211 phy45: Selected rate control algorithm 'minstrel_ht' [ 250.170278][T12037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.187703][ T7358] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.190415][T12003] ieee80211 phy46: Selected rate control algorithm 'minstrel_ht' [ 250.205290][ T7358] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.235141][ T7358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.255537][ T7358] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.266168][T12037] veth0_vlan: entered promiscuous mode [ 250.276562][T12037] veth1_vlan: entered promiscuous mode [ 250.331919][T12037] veth0_macvtap: entered promiscuous mode [ 250.340900][T12037] veth1_macvtap: entered promiscuous mode [ 250.356722][T12037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.369833][T12037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.383592][T12037] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.392882][T12037] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.402448][T12037] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.411233][T12037] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.439491][T12037] ieee80211 phy47: Selected rate control algorithm 'minstrel_ht' [ 250.472866][ T1006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.476384][T12037] ieee80211 phy48: Selected rate control algorithm 'minstrel_ht' [ 250.488525][ T1006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.515292][ T2972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.530776][ T2972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.964928][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.492764][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.554067][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.615891][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.780820][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.868236][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.932003][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.025487][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.157613][ T12] bridge_slave_1: left allmulticast mode [ 254.167985][ T12] bridge_slave_1: left promiscuous mode [ 254.174500][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.198904][ T12] bridge_slave_0: left allmulticast mode [ 254.204586][ T12] bridge_slave_0: left promiscuous mode [ 254.219679][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.238626][ T12] bridge_slave_1: left allmulticast mode [ 254.244285][ T12] bridge_slave_1: left promiscuous mode [ 254.250909][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.260734][ T12] bridge_slave_0: left allmulticast mode [ 254.266404][ T12] bridge_slave_0: left promiscuous mode [ 254.273243][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.426436][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.440120][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.450093][ T12] bond0 (unregistering): Released all slaves [ 254.545991][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.556489][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.569385][ T12] bond0 (unregistering): Released all slaves [ 254.900950][ T12] hsr_slave_0: left promiscuous mode [ 254.919811][ T12] hsr_slave_1: left promiscuous mode [ 254.925569][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.947549][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.960253][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.977397][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.994164][ T12] hsr_slave_0: left promiscuous mode [ 255.009581][ T12] hsr_slave_1: left promiscuous mode [ 255.015300][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.037456][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.045800][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.053632][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.074621][ T12] veth1_macvtap: left promiscuous mode [ 255.081849][ T12] veth0_macvtap: left promiscuous mode [ 255.088113][ T12] veth1_vlan: left promiscuous mode [ 255.093421][ T12] veth0_vlan: left promiscuous mode [ 255.102457][ T12] veth1_macvtap: left promiscuous mode [ 255.108783][ T12] veth0_macvtap: left promiscuous mode [ 255.114360][ T12] veth1_vlan: left promiscuous mode [ 255.122646][ T12] veth0_vlan: left promiscuous mode [ 255.416436][ T12] team0 (unregistering): Port device team_slave_1 removed [ 255.445490][ T12] team0 (unregistering): Port device team_slave_0 removed [ 255.569600][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.575959][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.690845][ T12] team0 (unregistering): Port device team_slave_1 removed [ 255.723908][ T12] team0 (unregistering): Port device team_slave_0 removed