last executing test programs: 1m49.964647441s ago: executing program 3 (id=313): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000004, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x3, 0x0, @mcast2}, 0x1c) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 1m33.207039179s ago: executing program 3 (id=313): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000004, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x3, 0x0, @mcast2}, 0x1c) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 1m19.043018928s ago: executing program 3 (id=313): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000004, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x3, 0x0, @mcast2}, 0x1c) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 1m14.04795919s ago: executing program 4 (id=858): socket$kcm(0x2, 0x2, 0x73) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f00000000c0)={0x1a, 0x1, 0x4, 0x4, 0xf7, 0x3, @multicast}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) writev(r2, &(0x7f0000001580)=[{&(0x7f0000000200)="0b06b146", 0x4}], 0x1) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10) socket$l2tp(0x2, 0x2, 0x73) (async) socket$l2tp(0x2, 0x2, 0x73) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}}, 0x0) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = getpid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x1, 0x0, 0x0, {0xf}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x1, 0x0, 0x0, {0xf}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x48, r10, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x24, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1}, {}, @broadcast, @device_a, @random="37e6fc966e04", {0x0, 0x7}}, 0x4c00, 0x5d, @default, @val, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x1, 0x0]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1m13.749366841s ago: executing program 4 (id=861): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb001480080007"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@updsa={0x148, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x5c}, {@in=@remote, 0x0, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0x1900000000000000}, {}, 0x0, 0x0, 0xa, 0x2, 0x80}, [@algo_auth_trunc={0x4c, 0x14, {{'sm3\x00'}}}, @mark={0xc, 0x15, {0x350759, 0x9}}]}, 0x148}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) 1m13.145009266s ago: executing program 4 (id=866): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000012c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8a}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) recvmmsg(r1, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0xfd}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000340)=""/185, 0xb9}, {&(0x7f0000000000)=""/245, 0xf5}, {&(0x7f0000000100)=""/87, 0x57}, {&(0x7f0000002fc0)=""/4083, 0xff3}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x5}, 0x80000000}], 0x4, 0x20, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x400, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0xe, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8) sendto$inet6(r2, &(0x7f0000000700)='|', 0x1, 0x200088c5, &(0x7f0000000a80)={0xa, 0x2, 0x1000, @empty}, 0x1c) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r3, 0x0, 0xd1, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x3206, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x33}, @remote}, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x14, r4, 0x305, 0x0, 0x0, {0x7}}, 0x14}}, 0x24044080) 1m3.342157683s ago: executing program 3 (id=313): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000004, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x3, 0x0, @mcast2}, 0x1c) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 56.055489784s ago: executing program 4 (id=866): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000012c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8a}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) recvmmsg(r1, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0xfd}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000340)=""/185, 0xb9}, {&(0x7f0000000000)=""/245, 0xf5}, {&(0x7f0000000100)=""/87, 0x57}, {&(0x7f0000002fc0)=""/4083, 0xff3}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x5}, 0x80000000}], 0x4, 0x20, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x400, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0xe, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8) sendto$inet6(r2, &(0x7f0000000700)='|', 0x1, 0x200088c5, &(0x7f0000000a80)={0xa, 0x2, 0x1000, @empty}, 0x1c) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r3, 0x0, 0xd1, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x3206, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x33}, @remote}, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x14, r4, 0x305, 0x0, 0x0, {0x7}}, 0x14}}, 0x24044080) 40.069735489s ago: executing program 3 (id=313): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000004, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x3, 0x0, @mcast2}, 0x1c) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 36.31317315s ago: executing program 4 (id=866): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000012c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8a}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) recvmmsg(r1, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0xfd}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000340)=""/185, 0xb9}, {&(0x7f0000000000)=""/245, 0xf5}, {&(0x7f0000000100)=""/87, 0x57}, {&(0x7f0000002fc0)=""/4083, 0xff3}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x5}, 0x80000000}], 0x4, 0x20, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x400, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0xe, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8) sendto$inet6(r2, &(0x7f0000000700)='|', 0x1, 0x200088c5, &(0x7f0000000a80)={0xa, 0x2, 0x1000, @empty}, 0x1c) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r3, 0x0, 0xd1, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x3206, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x33}, @remote}, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x14, r4, 0x305, 0x0, 0x0, {0x7}}, 0x14}}, 0x24044080) 22.671808771s ago: executing program 1 (id=1143): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0x7ffffffe, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async, rerun: 32) unshare(0x20000400) (async, rerun: 32) shutdown(r0, 0x7) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="5800000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000300016802c00018028000100fcffffffaaaaaaaaaabb000000000000000000000000000000000000000000000000000008001b0000d77f4b7cf0c8d09e46f788dbcc946e00b969ba7056aea9b4d0979d8423460ba9227f2eec6e1d6ca3a5f33928aca19081d9bb3d71f19cfa95168c9688ea5859af85f56167e240295173999aac93c504c58c69d07f4ebe4b0cfd215afdff5d79e994d68b3c4499cd432fd6776e844d071130fc5759928cb2b0e0f68637dfac0f85aa4a67a54df30b2412803912b963f03c3d5c6f7ada2ceb9e4c47a09db246fe"], 0x58}}, 0x0) 22.443734843s ago: executing program 1 (id=1145): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000040000009c08000008000300", @ANYRES32=r2], 0x1c}}, 0xc0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x3}]}}}]}, 0x50}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000040000009c08000008000300", @ANYRES32=r2], 0x1c}}, 0xc0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x3}]}}}]}, 0x50}}, 0x0) (async) 22.039078144s ago: executing program 1 (id=1150): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='pmap_register\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000001880)={{r0}, "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"}) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10, 0x80000) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000140)) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f00000001c0)=0x1) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x800, 0x80000000}) r2 = socket$xdp(0x2c, 0x3, 0x0) unshare(0x22020400) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000280), 0x4) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001380)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r4], 0x4c}}, 0x40000) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$SIOCAX25GETINFOOLD(r4, 0x89e9, &(0x7f0000000c80)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/2646], &(0x7f0000001780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, r3, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x200000, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000cc0)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0xfcc, '\x00', 0x0, r3, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = socket(0x10, 0x803, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x1, r9, 0x7, r6}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r5, @ANYBLOB="ee00"/20, @ANYRES32=r9, @ANYRES32=r3, @ANYBLOB="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"], 0x50) 21.732944135s ago: executing program 1 (id=1152): socketpair(0x23, 0x1, 0x4, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x1, &(0x7f00000002c0)=0x5f53, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="02"], 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@mcast1, 0x0}, &(0x7f0000000080)=0x14) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r5, 0x89ec, &(0x7f0000000340)) sendmsg$xdp(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, 0x4, r4, 0x4}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)="efc7a6b0111d1b9a79f0a3fa436f80313ee7f69c4bfb147fb75fe2a6ff72b69afd17c979fa5b86963bb66bbfcbd14bad50d3b7bb6c8d0efd6a974d2b261df85b82a575de2fbddbe21ac712c753d1c0ddacd088", 0x53}], 0x1}, 0x40c0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001900016281679b98b7c6ec1f0700000000000000000010000000e0000001000023000000d51f00000000050014bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000044000500fc000000000000000000000000000001000000003c0000000a000000fc01000000000000000000000000000000000000010000000100"/180], 0xfc}}, 0x0) 21.331762255s ago: executing program 1 (id=1154): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00') r1 = socket(0x23, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) recvfrom$inet6(r2, 0x0, 0x0, 0x12060, 0x0, 0x0) (async) recvfrom$inet6(r2, 0x0, 0x0, 0x12060, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000000)={0x1f, @fixed}, 0x8) connect$bt_sco(r3, &(0x7f0000000240)={0x1f, @none}, 0x8) (async) connect$bt_sco(r3, &(0x7f0000000240)={0x1f, @none}, 0x8) ioctl$FICLONE(r0, 0x40049409, r0) 20.895858546s ago: executing program 1 (id=1158): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x800001, 0x10012, r4, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r5, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="0800080000000f0000000000000045"], 0xffbf) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100004400010000000000ffdbdf25010100800c00000000000000000000001400010001"], 0x114}], 0x1}, 0x0) 20.153013594s ago: executing program 3 (id=313): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000004, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x3, 0x0, @mcast2}, 0x1c) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 18.221529968s ago: executing program 4 (id=866): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000012c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8a}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) recvmmsg(r1, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0xfd}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000340)=""/185, 0xb9}, {&(0x7f0000000000)=""/245, 0xf5}, {&(0x7f0000000100)=""/87, 0x57}, {&(0x7f0000002fc0)=""/4083, 0xff3}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x5}, 0x80000000}], 0x4, 0x20, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x400, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0xe, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8) sendto$inet6(r2, &(0x7f0000000700)='|', 0x1, 0x200088c5, &(0x7f0000000a80)={0xa, 0x2, 0x1000, @empty}, 0x1c) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r3, 0x0, 0xd1, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x3206, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x33}, @remote}, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x14, r4, 0x305, 0x0, 0x0, {0x7}}, 0x14}}, 0x24044080) 2.475240336s ago: executing program 0 (id=1217): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000010000004200000040000000c2000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000007022000000000000400000a4b61257c9467b2a50f8a429ff3c9dbf0736960c9ffb74e3a7663aad31ed8fb5a43056437e978f40ddeb242e25a6a38ca1798d6b37601fa4749df281f22105", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)="cb423a11b33192d673ba4c831a9adca48ca7eb0d2f073f36dfc3a94144bfd9d81639fd65ac4e557e12e7b0d2dfea051a7b440ade19d879e209596bf44477ecf6370e0133e541ef9f9e3631dde33dabf7842deb7a72c3ffe0f611062628683e3db2c685af", &(0x7f0000000640), 0x1003, r0}, 0x38) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)="af", 0x0, 0x2, r0}, 0x38) 2.211426307s ago: executing program 0 (id=1218): socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) socket(0x15, 0xa, 0x10001) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000500), &(0x7f0000000540)=0x8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000b8018"], 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x22, 0x0, "43cad7b04bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8) r4 = socket(0x10, 0x3, 0x0) close(r4) sendmmsg(r4, 0x0, 0x0, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x0, 0x800, 0x1000, 0x2}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_DEL_MPATH(r8, &(0x7f0000000480)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x70, r9, 0x10, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xfffffffffffffe68}]}, 0x70}, 0x1, 0x0, 0x0, 0x404c890}, 0x2004c004) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x58}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@deltclass={0x24, 0x29, 0x400, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0xfff3, 0xf}, {0xfff1, 0x8}, {0x8, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x40050}, 0x44) setsockopt$inet_tcp_int(r3, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r11 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_mreq(r11, 0x29, 0x15, &(0x7f0000000340)={@remote}, 0x14) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, 0x0, 0x0) 2.037724723s ago: executing program 0 (id=1219): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f00000021c0)={'filter\x00', 0x0, 0x0, 0x0, [0xa8, 0x57, 0x4, 0x5, 0x8, 0x5]}, &(0x7f0000002240)=0x78) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000240)=""/21, &(0x7f0000000280)=0x15) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '\n'}], 0x18, 0xe000}, 0x5}], 0x1, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_ID={0x6, 0x1, 0x5}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000300)={{r0}, "7b88f2a9561a1453278ca32faaa1e193c44f5402d78b33a85ae601c9ca32b3a14f103ac0a17851d45293c3a1875f6dc43f9e5b1144444fa2c0da34ec0d8e46fde8471ccd1a866aefbf5cee7c61a78a50206c845fd91c170118d9d7e4be9b22663567a3a03e0d56dfd9fec656f6954ea619053d62e5b6db1e16e9c03bf79dca0091a0d79d4ae95c39f1f3f42231cb376cc66addb7467b8ca2d0853c08acc5f7a85502b20987260b1a7affd953427861029b7aa8477c95f58f07b86cf490043fca19cb1536ad838ea38bfba5d0ea813b02acdd0b17905e70df8c74b7cf2a9eb0ef0befa143b5188cc19ddeab0211239a9d5ef1ed8764a33747d6ce1fe614262398b5d955bb9e0fd5d119c87ff1454b01cb3b03c0b75973804a575d08f0c1eef744161a35c30e77e577e50841f716e9ff57b01ffcb5f07876dee1ca28a25f28aa85129639f3f2fb4f27abdc013e4d1f6ddbf129033c3879a5210b4a5a631007711943fa4efbc7f1aa9b401c1d525449277f3cbce7e89a964e66bf486228f3b6b88c4a4770ad0cedc3dac7a55bb8e00cfefb108326c922555620e4ff585c1c8ea1b305f4e3516a28b0dbd85e8c8513b6e823f42c8c1d5dc2aac5e564ec489f5dfb2708058d3013007a111fdbebdb2c81f2fd61f99dc9f00133b038908806daf1d4e2a962bc01fdd455234752a4a48f54b442ff28b68b46abf54e2253e6d7abfeef3d97675d9c9b3433c6806b4c33ef0c45a426e57216dc7ac00ad9b494be4d69ed9700cd46ba0cc1e844d06909405744fd14114795a77370d8bf1484721a2d3e48d7df6bb1000c1ce56974d629b272ccf84fbcfcfe0f776a84979efa139e4b85e5e864e3d35a574cccccadae7a0504f29b356998fd2586fb9a048141e5e88508eb778f777c8960eb6aa1fa83e9ea87607af72aa558b5f15c9083b4fb916846270ae6422c51414f8c44157dd27bba03a7dfc2208a54bc6e812ac8b4b0434b21361d1e8b98ccca2bb3a284c4abbae2deed04142d466873e6ef1f90fbe016e379f681849d3896e7b24c3a24a42cb2b9d1125d9b4d8719027c8a7626a9845a516a86fd0944b1323db152c6704dfca628500c018ab840aeda3290c33a7eed60dc372ed65f703b1b20996a1d4c067f847f3f896b99750ce4d7187ca174b9873834df07330804b38a4abfff32769dc086833dc7dba6c8ccf215a44363bb3894bd3dd99664ad2812b89d1e4c3c9d5f1eec58e94d5021ec249b2ccdd897242ab69f3bf4fc36b1509e5b0c9c6c73800cc338fcd1845f9b968c2d6d01d6ca4b6c2326481231e68d8d63984bb041843c60b63adf88b402fb10466989baf5ae4f60d8368cc175c022bc6e851bae181d6ae5d202989449b559da738067617a1a61cc27d4ae99967a4e5c9df47561aac9e7365698f7ef77f29107c401b93d096d1f24fc88cf4872c6639031d9832b2d654e85350a6d0853aaf236d0cf8f005c17abd43a4446854c340a904670c2daaca2e2166ac88c5d292c37580d040c21cd1b55dc8e855f71146b15fb310de1ab6ea0e8c65d2cc88993493331ba3ed0f6b44e54c9839731822c05720d25688e49d70ae42784c7ac491e3b8b939b289417de561552f4dc3ac2d6e551ee33dfa7eeb51c678d34f6f680f11148f8e545cf7c742c87047edd653a195c3f07478d3a8ae7403e2295d699140b81a28a8c730fb535d92336735486646d9c66dfe3a0c0d687c25bfedbdd3b7e5daa29bbba930c17491c9faccabb87a080c045d157fce053cb1b14e5b6115b0e138da4f3b453e6d1f22d7de3c7bfdf1ef95d34be59055146811feaf1a0b68c772734e6ede4ee470555f61affc9812ba32571368a039bfb42a3e0dc578f1d22348a616150f8b957b1fa3d9dc22d4d4183dfadca6feff5b7585cf1bf828f485771cfb0b99d14348a6c2195496d21af974e869d8ee563f8f023bc259b5070ace83e84b7bdb2bcff9b1f0d1189d18860ffdb207dabc6afbbc1ff352b5d95d7731cc32d705b5dd20af7248f2ad5eec668d6feb3fa15fc823004cfaeeaca478a021b2d16c0240bf95d317eeda378d3dfd3af2f79b9aab44229915cf1d3394123cc3ed3b58e898a7a106e986dabec119d16d137b50efac717c630798ac92962e5c68c0c001b56d2fec4feb71d1787380bff238df5a11b088cff0327562e8d331da7479321f56d7a27e3c046f4d180c2282d7801374af15572009c5f23c0dbed01621574597f4ca90a6afc755c04ad032b3db6b9aed9bdff456d1b017ae174f35b243db97571b58f71a832c1c57c16bb0b5f90ca383240ea769860b8d2701a7f778eb7eaf978d45eb5f3f94c3b67f9d695b63134738e4704237eda48c1ef28f39a14be280757d5b8cbbbdd8e1a8b07eb1a36e4302f436b8c6ab4b666c578f1331b8ef26948e72cd03a5326b91d03b44edfbc85473289cd4a7488a70888d1cbfc9b8c1dcd6a044c45dcd74170b307252d1e5d8e15b9077cbd6a22ff23b5d53921089497c348fe07e00de743a5a511cda8404b01a6683f229e5f384fe5f75c391d0ea4142e0f972ba77b9cb5390179650188a30cb43087d4511be8ba470950cf5ba063abd6ac6105ace97f18e57cc26ca5a8890295359f50a3a6ebbdc79171ea6314864cca4753cc71522b3f0d2ff8c43bb23a433616aa2f0e94c2efb4e0b06db77297d6b7ff1e1f25d8be9eb6aeec6fe300a232dc5c2f03d7f9b0359c2d17be88f3b7eabc95d4df40bd7a30d4865eb25541dc989ed6d2c7c5ae83133a80d90e973472a8b4e1e8e080c1f520d8fb0ee512e2b2dd7807d6cc90c92b76e2deb95324fac7fa0affef3c8a4a0fa7b41a11a3535d9a673d4b15cbfb019ed6779b109dfda13a20bc8514644fc862478e4d8ac4008ade924abd5efa8a1012b6f2906f5858ab5