last executing test programs: 2.846718569s ago: executing program 2 (id=3489): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0xa0000004}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x5, 0x1, 0xe86, 0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdf}, 0x94) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 2.629335778s ago: executing program 0 (id=3495): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x12, r0, 0xb6cc0000) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRESDEC=r3, @ANYRES32, @ANYRESHEX=r5], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r7, 0x0, 0x1843}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r8 = socket$key(0xf, 0x3, 0x2) recvmmsg(r8, &(0x7f0000000300)=[{{&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000001bc0)=""/4106, 0x100a}, 0x390b}], 0x1, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r8, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) sendmsg$key(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0x10}}, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x2, 0x0, 0x0, 0xfffe}, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r10, 0x800452d2, &(0x7f0000000100)) 2.534879543s ago: executing program 2 (id=3496): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000180)={'broute\x00', 0x0, 0x0, 0x0, [0x10, 0x61f7, 0x101, 0x7fff, 0xffffffffffffab12, 0x1], 0x1, 0x0, 0x0, [{}]}, 0x88) 2.440453577s ago: executing program 2 (id=3498): r0 = epoll_create1(0x0) poll(&(0x7f0000000040)=[{r0, 0x200}], 0x1, 0xdb3) socketpair$unix(0x1, 0x1, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) shutdown(0xffffffffffffffff, 0x0) 1.822569563s ago: executing program 1 (id=3507): bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0x12, 0xb, 0x8, 0x2}, 0x50) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0xa0000004}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x5, 0x1, 0xe86, 0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdf}, 0x94) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 1.730457207s ago: executing program 3 (id=3508): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) ioctl$sock_ax25_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@default, @default, 0x0, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}) socket$tipc(0x1e, 0x5, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000440)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @dest_unreach={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @local, {[@rr={0x7, 0x3, 0xdd}, @timestamp_addr={0x44, 0x4}]}}}}}}}, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) socket(0x1e, 0x4, 0x0) r6 = socket(0x1e, 0x4, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r8, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x8000) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x80) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, 0x0, 0x0) 1.722120877s ago: executing program 1 (id=3509): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, 0x0, 0x0) 1.65833244s ago: executing program 0 (id=3510): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x1f2}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="28010000100007000000000200000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb24000900"], 0x128}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r5, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x5}, 0x8) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newsa={0x10c, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x300, 0x3, 0x2, 0xfeffff7f00000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}]}, 0x10c}}, 0x0) r6 = socket(0x1e, 0x1, 0x0) listen(r6, 0xfff) shutdown(r6, 0x2) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000014c0)={0x10, 0x3f4, 0x0, 0x0, 0x0, {0x10, 0x3e9}}, 0x420}}, 0x0) recvmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)}, 0x0) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x2, 0x700}, @TCA_FQ_PLIMIT={0x8, 0x1, 0x4}]}}]}, 0x48}}, 0x0) socketpair(0x22, 0x2, 0x2, &(0x7f0000000000)) 1.582927713s ago: executing program 1 (id=3511): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000003c0)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x9a, 0x66, 0x0, 0x0, 0x1, 0x0, @private=0xa010000, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0xf, 0x0, {0x1f, 0x4, 0x0, 0x3a, 0x584, 0x65, 0x9, 0x25, 0x16, 0x3313, @empty, @multicast2, {[@end, @generic={0x94, 0xf, "4fcf02d60e646404e8e478505e"}, @end, @noop, @cipso={0x86, 0x31, 0x3, [{0x1, 0x11, "97e3eedcb1b4f0f6c3fb95c6087f31"}, {0x5, 0xa, "2d3110a90aa230a1"}, {0x5e232c06587b5052, 0x10, "66079e88e964c34418c418a7ed5b"}]}, @rr={0x7, 0xf, 0x16, [@dev={0xac, 0x14, 0x14, 0x41}, @multicast1, @loopback]}, @timestamp={0x44, 0x14, 0x84, 0x0, 0x4, [0x4, 0x0, 0x6, 0x1]}]}}, "c819"}}}, 0xa8) 1.498123417s ago: executing program 3 (id=3512): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000a80)={'syzkaller0\x00', @broadcast}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r3, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000005c0)=""/55, 0x37}, {&(0x7f0000000c80)=""/197, 0xc5}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/74, 0x4a}, {&(0x7f0000000ac0)=""/277, 0x107}], 0x5, 0x0, 0x43}, 0x5d}], 0x1, 0x10022, 0x0) 1.482158777s ago: executing program 4 (id=3513): unshare(0x14020d00) socket$packet(0x11, 0xa, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000001000012826bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="04400000b0c4000014001680100001800c000900f304000001000100080004003c040000140035006261746164765f736c6176655f3000"], 0x50}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4000000005e7622b6b032d0dd7f000000616cfce92e000000050000000000000095000600000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000025c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x4, 0x0, 0x400}, 0x50) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f00000000c0)={'veth1_vlan\x00', {0x2, 0x4e21, @loopback}}) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000300)=ANY=[@ANYRES64=r1], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2000, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01010000000000000000020000000900020073797a320000000008000440000000000900010073797a30000000000800034000000008200000000e0a05000000000000000000070000090900020073797a310000000014000000110001000000f600000000000000000aefea9da6cb7e2e7997f17ba9bbfbc098544590ef06d4de69f9cfa54e4f2a8321089925297006c8574df4980b"], 0x84}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180), 0x4) 1.445603149s ago: executing program 2 (id=3514): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xd}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x281, 0x7f, 0xfffffffd, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x7, 0x7ed53619, 0x1, 0x2, 0xa8, 0x4, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000001, 0x10001, 0x791, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0x80000d, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0x6, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x1, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0x1000, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d20, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0xff, 0x5, 0x7, 0x6, 0x10007a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xff0, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x7, 0x6, 0x10, 0xab, 0x8, 0x80000001, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x38, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x8000005, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x7fff, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x4, 0x235, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x40, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x1100, 0xec0, 0x10001, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x3, 0x0, 0x365, 0x8, 0x8, 0x19bb, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x800092, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0x3, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0xd, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1682, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0xfff, 0x12, 0x2, 0xfff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1fd, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x7, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff9a, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x70d, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x6, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x200, 0x4, 0x21ce83b0, 0x2, 0x6, {0x9, 0x1, 0x1000, 0x4, 0x4, 0x401}, {0xe, 0x0, 0xc, 0x1, 0x9, 0x5}, 0x7, 0x80, 0x8}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) close(0xffffffffffffffff) socket(0x40000000015, 0x5, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010102}}}], 0x20}}], 0x1, 0x0) 1.444675929s ago: executing program 0 (id=3515): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000880), 0x12) unshare(0xa020480) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000100)=""/120, 0x78}], 0x1, 0x4, 0x8) 1.295518765s ago: executing program 1 (id=3516): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 1.231085799s ago: executing program 0 (id=3517): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) 1.084169184s ago: executing program 0 (id=3518): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c000000100003040000", @ANYRES32=r3, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {0x5}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 1.035500186s ago: executing program 4 (id=3519): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001005000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) 970.873849ms ago: executing program 1 (id=3520): r0 = socket$inet(0xa, 0x806, 0x84) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000140)={'broute\x00', 0x0, 0x0, 0x0, [0x9, 0x0, 0x48b0, 0x3, 0x945b, 0x7]}, &(0x7f0000000400)=0x78) sendmsg$can_bcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) listen(r0, 0x8) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) ioctl$PPPIOCSDEBUG(0xffffffffffffffff, 0x40047440, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r4) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x3261e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0xf, 0x0, 0x0) 970.130659ms ago: executing program 2 (id=3521): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, 0x0, 0x0) 850.881005ms ago: executing program 4 (id=3522): close(0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x20014880) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newtaction={0x60, 0x30, 0x48b, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_simple={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x9, 0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="1c000000030601030000006021050002820000000500010007000000a00164db52961e043b904532a6fc8286a0f49da372c0d21eb1bc4873308deb58e2b120aa33854c671e6166dcc1383d908528e459a38bf95aa3e85e9327228e3cafa20a768ef26d588551aea2fc2ab78e7906678b65752db6455b6676631bea474b9b4356c7000c28c7d16d01bf9bbb42cbc7b042b6094ce1800746bb3b338457996c90a2550135c8bb5c4919de868010288095675a71a40b2fc32352e8e9827dd6a89f7467e4889fb172a00861f9f51342"], 0x1c}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x804) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x6}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x4000040) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="73bd080000000000002062184876711b0c67eab2d884e2d9ea44bc13f81adb1942efef91ddb9e42c832eae9c1eadbf97e1d25eb4024b3581"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="00010000", @ANYRES16=r4, @ANYBLOB="0500000000000000ff000f00000008000300", @ANYRES32=r5, @ANYBLOB="2a000e0080000000ffffffffffff080211000000080211000000000000000000000000006400010001000000a0000f008c18db0b773884b5a2450b41842da3f85c8aee3a74ebdcdbde43056c02c30e4a1223307d1807090fd1702d25c92284f1d1091b8f21bacec51362acfa9f2104ac834dceb6edb5932eda6f76484c3e93bc60dedd44179dd59b2499735f1884348230a6cfaf2344d21b81eed38cc562ea6bc4923f440d20b7c3c1091af9108e47adcd1af5502c47cf696512505050505050080211000000ffffffffffff080026006c09000008000c006400000008000d0000000000"], 0x100}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f00000005c0)={0x60, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x10000000, 0x16}}}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xe, 0xbd, [0x9, 0x5, 0x9, 0x0, 0x3ff]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xb, 0x13, [{0x60}, {}, {0xc}, {0x28, 0x1}, {0x60}, {0x48}, {0x1, 0x1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r6 = accept$alg(r2, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010000104fcfffffffcdbdf2500000000", @ANYRES32=r7, @ANYBLOB="0025000000000000240012800b000100697036746e6c00001400028008000700fbffffff06000f005e"], 0x44}, 0x1, 0x0, 0x0, 0x40005}, 0x20004090) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x14, r9, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40404}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000002bc0), r10) syz_emit_ethernet(0x52, &(0x7f0000000280)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @icmp={{0xa, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local, {[@timestamp_prespec={0x7, 0x14, 0xf, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty, 0xfffffffc}]}]}}, @redirect={0x8, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, @remote, @broadcast}}}}}}, 0x0) sendmsg$NFC_CMD_DEP_LINK_UP(r10, &(0x7f0000003e80)={0x0, 0x0, &(0x7f0000003e40)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="370426bd7000fcdbdf250400000005000a00010000000800010034"], 0x24}}, 0x4) sendmmsg$alg(r6, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000880)="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", 0x17b}, {&(0x7f0000000a80)="9f1ac09f155c1291fc8baa01adb9b575260400877ef8644bccc1353c6da6123e4e81e2a13e7fcca4b10085ea82589f9511a2f87ee914c9e0894139310b5457cfe7ca3ae3dade5d7a11f014f2bbdec62e2df3daf9875c79c6763fdcb8830f378346bd7c5c71ab8fffc299f6aea8ae05a727e64cbf8c3de5c36604fa3a7f43c2d51832aa29a52a9d0800823bc89a7cc268e91fff7160c2accb039cbf2cfb99a47371db803c3dce71aa0555a2c0fdb6c8e812ac6974d7", 0xb5}, {&(0x7f00000012c0)="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", 0x131}], 0x3, 0x0, 0x0, 0x44000}], 0x1, 0x0) 780.225457ms ago: executing program 0 (id=3523): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0xffffff0b}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x2, 0x2101, 0x0) 730.328749ms ago: executing program 3 (id=3524): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x802}, 0xe) sendmmsg$inet(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)="e8", 0x1}], 0x1}}], 0x1, 0x4040800) shutdown(r1, 0x1) socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40804) 730.041049ms ago: executing program 2 (id=3525): r0 = epoll_create1(0x0) poll(&(0x7f0000000040)=[{r0, 0x200}], 0x1, 0xdb3) socketpair$unix(0x1, 0x1, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) shutdown(0xffffffffffffffff, 0x0) 602.700675ms ago: executing program 4 (id=3526): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 434.878472ms ago: executing program 1 (id=3527): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000), 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x24, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c000}, 0x40) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x90, r3, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY={0x58, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "bb33406caced1d3f8f88880a80"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "a9612d7ae9"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f4359b1973e9ea4d902cd1df40"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x90}}, 0x40) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x400, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x330, 0xffffffff, 0xffffffff, 