last executing test programs: 1m9.352795929s ago: executing program 0 (id=1482): pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x48000) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x62}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 58.25156754s ago: executing program 0 (id=1482): pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x48000) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x62}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 55.600049289s ago: executing program 2 (id=2304): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @loopback, @loopback}, &(0x7f00000003c0)=0xc) sendmsg$inet(r1, &(0x7f0000000400)={&(0x7f00000001c0)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000300)}], 0x1}, 0x8000) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) syz_emit_ethernet(0xe, &(0x7f00000004c0)={@local, @random="99879e18f3ff", @void, {@generic={0x8906}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@jmp={0x5, 0x1, 0x3, 0x4, 0x0, 0x10}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) sendmmsg$inet(r1, 0x0, 0x0, 0x0) 42.878913955s ago: executing program 0 (id=1482): pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x48000) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x62}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 41.350668792s ago: executing program 2 (id=2304): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @loopback, @loopback}, &(0x7f00000003c0)=0xc) sendmsg$inet(r1, &(0x7f0000000400)={&(0x7f00000001c0)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000300)}], 0x1}, 0x8000) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) syz_emit_ethernet(0xe, &(0x7f00000004c0)={@local, @random="99879e18f3ff", @void, {@generic={0x8906}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@jmp={0x5, 0x1, 0x3, 0x4, 0x0, 0x10}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) sendmmsg$inet(r1, 0x0, 0x0, 0x0) 29.684793238s ago: executing program 0 (id=1482): pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x48000) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x62}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 29.048686334s ago: executing program 2 (id=2304): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @loopback, @loopback}, &(0x7f00000003c0)=0xc) sendmsg$inet(r1, &(0x7f0000000400)={&(0x7f00000001c0)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000300)}], 0x1}, 0x8000) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) syz_emit_ethernet(0xe, &(0x7f00000004c0)={@local, @random="99879e18f3ff", @void, {@generic={0x8906}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@jmp={0x5, 0x1, 0x3, 0x4, 0x0, 0x10}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) sendmmsg$inet(r1, 0x0, 0x0, 0x0) 28.154947712s ago: executing program 2 (id=2304): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @loopback, @loopback}, &(0x7f00000003c0)=0xc) sendmsg$inet(r1, &(0x7f0000000400)={&(0x7f00000001c0)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000300)}], 0x1}, 0x8000) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) syz_emit_ethernet(0xe, &(0x7f00000004c0)={@local, @random="99879e18f3ff", @void, {@generic={0x8906}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@jmp={0x5, 0x1, 0x3, 0x4, 0x0, 0x10}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) sendmmsg$inet(r1, 0x0, 0x0, 0x0) 14.888143497s ago: executing program 0 (id=1482): pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x48000) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x62}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 13.38638708s ago: executing program 2 (id=2304): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @loopback, @loopback}, &(0x7f00000003c0)=0xc) sendmsg$inet(r1, &(0x7f0000000400)={&(0x7f00000001c0)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000300)}], 0x1}, 0x8000) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) syz_emit_ethernet(0xe, &(0x7f00000004c0)={@local, @random="99879e18f3ff", @void, {@generic={0x8906}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@jmp={0x5, 0x1, 0x3, 0x4, 0x0, 0x10}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) sendmmsg$inet(r1, 0x0, 0x0, 0x0) 2.909767959s ago: executing program 3 (id=2748): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, 0x0, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000700)={'ip6gre0\x00', 0x0}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000025c0)={'syztnl1\x00', &(0x7f0000002480)={'ip_vti0\x00', 0x0, 0x7800, 0x8, 0x7fff, 0x0, {{0x15, 0x4, 0x1, 0x3d, 0x54, 0x66, 0x0, 0x7c, 0x4, 0x0, @empty, @multicast1, {[@ra={0x94, 0x4}, @ra={0x94, 0x4}, @lsrr={0x83, 0x23, 0x34, [@remote, @remote, @multicast2, @loopback, @private=0xa010100, @private=0xa010102, @multicast1, @rand_addr=0x64010102]}, @timestamp={0x44, 0x4, 0xc7, 0x0, 0x6}, @timestamp_prespec={0x44, 0x4, 0xde, 0x3, 0x7}, @cipso={0x86, 0xa, 0x1, [{0x0, 0x2}, {0x1, 0x2}]}]}}}}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000002cc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002600)={0x65c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0x24c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4ad}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x4, 0x52, 0x3e, 0x7a20}]}}}]}}, {{0x8}, {0x25c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0x188, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x93}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x2, 0x57, 0x9, 0x3}, {0x10, 0x7, 0xab, 0x4}, {0x9, 0x82, 0x2, 0x7847}]}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x1, 0x3, 0x1, 0x4}, {0x7, 0x2, 0x8, 0x7fff}, {0xa, 0x7, 0x4, 0x40}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8b89}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}]}, 0x65c}, 0x1, 0x0, 0x0, 0x4080}, 0x2400c044) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)=@ipv6_getnexthop={0x20, 0x6a, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x100040d1}, 0x8000) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 2.689687614s ago: executing program 4 (id=2751): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$SIOCGSKNS(r0, 0x894c, &(0x7f0000001080)={'wg1\x00', 0x200}) r1 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e1e}, 0x10) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x12160) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x37) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001040)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x20) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRESOCT=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x8, 0x0, 0xfffffff4}, 0x10, 0x0, r2}, 0x8c) 2.688853267s ago: executing program 3 (id=2752): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) (async, rerun: 32) r1 = socket$netlink(0x10, 0x3, 0x4) (rerun: 32) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000001590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) 2.57051495s ago: executing program 3 (id=2754): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x325, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newtaction={0x214, 0x30, 0x51b, 0x0, 0x0, {}, [{0x200, 0x1, [@m_skbmod={0x68, 0x1, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_SMAC={0x0, 0x4, @multicast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0xa8, 0x0, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x68, 0x6, "9f9b3fc2ddc24af6f0e10a015de0eee6fc0900c6e7d94c24ec368c475d7486514b6d2677226afad90c7d6c3ad311a9dee1f031afe3919c34f8636d67f86e3ebd80589ce5f55db46e88a14f002788b194b3ccfdf8c4b86ba094bef19b3a0cddb8831b84bb"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0xec, 0x0, 0x0, 0x0, {{0xf}, {0x54, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_PARMS={0x1c}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_NO_CSUM={0xfffffffffffffede}]}, {0x69, 0x6, "9c52af17f462814d38170f632f883a02e6a90db7e490d2b8bd19fcb7872621f629a33220c9b5f21052aa40bb9616cbe2ae3debc7ea8dcc879c436c50c4b2e001d6b687516d71ee6b27e990693d6b67974963a28a690808e192e0ecf03e7f3535c9492c8e09"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x214}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000002a00), 0x800, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'pimreg\x00', 0x2}) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0xc, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @broadcast}}, [0x10, 0x7, 0xff, 0x0, 0x40, 0x73, 0x9, 0x10001, 0x2, 0x80000000, 0x9, 0x5, 0x8, 0x100, 0x6d3c39d2]}, &(0x7f0000000000)=0x100) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000040)={r8, 0x9, 0x2, [0x9, 0x80]}, 0xc) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r4, 0x0) r9 = socket$netlink(0x10, 0x3, 0x8000000004) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d08023f000000040000a118000200ff020000091d00000000000000000001a80016ea1f00084003eb4bd04554bf2a31cf1f2e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108e8d8ef075c0100000000000000cb090000001fb791643a5e885913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000580bb9ad809d5e1cace81b34113", 0xd9}], 0x1, 0x0, 0x0, 0x7400}, 0x4040c04) writev(r9, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 2.469976996s ago: executing program 1 (id=2755): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) 2.431467997s ago: executing program 4 (id=2756): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) close(r1) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0xa434, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r2, 0xffffffffffffffff}, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8b3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4}, 0x50) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001c00)={0x6, 0x34, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x89, 0x0, 0x0, 0x0, 0x800}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7c}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @call={0x85, 0x0, 0x0, 0x42}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x401}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='syzkaller\x00', 0x200, 0x1000, &(0x7f0000000b40)=""/4096, 0x41000, 0x0, '\x00', 0x0, 0x25, r8, 0x8, &(0x7f0000001b40)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001b80)={0x2, 0x7, 0x1, 0x40}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001bc0)=[{0x5, 0x2, 0xc, 0x1}], 0x10, 0x8000}, 0x94) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f0000001f80), &(0x7f0000001fc0)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000001e40)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001cc0)=""/252, 0xfc, 0x0, &(0x7f0000001dc0)=""/91, 0x5b}, &(0x7f0000001e80)=0x40) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r10, 0xe0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r12 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r11}, 0x4) r13 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r13, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}, 0x500}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x2, 0x40010101, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r12, 0x108, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f09df33c9f7b986", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100"], 0x54}, 0x1, 0x0, 0x0, 0x20048004}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0x42, 0x4, 0x2a8, 0xffffffff, 0x98, 0x160, 0x0, 0xffffffff, 0xffffffff, 0x210, 0x210, 0x210, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@ip={@multicast1, @multicast2, 0x0, 0x0, 'vlan0\x00', 'syzkaller1\x00', {}, {}, 0x33}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@inet=@SET1={0x28}}, {{@ip={@private, @loopback, 0x0, 0x0, 'batadv_slave_0\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) bpf$MAP_CREATE(0x0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="1200000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000003eccae86f0ccf5934f890586e518c8404a5efbef2f9d30a1cacff21187c1822b4185441855b1d8e61f7b50d76a345861c087495894f1f4deb71c851763ba90160d2715e7eabd4c80ea06a921a47a2a296ad54aad0ec7a0ad22f9983d0a3e57d8078516", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 2.281704386s ago: executing program 1 (id=2757): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a0000000000c000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000060000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="040000000000000050001100e0000001000000000000000000000000ffffffff000000000000000000000200e0000002000000000000000000000000fe8000000000000000000000000000aa3c04000003"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.27945394s ago: executing program 3 (id=2758): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000200000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000680)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="b40800000000000073110e00000000008510000002000000b7000000000000009500c200000000009500001200000000830345f5b3f42590c416b734596006d9dec99bdcb359ce8c"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) 2.221098537s ago: executing program 4 (id=2759): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000018c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x38, r2, 0x1, 0x70bd24, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x8800) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xa0, 0x15}, [@call={0x45, 0x0, 0x0, 0xffffffff}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1b}, 0x64) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000018c0), r1) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000ac0)={'wpan0\x00'}) (async) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x38, r2, 0x1, 0x70bd24, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x8800) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xa0, 0x15}, [@call={0x45, 0x0, 0x0, 0xffffffff}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1b}, 0x64) (async) 2.156308711s ago: executing program 3 (id=2760): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c40)=@delchain={0x18c, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x140, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_CLASSID={0x8, 0x3, {0x0, 0xfff1}}, @TCA_BPF_ACT={0x118, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_simple={0xb0, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x81, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bf7dae04880a34e7bf775010128401ec7b2a9ceab9c40c5f9bd00ceff17d69ca7a27324ef7a1ad28d4b3c6a826826e9c291c16ab3d13e1f337751959e47bf0fe515b70ea5a3584d9cdba83a705d3257305f931866cf9f1faa34fce0e8a7ee76e20f05d4e"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x34, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8}]}}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0), 0x0, 0x2040000, &(0x7f0000003700)={0x77359400}) 2.065592449s ago: executing program 1 (id=2761): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000080000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b03000059530100140035007866726d30000000000000000000000008002800dd720000"], 0x3c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}]}], {0x14}}, 0x90}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb001480"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x18}, @NETEM_LOSS_GI={0x18, 0x1, {0x10}}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x9c}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r7, &(0x7f0000000140)=0xffffffffffffffff, 0x12) write$cgroup_subtree(r7, 0x0, 0x12) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="01002cbd7000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) pipe(&(0x7f0000000180)={0xffffffffffffffff}) close(r8) socket$netlink(0x10, 0x3, 0x13) read(r1, &(0x7f0000000200)=""/4, 0x4) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYBLOB="010000000000fcdbdf259250e2c408000300", @ANYRES32, @ANYBLOB="0a0006"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2.065442175s ago: executing program 0 (id=1482): pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x48000) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x62}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 1.990355777s ago: executing program 4 (id=2762): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f00000000c0)={0x281}) write$cgroup_int(r0, &(0x7f0000000000)=0xa36, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) socket$isdn_base(0x22, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0x9, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x91, &(0x7f0000000100)=""/145}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x82) r5 = socket$igmp6(0xa, 0x3, 0x2) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x6, &(0x7f0000001500)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x6c}, [@ldst={0x0, 0x2, 0x2, 0x4, 0x2, 0x2, 0x10}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4fe}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000610000000007ecefdc84599cd4c00000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r8, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0}}, 0x49) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x1}, 0x1}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000006200)=ANY=[@ANYBLOB="140000001000010040000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRES8, @ANYRESHEX=r6, @ANYBLOB, @ANYRES64=r2], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480240001800b000100736f636b65740000140002800800024000000003080001400000000230000180080001006e6174002400028008000640000000030800054000000003080001400000000008000240000000020900010073797a30000000000900020073797a32"], 0xac}}, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r10, 0x0) recvmmsg(r10, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) recvmmsg(r10, &(0x7f0000006080)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000000040)=""/149, 0x95}, {&(0x7f0000000100)=""/185, 0xb9}, {&(0x7f00000001c0)=""/170, 0xaa}], 0x4, &(0x7f00000002c0)=""/73, 0x49}, 0x18000}, {{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/160, 0xa0}, {&(0x7f00000062c0)=""/4109, 0x100d}, {&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/167, 0xa7}, {&(0x7f00000034c0)=""/9, 0x9}, {&(0x7f0000003500)=""/138, 0x8a}], 0x7}, 0x7b8}, {{&(0x7f0000003640)=@alg, 0x80, &(0x7f00000039c0)=[{&(0x7f00000036c0)=""/213, 0xd5}, {&(0x7f00000037c0)=""/10, 0xa}, {&(0x7f0000003800)=""/199, 0xc7}, {&(0x7f0000003900)=""/183, 0xb7}], 0x4}, 0x4}, {{&(0x7f0000003a00)=@hci, 0x80, &(0x7f0000003c80)=[{&(0x7f0000003a80)=""/150, 0x96}, {&(0x7f0000003b40)=""/99, 0x63}, {&(0x7f0000003bc0)=""/142, 0x8e}], 0x3, &(0x7f0000003cc0)=""/251, 0xfb}, 0x5710925a}, {{&(0x7f0000003dc0)=@nl=@proc, 