b7817668d4b1cfb90b63c886f3019f1bdd48ee7b94c6ed10df8a70d3aba88cdc677c243ba124f62898028f3f6626d72719b61e5a7291d7319f8a2afa625526c359603b18b714e68a4a2dbdf19a9f5633714416b635c59715653953bbd2ce2e3f9cd642c842457f25509e385607396e4eb990e01f1739226751ec1768ada714516178c5ca8d90d41f52692a1da1aeac5a971999552d424add97caab6fa520e797e950e0f8b61396ee144d9b6979519f6c43ce0e621d3571821adf248168e5ca19a9dd7f1db348283c277b14ad88fe9db2bfb6d9847f45f09255868a442053d681cc36f9521ce97b7df2df102a3fcb833866b4ffff0a1cf037ec80c073ebedf8e7c48da32ea2f35dd36cbd3f544bd381431a3aaa033d8bfa4a2983f0e536bcba60e8b3f9234fe2945137dacaf3367d8e55cdb30c9bf777c7261ac35fd2c176a010935e45fec873604b6be9db37c4e669d6ddbfe43d42ad087b78999381936b89a786623d9960ad8f52790540ea1beb486efaefeeb00d6403fac9c133354bb13f98fc2456f079d5d123e5b9a84e33083fa48ac4c2bac4c7ff8ffbdb8048b3e2f711273b8ec62c42750ece6aba27a360448bdb5abb83f9af6fc5d95248a244e08b1cc7c3bff0647ac15b7d85cdfb8fa8effd377f907f4b22e33b95fa5c9096082a1c6e891427887b1da39fadec75797461a00ba99415de67d1acb19aeca103a302adc3a4c38e07062c42456c41bec51a1926cf44fb0ff7af8605419aa8c4969b7ff0f3ba29adcbe23cf4b56b350b2a6c9650d4bd7555e3000c71c8a19bc4c300813061860442d0e3fdeb9effac0c12ca2499354f3425a769848baa94e0d0cd4fac11585418c8ef126603df41208683327756f064edc2505dce5eecf9d8ec8298c7bfdb1f1b8fe5038c9c0d58f0996c12e8594f0a7ec992410760ae00a41aa359cb9904c5ed89cfbb5239adb9dd1ad81a2678553df1b48bb367ea3822268cf5d19fe1621e130dd978d4b06401a85fdba32f44adb7e2c73996e2233794ee7ba2a40a51660d3a2e002f424594c007fe4f3262c125f7de4179d358b56e3b0d8196511c4af0eca24a396555e5fa5d046602a31f566bc206e0b38898471169fdba949f23c2f43e62be581fdbbd80663821c3244e3fb7dd4e98e3cc74927b4fbf655f00ee5287de1f823f5e7dff50e8cbdb804648e7e551851e5fc12bda7c6f6397fa1bb1e926e86dd728f54cf148e9f92ca44e92b65c02575654e96c8f97d03657433d93601ae9882db4f4bef639a7ed1f6a10fe8572e7ab12f7ac29975f6d2bb2100c337ba78509374d029c734a894878f10d30a948f9032026d826dad3413b607661c1acda82d762620b15d0ff790c32783e308ad150de2061dd739e819746f4111b4c2b6904a85cad0abad7dcefe32173d258951638c7fef5ffbf4e212508cbe136438a0ca4bdfa83fed227102862b0e1eaecf7a5bc60abf9a92b2f3832ff49469dbfe71a2bb27b6b84d405ccef657d53848c6b3294adadd14b4b71a7dcf6de39fd30bcb8cc04c7140170143067b528e9c0a0fa0c2bf3edfa110b2f9a4d99df7e82f40c9cb8ef9c148c036146be1e38b20332713e11f85576aefa8e8bf1be9fc8244f966075b0234881ee21fadcdb50c3d99e681d803f6b2dc1768797d56cb01ffb41501b873a7c06f587c8870b694e8c34a568cadbbaa0a0c19e47083b5a15c89d2e98fd61c1e2428cec062bf3d7be92fdb8b201c85537b03069f2dad8658edb3ffe1ba9fcd0b323ee6970f77230a316f9648b35d7ce4aada46b68d880fa868b4f6b6d5af3b287ba48396cf7fe3fe0d607ae98c80e6949adfbd90a4936b5588271cc5f15b8ba4a24ce598f30e092dafc75d25d9f0cf2fc024da81baabb5b08216dd5f2686cb2bddd2380e031bfdb36009cbe66a4970d7e9a6cb6de5f4de94b7a061b91e6ae762d434ff6f57caea39c729de96fdea399a314bcc324db3478b2c7d5c626bf90d05075526c7ae4c42371c41663f763af1ea3ffcd145961aa323a51b23c26463d127ec9abb0c76063a0fd0668e326b190959a4d32d00427faa3635a3e1dcc5128b2d395edc2e720f1680e646b537a9b54c816dbaf1c73d6525b1aec265dd39b89e60a2c6f26939ab7e7cf9fc9b560f3550fd86f5d75c8de133450bf4a751c103f1f1b4d3a27b5e22109fb93bbe8b4566e23e96fd1231cae335eb642a7a4892baf60cb54c3dcd88345792d96c30cadafe3e92c17986cdb2677e4a3e638913b624759aff6bd15850b8ddcceea79f2fc2b206ba8ad8c61a2053a7bbc6c4426cb0b6281917d7c83d706c20edb3666fdb15e575a6fd67e7f3f387bf7ea2a2275039b911ef527f8c2901440b1cc37443108cb6d4ea19bc0c40447db925d6ef4c32cc3687622a56fd154b126d31bfb02ac38423a1b1c8fc4cb5b14fa432f8ffa757fef913cba1650a416b2462355768cbf4bee598e2982907c4ed8ef912032a3f1b3e05b8800a8b9c11740b1b31ef48a9e7b63caf503dba2f6ce69077807bae129d0f82dd116ddf7260cd44761c08554b33ff7daefbfeceb712fe14c36c298b254e616284076764be74f1075e1f1b40b59a64180d710fbbeb6a7a0e8d4445d94deb69a80a70d0a7109545d672afb9d5ac3d713308207445225fe15f604681e45d75dffddb815f0e6e969a0352b51b41aecfec974bc3f8d5676cd0dbc1a914cf2b6036a18917f3e200da01fcb46e4600c8014008e8d2142c0146d4b6f58d33a1d36a9757e1b1bd51ca0f5b41311a2fa2d6b77b3d0e7109f6c4e2092aa724d2206a482e6b8676e5c76ba47f9b886b5bd696a441379345176e9758f4b2af8eb3b4cb37eecbeaa037bef0b6112fc6155369"}) 1.659252015s ago: executing program 0 (id=1222): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xb0842, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'bond0\x00', &(0x7f0000000100)=@ethtool_sfeatures={0x3b, 0x2, [{0xbff, 0x4}, {0x400, 0x5}]}}) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000001c0)=0x51) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000580)) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f00000005c0)={0x0, 0x5fed, 0x1, [0xddbd, 0x7, 0x360e, 0x2, 0x3], [0x2, 0x3, 0x80, 0x6, 0x9, 0x6, 0x8, 0x3, 0x8001, 0x8, 0x4, 0x7, 0x9, 0xa47, 0x0, 0x10001, 0x704, 0x6, 0x2, 0xa2, 0x0, 0xfffffffffffffe6a, 0x0, 0x20daea97, 0x0, 0x3, 0x9, 0x6, 0x2, 0x5f4, 0xfffffffffffffffa, 0x431778d0, 0x2, 0xb, 0x9, 0x0, 0x1000, 0x99, 0x6, 0x94, 0x7, 0x4, 0x5, 0x65e1, 0x1, 0x1, 0x1, 0x7, 0x0, 0x5, 0x71, 0x1, 0x200, 0x4800, 0x8, 0x2d3, 0x9, 0xb9, 0xffffffffffffffab, 0x5, 0x3, 0xf305, 0xb, 0x0, 0x9, 0x4, 0x0, 0x8, 0x10000, 0x6, 0x6dba, 0x3, 0x63, 0xc, 0x6d0, 0x4, 0x7, 0x10001, 0x0, 0xb287, 0x4, 0x8, 0x0, 0x2e, 0xd64, 0xada9, 0x9, 0x36d6, 0x8001, 0x36e, 0xa, 0x517, 0x8, 0x8, 0x7, 0xce6, 0xffffffffffff0001, 0xffffffff, 0x3, 0x3, 0xfff, 0xfffffffffffff92b, 0x6a, 0x5, 0x2, 0xa, 0x5, 0x2, 0x0, 0x7, 0xff, 0x1, 0x2, 0xc, 0x188, 0x5, 0x5, 0x101, 0x400, 0x6, 0x4]}) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000a00)={r3, "301d2fc3d434e52306c04688eb4be0fb"}) (async) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000240)={0x0, 0x0}) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000004900010000000000000000000a006000", @ANYRES32=0x0, @ANYBLOB="000000000800020000000000140001"], 0x38}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x8c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x12) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}, 0x2a0}) (async) ioctl$sock_inet_SIOCDELRT(r5, 0x890c, &(0x7f0000000140)={0x0, {}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @empty}, 0xab852ebbeefbd6b1}) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)="80fd020000400a9eb2020b8e17db1e6e6d2195f77c9a7fb556d8a445d9716fdc85b71be1719c926bab75ed78f8e8d39eba3994dd63ecf313c0fc4fcc05565e5b4af9", 0x42}], 0x1, 0x0, 0x0) 1.35497383s ago: executing program 2 (id=1223): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x40000000015, 0x5, 0x2) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f00000002c0)=0x39, 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) r3 = socket(0x2a, 0x2, 0x0) connect$inet(r3, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r2, @ANYBLOB="01002dbd7000fbdbdf25010000001400020077673100000000000000000000000000740008807000008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c53cdbf691c4800098028000080060001000a000000"], 0x9c}, 0x1, 0x0, 0x0, 0x4004}, 0x20000010) 1.009478533s ago: executing program 2 (id=1224): socket$isdn(0x22, 0x2, 0x11) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030002000000080007006401010108000700ac1414bb0800020003"], 0x78}}, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000180)="aa104c88ae96ae1f2d21f350596538800a44c7a343c5a0e5532c942a6c9277bbd6d1e2cc6075de4d21078bb9232e933bc1b80297c4672252e5369a34ee7082165bf6d2ecc3ed7c2bfaa92d750b05e2153f10b14d9f5ed619e58696e7056ef53e7f1ebfe371668bd60020837d3f971fc2a3a3a85b53e8a5129ff54bc60b933af336c2cc37f1749d43f6daa8aac5807b73b0afc5318d9e738d2853bc32fa23d57ec291828deb5bc195accf66e370b1e39b14c908c0c1501535a76629a2adf2e2cf2aea4fb73788ccc603b5bfed2274a3c22a6af8f62e15c0db7521da6e46e6239b97c15985c894b4ed721ea50a7b02d7291294b1cc3a6601474cea7a2b7a0ab8", 0xff, 0x0, &(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10) 1.008766399s ago: executing program 0 (id=1225): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = accept$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000040)=0x10) sendto$inet(r1, &(0x7f00000000c0)="7b588f311941a49ffe614a472a1cd58e6b2a5ecf8046a6d999", 0x19, 0x20008000, &(0x7f0000000140)={0x2, 0x4e20, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r2, &(0x7f00000001c0), 0x0}, 0x20) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r3, 0x118, 0x0, 0x0, 0x52) sendmmsg$inet(r0, &(0x7f0000003c80)=[{{&(0x7f0000000380)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000600)=[{&(0x7f00000008c0)="7518817628986840f6e190e014e6940c3e0b40bad71d5dab21eba17d1038894b6f35843eec6c751dcd15029c37193637b450efee4925867a82281ce16beea9bc4a47de4f741d3fba36a7730aef9067e12a92d8ce21bac035aeae9064dca5e8013ff47b8c30de5f4ea21dd2e1f9c3c4f525b5e271ed4225b8ba268d102b4cc3a965b34f9436402ef3dfcc0097a120061584b5a9de8415f7c011f76afe103fdcf3c7663c", 0xa3}, {&(0x7f0000000980)="e6bec5838fe7062a503b590b34967e28edc3e4a9407ccb2bfcef7a834ecdb85ba3179a8393fd6bcd4166554f05f77ae1ff4712b1c36676ed", 0x38}, {0x0}], 0x3}}, {{&(0x7f0000000b00)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002000)=[{0x0}, {0x0}, {&(0x7f0000001000)="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", 0x8c4}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f00000000c0)={r6, @in={{0x2, 0x4e21, @loopback}}}, &(0x7f0000000040)=0x84) r7 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_opts(r7, 0x0, 0x6, 0x0, &(0x7f0000000140)) recvmsg(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x10000) r8 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) getsockname$packet(r8, &(0x7f0000000200), &(0x7f0000000240)=0x14) sendmmsg$inet(r0, &(0x7f0000000cc0), 0x0, 0x8800) 856.679179ms ago: executing program 2 (id=1226): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0) (async) r2 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r2, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001040)="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", 0x5c9}, {&(0x7f0000000600)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca3964f", 0xe5}, {&(0x7f0000000b00)="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", 0x18e}, {&(0x7f0000000cc0)="f2a0f0f863621b483b19e7ecfce0d34e53fbf295927214684f4d69e90f0ec506442d2126c3f5ab0cdfd79dc1815274c3ee57068b3793c25fab48eb353478689f452328afb023f75f93229060bc2c82dd05d1e8c3a549a06e280ca4eaf77b4aed57a0c5f6120d25a3d5121895638ec5e2e600000000f5be12a64e075c60dd63e0b00e8f42bfb7671a56925477029cec7e7f16b358404edfb5e7a055fdeb2ba044d0d54e341d1d1ef1eb2c317f587f591626ceed08555ca0b2f31a3e7bf5ba7541db275e6a6b6501b87cc74c4804f6da7d3de93327287204cc97f9cb747576d2ab23a6e35c6da6b3240c92ae18b31cb6e7bc60066994e2cb401c76b1840d3e231621355f10ff35ea91ffd463228d000000000000000e454d3c36efee949f6311c6ad78b5a8f091d2ebb008925107e4a4584dab83f7f0cb5ad94266e71e2b7aaa01cf4f9f5e1d52e1e5086e9633cbee8126a200"/349, 0x15d}, {&(0x7f0000000700)="15c84609b06c6d85a5ca6f3a9a242f214aee4e7093161b717090c0c852a05393abd8992d91576f57bbd3488e85d8456d6c6c09de5c5228ee18819665861f01a2823a7cfa8e9260a5fe3921638db2dc5156149f86916810f913a944e1c8cd7fccb63f37900c5b287016e512b050ca214125b2217260c9ce3019e88b80985402ff7ca34be17e0dbda4f028cec9973a2b9eed83eee86f35f2c0adf50a04296e99c0f709fb3990aa5d0e74a125", 0xab}], 0x5, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r4) (async) ioctl$SIOCSIFHWADDR(r4, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000000711053000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newqdisc={0x5c, 0x24, 0x3fe3aa0262d8c58b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0xfffffffffffffffd, 0x2, @TCA_ETF_PARMS={0x10}}}, @qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10}}}]}, 0x5c}}, 0x0) 584.163691ms ago: executing program 2 (id=1227): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6b) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0x1, 0x0, 0x0}, 0x10) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r3) r5 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000180)=0x1c, 0x800) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x7800, 0x8, 0x101, 0x6, {{0x16, 0x4, 0x1, 0x3c, 0x58, 0x64, 0x0, 0x9, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x24, 0xf6, 0x1, 0x5, [{@remote, 0x6}, {@broadcast, 0x5}, {@loopback, 0x6}, {@private=0xde6, 0x8746}]}, @end, @cipso={0x86, 0x1e, 0x3, [{0x7, 0x11, "d95cff812974ae8de1162986301721"}, {0x2, 0x7, "7d70701a4e"}]}]}}}}}) setsockopt$inet6_mreq(r5, 0x29, 0x0, &(0x7f0000000380)={@empty, r6}, 0x14) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r8, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x1c, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x24040400) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000140)=@ethtool_pauseparam={0x13, 0x0, 0xfffffffd}}) 132.830881ms ago: executing program 2 (id=1228): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710044000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002cbd7000fedfdf259d0b000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4c14}, 0x850) 22.207743ms ago: executing program 2 (id=1229): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000062010b0000000000950000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000280)={0x44, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x25}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 0 (id=1230): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$kcm(0x1e, 0x2, 0x0) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x5, 0x0, &(0x7f0000000000)) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000100)=0x4004b, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) recvmmsg$unix(r4, 0x0, 0x0, 0x10000, 0x0) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10022, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402e78}, [@printk={@llx, {}, {0x7, 0x1, 0xb, 0x1, 0xa, 0x20, 0x300}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffff6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x90ffffff}, {0x85, 0x0, 0x0, 0x10}}]}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="0001000008050001000700"/28], 0x1c}}, 0x8084) kernel console output (not intermixed with test programs): OUTING and INPUT [ 123.557453][ T6858] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 123.825871][ T6872] netlink: 'syz.1.267': attribute type 1 has an invalid length. [ 123.843618][ T6872] netlink: 'syz.1.267': attribute type 4 has an invalid length. [ 123.891728][ T6872] netlink: 188 bytes leftover after parsing attributes in process `syz.1.267'. [ 125.584379][ T6899] vlan4: entered promiscuous mode [ 125.840859][ T887] IPVS: starting estimator thread 0... [ 125.925911][ T6914] syzkaller1: entered promiscuous mode [ 125.952751][ T6914] syzkaller1: entered allmulticast mode [ 125.965311][ T6917] IPVS: using max 25 ests per chain, 60000 per kthread [ 126.005670][ T6920] netlink: 12 bytes leftover after parsing attributes in process `syz.2.281'. [ 126.028226][ T6924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.282'. [ 126.040072][ T6914] netlink: 300 bytes leftover after parsing attributes in process `syz.4.279'. [ 126.095154][ T6924] netlink: 4 bytes leftover after parsing attributes in process `syz.1.282'. [ 128.084483][ T6959] sit1: entered promiscuous mode [ 128.123212][ T6959] sit1: entered allmulticast mode [ 128.131675][ T6960] lo: entered promiscuous mode [ 128.163744][ T6960] netlink: 'syz.0.289': attribute type 2 has an invalid length. [ 128.176417][ T6960] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 128.206304][ T6974] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.293'. [ 128.215717][ T6967] netlink: 72 bytes leftover after parsing attributes in process `syz.1.291'. [ 128.257542][ T6974] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 128.283338][ T6974] openvswitch: netlink: Duplicate key (type 0). [ 128.402403][ T6984] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 128.634045][ T6993] netlink: 144 bytes leftover after parsing attributes in process `syz.2.300'. [ 128.815313][ T6995] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 129.129334][ T7008] veth3: entered promiscuous mode [ 129.429561][ T7023] ip6t_rpfilter: unknown options [ 129.487287][ T7019] xt_CT: No such helper "snmp" [ 129.561033][ T7028] netlink: 24 bytes leftover after parsing attributes in process `syz.2.311'. [ 129.584195][ T7028] netlink: 212 bytes leftover after parsing attributes in process `syz.2.311'. [ 129.808969][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.934183][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.078030][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.217508][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.567173][ T7061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.321'. [ 130.731596][ T7061] netlink: 'syz.0.321': attribute type 1 has an invalid length. [ 130.741864][ T7061] netlink: 'syz.0.321': attribute type 2 has an invalid length. [ 130.787710][ T35] bridge_slave_1: left allmulticast mode [ 130.812501][ T35] bridge_slave_1: left promiscuous mode [ 130.829147][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.917573][ T35] bridge_slave_0: left allmulticast mode [ 130.923486][ T35] bridge_slave_0: left promiscuous mode [ 130.930080][ T5160] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 130.942812][ T5160] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 130.952827][ T5160] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 130.965150][ T5160] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 130.975386][ T5160] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 130.991488][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.552438][ T7103] netlink: 28 bytes leftover after parsing attributes in process `syz.2.333'. [ 131.878472][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.889844][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.900532][ T35] bond0 (unregistering): Released all slaves [ 131.918329][ T35] bond1 (unregistering): Released all slaves [ 131.935766][ T35] bond2 (unregistering): Released all slaves [ 132.191118][ T7111] netlink: 48 bytes leftover after parsing attributes in process `syz.4.335'. [ 132.282958][ T7109] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 132.321520][ T7115] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 132.338109][ T7115] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 132.790786][ T35] hsr_slave_0: left promiscuous mode [ 132.813209][ T35] hsr_slave_1: left promiscuous mode [ 132.828419][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.837570][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.847207][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.858197][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.924023][ T35] veth1_macvtap: left promiscuous mode [ 132.953850][ T35] veth0_macvtap: left promiscuous mode [ 132.977653][ T35] veth1_vlan: left promiscuous mode [ 132.983234][ T35] veth0_vlan: left promiscuous mode [ 133.084755][ T5160] Bluetooth: hci4: command tx timeout [ 133.312080][ T35] pimreg (unregistering): left allmulticast mode [ 133.756873][ T35] team0 (unregistering): Port device team_slave_1 removed [ 133.796844][ T35] team0 (unregistering): Port device team_slave_0 removed [ 134.384464][ T7163] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 134.834374][ T7073] chnl_net:caif_netlink_parms(): no