0x330, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x230, 0x260, 0x0, {}, [@common=@srh={{0x30}, {0xd1, 0x8, 0x8, 0x8, 0xf, 0x4, 0x400}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x460) 423.169792ms ago: executing program 4 (id=3528): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4003, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x3, '\x00', 0x5, 0x6, 0x3, 0x8}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r5, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 406.305423ms ago: executing program 3 (id=3529): unshare(0x14020d00) socket$packet(0x11, 0xa, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000001000012826bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="04400000b0c4000014001680100001800c000900f304000001000100080004003c040000140035006261746164765f736c6176655f3000"], 0x50}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4000000005e7622b6b032d0dd7f000000616cfce92e000000050000000000000095000600000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000025c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x4, 0x0, 0x400}, 0x50) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f00000000c0)={'veth1_vlan\x00', {0x2, 0x4e21, @loopback}}) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000300)=ANY=[@ANYRES64=r1], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2000, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01010000000000000000020000000900020073797a320000000008000440000000000900010073797a30000000000800034000000008200000000e0a05000000000000000000070000090900020073797a310000000014000000110001000000f600000000000000000aefea9da6cb7e2e7997f17ba9bbfbc098544590ef06d4de69f9cfa54e4f2a8321089925297006c8574df4980b"], 0x84}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180), 0x4) 151.490244ms ago: executing program 3 (id=3530): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) 92.792797ms ago: executing program 4 (id=3531): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 0s ago: executing program 3 (id=3532): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001005000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) kernel console output (not intermixed with test programs): ] device macvtap2 entered promiscuous mode [ 244.456976][ T9997] device macvtap2 left promiscuous mode [ 244.955219][T10014] device syzkaller0 entered promiscuous mode [ 245.091778][T10025] 8021q: VLANs not supported on vcan0 [ 245.108469][T10022] wg1 speed is unknown, defaulting to 1000 [ 245.649614][T10038] device erspan0 entered promiscuous mode [ 245.668962][T10038] device macvtap2 entered promiscuous mode [ 245.709534][T10039] device macvtap2 left promiscuous mode [ 246.321432][T10055] device syzkaller0 entered promiscuous mode [ 246.512475][T10068] netlink: 'syz.0.2061': attribute type 6 has an invalid length. [ 246.520510][T10068] netlink: 'syz.0.2061': attribute type 5 has an invalid length. [ 246.633873][T10072] device syzkaller0 entered promiscuous mode [ 246.790676][T10077] wg1 speed is unknown, defaulting to 1000 [ 246.809394][T10080] IPVS: sh: FWM 3 0x00000003 - no destination available [ 246.816792][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 246.980992][T10088] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 247.040193][T10088] __nla_validate_parse: 6 callbacks suppressed [ 247.040207][T10088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2070'. [ 247.143017][T10098] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2071'. [ 247.271483][T10100] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2073'. [ 247.508628][T10109] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2077'. [ 247.740439][T10115] wg1 speed is unknown, defaulting to 1000 [ 247.884103][T10123] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 247.926478][T10125] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2084'. [ 247.926614][T10123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2083'. [ 247.976724][T10127] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2085'. [ 248.307902][T10139] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2090'. [ 248.399809][T10146] IPVS: sh: FWM 3 0x00000003 - no destination available [ 248.417513][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 248.452576][T10142] wg1 speed is unknown, defaulting to 1000 [ 248.627815][T10155] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2094'. [ 248.661979][T10160] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 248.719512][T10165] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2098'. [ 248.967329][T10167] device syzkaller0 entered promiscuous mode [ 249.373676][T10175] wg1 speed is unknown, defaulting to 1000 [ 249.909917][T10198] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 249.975794][T10203] wg1 speed is unknown, defaulting to 1000 [ 249.982859][T10201] device syzkaller0 entered promiscuous mode [ 250.175611][T10215] IPVS: sh: FWM 3 0x00000003 - no destination available [ 250.214531][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 250.222703][T10215] IPVS: sh: FWM 3 0x00000003 - no destination available [ 250.242865][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 251.263222][T10248] tipc: Enabled bearer , priority 0 [ 251.284109][T10248] device syzkaller0 entered promiscuous mode [ 251.304090][T10251] device syzkaller0 entered promiscuous mode [ 251.379082][T10248] tipc: Resetting bearer [ 251.427184][T10247] tipc: Resetting bearer [ 251.457365][T10247] tipc: Disabling bearer [ 251.671044][T10265] wg1 speed is unknown, defaulting to 1000 [ 251.993680][T10273] ipt_CLUSTERIP: Please specify destination IP [ 252.051534][T10280] __nla_validate_parse: 10 callbacks suppressed [ 252.051547][T10280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2137'. [ 252.191646][T10283] wg1 speed is unknown, defaulting to 1000 [ 252.644199][T10291] wg1 speed is unknown, defaulting to 1000 [ 252.819879][T10296] tipc: Enabling of bearer rejected, failed to enable media [ 252.844308][T10296] device syzkaller0 entered promiscuous mode [ 253.146049][T10304] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2147'. [ 253.276933][T10310] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2148'. [ 253.758193][T10323] wg1 speed is unknown, defaulting to 1000 [ 254.214716][T10341] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2152'. [ 254.241176][T10343] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2155'. [ 255.192478][T10369] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2164'. [ 255.460103][T10374] wg1 speed is unknown, defaulting to 1000 [ 255.520263][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.526627][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.617901][T10382] tipc: Enabling of bearer rejected, failed to enable media [ 255.653636][T10382] device syzkaller0 entered promiscuous mode [ 255.997575][T10402] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2172'. [ 256.130085][T10406] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2175'. [ 256.620539][T10424] wg1 speed is unknown, defaulting to 1000 [ 256.867643][T10435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2184'. [ 256.909966][T10435] device macvtap3 entered promiscuous mode [ 257.077454][T10439] tipc: Enabling of bearer rejected, failed to enable media [ 257.101573][T10439] device syzkaller0 entered promiscuous mode [ 257.422470][T10452] IPVS: sh: FWM 3 0x00000003 - no destination available [ 257.435127][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 257.623920][T10460] tipc: Enabling of bearer rejected, failed to enable media [ 257.822154][T10468] wg1 speed is unknown, defaulting to 1000 [ 258.262935][T10488] IPVS: sh: FWM 3 0x00000003 - no destination available [ 258.280483][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 258.624736][T10498] wg1 speed is unknown, defaulting to 1000 [ 259.155353][T10515] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2210'. [ 259.231348][T10515] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2210'. [ 259.322680][T10521] tipc: Enabling of bearer rejected, failed to enable media [ 259.350395][T10517] wg1 speed is unknown, defaulting to 1000 [ 259.431057][T10528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2212'. [ 259.635681][T10540] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2214'. [ 259.684839][T10539] device syzkaller0 entered promiscuous mode [ 260.075561][T10552] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2219'. [ 260.154542][T10554] wg1 speed is unknown, defaulting to 1000 [ 260.397667][T10557] wg1 speed is unknown, defaulting to 1000 [ 260.924804][T10570] ipt_CLUSTERIP: Please specify destination IP [ 260.960206][T10581] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2229'. [ 261.326112][T10585] tipc: Enabling of bearer rejected, failed to enable media [ 261.385018][T10585] device syzkaller0 entered promiscuous mode [ 261.459339][T10589] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2232'. [ 261.679405][T10596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2233'. [ 262.105803][T10605] wg1 speed is unknown, defaulting to 1000 [ 262.496848][T10622] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2242'. [ 262.751717][T10631] tipc: Enabling of bearer rejected, failed to enable media [ 262.791719][T10631] device syzkaller0 entered promiscuous mode [ 263.091542][T10640] IPVS: sh: FWM 3 0x00000003 - no destination available [ 263.116583][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 263.283614][T10642] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 263.548081][T10644] wg1 speed is unknown, defaulting to 1000 [ 264.130640][T10653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2252'. [ 264.748969][T10683] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2256'. [ 265.175069][T10697] IPVS: sh: FWM 3 0x00000003 - no destination available [ 265.193726][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 265.210530][T10697] IPVS: sh: FWM 3 0x00000003 - no destination available [ 265.220353][T10695] ipt_CLUSTERIP: Please specify destination IP [ 265.227943][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 265.451021][T10707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2268'. [ 265.950236][T10729] tipc: Enabling of bearer rejected, failed to enable media [ 266.435242][T10746] wg1 speed is unknown, defaulting to 1000 [ 266.774201][T10759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2282'. [ 266.836196][T10760] wg1 speed is unknown, defaulting to 1000 [ 267.275479][T10776] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2290'. [ 267.540224][T10784] tipc: Enabling of bearer rejected, failed to enable media [ 267.567785][T10780] device syzkaller0 entered promiscuous mode [ 267.625681][T10782] wg1 speed is unknown, defaulting to 1000 [ 267.686704][T10788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2295'. [ 268.104230][T10801] wg1 speed is unknown, defaulting to 1000 [ 269.102189][T10824] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2306'. [ 269.382126][T10828] device syzkaller0 entered promiscuous mode [ 269.543230][T10835] tipc: Enabling of bearer rejected, failed to enable media [ 269.703234][T10838] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2310'. [ 270.093368][T10859] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2317'. [ 270.115674][T10861] wg1 speed is unknown, defaulting to 1000 [ 270.133710][T10859] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2317'. [ 270.381325][T10871] device syzkaller0 entered promiscuous mode [ 271.123765][T10888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2328'. [ 271.208545][T10889] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 271.215800][T10889] IPv6: NLM_F_CREATE should be set when creating new route [ 271.284208][T10888] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 271.291524][T10888] IPv6: NLM_F_CREATE should be set when creating new route [ 271.366909][T10898] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2332'. [ 271.402146][T10898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2332'. [ 271.473279][T10900] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2333'. [ 271.582247][T10902] wg1 speed is unknown, defaulting to 1000 [ 271.864119][T10915] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2337'. [ 272.390047][T10937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2343'. [ 272.410985][T10936] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2344'. [ 272.603004][T10940] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2345'. [ 273.593470][T10981] device syzkaller0 entered promiscuous mode [ 273.931726][T10997] device vlan2 entered promiscuous mode [ 273.950095][T10997] device bond0 entered promiscuous mode [ 273.968776][T10997] device bond_slave_0 entered promiscuous mode [ 273.995613][T10997] device bond_slave_1 entered promiscuous mode [ 274.116218][T11000] wg1 speed is unknown, defaulting to 1000 [ 275.065734][T11029] device syzkaller0 entered promiscuous mode [ 275.214304][T11033] __nla_validate_parse: 13 callbacks suppressed [ 275.214319][T11033] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2379'. [ 275.475912][T11041] wg1 speed is unknown, defaulting to 1000 [ 275.616749][T11049] IPVS: sh: FWM 3 0x00000003 - no destination available [ 275.648944][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 275.700575][T11049] IPVS: sh: FWM 3 0x00000003 - no destination available [ 275.718615][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 275.767464][T11052] tipc: Enabling of bearer rejected, failed to enable media [ 275.808654][T11053] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2387'. [ 275.993428][T11066] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2390'. [ 276.043149][T11071] device syzkaller0 entered promiscuous mode [ 276.138703][T11075] netlink: 'syz.4.2391': attribute type 12 has an invalid length. [ 276.544553][T11090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2396'. [ 276.615832][T11093] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2397'. [ 276.629493][T11090] device ip6gretap0 entered promiscuous mode [ 276.661526][T11090] device macvtap3 entered promiscuous mode [ 276.693505][T11094] device macvtap3 left promiscuous mode [ 276.717427][T11096] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 276.804710][T11096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2398'. [ 277.018961][T11106] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2402'. [ 277.182163][T11116] tipc: Enabled bearer , priority 0 [ 277.221012][T11116] tipc: Resetting bearer [ 277.251320][T11121] xt_CT: You must specify a L4 protocol and not use inversions on it [ 277.301333][T11115] tipc: Disabling bearer [ 277.345016][T11126] af_packet: tpacket_rcv: packet too big, clamped from 252 to 4294967272. macoff=96 [ 277.515913][T11130] wg1 speed is unknown, defaulting to 1000 [ 278.057086][T11146] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2416'. [ 278.396137][T11154] wg1 speed is unknown, defaulting to 1000 [ 278.510795][T11159] tipc: Enabled bearer , priority 0 [ 278.594908][T11159] tipc: Resetting bearer [ 278.605739][T11167] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2425'. [ 278.643822][T11157] tipc: Disabling bearer [ 278.782049][T11169] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2428'. [ 279.131880][T11187] device syzkaller0 entered promiscuous mode [ 279.404570][T11195] netlink: 'syz.1.2434': attribute type 12 has an invalid length. [ 279.695113][T11202] wg1 speed is unknown, defaulting to 1000 [ 280.360308][T11230] __nla_validate_parse: 3 callbacks suppressed [ 280.360324][T11230] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2450'. [ 280.471156][T11234] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2451'. [ 280.630846][T11246] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2456'. [ 280.705932][T11244] wg1 speed