0x80, &(0x7f00000015c0)=[{&(0x7f0000003e40)=""/154, 0x9a}, {&(0x7f0000003f00)=""/4096, 0x1000}, {&(0x7f0000001400)=""/224, 0xe0}, {&(0x7f0000001680)=""/134, 0x86}], 0x4, &(0x7f0000004f40)=""/98, 0x62}, 0x3}, {{&(0x7f0000004fc0)=@ax25={{}, [@netrom, @null, @null, @null, @rose, @null, @netrom]}, 0x80, &(0x7f0000006040)=[{&(0x7f0000007300)=""/4096, 0x1000}], 0x1}, 0x400}], 0x6, 0x10142, 0x0) write$tun(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000001c0)="4b6a1bc33f6364cd8cfa6f0035e78321403825b1f336e4ba06f1dd123809ae8b32db03e4f1373a42a7a66637065c3578", 0x30) 869.209477ms ago: executing program 1 (id=2763): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/93, 0x5d}, {&(0x7f0000000ec0)=""/4060, 0xfdc}, {&(0x7f00000007c0)=""/278, 0x116}, {&(0x7f00000002c0)=""/202, 0xca}, {&(0x7f0000000700)=""/153, 0x99}], 0x5}, 0x2000) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000900)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000004) recvmsg$kcm(r0, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002) 868.156239ms ago: executing program 2 (id=2304): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @loopback, @loopback}, &(0x7f00000003c0)=0xc) sendmsg$inet(r1, &(0x7f0000000400)={&(0x7f00000001c0)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000300)}], 0x1}, 0x8000) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) syz_emit_ethernet(0xe, &(0x7f00000004c0)={@local, @random="99879e18f3ff", @void, {@generic={0x8906}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@jmp={0x5, 0x1, 0x3, 0x4, 0x0, 0x10}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) sendmmsg$inet(r1, 0x0, 0x0, 0x0) 258.217387ms ago: executing program 3 (id=2764): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x22eb}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) listen(r0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) socket$inet6(0xa, 0x80803, 0x87) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x4) syz_emit_ethernet(0x5e, &(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRES8, @ANYRES8=r0, @ANYRES32=r0], 0x0) accept$phonet_pipe(r0, 0x0, 0x0) 257.881667ms ago: executing program 4 (id=2765): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) close(r1) 257.340933ms ago: executing program 1 (id=2766): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffffff00000000017c00000c0002"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) syz_emit_ethernet(0x11f, &(0x7f0000000c40)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0xe9, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', [{0x5, 0x1a, "b378b4ab7e6dec5a1bae2cabd9103dd505a4386e8716ff04a2f49e69485a91d1ff1a1fb0e3f2e0a68f507561d6a3f31d51ad78b4b8b0e81ef6ea021f561712d79e77c6b552fbaa4835d8b7ab763f33a96e5f8af87c5b64d51ea7bb6a01fb8d0f33f70755673c52b570661399f764fc770c5d88ecb6e516acacda6e3c75ec17351059b22af4887d6659c0e2daec240c6656dcd17718814a0808766225500115c2f274e13c40b5005b76dfa6583c9d0b682bf1e028287faea12c2b4c6be79c950510ccda59d6da46ff2b084d7ee085ee"}]}}}}}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="07bb1493702392301b56a4f5f7b6f5b02c4bbb92e51b97016a57a95bb3031fc38458a6f535a8a538be1ee377549ba32a2eb33cca08892b52ebfa7cf4ce380981344d0a6bb92f85ee9b7aeed18add58e46a0f21e27d4cb1b2b5bcf2a62f301e322f8dd1f312557cd73b39f0e2e97c5b7539a835a5d554565ff5bca0097e012366c9200f858c9c6a183e793c3180982ad61672dba766b3f6980db7d9d45cae5b1531d6e2d8512d7a52572e5a1a201ae419abfd16d7634fb45c9b0e204d2875400e2550fc47a5", 0xc5, 0x2004c018, &(0x7f0000000040)={0xa, 0x4e20, 0x27bc, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffff7f}, 0x1c) 45.658821ms ago: executing program 1 (id=2767): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x85, &(0x7f0000000ac0), 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_KEY(r5, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xd06655e1305b6e95}, 0x600008c5) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r7, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) setsockopt$sock_int(r7, 0x1, 0x9, &(0x7f0000000100)=0x9, 0x4) listen(0xffffffffffffffff, 0x10001) connect$rose(r7, &(0x7f00000000c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @null]}, 0x40) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$netlink(0x10, 0x3, 0x8000000004) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={0x1, @null, @rose={'rose', 0x0}, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) writev(r8, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add4050000000000000001117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r0) socket(0xb, 0x80002, 0x0) 0s ago: executing program 4 (id=2768): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4004004}, 0x810) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002fc0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003000)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r4, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ff}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) kernel console output (not intermixed with test programs): dv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.411934][T11910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.445677][T11910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.455005][T11910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.484140][T12068] netlink: 'syz.1.1864': attribute type 2 has an invalid length. [ 219.492081][T12068] netlink: 'syz.1.1864': attribute type 8 has an invalid length. [ 219.499118][T11910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.507679][T12068] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1864'. [ 219.615794][T12074] netlink: 'syz.2.1866': attribute type 2 has an invalid length. [ 219.630338][T11910] hsr_slave_0: entered promiscuous mode [ 219.640752][T11910] hsr_slave_1: entered promiscuous mode [ 219.648271][T11910] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.656528][T11910] Cannot create hsr debugfs directory [ 219.748449][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.505388][T11910] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 220.523690][T11910] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 220.549339][T11910] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 220.568225][T12114] netlink: 'syz.4.1878': attribute type 11 has an invalid length. [ 220.570143][T11910] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 220.791883][T11910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.868393][T11910] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.916244][T12133] __nla_validate_parse: 1 callbacks suppressed [ 220.916261][T12133] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1884'. [ 220.974226][ T2956] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.981405][ T2956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.011250][ T2956] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.018461][ T2956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.055970][T12138] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 221.112086][T12140] pimreg: entered allmulticast mode [ 221.160390][T12140] dvmrp1: left allmulticast mode [ 221.166060][T12140] pimreg: left allmulticast mode [ 221.342460][T11910] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 221.422970][ T5838] Bluetooth: hci1: command tx timeout [ 221.647423][T11910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.705648][T12177] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1898'. [ 221.746360][T11910] veth0_vlan: entered promiscuous mode [ 221.758235][T12179] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1898'. [ 221.762402][T11910] veth1_vlan: entered promiscuous mode [ 221.895834][T11910] veth0_macvtap: entered promiscuous mode [ 221.926932][T11910] veth1_macvtap: entered promiscuous mode [ 221.989518][T11910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.029788][T11910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.041522][T12198] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1904'. [ 222.055824][T11910] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.071313][T11910] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.080565][T11910] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.099702][T11910] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.256888][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.278835][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.318684][T12213] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1909'. [ 222.333169][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.354376][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.419218][T12215] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.750560][T12231] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1915'. [ 222.765001][T12231] xt_connbytes: Forcing CT accounting to be enabled [ 222.771746][T12231] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 222.894316][T12238] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1918'. [ 222.913270][T12238] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1918'. [ 224.400790][T12254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1922'. [ 224.749693][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.855556][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.864811][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.940663][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 224.950891][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 224.963892][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 224.968760][T12272] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1927'. [ 224.984111][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 224.992601][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 225.000006][T12272] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.134652][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.214421][T12279] team0: Device gtp0 is of different type [ 225.559411][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.750563][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.280764][T12338] __nla_validate_parse: 1 callbacks suppressed [ 226.280783][T12338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1946'. [ 226.331216][T12340] tipc: Enabling of bearer rejected, failed to enable media [ 226.357998][T12344] sctp: [Deprecated]: syz.3.1950 (pid 12344) Use of int in maxseg socket option. [ 226.357998][T12344] Use struct sctp_assoc_value instead [ 226.382388][T12267] chnl_net:caif_netlink_parms(): no params data found [ 226.383684][T12345] netlink: 'syz.2.1949': attribute type 3 has an invalid length. [ 226.436012][T12345] netlink: 'syz.2.1949': attribute type 1 has an invalid length. [ 226.446519][ T36] bridge_slave_1: left allmulticast mode [ 226.452202][ T36] bridge_slave_1: left promiscuous mode [ 226.474036][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.491550][ T36] bridge_slave_0: left allmulticast mode [ 226.507759][ T36] bridge_slave_0: left promiscuous mode [ 226.521432][T12349] netlink: 'syz.4.1953': attribute type 10 has an invalid length. [ 226.528520][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.548770][T12349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1953'. [ 226.729626][T12363] netlink: 'syz.4.1953': attribute type 10 has an invalid length. [ 226.793646][T12364] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1953'. [ 226.934778][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.947076][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.957589][ T36] bond0 (unregistering): Released all slaves [ 227.012136][T12359] netlink: 'syz.3.1952': attribute type 2 has an invalid length. [ 227.096190][ T5838] Bluetooth: hci1: command tx timeout [ 227.215464][T12267] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.229486][T12267] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.250068][T12267] bridge_slave_0: entered allmulticast mode [ 227.272134][T12267] bridge_slave_0: entered promiscuous mode [ 227.304791][T12370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1955'. [ 227.314394][T12267] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.327292][T12267] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.367914][T12267] bridge_slave_1: entered allmulticast mode [ 227.404659][T12267] bridge_slave_1: entered promiscuous mode [ 227.501447][T12383] netlink: 13 bytes leftover after parsing attributes in process `syz.2.1961'. [ 227.618926][T12389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1963'. [ 227.631647][T12390] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1962'. [ 227.640672][T12267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.740844][T12267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.870432][T12401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1967'. [ 227.890734][T12402] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1967'. [ 227.943258][T12267] team0: Port device team_slave_0 added [ 227.973484][T12267] team0: Port device team_slave_1 added [ 227.994773][T12405] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1967'. [ 228.138614][T12267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.153416][T12267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.200570][T12267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.237490][ T36] hsr_slave_0: left promiscuous mode [ 228.244676][ T36] hsr_slave_1: left promiscuous mode [ 228.252328][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.262062][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.270570][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.278288][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.337794][ T36] veth1_macvtap: left promiscuous mode [ 228.347815][ T36] veth0_macvtap: left promiscuous mode [ 228.353663][ T36] veth1_vlan: left promiscuous mode [ 228.358969][ T36] veth0_vlan: left promiscuous mode [ 228.938591][ T36] team0 (unregistering): Port device team_slave_1 removed [ 228.984444][ T36] team0 (unregistering): Port device team_slave_0 removed [ 229.178336][ T5838] Bluetooth: hci1: command tx timeout [ 229.351046][T12267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.362446][T12267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.394694][T12267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.631461][T12267] hsr_slave_0: entered promiscuous mode [ 229.674430][T12267] hsr_slave_1: entered promiscuous mode [ 229.686632][T12267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.703449][T12267] Cannot create hsr debugfs directory [ 229.715821][T12449] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 229.931263][T12464] xt_bpf: check failed: parse error [ 229.963036][T12468] xt_hashlimit: size too large, truncated to 1048576 [ 230.211082][T12476] lo: entered allmulticast mode [ 230.605441][T12495] batadv0: left promiscuous mode [ 230.627781][T12495] batadv0: left allmulticast mode [ 231.252958][ T5838] Bluetooth: hci1: command tx timeout [ 231.432750][T12495] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.441692][T12495] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.451892][T12495] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.466916][T12495] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.484763][T12495] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 231.558038][T12495] veth0_macvtap: left allmulticast mode [ 231.563870][T12495] macvtap1: left allmulticast mode [ 231.652470][T12491] veth7: entered allmulticast mode [ 232.007533][T12530] __nla_validate_parse: 5 callbacks suppressed [ 232.007553][T12530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1998'. [ 232.084706][T12534] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2001'. [ 232.132999][T12530] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1998'. [ 232.142020][T12530] netlink: 'syz.4.1998': attribute type 1 has an invalid length. [ 232.153282][T12530] nbd: error processing sock list [ 232.230883][T12267] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 232.255765][T12267] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 232.311743][T12267] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 232.320842][T12551] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2003'. [ 232.359174][T12267] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 233.342963][ T5838] Bluetooth: hci1: command tx timeout [ 233.912251][T12551] netlink: 'syz.3.2003': attribute type 1 has an invalid length. [ 234.260561][T12267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.317948][T12267] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.366614][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.373851][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.430250][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.437464][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.499675][T12267] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 234.753581][T12596] netlink: 696 bytes leftover after parsing attributes in process `syz.3.2017'. [ 234.959964][T12606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2021'. [ 234.988056][T12267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.014261][T12606] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 235.021873][T12606] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.077522][T12613] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2024'. [ 235.099977][T12612] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2024'. [ 235.132309][T12267] veth0_vlan: entered promiscuous mode [ 235.179728][T12267] veth1_vlan: entered promiscuous mode [ 235.262644][T12267] veth0_macvtap: entered promiscuous mode [ 235.280181][T12620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2028'. [ 235.304021][T12267] veth1_macvtap: entered promiscuous mode [ 235.346867][T12267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.378053][T12267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.410948][T12267] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.442921][T12267] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.456159][T12267] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.483287][T12267] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.661493][ T2956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.674796][ T2956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.724067][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.747693][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.761496][T12646] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2036'. [ 