last executing test programs: 1m28.237791778s ago: executing program 2 (id=584): r0 = gettid() syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/uts\x00') syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/uts\x00') r1 = syz_open_procfs$namespace(r0, &(0x7f00000006c0)='ns/time\x00') ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) 1m27.546176805s ago: executing program 4 (id=1153): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r1, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) close(r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000800000000000000000000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000080)={@map=r2, 0xffffffffffffffff, 0x5}, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) r3 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x2f, 0x81, 0x8, 0x240c, 0x11, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, 0x0, 0x40, 0x857}}) bind$xdp(r3, &(0x7f0000000180)={0x2c, 0x1, r4, 0x25}, 0x10) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001a000100000000000801000002000000000000000000000005001b0001000000"], 0x24}}, 0x0) 1m8.030181732s ago: executing program 2 (id=584): r0 = gettid() syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/uts\x00') syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/uts\x00') r1 = syz_open_procfs$namespace(r0, &(0x7f00000006c0)='ns/time\x00') ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) 1m7.131258412s ago: executing program 4 (id=1153): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r1, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) close(r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000800000000000000000000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000080)={@map=r2, 0xffffffffffffffff, 0x5}, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) r3 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x2f, 0x81, 0x8, 0x240c, 0x11, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, 0x0, 0x40, 0x857}}) bind$xdp(r3, &(0x7f0000000180)={0x2c, 0x1, r4, 0x25}, 0x10) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001a000100000000000801000002000000000000000000000005001b0001000000"], 0x24}}, 0x0) 49.479067544s ago: executing program 2 (id=584): r0 = gettid() syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/uts\x00') syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/uts\x00') r1 = syz_open_procfs$namespace(r0, &(0x7f00000006c0)='ns/time\x00') ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) 48.544163965s ago: executing program 4 (id=1153): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r1, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) close(r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000800000000000000000000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000080)={@map=r2, 0xffffffffffffffff, 0x5}, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) r3 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x2f, 0x81, 0x8, 0x240c, 0x11, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, 0x0, 0x40, 0x857}}) bind$xdp(r3, &(0x7f0000000180)={0x2c, 0x1, r4, 0x25}, 0x10) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001a000100000000000801000002000000000000000000000005001b0001000000"], 0x24}}, 0x0) 35.244273664s ago: executing program 2 (id=584): r0 = gettid() syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/uts\x00') syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/uts\x00') r1 = syz_open_procfs$namespace(r0, &(0x7f00000006c0)='ns/time\x00') ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) 34.330721164s ago: executing program 4 (id=1153): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r1, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) close(r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000800000000000000000000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000080)={@map=r2, 0xffffffffffffffff, 0x5}, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) r3 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x2f, 0x81, 0x8, 0x240c, 0x11, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, 0x0, 0x40, 0x857}}) bind$xdp(r3, &(0x7f0000000180)={0x2c, 0x1, r4, 0x25}, 0x10) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001a000100000000000801000002000000000000000000000005001b0001000000"], 0x24}}, 0x0) 23.379570087s ago: executing program 2 (id=584): r0 = gettid() syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/uts\x00') syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/uts\x00') r1 = syz_open_procfs$namespace(r0, &(0x7f00000006c0)='ns/time\x00') ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) 22.012194499s ago: executing program 4 (id=1153): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r1, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) close(r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000800000000000000000000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000080)={@map=r2, 0xffffffffffffffff, 0x5}, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) r3 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x2f, 0x81, 0x8, 0x240c, 0x11, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, 0x0, 0x40, 0x857}}) bind$xdp(r3, &(0x7f0000000180)={0x2c, 0x1, r4, 0x25}, 0x10) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001a000100000000000801000002000000000000000000000005001b0001000000"], 0x24}}, 0x0) 10.257722287s ago: executing program 2 (id=584): r0 = gettid() syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/uts\x00') syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/uts\x00') r1 = syz_open_procfs$namespace(r0, &(0x7f00000006c0)='ns/time\x00') ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) 8.942616125s ago: executing program 4 (id=1153): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r1, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) close(r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000800000000000000000000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000080)={@map=r2, 0xffffffffffffffff, 0x5}, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) r3 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x2f, 0x81, 0x8, 0x240c, 0x11, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, 0x0, 0x40, 0x857}}) bind$xdp(r3, &(0x7f0000000180)={0x2c, 0x1, r4, 0x25}, 0x10) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001a000100000000000801000002000000000000000000000005001b0001000000"], 0x24}}, 0x0) 1.881238275s ago: executing program 0 (id=1901): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000240)="06000000914fc94c0c79aaf5598e4fbcafb2126be3608491297e00c7b4023418", 0x20) accept4(r1, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000100)=0x80, 0x80000) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRES16=r0, @ANYRES8=r0], 0x78}}, 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000240)="06000000914fc94c0c79aaf5598e4fbcafb2126be3608491297e00c7b4023418", 0x20) (async) accept4(r1, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000100)=0x80, 0x80000) (async) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) (async) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRES16=r0, @ANYRES8=r0], 0x78}}, 0x4000) (async) 1.877221659s ago: executing program 3 (id=1902): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x31}]}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20}, 0x90) (async) r0 = socket(0xf, 0x2, 0x7) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000000c0)={@initdev, @broadcast, 0x0}, &(0x7f0000000100)=0xc) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000140)={@private2, 0x0}, &(0x7f0000000180)=0x14) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r0) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @remote, @multicast1}, &(0x7f00000002c0)=0xc) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'gretap0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x40, 0x20, 0x0, 0x417, {{0xb, 0x4, 0x1, 0x1f, 0x2c, 0x65, 0x0, 0x96, 0x29, 0x0, @private=0xa011101, @rand_addr=0x64010102, {[@timestamp={0x44, 0x18, 0x17, 0x0, 0x1, [0x6, 0x2, 0x7fffffff, 0x8, 0x0]}]}}}}}) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000003c0)={@empty, @rand_addr, 0x0}, &(0x7f0000000400)=0xc) r6 = socket(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r8, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)=ANY=[@ANYBLOB="9805373d", @ANYRES16=r8, @ANYBLOB="010025bd7000fddbdf250300000028000680060005004e210000060005004e20000014000400ff01000000000000000000000000000108000200050000003c000180080006000800000014000400fc010000000000000000000000000000060005004e23000014000400fe8000000000000000000000000000bb050005000800000004000680040001800800020007000000"], 0x98}}, 0x4004800) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'tunl0\x00', &(0x7f00000004c0)={'tunl0\x00', 0x0, 0x10, 0x7800, 0x0, 0x8, {{0x2d, 0x4, 0x0, 0x21, 0xb4, 0x66, 0x0, 0x6, 0x4, 0x0, @remote, @remote, {[@noop, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @cipso={0x86, 0x24, 0xffffffffffffffff, [{0x1, 0x12, "a04c307982837098428fa2d5104aeb8b"}, {0x1, 0x6, "328a54a5"}, {0x7, 0x6, "6dfb08ea"}]}, @end, @timestamp_addr={0x44, 0x4c, 0xa0, 0x1, 0xf, [{@local, 0xd}, {@private=0xa010102, 0x3}, {@broadcast, 0x10}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x92}, {@empty, 0xd}, {@local, 0xeecf}, {@broadcast, 0x4}, {@loopback, 0xf}]}, @lsrr={0x83, 0x17, 0x16, [@broadcast, @loopback, @private=0xa010102, @broadcast, @rand_addr=0x64010102]}, @ssrr={0x89, 