params data found [ 134.922690][ T7186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.351'. [ 135.044004][ T7190] netlink: 48 bytes leftover after parsing attributes in process `syz.1.353'. [ 135.166069][ T5160] Bluetooth: hci4: command tx timeout [ 135.340101][ T7073] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.361619][ T7073] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.370222][ T7073] bridge_slave_0: entered allmulticast mode [ 135.378463][ T7073] bridge_slave_0: entered promiscuous mode [ 135.432420][ T7073] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.458889][ T7073] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.483250][ T7073] bridge_slave_1: entered allmulticast mode [ 135.513054][ T7073] bridge_slave_1: entered promiscuous mode [ 135.792598][ T7221] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 135.839772][ T7073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.900461][ T7073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.010904][ T7231] netlink: 88 bytes leftover after parsing attributes in process `syz.4.360'. [ 136.073575][ T7073] team0: Port device team_slave_0 added [ 136.182285][ T7231] netlink: 12 bytes leftover after parsing attributes in process `syz.4.360'. [ 136.423768][ T7073] team0: Port device team_slave_1 added [ 136.931954][ T7291] netlink: 28 bytes leftover after parsing attributes in process `syz.2.367'. [ 137.237256][ T5160] Bluetooth: hci4: command tx timeout [ 137.352718][ T7308] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.210938][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.217662][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.573939][ T7073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.581044][ T7073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.610852][ T7073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.629532][ T7307] netlink: 'syz.1.370': attribute type 1 has an invalid length. [ 138.649977][ T7073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.665542][ T7073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.665595][ T7307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.370'. [ 138.749171][ T7073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.898988][ T7320] netlink: 24 bytes leftover after parsing attributes in process `syz.0.373'. [ 138.971825][ T7321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.375'. [ 139.004512][ T7073] hsr_slave_0: entered promiscuous mode [ 139.045978][ T7073] hsr_slave_1: entered promiscuous mode [ 139.052466][ T7073] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.091603][ T7073] Cannot create hsr debugfs directory [ 139.274427][ T7326] netlink: 'syz.0.376': attribute type 29 has an invalid length. [ 139.295565][ T7326] netlink: 428 bytes leftover after parsing attributes in process `syz.0.376'. [ 139.305533][ T7326] netlink: 20 bytes leftover after parsing attributes in process `syz.0.376'. [ 139.324780][ T5160] Bluetooth: hci4: command tx timeout [ 139.476400][ T7341] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.209735][ T7366] netlink: 'syz.2.386': attribute type 4 has an invalid length. [ 140.383709][ T7378] __nla_validate_parse: 2 callbacks suppressed [ 140.383729][ T7378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.388'. [ 140.419447][ T7378] netlink: 244 bytes leftover after parsing attributes in process `syz.0.388'. [ 140.464173][ T7386] netlink: 'syz.1.389': attribute type 9 has an invalid length. [ 140.595443][ T7377] can: request_module (can-proto-0) failed. [ 140.684368][ T7395] netlink: 165 bytes leftover after parsing attributes in process `syz.0.392'. [ 141.072296][ T7408] netlink: 'syz.2.397': attribute type 1 has an invalid length. [ 141.304986][ T7418] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 141.382292][ T7073] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 141.429769][ T7073] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 141.493457][ T7073] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 141.601807][ T7073] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 141.721138][ T7433] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 141.751405][ T7433] team0: Device ipvlan2 is already an upper device of the team interface [ 142.238124][ T7463] sctp: [Deprecated]: syz.4.409 (pid 7463) Use of int in maxseg socket option. [ 142.238124][ T7463] Use struct sctp_assoc_value instead [ 142.253757][ T7464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.406'. [ 142.272717][ T7462] netlink: 28 bytes leftover after parsing attributes in process `syz.1.407'. [ 142.296502][ T7462] netlink: 24 bytes leftover after parsing attributes in process `syz.1.407'. [ 142.323973][ T7468] sctp: [Deprecated]: syz.4.409 (pid 7468) Use of int in maxseg socket option. [ 142.323973][ T7468] Use struct sctp_assoc_value instead [ 142.349026][ T7467] netlink: 'syz.0.408': attribute type 1 has an invalid length. [ 142.364371][ T7462] gretap0: entered promiscuous mode [ 142.383891][ T7462] gretap0: left promiscuous mode [ 142.447510][ T7073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.536414][ T7073] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.603006][ T3493] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.610293][ T3493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.638802][ T7482] netlink: 16 bytes leftover after parsing attributes in process `syz.2.411'. [ 142.641982][ T3493] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.654982][ T3493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.961149][ T7496] xt_SECMARK: invalid mode: 0 [ 143.277451][ T7509] veth1_macvtap: left promiscuous mode [ 143.285591][ T7509] macsec0: entered promiscuous mode [ 143.290889][ T7509] macsec0: entered allmulticast mode [ 143.367921][ T7510] veth1_macvtap: entered promiscuous mode [ 143.409636][ T7510] veth1_macvtap: entered allmulticast mode [ 143.431477][ T7510] macsec0: left promiscuous mode [ 143.442840][ T7510] macsec0: left allmulticast mode [ 143.448632][ T7510] veth1_macvtap: left allmulticast mode [ 143.560515][ T7073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.873468][ T7073] veth0_vlan: entered promiscuous mode [ 143.952092][ T7073] veth1_vlan: entered promiscuous mode [ 144.158468][ T7073] veth0_macvtap: entered promiscuous mode [ 144.207743][ T7073] veth1_macvtap: entered promiscuous mode [ 144.510816][ T7073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.676971][ T7574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.432'. [ 144.678751][ T7073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.749690][ T7073] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.845815][ T7073] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.896572][ T7073] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.911855][ T7583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.433'. [ 144.933707][ T7073] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.039727][ T7586] netlink: 12 bytes leftover after parsing attributes in process `syz.1.434'. [ 145.069943][ T7583] netlink: 'syz.2.433': attribute type 3 has an invalid length. [ 145.078149][ T7586] netlink: 'syz.1.434': attribute type 1 has an invalid length. [ 145.087018][ T7586] netlink: 'syz.1.434': attribute type 1 has an invalid length. [ 145.096702][ T7586] netlink: 'syz.1.434': attribute type 2 has an invalid length. [ 145.596920][ T7604] xt_l2tp: v2 doesn't support IP mode [ 145.616919][ T7280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.647745][ T7280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.720722][ T7613] trusted_key: syz.0.442 sent an empty control message without MSG_MORE. [ 145.747551][ T3450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.766794][ T3450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.335003][ T7635] __nla_validate_parse: 1 callbacks suppressed [ 146.335023][ T7635] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.445'. [ 146.393352][ T7637] netlink: 24 bytes leftover after parsing attributes in process `syz.2.446'. [ 146.409841][ T7632] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.445'. [ 146.509724][ T7644] Driver unsupported XDP return value 0 on prog (id 111) dev N/A, expect packet loss! [ 146.569252][ T7638] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.445'. [ 146.592329][ T7644] netlink: 168 bytes leftover after parsing attributes in process `syz.1.448'. [ 146.805812][ T7280] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.039593][ T7280] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.148245][ T7280] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.349539][ T7280] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.103266][ T7280] bridge_slave_1: left allmulticast mode [ 148.124498][ T7280] bridge_slave_1: left promiscuous mode [ 148.147282][ T7280] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.175515][ T7700] ieee802154 phy0 wpan0: encryption failed: -22 [ 148.272034][ T7280] bridge_slave_0: left allmulticast mode [ 148.307800][ T7280] bridge_slave_0: left promiscuous mode [ 148.354336][ T7280] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.391463][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 148.409166][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 148.425083][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 148.444191][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 148.478959][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 149.210061][ T7741] netlink: 24 bytes leftover after parsing attributes in process `syz.0.471'. [ 149.497779][ T7280] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.519500][ T7280] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.534416][ T7280] bond0 (unregistering): Released all slaves [ 149.553544][ T7703] netlink: 28 bytes leftover after parsing attributes in process `syz.4.465'. [ 150.020069][ T7766] netlink: 32 bytes leftover after parsing attributes in process `syz.2.475'. [ 150.339069][ T7773] netlink: 40 bytes leftover after parsing attributes in process `syz.0.476'. [ 150.602412][ T51] Bluetooth: hci4: command tx timeout [ 150.618518][ T7280] hsr_slave_0: left promiscuous mode [ 150.642372][ T7280] hsr_slave_1: left promiscuous mode [ 150.676128][ T7280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.728456][ T7280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.815759][ T7280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.823353][ T7280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.919397][ T7280] veth1_macvtap: left promiscuous mode [ 150.932643][ T7802] netlink: 24 bytes leftover after parsing attributes in process `syz.2.485'. [ 150.944772][ T7280] veth0_macvtap: left promiscuous mode [ 150.951448][ T7280] veth1_vlan: left promiscuous mode [ 150.960543][ T7806] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.982560][ T7280] veth0_vlan: left promiscuous mode [ 151.702956][ T7280] team0 (unregistering): Port device team_slave_1 removed [ 151.762032][ T7280] team0 (unregistering): Port device team_slave_0 removed [ 152.474307][ T7838] __nla_validate_parse: 2 callbacks suppressed [ 152.474329][ T7838] netlink: 8 bytes leftover after parsing attributes in process `syz.4.489'. [ 152.624748][ T7847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.491'. [ 152.674969][ T51] Bluetooth: hci4: command 0x041b tx timeout [ 152.705715][ T7854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.492'. [ 152.727191][ T7713] chnl_net:caif_netlink_parms(): no params data found [ 153.185600][ T7713] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.226532][ T7713] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.270147][ T7713] bridge_slave_0: entered allmulticast mode [ 153.283171][ T7713] bridge_slave_0: entered promiscuous mode [ 153.309220][ T7713] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.321584][ T7713] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.329659][ T7713] bridge_slave_1: entered allmulticast mode [ 153.338244][ T7713] bridge_slave_1: entered promiscuous mode [ 153.352441][ T7885] netlink: 'syz.0.498': attribute type 1 has an invalid length. [ 153.378334][ T7885] netlink: 17 bytes leftover after parsing attributes in process `syz.0.498'. [ 153.475500][ T7862] netlink: 28 bytes leftover after parsing attributes in process `syz.2.495'. [ 153.495637][ T7862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.495'. [ 153.544145][ T7713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.617485][ T7713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.647232][ T7895] netlink: 'syz.0.499': attribute type 83 has an invalid length. [ 153.712073][ T7897] netlink: 'syz.0.499': attribute type 83 has an invalid length. [ 153.776957][ T7866] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 153.946695][ T7713] team0: Port device team_slave_0 added [ 153.998867][ T7713] team0: Port device team_slave_1 added [ 154.292504][ T7922] netlink: 'syz.0.504': attribute type 29 has an invalid length. [ 154.332580][ T7923] netlink: 'syz.0.504': attribute type 29 has an invalid length. [ 154.356922][ T7713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.365406][ T7922] netlink: 596 bytes leftover after parsing attributes in process `syz.0.504'. [ 154.369319][ T7713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.404255][ T7927] netlink: 20 bytes leftover after parsing attributes in process `syz.4.506'. [ 154.412286][ T7926] sctp: [Deprecated]: syz.2.508 (pid 7926) Use of struct sctp_assoc_value in delayed_ack socket option. [ 154.412286][ T7926] Use struct sctp_sack_info instead [ 154.438550][ T7713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.452472][ T7713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.462054][ T7713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.496199][ T7713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.760874][ T51] Bluetooth: hci4: command 0x041b tx timeout [ 154.778346][ T7713] hsr_slave_0: entered promiscuous mode [ 154.787227][ T7713] hsr_slave_1: entered promiscuous mode [ 154.793797][ T7713] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.802613][ T7713] Cannot create hsr debugfs directory [ 154.803225][ T7945] netlink: 'syz.2.510': attribute type 1 has an invalid length. [ 154.999554][ T7953] netlink: 'syz.4.515': attribute type 29 has an invalid length. [ 155.756394][ T7987] xt_hashlimit: max too large, truncated to 1048576 [ 155.835820][ T7993] xt_hashlimit: max too large, truncated to 1048576 [ 156.002228][ T7998] netlink: 'syz.2.524': attribute type 5 has an invalid length. [ 156.314809][ T30] audit: type=1804 audit(1750605798.737:2): pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.529" name="/newroot/112/cgroup.controllers" dev="tmpfs" ino=583 res=1 errno=0 [ 156.396805][ T30] audit: type=1800 audit(1750605798.737:3): pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.529" name="cgroup.controllers" dev="tmpfs" ino=583 res=0 errno=0 [ 156.556927][ T8020] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.602549][ T8020] openvswitch: netlink: Key type 9488 is out of range max 32 [ 156.838478][ T51] Bluetooth: hci4: command 0x041b tx timeout [ 157.192848][ T7713] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 157.299394][ T7713] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 157.342869][ T7713] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 157.411444][ T7713] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 157.886760][ T7713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.974856][ T7713] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.220880][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.228239][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.392181][ T3493] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.399454][ T3493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.411554][ T8102] netlink: 260 bytes leftover after parsing attributes in process `syz.0.552'. [ 158.638764][ T8113] netlink: 10712 bytes leftover after parsing attributes in process `syz.0.555'. [ 158.921156][ T51] Bluetooth: hci4: command 0x041b tx timeout [ 159.286700][ T8145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.561'. [ 159.324809][ T8145] netlink: 'syz.4.561': attribute type 5 has an invalid length. [ 159.347142][ T8145] netlink: 20 bytes leftover after parsing attributes in process `syz.4.561'. [ 159.473532][ T7713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.524824][ T8148] xt_CT: No such helper "snmp" [ 159.718089][ T8156] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 159.734969][ T8156] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 160.050086][ T7713] veth0_vlan: entered promiscuous mode [ 160.135457][ T7713] veth1_vlan: entered promiscuous mode [ 160.160391][ T8175] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.280691][ T8181] netlink: 'syz.0.571': attribute type 1 has an invalid length. [ 160.337678][ T7713] veth0_macvtap: entered promiscuous mode [ 160.357038][ T8181] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 160.369974][ T7713] veth1_macvtap: entered promiscuous mode [ 160.396411][ T8188] netlink: 48 bytes leftover after parsing attributes in process `syz.2.572'. [ 160.490440][ T7713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.868857][ T7713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.023134][ T7713] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.083490][ T7713] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.117094][ T7713] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.151918][ T7713] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.339930][ T8230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.582'. [ 161.614752][ T3440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.666293][ T3440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.807496][ T3493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.843169][ T3493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.553633][ T8278] netlink: zone id is out of range [ 162.567193][ T8278] netlink: zone id is out of range [ 162.572535][ T8278] netlink: zone id is out of range [ 162.583476][ T8278] netlink: zone id is out of range [ 162.592132][ T8278] netlink: zone id is out of range [ 162.624071][ T8278] netlink: zone id is out of range [ 162.644045][ T8278] netlink: zone id is out of range [ 162.662157][ T8278] netlink: zone id is out of range [ 162.702651][ T8278] netlink: zone id is out of range [ 162.744937][ T8278] netlink: zone id is out of range [ 162.966589][ T3440] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.143313][ T3440] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.295381][ T3440] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.362127][ T8292] netlink: 4 bytes leftover after parsing attributes in process `syz.4.599'. [ 163.485669][ T3440] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.524159][ T8305] netlink: 24 bytes leftover after parsing attributes in process `syz.0.601'. [ 163.547376][ T8306] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 