is unknown, defaulting to 1000 [ 281.179101][T11261] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2462'. [ 281.398553][T11271] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2466'. [ 281.558031][T11275] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2468'. [ 281.631106][T11278] wg1 speed is unknown, defaulting to 1000 [ 281.734600][T11286] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 281.899696][T11295] ax25_connect(): syz.0.2475 uses autobind, please contact jreuter@yaina.de [ 282.229655][T11307] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2481'. [ 282.439653][T11319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2485'. [ 282.482461][T11321] wg1 speed is unknown, defaulting to 1000 [ 282.665599][T11327] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 283.007780][T11338] device syzkaller0 entered promiscuous mode [ 283.199473][T11344] device syzkaller0 entered promiscuous mode [ 283.542879][T11355] wg1 speed is unknown, defaulting to 1000 [ 283.731651][T11361] netlink: 'syz.2.2502': attribute type 1 has an invalid length. [ 283.771710][T11361] netlink: 'syz.2.2502': attribute type 2 has an invalid length. [ 284.071809][T11376] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2509'. [ 284.087806][T11376] device vlan3 entered promiscuous mode [ 284.121766][T11374] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2508'. [ 284.573222][T11390] device syzkaller0 entered promiscuous mode [ 284.710005][T11392] wg1 speed is unknown, defaulting to 1000 [ 285.169965][T11406] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 285.215675][T11406] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 285.268410][T11406] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 285.308618][T11406] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 285.345937][T11406] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 285.383692][T11410] bond1 (unregistering): (slave geneve2): Releasing backup interface [ 285.395272][T11410] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 285.403881][T11410] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 285.415037][T11410] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 285.423905][T11410] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 285.455825][T11410] bond1 (unregistering): Released all slaves [ 285.489515][T11422] syz.1.2526[11422] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 285.489658][T11422] syz.1.2526[11422] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 285.495614][T11421] raw_sendmsg: syz.1.2526 forgot to set AF_INET. Fix it! [ 285.908535][T11434] netlink: 'syz.2.2530': attribute type 12 has an invalid length. [ 286.799989][T11460] __nla_validate_parse: 3 callbacks suppressed [ 286.800003][T11460] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2541'. [ 286.826237][T11461] tipc: Enabled bearer , priority 0 [ 286.853824][T11461] tipc: Resetting bearer [ 286.898260][T11459] tipc: Disabling bearer [ 286.927139][T11463] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2542'. [ 287.230021][T11476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2548'. [ 287.474723][T11487] netlink: 'syz.3.2551': attribute type 12 has an invalid length. [ 287.514163][T11484] device syzkaller0 entered promiscuous mode [ 287.821970][T11495] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.881498][T11496] device syz_tun entered promiscuous mode [ 287.937884][T11496] device macvtap4 entered promiscuous mode [ 287.947019][T11496] device syz_tun left promiscuous mode [ 287.996125][T11498] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2555'. [ 288.019992][T11495] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.117971][T11495] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.195435][T11495] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.356322][T11495] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.406230][T11495] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.463400][T11494] syz.1.2554 (11494) used greatest stack depth: 18176 bytes left [ 288.494140][T11495] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.534676][T11495] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.886678][T11523] IPVS: sh: FWM 3 0x00000003 - no destination available [ 289.093652][T11528] tipc: Enabled bearer , priority 0 [ 289.132442][T11528] device syzkaller0 entered promiscuous mode [ 289.148230][T11534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2569'. [ 289.167230][T11534] device ip6gretap0 entered promiscuous mode [ 289.174505][T11534] device macvtap2 entered promiscuous mode [ 289.210047][T11534] device macvtap2 left promiscuous mode [ 289.216446][T11527] tipc: Resetting bearer [ 289.247301][T11527] tipc: Disabling bearer [ 289.472912][T11548] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2574'. [ 289.492031][T11548] device vlan0 entered promiscuous mode [ 289.498162][T11548] device bond0 entered promiscuous mode [ 289.546560][T11548] device bond_slave_0 entered promiscuous mode [ 289.572372][T11548] device bond_slave_1 entered promiscuous mode [ 289.622382][T11555] IPVS: sh: FWM 3 0x00000003 - no destination available [ 289.787628][T11561] device veth1_to_batadv entered promiscuous mode [ 290.207185][T11575] tipc: Enabled bearer , priority 0 [ 290.215064][T11575] device syzkaller0 entered promiscuous mode [ 290.236715][T11573] tipc: Resetting bearer [ 290.267467][T11573] tipc: Disabling bearer [ 290.440425][T11581] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2589'. [ 290.476929][T11583] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2590'. [ 290.495738][T11581] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2589'. [ 290.500170][T11583] device vlan2 entered promiscuous mode [ 290.524285][T11583] device bond0 entered promiscuous mode [ 290.536651][T11583] device bond_slave_0 entered promiscuous mode [ 290.553600][T11583] device bond_slave_1 entered promiscuous mode [ 290.749894][T11590] wg1 speed is unknown, defaulting to 1000 [ 291.645201][T11610] tipc: Enabled bearer , priority 0 [ 291.652797][T11610] device syzkaller0 entered promiscuous mode [ 291.674137][T11610] tipc: Resetting bearer [ 291.681480][T11609] tipc: Resetting bearer [ 291.708243][T11609] tipc: Disabling bearer [ 291.774828][T11612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2600'. [ 291.971588][T11618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2603'. [ 291.994281][T11618] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2603'. [ 292.193372][T11625] device syzkaller0 entered promiscuous mode [ 292.582010][T11639] tipc: Enabled bearer , priority 0 [ 292.607118][T11639] device syzkaller0 entered promiscuous mode [ 292.641650][T11639] tipc: Resetting bearer [ 292.676905][T11636] tipc: Resetting bearer [ 292.716822][T11636] tipc: Disabling bearer [ 292.806306][T11643] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2613'. [ 292.866104][T11643] device vlan3 entered promiscuous mode [ 292.931730][T11645] wg1 speed is unknown, defaulting to 1000 [ 293.030390][T11650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2616'. [ 293.050136][T11650] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2616'. [ 293.483998][T11665] device syzkaller0 entered promiscuous mode [ 293.826752][T11671] netlink: 'syz.3.2624': attribute type 1 has an invalid length. [ 293.885793][T11671] 8021q: adding VLAN 0 to HW filter on device bond1 [ 293.907235][T11675] bond1: (slave geneve2): making interface the new active one [ 293.917734][T11675] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 293.930613][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 294.144166][T11680] device syzkaller0 entered promiscuous mode [ 294.213212][T11684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2628'. [ 294.250833][T11684] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2628'. [ 294.343365][T11683] wg1 speed is unknown, defaulting to 1000 [ 294.798270][T11699] device syzkaller0 entered promiscuous mode [ 295.054826][T11703] netlink: 'syz.2.2635': attribute type 39 has an invalid length. [ 295.446421][T11715] device syzkaller0 entered promiscuous mode [ 295.565202][T11718] wg1 speed is unknown, defaulting to 1000 [ 295.709870][T11726] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2644'. [ 296.555745][T11755] wg1 speed is unknown, defaulting to 1000 [ 297.007148][T11765] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2658'. [ 297.173989][T11768] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.220230][T11768] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.296390][T11771] device syz_tun entered promiscuous mode [ 297.323617][T11771] device macvtap3 entered promiscuous mode [ 297.351616][T11771] device syz_tun left promiscuous mode [ 297.450329][T11768] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.547572][T11768] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.688243][T11768] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.723426][T11768] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.776258][T11768] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.844531][T11768] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.072431][T11781] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2664'. [ 298.478029][T11797] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2669'. [ 298.819320][T11804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2672'. [ 298.851623][T11804] device ip6gretap0 entered promiscuous mode [ 298.857757][T11804] device macvtap4 entered promiscuous mode [ 298.889186][T11807] device syzkaller0 entered promiscuous mode [ 298.943525][T11808] device macvtap4 left promiscuous mode [ 299.737975][T11820] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2677'. [ 299.783892][T11822] tipc: Enabled bearer , priority 0 [ 299.799065][T11822] device syzkaller0 entered promiscuous mode [ 299.864374][T11822] tipc: Resetting bearer [ 299.889833][T11821] tipc: Resetting bearer [ 299.964109][T11821] tipc: Disabling bearer [ 300.284640][T11836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2681'. [ 300.421298][T11840] device syzkaller0 entered promiscuous mode [ 300.541864][T11845] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2688'. [ 300.904844][T11853] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2691'. [ 301.726933][T11877] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2700'. [ 301.962225][T11882] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2702'. [ 302.092307][T11884] wg1 speed is unknown, defaulting to 1000 [ 302.378680][T11895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2708'. [ 302.487036][T11898] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2708'. [ 302.610330][T11901] wg1 speed is unknown, defaulting to 1000 [ 302.778876][T11908] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2712'. [ 303.794482][T11944] wg1 speed is unknown, defaulting to 1000 [ 303.900172][T11947] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2724'. [ 304.543735][T11960] device syzkaller0 entered promiscuous mode [ 304.686761][T11964] Bluetooth: MGMT ver 1.22 [ 305.111660][T11981] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2735'. [ 305.245960][T11988] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2737'. [ 306.036236][T12006] device syzkaller0 entered promiscuous mode [ 306.515143][T12012] ipt_CLUSTERIP: Please specify destination IP [ 306.580548][T12020] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2748'. [ 306.829871][T12024] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2750'. [ 307.363773][T12033] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2752'. [ 307.560945][T12037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2754'. [ 307.872818][T12045] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2758'. [ 307.948523][T12047] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2760'. [ 308.141908][T12053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2761'. [ 308.229087][T12057] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2761'. [ 308.372810][T12061] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2763'. [ 308.556135][T12065] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2765'. [ 308.713484][T12067] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2766'. [ 308.764937][T12067] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2766'. [ 308.869615][T12071] tipc: Enabled bearer , priority 0 [ 308.900964][T12071] device syzkaller0 entered promiscuous mode [ 308.974747][T12071] tipc: Resetting bearer [ 309.003906][T12075] netlink: 'syz.0.2769': attribute type 39 has an invalid length. [ 309.086489][T12070] tipc: Resetting bearer [ 309.126731][T12070] tipc: Disabling bearer [ 309.686892][T12094] device syzkaller0 entered promiscuous mode [ 309.738144][T12098] device syzkaller0 entered promiscuous mode [ 309.750697][T12102] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2780'. [ 312.535869][T12108] tipc: Enabling of bearer rejected, failed to enable media [ 312.749123][T12127] IPVS: sh: FWM 3 0x00000003 - no destination available [ 313.140482][T12141] wg1 speed is unknown, defaulting to 1000 [ 313.170299][T12143] __nla_validate_parse: 1 callbacks suppressed [ 313.170314][T12143] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2794'. [ 313.201062][T12146] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2795'. [ 313.224450][T12143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2794'. [ 313.497943][T12154] tipc: Enabled bearer , priority 0 [ 313.506475][T12154] device syzkaller0 entered promiscuous mode [ 313.550040][T12154] tipc: Resetting bearer [ 313.570985][T12153] tipc: Resetting bearer [ 313.655880][T12153] tipc: Disabling bearer [ 314.001276][T12174] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.009349][T12174] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.072598][T12178] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2809'. [ 314.095255][T12178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2809'. [ 314.842184][T12207] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2822'. [ 314.874575][T12207] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2822'. [ 315.240970][T12225] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.313293][T12225] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.393081][T12225] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.485399][T12225] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.543605][T12237] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2835'. [ 315.679197][T12241] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2837'. [ 315.710739][T12225] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.715130][T12241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2837'. [ 315.764594][T12225] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.829995][T12225] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.904936][T12225] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.962956][T12251] wg1 speed is unknown, defaulting to 1000 [ 316.472116][T12272] netlink: 'syz.3.2849': attribute type 12 has an invalid length. [ 316.961947][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.968368][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.188530][T12292] wg1 speed is unknown, defaulting to 1000 [ 317.977948][T12315] device macvtap5 entered promiscuous mode [ 318.193637][T12326] tipc: Enabled bearer , priority 0 [ 318.212229][T12326] device syzkaller0 entered promiscuous mode [ 318.245582][T12327] wg1 speed is unknown, defaulting to 1000 [ 318.285256][T12332] __nla_validate_parse: 8 callbacks suppressed [ 318.285270][T12332] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2873'. [ 318.316658][T12330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2872'. [ 318.346566][T12326] tipc: Resetting bearer [ 318.395480][T12324] tipc: Resetting bearer [ 318.438926][T12336] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2874'. [ 318.495728][T12324] tipc: Disabling bearer [ 318.686500][T12343] device syzkaller0 entered promiscuous mode [ 318.874145][T12354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2882'. [ 318.896671][T12354] device macvtap4 entered promiscuous mode [ 318.907982][T12356] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2883'. [ 319.034108][T12359] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2884'. [ 319.185766][T12370] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2888'. [ 319.325713][T12378] tipc: Enabled bearer , priority 0 [ 319.334779][T12378] device syzkaller0 entered promiscuous mode [ 319.395868][T12378] tipc: Resetting bearer [ 319.416744][T12377] tipc: Resetting bearer [ 319.456148][T12377] tipc: Disabling bearer [ 319.565584][T12388] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2895'. [ 319.590843][T12388] device macvtap6 entered promiscuous mode [ 320.123375][T12401] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2901'. [ 320.449511][ T4270] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 320.459425][ T4270] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 320.467581][ T4270] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 320.476041][ T4270] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 320.485001][ T4270] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 320.492330][ T4270] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 320.502798][T12414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2906'. [ 320.525065][T12414] device macvtap3 entered promiscuous mode [ 320.549172][T12407] wg1 speed is unknown, defaulting to 1000 [ 320.900937][T12407] chnl_net:caif_netlink_parms(): no params data found [ 320.914010][T12433] device syzkaller0 entered promiscuous mode [ 320.981612][T12407] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.994531][T12407] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.004587][T12407] device bridge_slave_0 entered promiscuous mode [ 321.022952][T12407] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.035968][T12407] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.047807][T12407] device bridge_slave_1 entered promiscuous mode [ 321.127879][T12407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.151858][T12407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.317973][T12443] tipc: Cannot configure node identity twice [ 321.347333][T12407] team0: Port device team_slave_0 added [ 321.361977][T12407] team0: Port device team_slave_1 added [ 321.505688][T12448] device macvtap3 entered promiscuous mode [ 321.516825][T12407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.532353][T12407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.566008][T12407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.590569][T12407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.611220][T12407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.707889][T12407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.737539][T12459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.749689][T12459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.760052][T12459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.770949][T12459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.781134][T12459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.792022][T12459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.802273][T12459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.813129][T12459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.823545][T12459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.834446][T12459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.868590][T12458] wg1 speed is unknown, defaulting to 1000 [ 321.941921][T12407] device hsr_slave_0 entered promiscuous mode [ 322.008976][T12407] device hsr_slave_1 entered promiscuous mode [ 322.016461][T12407] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 322.028399][T12407] Cannot create hsr debugfs directory [ 322.383631][T12407] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.563113][ T4270] Bluetooth: hci3: command 0x0409 tx timeout [ 322.623392][T12407] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.738122][T12479] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.826350][T12407] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.909502][T12486] device macvtap7 entered promiscuous mode [ 322.930015][T12479] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.990650][T12407] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.014685][T12490] device syzkaller0 entered promiscuous mode [ 323.026015][T12479] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.134275][T12479] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.252027][T12407] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 323.283704][T12495] tipc: Enabled bearer , priority 0 [ 323.303815][T12479] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.313521][T12407] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 323.324454][T12495] device syzkaller0 entered promiscuous mode [ 323.340814][T12479] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.350815][T12407] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 323.370641][T12497] device syzkaller0 entered promiscuous mode [ 323.384308][T12407] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 323.400308][T12479] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.410966][T12495] tipc: Resetting bearer [ 323.473239][T12479] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.482148][T12494] tipc: Resetting bearer [ 323.505541][T12494] tipc: Disabling bearer [ 323.759417][T12407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.766422][T12512] netlink: 'syz.4.2940': attribute type 39 has an invalid length. [ 323.882887][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 323.891064][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 323.904929][T12407] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.916795][T12514] tipc: Enabled bearer , priority 0 [ 323.929048][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 323.937997][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 323.953819][ T4473] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.961093][ T4473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.975623][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 323.995003][T12514] device syzkaller0 entered promiscuous mode [ 324.027569][T12514] tipc: Resetting bearer [ 324.042831][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 324.052708][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 324.062198][ T4343] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.069350][ T4343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.077726][T12513] tipc: Resetting bearer [ 324.106728][T12513] tipc: Disabling bearer [ 324.131723][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 324.171798][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 324.215192][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 324.255033][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 324.265014][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 324.293137][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 324.304578][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 324.314766][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 324.334142][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 324.343269][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 324.352251][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 324.366211][T12522] device syz_tun entered promiscuous mode [ 324.372999][T12522] device macvtap5 entered promiscuous mode [ 324.382513][T12407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 324.398256][T12525] device syzkaller0 entered promiscuous mode [ 324.485329][T12528] __nla_validate_parse: 3 callbacks suppressed [ 324.485344][T12528] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2947'. [ 324.641754][ T4270] Bluetooth: hci3: command 0x041b tx timeout [ 324.786999][T12537] device syzkaller0 entered promiscuous mode [ 324.818205][T12539] tipc: Enabled bearer , priority 0 [ 324.847592][T12539] device syzkaller0 entered promiscuous mode [ 324.867878][T12539] tipc: Resetting bearer [ 324.874949][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 324.886115][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 324.902292][T12407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.913194][T12538] tipc: Resetting bearer [ 324.946327][T12538] tipc: Disabling bearer [ 324.966936][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 324.975987][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 324.997997][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 325.009855][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 325.020665][T12407] device veth0_vlan entered promiscuous mode [ 325.029878][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 325.040875][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 325.060275][T12407] device veth1_vlan entered promiscuous mode [ 325.088075][T12407] device veth0_macvtap entered promiscuous mode [ 325.101147][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 325.112590][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 325.124252][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 325.136812][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 325.152503][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 325.173741][T12407] device veth1_macvtap entered promiscuous mode [ 325.202843][T12407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.214568][T12407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.231797][T12407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.246348][T12407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.262499][T12407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.273221][T12407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.283796][T12407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.294670][T12407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.304955][T12407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.315749][T12407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.327278][T12407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.337551][T12407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.348092][T12407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.360315][T12407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.372135][T12407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.382228][T12407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.393040][T12407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.414660][T12407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.428869][T12407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.439250][T12407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.449949][T12407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.461985][T12407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.472918][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 325.481350][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 325.490606][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 325.503081][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 325.512515][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 325.538565][T12407] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.547706][T12407] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.558569][T12407] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.578898][T12407] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.707499][T12558] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2957'. [ 325.734532][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.752256][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.791522][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 325.844924][ T4482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.866153][ T4482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.896021][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 325.923391][T12562] device syzkaller0 entered promiscuous mode [ 326.143643][T12567] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2898'. [ 326.178588][T12569] device syzkaller0 entered promiscuous mode [ 326.285794][T12569] tipc: Enabled bearer , priority 0 [ 326.296177][T12571] tipc: Enabled bearer , priority 0 [ 326.305574][T12571] device syzkaller0 entered promiscuous mode [ 326.315504][T12568] tipc: Resetting bearer [ 326.364004][T12568] tipc: Disabling bearer [ 326.394319][T12571] tipc: Resetting bearer [ 326.432488][T12570] tipc: Resetting bearer [ 326.485755][T12570] tipc: Disabling bearer [ 326.724215][ T4270] Bluetooth: hci3: command 0x040f tx timeout [ 326.828256][T12582] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2967'. [ 326.954698][T12584] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 326.996571][ T4281] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 327.006548][ T4281] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 327.016904][ T4281] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 327.039661][ T4281] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 327.050486][ T4281] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 327.058860][ T4281] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 327.110639][T12585] wg1 speed is unknown, defaulting to 1000 [ 327.186793][T12590] wg1 speed is unknown, defaulting to 1000 [ 327.226627][T12593] netlink: 192 bytes leftover after parsing attributes in process `syz.0.2970'. [ 327.242855][T12592] device syzkaller0 entered promiscuous mode [ 327.497814][T12585] chnl_net:caif_netlink_parms(): no params data found [ 327.567616][T12599] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2973'. [ 327.667782][T12585] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.707691][T12585] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.759267][T12585] device bridge_slave_0 entered promiscuous mode [ 327.783016][T12585] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.805452][T12585] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.815503][T12585] device bridge_slave_1 entered promiscuous mode [ 327.871706][T12585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.883830][T12585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.965341][T12585] team0: Port device team_slave_0 added [ 327.982173][T12585] team0: Port device team_slave_1 added [ 328.039596][T12585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.046748][T12585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.073627][T12585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.089601][T12585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.096716][T12585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.159389][T12585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.265374][T12585] device hsr_slave_0 entered promiscuous mode [ 328.272493][T12585] device hsr_slave_1 entered promiscuous mode [ 328.279370][T12585] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 328.288022][T12585] Cannot create hsr debugfs directory [ 328.468004][T12585] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.555989][T12585] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.633107][T12585] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.693937][T12585] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.799095][ T4270] Bluetooth: hci3: command 0x0419 tx timeout [ 328.855703][T12585] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 328.872840][T12585] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 328.893025][T12585] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 