0xf, 0x85, [@empty, @local, @empty]}]}}}}}) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r10, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x3c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20008000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'erspan0\x00', &(0x7f00000005c0)={'ip_vti0\x00', 0x0, 0x40, 0x10, 0x9, 0xb192, {{0x6, 0x4, 0x1, 0x7, 0x18, 0x66, 0x0, 0x1, 0x29, 0x0, @multicast2, @multicast2, {[@ra={0x94, 0x4}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000680)=0x14) (async) r13 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r13, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r13, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r14, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r14], 0x40}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r16 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_proto_private(r16, 0x8b20, &(0x7f0000000080)) (async) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f00000007c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x88, r1, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 1.865622361s ago: executing program 1 (id=1903): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f00000006c0)="10", 0x1}], 0x1}, 0x24000900) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x4) (async) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x4, 0x6}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r2, &(0x7f0000000040)="f0", &(0x7f0000000080)=""/13}, 0x20) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x10000) (async) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.745251652s ago: executing program 0 (id=1904): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080)=0x5, 0x4) sendto$inet6(r0, &(0x7f0000000240)="d2ff348ad565e2ccb6c1dc4d973d1014db2efb864445a66d12983702c52cc8b9c0ee3d8adc626e15dd3eca1790252117d8b79694db7c8af653273ed9aa5ad5cdaa2831ecd50e2040871f7131866373f6b9aa123a751b9ab84986022ac13d37222d5b771beb275f803e78f54239af99684ff30c50e05d5b485cf05e0257f360bca4f87d183b62f97be7b6b0a693f859b63f181d20f74c586e2add36f068fea0f98e416338852e1d9fb017aa4a48b4f5af9eff5e85262243afe0dec2ebbc7f4d6462029681799a089012cb1c45fb8b0d51c8cf1a118a3e41db5825a825de9645a11980c76e2edeec3afd5f3a5e862af68e32d7dc2b18", 0xf5, 0x48040, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @mcast1, 0xff}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x200c8004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3200000000a0000000060a010400000000000000000100000808000b400000000078000480340001800b000100657874686472000024000280080001400000000c080003400000000208000440000000220500020007736500300002800800034000000002080001400000001408000240000000120c000780080001001f00000008000640000000020900010073797a3000000000140000001100010000000000000000000700000a"], 0x114}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="a7dc6eb00000000000000000000000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.744793262s ago: executing program 3 (id=1905): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0x401) (async) listen(r2, 0x0) (async) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) (async) shutdown(r2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r3 = socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 64) r4 = socket(0x2, 0x80805, 0x0) (rerun: 64) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async, rerun: 32) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) (rerun: 32) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r5, 0x6, 0x100}, 0xc) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={r5, 0xbebf, 0x6, [0x4, 0xd6f, 0x8a74, 0x5, 0x7, 0x8]}, 0x14) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB='dP\x00\x00', @ANYRES16=r6, @ANYBLOB="000429bd7000ffdbdf250700000008002b0002000000080034000f00000008000300", @ANYRES32=0x0, @ANYBLOB="05002f000000000008002b00020000000500350000000000080039000700000008000b0004000000080031000004000008000b000000c000"], 0x64}, 0x1, 0x0, 0x0, 0x450d6c01a0beef49}, 0x4000) (async, rerun: 64) mmap(&(0x7f0000601000/0x3000)=nil, 0x3000, 0x2800007, 0x8032, 0xffffffffffffffff, 0x0) (rerun: 64) 1.709421526s ago: executing program 1 (id=1906): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/cgroup\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000408001d00", @ANYRES32=r3, @ANYBLOB="080001"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) r6 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f0000000200)={@mcast1}, 0x14) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x58, r2, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4040000) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) pselect6(0x40, &(0x7f0000000100)={0x9, 