163.615693][ T8303] ip6gre1: entered allmulticast mode [ 163.950286][ T8314] netlink: 24 bytes leftover after parsing attributes in process `syz.4.604'. [ 164.034033][ T3440] bridge_slave_1: left allmulticast mode [ 164.076856][ T3440] bridge_slave_1: left promiscuous mode [ 164.083182][ T3440] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.105972][ T5160] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 164.116599][ T5160] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 164.145240][ T5160] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 164.155780][ T5160] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 164.167453][ T5160] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 164.182033][ T3440] bridge_slave_0: left allmulticast mode [ 164.190413][ T3440] bridge_slave_0: left promiscuous mode [ 164.198063][ T3440] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.264946][ T8326] xt_CT: No such helper "snmp" [ 164.408668][ T8338] netlink: 'syz.4.608': attribute type 7 has an invalid length. [ 164.966380][ T3440] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.983636][ T3440] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.999094][ T3440] bond0 (unregistering): Released all slaves [ 165.467840][ T8363] pim6reg527: entered allmulticast mode [ 165.629855][ T8375] netlink: 4388 bytes leftover after parsing attributes in process `syz.0.617'. [ 165.947926][ T8378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.617'. [ 166.195113][ T5160] Bluetooth: hci4: command tx timeout [ 166.249465][ T8400] netlink: 12 bytes leftover after parsing attributes in process `syz.2.621'. [ 166.284970][ T3440] hsr_slave_0: left promiscuous mode [ 166.304853][ T3440] hsr_slave_1: left promiscuous mode [ 166.311783][ T3440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.338099][ T3440] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.351006][ T3440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.361919][ T3440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.392723][ T3440] veth1_macvtap: left promiscuous mode [ 166.400256][ T3440] veth0_macvtap: left promiscuous mode [ 166.408863][ T3440] veth1_vlan: left promiscuous mode [ 166.417173][ T3440] veth0_vlan: left promiscuous mode [ 166.961739][ T3440] team0 (unregistering): Port device team_slave_1 removed [ 167.010347][ T3440] team0 (unregistering): Port device team_slave_0 removed [ 167.590193][ T8416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.624'. [ 167.637554][ T8417] netlink: 64 bytes leftover after parsing attributes in process `syz.4.625'. [ 167.913131][ T8432] netlink: 24 bytes leftover after parsing attributes in process `syz.4.628'. [ 168.003806][ T8432] net_ratelimit: 16 callbacks suppressed [ 168.003827][ T8432] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 168.123855][ T8323] chnl_net:caif_netlink_parms(): no params data found [ 168.276971][ T5160] Bluetooth: hci4: command tx timeout [ 168.700719][ T8466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.635'. [ 168.822967][ T8323] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.848817][ T8473] netlink: 8 bytes leftover after parsing attributes in process `syz.4.637'. [ 168.861343][ T8323] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.869566][ T8473] netlink: 12 bytes leftover after parsing attributes in process `syz.4.637'. [ 168.895918][ T8323] bridge_slave_0: entered allmulticast mode [ 168.924917][ T8323] bridge_slave_0: entered promiscuous mode [ 168.974534][ T8323] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.019456][ T8323] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.044456][ T8323] bridge_slave_1: entered allmulticast mode [ 169.076610][ T8323] bridge_slave_1: entered promiscuous mode [ 169.355318][ T8323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.403115][ T8323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.522251][ T8504] netlink: 'syz.0.645': attribute type 10 has an invalid length. [ 169.561661][ T8504] netlink: 40 bytes leftover after parsing attributes in process `syz.0.645'. [ 169.656888][ T8504] batadv0: entered promiscuous mode [ 169.669772][ T8504] batadv0: entered allmulticast mode [ 169.694488][ T8514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.645'. [ 169.716178][ T8504] bridge0: port 3(batadv0) entered blocking state [ 169.729904][ T8504] bridge0: port 3(batadv0) entered disabled state [ 169.757344][ T8504] bridge0: port 3(batadv0) entered blocking state [ 169.764897][ T8504] bridge0: port 3(batadv0) entered forwarding state [ 169.907485][ T3450] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 169.917330][ T3450] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 169.930477][ T8323] team0: Port device team_slave_0 added [ 169.943073][ T8522] xt_hashlimit: max too large, truncated to 1048576 [ 169.954029][ T8323] team0: Port device team_slave_1 added [ 170.133393][ T8530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.649'. [ 170.165513][ T8323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.172575][ T8323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.262954][ T8323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.323291][ T8323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.355456][ T5160] Bluetooth: hci4: command tx timeout [ 170.366609][ T8323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.399502][ T8323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.700021][ T8323] hsr_slave_0: entered promiscuous mode [ 170.733941][ T8323] hsr_slave_1: entered promiscuous mode [ 170.787433][ T8323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.822926][ T8323] Cannot create hsr debugfs directory [ 171.842854][ T8607] netlink: 44 bytes leftover after parsing attributes in process `syz.4.668'. [ 171.940417][ T8613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.669'. [ 172.435031][ T5160] Bluetooth: hci4: command tx timeout [ 172.580531][ T8633] bond0: option mode: unable to set because the bond device is up [ 172.747003][ T8323] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 172.808064][ T8323] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 172.880554][ T8323] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 172.935592][ T8645] netlink: 'syz.2.679': attribute type 29 has an invalid length. [ 172.945204][ T8655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.678'. [ 172.957373][ T8655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.678'. [ 172.975616][ T8323] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 173.177142][ T8674] sctp: [Deprecated]: syz.2.684 (pid 8674) Use of struct sctp_assoc_value in delayed_ack socket option. [ 173.177142][ T8674] Use struct sctp_sack_info instead [ 173.706292][ T8699] __nla_validate_parse: 4 callbacks suppressed [ 173.706323][ T8699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.686'. [ 173.735000][ T8699] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.127050][ T8663] vlan2: entered allmulticast mode [ 176.132270][ T8663] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 176.144145][ T8690] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 176.433429][ T8323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.504862][ T8752] netlink: 16 bytes leftover after parsing attributes in process `syz.0.692'. [ 176.517209][ T8750] gretap0: entered promiscuous mode [ 176.534189][ T8750] vlan4: entered promiscuous mode [ 176.663247][ T8323] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.803376][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.810647][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.853499][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.860787][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.251127][ T8779] netlink: 36 bytes leftover after parsing attributes in process `syz.2.697'. [ 177.418536][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880584c2c00: rx timeout, send abort [ 177.500099][ T8323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.627810][ T8323] veth0_vlan: entered promiscuous mode [ 177.653980][ T8323] veth1_vlan: entered promiscuous mode [ 177.767692][ T8323] veth0_macvtap: entered promiscuous mode [ 177.805556][ T8323] veth1_macvtap: entered promiscuous mode [ 177.828230][ T8790] xt_CT: You must specify a L4 protocol and not use inversions on it [ 177.852279][ T8323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.919067][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057d2a000: rx timeout, send abort [ 177.927959][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880584c2c00: abort rx timeout. Force session deactivation [ 177.962952][ T8323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.032821][ T8323] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.053320][ T8323] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.082688][ T8323] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.101875][ T8323] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.152632][ T8803] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 178.326672][ T8811] netlink: 'syz.1.706': attribute type 10 has an invalid length. [ 178.351744][ T8811] netlink: 4 bytes leftover after parsing attributes in process `syz.1.706'. [ 178.361277][ T8812] netlink: 6 bytes leftover after parsing attributes in process `syz.4.707'. [ 178.388042][ T8812] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 178.427463][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057d2a000: abort rx timeout. Force session deactivation [ 178.529785][ T3493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.562375][ T3493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.713953][ T8827] netlink: zone id is out of range [ 178.723145][ T3493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.745299][ T3493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.885953][ T8832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.713'. [ 178.925171][ T8837] xt_TPROXY: Can be used only with -p tcp or -p udp [ 178.950864][ T8837] netlink: 20 bytes leftover after parsing attributes in process `syz.0.714'. [ 179.223488][ T8845] netlink: 212 bytes leftover after parsing attributes in process `syz.1.718'. [ 179.288052][ T8855] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 3261 [ 179.290317][ T8859] netlink: 12 bytes leftover after parsing attributes in process `syz.4.720'. [ 179.520626][ T7269] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.697039][ T7269] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.851380][ T7269] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.982101][ T7269] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.232591][ T7269] bridge_slave_1: left allmulticast mode [ 180.241626][ T7269] bridge_slave_1: left promiscuous mode [ 180.251560][ T7269] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.269072][ T7269] bridge_slave_0: left allmulticast mode [ 180.275305][ T7269] bridge_slave_0: left promiscuous mode [ 180.281174][ T7269] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.519986][ T8890] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 180.804915][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 180.831658][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 180.848848][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 180.863932][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 180.872516][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 180.935542][ T7269] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.949285][ T7269] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.960775][ T7269] bond0 (unregistering): Released all slaves [ 180.983570][ T8894] netlink: 340 bytes leftover after parsing attributes in process `syz.2.725'. [ 181.461397][ T8913] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 181.898103][ T30] audit: type=1800 audit(1750605824.317:4): pid=8937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.735" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=883 res=0 errno=0 [ 182.122841][ T8951] netlink: 212 bytes leftover after parsing attributes in process `syz.4.737'. [ 182.250224][ T7269] hsr_slave_0: left promiscuous mode [ 182.273919][ T7269] hsr_slave_1: left promiscuous mode [ 182.300353][ T7269] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.323652][ T7269] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.398771][ T7269] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.437467][ T7269] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.445125][ T8960] netlink: 'syz.0.739': attribute type 33 has an invalid length. [ 182.473582][ T8960] netlink: 152 bytes leftover after parsing attributes in process `syz.0.739'. [ 182.503453][ T7269] veth1_macvtap: left promiscuous mode [ 182.517279][ T7269] veth0_macvtap: left promiscuous mode [ 182.542488][ T7269] veth1_vlan: left promiscuous mode [ 182.560091][ T7269] veth0_vlan: left promiscuous mode [ 182.998503][ T51] Bluetooth: hci4: command tx timeout [ 183.402188][ T7269] team0 (unregistering): Port device team_slave_1 removed [ 183.448813][ T7269] team0 (unregistering): Port device team_slave_0 removed [ 183.930932][ T8895] chnl_net:caif_netlink_parms(): no params data found [ 184.122589][ T8988] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.745'. [ 184.506736][ T8895] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.533371][ T8895] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.559436][ T8895] bridge_slave_0: entered allmulticast mode [ 184.572495][ T8895] bridge_slave_0: entered promiscuous mode [ 184.617851][ T8895] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.631892][ T8895] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.634299][ T9005] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 184.652845][ T8895] bridge_slave_1: entered allmulticast mode [ 184.705526][ T8895] bridge_slave_1: entered promiscuous mode [ 184.796635][ T9013] xt_hashlimit: overflow, try lower: 4294967295/0 [ 184.923649][ T8895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.939162][ T9009] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 185.043974][ T8895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.075296][ T51] Bluetooth: hci4: command tx timeout [ 185.420112][ T9027] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}z [ 185.522469][ T8895] team0: Port device team_slave_0 added [ 185.569189][ T8895] team0: Port device team_slave_1 added [ 185.726804][ T9047] netlink: 36 bytes leftover after parsing attributes in process `syz.1.757'. [ 185.862416][ T8895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.894018][ T8895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.998664][ T8895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.063579][ T8895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.101793][ T8895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.225072][ T8895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.442882][ T9069] netlink: 40 bytes leftover after parsing attributes in process `syz.0.765'. [ 186.472278][ T9060] syz.1.761 (9060) used greatest stack depth: 17992 bytes left [ 186.477433][ T8895] hsr_slave_0: entered promiscuous mode [ 186.501866][ T8895] hsr_slave_1: entered promiscuous mode [ 186.515831][ T8895] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 186.548491][ T8895] Cannot create hsr debugfs directory [ 186.612204][ T9046] netlink: 152 bytes leftover after parsing attributes in process `syz.4.756'. [ 186.670578][ T9046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.756'. [ 186.926373][ T9091] netlink: 24 bytes leftover after parsing attributes in process `syz.1.767'. [ 187.155077][ T51] Bluetooth: hci4: command tx timeout [ 187.428059][ T9102] netlink: 36 bytes leftover after parsing attributes in process `syz.2.771'. [ 187.472026][ T9102] tipc: Enabling of bearer rejected, failed to enable media [ 187.498755][ T9108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.773'. [ 187.590405][ T9102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.771'. [ 188.113285][ T9132] netlink: 'syz.2.780': attribute type 11 has an invalid length. [ 188.153202][ T9131] netlink: 'syz.2.780': attribute type 11 has an invalid length. [ 188.162391][ T9134] netlink: 16 bytes leftover after parsing attributes in process `syz.1.779'. [ 188.276774][ T9134] batadv0: entered promiscuous mode [ 188.330551][ T9134] team0: entered promiscuous mode [ 188.357068][ T9134] team_slave_0: entered promiscuous mode [ 188.398984][ T9134] team_slave_1: entered promiscuous mode [ 188.415180][ T9134] hsr1: entered promiscuous mode [ 188.422301][ T9134] hsr1: entered allmulticast mode [ 188.444339][ T9134] batadv0: entered allmulticast mode [ 188.464261][ T9134] team0: entered allmulticast mode [ 188.482292][ T9134] team_slave_0: entered allmulticast mode [ 188.501274][ T9134] team_slave_1: entered allmulticast mode [ 189.090844][ T8895] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 189.118220][ T8895] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 189.139982][ T8895] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 189.219746][ T8895] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 189.235082][ T51] Bluetooth: hci4: command tx timeout [ 189.529057][ T9190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.606662][ T8895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.694393][ T8895] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.745403][ T3450] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.752597][ T3450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.833995][ T3450] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.841306][ T3450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.865394][ T9206] __nla_validate_parse: 1 callbacks suppressed [ 189.865420][ T9206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.797'. [ 190.083009][ T9211] netlink: 12 bytes leftover after parsing attributes in process `syz.1.798'. [ 190.938135][ T8895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.988240][ T9250] tipc: Started in network mode [ 190.993225][ T9250] tipc: Node identity fe8000000000000000000000000000bb, cluster identity 4711 [ 191.045000][ T9250] tipc: Enabling of bearer rejected, failed to enable media [ 191.079253][ T9250] netlink: 'syz.2.807': attribute type 11 has an invalid length. [ 191.100972][ T9250] netlink: 224 bytes leftover after parsing attributes in process `syz.2.807'. [ 191.196546][ T9261] netlink: 'syz.0.809': attribute type 1 has an invalid length. [ 191.216841][ T8895] veth0_vlan: entered promiscuous mode [ 191.325421][ T51] Bluetooth: hci4: command tx timeout [ 191.334489][ T9261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.440755][ T8895] veth1_vlan: entered promiscuous mode [ 191.539684][ T9265] ip6erspan0: entered promiscuous mode [ 191.577094][ T9274] sctp: [Deprecated]: syz.1.813 (pid 9274) Use of int in max_burst socket option. [ 191.577094][ T9274] Use struct sctp_assoc_value instead [ 191.594470][ T9265] bond0: (slave ip6erspan0): making