328.908154][T12585] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 329.003521][T12585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.023495][T12585] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.031793][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 329.040299][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 329.079233][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 329.089211][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 329.097802][ T4343] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.104982][ T4343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.125268][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 329.128793][ T4270] Bluetooth: hci4: command 0x0409 tx timeout [ 329.134500][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 329.225675][ T4343] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.233766][ T4343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.359437][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 329.371433][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 329.419528][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 329.444743][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 329.465464][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 329.510387][T12637] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2984'. [ 329.529447][T12640] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2986'. [ 329.539195][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 329.558850][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 329.569271][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 329.600546][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 329.620452][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 329.653264][T12585] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 329.703125][T12585] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 329.729979][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 329.754435][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 329.891113][T12652] wg1 speed is unknown, defaulting to 1000 [ 330.112324][T12662] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2992'. [ 330.478793][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 330.486327][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 330.526824][T12585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.568960][T12673] device syzkaller0 entered promiscuous mode [ 330.616348][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 330.626571][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 330.780659][T12585] device veth0_vlan entered promiscuous mode [ 330.797076][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 330.815462][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 330.860403][T12680] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2998'. [ 330.886417][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 330.919379][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 330.937788][T12585] device veth1_vlan entered promiscuous mode [ 330.999456][T12684] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3000'. [ 331.032213][T12585] device veth0_macvtap entered promiscuous mode [ 331.058587][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 331.089575][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 331.118180][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 331.136265][T12585] device veth1_macvtap entered promiscuous mode [ 331.184050][T12689] wg1 speed is unknown, defaulting to 1000 [ 331.190068][T12585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.190130][T12585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.190141][T12585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.190153][T12585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.190162][T12585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.190172][T12585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.190181][T12585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.218546][ T4281] Bluetooth: hci4: command 0x041b tx timeout [ 331.225230][T12585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.314435][T12695] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3003'. [ 331.331335][T12585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.344238][T12585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.368587][T12585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.379689][T12585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.392579][T12585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.414940][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 331.424250][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 331.446203][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 331.476121][T12585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.497327][T12585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.534750][T12585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.558397][T12585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.568250][T12585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.609458][T12585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.629022][T12585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.658693][T12585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.672820][T12585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.694482][T12585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.714876][T12585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.739128][T12585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.766024][T12585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.791900][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 331.803772][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 331.843937][T12585] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.868856][T12585] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.890787][T12585] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.908418][T12585] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.006350][T12712] device syzkaller0 entered promiscuous mode [ 332.077860][T12715] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3011'. [ 332.125475][ T4343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.136498][ T4343] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.145651][ T4474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.163934][ T4474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.182314][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 332.209486][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 332.258533][T12721] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3013'. [ 332.582024][T12729] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3015'. [ 332.754836][T12732] wg1 speed is unknown, defaulting to 1000 [ 333.237769][ T4270] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 333.248222][ T4270] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 333.258035][ T4270] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 333.278937][ T4270] Bluetooth: hci4: command 0x040f tx timeout [ 333.285248][ T4270] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 333.296320][ T4270] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 333.308147][ T4270] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 333.357198][T12750] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3023'. [ 333.379996][T12752] tipc: Enabled bearer , priority 0 [ 333.449570][T12754] device syzkaller0 entered promiscuous mode [ 333.469204][T12754] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 333.503341][T12747] wg1 speed is unknown, defaulting to 1000 [ 333.503707][T12751] device syzkaller0 entered promiscuous mode [ 333.535358][T12743] tipc: Resetting bearer [ 333.579874][T12743] tipc: Disabling bearer [ 333.627854][T12762] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 333.635277][T12762] IPv6: NLM_F_CREATE should be set when creating new route [ 333.671859][T12760] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 333.679157][T12760] IPv6: NLM_F_CREATE should be set when creating new route [ 333.705121][T12763] wg1 speed is unknown, defaulting to 1000 [ 333.905736][T12772] netlink: 'syz.1.3028': attribute type 12 has an invalid length. [ 334.026419][T12747] chnl_net:caif_netlink_parms(): no params data found [ 334.184217][T12747] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.194250][T12747] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.204831][T12747] device bridge_slave_0 entered promiscuous mode [ 334.223564][T12747] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.236878][T12747] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.255235][T12747] device bridge_slave_1 entered promiscuous mode [ 334.273788][T12778] ipt_CLUSTERIP: Please specify destination IP [ 334.342938][T12747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.377012][T12747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.441932][T12747] team0: Port device team_slave_0 added [ 334.459897][T12782] netlink: 'syz.2.3030': attribute type 39 has an invalid length. [ 334.477847][T12747] team0: Port device team_slave_1 added [ 334.526939][T12747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.548416][T12747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.584386][T12747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.620185][T12747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.627176][T12747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.691729][T12747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.711173][T12784] wg1 speed is unknown, defaulting to 1000 [ 334.781614][T12747] device hsr_slave_0 entered promiscuous mode [ 334.796820][T12747] device hsr_slave_1 entered promiscuous mode [ 334.811719][T12747] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 334.828433][T12747] Cannot create hsr debugfs directory [ 335.105230][T12793] __nla_validate_parse: 1 callbacks suppressed [ 335.105245][T12793] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3034'. [ 335.319847][T12747] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.358650][ T4280] Bluetooth: hci4: command 0x0419 tx timeout [ 335.364775][ T4280] Bluetooth: hci1: command 0x0409 tx timeout [ 335.411005][T12798] device syzkaller0 entered promiscuous mode [ 337.450691][ T4280] Bluetooth: hci1: command 0x041b tx timeout [ 337.993495][T12747] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.021049][T12802] wg1 speed is unknown, defaulting to 1000 [ 338.027048][T12809] netlink: 'syz.1.3040': attribute type 39 has an invalid length. [ 338.106598][T12816] tipc: Enabled bearer , priority 0 [ 338.113603][T12817] device syzkaller0 entered promiscuous mode [ 338.157621][T12823] tipc: Resetting bearer [ 338.170251][T12747] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.184060][T12830] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3044'. [ 338.198857][T12813] tipc: Resetting bearer [ 338.259387][T12813] tipc: Disabling bearer [ 338.285926][T12747] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.537191][T12747] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 338.558007][T12747] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 338.604234][T12747] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 338.669457][T12747] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 338.768772][T12850] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3050'. [ 338.801580][T12853] tipc: Enabling of bearer rejected, failed to enable media [ 338.838857][T12853] device syzkaller0 entered promiscuous mode [ 338.886001][T12747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.922907][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 338.939505][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 338.965576][T12747] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.048672][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 339.057600][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 339.077566][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.084740][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.095837][T12860] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3053'. [ 339.113108][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 339.136283][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 339.169388][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.176554][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.210502][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 339.292853][T12858] device syzkaller0 entered promiscuous mode [ 339.301880][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 339.316484][T12863] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3054'. [ 339.325838][T12866] netlink: 'syz.2.3055': attribute type 39 has an invalid length. [ 339.524182][ T4280] Bluetooth: hci1: command 0x040f tx timeout [ 341.572660][T12879] tipc: Enabling of bearer rejected, failed to enable media [ 341.582877][T12887] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3061'. [ 341.595085][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 341.598761][ T4280] Bluetooth: hci1: command 0x0419 tx timeout [ 341.615136][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 341.624350][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 341.633233][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 341.642853][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 341.651975][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 341.661574][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 341.671013][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 341.753511][T12747] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 341.788971][T12747] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 341.821430][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 341.847097][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 341.921769][T12904] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3065'. [ 341.944083][T12900] wg1 speed is unknown, defaulting to 1000 [ 342.021030][T12907] tipc: Started in network mode [ 342.025949][T12907] tipc: Node identity 32445d0f19d8, cluster identity 4711 [ 342.048195][T12907] tipc: Enabled bearer , priority 0 [ 342.081272][T12910] device syzkaller0 entered promiscuous mode [ 342.167125][T12906] tipc: Resetting bearer [ 342.216388][T12906] tipc: Disabling bearer [ 342.620257][T12929] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3071'. [ 342.716136][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 342.729338][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 342.786202][T12747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.883057][T12931] device syzkaller0 entered promiscuous mode [ 345.310795][T12951] wg1 speed is unknown, defaulting to 1000 [ 345.316864][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 345.333925][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 345.345763][T12955] tipc: Enabled bearer , priority 0 [ 345.353263][T12957] device syzkaller0 entered promiscuous mode [ 345.418762][T12949] tipc: Resetting bearer [ 345.482478][T12949] tipc: Disabling bearer [ 345.522680][T12747] device veth0_vlan entered promiscuous mode [ 345.553389][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 345.566132][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 345.610504][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 345.639127][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 345.702661][T12747] device veth1_vlan entered promiscuous mode [ 345.765461][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 345.781105][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 345.790026][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 