235.787249][T12646] nftables ruleset with unbound set [ 236.101624][T12665] openvswitch: netlink: nsh attr 8962 is out of range max 3 [ 236.122329][T12665] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.454163][T12677] can: request_module (can-proto-0) failed. [ 236.795898][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.328945][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.575879][T12694] netlink: 'syz.1.2050': attribute type 1 has an invalid length. [ 237.588395][T12694] __nla_validate_parse: 4 callbacks suppressed [ 237.588411][T12694] netlink: 216 bytes leftover after parsing attributes in process `syz.1.2050'. [ 237.668072][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.820571][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.174438][ T12] bridge_slave_1: left allmulticast mode [ 238.195896][ T12] bridge_slave_1: left promiscuous mode [ 238.201784][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.247124][ T12] bridge_slave_0: left allmulticast mode [ 238.256199][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 238.264016][ T12] bridge_slave_0: left promiscuous mode [ 238.267863][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 238.277739][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 238.286441][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 238.295436][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 238.298782][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.714194][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.728890][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.738988][ T12] bond0 (unregistering): Released all slaves [ 238.869080][T12725] team0 (unregistering): Port device team_slave_0 removed [ 238.881738][T12725] team0 (unregistering): Port device team_slave_1 removed [ 239.167742][T12757] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2068'. [ 239.351523][T12765] netlink: 666 bytes leftover after parsing attributes in process `syz.3.2070'. [ 239.377597][T12765] netlink: 'syz.3.2070': attribute type 1 has an invalid length. [ 239.391516][T12765] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2070'. [ 239.418153][T12769] netlink: 'syz.2.2071': attribute type 1 has an invalid length. [ 239.432515][T12769] netlink: 'syz.2.2071': attribute type 4 has an invalid length. [ 239.461426][T12769] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2071'. [ 239.481543][T12769] netlink: 'syz.2.2071': attribute type 1 has an invalid length. [ 239.497981][T12769] netlink: 'syz.2.2071': attribute type 4 has an invalid length. [ 239.518288][T12769] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2071'. [ 239.537514][T12772] FAULT_INJECTION: forcing a failure. [ 239.537514][T12772] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.570210][T12774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.574988][T12772] CPU: 0 UID: 0 PID: 12772 Comm: syz.4.2072 Not tainted 6.16.0-rc3-syzkaller-00144-gbd475eeaaf3c #0 PREEMPT(full) [ 239.575020][T12772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 239.575036][T12772] Call Trace: [ 239.575045][T12772] [ 239.575055][T12772] dump_stack_lvl+0x189/0x250 [ 239.575100][T12772] ? __pfx____ratelimit+0x10/0x10 [ 239.575137][T12772] ? __pfx_dump_stack_lvl+0x10/0x10 [ 239.575174][T12772] ? __pfx__printk+0x10/0x10 [ 239.575202][T12772] ? __might_fault+0xb0/0x130 [ 239.575247][T12772] should_fail_ex+0x414/0x560 [ 239.575284][T12772] _copy_from_iter+0x1db/0x16f0 [ 239.575326][T12772] ? rcu_is_watching+0x15/0xb0 [ 239.575365][T12772] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 239.575391][T12772] ? __pfx__copy_from_iter+0x10/0x10 [ 239.575478][T12772] ? __build_skb_around+0x257/0x3e0 [ 239.575511][T12772] ? netlink_sendmsg+0x642/0xb30 [ 239.575537][T12772] ? skb_put+0x11b/0x210 [ 239.575570][T12772] netlink_sendmsg+0x6b2/0xb30 [ 239.575608][T12772] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.575640][T12772] ? aa_sock_msg_perm+0x94/0x160 [ 239.575673][T12772] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 239.575703][T12772] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.575732][T12772] __sock_sendmsg+0x21c/0x270 [ 239.575774][T12772] ____sys_sendmsg+0x52d/0x830 [ 239.575810][T12772] ? __pfx_____sys_sendmsg+0x10/0x10 [ 239.575851][T12772] ? import_iovec+0x74/0xa0 [ 239.575878][T12772] ___sys_sendmsg+0x21f/0x2a0 [ 239.575911][T12772] ? __pfx____sys_sendmsg+0x10/0x10 [ 239.575995][T12772] ? __might_fault+0xb0/0x130 [ 239.576028][T12772] __sys_sendmmsg+0x227/0x430 [ 239.576067][T12772] ? __pfx___sys_sendmmsg+0x10/0x10 [ 239.576094][T12772] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 239.576178][T12772] ? ksys_write+0x22a/0x250 [ 239.576201][T12772] ? __pfx_ksys_write+0x10/0x10 [ 239.576246][T12772] __x64_sys_sendmmsg+0xa0/0xc0 [ 239.576277][T12772] do_syscall_64+0xfa/0x3b0 [ 239.576295][T12772] ? lockdep_hardirqs_on+0x9c/0x150 [ 239.576326][T12772] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.576347][T12772] ? clear_bhb_loop+0x60/0xb0 [ 239.576374][T12772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.576395][T12772] RIP: 0033:0x7fcb7bd8e929 [ 239.576415][T12772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.576433][T12772] RSP: 002b:00007fcb79bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 239.576456][T12772] RAX: ffffffffffffffda RBX: 00007fcb7bfb5fa0 RCX: 00007fcb7bd8e929 [ 239.576472][T12772] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 239.576487][T12772] RBP: 00007fcb79bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 239.576500][T12772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.576513][T12772] R13: 0000000000000000 R14: 00007fcb7bfb5fa0 R15: 00007ffd50e62ad8 [ 239.576547][T12772] [ 239.617496][T12775] netlink: 'syz.2.2071': attribute type 10 has an invalid length. [ 239.634828][T12774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.657046][T12775] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.955240][T12782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2075'. [ 239.964267][T12782] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2075'. [ 239.972369][T12784] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2076'. [ 240.019609][T12782] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.028883][T12782] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.037611][T12782] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.046462][T12782] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.230593][T12796] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2079'. [ 240.373396][ T5838] Bluetooth: hci1: command tx timeout [ 240.608687][ T12] hsr_slave_0: left promiscuous mode [ 240.620411][ T12] hsr_slave_1: left promiscuous mode [ 240.637656][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.645347][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.653757][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.672731][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.706093][ T12] veth1_macvtap: left promiscuous mode [ 240.712304][ T12] veth0_macvtap: left promiscuous mode [ 240.718083][ T12] veth1_vlan: left promiscuous mode [ 240.723539][ T12] veth0_vlan: left promiscuous mode [ 241.281485][ T12] team0 (unregistering): Port device team_slave_1 removed [ 241.316196][ T12] team0 (unregistering): Port device team_slave_0 removed [ 242.121809][T12730] chnl_net:caif_netlink_parms(): no params data found [ 242.167880][T12843] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 242.455486][ T5838] Bluetooth: hci1: command tx timeout [ 242.474227][T12855] netlink: 'syz.3.2095': attribute type 1 has an invalid length. [ 242.482042][T12855] netlink: 'syz.3.2095': attribute type 2 has an invalid length. [ 242.525667][T12853] netlink: 'syz.2.2094': attribute type 11 has an invalid length. [ 242.560748][T12730] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.602000][T12730] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.627933][T12730] bridge_slave_0: entered allmulticast mode [ 242.645519][T12730] bridge_slave_0: entered promiscuous mode [ 242.676632][T12730] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.685825][T12730] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.697313][T12730] bridge_slave_1: entered allmulticast mode [ 242.705886][T12730] bridge_slave_1: entered promiscuous mode [ 242.706852][T12872] __nla_validate_parse: 4 callbacks suppressed [ 242.706868][T12872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2098'. [ 242.733589][T12872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2098'. [ 242.869510][T12730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.888572][T12730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.901537][T12880] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2101'. [ 243.028518][T12730] team0: Port device team_slave_0 added [ 243.062530][T12730] team0: Port device team_slave_1 added [ 243.095512][T12894] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2106'. [ 243.247379][T12730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.262780][T12730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.292276][T12730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.325071][T12730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.332051][T12730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.380588][T12730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.394780][T12907] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2110'. [ 243.482503][T12904] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2110'. [ 243.515511][T12911] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 243.532031][T12730] hsr_slave_0: entered promiscuous mode [ 243.574565][T12730] hsr_slave_1: entered promiscuous mode [ 243.589449][T12730] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 243.608664][T12730] Cannot create hsr debugfs directory [ 243.620265][T12916] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2112'. [ 243.620266][T12918] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2112'. [ 243.752064][T12922] lo: entered promiscuous mode [ 243.758394][T12922] netlink: 'syz.1.2113': attribute type 2 has an invalid length. [ 243.775221][T12922] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 243.839441][T12924] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2114'. [ 244.289542][T12950] netlink: 'syz.1.2124': attribute type 21 has an invalid length. [ 244.523378][T12730] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 244.533245][ T5838] Bluetooth: hci1: command tx timeout [ 244.541180][T12730] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 244.553913][T12730] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 244.566389][T12730] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 244.887830][T12730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.937032][T12730] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.965153][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.972340][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.014203][ T2956] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.021415][ T2956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.299900][T13009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2136'. [ 245.450125][T13021] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 245.653297][T12730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.796251][T12730] veth0_vlan: entered promiscuous mode [ 245.833797][T13034] delete_channel: no stack [ 245.838378][T12730] veth1_vlan: entered promiscuous mode [ 245.951422][T12730] veth0_macvtap: entered promiscuous mode [ 245.968713][T12730] veth1_macvtap: entered promiscuous mode [ 246.014908][T12730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.075279][T12730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.097051][T12730] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.108340][T12730] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.117705][T12730] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.135749][T12730] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.330069][ T8361] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.348596][ T8361] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.390846][ T2956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.424055][ T2956] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.681970][T13067] netlink: 'syz.1.2155': attribute type 2 has an invalid length. [ 247.057306][T13089] netlink: 'syz.3.2161': attribute type 1 has an invalid length. [ 247.118194][T13089] 8021q: adding VLAN 0 to HW filter on device bond5 [ 247.162404][T13094] 8021q: adding VLAN 0 to HW filter on device bond5 [ 247.175019][T13094] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 247.196225][T13094] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 247.285694][T13102] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20002 [ 247.527546][ T37] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.597438][T13124] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 248.038811][ T37] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.579078][ T37] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.620794][ T37] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.727938][T13137] __nla_validate_parse: 5 callbacks suppressed [ 248.727954][T13137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2173'. [ 248.800413][T13137] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2173'. [ 248.842791][T13137] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2173'. [ 248.863876][T13137] netlink: 'syz.2.2173': attribute type 6 has an invalid length. [ 248.871666][T13137] netlink: 'syz.2.2173': attribute type 5 has an invalid length. [ 248.893520][T13137] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2173'. [ 248.964316][T13145] netlink: 'syz.4.2177': attribute type 10 has an invalid length. [ 248.972235][T13145] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2177'. [ 248.992943][ T37] bridge_slave_1: left allmulticast mode [ 248.998631][ T37] bridge_slave_1: left promiscuous mode [ 249.052040][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.082242][ T37] bridge_slave_0: left allmulticast mode [ 249.091227][ T37] bridge_slave_0: left promiscuous mode [ 249.109018][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.381347][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 249.392115][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 249.411530][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 249.426257][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 249.437878][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 249.609117][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.621153][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.631317][ T37] bond0 (unregistering): Released all slaves [ 249.884424][T13168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2183'. [ 250.807998][T13207] netlink: 'syz.1.2195': attribute type 4 has an invalid length. [ 251.159369][T13217] netlink: 'syz.4.2198': attribute type 25 has an invalid length. [ 251.169758][ T37] hsr_slave_0: left promiscuous mode [ 251.188642][ T37] hsr_slave_1: left promiscuous mode [ 251.203446][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.211429][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.219648][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.227250][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.269511][ T37] veth1_macvtap: left promiscuous mode [ 251.281526][ T37] veth0_macvtap: left promiscuous mode [ 251.287734][ T37] veth1_vlan: left promiscuous mode [ 251.298395][ T37] veth0_vlan: left promiscuous mode [ 251.495856][ T51] Bluetooth: hci1: command tx timeout [ 251.838385][ T37] team0 (unregistering): Port device team_slave_1 removed [ 251.874491][ T37] team0 (unregistering): Port device team_slave_0 removed [ 252.240847][T13223] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 252.372141][T13161] chnl_net:caif_netlink_parms(): no params data found [ 252.411006][T13246] xt_TPROXY: Can be used only with -p tcp or -p udp [ 252.475193][T13248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2206'. [ 252.492817][T13248] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2206'. [ 252.509001][T13248] netlink: 'syz.2.2206': attribute type 13 has an invalid length. [ 252.563967][T13250] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2206'. [ 252.798140][T13161] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.820071][T13161] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.836338][T13161] bridge_slave_0: entered allmulticast mode [ 252.852217][T13161] bridge_slave_0: entered promiscuous mode [ 252.919343][T13161] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.933014][T13161] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.952085][T13161] bridge_slave_1: entered allmulticast mode [ 252.965757][T13161] bridge_slave_1: entered promiscuous mode [ 253.042523][T13278] gretap0: vlans aren't supported yet for dev_uc|mc_add() [ 253.116901][T13282] netlink: 'syz.2.2218': attribute type 1 has an invalid length. [ 253.136801][T13285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2217'. [ 253.145633][T13161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.155050][T13285] netlink: 'syz.1.2217': attribute type 12 has an invalid length. [ 253.163138][T13285] netlink: 'syz.1.2217': attribute type 11 has an invalid length. [ 253.257467][T13289] bond15: (slave bridge4): making interface the new active one [ 253.281036][T13289] bond15: (slave bridge4): Enslaving as an active interface with an up link [ 253.318864][T13283] bond15: (slave bridge5): Enslaving as an active interface with a down link [ 253.339459][T13161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.432045][T13161] team0: Port device team_slave_0 added [ 253.511756][T13161] team0: Port device team_slave_1 added [ 253.540144][T13306] netlink: 'syz.4.2224': attribute type 9 has an invalid length. [ 253.580485][ T51] Bluetooth: hci1: command tx timeout [ 253.699118][T13161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.706414][T13161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.736821][T13161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.759867][T13161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.766998][T13161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.815943][T13161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.948846][T13161] hsr_slave_0: entered promiscuous mode [ 253.968470][T13161] hsr_slave_1: entered promiscuous mode [ 253.988209][T13161] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 254.014322][T13161] Cannot create hsr debugfs directory [ 254.034739][T13323] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.076906][T13319] infiniband syz0: set active [ 254.081753][T13319] infiniband syz0: added veth0_virt_wifi [ 254.100171][T13323] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.141105][T13333] sctp: [Deprecated]: syz.2.2230 (pid 13333) Use of int in maxseg socket option. [ 254.141105][T13333] Use struct sctp_assoc_value instead [ 254.185825][T13319] RDS/IB: syz0: added [ 254.195234][T13319] smc: adding ib device syz0 with port count 1 [ 254.220337][T13319] smc: ib device syz0 port 1 has pnetid [ 254.332471][T13342] xt_ecn: cannot match TCP bits for non-tcp packets [ 254.359123][T13343] __nla_validate_parse: 3 callbacks suppressed [ 254.359140][T13343] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2234'. [ 254.384547][T13343] netlink: 'syz.1.2234': attribute type 7 has an invalid length. [ 254.410539][T13341] FAULT_INJECTION: forcing a failure. [ 254.410539][T13341] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.420103][T13343] netlink: 'syz.1.2234': attribute type 8 has an invalid length. [ 254.446200][T13343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2234'. [ 254.456244][T13341] CPU: 0 UID: 0 PID: 13341 Comm: syz.2.2233 Not tainted 6.16.0-rc3-syzkaller-00144-gbd475eeaaf3c #0 PREEMPT(full) [ 254.456269][T13341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 254.456291][T13341] Call Trace: [ 254.456299][T13341] [ 254.456307][T13341] dump_stack_lvl+0x189/0x250 [ 254.456341][T13341] ? __pfx____ratelimit+0x10/0x10 [ 254.456369][T13341] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.456398][T13341] ? __pfx__printk+0x10/0x10 [ 254.456418][T13341] ? __might_fault+0xb0/0x130 [ 254.456448][T13341] should_fail_ex+0x414/0x560 [ 254.456476][T13341] _copy_from_user+0x2d/0xb0 [ 254.456495][T13341] kstrtouint_from_user+0xc4/0x170 [ 254.456523][T13341] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 254.456566][T13341] proc_fail_nth_write+0x88/0x240 [ 254.456588][T13341] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 254.456616][T13341] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 254.456639][T13341] vfs_write+0x27e/0xa90 [ 254.456678][T13341] ? __pfx_vfs_write+0x10/0x10 [ 254.456709][T13341] ? __fget_files+0x2a/0x420 [ 254.456733][T13341] ? __fget_files+0x3a0/0x420 [ 254.456752][T13341] ? __fget_files+0x2a/0x420 [ 254.456781][T13341] ksys_write+0x145/0x250 [ 254.456801][T13341] ? __pfx_ksys_write+0x10/0x10 [ 254.456815][T13341] ? rcu_is_watching+0x15/0xb0 [ 254.456849][T13341] ? do_syscall_64+0xbe/0x3b0 [ 254.456869][T13341] do_syscall_64+0xfa/0x3b0 [ 254.456883][T13341] ? lockdep_hardirqs_on+0x9c/0x150 [ 254.456909][T13341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.456927][T13341] ? clear_bhb_loop+0x60/0xb0 [ 254.456949][T13341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.456967][T13341] RIP: 0033:0x7fea7498d3df [ 254.456983][T13341] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 254.456999][T13341] RSP: 002b:00007fea727f6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 254.457018][T13341] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fea7498d3df [ 254.457037][T13341] RDX: 0000000000000001 RSI: 00007fea727f60a0 RDI: 0000000000000006 [ 254.457048][T13341] RBP: 00007fea727f6090 R08: 0000000000000000 R09: 0000000000000000 [ 254.457059][T13341] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 254.457070][T13341] R13: 0000000000000000 R14: 00007fea74bb6080 R15: 00007fffadeaa798 [ 254.457100][T13341] [ 254.947337][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805ace4400: rx timeout, send abort [ 254.956653][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805ace4400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 255.063636][T13357] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2241'. [ 255.114876][T13359] x_tables: duplicate underflow at hook 2 [ 255.501721][T13161] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 255.520464][T13161] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 255.552209][T13161] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 255.581643][T13161] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 255.589038][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.652924][ T51] Bluetooth: hci1: command tx timeout [ 255.818389][T13161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.838393][T13390] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2247'. [ 255.869505][T13161] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.928922][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.936272][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.991732][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.998973][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.151879][T13161] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 256.242867][ C1] vcan0: j1939_tp_rxtimer: 0xffff888069ff5400: rx timeout, send abort [ 256.251549][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888069ff5400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 256.572015][T13417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2256'. [ 256.682454][T13161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.761503][T13426] netlink: 277 bytes leftover after parsing attributes in process `syz.4.2260'. [ 256.832923][T13161] veth0_vlan: entered promiscuous mode [ 256.876318][T13161] veth1_vlan: entered promiscuous mode [ 256.955856][T13161] veth0_macvtap: entered promiscuous mode [ 257.007251][T13161] veth1_macvtap: entered promiscuous mode [ 257.013652][T13438] netlink: 'syz.1.2263': attribute type 39 has an invalid length. [ 257.105466][T13444] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2264'. [ 257.165407][T13448] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2264'. [ 257.215861][T13161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.228028][T13161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.268051][T13161] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.312759][T13161] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.321497][T13161] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.347977][T13161] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.389247][T13456] pimreg: entered allmulticast mode [ 257.459539][T13456] netlink: 'syz.2.2266': attribute type 1 has an invalid length. [ 257.473962][T13456] netlink: 'syz.2.2266': attribute type 1 has an invalid length. [ 257.714874][ T2956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.732351][ T2956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.741630][ T51] Bluetooth: hci1: command tx timeout [ 257.843844][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.895427][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.069245][T13478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2274'. [ 258.219156][T13486] sctp: [Deprecated]: syz.2.2276 (pid 13486) Use of struct sctp_assoc_value in delayed_ack socket option. [ 258.219156][T13486] Use struct sctp_sack_info instead [ 258.430281][T13492] netlink: 'syz.2.2279': attribute type 11 has an invalid length. [ 258.439924][T13492] netlink: 'syz.2.2279': attribute type 4 has an invalid length. [ 258.447799][T13492] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2279'. [ 258.478560][T13490] netlink: 'syz.1.2278': attribute type 1 has an invalid length. [ 258.571044][T13496] xt_TCPMSS: Only works on TCP SYN packets [ 258.672292][ T37] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.740434][T13501] dvmrp0: entered allmulticast mode [ 258.786289][T13501] dvmrp0: left allmulticast mode [ 258.886219][ T37] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.148677][ T37] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.361313][ T37] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.480414][ T37] bridge_slave_1: left allmulticast mode [ 259.486575][ T37] bridge_slave_1: left promiscuous mode [ 259.492964][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.502119][ T37] bridge_slave_0: left allmulticast mode [ 259.508013][ T37] bridge_slave_0: left promiscuous mode [ 259.514217][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.164597][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.180545][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.191486][ T37] bond0 (unregistering): Released all slaves [ 260.325579][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 260.335939][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 260.344037][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 260.365796][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 260.375717][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 260.490485][T13532] netlink: 'syz.3.2292': attribute type 1 has an invalid length. [ 260.504244][T13535] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 260.512994][T13532] __nla_validate_parse: 2 callbacks suppressed [ 260.513012][T13532] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2292'. [ 260.741597][T13544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2295'. [ 261.096488][T13560] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7 [ 261.589928][T13583] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2306'. [ 261.801535][T13587] openvswitch: netlink: Message has 199 unknown bytes. [ 261.822872][T13587] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.926246][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 261.937107][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 261.945428][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 261.956894][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 261.965088][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 262.270695][T13602] netlink: 'syz.3.2311': attribute type 6 has an invalid length. [ 262.283506][ T37] hsr_slave_0: left promiscuous mode [ 262.293153][ T37] hsr_slave_1: left promiscuous mode [ 262.304954][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.328009][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.342327][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.390527][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.453861][ T5838] Bluetooth: hci1: command tx timeout [ 262.490694][ T37] veth1_macvtap: left promiscuous mode [ 262.510802][ T37] veth0_macvtap: left promiscuous mode [ 262.518038][T13607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2313'. [ 262.539001][ T37] veth1_vlan: left promiscuous mode [ 262.561718][ T37] veth0_vlan: left promiscuous mode [ 262.572112][T13609] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2313'. [ 263.053188][ T37] team0 (unregistering): Port device team_slave_1 removed [ 263.089559][ T37] team0 (unregistering): Port device team_slave_0 removed [ 263.450253][T13608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2313'. [ 263.464198][T13619] gtp1: entered promiscuous mode [ 263.472397][T13619] gtp1: entered allmulticast mode [ 263.584584][T13624] FAULT_INJECTION: forcing a failure. [ 263.584584][T13624] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.597942][T13624] CPU: 0 UID: 0 PID: 13624 Comm: syz.4.2317 Not tainted 6.16.0-rc3-syzkaller-00144-gbd475eeaaf3c #0 PREEMPT(full) [ 263.597967][T13624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 263.597980][T13624] Call Trace: [ 263.597987][T13624] [ 263.597995][T13624] dump_stack_lvl+0x189/0x250 [ 263.598028][T13624] ? __pfx____ratelimit+0x10/0x10 [ 263.598057][T13624] ? __pfx_dump_stack_lvl+0x10/0x10 [ 263.598086][T13624] ? __pfx__printk+0x10/0x10 [ 263.598107][T13624] ? __might_fault+0xb0/0x130 [ 263.598138][T13624] should_fail_ex+0x414/0x560 [ 263.598167][T13624] _copy_from_user+0x2d/0xb0 [ 263.598186][T13624] ___sys_sendmsg+0x158/0x2a0 [ 263.598215][T13624] ? __pfx____sys_sendmsg+0x10/0x10 [ 263.598275][T13624] ? __fget_files+0x2a/0x420 [ 263.598296][T13624] ? __fget_files+0x3a0/0x420 [ 263.598338][T13624] __x64_sys_sendmsg+0x19b/0x260 [ 263.598364][T13624] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 263.598396][T13624] ? __pfx_ksys_write+0x10/0x10 [ 263.598410][T13624] ? rcu_is_watching+0x15/0xb0 [ 263.598443][T13624] ? do_syscall_64+0xbe/0x3b0 [ 263.598463][T13624] do_syscall_64+0xfa/0x3b0 [ 263.598478][T13624] ? lockdep_hardirqs_on+0x9c/0x150 [ 263.598504][T13624] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.598521][T13624] ? clear_bhb_loop+0x60/0xb0 [ 263.598552][T13624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.598570][T13624] RIP: 0033:0x7fcb7bd8e929 [ 263.598585][T13624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.598601][T13624] RSP: 002b:00007fcb79bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 263.598620][T13624] RAX: ffffffffffffffda RBX: 00007fcb7bfb5fa0 RCX: 00007fcb7bd8e929 [ 263.598633][T13624] RDX: 0000000000048050 RSI: 0000200000000200 RDI: 0000000000000004 [ 263.598645][T13624] RBP: 00007fcb79bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 263.598656][T13624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.598667][T13624] R13: 0000000000000000 R14: 00007fcb7bfb5fa0 R15: 00007ffd50e62ad8 [ 263.598696][T13624] [ 263.942135][T13528] chnl_net:caif_netlink_parms(): no params data found [ 263.983823][T13629] netlink: 'syz.3.2319': attribute type 1 has an invalid length. [ 264.052794][ T5838] Bluetooth: hci4: command tx timeout [ 264.085658][T13636] netlink: 252 bytes leftover after parsing attributes in process `syz.3.2321'. [ 264.131399][T13638] Cannot find del_set index 128 as target [ 264.238162][T13528] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.253905][T13528] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.261129][T13528] bridge_slave_0: entered allmulticast mode [ 264.268953][T13528] bridge_slave_0: entered promiscuous mode [ 264.293033][T13528] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.310186][T13528] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.329551][T13528] bridge_slave_1: entered allmulticast mode [ 264.338170][T13528] bridge_slave_1: entered promiscuous mode [ 264.445101][T13649] netlink: 'syz.1.2326': attribute type 29 has an invalid length. [ 264.462728][T13649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2326'. [ 264.532951][ T5838] Bluetooth: hci1: command tx timeout [ 264.570807][T13528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.619602][T13528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.632108][T13660] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2329'. [ 264.738535][T13528] team0: Port device team_slave_0 added [ 264.772558][T13659] bridge4: port 1(veth0_to_bond) entered blocking state [ 264.791890][T13659] bridge4: port 1(veth0_to_bond) entered disabled state [ 264.800392][T13659] veth0_to_bond: entered allmulticast mode [ 264.810801][T13659] veth0_to_bond: entered promiscuous mode [ 264.829201][T13671] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2332'. [ 264.851014][T13660] vlan3: entered allmulticast mode [ 264.857149][T13660] veth1: entered allmulticast mode [ 264.862555][T13660] bridge4: port 2(vlan3) entered blocking state [ 264.886442][T13660] bridge4: port 2(vlan3) entered disabled state [ 264.896591][T13660] vlan3: entered promiscuous mode [ 264.901650][T13660] veth1: entered promiscuous mode [ 264.915756][T13528] team0: Port device team_slave_1 added [ 265.019859][ T37] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.034910][ T37] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 265.070020][T13681] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.165488][ T37] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.176190][ T37] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 265.197971][T13528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.217258][T13528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.251010][T13528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.270015][T13689] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 265.324917][ T37] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.336764][ T37] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 265.351855][T13693] netlink: 'syz.1.2340': attribute type 11 has an invalid length. [ 265.362347][T13528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.370043][T13528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.396100][T13528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.436481][ T37] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.479128][ T37] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 265.667975][T13706] __nla_validate_parse: 2 callbacks suppressed [ 265.667993][T13706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2341'. [ 265.721832][T13528] hsr_slave_0: entered promiscuous mode [ 265.739042][T13528] hsr_slave_1: entered promiscuous mode [ 265.748311][T13528] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 265.759035][T13528] Cannot create hsr debugfs directory [ 265.875432][T13713] gretap0: left promiscuous mode [ 266.133162][ T5838] Bluetooth: hci4: command tx timeout [ 266.395727][T13713] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 266.560729][T13593] chnl_net:caif_netlink_parms(): no params data found [ 266.612789][ T5838] Bluetooth: hci1: command tx timeout [ 266.618336][T13724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2350'. [ 266.808010][ T37] team0: Port device geneve0 removed [ 267.023796][ T37] bond15 (unregistering): (slave bridge4): Releasing active interface [ 267.032026][ T37] bond15 (unregistering): (slave bridge4): the permanent HWaddr of slave - 2e:5b:26:3a:f7:23 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 267.081807][ T37] bond15 (unregistering): (slave bridge5): Releasing active interface [ 267.138178][ T37] bond0 (unregistering): Released all slaves [ 267.224598][ T37] bond1 (unregistering): Released all slaves [ 267.238233][ T37] bond2 (unregistering): Released all slaves [ 267.251948][ T37] bond3 (unregistering): Released all slaves [ 267.267862][ T37] bond4 (unregistering): Released all slaves [ 267.284673][ T37] bond5 (unregistering): Released all slaves [ 267.300671][ T37] bond6 (unregistering): Released all slaves [ 267.319838][ T37] bond7 (unregistering): Released all