interface the new active one [ 191.638857][ T9265] bond0: (slave ip6erspan0): Enslaving as an active interface with an up link [ 191.850266][ T9279] xt_CT: No such helper "netbios-ns" [ 191.898197][ T8895] veth0_macvtap: entered promiscuous mode [ 191.942957][ T8895] veth1_macvtap: entered promiscuous mode [ 192.059878][ T8895] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.127465][ T8895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.170514][ T8895] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.182223][ T9297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.818'. [ 192.202199][ T8895] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.230263][ T8895] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.271153][ T8895] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.304784][ T9300] netlink: 1044 bytes leftover after parsing attributes in process `syz.1.819'. [ 192.329290][ T9302] : entered promiscuous mode [ 192.623969][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.664159][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.743860][ T3440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.759923][ T3440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.093989][ T9337] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 193.871739][ T1161] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.047890][ T1161] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.186951][ T1161] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.271331][ T1161] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.490311][ T1161] bridge_slave_1: left allmulticast mode [ 194.497805][ T1161] bridge_slave_1: left promiscuous mode [ 194.503670][ T1161] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.514424][ T1161] bridge_slave_0: left allmulticast mode [ 194.522513][ T1161] bridge_slave_0: left promiscuous mode [ 194.529480][ T1161] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.299046][ T30] audit: type=1107 audit(1750605837.717:5): pid=9416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 195.517001][ T5160] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 195.638503][ T5160] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 195.649552][ T5160] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 195.677189][ T5160] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 195.685962][ T5160] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 195.855753][ T1161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.881777][ T1161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.900088][ T1161] bond0 (unregistering): Released all slaves [ 195.933422][ T9400] bridge0: entered allmulticast mode [ 195.966232][ T9417] batadv1: entered allmulticast mode [ 196.143866][ T9446] netlink: 216 bytes leftover after parsing attributes in process `syz.0.844'. [ 196.490945][ T9453] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.653225][ T9453] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.690786][ T9468] tunl0: entered promiscuous mode [ 196.704464][ T9468] netlink: 'syz.4.850': attribute type 3 has an invalid length. [ 196.717084][ T9468] netlink: 9 bytes leftover after parsing attributes in process `syz.4.850'. [ 197.003172][ T9453] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.126874][ T9497] netlink: 24 bytes leftover after parsing attributes in process `syz.0.855'. [ 197.149885][ T9500] netlink: 12 bytes leftover after parsing attributes in process `syz.0.855'. [ 197.190746][ T9501] netlink: 12 bytes leftover after parsing attributes in process `syz.0.855'. [ 197.245380][ T1161] hsr_slave_0: left promiscuous mode [ 197.262656][ T1161] hsr_slave_1: left promiscuous mode [ 197.271600][ T1161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.295283][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.316153][ T1161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.344206][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.389209][ T1161] veth1_macvtap: left promiscuous mode [ 197.403926][ T1161] veth0_macvtap: left promiscuous mode [ 197.411313][ T1161] veth1_vlan: left promiscuous mode [ 197.421083][ T1161] veth0_vlan: left promiscuous mode [ 197.801267][ T51] Bluetooth: hci4: command tx timeout [ 197.981173][ T1161] team0 (unregistering): Port device team_slave_1 removed [ 198.027453][ T1161] team0 (unregistering): Port device team_slave_0 removed [ 198.563341][ T9497] netdevsim netdevsim0 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 198.764479][ T9516] netlink: 'syz.0.859': attribute type 6 has an invalid length. [ 198.922361][ T9453] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.090273][ T9453] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.347670][ T9453] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.404523][ T9453] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.423433][ T9545] IPv6: NLM_F_CREATE should be specified when creating new route [ 199.494827][ T9431] chnl_net:caif_netlink_parms(): no params data found [ 199.645323][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.823155][ T9431] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.843086][ T9431] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.850948][ T9431] bridge_slave_0: entered allmulticast mode [ 199.881192][ T51] Bluetooth: hci4: command tx timeout [ 199.911582][ T9431] bridge_slave_0: entered promiscuous mode [ 199.921530][ T9431] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.931869][ T9431] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.939734][ T9431] bridge_slave_1: entered allmulticast mode [ 199.947801][ T9431] bridge_slave_1: entered promiscuous mode [ 200.186219][ T9561] bond0: (slave bond_slave_0): Releasing backup interface [ 200.186886][ T9568] netlink: 'syz.0.870': attribute type 75 has an invalid length. [ 200.247869][ T9431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.285665][ T9431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.420470][ T9577] xt_socket: unknown flags 0x3c [ 200.563674][ T9431] team0: Port device team_slave_0 added [ 200.579549][ T9431] team0: Port device team_slave_1 added [ 200.597969][ T9581] netlink: 'syz.0.875': attribute type 1 has an invalid length. [ 200.760067][ T5160] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 200.776227][ T5160] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 200.785399][ T5160] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 200.803137][ T5160] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 200.811179][ T5160] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 200.838249][ T9591] xt_hashlimit: size too large, truncated to 1048576 [ 200.879814][ T9431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.918003][ T9431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.011152][ T9431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.056535][ T9431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.067996][ T9431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.104284][ T9431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.150869][ T9598] batadv1: entered allmulticast mode [ 201.229018][ T9599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.880'. [ 201.266489][ T9599] chnl_net:caif_netlink_parms(): no params data found [ 201.587780][ T3493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.611854][ T3493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.663821][ T9625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.884'. [ 201.770646][ T9431] hsr_slave_0: entered promiscuous mode [ 201.777572][ T9431] hsr_slave_1: entered promiscuous mode [ 201.785341][ T9431] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 201.792958][ T9431] Cannot create hsr debugfs directory [ 201.917030][ T9634] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 201.955346][ T51] Bluetooth: hci4: command tx timeout [ 202.501547][ T9658] bridge_slave_0: left allmulticast mode [ 202.507413][ T9658] bridge_slave_0: left promiscuous mode [ 202.513239][ T9658] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.533357][ T9658] bridge_slave_1: left allmulticast mode [ 202.539237][ T9658] bridge_slave_1: left promiscuous mode [ 202.545682][ T9658] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.561114][ T9658] bond0: (slave bond_slave_0): Releasing backup interface [ 202.580812][ T9658] bond0: (slave bond_slave_1): Releasing backup interface [ 202.601733][ T9658] team_slave_0: left promiscuous mode [ 202.611641][ T9658] team_slave_0: left allmulticast mode [ 202.636554][ T9658] team0: Port device team_slave_0 removed [ 202.643251][ T9658] team_slave_1: left promiscuous mode [ 202.649698][ T9658] team_slave_1: left allmulticast mode [ 202.674566][ T9658] team0: Port device team_slave_1 removed [ 202.681438][ T9658] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.688972][ T9658] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.698293][ T9658] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.706257][ T9658] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.835151][ T51] Bluetooth: hci2: command tx timeout [ 203.036234][ T9585] chnl_net:caif_netlink_parms(): no params data found [ 203.332311][ T9681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.897'. [ 203.807075][ T9695] netlink: 'syz.0.902': attribute type 33 has an invalid length. [ 203.825109][ T9585] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.864690][ T9585] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.872024][ T9585] bridge_slave_0: entered allmulticast mode [ 203.916736][ T9585] bridge_slave_0: entered promiscuous mode [ 203.929280][ T9585] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.946863][ T9585] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.953933][ T9701] netlink: 132 bytes leftover after parsing attributes in process `syz.1.904'. [ 203.954218][ T9585] bridge_slave_1: entered allmulticast mode [ 203.984238][ T9585] bridge_slave_1: entered promiscuous mode [ 204.036485][ T51] Bluetooth: hci4: command tx timeout [ 204.097641][ T9585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.110810][ T9585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.288525][ T9585] team0: Port device team_slave_0 added [ 204.300561][ T9585] team0: Port device team_slave_1 added [ 204.400948][ T9585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.409574][ T9585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.436928][ T9585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.460321][ T9717] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.908'. [ 204.475556][ T9713] netlink: 12 bytes leftover after parsing attributes in process `syz.1.907'. [ 204.509452][ T9585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.524778][ T9585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.578201][ T9585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.657486][ T9431] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 204.683944][ T9431] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 204.780747][ T9431] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 204.833581][ T9730] netlink: 168 bytes leftover after parsing attributes in process `syz.0.910'. [ 204.893340][ T9431] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 204.915027][ T51] Bluetooth: hci2: command tx timeout [ 204.940710][ T9585] hsr_slave_0: entered promiscuous mode [ 204.949970][ T9585] hsr_slave_1: entered promiscuous mode [ 204.958467][ T9585] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 204.967898][ T9585] Cannot create hsr debugfs directory [ 205.322757][ T9755] netlink: 40 bytes leftover after parsing attributes in process `syz.2.913'. [ 205.363622][ T9756] netlink: 40 bytes leftover after parsing attributes in process `syz.2.913'. [ 205.483109][ T9585] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.586688][ T9585] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.676457][ T9762] IPVS: length: 157 != 24 [ 205.745946][ T9431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.806871][ T9585] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.890848][ T9431] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.953749][ T9585] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.980033][ T9771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.917'. [ 205.992606][ T3560] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.999976][ T3560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.041743][ T3560] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.049051][ T3560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.196149][ T9777] netlink: 'syz.2.920': attribute type 9 has an invalid length. [ 206.326321][ T9777] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 206.461924][ T9585] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 206.514011][ T9585] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 206.580863][ T9585] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 206.613022][ T9585] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 206.642005][ T9790] netlink: 12 bytes leftover after parsing attributes in process `syz.0.923'. [ 206.669099][ T9791] xt_CT: No such helper "syz0" [ 206.784185][ T9804] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 206.874061][ T9431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.995200][ T51] Bluetooth: hci2: command tx timeout [ 207.125985][ T9431] veth0_vlan: entered promiscuous mode [ 207.201785][ T9431] veth1_vlan: entered promiscuous mode [ 207.237459][ T9585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.259546][ T9817] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 207.369420][ T9823] bridge1: entered promiscuous mode [ 207.384546][ T9823] bridge1: entered allmulticast mode [ 207.459331][ T9824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.930'. [ 207.493932][ T9585] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.531914][ T9431] veth0_macvtap: entered promiscuous mode [ 207.564667][ T3450] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.571894][ T3450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.668003][ T3560] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.675262][ T3560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.699421][ T9831] netlink: 252 bytes leftover after parsing attributes in process `syz.2.932'. [ 207.708445][ T9431] veth1_macvtap: entered promiscuous mode [ 207.799884][ T9431] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.805234][ T9833] netlink: 28 bytes leftover after parsing attributes in process `syz.1.933'. [ 207.838011][ T9431] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.937614][ T9835] bond2: entered promiscuous mode [ 207.956671][ T9835] bond2: entered allmulticast mode [ 207.962286][ T9835] 8021q: adding VLAN 0 to HW filter on device bond2 [ 208.087208][ T9835] bond2 (unregistering): Released all slaves [ 208.122919][ T9431] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.144689][ T9431] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.154147][ T9431] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.170393][ T9431] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.499591][ T3493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.540261][ T3493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.663513][ T992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.702995][ T992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.723099][ T30] audit: type=1107 audit(1750605851.147:6): pid=9856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='w¨ÛÒ¨¯¹ƒÃ,£Y±ILaxïr' [ 209.085242][ T51] Bluetooth: hci2: command tx timeout [ 209.131815][ T9585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.365281][ T9883] netlink: 'syz.2.943': attribute type 13 has an invalid length. [ 209.521065][ T992] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.619366][ T9883] veth0_macvtap: left promiscuous mode [ 209.630477][ T9883] macvtap0: entered allmulticast mode [ 209.658416][ T9883] macvtap0: refused to change device tx_queue_len [ 209.790033][ T992] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.930261][ T992] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.255987][ T992] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.316636][ T9585] veth0_vlan: entered promiscuous mode [ 210.343245][ T9585] veth1_vlan: entered promiscuous mode [ 210.451897][ T9585] veth0_macvtap: entered promiscuous mode [ 210.510654][ T9585] veth1_macvtap: entered promiscuous mode [ 210.763450][ T992] bridge_slave_1: left allmulticast mode [ 210.785011][ T992] bridge_slave_1: left promiscuous mode [ 210.790974][ T992] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.791104][ T9907] netlink: 'syz.1.946': attribute type 11 has an invalid length. [ 210.807295][ T9911] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 210.817074][ T5910] IPVS: starting estimator thread 0... [ 210.825180][ T9907] netlink: 224 bytes leftover after parsing attributes in process `syz.1.946'. [ 210.841524][ T992] bridge_slave_0: left allmulticast mode [ 210.871776][ T992] bridge_slave_0: left promiscuous mode [ 210.889442][ T992] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.925215][ T9916] IPVS: using max 25 ests per chain, 60000 per kthread [ 211.318039][ T9930] af_packet: tpacket_rcv: packet too big, clamped from 122 to 4294967286. macoff=82 [ 211.505286][ T9935] x_tables: duplicate underflow at hook 1 [ 211.530011][ T5160] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 211.543181][ T5160] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 211.578667][ T5160] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 211.600856][ T5160] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 211.614827][ T5160] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 211.810019][ T992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.821399][ T992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.832267][ T992] bond0 (unregistering): Released all slaves [ 211.956490][ T9585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.040533][ T9585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.074475][ T9949] netlink: 52 bytes leftover after parsing attributes in process `syz.2.954'. [ 212.133860][ T9585] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.145141][ T9585] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.154012][ T9585] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.167976][ T9585] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.659184][ T992] hsr_slave_0: left promiscuous mode [ 212.701126][ T992] hsr_slave_1: left promiscuous mode [ 212.711353][ T992] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.739989][ T992] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.777371][ T992] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.796319][ T992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.858948][ T992] veth1_macvtap: left promiscuous mode [ 212.876004][ T992] veth0_macvtap: left promiscuous mode [ 212.881771][ T992] veth1_vlan: left promiscuous mode [ 212.901189][ T992] veth0_vlan: left promiscuous mode [ 213.014257][ T9973] netlink: 20 bytes leftover after parsing attributes in process `syz.2.958'. [ 213.028795][ T9975] netlink: 'syz.0.959': attribute type 1 has an invalid length. [ 213.037628][ T9973] netlink: 12 bytes leftover after parsing attributes in process `syz.2.958'. [ 213.088833][ T9980] netlink: 'syz.2.958': attribute type 1 has an invalid length. [ 213.311729][ T9988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.959'. [ 213.349150][ T9988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.959'. [ 213.650634][ T51] Bluetooth: hci4: command tx timeout [ 213.951380][ T992] team0 (unregistering): Port device team_slave_1 removed [ 213.998774][ T992] team0 (unregistering): Port device team_slave_0 removed [ 214.460614][ T9975] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 214.466187][ T9980] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 214.482187][ T9982] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 214.852087][ T9937] chnl_net:caif_netlink_parms(): no params data found [ 215.027912][T10011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.962'. [ 215.199247][T10019] netlink: 'syz.1.963': attribute type 1 has an invalid length. [ 215.207553][T10019] netlink: 'syz.1.963': attribute type 2 has an invalid length. [ 215.263976][T10022] netlink: 'syz.1.963': attribute type 1 has an invalid length. [ 215.288376][T10022] netlink: 'syz.1.963': attribute type 2 has an invalid length. [ 215.408120][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.455465][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.647720][ T3450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.679750][ T3450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.716589][ T5844] Bluetooth: hci4: command tx timeout [ 215.744800][T10034] ip6gre1: entered allmulticast mode [ 215.958263][ T9937] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.995008][ T9937] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.005734][T10047] netlink: 56 bytes leftover after parsing attributes in process `syz.2.967'. [ 216.018456][ T9937] bridge_slave_0: entered allmulticast mode [ 216.045963][ T9937] bridge_slave_0: entered promiscuous mode [ 216.066211][ T9937] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.073400][ T9937] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.086557][ T9937] bridge_slave_1: entered allmulticast mode [ 216.103773][ T9937] bridge_slave_1: entered promiscuous mode [ 216.405964][ T9937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.442142][ T9937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.527120][T10064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.974'. [ 216.693500][ T9937] team0: Port device team_slave_0 added [ 216.729188][ T9937] team0: Port device team_slave_1 added [ 216.864360][ T992] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.943173][ T9937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.965238][ T9937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.024710][ T9937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.048110][ T9937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.055546][ T9937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.088014][ T5844] Bluetooth: hci3: command 0x0406 tx timeout [ 217.088060][ T5852] Bluetooth: hci1: command 0x0406 tx timeout [ 217.134693][ T9937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.279999][ T992] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.519090][ T992] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.699258][ T992] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.750790][ T9937] hsr_slave_0: entered promiscuous mode [ 217.760214][ T9937] hsr_slave_1: entered promiscuous mode [ 217.789004][ T9937] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.800434][ T51] Bluetooth: hci4: command tx timeout [ 217.811714][ T9937] Cannot create hsr debugfs directory [ 218.159449][ T5160] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 218.169726][ T5160] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 218.180685][ T5160] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 218.198905][ T5160] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 218.220545][ T5160] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 218.518671][ T992] bridge_slave_1: left allmulticast mode [ 218.524529][ T992] bridge_slave_1: left promiscuous mode [ 218.537579][ T992] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.551476][ T992] bridge_slave_0: left allmulticast mode [ 218.570951][ T992] bridge_slave_0: left promiscuous mode [ 218.586643][ T992] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.601516][T10126] netlink: 16 bytes leftover after parsing attributes in process `syz.1.983'. [ 218.933280][T10138] netlink: 60 bytes leftover after parsing attributes in process `syz.0.988'. [ 219.148659][ T992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.161680][ T992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.172920][ T992] bond0 (unregistering): Released all slaves [ 219.438538][T10148] netlink: 'syz.1.989': attribute type 1 has an invalid length. [ 219.446342][T10148] netlink: 208 bytes leftover after parsing attributes in process `syz.1.989'. [ 219.457170][T10148] netlink: 'syz.1.989': attribute type 1 has an invalid length. [ 219.465385][T10148] netlink: 'syz.1.989': attribute type 2 has an invalid length. [ 219.562416][T10146] bridge0: port 3(vlan4) entered blocking state [ 219.570418][T10146] bridge0: port 3(vlan4) entered disabled state [ 219.577286][T10146] vlan4: entered allmulticast mode [ 219.590618][T10146] bridge0: entered allmulticast mode [ 219.609376][T10146] vlan4: left allmulticast mode [ 219.614526][T10146] bridge0: left allmulticast mode [ 219.849869][T10160] netlink: 48 bytes leftover after parsing attributes in process `syz.2.993'. [ 219.882471][ T51] Bluetooth: hci4: command tx timeout [ 220.030943][T10170] tipc: Started in network mode [ 220.037629][T10170] tipc: Node identity 56d03e7baa18, cluster identity 4711 [ 220.085085][T10170] tipc: Enabled bearer , priority 0 [ 220.104380][T10172] netlink: 'syz.2.993': attribute type 5 has an invalid length. [ 220.241136][T10153] syzkaller0: entered promiscuous mode [ 220.266339][T10153] syzkaller0: entered allmulticast mode [ 220.275412][ T51] Bluetooth: hci2: command tx timeout [ 220.290901][T10153] tipc: Resetting bearer [ 220.436133][ T992] hsr_slave_0: left promiscuous mode [ 220.457706][ T992] hsr_slave_1: left promiscuous mode [ 220.463919][ T992] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.476015][ T992] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.491690][ T992] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.509789][ T992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.539878][ T992] veth1_macvtap: left promiscuous mode [ 220.545789][ T992] veth0_macvtap: left promiscuous mode [ 220.551679][ T992] veth1_vlan: left promiscuous mode [ 220.557510][ T992] veth0_vlan: left promiscuous mode [ 221.133610][ T992] team0 (unregistering): Port device team_slave_1 removed [ 221.142760][ T1213] tipc: Node number set to 4240981627 [ 221.189021][ T992] team0 (unregistering): Port device team_slave_0 removed [ 221.670936][ T3450] tipc: Resetting bearer [ 221.681628][T10152] tipc: Resetting bearer [ 221.763455][T10194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.997'. [ 222.356110][ T51] Bluetooth: hci2: command tx timeout [ 223.330230][T10152] tipc: Disabling bearer [ 223.385268][T10186] netlink: 32 bytes leftover after parsing attributes in process `syz.2.996'. [ 224.089210][T10111] chnl_net:caif_netlink_parms(): no params data found [ 224.179186][ T9937] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 224.258015][T10221] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1004'. [ 224.288213][ T9937] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 224.435028][ T51] Bluetooth: hci2: command tx timeout [ 224.475621][T10231] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1006'. [ 224.532102][ T9937] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 224.613860][T10238] tipc: New replicast peer: 255.255.255.255 [ 224.620954][T10238] tipc: Enabled bearer , priority 10 [ 224.647675][ T9937] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 224.929246][T10257] xt_socket: unknown flags 0x50 [ 224.990296][T10111] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.010579][T10111] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.018772][T10111] bridge_slave_0: entered allmulticast mode [ 225.032383][T10111] bridge_slave_0: entered promiscuous mode [ 225.072157][T10260] xt_CT: No such helper "syz1" [ 225.160850][T10111] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.171374][T10111] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.179247][T10111] bridge_slave_1: entered allmulticast mode [ 225.187640][T10111] bridge_slave_1: entered promiscuous mode [ 226.518814][ T51] Bluetooth: hci2: command tx timeout [ 226.847528][T10274] : renamed from hsr0 (while UP) [ 226.883436][T10111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.936466][T10111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.996121][T10276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1015'. [ 227.173042][T10111] team0: Port device team_slave_0 added [ 227.208408][T10111] team0: Port device team_slave_1 added [ 227.342649][T10111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.384816][T10111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.424307][T10111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.510389][T10111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.527586][T10111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.557632][T10111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.588862][T10306] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 227.746965][T10310] netlink: 'syz.1.1025': attribute type 6 has an invalid length. [ 227.804183][T10111] hsr_slave_0: entered promiscuous mode [ 227.821225][T10111] hsr_slave_1: entered promiscuous mode [ 227.830759][T10111] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.864715][T10111] Cannot create hsr debugfs directory [ 227.910634][ T9937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.268563][T10324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.512135][ T9937] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.724655][ T3493] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.731951][ T3493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.858939][ T3450] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.866242][ T3450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.951177][T10347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1031'. [ 229.133114][T10349] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.478537][T10363] Cannot find del_set index 128 as target [ 229.525529][T10363] Cannot find del_set index 128 as target [ 229.589037][T10364] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1035'. [ 229.627018][T10364] nbd: illegal input index 61504 [ 229.682945][T10363] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 229.798833][T10111] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 229.876405][T10111] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 229.930401][T10111] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 230.009377][T10111] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 230.174018][ T9937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.559927][ T9937] veth0_vlan: entered promiscuous mode [ 230.594119][ T9937] veth1_vlan: entered promiscuous mode [ 230.662671][T10111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.767501][ T9937] veth0_macvtap: entered promiscuous mode [ 230.828536][T10111] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.880600][ T9937] veth1_macvtap: entered promiscuous mode [ 230.918180][ T3493] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.925482][ T3493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.976271][T10422] sctp: [Deprecated]: syz.0.1045 (pid 10422) Use of struct sctp_assoc_value in delayed_ack socket option. [ 230.976271][T10422] Use struct sctp_sack_info instead [ 231.068589][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.075874][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.163766][ T9937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.199705][ T9937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.262925][ T9937] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.293410][ T9937] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.313941][ T9937] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.335654][ T9937] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.346170][T10429] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1048'. [ 231.389625][T10429] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1048'. [ 231.842605][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.873352][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.941617][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.953200][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.129929][T10111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.309189][T10448] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1051'. [ 232.663205][ T51] block nbd0: Receive control failed (result -32) [ 232.831083][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.090065][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.264311][T10111] veth0_vlan: entered promiscuous mode [ 233.309834][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.341864][T10111] veth1_vlan: entered promiscuous mode [ 233.412429][T10111] veth0_macvtap: entered promiscuous mode [ 233.432455][T10111] veth1_macvtap: entered promiscuous mode [ 233.463956][T10111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.486633][T10111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.513218][T10111] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.528364][T10111] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.539668][T10111] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.548804][T10111] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.582945][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.792001][ T3450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.802856][ T3450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.887966][ T12] bridge_slave_1: left allmulticast mode [ 233.899796][ T12] bridge_slave_1: left promiscuous mode [ 233.906962][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.936782][ T12] bridge_slave_0: left allmulticast mode [ 233.942537][ T12] bridge_slave_0: left promiscuous mode [ 233.982545][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.066629][T10497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1057'. [ 234.105398][T10497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1057'. [ 234.136075][T10502] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1057'. [ 234.215600][T10497] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1057'. [ 234.717936][ T5160] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 234.729833][ T5160] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 234.739887][ T5160] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 234.749677][ T5160] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 234.759548][ T5160] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 234.996406][T10522] netlink: 'syz.2.1059': attribute type 10 has an invalid length. [ 235.133194][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.150410][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.162258][ T12] bond0 (unregistering): Released all slaves [ 235.221465][T10522] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 235.255522][T10522] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 235.330041][ T3560] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.366486][ T3560] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.175485][T10555] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1452) ! [ 236.400163][ T12] hsr_slave_0: left promiscuous mode [ 236.435812][ T12] hsr_slave_1: left promiscuous mode [ 236.442061][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.445892][T10576] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1069'. [ 236.484501][T10576] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1069'. [ 236.484845][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.565777][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.583444][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.665231][ T12] veth1_macvtap: left promiscuous mode [ 236.674189][ T12] veth0_macvtap: left promiscuous mode [ 236.694522][ T12] veth1_vlan: left promiscuous mode [ 236.707902][ T12] veth0_vlan: left promiscuous mode [ 236.835281][ T51] Bluetooth: hci4: command tx timeout [ 236.906600][T10588] netlink: 'syz.0.1070': attribute type 10 has an invalid length. [ 237.463694][ T5160] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 237.488327][ T5160] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 237.501106][ T5160] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 237.525936][ T5160] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 237.551352][ T5160] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 237.782944][ T12] team0 (unregistering): Port device team_slave_1 removed [ 237.832926][ T12] team0 (unregistering): Port device team_slave_0 removed [ 238.420954][T10576] erspan0: entered promiscuous mode [ 238.428695][T10576] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.441892][T10576] Cannot create hsr debugfs directory [ 238.447985][T10576] hsr0: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 238.463050][T10588] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 238.474011][T10588] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 238.716547][T10613] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1075'. [ 238.923913][ T5160] Bluetooth: hci4: command tx timeout [ 238.956335][T10618] netem: change failed [ 238.984471][T10517] chnl_net:caif_netlink_parms(): no params data found [ 239.101421][T10624] ipvlan1: entered allmulticast mode [ 239.107157][T10624] veth0_vlan: entered allmulticast mode [ 239.181524][T10628] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1080'. [ 239.275768][T10628] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1080'. [ 239.635302][ T5160] Bluetooth: hci2: command tx timeout [ 239.830236][T10648] xt_CT: You must specify a L4 protocol and not use inversions on it [ 239.844386][ T3560] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.127387][ T3560] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.173511][T10517] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.212247][T10517] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.220658][T10517] bridge_slave_0: entered allmulticast mode [ 240.229051][T10517] bridge_slave_0: entered promiscuous mode [ 240.277924][ T3560] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.320745][T10601] chnl_net:caif_netlink_parms(): no params data found [ 240.325153][T10671] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1088'. [ 240.371967][T10517] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.384532][T10517] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.393661][T10517] bridge_slave_1: entered allmulticast mode [ 240.447517][T10517] bridge_slave_1: entered promiscuous mode [ 240.463034][T10671] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 240.497854][T10671] tipc: Enabled bearer , priority 10 [ 240.547681][ T3560] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.751913][T10692] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 240.839414][T10517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.888775][T10517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.994941][ T5160] Bluetooth: hci4: command tx timeout [ 241.110984][T10701] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 241.261463][T10517] team0: Port device team_slave_0 added [ 241.380062][T10517] team0: Port device team_slave_1 added [ 241.618966][ T6414] tipc: Node number set to 4269801659 [ 241.721286][ T5160] Bluetooth: hci2: command tx timeout [ 241.773016][T10601] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.796312][T10601] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.803639][T10601] bridge_slave_0: entered allmulticast mode [ 241.821449][T10601] bridge_slave_0: entered promiscuous mode [ 241.840770][T10517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.852389][T10517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.912127][T10517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.000958][T10742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1103'. [ 242.081312][T10742] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1103'. [ 242.136858][T10601] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.144088][T10601] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.209128][T10601] bridge_slave_1: entered allmulticast mode [ 242.247936][T10601] bridge_slave_1: entered promiscuous mode [ 242.371562][T10517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.403281][T10517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.474987][T10517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.533740][T10757] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1105'. [ 242.571891][ T30] audit: type=1107 audit(1750605884.997:7): pid=10752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='÷c˜Ôñ»@`ÿš£¶Þº' [ 242.591962][T10601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.632637][ T3560] bridge_slave_1: left allmulticast mode [ 242.641577][ T3560] bridge_slave_1: left promiscuous mode [ 242.650422][ T3560] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.664113][ T3560] bridge_slave_0: left allmulticast mode [ 242.686548][ T3560] bridge_slave_0: left promiscuous mode [ 242.692415][ T3560] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.084795][ T5160] Bluetooth: hci4: command tx timeout [ 243.192953][ T3560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.208963][ T3560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.220441][ T3560] bond0 (unregistering): Released all slaves [ 243.267178][T10601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.568547][T10779] netlink: 'syz.2.1111': attribute type 9 has an invalid length. [ 243.623160][T10781] netlink: 'syz.2.1111': attribute type 9 has an invalid length. [ 243.719531][T10601] team0: Port device team_slave_0 added [ 243.805486][ T5160] Bluetooth: hci2: command tx timeout [ 243.842518][T10779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1111'. [ 243.941760][T10517] hsr_slave_0: entered promiscuous mode [ 243.966312][T10517] hsr_slave_1: entered promiscuous mode [ 243.985326][T10517] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 244.015196][T10517] Cannot create hsr debugfs directory [ 244.060994][T10601] team0: Port device team_slave_1 added [ 244.469158][T10601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.488103][T10601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.557918][T10601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.597328][T10601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.604345][T10601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.641162][T10601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.702748][ T3560] hsr_slave_0: left promiscuous mode [ 244.746843][ T3560] hsr_slave_1: left promiscuous mode [ 244.763168][ T3560] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.793278][ T3560] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.832038][ T3560] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.860741][ T3560] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.911821][ T3560] veth1_macvtap: left promiscuous mode [ 244.918281][ T3560] veth0_macvtap: left promiscuous mode [ 244.924210][ T3560] veth1_vlan: left promiscuous mode [ 244.930353][ T3560] veth0_vlan: left promiscuous mode [ 245.558266][ T3560] team0 (unregistering): Port device team_slave_1 removed [ 245.607994][ T3560] team0 (unregistering): Port device team_slave_0 removed [ 245.879788][ T51] Bluetooth: hci2: command tx timeout [ 246.410994][T10601] hsr_slave_0: entered promiscuous mode [ 246.424536][T10601] hsr_slave_1: entered promiscuous mode [ 246.433441][T10601] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 246.472145][T10601] Cannot create hsr debugfs directory [ 247.342064][T10861] bond1: entered promiscuous mode [ 247.347532][T10861] bond1: entered allmulticast mode [ 247.353258][T10861] 8021q: adding VLAN 0 to HW filter on device bond1 [ 247.865691][T10601] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 247.880514][T10601] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 247.907105][T10601] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 247.939939][T10601] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 248.024899][T10517] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 248.035992][T10517] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 248.050692][T10517] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 248.063004][T10517] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 248.323250][T10601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.426557][T10601] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.483687][T10517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.528605][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.535893][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.598648][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.605944][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.655986][T10517] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.776142][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.783429][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.833551][T10916] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1136'. [ 248.834390][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.849861][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.882289][T10918] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 248.931754][T10922] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1138'. [ 248.972171][T10916] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1136'. [ 248.983147][T10916] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1136'. [ 249.523334][T10944] netlink: 'syz.1.1141': attribute type 10 has an invalid length. [ 249.612172][T10944] netlink: 'syz.1.1141': attribute type 10 has an invalid length. [ 249.662859][T10944] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1141'. [ 249.698171][T10944] bridge0: port 1(batadv0) entered blocking state [ 249.711636][T10944] bridge0: port 1(batadv0) entered disabled state [ 249.739083][T10944] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 249.916753][T10601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.978884][T10956] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1143'. [ 250.107266][T10517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.318623][T10966] netlink: 'syz.2.1147': attribute type 29 has an invalid length. [ 250.332253][T10966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1147'. [ 250.389639][T10970] IPv6: sit1: Disabled Multicast RS [ 250.408990][T10517] veth0_vlan: entered promiscuous mode [ 250.480544][T10517] veth1_vlan: entered promiscuous mode [ 250.655990][T10517] veth0_macvtap: entered promiscuous mode [ 250.699255][T10517] veth1_macvtap: entered promiscuous mode [ 250.761341][T10517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.807664][T10517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.864426][T10517] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.899739][T10517] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.927289][T10517] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.944261][T10517] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.022037][T11001] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1152'. [ 251.210418][T11004] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1153'. [ 251.227867][T10601] veth0_vlan: entered promiscuous mode [ 251.257469][T11004] gretap0: entered promiscuous mode [ 251.309050][T11004] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1153'. [ 251.330095][T10601] veth1_vlan: entered promiscuous mode [ 251.436583][T11004] 0ªX¹¦D: renamed from gretap0 [ 251.443741][T11004] 0ªX¹¦D: left promiscuous mode [ 251.450652][T11004] 0ªX¹¦D: entered allmulticast mode [ 251.458637][T11004] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 251.546842][ T3450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.569571][ T3450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.652547][T11012] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.678587][ T3493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.711055][ T3493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.959016][ T3440] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.049604][T10601] veth0_macvtap: entered promiscuous mode [ 252.078780][ T3440] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.146192][T10601] veth1_macvtap: entered promiscuous mode [ 252.202795][ T3440] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.242234][T11021] netlink: 'syz.0.1159': attribute type 1 has an invalid length. [ 252.385863][T11021] 8021q: adding VLAN 0 to HW filter on device bond2 [ 252.399732][T10601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.431145][T10601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.462923][T11023] gretap0: entered promiscuous mode [ 252.537711][ T3440] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.692265][ T5160] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 252.702483][ T5160] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 252.711051][ T5160] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 252.723158][ T5160] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 252.738371][ T5160] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 252.781021][T10601] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.795714][T10601] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.813378][T10601] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.832177][T10601] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.071954][ T992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.081269][ T992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.601164][ T3440] bond0 (unregistering): Released all slaves [ 253.618365][ T3440] À (unregistering): Released all slaves [ 253.634251][ T3493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.642461][ T3493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.322762][ T3440] team0: left promiscuous mode [ 254.445771][ T3440] hsr_slave_0: left promiscuous mode [ 254.475239][ T3440] hsr_slave_1: left promiscuous mode [ 254.539741][ T3440] veth1_macvtap: left promiscuous mode [ 254.559270][ T3440] veth0_macvtap: left promiscuous mode [ 254.584856][ T3440] veth1_vlan: left promiscuous mode [ 254.593384][ T3440] veth0_vlan: left promiscuous mode [ 254.832633][ T5160] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 254.837805][ T5852] Bluetooth: hci0: command tx timeout [ 254.846650][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 254.866751][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 254.879280][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 254.889799][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 255.580005][T11075] __nla_validate_parse: 1 callbacks suppressed [ 255.580026][T11075] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1166'. [ 255.851103][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 255.879660][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 255.902829][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 255.921102][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 255.930744][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 256.367280][T11078] C: renamed from lo [ 256.440361][T11029] chnl_net:caif_netlink_parms(): no params data found [ 256.708425][T11095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1169'. [ 256.917498][ T5852] Bluetooth: hci0: command tx timeout [ 256.919241][ T51] Bluetooth: hci2: command tx timeout [ 256.968570][T11029] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.981498][T11029] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.991334][T11029] bridge_slave_0: entered allmulticast mode [ 256.999662][T11029] bridge_slave_0: entered promiscuous mode [ 257.013232][T11029] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.020878][T11029] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.028820][T11029] bridge_slave_1: entered allmulticast mode [ 257.038392][T11029] bridge_slave_1: entered promiscuous mode [ 257.175734][ T3440] IPVS: stop unused estimator thread 0... [ 257.285279][T11029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.343938][T11029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.467976][T11112] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1172'. [ 257.479592][T11112] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1172'. [ 257.491872][T11112] netlink: 'syz.2.1172': attribute type 4 has an invalid length. [ 257.678736][T11029] team0: Port device team_slave_0 added [ 257.702899][T11029] team0: Port device team_slave_1 added [ 257.954934][ T51] Bluetooth: hci4: command tx timeout [ 257.995872][T11029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.006144][T11029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.051681][T11029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.073238][T11029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.080668][T11029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.090795][T11142] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1178'. [ 258.109603][T11029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.133618][T11142] x_tables: duplicate underflow at hook 2 [ 258.222170][ T3440] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.389275][ T3440] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.528935][T11079] chnl_net:caif_netlink_parms(): no params data found [ 258.556409][ T3440] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.712071][T11029] hsr_slave_0: entered promiscuous mode [ 258.726193][T11029] hsr_slave_1: entered promiscuous mode [ 258.733778][T11029] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 258.754850][T11029] Cannot create hsr debugfs directory [ 258.786557][ T3440] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.983384][T11062] chnl_net:caif_netlink_parms(): no params data found [ 258.994810][ T51] Bluetooth: hci2: command tx timeout [ 258.994864][ T5852] Bluetooth: hci0: command tx timeout [ 259.320350][T11079] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.333647][T11079] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.343353][T11079] bridge_slave_0: entered allmulticast mode [ 259.357473][T11079] bridge_slave_0: entered promiscuous mode [ 259.461543][T11079] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.475873][T11079] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.483443][T11079] bridge_slave_1: entered allmulticast mode [ 259.503964][T11079] bridge_slave_1: entered promiscuous mode [ 259.597780][T11062] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.616105][T11062] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.623551][T11062] bridge_slave_0: entered allmulticast mode [ 259.632076][T11062] bridge_slave_0: entered promiscuous mode [ 259.712875][T11062] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.728116][T11062] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.739545][T11062] bridge_slave_1: entered allmulticast mode [ 259.758049][T11062] bridge_slave_1: entered promiscuous mode [ 259.843862][T11079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.857959][T11079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.913321][ T3440] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.016642][T11062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.042187][ T5852] Bluetooth: hci4: command tx timeout [ 260.148549][ T3440] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.169009][T11079] team0: Port device team_slave_0 added [ 260.178321][T11062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.257185][T11079] team0: Port device team_slave_1 added [ 260.355503][ T3440] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.413761][T11062] team0: Port device team_slave_0 added [ 260.487026][T11079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.494039][T11079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.529405][T11079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.550691][T11062] team0: Port device team_slave_1 added [ 260.595723][ T3440] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.698996][T11079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.719743][T11079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.965506][T11079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.074891][ T5852] Bluetooth: hci2: command tx timeout [ 261.081215][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.087454][T11062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.117366][T11062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.144426][T11062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.166288][T11062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.173334][T11062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.249971][T11062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.451981][T11221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1192'. [ 261.741811][T11231] xt_l2tp: v2 sid > 0xffff: 262144 [ 261.925461][T11079] hsr_slave_0: entered promiscuous mode [ 261.938907][T11241] netlink: 'syz.2.1193': attribute type 1 has an invalid length. [ 261.953514][T11079] hsr_slave_1: entered promiscuous mode [ 261.967691][T11079] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 