345.803530][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 345.841910][T12747] device veth0_macvtap entered promiscuous mode [ 345.864100][T12747] device veth1_macvtap entered promiscuous mode [ 345.924707][T12747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.937033][T12747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.947926][T12747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.961916][T12747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.990124][T12747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.001623][T12747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.012013][T12747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.024807][T12747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.035157][T12747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.048234][T12747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.058833][T12747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.071016][T12747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.091158][T12747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.107345][T12747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.132727][T12747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.167909][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 346.177096][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 346.196772][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 346.209053][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 346.220616][T12747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.231902][T12747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.244242][T12747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.264723][T12747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.277187][T12747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.297207][T12747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.307554][T12747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.318990][T12747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.329528][T12747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.340641][T12747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.350992][T12747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.366017][T12747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.376671][T12747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.387390][T12747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.399907][T12747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.411220][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 346.420839][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 346.434847][T12747] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.444796][T12747] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.454633][T12747] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.463767][T12747] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.548454][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.561737][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.597513][ T4482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.598694][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 346.623747][ T4482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.636642][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 346.797460][T12997] netlink: 296 bytes leftover after parsing attributes in process `syz.0.3014'. [ 347.062835][T13002] device syzkaller0 entered promiscuous mode [ 347.613008][ T4281] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 347.631127][ T4281] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 347.648059][ T4281] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 347.663683][ T4281] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 347.671439][ T4281] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 347.688140][ T4270] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 349.386045][T13014] tipc: Enabling of bearer rejected, failed to enable media [ 349.461079][T13026] device syz_tun entered promiscuous mode [ 349.500868][T13026] device macvtap1 entered promiscuous mode [ 349.515221][T13026] device syz_tun left promiscuous mode [ 349.601972][T13024] wg1 speed is unknown, defaulting to 1000 [ 349.758569][ T4270] Bluetooth: hci2: command 0x0409 tx timeout [ 349.941763][T13024] chnl_net:caif_netlink_parms(): no params data found [ 350.063230][T13024] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.075211][T13024] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.086269][T13024] device bridge_slave_0 entered promiscuous mode [ 350.096214][T13024] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.107797][T13024] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.116116][T13024] device bridge_slave_1 entered promiscuous mode [ 350.158064][T13024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.181567][T13024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.292583][T13024] team0: Port device team_slave_0 added [ 350.349200][T13024] team0: Port device team_slave_1 added [ 350.459078][T13024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.466080][T13024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.537104][T13024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.551896][T13024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.568873][T13024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.637167][T13024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.756108][T13024] device hsr_slave_0 entered promiscuous mode [ 350.774239][T13024] device hsr_slave_1 entered promiscuous mode [ 350.787966][T13024] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 350.808569][T13024] Cannot create hsr debugfs directory [ 351.848523][ T4270] Bluetooth: hci2: command 0x041b tx timeout [ 352.756180][T13039] Set syz1 is full, maxelem 65536 reached [ 353.928427][ T4270] Bluetooth: hci2: command 0x040f tx timeout [ 354.390078][T13075] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 354.400526][T13075] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 354.410680][T13075] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 354.456049][T13076] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.506045][T13077] device syz_tun entered promiscuous mode [ 354.513212][T13077] device macvtap1 entered promiscuous mode [ 354.526388][T13077] device syz_tun left promiscuous mode [ 354.614767][T13094] tipc: Enabling of bearer rejected, failed to enable media [ 354.670558][T13076] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.864397][T13076] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.884396][T13024] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.916227][T13114] device syzkaller0 entered promiscuous mode [ 354.954031][T13076] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.992218][T13024] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.090653][T13024] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.163439][T13118] ipt_CLUSTERIP: Please specify destination IP [ 355.164150][T13076] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.229093][T13024] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.268583][T13076] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.301964][T13076] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.354426][T13076] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.533930][T13024] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 355.564669][T13024] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 355.609668][T13024] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 355.636522][T13024] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 355.732703][T13137] tipc: Enabled bearer , priority 0 [ 355.778041][T13137] tipc: Resetting bearer [ 355.825075][T13136] tipc: Disabling bearer [ 355.878024][T13145] device syzkaller0 entered promiscuous mode [ 356.018361][ T4270] Bluetooth: hci2: command 0x0419 tx timeout [ 356.075915][T13146] tipc: Started in network mode [ 356.093784][T13146] tipc: Node identity 822060173964, cluster identity 4711 [ 356.119235][T13146] tipc: Enabled bearer , priority 0 [ 356.172481][T13144] tipc: Resetting bearer [ 356.257687][T13144] tipc: Disabling bearer [ 356.308811][T13024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.352004][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 356.377114][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 356.410138][T13024] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.437876][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 356.461027][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 356.489377][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.496539][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.522084][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 356.551720][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 356.571357][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.578586][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.624268][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 356.644201][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 356.665745][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 356.710504][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 356.733928][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 356.754058][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 356.774270][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 356.801523][T13024] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 356.824779][T13024] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 356.850459][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 356.861576][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 356.887377][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 356.906587][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 356.925269][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 356.954458][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 357.272399][T13167] device syzkaller0 entered promiscuous mode [ 357.571575][T13172] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.615651][T13173] device syz_tun entered promiscuous mode [ 357.639904][T13173] device macvtap1 entered promiscuous mode [ 357.652647][T13173] device syz_tun left promiscuous mode [ 357.734322][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 357.742540][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 357.797293][T13172] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.826814][T13024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.853847][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 357.868220][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 357.941474][T13172] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.970745][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 357.980022][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 357.990574][T13024] device veth0_vlan entered promiscuous mode [ 357.997299][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 358.008077][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 358.016842][T13183] tipc: Enabled bearer , priority 0 [ 358.060271][T13172] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.078040][T13183] tipc: Resetting bearer [ 358.088024][T13024] device veth1_vlan entered promiscuous mode [ 358.106835][T13182] tipc: Disabling bearer [ 358.139295][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 358.147532][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 358.156902][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 358.166494][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 358.181819][T13024] device veth0_macvtap entered promiscuous mode [ 358.217587][T13172] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.240672][T13024] device veth1_macvtap entered promiscuous mode [ 358.279638][T13172] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.289245][T13024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.300203][T13024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.310473][T13024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.321220][T13024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.331507][T13024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.342193][T13024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.352504][T13024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.363457][T13024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.373782][T13024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.384717][T13024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.395079][T13024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.405939][T13024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.416096][T13024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.433786][T13024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.443909][T13024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.454557][T13024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.466394][T13024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.481758][T13172] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.496125][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 358.519469][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 358.534994][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 358.571425][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 358.585967][T13024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.600511][T13024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.622684][T13024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.643476][T13024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.656729][T13024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.667559][T13024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.677660][T13024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.696077][T13024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.716509][T13024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.730086][T13024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.748419][T13024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.766924][T13024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.777067][T13024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.797847][T13024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.817684][T13024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.828605][T13024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.850159][T13024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.863285][T13172] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.900853][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 358.918013][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 358.940890][T13024] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.957977][T13024] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.981300][T13024] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.004339][T13024] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.023813][T13200] netlink: 'syz.0.3143': attribute type 39 has an invalid length. [ 359.180988][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.193509][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.226818][T13202] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3144'. [ 359.237096][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 359.274861][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.301114][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.325840][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 359.635401][T13213] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3148'. [ 359.896960][T13217] tipc: Started in network mode [ 359.897425][ T4280] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 359.907776][T13217] tipc: Node identity 