slaves [ 267.339289][ T37] bond8 (unregistering): Released all slaves [ 267.377094][ T37] bond9 (unregistering): Released all slaves [ 267.391198][ T37] bond10 (unregistering): Released all slaves [ 267.405606][ T37] bond11 (unregistering): Released all slaves [ 267.419310][ T37] bond12 (unregistering): Released all slaves [ 267.432940][ T37] bond13 (unregistering): Released all slaves [ 267.446976][ T37] bond14 (unregistering): Released all slaves [ 267.460773][ T37] bond15 (unregistering): Released all slaves [ 267.862458][T13745] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2355'. [ 268.003744][T13593] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.019890][T13593] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.028067][T13593] bridge_slave_0: entered allmulticast mode [ 268.041937][T13593] bridge_slave_0: entered promiscuous mode [ 268.075990][T13593] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.087070][T13593] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.099578][T13593] bridge_slave_1: entered allmulticast mode [ 268.117732][T13593] bridge_slave_1: entered promiscuous mode [ 268.208530][T13593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.209082][T13768] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2361'. [ 268.232148][ T5838] Bluetooth: hci4: command tx timeout [ 268.252046][T13593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.365843][T13593] team0: Port device team_slave_0 added [ 268.395390][T13593] team0: Port device team_slave_1 added [ 268.421124][T13773] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2363'. [ 268.461426][T13773] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2363'. [ 268.503268][T13593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.511280][T13593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.550236][T13593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.589660][T13777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2364'. [ 268.589958][T13593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.612131][T13593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.643268][T13593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.702968][ T5838] Bluetooth: hci1: command tx timeout [ 268.837022][T13782] veth1: mtu greater than device maximum [ 268.850994][T13593] hsr_slave_0: entered promiscuous mode [ 268.864489][T13593] hsr_slave_1: entered promiscuous mode [ 268.870907][T13593] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 268.881346][T13593] Cannot create hsr debugfs directory [ 268.901839][T13528] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 268.947615][T13528] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 268.967008][T13528] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 268.992530][T13528] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 269.001890][T12512] hid-generic 0005:10CF:05DF.0001: item fetching failed at offset 0/1 [ 269.012907][T12512] hid-generic 0005:10CF:05DF.0001: probe with driver hid-generic failed with error -22 [ 269.158535][ T37] tipc: Disabling bearer [ 269.165932][ T37] tipc: Left network mode [ 269.308112][T13816] netlink: 'syz.4.2374': attribute type 1 has an invalid length. [ 269.327992][T13816] netlink: 15 bytes leftover after parsing attributes in process `syz.4.2374'. [ 269.498545][T13528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.509529][T13824] netlink: zone id is out of range [ 269.526704][T13824] netlink: zone id is out of range [ 269.549155][T13824] netlink: zone id is out of range [ 269.561624][T13824] netlink: zone id is out of range [ 269.571943][T13824] netlink: zone id is out of range [ 269.587989][T13824] netlink: zone id is out of range [ 269.596706][T13824] netlink: zone id is out of range [ 269.602229][T13824] netlink: zone id is out of range [ 269.624408][T13528] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.674863][T13824] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2377'. [ 269.691986][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.699185][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.731172][T13827] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2377'. [ 269.742001][T13830] netlink: 'syz.4.2379': attribute type 1 has an invalid length. [ 269.790764][T13830] netlink: 'syz.4.2379': attribute type 1 has an invalid length. [ 269.818449][T13833] netlink: 'syz.4.2379': attribute type 2 has an invalid length. [ 269.851515][T13833] netlink: 'syz.4.2379': attribute type 1 has an invalid length. [ 269.871106][T13835] siw: device registration error -23 [ 269.880196][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.887380][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.293113][ T5838] Bluetooth: hci4: command tx timeout [ 270.359458][T13593] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 270.387953][ T37] hsr_slave_0: left promiscuous mode [ 270.416971][ T37] hsr_slave_1: left promiscuous mode [ 270.443747][ T37] veth1_macvtap: left promiscuous mode [ 270.449346][ T37] veth0_macvtap: left promiscuous mode [ 270.611291][ T37] pimreg (unregistering): left allmulticast mode [ 271.541747][T13593] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 271.556624][T13593] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 271.658188][T13879] bridge: RTM_NEWNEIGH with invalid ether address [ 271.671070][T13593] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 271.785057][T13891] netlink: 'syz.1.2394': attribute type 1 has an invalid length. [ 271.793067][T13891] netlink: 'syz.1.2394': attribute type 2 has an invalid length. [ 271.815316][T13890] tc_dump_action: action bad kind [ 271.855560][T13894] __nla_validate_parse: 1 callbacks suppressed [ 271.855578][T13894] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2395'. [ 271.871195][T13894] net_ratelimit: 19 callbacks suppressed [ 271.871211][T13894] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 271.903703][T13528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.197256][T13528] veth0_vlan: entered promiscuous mode [ 272.204701][ T37] IPVS: stop unused estimator thread 0... [ 272.245230][T13593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.343376][T13593] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.363628][T13528] veth1_vlan: entered promiscuous mode [ 272.416304][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.423503][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.481497][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.488752][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.614276][T13528] veth0_macvtap: entered promiscuous mode [ 272.665675][T13528] veth1_macvtap: entered promiscuous mode [ 272.723693][T13528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.773012][T13528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.795416][T13929] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 272.816355][T13528] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.831314][T13528] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.837782][T13929] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2401'. [ 272.854261][T13528] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.875700][T13528] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.267367][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.290190][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.373237][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.389884][T13952] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2408'. [ 273.393317][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.402926][T13952] 8021q: VLANs not supported on sit0 [ 273.462378][T13593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.589974][T13593] veth0_vlan: entered promiscuous mode [ 273.600159][T13967] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2410'. [ 273.622457][T13593] veth1_vlan: entered promiscuous mode [ 273.805154][T13977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2412'. [ 273.845771][T13593] veth0_macvtap: entered promiscuous mode [ 273.869236][T13977] netlink: 'syz.3.2412': attribute type 10 has an invalid length. [ 273.869252][T13593] veth1_macvtap: entered promiscuous mode [ 273.996804][T13593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.151751][ T995] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.178234][T13593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.197381][T13593] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.212153][T13593] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.222506][T13593] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.233386][T13593] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.269511][ T995] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.340041][ T995] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.377893][ T8361] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.395682][ T8361] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.420534][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.429075][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.508953][ T995] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.691618][ T995] bridge_slave_1: left allmulticast mode [ 274.697515][ T995] bridge_slave_1: left promiscuous mode [ 274.703801][ T995] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.713804][ T995] bridge_slave_0: left allmulticast mode [ 274.720944][ T995] bridge_slave_0: left promiscuous mode [ 274.727499][ T995] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.060075][ T995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.070978][ T995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.081777][ T995] bond0 (unregistering): Released all slaves [ 275.328317][T13991] netlink: 'syz.3.2417': attribute type 1 has an invalid length. [ 275.359034][T13991] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2417'. [ 275.819880][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 275.833028][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 275.841346][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 275.851197][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 275.858912][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 276.113946][T14011] netlink: 'syz.1.2422': attribute type 13 has an invalid length. [ 276.122105][T14008] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2423'. [ 276.142207][T14011] netlink: 'syz.1.2422': attribute type 58 has an invalid length. [ 276.150367][T14009] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2423'. [ 276.152353][T14011] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2422'. [ 276.199279][ T995] hsr_slave_0: left promiscuous mode [ 276.212588][T14013] netlink: 'syz.1.2422': attribute type 13 has an invalid length. [ 276.233639][ T995] hsr_slave_1: left promiscuous mode [ 276.240424][ T995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.244334][T14013] netlink: 'syz.1.2422': attribute type 58 has an invalid length. [ 276.272782][ T995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.293780][ T995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.295244][T14013] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2422'. [ 276.301180][ T995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.413154][ T995] veth1_macvtap: left promiscuous mode [ 276.418801][ T995] veth0_macvtap: left promiscuous mode [ 276.433716][ T995] veth1_vlan: left promiscuous mode [ 276.439197][ T995] veth0_vlan: left promiscuous mode [ 276.454976][T14018] netlink: 'syz.4.2424': attribute type 10 has an invalid length. [ 276.502034][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 276.511633][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 276.526884][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 276.535590][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 276.548524][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 276.948650][ T995] team0 (unregistering): Port device team_slave_1 removed [ 276.987114][ T995] team0 (unregistering): Port device team_slave_0 removed [ 277.557301][T14031] ieee802154 phy1 wpan1: encryption failed: -22 [ 277.974161][ T5838] Bluetooth: hci1: command tx timeout [ 278.025847][ T995] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.096805][T14051] __nla_validate_parse: 2 callbacks suppressed [ 278.096822][T14051] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2429'. [ 278.441848][T14063] dvmrp0: entered allmulticast mode [ 278.468730][T14063] dvmrp0: left allmulticast mode [ 278.484670][T14063] lo: left allmulticast mode [ 278.564023][T14004] chnl_net:caif_netlink_parms(): no params data found [ 278.601960][T14070] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2434'. [ 278.613644][ T5838] Bluetooth: hci4: command tx timeout [ 278.632638][T14070] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2434'. [ 278.655631][T14027] lo speed is unknown, defaulting to 1000 [ 278.662001][T14069] delete_channel: no stack [ 278.722462][T14027] lo speed is unknown, defaulting to 1000 [ 278.759704][ T995] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.807683][T14027] lo speed is unknown, defaulting to 1000 [ 278.849432][T14027] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 278.892101][ T995] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.907212][T14084] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 278.930420][T14004] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.939236][T14004] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.947652][T14004] bridge_slave_0: entered allmulticast mode [ 278.956325][T14004] bridge_slave_0: entered promiscuous mode [ 278.964949][T14004] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.973040][T14004] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.980301][T14004] bridge_slave_1: entered allmulticast mode [ 278.989491][T14004] bridge_slave_1: entered promiscuous mode [ 279.003226][T14027] lo speed is unknown, defaulting to 1000 [ 279.010962][T14027] lo speed is unknown, defaulting to 1000 [ 279.076361][ T995] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.093064][T14087] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2438'. [ 279.102176][T14027] lo speed is unknown, defaulting to 1000 [ 279.105814][T14004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.120866][T14004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.173833][T14027] lo speed is unknown, defaulting to 1000 [ 279.189437][T14004] team0: Port device team_slave_0 added [ 279.207931][T14027] lo speed is unknown, defaulting to 1000 [ 279.218715][T14004] team0: Port device team_slave_1 added [ 279.255890][T14027] lo speed is unknown, defaulting to 1000 [ 279.333186][T14027] lo speed is unknown, defaulting to 1000 [ 279.335611][T14004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.349995][T14004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.382332][T14004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.400977][T14004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.409607][T14004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.436653][T14004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.460389][T14095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2441'. [ 279.606624][T14004] hsr_slave_0: entered promiscuous mode [ 279.614105][T14004] hsr_slave_1: entered promiscuous mode [ 279.620530][T14004] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 279.628307][T14004] Cannot create hsr debugfs directory [ 279.651628][T14102] dvmrp1: entered allmulticast mode [ 279.688262][T14019] chnl_net:caif_netlink_parms(): no params data found [ 279.729739][ T995] bridge_slave_1: left allmulticast mode [ 279.738122][ T995] bridge_slave_1: left promiscuous mode [ 279.749777][ T995] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.760133][ T995] bridge_slave_0: left allmulticast mode [ 279.766474][ T995] bridge_slave_0: left promiscuous mode [ 279.772234][ T995] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.054676][ T5838] Bluetooth: hci1: command tx timeout [ 280.083464][ T995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.099337][ T995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.110074][ T995] bond0 (unregistering): Released all slaves [ 280.349383][T14120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2450'. [ 280.360666][T14120] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2450'. [ 280.412039][T14120] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2450'. [ 280.612589][T14128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2450'. [ 280.625466][T14019] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.633300][T14019] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.640556][T14019] bridge_slave_0: entered allmulticast mode [ 280.681187][T14019] bridge_slave_0: entered promiscuous mode [ 280.693204][ T5838] Bluetooth: hci4: command tx timeout [ 280.697717][T14130] IPVS: set_ctl: invalid protocol: 22 172.20.20.187:20000 [ 280.768767][T14019] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.786596][T14019] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.807500][T14019] bridge_slave_1: entered allmulticast mode [ 280.833037][T14019] bridge_slave_1: entered promiscuous mode [ 280.992918][T14136] tipc: Started in network mode [ 280.997855][T14136] tipc: Node identity 0ad0abc9a5f4, cluster identity 4711 [ 281.022978][T14136] tipc: Enabled bearer , priority 10 [ 281.052054][T14019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.095339][T14019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.490544][T14019] team0: Port device team_slave_0 added [ 281.540908][T14019] team0: Port device team_slave_1 added [ 281.799292][ T995] hsr_slave_0: left promiscuous mode [ 281.811252][ T995] hsr_slave_1: left promiscuous mode [ 281.822034][ T995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.845008][ T995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.857809][ T995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.872388][ T995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.920872][ T995] veth1_macvtap: left promiscuous mode [ 281.930046][ T995] veth0_macvtap: left promiscuous mode [ 281.937007][ T995] veth1_vlan: left promiscuous mode [ 281.942447][ T995] veth0_vlan: left promiscuous mode [ 282.143137][T12506] tipc: Node number set to 2938416073 [ 282.143645][ T5838] Bluetooth: hci1: command tx timeout [ 282.401127][ T995] team0 (unregistering): Port device team_slave_1 