0x47f, 0x7, 0x7, 0x9, 0x10001, 0x1, 0xf8}, 0x0, 0x0, &(0x7f0000000200), 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x4, 0x64, 0x9, 0x4000, r8, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50) ioctl$FIDEDUPERANGE(r9, 0xc0189436, &(0x7f0000000080)={0x3, 0xd0ec, 0x1, 0x0, 0x0, [{{r8}, 0x7}]}) 1.628489615s ago: executing program 0 (id=1907): socket$inet6_udplite(0xa, 0x2, 0x88) (async) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000005d80)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x3, @remote, 0x9}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000080)="7957d404736da65f9d132319c6a502980bd709", 0x13}, {&(0x7f00000005c0)="ada3468ff5b811c75a5cb675c4e3a6039748de9cec396af61311", 0x1a}, {&(0x7f0000000140)="8f683f2f858de7a375741e4a24d33e73ee0a0579a775c007d3c12a874bbe43ae8a99ee1cd25453", 0x27}], 0x3, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8008801) sendmmsg$inet6(r0, &(0x7f0000019880)=[{{0x0, 0x0, &(0x7f0000019740)=[{&(0x7f0000019940)='i', 0x1}], 0x1}}], 0x1, 0x2604082c) (async) sendmmsg$inet6(r0, &(0x7f0000019880)=[{{0x0, 0x0, &(0x7f0000019740)=[{&(0x7f0000019940)='i', 0x1}], 0x1}}], 0x1, 0x2604082c) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, &(0x7f00000004c0)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 1.525252041s ago: executing program 0 (id=1908): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r2, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4, 0x9}}}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x10}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000140)=@ethtool_cmd={0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}}) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, 0x0, &(0x7f0000000480)) recvmsg$can_bcm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000001cc0)=""/4096, 0x1000}], 0x1, &(0x7f0000000800)=""/240, 0xf0}, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 697.154582ms ago: executing program 1 (id=1909): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r2}, 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r4, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x4804}, 0x0) r6 = socket(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtfilter={0x438, 0x28, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x40c, 0x2, [@TCA_FW_POLICE={0x408, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6f, 0xff, 0x5, 0x1ff, 0x81, 0x9, 0x1, 0x0, 0x4, 0x1e, 0x2, 0x9, 0x6, 0x7ff, 0x7f7, 0x7, 0x4, 0x8, 0x1, 0x8, 0x72, 0x5, 0x915, 0x7, 0x9, 0x8e, 0x40, 0x3, 0x2e8, 0x2, 0x7f, 0x6, 0xff, 0x7fff, 0x6, 0xfffffe00, 0x7, 0x2, 0x1, 0x4, 0x0, 0x4, 0x7961, 0x3, 0x8, 0x100, 0x9, 0x3, 0xb, 0x7, 0xac, 0x3, 0x0, 0x6d, 0x44a, 0x3, 0x7, 0x0, 0x1, 0x4, 0xff, 0xfffffffb, 0x164, 0xb, 0x101, 0x7, 0x1ff, 0x4, 0xd, 0x6, 0xac, 0x9, 0x837f, 0x2, 0x6e27, 0x0, 0x10001, 0x3, 0x449, 0x9, 0x8001, 0x6, 0x8, 0xdf4, 0xdb, 0x1ff, 0x8, 0x7, 0x800, 0x9, 0x713, 0x80000001, 0x5, 0x2, 0x7, 0x7, 0x0, 0x46, 0x0, 0x3, 0xe5b, 0x8, 0xd0, 0xad, 0x4, 0x1, 0xfffeffff, 0x3, 0x8, 0x5, 0x3, 0x7, 0x7fffffff, 0x9, 0x7fffffff, 0x805, 0x5a, 0xd9, 0xc9e, 0x7, 0x2, 0x4, 0x3, 0x2, 0x0, 0x9, 0x6e, 0x0, 0xb0, 0x9, 0x8, 0x0, 0x3, 0x1, 0xfffffffe, 0x1, 0x8, 0xc, 0x0, 0x100, 0xc50, 0x800, 0x0, 0x8, 0x3, 0xce4c, 0xe4f7, 0x80000001, 0x3, 0x6, 0x5, 0x7, 0x1, 0x7fffffff, 0x2, 0x0, 0x7, 0x1, 0x1, 0x400, 0x401, 0x6, 0x5, 0x4, 0x7, 0xffff, 0x0, 0x10, 0x8, 0x5, 0x10001, 0x10001, 0x1, 0x8, 0xfffffffe, 0x9, 0x1000, 0x5, 0x4, 0x2, 0x5, 0x5, 0x8100, 0x2, 0x8698, 0x5, 0x800, 0x7fffffff, 0x1ff, 0x7, 0x9fcc, 0x80000000, 0x4, 0x6, 0x3, 0x6, 0x957, 0x7fffffff, 0x4384, 0x2dee, 0x81, 0xfff, 0x4, 0x3, 0xc9, 0x9, 0x70c, 0x10000, 0x200, 0xc, 0x1, 0xe, 0x7, 0x7fffffff, 0x6, 0x2c5, 0x4, 0x9, 0x9, 0xfffffffe, 0x6, 0x80000001, 0x4, 0x1026, 0x5, 0x0, 0xfff, 0xfffffffb, 0x80000000, 0x57, 0x1, 0x40, 0x6, 0x5, 0x5, 0x800, 0x0, 0x128, 0x80000001, 0xc5, 0x101, 0x4, 0x45, 0x137, 0x0, 0x80, 0x4, 0x7f, 0x6, 0xffffffff, 0x101, 0x6, 0x4, 0x1, 0x6, 0xc93]}]}]}}]}, 0x438}, 0x1, 0x0, 0x0, 0x810}, 0x48c0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r8, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x25}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 673.09073ms ago: executing program 3 (id=1910): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000000c0)={0xffffffffffffffff, 0x10001, 0x2}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0x1, 0xffffffffffffffff}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000003c0)=0x14) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001440)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5, 0x3}}]}, {0x0, [0x0, 0x61]}}, &(0x7f0000000440)=""/4096, 0x34, 0x1000, 0x0, 0xb}, 0x28) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000017c0)={0xffffffffffffffff, 