8e572389f912, cluster identity 4711 [ 359.917615][ T4280] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 359.918572][T13217] tipc: Enabled bearer , priority 0 [ 359.928910][ T4280] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 359.943272][ T4280] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 359.951140][ T4280] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 359.959936][ T4280] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 359.962192][T13217] tipc: Resetting bearer [ 359.995250][T13216] tipc: Disabling bearer [ 360.025054][T13218] wg1 speed is unknown, defaulting to 1000 [ 360.164398][T13218] chnl_net:caif_netlink_parms(): no params data found [ 360.221828][T13218] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.229096][T13218] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.237766][T13218] device bridge_slave_0 entered promiscuous mode [ 360.258046][T13218] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.267274][T13218] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.275770][T13218] device bridge_slave_1 entered promiscuous mode [ 360.307364][T13218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.337523][T13218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.434404][T13228] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.464603][T13232] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3153'. [ 360.474145][T13229] device syz_tun entered promiscuous mode [ 360.481929][T13229] device macvtap1 entered promiscuous mode [ 360.490590][T13229] device syz_tun left promiscuous mode [ 360.554526][T13218] team0: Port device team_slave_0 added [ 360.563936][T13218] team0: Port device team_slave_1 added [ 360.604369][T13218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.619733][T13218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.658843][T13218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.673785][T13218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.681366][T13218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.707907][T13218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.772614][T13218] device hsr_slave_0 entered promiscuous mode [ 360.787351][T13218] device hsr_slave_1 entered promiscuous mode [ 360.796597][T13218] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 360.811794][T13218] Cannot create hsr debugfs directory [ 360.884478][T13234] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3154'. [ 360.969172][T13218] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.055530][T13218] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.133039][T13218] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.152574][T13241] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3157'. [ 361.275594][T13241] device hsr_slave_1 left promiscuous mode [ 361.286633][T13218] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.432458][T13228] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.610309][T13255] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3160'. [ 361.658053][T13253] device syzkaller0 entered promiscuous mode [ 361.664625][T13255] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3160'. [ 361.667789][T13218] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 361.711787][T13228] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.743559][T13218] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 361.999785][ T4280] Bluetooth: hci0: command 0x0409 tx timeout [ 363.902684][T13218] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 363.937314][T13228] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.965841][T13218] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 364.000454][T13272] device syzkaller0 entered promiscuous mode [ 364.057383][T13272] tipc: Enabled bearer , priority 0 [ 364.076754][T13271] tipc: Resetting bearer [ 364.078745][ T4280] Bluetooth: hci0: command 0x041b tx timeout [ 364.094457][T13275] ipt_CLUSTERIP: Please specify destination IP [ 364.140038][T13271] tipc: Disabling bearer [ 364.174675][T13228] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.191288][T13228] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.206566][T13228] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.256463][T13228] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.368946][T13218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.411981][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 364.435968][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 364.476819][T13218] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.503847][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 364.525640][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 364.539793][ T4474] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.546943][ T4474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.569115][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 364.578068][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 364.587261][ T4474] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.594412][ T4474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.625878][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 364.634849][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 364.644040][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 364.655091][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 364.680742][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 364.741700][T13293] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3172'. [ 364.752059][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 364.760475][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 364.790189][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 364.809922][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 364.830854][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 364.856961][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 364.889896][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 364.901507][T13218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 365.141499][T13308] Bluetooth: MGMT ver 1.22 [ 365.198081][T13302] device syzkaller0 entered promiscuous mode [ 365.228809][T13302] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 365.495248][T13320] device syzkaller0 entered promiscuous mode [ 365.655325][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 365.664274][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 365.684372][T13326] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3184'. [ 365.729304][T13218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.158739][ T4280] Bluetooth: hci0: command 0x040f tx timeout [ 366.667947][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 366.687624][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 366.747208][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 366.760003][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 366.801543][T13218] device veth0_vlan entered promiscuous mode [ 366.809580][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 366.819259][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 366.851244][T13358] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3195'. [ 366.892658][T13218] device veth1_vlan entered promiscuous mode [ 366.963803][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 366.989514][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 367.018166][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 367.033522][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 367.065572][T13218] device veth0_macvtap entered promiscuous mode [ 367.087775][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 367.105899][T13218] device veth1_macvtap entered promiscuous mode [ 367.179996][T13218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.211769][T13218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.258160][T13218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.285638][T13218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.318446][T13218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.340565][T13218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.357826][T13218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.378665][T13218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.404629][T13218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.419364][T13218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.438216][T13218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.462399][T13218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.492526][T13218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.510579][T13218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.522361][T13218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.535425][T13218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.546114][T13218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.557072][T13218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.569709][T13218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.611476][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 367.644419][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 367.669695][T13218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.730376][T13218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.740538][T13218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.751284][T13218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.762736][T13218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.781885][T13218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.789726][T13377] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3202'. [ 367.792106][T13218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.812527][T13218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.822762][T13218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.834106][T13218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.845310][T13218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.856086][T13218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.866128][T13218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.876787][T13218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.887071][T13218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.897672][T13218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.908084][T13218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.918818][T13218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.931371][T13218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.944896][T13218] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.953855][T13218] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.963459][T13218] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.974317][T13218] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.057187][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 368.070639][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 368.208666][T13388] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3206'. [ 368.238472][ T4280] Bluetooth: hci0: command 0x0419 tx timeout [ 368.368948][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.377182][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.400288][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 368.465316][ T4474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.475921][ T4474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.539667][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 368.696907][T13401] ipt_CLUSTERIP: Please specify destination IP [ 368.856393][T13418] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3218'. [ 369.126733][T13430] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3220'. [ 369.867591][T13458] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 369.898855][T13458] tipc: Cannot configure node identity twice [ 370.101996][T13464] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3234'. [ 370.565470][T13478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.694045][T13478] bond0: (slave rose0): Enslaving as an active interface with an up link [ 370.835814][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 372.063809][T13545] wg1 speed is unknown, defaulting to 1000 [ 372.498699][T13567] netlink: 'syz.4.3267': attribute type 10 has an invalid length. [ 372.565339][T13567] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3267'. [ 372.651308][T13567] device bond0 entered promiscuous mode [ 372.681008][T13567] device bond_slave_0 entered promiscuous mode [ 372.687346][T13567] device bond_slave_1 entered promiscuous mode [ 372.759236][T13567] bridge0: port 3(bond0) entered blocking state [ 372.765677][T13567] bridge0: port 3(bond0) entered disabled state [ 372.780432][T13567] bridge0: port 3(bond0) entered blocking state [ 372.786782][T13567] bridge0: port 3(bond0) entered forwarding state [ 372.922663][T13581] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.058604][T13581] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.134544][T13581] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.180408][T13587] tipc: Started in network mode [ 373.185317][T13587] tipc: Node identity 5a1fe4d9360f, cluster identity 4711 [ 373.212384][T13587] tipc: Enabled bearer , priority 0 [ 373.260665][T13592] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3276'. [ 373.287651][T13592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.310150][T13592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.333873][T13592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.354920][T13592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.378606][T13592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.399091][T13592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.418592][T13592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.441992][T13592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.458022][T13592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.486547][T13592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.496884][T13592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.509595][T13592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.529816][T13592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.551005][T13592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.568125][T13592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.579241][T13592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.589413][T13592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.600384][T13592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.612586][T13592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.623394][T13592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.650309][T13581] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.671719][T13605] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.707177][T13606] tipc: Resetting bearer [ 373.724383][T13610] device syz_tun entered promiscuous mode [ 373.750924][T13610] device macvtap1 entered promiscuous mode [ 373.779373][T13610] device syz_tun left promiscuous mode [ 373.859751][T13585] tipc: Disabling bearer [ 373.900139][T13605] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.033151][T13581] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.071930][T13605] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.131738][T13581] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.194505][T13605] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.237079][T13581] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.320000][T13581] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.371725][T13634] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3282'. [ 374.430142][T13634] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 374.437383][T13634] IPv6: NLM_F_CREATE should be set when creating new route [ 