removed [ 282.444587][ T995] team0 (unregistering): Port device team_slave_0 removed [ 282.782849][ T5838] Bluetooth: hci4: command tx timeout [ 282.828446][T14019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.836453][T14019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.864827][T14019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.877561][T14019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.884648][T14019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.910724][T14019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.013309][T14179] netlink: 'syz.4.2463': attribute type 1 has an invalid length. [ 283.074827][T14179] 8021q: adding VLAN 0 to HW filter on device bond3 [ 283.149592][T14179] gretap1: entered promiscuous mode [ 283.177912][T14179] bond3: (slave gretap1): making interface the new active one [ 283.188430][T14179] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 283.258053][T14181] macvlan2: entered promiscuous mode [ 283.264316][T14181] macvlan2: entered allmulticast mode [ 283.271423][T14181] bond3: entered promiscuous mode [ 283.278076][T14181] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 283.286209][T14181] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 283.302703][T14181] bond3: left promiscuous mode [ 283.345549][T14019] hsr_slave_0: entered promiscuous mode [ 283.352456][T14019] hsr_slave_1: entered promiscuous mode [ 283.365187][T14019] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 283.377400][T14019] Cannot create hsr debugfs directory [ 283.620585][T14004] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 283.662831][T14004] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 283.672100][T14203] netlink: 'syz.3.2469': attribute type 21 has an invalid length. [ 283.680161][T14202] netlink: 'syz.3.2469': attribute type 21 has an invalid length. [ 283.691358][T14202] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2469'. [ 283.695619][T14004] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 283.707783][T14203] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2469'. [ 283.745689][T14203] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2469'. [ 283.755483][T14202] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2469'. [ 283.775807][T14004] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 283.931053][T14219] netlink: 'syz.4.2471': attribute type 4 has an invalid length. [ 283.976883][T14219] netlink: 'syz.4.2471': attribute type 4 has an invalid length. [ 284.031582][T14219] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2471'. [ 284.050110][T14004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.092500][T14004] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.164223][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.171369][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.201283][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.208458][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.216507][ T5838] Bluetooth: hci1: command tx timeout [ 284.359298][T14229] can: request_module (can-proto-0) failed. [ 284.438107][T14019] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 284.461892][T14019] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 284.489384][T14019] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 284.519465][T14019] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 284.527001][T14238] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2478'. [ 284.557910][T14238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2478'. [ 284.808593][T14019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.855689][ T5838] Bluetooth: hci4: command tx timeout [ 284.888520][T14019] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.918096][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.925335][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.938928][T14259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2483'. [ 284.957897][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.965195][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.075434][T14004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.230959][T14004] veth0_vlan: entered promiscuous mode [ 285.263935][T14004] veth1_vlan: entered promiscuous mode [ 285.359692][T14004] veth0_macvtap: entered promiscuous mode [ 285.426573][T14004] veth1_macvtap: entered promiscuous mode [ 285.535870][T14004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.591990][T14004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.617158][T14004] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.652705][T14004] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.661458][T14004] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.713055][T14004] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.861024][T14291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2491'. [ 285.870296][T14019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.922113][T14292] netlink: 'syz.1.2492': attribute type 2 has an invalid length. [ 285.935993][T14293] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2493'. [ 285.961515][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.985515][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.048862][ T995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.070131][ T995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.127494][T14019] veth0_vlan: entered promiscuous mode [ 286.167122][T14019] veth1_vlan: entered promiscuous mode [ 286.360197][T14019] veth0_macvtap: entered promiscuous mode [ 286.390215][T14019] veth1_macvtap: entered promiscuous mode [ 286.442424][T14019] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.474167][T14019] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.509076][T14019] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.522670][T14019] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.540406][T14019] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.550106][T14019] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.766140][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.794666][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.876988][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.887404][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.169118][T14329] netlink: 'syz.1.2508': attribute type 30 has an invalid length. [ 287.244009][ T78] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.309591][T14337] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 287.718334][ T78] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.019458][ T78] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.067331][T14354] netlink: 'syz.3.2514': attribute type 2 has an invalid length. [ 288.214936][ T78] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.503718][ T78] bridge_slave_1: left allmulticast mode [ 288.509470][ T78] bridge_slave_1: left promiscuous mode [ 288.522900][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.544886][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 288.553707][ T78] bridge_slave_0: left allmulticast mode [ 288.560748][ T5150] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 288.567903][ T78] bridge_slave_0: left promiscuous mode [ 288.574081][ T5150] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 288.578768][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.589751][ T5150] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 288.590280][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 288.606102][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 288.614565][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 288.617867][ T5150] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 288.624865][T14366] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 288.630520][ T5150] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 288.643701][ T5150] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 289.207053][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.218357][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.228876][ T78] bond0 (unregistering): Released all slaves [ 289.249106][T14374] 8021q: VLANs not supported on ip_vti0 [ 289.489793][T14381] netlink: 'syz.3.2523': attribute type 64 has an invalid length. [ 289.498573][T14381] __nla_validate_parse: 6 callbacks suppressed [ 289.498588][T14381] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2523'. [ 289.534212][T14382] sctp: [Deprecated]: syz.4.2524 (pid 14382) Use of struct sctp_assoc_value in delayed_ack socket option. [ 289.534212][T14382] Use struct sctp_sack_info instead [ 289.588621][T14386] sctp: [Deprecated]: syz.4.2524 (pid 14386) Use of struct sctp_assoc_value in delayed_ack socket option. [ 289.588621][T14386] Use struct sctp_sack_info instead [ 289.788521][T14391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2526'. [ 290.132251][T14401] netlink: 'syz.1.2529': attribute type 2 has an invalid length. [ 290.231326][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 290.241113][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 290.249474][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 290.258577][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 290.268000][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 290.363310][T14408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2531'. [ 290.465608][T14410] netlink: 'syz.1.2532': attribute type 33 has an invalid length. [ 290.614760][T14416] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2535'. [ 290.692880][ T51] Bluetooth: hci4: command tx timeout [ 290.800174][T14367] lo speed is unknown, defaulting to 1000 [ 290.905520][T14422] netlink: 'syz.1.2538': attribute type 10 has an invalid length. [ 290.929751][T12510] IPVS: starting estimator thread 0... [ 291.014991][T14425] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2540'. [ 291.047062][T14426] IPVS: using max 26 ests per chain, 62400 per kthread [ 291.248708][ T78] hsr_slave_0: left promiscuous mode [ 291.276044][ T78] hsr_slave_1: left promiscuous mode [ 291.282128][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.291904][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.301152][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.322884][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.370137][ T78] veth1_macvtap: left promiscuous mode [ 291.392782][ T78] veth0_macvtap: left promiscuous mode [ 291.398651][ T78] veth1_vlan: left promiscuous mode [ 291.404115][ T78] veth0_vlan: left promiscuous mode [ 291.418281][T14448] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2546'. [ 291.868777][ T78] team0 (unregistering): Port device team_slave_1 removed [ 291.908761][ T78] team0 (unregistering): Port device team_slave_0 removed [ 292.372844][ T51] Bluetooth: hci1: command tx timeout [ 292.736707][T14465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2552'. [ 292.770280][T14403] lo speed is unknown, defaulting to 1000 [ 292.777730][ T51] Bluetooth: hci4: command tx timeout [ 292.930019][T14367] chnl_net:caif_netlink_parms(): no params data found [ 293.029685][T14480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2555'. [ 293.250824][T14367] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.272858][T14367] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.280147][T14367] bridge_slave_0: entered allmulticast mode [ 293.310973][T14367] bridge_slave_0: entered promiscuous mode [ 293.326755][T14493] netlink: zone id is out of range [ 293.331927][T14493] netlink: zone id is out of range [ 293.361051][T14493] netlink: zone id is out of range [ 293.368242][T14493] netlink: zone id is out of range [ 293.382098][T14367] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.391480][T14367] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.406233][T14493] netlink: zone id is out of range [ 293.411823][T14493] netlink: zone id is out of range [ 293.421348][T14367] bridge_slave_1: entered allmulticast mode [ 293.428986][T14493] netlink: zone id is out of range [ 293.441030][T14493] netlink: zone id is out of range [ 293.448724][T14367] bridge_slave_1: entered promiscuous mode [ 293.457994][T14493] netlink: zone id is out of range [ 293.485121][T14493] netlink: zone id is out of range [ 293.535273][ T78] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.626058][T14367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.722145][ T78] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.748835][T14367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.909507][ T78] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.973414][T14367] team0: Port device team_slave_0 added [ 293.989242][T14403] chnl_net:caif_netlink_parms(): no params data found [ 294.055738][ T78] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.079549][T14367] team0: Port device team_slave_1 added [ 294.124066][T14529] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2568'. [ 294.180645][T14519] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2567'. [ 294.215782][T14524] can: request_module (can-proto-0) failed. [ 294.333467][T14367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.352038][T14367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.388903][T14367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.403659][T14367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.412867][T14367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.452836][ T51] Bluetooth: hci1: command tx timeout [ 294.493476][T14367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.575879][T14403] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.584822][T14403] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.592621][T14403] bridge_slave_0: entered allmulticast mode [ 294.601352][T14403] bridge_slave_0: entered promiscuous mode [ 294.610741][T14555] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2574'. [ 294.712016][T14403] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.731302][T14403] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.739312][T14403] bridge_slave_1: entered allmulticast mode [ 294.747953][T14403] bridge_slave_1: entered promiscuous mode [ 294.844086][T14403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.853489][ T51] Bluetooth: hci4: command tx timeout [ 294.881818][T14367] hsr_slave_0: entered promiscuous mode [ 294.889370][T14367] hsr_slave_1: entered promiscuous mode [ 294.896382][T14367] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 294.906967][T14367] Cannot create hsr debugfs directory [ 294.915357][T14403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.940233][T14564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2579'. [ 295.044935][T14403] team0: Port device team_slave_0 added [ 295.075259][T14403] team0: Port device team_slave_1 added [ 295.113682][T14568] netlink: 'syz.1.2581': attribute type 11 has an invalid length. [ 295.124223][T14568] netlink: 'syz.1.2581': attribute type 11 has an invalid length. [ 295.144233][T14568] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2581'. [ 295.177284][ T78] bridge_slave_1: left allmulticast mode [ 295.197226][ T78] bridge_slave_1: left promiscuous mode [ 295.215960][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.248846][ T78] bridge_slave_0: left allmulticast mode [ 295.262722][ T78] bridge_slave_0: left promiscuous mode [ 295.271302][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.789186][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 295.802739][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 295.821436][ T78] bond0 (unregistering): Released all slaves [ 295.850096][T14403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.857436][T14403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.889426][T14403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.952449][T14403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.971127][T14403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.999895][T14403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.147736][T14591] macvlan0: entered promiscuous mode [ 296.153288][T14591] macvlan0: entered allmulticast mode [ 296.416077][T14403] hsr_slave_0: entered promiscuous mode [ 296.435372][T14403] hsr_slave_1: entered promiscuous mode [ 296.457366][T14403] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 296.478825][T14403] Cannot create hsr debugfs directory [ 296.521993][T14597] veth0: entered promiscuous mode [ 296.533234][ T51] Bluetooth: hci1: command tx timeout [ 296.829700][T14596] veth0: left promiscuous mode [ 296.938894][ T51] Bluetooth: hci4: command tx timeout [ 296.997890][T14629] SET target dimension over the limit! [ 297.209128][T14627] xfrm0: entered promiscuous mode [ 297.214416][T14627] xfrm0: entered allmulticast mode [ 297.341403][ T78] hsr_slave_0: left promiscuous mode [ 297.349248][ T78] hsr_slave_1: left promiscuous mode [ 297.363917][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.371522][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.387240][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.397954][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.419896][ T78] veth1_macvtap: left promiscuous mode [ 297.425592][ T78] veth0_macvtap: left promiscuous mode [ 297.431189][ T78] veth1_vlan: left promiscuous mode [ 297.436532][ T78] veth0_vlan: left promiscuous mode [ 297.515184][T14657] netlink: 'syz.3.2605': attribute type 4 has an invalid length. [ 297.901559][ T78] team0 (unregistering): Port device team_slave_1 removed [ 297.939687][ T78] team0 (unregistering): Port device team_slave_0 removed [ 298.508821][T14667] net_ratelimit: 15 callbacks suppressed [ 298.508838][T14667] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 298.509932][T10255] lo speed is unknown, defaulting to 1000 [ 298.523761][T14669] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 298.553022][T10255] syz2: Port: 1 Link ACTIVE [ 298.613989][ T51] Bluetooth: hci1: command tx timeout [ 298.811387][T14681] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2613'. [ 298.838785][T14681] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2613'. [ 298.866723][T14367] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 298.895911][T14367] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 299.009243][T14367] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 299.020832][T14367] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 