261.976688][T11079] Cannot create hsr debugfs directory [ 261.987794][T11241] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1193'. [ 262.115452][ T5852] Bluetooth: hci4: command tx timeout [ 262.226936][T11062] hsr_slave_0: entered promiscuous mode [ 262.233546][T11062] hsr_slave_1: entered promiscuous mode [ 262.240656][T11062] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.248926][T11062] Cannot create hsr debugfs directory [ 262.284337][T11251] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1197'. [ 262.314460][T11250] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1197'. [ 262.324694][T11250] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1197'. [ 263.155153][ T5852] Bluetooth: hci2: command tx timeout [ 264.196631][ T5852] Bluetooth: hci4: command tx timeout [ 264.669646][ T3440] bridge_slave_1: left allmulticast mode [ 264.675598][ T3440] bridge_slave_1: left promiscuous mode [ 264.681352][ T3440] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.692800][ T3440] bridge_slave_0: left allmulticast mode [ 264.698870][ T3440] bridge_slave_0: left promiscuous mode [ 264.706397][ T3440] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.718974][ T3440] bridge_slave_1: left allmulticast mode [ 264.727544][ T3440] bridge_slave_1: left promiscuous mode [ 264.733394][ T3440] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.757398][ T3440] bridge_slave_0: left allmulticast mode [ 264.763170][ T3440] bridge_slave_0: left promiscuous mode [ 264.769189][ T3440] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.828279][T11270] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20002 [ 264.910307][T11273] netlink: 'syz.2.1202': attribute type 64 has an invalid length. [ 264.923900][T11273] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1202'. [ 265.239590][ T5852] Bluetooth: hci2: command tx timeout [ 265.262976][ T3440] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.278152][ T3440] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.289601][ T3440] bond0 (unregistering): Released all slaves [ 265.631487][ T3440] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.643537][ T3440] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.655453][ T3440] bond0 (unregistering): Released all slaves [ 265.953778][T11277] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1203'. [ 265.972584][T11029] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 266.253659][T11029] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 266.271943][T11029] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 266.435175][T11029] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 266.713825][T11289] team0 (unregistering): Port device team_slave_0 removed [ 266.741828][T11289] team0 (unregistering): Port device team_slave_1 removed [ 267.112907][ T3440] hsr_slave_0: left promiscuous mode [ 267.124970][ T3440] hsr_slave_1: left promiscuous mode [ 267.131649][ T3440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.139688][ T3440] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.154231][ T3440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.174155][ T3440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.208380][ T3440] hsr_slave_0: left promiscuous mode [ 267.216976][ T3440] hsr_slave_1: left promiscuous mode [ 267.223024][ T3440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.234450][ T3440] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.245673][ T3440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.253182][ T3440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.301048][ T3440] veth1_macvtap: left promiscuous mode [ 267.311543][ T3440] veth0_macvtap: left promiscuous mode [ 267.317970][ T3440] veth1_vlan: left promiscuous mode [ 267.323320][ T3440] veth0_vlan: left promiscuous mode [ 267.334615][ T3440] veth1_macvtap: left promiscuous mode [ 267.340281][ T3440] veth0_macvtap: left promiscuous mode [ 267.350747][ T3440] veth1_vlan: left promiscuous mode [ 267.357186][ T3440] veth0_vlan: left promiscuous mode [ 267.978516][ T3440] team0 (unregistering): Port device team_slave_1 removed [ 268.026739][ T3440] team0 (unregistering): Port device team_slave_0 removed [ 268.889333][ T3440] team0 (unregistering): Port device team_slave_1 removed [ 268.943308][ T3440] team0 (unregistering): Port device team_slave_0 removed [ 269.552512][T11029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.777629][T11029] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.817146][ T7280] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.824388][ T7280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.867512][ T7280] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.874833][ T7280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.057139][T11079] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 270.081263][T11079] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 270.235932][T11079] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 270.294208][T11079] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 270.421975][T11340] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.754102][T11349] vlan2: entered promiscuous mode [ 270.777387][T11349] bridge0: entered promiscuous mode [ 270.999716][T11079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.065998][T11362] netlink: 'syz.2.1221': attribute type 7 has an invalid length. [ 271.132556][T11079] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.230576][T11062] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 271.263242][T11062] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 271.300926][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.308189][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.351854][T11062] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 271.380689][T11062] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 271.433489][T11374] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1223'. [ 271.450950][T11029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.487175][ T7269] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.494442][ T7269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.610609][T11382] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1224'. [ 271.632980][T11380] delete_channel: no stack [ 271.853767][T11079] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 271.898502][T11391] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1226'. [ 271.956231][T11029] veth0_vlan: entered promiscuous mode [ 272.029542][T11029] veth1_vlan: entered promiscuous mode [ 272.146462][T11400] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1227'. [ 272.181223][T11400] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1227'. [ 272.191918][T11062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.225933][T11029] veth0_macvtap: entered promiscuous mode [ 272.255195][T11029] veth1_macvtap: entered promiscuous mode [ 272.352279][T11062] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.379599][T11029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.422841][ T3560] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.430227][ T3560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.479213][T11029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.533749][ T3560] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.541086][ T3560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.593262][T11029] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.619433][T11029] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.642360][T11029] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.664691][T11029] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.705639][T11412] ------------[ cut here ]------------ [ 272.711233][T11412] WARNING: CPU: 0 PID: 11412 at ./include/net/mac80211.h:7748 _ieee80211_sta_cur_vht_bw+0x524/0x6e0 [ 272.722338][T11412] Modules linked in: [ 272.726813][T11412] CPU: 0 UID: 0 PID: 11412 Comm: syz.2.1229 Not tainted 6.16.0-rc2-syzkaller-00161-g714db279942b #0 PREEMPT(full) [ 272.739165][T11412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 272.749421][T11412] RIP: 0010:_ieee80211_sta_cur_vht_bw+0x524/0x6e0 [ 272.755992][T11412] Code: 00 00 00 eb 49 41 83 fd 05 74 30 41 83 fd 0d 75 13 e8 e0 b5 e5 f6 b8 04 00 00 00 eb 31 e8 d4 b5 e5 f6 eb 28 e8 cd b5 e5 f6 90 <0f> 0b 90 eb 1d e8 c2 b5 e5 f6 b8 02 00 00 00 eb 13 e8 b6 b5 e5 f6 [ 272.761575][T11062] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 272.775686][T11412] RSP: 0018:ffffc90004a0ef48 EFLAGS: 00010293 [ 272.775750][T11412] RAX: ffffffff8adaa683 RBX: ffff888054ebc000 RCX: ffff88802689bc00 [ 272.775768][T11412] RDX: 0000000000000000 RSI: ffffffff8f78b5a0 RDI: 0000000000000007 [ 272.775784][T11412] RBP: 0000000000000000 R08: ffff88802689bc00 R09: 0000000000000007 [ 272.775799][T11412] R10: 000000000000000d R11: 0000000000000000 R12: 0000000000000000 [ 272.775812][T11412] R13: 0000000000000007 R14: ffff888054ebc180 R15: 1ffff1100a9d7830 [ 272.775827][T11412] FS: 00007f55f71216c0(0000) GS:ffff888125c51000(0000) knlGS:0000000000000000 [ 272.775845][T11412] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 272.775860][T11412] CR2: 0000000000000000 CR3: 00000000659f8000 CR4: 00000000003526f0 [ 272.775878][T11412] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 272.775892][T11412] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 272.775906][T11412] Call Trace: [ 272.775927][T11412] [ 272.775943][T11412] __ieee80211_vht_handle_opmode+0x3c0/0x850 [ 272.820441][T11062] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 272.827901][T11412] ? ieee80211_get_link_sband+0x5f/0x3e0 [ 272.904262][T11412] ? __pfx___ieee80211_vht_handle_opmode+0x10/0x10 [ 272.911217][T11412] ? ieee80211_get_link_sband+0x5f/0x3e0 [ 272.917332][T11412] ? ieee80211_sta_init_nss+0x8dd/0xbe0 [ 272.922986][T11412] ? ieee80211_get_link_sband+0x335/0x3e0 [ 272.928874][T11412] sta_link_apply_parameters+0xbb8/0xec0 [ 272.934644][T11412] sta_apply_parameters+0x944/0x15b0 [ 272.940024][T11412] ieee80211_add_station+0x424/0x6a0 [ 272.945479][T11412] rdev_add_station+0x108/0x290 [ 272.950403][T11412] nl80211_new_station+0x1723/0x1b40 [ 272.955859][T11412] ? __pfx_nl80211_new_station+0x10/0x10 [ 272.961554][T11412] ? netdev_run_todo+0xe1d/0xea0 [ 272.966653][T11412] ? nl80211_pre_doit+0x4f1/0x930 [ 272.971763][T11412] genl_family_rcv_msg_doit+0x212/0x300 [ 272.977460][T11412] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 272.983615][T11412] ? bpf_lsm_capable+0x9/0x20 [ 272.988430][T11412] ? security_capable+0x7e/0x2e0 [ 272.993445][T11412] genl_rcv_msg+0x60e/0x790 [ 272.998184][T11412] ? __pfx_genl_rcv_msg+0x10/0x10 [ 273.003795][T11412] ? ref_tracker_free+0x63a/0x7d0 [ 273.009013][T11412] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 273.014751][T11412] ? __pfx_nl80211_new_station+0x10/0x10 [ 273.020455][T11412] ? __pfx_nl80211_post_doit+0x10/0x10 [ 273.026419][T11412] ? __pfx_ref_tracker_free+0x10/0x10 [ 273.031902][T11412] netlink_rcv_skb+0x205/0x470 [ 273.036794][T11412] ? __pfx_genl_rcv_msg+0x10/0x10 [ 273.041892][T11412] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 273.047326][T11412] ? down_read+0x1ad/0x2e0 [ 273.051797][T11412] genl_rcv+0x28/0x40 [ 273.055913][T11412] netlink_unicast+0x758/0x8d0 [ 273.060760][T11412] netlink_sendmsg+0x805/0xb30 [ 273.065674][T11412] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.071029][T11412] ? aa_sock_msg_perm+0x94/0x160 [ 273.076245][T11412] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 273.081598][T11412] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.087054][T11412] __sock_sendmsg+0x219/0x270 [ 273.091808][T11412] ____sys_sendmsg+0x505/0x830 [ 273.096716][T11412] ? __pfx_____sys_sendmsg+0x10/0x10 [ 273.102078][T11412] ? import_iovec+0x74/0xa0 [ 273.106747][T11412] ___sys_sendmsg+0x21f/0x2a0 [ 273.111496][T11412] ? __pfx____sys_sendmsg+0x10/0x10 [ 273.117206][T11412] ? __fget_files+0x2a/0x420 [ 273.122151][T11412] ? __fget_files+0x3a0/0x420 [ 273.127003][T11412] __x64_sys_sendmsg+0x19b/0x260 [ 273.132042][T11412] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 273.137658][T11412] ? rcu_is_watching+0x15/0xb0 [ 273.142503][T11412] ? do_syscall_64+0xbe/0x3b0 [ 273.147332][T11412] do_syscall_64+0xfa/0x3b0 [ 273.151887][T11412] ? lockdep_hardirqs_on+0x9c/0x150 [ 273.157376][T11412] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.163508][T11412] ? clear_bhb_loop+0x60/0xb0 [ 273.168347][T11412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.174296][T11412] RIP: 0033:0x7f55f638e929 [ 273.178910][T11412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.198763][T11412] RSP: 002b:00007f55f7121038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 273.207342][T11412] RAX: ffffffffffffffda RBX: 00007f55f65b6080 RCX: 00007f55f638e929 [ 273.216181][T11412] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005 [ 273.224472][T11412] RBP: 00007f55f6410b39 R08: 0000000000000000 R09: 0000000000000000 [ 273.232687][T11412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.241166][T11412] R13: 0000000000000000 R14: 00007f55f65b6080 R15: 00007ffeb783d6d8 [ 273.249300][T11412] [ 273.252384][T11412] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 273.259799][T11412] CPU: 0 UID: 0 PID: 11412 Comm: syz.2.1229 Not tainted 6.16.0-rc2-syzkaller-00161-g714db279942b #0 PREEMPT(full) [ 273.272000][T11412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 273.282076][T11412] Call Trace: [ 273.285386][T11412] [ 273.288347][T11412] dump_stack_lvl+0x99/0x250 [ 273.292987][T11412] ? __asan_memcpy+0x40/0x70 [ 273.297616][T11412] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.302860][T11412] ? __pfx__printk+0x10/0x10 [ 273.307507][T11412] panic+0x2db/0x790 [ 273.311451][T11412] ? __pfx_panic+0x10/0x10 [ 273.315899][T11412] ? show_trace_log_lvl+0x4fb/0x550 [ 273.321167][T11412] __warn+0x31b/0x4b0 [ 273.325184][T11412] ? _ieee80211_sta_cur_vht_bw+0x524/0x6e0 [ 273.331058][T11412] ? _ieee80211_sta_cur_vht_bw+0x524/0x6e0 [ 273.336910][T11412] report_bug+0x2be/0x4f0 [ 273.341289][T11412] ? _ieee80211_sta_cur_vht_bw+0x524/0x6e0 [ 273.347132][T11412] ? _ieee80211_sta_cur_vht_bw+0x524/0x6e0 [ 273.352987][T11412] ? _ieee80211_sta_cur_vht_bw+0x526/0x6e0 [ 273.358826][T11412] handle_bug+0x84/0x160 [ 273.363100][T11412] exc_invalid_op+0x1a/0x50 [ 273.367619][T11412] asm_exc_invalid_op+0x1a/0x20 [ 273.372485][T11412] RIP: 0010:_ieee80211_sta_cur_vht_bw+0x524/0x6e0 [ 273.378929][T11412] Code: 00 00 00 eb 49 41 83 fd 05 74 30 41 83 fd 0d 75 13 e8 e0 b5 e5 f6 b8 04 00 00 00 eb 31 e8 d4 b5 e5 f6 eb 28 e8 cd b5 e5 f6 90 <0f> 0b 90 eb 1d e8 c2 b5 e5 f6 b8 02 00 00 00 eb 13 e8 b6 b5 e5 f6 [ 273.398558][T11412] RSP: 0018:ffffc90004a0ef48 EFLAGS: 00010293 [ 273.404649][T11412] RAX: ffffffff8adaa683 RBX: ffff888054ebc000 RCX: ffff88802689bc00 [ 273.412637][T11412] RDX: 0000000000000000 RSI: ffffffff8f78b5a0 RDI: 0000000000000007 [ 273.420629][T11412] RBP: 0000000000000000 R08: ffff88802689bc00 R09: 0000000000000007 [ 273.428619][T11412] R10: 000000000000000d R11: 0000000000000000 R12: 0000000000000000 [ 273.436606][T11412] R13: 0000000000000007 R14: ffff888054ebc180 R15: 1ffff1100a9d7830 [ 273.444607][T11412] ? _ieee80211_sta_cur_vht_bw+0x523/0x6e0 [ 273.450455][T11412] ? _ieee80211_sta_cur_vht_bw+0x523/0x6e0 [ 273.456289][T11412] __ieee80211_vht_handle_opmode+0x3c0/0x850 [ 273.462288][T11412] ? ieee80211_get_link_sband+0x5f/0x3e0 [ 273.467952][T11412] ? __pfx___ieee80211_vht_handle_opmode+0x10/0x10 [ 273.474559][T11412] ? ieee80211_get_link_sband+0x5f/0x3e0 [ 273.480218][T11412] ? ieee80211_sta_init_nss+0x8dd/0xbe0 [ 273.485873][T11412] ? ieee80211_get_link_sband+0x335/0x3e0 [ 273.491624][T11412] sta_link_apply_parameters+0xbb8/0xec0 [ 273.497635][T11412] sta_apply_parameters+0x944/0x15b0 [ 273.502952][T11412] ieee80211_add_station+0x424/0x6a0 [ 273.508269][T11412] rdev_add_station+0x108/0x290 [ 273.513136][T11412] nl80211_new_station+0x1723/0x1b40 [ 273.518465][T11412] ? __pfx_nl80211_new_station+0x10/0x10 [ 273.524125][T11412] ? netdev_run_todo+0xe1d/0xea0 [ 273.529134][T11412] ? nl80211_pre_doit+0x4f1/0x930 [ 273.534194][T11412] genl_family_rcv_msg_doit+0x212/0x300 [ 273.539774][T11412] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 273.545876][T11412] ? bpf_lsm_capable+0x9/0x20 [ 273.550572][T11412] ? security_capable+0x7e/0x2e0 [ 273.555535][T11412] genl_rcv_msg+0x60e/0x790 [ 273.560071][T11412] ? __pfx_genl_rcv_msg+0x10/0x10 [ 273.565119][T11412] ? ref_tracker_free+0x63a/0x7d0 [ 273.570169][T11412] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 273.575561][T11412] ? __pfx_nl80211_new_station+0x10/0x10 [ 273.581215][T11412] ? __pfx_nl80211_post_doit+0x10/0x10 [ 273.586695][T11412] ? __pfx_ref_tracker_free+0x10/0x10 [ 273.592158][T11412] netlink_rcv_skb+0x205/0x470 [ 273.596979][T11412] ? __pfx_genl_rcv_msg+0x10/0x10 [ 273.602049][T11412] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 273.607368][T11412] ? down_read+0x1ad/0x2e0 [ 273.611838][T11412] genl_rcv+0x28/0x40 [ 273.615867][T11412] netlink_unicast+0x758/0x8d0 [ 273.620669][T11412] netlink_sendmsg+0x805/0xb30 [ 273.625471][T11412] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.630777][T11412] ? aa_sock_msg_perm+0x94/0x160 [ 273.635739][T11412] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 273.641069][T11412] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.646392][T11412] __sock_sendmsg+0x219/0x270 [ 273.651104][T11412] ____sys_sendmsg+0x505/0x830 [ 273.655896][T11412] ? __pfx_____sys_sendmsg+0x10/0x10 [ 273.661237][T11412] ? import_iovec+0x74/0xa0 [ 273.665760][T11412] ___sys_sendmsg+0x21f/0x2a0 [ 273.670455][T11412] ? __pfx____sys_sendmsg+0x10/0x10 [ 273.675703][T11412] ? __fget_files+0x2a/0x420 [ 273.680319][T11412] ? __fget_files+0x3a0/0x420 [ 273.685023][T11412] __x64_sys_sendmsg+0x19b/0x260 [ 273.690020][T11412] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 273.695528][T11412] ? rcu_is_watching+0x15/0xb0 [ 273.700348][T11412] ? do_syscall_64+0xbe/0x3b0 [ 273.705067][T11412] do_syscall_64+0xfa/0x3b0 [ 273.709609][T11412] ? lockdep_hardirqs_on+0x9c/0x150 [ 273.714842][T11412] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.720943][T11412] ? clear_bhb_loop+0x60/0xb0 [ 273.725639][T11412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.731575][T11412] RIP: 0033:0x7f55f638e929 [ 273.736011][T11412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.755640][T11412] RSP: 002b:00007f55f7121038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 273.764076][T11412] RAX: ffffffffffffffda RBX: 00007f55f65b6080 RCX: 00007f55f638e929 [ 273.772062][T11412] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005 [ 273.780057][T11412] RBP: 00007f55f6410b39 R08: 0000000000000000 R09: 0000000000000000 [ 273.788045][T11412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.796038][T11412] R13: 0000000000000000 R14: 00007f55f65b6080 R15: 00007ffeb783d6d8 [ 273.804042][T11412] [ 273.807359][T11412] Kernel Offset: disabled [ 273.811700][T11412] Rebooting in 86400 seconds..