374.538127][T13605] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.622396][T13605] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.715933][T13605] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.761994][T13605] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.037026][T13659] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 375.094056][T13659] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 375.150080][T13659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3288'. [ 375.158952][T13664] device syzkaller0 entered promiscuous mode [ 375.409235][T13678] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3293'. [ 375.557403][T13678] device hsr_slave_1 left promiscuous mode [ 375.566121][T13677] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3296'. [ 375.825129][T13687] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.932913][T13689] device syz_tun entered promiscuous mode [ 375.950060][T13689] device macvtap1 entered promiscuous mode [ 375.970087][T13689] device syz_tun left promiscuous mode [ 376.055040][T13706] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3303'. [ 376.082764][T13706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.113829][T13706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.144001][T13706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.168272][T13706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.195636][T13706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.215397][T13706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.231089][T13706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.252158][T13706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.270225][T13706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.294187][T13706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.319315][T13706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.342467][T13706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.373106][T13706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.395220][T13706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.418554][T13706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.441585][T13706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.469933][T13706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.493024][T13706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.504766][T13706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.515735][T13706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.592990][T13687] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.768838][T13687] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.851733][T13736] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3310'. [ 376.982339][T13687] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.201251][T13687] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.225126][T13750] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3317'. [ 377.236974][T13687] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.253692][T13748] wg1 speed is unknown, defaulting to 1000 [ 377.267767][T13687] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.327187][T13687] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.613684][T13770] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3322'. [ 377.884395][T13778] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3324'. [ 378.400485][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.406847][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.471792][T13793] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3330'. [ 378.756982][T13804] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3335'. [ 379.008002][T13813] device syzkaller0 entered promiscuous mode [ 379.107152][T13813] tipc: Enabled bearer , priority 0 [ 379.124694][T13811] tipc: Resetting bearer [ 379.156895][T13811] tipc: Disabling bearer [ 382.534252][T13829] netlink: 'syz.0.3345': attribute type 39 has an invalid length. [ 382.771962][T13841] device syzkaller1 entered promiscuous mode [ 382.789599][T13838] __nla_validate_parse: 1 callbacks suppressed [ 382.789614][T13838] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3346'. [ 383.011239][T13838] device hsr_slave_1 left promiscuous mode [ 383.059775][T13843] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3349'. [ 383.215269][T13846] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3350'. [ 383.398568][T13852] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.451776][T13855] device syz_tun entered promiscuous mode [ 383.462815][T13855] device macvtap1 entered promiscuous mode [ 383.500041][T13855] device syz_tun left promiscuous mode [ 383.694725][T13852] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.840100][T13852] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.990335][T13865] netlink: 'syz.4.3356': attribute type 39 has an invalid length. [ 384.090717][T13852] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.288917][T13852] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.309173][T13852] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.355334][T13852] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.406792][T13852] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.484735][T13875] device syzkaller1 entered promiscuous mode [ 384.555411][T13880] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3363'. [ 384.564910][T13877] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3360'. [ 384.588673][T13882] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3362'. [ 384.643982][T13883] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3364'. [ 384.919194][T13899] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3371'. [ 385.387679][T13922] device syzkaller1 entered promiscuous mode [ 386.183490][T13959] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 386.461872][T13977] device syzkaller1 entered promiscuous mode [ 386.682527][T13984] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3393'. [ 386.808216][T13989] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3395'. [ 387.450497][T14019] device syzkaller1 entered promiscuous mode [ 387.875086][T14038] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3408'. [ 387.890486][T14036] tipc: Cannot configure node identity twice [ 387.927305][T14040] netlink: 'syz.1.3410': attribute type 39 has an invalid length. [ 388.128166][T14046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3414'. [ 388.204230][T14052] tipc: Enabled bearer , priority 0 [ 388.273643][T14050] tipc: Disabling bearer [ 388.687414][T14073] tipc: Started in network mode [ 388.708509][T14073] tipc: Node identity 4, cluster identity 4711 [ 388.714727][T14073] tipc: Node number set to 4 [ 388.750399][T14075] netlink: 'syz.3.3424': attribute type 39 has an invalid length. [ 388.938528][T14086] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3428'. [ 389.096553][T14091] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3431'. [ 389.258238][T14102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3433'. [ 389.568844][T14115] device veth0 entered promiscuous mode [ 389.585360][T14115] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3437'. [ 389.901585][T14126] tipc: Cannot configure node identity twice [ 390.139310][T14133] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3442'. [ 390.196347][T14137] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3445'. [ 390.329518][T14140] device syzkaller0 entered promiscuous mode [ 390.375391][T14143] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 394.992974][T14182] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3459'. [ 395.294189][T14190] device syzkaller0 entered promiscuous mode [ 397.753779][T14223] netlink: 'syz.4.3469': attribute type 39 has an invalid length. [ 397.793235][T14221] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 398.218604][T14244] tipc: Cannot configure node identity twice [ 399.167086][T14279] tipc: Cannot configure node identity twice [ 399.262444][T14286] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 400.126805][T14323] tipc: Cannot configure node identity twice [ 400.210136][T14329] device syzkaller1 entered promiscuous mode [ 400.365622][T14332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 400.415104][T14332] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 400.422152][T14339] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3513'. [ 400.536549][T14346] device pim6reg1 entered promiscuous mode [ 400.775101][T14353] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3518'. [ 401.112133][T14369] wg1 speed is unknown, defaulting to 1000 [ 401.405668][T14379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 401.426516][T14379] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 401.444167][T14381] ipt_CLUSTERIP: Please specify destination IP [ 401.464438][T14378] tipc: Enabled bearer , priority 0 [ 401.484278][T14379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3529'. [ 401.526828][T14376] tipc: Disabling bearer [ 401.720413][ T16] [ 401.722793][ T16] ====================================================== [ 401.729826][ T16] WARNING: possible circular locking dependency detected [ 401.736861][ T16] syzkaller #0 Not tainted [ 401.741277][ T16] ------------------------------------------------------ [ 401.748346][ T16] rcu_preempt/16 is trying to acquire lock: [ 401.754253][ T16] ffff8880b8f281d8 (krc.lock){..-.}-{2:2}, at: kvfree_call_rcu+0x184/0x870 [ 401.762906][ T16] [ 401.762906][ T16] but task is already holding lock: [ 401.770281][ T16] ffff8880b8f28418 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 401.779196][ T16] [ 401.779196][ T16] which lock already depends on the new lock. [ 401.779196][ T16] [ 401.789596][ T16] [ 401.789596][ T16] the existing dependency chain (in reverse order) is: [ 401.798594][ T16] [ 401.798594][ T16] -> #1 (&base->lock){-.-.}-{2:2}: [ 401.805872][ T16] _raw_spin_lock_irqsave+0xa4/0xf0 [ 401.811585][ T16] lock_timer_base+0x123/0x270 [ 401.816862][ T16] __mod_timer+0xfe/0xd00 [ 401.821702][ T16] queue_delayed_work_on+0x126/0x1e0 [ 401.827505][ T16] kvfree_call_rcu+0x4cb/0x870 [ 401.832774][ T16] rtnl_register_internal+0x489/0x590 [ 401.838652][ T16] rtnl_register+0x2e/0x70 [ 401.843589][ T16] ip_rt_init+0x323/0x3b5 [ 401.848438][ T16] ip_init+0xa/0x14 [ 401.852757][ T16] inet_init+0x2bd/0x3cf [ 401.857512][ T16] do_one_initcall+0x214/0x7a0 [ 401.862803][ T16] do_initcall_level+0x137/0x1e4 [ 401.868254][ T16] do_initcalls+0x4b/0x8a [ 401.873091][ T16] kernel_init_freeable+0x3fa/0x5ac [ 401.878799][ T16] kernel_init+0x19/0x1b0 [ 401.883639][ T16] ret_from_fork+0x1f/0x30 [ 401.888561][ T16] [ 401.888561][ T16] -> #0 (krc.lock){..-.}-{2:2}: [ 401.895577][ T16] __lock_acquire+0x2cf8/0x7c50 [ 401.900940][ T16] lock_acquire+0x1b4/0x490 [ 401.905948][ T16] _raw_spin_lock+0x2a/0x40 [ 401.910959][ T16] kvfree_call_rcu+0x184/0x870 [ 401.916228][ T16] trie_delete_elem+0x52d/0x690 [ 401.921581][ T16] bpf_prog_1db1603a7cfa36fb+0x3d/0x41 [ 401.927557][ T16] bpf_trace_run3+0x1e3/0x400 [ 401.932739][ T16] enqueue_timer+0x411/0x5c0 [ 401.937831][ T16] __mod_timer+0x911/0xd00 [ 401.942754][ T16] schedule_timeout+0x157/0x280 [ 401.948112][ T16] rcu_gp_fqs_loop+0x2f2/0x1310 [ 401.953473][ T16] rcu_gp_kthread+0x95/0x380 [ 401.958570][ T16] kthread+0x29d/0x330 [ 401.963231][ T16] ret_from_fork+0x1f/0x30 [ 401.968156][ T16] [ 401.968156][ T16] other info that might help us debug this: [ 401.968156][ T16] [ 401.978364][ T16] Possible unsafe locking scenario: [ 401.978364][ T16] [ 401.985795][ T16] CPU0 CPU1 [ 401.991140][ T16] ---- ---- [ 401.996487][ T16] lock(&base->lock); [ 402.000543][ T16] lock(krc.lock); [ 402.006850][ T16] lock(&base->lock); [ 402.013418][ T16] lock(krc.lock); [ 402.017209][ T16] [ 402.017209][ T16] *** DEADLOCK *** [ 402.017209][ T16] [ 402.025330][ T16] 2 locks held by rcu_preempt/16: [ 402.030366][ T16] #0: ffff8880b8f28418 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 402.039662][ T16] #1: ffffffff8cb2aca0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run3+0xf0/0x400 [ 402.048955][ T16] [ 402.048955][ T16] stack backtrace: [ 402.054838][ T16] CPU: 1 PID: 16 Comm: rcu_preempt Not tainted syzkaller #0 [ 402.062104][ T16] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 402.072158][ T16] Call Trace: [ 402.075425][ T16] [ 402.078339][ T16] dump_stack_lvl+0x168/0x22e [ 402.083002][ T16] ? load_image+0x3b0/0x3b0 [ 402.087493][ T16] ? show_regs_print_info+0x12/0x12 [ 402.092679][ T16] ? print_circular_bug+0x12b/0x1a0 [ 402.097873][ T16] check_noncircular+0x274/0x310 [ 402.102811][ T16] ? add_chain_block+0x940/0x940 [ 402.107734][ T16] ? lockdep_lock+0xdc/0x1e0 [ 402.112316][ T16] ? _find_first_zero_bit+0xcf/0x100 [ 402.117649][ T16] __lock_acquire+0x2cf8/0x7c50 [ 402.122488][ T16] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 402.128395][ T16] ? verify_lock_unused+0x140/0x140 [ 402.133606][ T16] ? kasan_save_stack+0x4c/0x60 [ 402.138459][ T16] ? kasan_save_stack+0x3a/0x60 [ 402.143309][ T16] ? __kasan_record_aux_stack+0xb2/0xc0 [ 402.148847][ T16] ? kvfree_call_rcu+0x108/0x870 [ 402.153785][ T16] ? trie_delete_elem+0x52d/0x690 [ 402.158813][ T16] ? bpf_prog_1db1603a7cfa36fb+0x3d/0x41 [ 402.164441][ T16] ? bpf_trace_run3+0x1e3/0x400 [ 402.169282][ T16] ? enqueue_timer+0x411/0x5c0 [ 402.174027][ T16] ? __mod_timer+0x911/0xd00 [ 402.178609][ T16] ? schedule_timeout+0x157/0x280 [ 402.183623][ T16] ? rcu_gp_fqs_loop+0x2f2/0x1310 [ 402.188637][ T16] ? rcu_gp_kthread+0x95/0x380 [ 402.193381][ T16] ? kthread+0x29d/0x330 [ 402.197611][ T16] ? ret_from_fork+0x1f/0x30 [ 402.202212][ T16] lock_acquire+0x1b4/0x490 [ 402.206714][ T16] ? kvfree_call_rcu+0x184/0x870 [ 402.211653][ T16] ? read_lock_is_recursive+0x10/0x10 [ 402.217026][ T16] ? __phys_addr+0xb6/0x170 [ 402.221518][ T16] _raw_spin_lock+0x2a/0x40 [ 402.226013][ T16] ? kvfree_call_rcu+0x184/0x870 [ 402.230962][ T16] kvfree_call_rcu+0x184/0x870 [ 402.235715][ T16] ? rcu_leak_callback+0x10/0x10 [ 402.240640][ T16] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 402.246530][ T16] ? _raw_spin_unlock+0x40/0x40 [ 402.251371][ T16] trie_delete_elem+0x52d/0x690 [ 402.256212][ T16] bpf_prog_1db1603a7cfa36fb+0x3d/0x41 [ 402.261666][ T16] bpf_trace_run3+0x1e3/0x400 [ 402.266331][ T16] ? do_raw_spin_unlock+0x11d/0x230 [ 402.271516][ T16] ? bpf_trace_run3+0xf0/0x400 [ 402.276273][ T16] ? bpf_trace_run2+0x3b0/0x3b0 [ 402.281106][ T16] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 402.286987][ T16] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 402.292343][ T16] ? _raw_spin_lock+0x40/0x40 [ 402.297095][ T16] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 402.303085][ T16] enqueue_timer+0x411/0x5c0 [ 402.307665][ T16] __mod_timer+0x911/0xd00 [ 402.312079][ T16] schedule_timeout+0x157/0x280 [ 402.316924][ T16] ? console_conditional_schedule+0x40/0x40 [ 402.322807][ T16] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 402.328773][ T16] ? update_process_times+0x1b0/0x1b0 [ 402.334131][ T16] ? prepare_to_swait_event+0x335/0x350 [ 402.339664][ T16] rcu_gp_fqs_loop+0x2f2/0x1310 [ 402.344498][ T16] ? rcu_gp_kthread+0x380/0x380 [ 402.349352][ T16] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 402.355322][ T16] ? rcu_gp_init+0x14b0/0x14b0 [ 402.360069][ T16] ? rcu_gp_cleanup+0xb4c/0xca0 [ 402.364905][ T16] ? _raw_spin_unlock_irq+0x1f/0x40 [ 402.370090][ T16] ? lockdep_hardirqs_on+0x94/0x140 [ 402.375274][ T16] rcu_gp_kthread+0x95/0x380 [ 402.379846][ T16] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 402.384936][ T16] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 402.390817][ T16] ? __kthread_parkme+0x162/0x1c0 [ 402.395830][ T16] kthread+0x29d/0x330 [ 402.399885][ T16] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 402.404976][ T16] ? kthread_blkcg+0xd0/0xd0 [ 402.409550][ T16] ret_from_fork+0x1f/0x30 [ 402.413965][ T16]