299.308807][T14367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.394860][T14367] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.437250][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.444608][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.501395][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.508623][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.617343][T14403] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 299.680899][T14403] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 299.723034][T14715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2622'. [ 299.740985][T14403] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 299.777842][T14403] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 299.953503][T14744] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.093357][T14403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.154569][T14403] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.188677][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.195909][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.234421][T14367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.248362][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.255594][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.389361][T14367] veth0_vlan: entered promiscuous mode [ 300.435808][T14367] veth1_vlan: entered promiscuous mode [ 300.510216][T14367] veth0_macvtap: entered promiscuous mode [ 300.552711][T14367] veth1_macvtap: entered promiscuous mode [ 300.627016][T14367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.658545][T14367] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.701837][T14367] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.751527][T14367] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.782716][T14367] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.791465][T14367] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.090641][T14403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.128136][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.155047][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.252738][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.269769][T14403] veth0_vlan: entered promiscuous mode [ 301.277778][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.306822][T14793] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2642'. [ 301.320192][T14403] veth1_vlan: entered promiscuous mode [ 301.365003][T14793] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2642'. [ 301.477613][T14403] veth0_macvtap: entered promiscuous mode [ 301.569923][T14403] veth1_macvtap: entered promiscuous mode [ 301.570002][T14803] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2647'. [ 301.669400][T14403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.680687][T14812] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2646'. [ 301.706125][T14808] sit0: entered promiscuous mode [ 301.731191][T14808] netlink: 'syz.3.2646': attribute type 1 has an invalid length. [ 301.745164][T14808] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2646'. [ 301.771948][T14403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.796140][T14403] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.805296][T14403] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.822979][T14403] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.844354][T14403] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.050140][ T8361] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.137268][ T995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.148810][ T995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.198360][ T995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.207117][ T995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.285470][ T8361] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.659938][ T8361] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.718998][ T8361] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.824413][ T8361] bridge_slave_1: left allmulticast mode [ 302.830111][ T8361] bridge_slave_1: left promiscuous mode [ 302.836095][ T8361] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.845469][ T8361] bridge_slave_0: left allmulticast mode [ 302.851123][ T8361] bridge_slave_0: left promiscuous mode [ 302.858606][ T8361] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.163663][ T8361] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 303.180281][ T8361] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 303.191126][ T8361] bond0 (unregistering): Released all slaves [ 303.819826][ T5150] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 303.829895][ T5150] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 303.845862][ T5150] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 303.854475][ T5150] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 303.863125][ T5150] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 303.926682][ T8361] hsr_slave_0: left promiscuous mode [ 303.932551][ T8361] hsr_slave_1: left promiscuous mode [ 303.941893][ T8361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.949378][ T8361] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.987906][ T8361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.002989][ T8361] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.021543][T14836] netlink: 'syz.4.2653': attribute type 1 has an invalid length. [ 304.050017][ T8361] veth1_macvtap: left promiscuous mode [ 304.055964][ T8361] veth0_macvtap: left promiscuous mode [ 304.061726][ T8361] veth1_vlan: left promiscuous mode [ 304.067447][ T8361] veth0_vlan: left promiscuous mode [ 304.167382][T14842] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2653'. [ 304.439244][ T5150] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 304.458814][ T5150] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 304.470234][ T5150] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 304.488024][ T5150] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 304.498541][ T5150] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 304.633054][ T8361] team0 (unregistering): Port device team_slave_1 removed [ 304.669680][ T8361] team0 (unregistering): Port device team_slave_0 removed [ 305.032396][T14839] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 305.046826][T14843] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 305.257434][T14853] x_tables: unsorted entry at hook 2 [ 305.423724][T14861] netlink: 'syz.1.2660': attribute type 83 has an invalid length. [ 305.604286][T14870] ipvlan0: entered promiscuous mode [ 305.623533][T14870] ipvlan0: entered allmulticast mode [ 305.628878][T14870] veth0_vlan: entered allmulticast mode [ 305.684969][T14870] tipc: Resetting bearer [ 305.896211][ T8361] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.951277][T14880] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2665'. [ 305.974386][ T5150] Bluetooth: hci1: command tx timeout [ 306.036102][ T8361] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.119070][T14886] team0: Port device geneve0 removed [ 306.126682][T14886] batman_adv: batadv0: Removing interface: netdevsim0 [ 306.157479][T14886] bond3: (slave gretap1): Releasing active interface [ 306.222296][ T8361] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.242420][T14827] lo speed is unknown, defaulting to 1000 [ 306.319226][T14891] netlink: 'syz.3.2669': attribute type 39 has an invalid length. [ 306.321954][ T8361] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.409270][T14895] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2670'. [ 306.532877][ T5150] Bluetooth: hci4: command tx timeout [ 306.552396][T14899] veth0_virt_wifi: renamed from veth0_macvtap (while UP) [ 306.607073][T10255] syz1: Port: 1 Link DOWN [ 306.641613][ T8361] bridge_slave_1: left allmulticast mode [ 306.650571][T14902] netlink: 'syz.4.2672': attribute type 1 has an invalid length. [ 306.658460][ T8361] bridge_slave_1: left promiscuous mode [ 306.664822][ T8361] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.718482][ T8361] bridge_slave_0: left allmulticast mode [ 306.733469][ T8361] bridge_slave_0: left promiscuous mode [ 306.739261][ T8361] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.167640][ T8361] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 307.186453][ T8361] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.204953][ T8361] bond0 (unregistering): Released all slaves [ 307.332089][T14844] lo speed is unknown, defaulting to 1000 [ 307.503226][T14827] chnl_net:caif_netlink_parms(): no params data found [ 307.788033][T14945] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.826468][T14947] team_slave_0: mtu less than device minimum [ 307.947376][T14954] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2688'. [ 307.968736][T14827] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.978672][T14827] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.987716][T14827] bridge_slave_0: entered allmulticast mode [ 307.995772][T14827] bridge_slave_0: entered promiscuous mode [ 308.007659][T14827] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.015246][T14827] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.022448][T14827] bridge_slave_1: entered allmulticast mode [ 308.029683][T14827] bridge_slave_1: entered promiscuous mode [ 308.056469][ T5150] Bluetooth: hci1: command tx timeout [ 308.068290][T14957] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2689'. [ 308.197550][T14827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.260336][T14827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.463846][T14827] team0: Port device team_slave_0 added [ 308.481075][T14827] team0: Port device team_slave_1 added [ 308.502087][T14971] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2694'. [ 308.613088][ T5150] Bluetooth: hci4: command tx timeout [ 308.673417][T14827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.680413][T14827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.740926][T14827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.791485][T14980] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 308.839190][ T8361] hsr_slave_0: left promiscuous mode [ 308.853781][ T8361] hsr_slave_1: left promiscuous mode [ 308.859744][ T8361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.883071][ T8361] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.893643][ T8361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.901494][ T8361] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.937971][ T8361] veth1_macvtap: left promiscuous mode [ 308.944144][ T8361] veth0_macvtap: left promiscuous mode [ 308.949754][ T8361] veth1_vlan: left promiscuous mode [ 308.955480][ T8361] veth0_vlan: left promiscuous mode [ 309.391817][ T8361] team0 (unregistering): Port device team_slave_1 removed [ 309.430496][ T8361] team0 (unregistering): Port device team_slave_0 removed [ 309.793210][T14827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.800268][T14827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.836524][T14827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.869023][T14988] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2700'. [ 309.882997][T14991] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2700'. [ 309.892256][T14991] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2700'. [ 309.990553][T14998] siw: device registration error -23 [ 310.037024][T14844] chnl_net:caif_netlink_parms(): no params data found [ 310.088513][T14827] hsr_slave_0: entered promiscuous mode [ 310.107988][T14827] hsr_slave_1: entered promiscuous mode [ 310.117394][T14827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 310.125741][T14827] Cannot create hsr debugfs directory [ 310.138615][ T5150] Bluetooth: hci1: command tx timeout [ 310.299872][T15012] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2706'. [ 310.393386][T14844] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.408195][T14844] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.411844][T15016] netlink: 'syz.4.2707': attribute type 21 has an invalid length. [ 310.416986][T14844] bridge_slave_0: entered allmulticast mode [ 310.431783][T14844] bridge_slave_0: entered promiscuous mode [ 310.460230][T14844] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.467828][T14844] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.480423][T14844] bridge_slave_1: entered allmulticast mode [ 310.488633][T14844] bridge_slave_1: entered promiscuous mode [ 310.524501][T15020] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2708'. [ 310.564641][T14844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.577831][T14844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.650685][T15022] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 310.693521][T14844] team0: Port device team_slave_0 added [ 310.698375][ T5150] Bluetooth: hci4: command tx timeout [ 310.723741][T14844] team0: Port device team_slave_1 added [ 310.796169][T14844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.809720][T14844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.836418][T14844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.856284][T14844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.864528][T14844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.891628][T14844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.068543][T15028] bridge_slave_0: entered promiscuous mode [ 311.109838][T14844] hsr_slave_0: entered promiscuous mode [ 311.134498][T14844] hsr_slave_1: entered promiscuous mode [ 311.161413][T14844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 311.164797][T15041] sctp: [Deprecated]: syz.4.2714 (pid 15041) Use of int in max_burst socket option deprecated. [ 311.164797][T15041] Use struct sctp_assoc_value instead [ 311.186301][T14844] Cannot create hsr debugfs directory [ 311.224843][T15042] __nla_validate_parse: 3 callbacks suppressed [ 311.224861][T15042] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2714'. [ 311.436798][T14827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 311.485706][T14827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 311.501964][T14827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 311.543565][T14827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 311.711561][T15065] netlink: 'syz.3.2720': attribute type 1 has an invalid length. [ 311.798204][T15067] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2721'. [ 311.826460][T14827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.896340][T15036] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 311.907678][T14827] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.938914][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.946125][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.977526][T15073] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2722'. [ 312.000733][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.007906][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.026529][T15072] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2722'. [ 312.046723][T15076] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2722'. [ 312.199001][T15083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2726'. [ 312.212976][ T5150] Bluetooth: hci1: command tx timeout [ 312.270854][T15088] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 312.355639][T14844] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 312.524343][T14844] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 312.548522][T14844] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 312.585448][T14844] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 312.697921][T15106] ieee802154 phy1 wpan1: encryption failed: -22 [ 312.773167][ T5150] Bluetooth: hci4: command tx timeout [ 312.775324][T14844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.815170][T14844] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.877975][T14827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.905474][ T8361] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.912702][ T8361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.935062][ T8361] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.942239][ T8361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.050749][T15123] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2737'. [ 313.067949][T15120] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2737'. [ 313.117491][T15120] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2737'. [ 313.163747][T14827] veth0_vlan: entered promiscuous mode [ 313.173369][ T5150] Bluetooth: hci2: command 0x0406 tx timeout [ 313.226128][T14827] veth1_vlan: entered promiscuous mode [ 313.267742][T15132] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2740'. [ 313.368448][T14827] veth0_macvtap: entered promiscuous mode [ 313.407890][T14827] veth1_macvtap: entered promiscuous mode [ 313.492117][T14827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.542444][T14827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.584472][T14827] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.602693][T14827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.619353][T14827] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.632876][T14827] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.760513][T14844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.856396][T15155] netlink: 'syz.4.2746': attribute type 2 has an invalid length. [ 313.873505][T15155] netlink: 'syz.4.2746': attribute type 1 has an invalid length. [ 313.937471][ T995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.961607][ T995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.027304][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.041090][T14844] veth0_vlan: entered promiscuous mode [ 314.051416][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.094909][T14844] veth1_vlan: entered promiscuous mode [ 314.181247][T14844] veth0_macvtap: entered promiscuous mode [ 314.219578][T14844] veth1_macvtap: entered promiscuous mode [ 314.339628][T14844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.359216][T14844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.411043][T14844] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.423212][T14844] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.432027][T14844] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.441375][T14844] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.631392][ T995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.647189][ T995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.725173][ T8361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.750816][ T8361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.855268][ T5150] Bluetooth: hci4: command tx timeout [ 314.887924][ T78] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.924079][T15197] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 314.971391][T15196] xfrm0: entered promiscuous mode [ 314.980423][T15196] xfrm0: entered allmulticast mode [ 315.007374][T15197] netem: unknown loss type 0 [ 315.018660][T15197] netem: change failed [ 315.201135][ T78] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.273699][ T78] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.579813][ T78] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.724611][ T78] bridge_slave_1: left allmulticast mode [ 315.730310][ T78] bridge_slave_1: left promiscuous mode [ 315.737932][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.754159][ T78] bridge_slave_0: left allmulticast mode [ 315.759832][ T78] bridge_slave_0: left promiscuous mode [ 315.779701][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.236783][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.248660][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.265424][ T78] bond0 (unregistering): Released all slaves [ 316.280243][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 316.290258][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 316.298815][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 316.308604][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 316.319351][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 316.333629][T15206] __nla_validate_parse: 20 callbacks suppressed [ 316.333646][T15206] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2763'. [ 316.363407][T15205] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2763'. [ 316.384512][T15207] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2763'. [ 316.670596][T15216] netlink: 'syz.1.2766': attribute type 2 has an invalid length. [ 316.878656][T15221] [ 316.881042][T15221] ====================================================== [ 316.888086][T15221] WARNING: possible circular locking dependency detected [ 316.895148][T15221] 6.16.0-rc3-syzkaller-00144-gbd475eeaaf3c #0 Not tainted [ 316.902281][T15221] ------------------------------------------------------ [ 316.909311][T15221] syz.1.2767/15221 is trying to acquire lock: [ 316.915395][T15221] ffffffff8f6689b8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720 [ 316.924950][T15221] [ 316.924950][T15221] but task is already holding lock: [ 316.932364][T15221] ffffffff8f668958 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 316.941987][T15221] [ 316.941987][T15221] which lock already depends on the new lock. [ 316.941987][T15221] [ 316.952394][T15221] [ 316.952394][T15221] the existing dependency chain (in reverse order) is: [ 316.961419][T15221] [ 316.961419][T15221] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 316.969341][T15221] lock_acquire+0x120/0x360 [ 316.974387][T15221] _raw_spin_lock_bh+0x36/0x50 [ 316.979678][T15221] nr_rt_ioctl+0x390/0xd50 [ 316.984623][T15221] sock_do_ioctl+0xdc/0x300 [ 316.989673][T15221] sock_ioctl+0x576/0x790 [ 316.994533][T15221] __se_sys_ioctl+0xf9/0x170 [ 316.999653][T15221] do_syscall_64+0xfa/0x3b0 [ 317.004684][T15221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.011100][T15221] [ 317.011100][T15221] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 317.019096][T15221] lock_acquire+0x120/0x360 [ 317.024131][T15221] _raw_spin_lock_bh+0x36/0x50 [ 317.029420][T15221] nr_rt_ioctl+0x193/0xd50 [ 317.034367][T15221] sock_do_ioctl+0xdc/0x300 [ 317.039436][T15221] sock_ioctl+0x576/0x790 [ 317.044315][T15221] __se_sys_ioctl+0xf9/0x170 [ 317.049451][T15221] do_syscall_64+0xfa/0x3b0 [ 317.054483][T15221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.060900][T15221] [ 317.060900][T15221] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 317.068742][T15221] validate_chain+0xb9b/0x2140 [ 317.074042][T15221] __lock_acquire+0xab9/0xd20 [ 317.079262][T15221] lock_acquire+0x120/0x360 [ 317.084310][T15221] _raw_spin_lock_bh+0x36/0x50 [ 317.089611][T15221] nr_rt_device_down+0xa9/0x720 [ 317.095021][T15221] nr_device_event+0x137/0x150 [ 317.100348][T15221] notifier_call_chain+0x1b3/0x3e0 [ 317.106016][T15221] __dev_notify_flags+0x18d/0x2e0 [ 317.111597][T15221] netif_change_flags+0xe8/0x1a0 [ 317.117075][T15221] dev_change_flags+0x130/0x260 [ 317.122466][T15221] dev_ioctl+0x7b4/0x1150 [ 317.127326][T15221] sock_do_ioctl+0x22c/0x300 [ 317.132454][T15221] sock_ioctl+0x576/0x790 [ 317.137319][T15221] __se_sys_ioctl+0xf9/0x170 [ 317.142452][T15221] do_syscall_64+0xfa/0x3b0 [ 317.147486][T15221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.153939][T15221] [ 317.153939][T15221] other info that might help us debug this: [ 317.153939][T15221] [ 317.164173][T15221] Chain exists of: [ 317.164173][T15221] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 317.164173][T15221] [ 317.178007][T15221] Possible unsafe locking scenario: [ 317.178007][T15221] [ 317.185467][T15221] CPU0 CPU1 [ 317.190837][T15221] ---- ---- [ 317.196213][T15221] lock(nr_neigh_list_lock); [ 317.200901][T15221] lock(&nr_node->node_lock); [ 317.208192][T15221] lock(nr_neigh_list_lock); [ 317.215404][T15221] lock(nr_node_list_lock); [ 317.220005][T15221] [ 317.220005][T15221] *** DEADLOCK *** [ 317.220005][T15221] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 317.228147][T15221] 2 locks held by syz.1.2767/15221: [ 317.233341][T15221] #0: ffffffff8f50ff48 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 317.242137][T15221] #1: ffffffff8f668958 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 317.252240][T15221] [ 317.252240][T15221] stack backtrace: [ 317.258127][T15221] CPU: 1 UID: 0 PID: 15221 Comm: syz.1.2767 Not tainted 6.16.0-rc3-syzkaller-00144-gbd475eeaaf3c #0 PREEMPT(full) [ 317.258149][T15221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 317.258158][T15221] Call Trace: [ 317.258164][T15221] [ 317.258171][T15221] dump_stack_lvl+0x189/0x250 [ 317.258198][T15221] ? __pfx_dump_stack_lvl+0x10/0x10 [ 317.258222][T15221] ? __pfx__printk+0x10/0x10 [ 317.258239][T15221] ? print_lock_name+0xde/0x100 [ 317.258256][T15221] print_circular_bug+0x2ee/0x310 [ 317.258273][T15221] check_noncircular+0x134/0x160 [ 317.258290][T15221] validate_chain+0xb9b/0x2140 [ 317.258312][T15221] __lock_acquire+0xab9/0xd20 [ 317.258336][T15221] ? nr_rt_device_down+0xa9/0x720 [ 317.258357][T15221] lock_acquire+0x120/0x360 [ 317.258376][T15221] ? nr_rt_device_down+0xa9/0x720 [ 317.258403][T15221] ? nr_rt_device_down+0xa9/0x720 [ 317.258424][T15221] _raw_spin_lock_bh+0x36/0x50 [ 317.258443][T15221] ? nr_rt_device_down+0xa9/0x720 [ 317.258465][T15221] nr_rt_device_down+0xa9/0x720 [ 317.258487][T15221] ? do_raw_spin_unlock+0x122/0x240 [ 317.258506][T15221] nr_device_event+0x137/0x150 [ 317.258527][T15221] notifier_call_chain+0x1b3/0x3e0 [ 317.258554][T15221] __dev_notify_flags+0x18d/0x2e0 [ 317.258572][T15221] ? __pfx___dev_notify_flags+0x10/0x10 [ 317.258588][T15221] ? __dev_change_flags+0x4cc/0x6d0 [ 317.258607][T15221] ? __pfx___dev_change_flags+0x10/0x10 [ 317.258622][T15221] ? dev_ioctl+0x7a4/0x1150 [ 317.258635][T15221] ? full_name_hash+0x92/0xe0 [ 317.258656][T15221] netif_change_flags+0xe8/0x1a0 [ 317.258675][T15221] dev_change_flags+0x130/0x260 [ 317.258692][T15221] dev_ioctl+0x7b4/0x1150 [ 317.258707][T15221] sock_do_ioctl+0x22c/0x300 [ 317.258730][T15221] ? __pfx_sock_do_ioctl+0x10/0x10 [ 317.258756][T15221] ? __lock_acquire+0xab9/0xd20 [ 317.258782][T15221] sock_ioctl+0x576/0x790 [ 317.258809][T15221] ? __pfx_sock_ioctl+0x10/0x10 [ 317.258829][T15221] ? __fget_files+0x2a/0x420 [ 317.258844][T15221] ? __fget_files+0x3a0/0x420 [ 317.258860][T15221] ? __fget_files+0x2a/0x420 [ 317.258877][T15221] ? bpf_lsm_file_ioctl+0x9/0x20 [ 317.258899][T15221] ? __pfx_sock_ioctl+0x10/0x10 [ 317.258918][T15221] __se_sys_ioctl+0xf9/0x170 [ 317.258940][T15221] do_syscall_64+0xfa/0x3b0 [ 317.258953][T15221] ? lockdep_hardirqs_on+0x9c/0x150 [ 317.258973][T15221] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.258988][T15221] ? clear_bhb_loop+0x60/0xb0 [ 317.259004][T15221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.259018][T15221] RIP: 0033:0x7fe06578e929 [ 317.259032][T15221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.259046][T15221] RSP: 002b:00007fe066665038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 317.259062][T15221] RAX: ffffffffffffffda RBX: 00007fe0659b6080 RCX: 00007fe06578e929 [ 317.259073][T15221] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000009 [ 317.259083][T15221] RBP: 00007fe065810b39 R08: 0000000000000000 R09: 0000000000000000 [ 317.259093][T15221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.259102][T15221] R13: 0000000000000000 R14: 00007fe0659b6080 R15: 00007ffcb081ad18 [ 317.259119][T15221] [ 317.593105][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.670291][T15210] syz-executor: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 317.737257][T15208] lo speed is unknown, defaulting to 1000 [ 317.789711][T15210] CPU: 0 UID: 0 PID: 15210 Comm: syz-executor Not tainted 6.16.0-rc3-syzkaller-00144-gbd475eeaaf3c #0 PREEMPT(full) [ 317.789741][T15210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 317.789754][T15210] Call Trace: [ 317.789761][T15210] [ 317.789769][T15210] dump_stack_lvl+0x189/0x250 [ 317.789805][T15210] ? __pfx_dump_stack_lvl+0x10/0x10 [ 317.789834][T15210] ? __pfx__printk+0x10/0x10 [ 317.789853][T15210] ? lock_release+0x4b/0x3e0 [ 317.789880][T15210] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 317.789902][T15210] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 317.789924][T15210] warn_alloc+0x214/0x310 [ 317.789948][T15210] ? __pfx_warn_alloc+0x10/0x10 [ 317.789974][T15210] ? __get_vm_area_node+0x28f/0x300 [ 317.789999][T15210] ? kcov_ioctl+0x55/0x640 [ 317.790024][T15210] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 317.790060][T15210] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 317.790084][T15210] ? __pfx_kcov_ioctl+0x10/0x10 [ 317.790107][T15210] vmalloc_user_noprof+0xad/0xf0 [ 317.790126][T15210] ? kcov_ioctl+0x55/0x640 [ 317.790150][T15210] kcov_ioctl+0x55/0x640 [ 317.790173][T15210] ? bpf_lsm_file_ioctl+0x9/0x20 [ 317.790200][T15210] ? __pfx_kcov_ioctl+0x10/0x10 [ 317.790223][T15210] __se_sys_ioctl+0xf9/0x170 [ 317.790251][T15210] do_syscall_64+0xfa/0x3b0 [ 317.790267][T15210] ? lockdep_hardirqs_on+0x9c/0x150 [ 317.790294][T15210] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.790312][T15210] ? clear_bhb_loop+0x60/0xb0 [ 317.790333][T15210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.790352][T15210] RIP: 0033:0x7fcdb198e52b [ 317.790368][T15210] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 317.790385][T15210] RSP: 002b:00007ffd4212b230 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 317.790405][T15210] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007fcdb198e52b [ 317.790419][T15210] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000de [ 317.790431][T15210] RBP: 00007fcdb1bb6578 R08: 00000000000000da R09: 0000000000000000 [ 317.790443][T15210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.790455][T15210] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 317.790475][T15210] [ 317.790489][T15210] Mem-Info: [ 318.025261][T15210] active_anon:1715 inactive_anon:0 isolated_anon:0 [ 318.025261][T15210] active_file:1603 inactive_file:39956 isolated_file:0 [ 318.025261][T15210] unevictable:768 dirty:88 writeback:0 [ 318.025261][T15210] slab_reclaimable:11900 slab_unreclaimable:108404 [ 318.025261][T15210] mapped:10010 shmem:1361 pagetables:745 [ 318.025261][T15210] sec_pagetables:0 bounce:0 [ 318.025261][T15210] kernel_misc_reclaimable:0 [ 318.025261][T15210] free:1332533 free_pcp:13525 free_cma:0 [ 318.072891][T15210] Node 0 active_anon:6860kB inactive_anon:0kB active_file:6412kB inactive_file:159628kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:40040kB dirty:348kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11748kB pagetables:2828kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 318.132948][ T78] hsr_slave_0: left promiscuous mode [ 318.169153][T15210] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 318.203304][T15210] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 318.233560][ T78] hsr_slave_1: left promiscuous mode [ 318.235046][T15210] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 318.241362][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.246357][T15210] Node 0 DMA32 free:1430884kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:6812kB inactive_anon:0kB active_file:6412kB inactive_file:157800kB unevictable:1536kB writepending:344kB present:3129332kB managed:2561004kB mlocked:0kB bounce:0kB free_pcp:56768kB local_pcp:18120kB free_cma:0kB [ 318.312995][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.320189][T15210] lowmem_reserve[]: 0 0 1 1 1 [ 318.327892][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.342399][T15210] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1828kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 318.373732][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.383701][ T5150] Bluetooth: hci1: command tx timeout [ 318.412967][ T78] veth1_macvtap: left promiscuous mode [ 318.418500][ T78] veth0_macvtap: left promiscuous mode [ 318.433891][T15210] lowmem_reserve[]: 0 0 0 0 0 [ 318.438650][T15210] Node 1 Normal free:3908272kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:16128kB local_pcp:9696kB free_cma:0kB [ 318.471093][ T78] veth1_vlan: left promiscuous mode [ 318.476450][ T78] veth0_vlan: left promiscuous mode [ 318.482283][T15210] lowmem_reserve[]: 0 0 0 0 0 [ 318.487111][T15210] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 318.500322][T15210] Node 0 DMA32: 589*4kB (UME) 624*8kB (UM) 435*16kB (UME) 728*32kB (UME) 254*64kB (UME) 200*128kB (UM) 120*256kB (UME) 73*512kB (UME) 26*1024kB (UME) 9*2048kB (UME) 322*4096kB (UM) = 1511524kB [ 318.519934][T15210] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 318.531997][T15210] Node 1 Normal: 200*4kB (UME) 48*8kB (UME) 45*16kB (UME) 190*32kB (UME) 50*64kB (UME) 6*128kB (UME) 4*256kB (UME) 2*512kB (M) 3*1024kB (UME) 2*2048kB (UE) 949*4096kB (M) = 3908272kB [ 318.550955][T15210] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 318.560752][T15210] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 318.570153][T15210] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 318.579905][T15210] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 318.589424][T15210] 42918 total pagecache pages [ 318.596427][T15210] 0 pages in swap cache [ 318.600607][T15210] Free swap = 124996kB [ 318.616589][T15210] Total swap = 124996kB [ 318.621029][T15210] 2097051 pages RAM [ 318.625029][T15210] 0 pages HighMem/MovableOnly [ 318.629724][T15210] 424694 pages reserved [ 318.634096][T15210] 0 pages cma reserved [ 318.765308][ T78] team0 (unregistering): Port device team_slave_1 removed [ 318.777327][ T78] team0 (unregistering): Port device team_slave_0 removed [ 319.177963][ T78] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.229094][ T78] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.270425][ T78] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.328262][ T78] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.411166][ T78] bridge_slave_1: left allmulticast mode [ 319.417394][ T78] bridge_slave_1: left promiscuous mode [ 319.423373][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.431704][ T78] bridge_slave_0: left allmulticast mode [ 319.437487][ T78] bridge_slave_0: left promiscuous mode [ 319.444484][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.549548][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.559565][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.569030][ T78] bond0 (unregistering): Released all slaves [ 319.843842][ T78] hsr_slave_0: left promiscuous mode [ 319.850032][ T78] hsr_slave_1: left promiscuous mode [ 319.856122][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.863905][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.871553][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.879087][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.890223][ T78] veth1_macvtap: left promiscuous mode [ 319.896047][ T78] veth0_macvtap: left promiscuous mode [ 319.901580][ T78] veth1_vlan: left promiscuous mode [ 319.906885][ T78] veth0_vlan: left promiscuous mode [ 320.040025][ T78] team0 (unregistering): Port device team_slave_1 removed [ 320.066796][ T78] team0 (unregistering): Port device team_slave_0 removed [ 322.136992][ T78] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.146818][ T78] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.195798][ T78] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.205711][ T78] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.235334][ T78] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.245125][ T78] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.275606][ T78] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.285558][ T78] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.356479][ T78] tipc: Resetting bearer [ 322.430106][ T78] tipc: Disabling bearer [ 323.050853][ T78] bond0 (unregistering): Released all slaves [ 323.060350][ T78] bond1 (unregistering): Released all slaves [ 323.132134][ T78] bond2 (unregistering): Released all slaves [ 323.205869][ T78] bond3 (unregistering): Released all slaves [ 323.215308][ T78] bond4 (unregistering): Released all slaves [ 323.291351][ T78] bond5 (unregistering): Released all slaves [ 323.357142][ T78] tipc: Left network mode [ 323.679719][ T78] hsr_slave_0: left promiscuous mode [ 323.687331][ T78] hsr_slave_1: left promiscuous mode [ 323.712333][ T78] veth1_macvtap: left promiscuous mode [ 323.717987][ T78] veth0_macvtap: left promiscuous mode [ 323.804240][ T78] pimreg3 (unregistering): left allmulticast mode [ 323.887498][ T12] smc: removing ib device syz0 [ 324.117843][T12512] syz0: Port: 1 Link DOWN [ 324.122278][ T5905] lo speed is unknown, defaulting to 1000 [ 324.129134][ T5905] infiniband syz2: ib_query_port failed (-19) [ 324.537662][ T78] IPVS: stop unused estimator thread 0...