0xe0, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001500)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0xa, &(0x7f0000001540)=[0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7c, &(0x7f00000015c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000001600), &(0x7f0000001640), 0x8, 0x2b, 0x8, 0x8, &(0x7f0000001680)}}, 0x10) (async) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001840)=@o_path={&(0x7f0000001800)='./file0\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000001900)={0x1c, 0x2b, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1ff}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x401}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x445}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000300)='syzkaller\x00', 0x7, 0x1, &(0x7f0000000340)=""/1, 0x41000, 0x0, '\x00', r4, @fallback=0x1, r5, 0x8, &(0x7f0000001480)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000014c0)={0x5, 0x8, 0x2, 0x3}, 0x10, r7, r8, 0x6, 0x0, &(0x7f0000001880)=[{0x3, 0x1, 0xb, 0x6}, {0x3, 0x2, 0x8, 0x5}, {0x2, 0x3, 0x10, 0x3}, {0x5, 0x3, 0x7, 0xa}, {0x4, 0x3, 0xf, 0x9}, {0x1, 0x4, 0x8, 0x7}]}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001a40)={{r1}, &(0x7f00000019c0), &(0x7f0000001a00)=r1}, 0x20) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001b00)={'wlan1\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f0000001c40)={&(0x7f0000001a80), 0xc, &(0x7f0000001c00)={&(0x7f0000001b80)={0x74, r9, 0x102, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r11}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x61}, @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x1}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xe1}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x43}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xc}]}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x81}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x4}]}]}, 0x74}, 0x1, 0x0, 0x0, 0xe853394c2c6420f0}, 0x20008000) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001c80)={0xffffffffffffffff}) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001d40)={{r1}, &(0x7f0000001cc0), &(0x7f0000001d00)=r1}, 0x20) r13 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCALLUSERDATA(r13, 0x89e4, &(0x7f0000001d80)={0x6c, "1e12f22b812accbd55d78f5607fc08556a36ca1427fa339f8fb31c2bc0cb009afc76ff42f2b7437100021d89ee70206234230045d86eb45aa66eb0df8a2a8109cfef0d7850109fb990b1cb865ca8a7022dbc205c6ebff069f48ba97ade090f9e57233a2aad97d2f887ec937f90a0c938a9afe988283f7d93c6f0f18fb6652fe2"}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001e40)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r14, &(0x7f00000020c0)={&(0x7f0000001e80)=@abs, 0x6e, &(0x7f0000001f40)=[{&(0x7f0000001f00)=""/57, 0x39}], 0x1, &(0x7f0000001f80)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x110}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r19, 0x89f0, &(0x7f00000021c0)={'syztnl1\x00', &(0x7f0000002140)={'syztnl0\x00', r6, 0x29, 0x7, 0x1, 0x8, 0x10, @loopback, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x20, 0x7800, 0x2f35, 0x3}}) getsockopt$inet_IP_IPSEC_POLICY(r20, 0x0, 0x10, &(0x7f0000002200)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@remote}}, &(0x7f0000002300)=0xe8) sendmsg$nl_xfrm(r18, &(0x7f00000024c0)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002480)={&(0x7f0000002340)=@acquire={0x130, 0x17, 0x1, 0x70bd26, 0x25dfdbfb, {{@in=@broadcast, 0x4d5, 0x32}, @in=@private=0xa010102, {@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x4e21, 0x0, 0x4e21, 0x1, 0x2, 0x30, 0x20, 0x7d, r21, r16}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x22}, 0x4e24, 0x7, 0x4e21, 0x7, 0xa, 0x0, 0x20, 0x5c, r6, r22}, {0x9, 0x101, 0x0, 0x8, 0x1, 0x100000001, 0x5, 0x1000}, {0xfffffffffffffffb, 0x3ff, 0x0, 0x246}, 0xbd4c, 0x6e6bbc, 0x2, 0xda0e2b3091ec2d02, 0x1}, 0x5, 0xb, 0x80000000, 0x70bd2b}, [@tfcpad={0x8}]}, 0x130}, 0x1, 0x0, 0x0, 0x24004080}, 0x2400c890) (async) sendmsg$nl_route(r15, &(0x7f0000002600)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002540)=@can_delroute={0x5c, 0x19, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x1, 0x1}, 0x8, 0x3, 0x0, 0x0, "0ae4d56121b8df8e"}, 0x1}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x1, 0x1}, 0x2, 0x3, 0x0, 0x0, "1699c4aef521181b"}, 0x4}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x0, 0x1}, 0x8, 0x2, 0x0, 0x0, "26cd30f0d205bf65"}, 0x5}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2000004}, 0x4040000) (async) socket(0x1, 0x800, 0x8) r23 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r23, &(0x7f0000002640)={0x2, 0x4e20, @local}, 0x10) (async) getsockopt$packet_int(r17, 0x107, 0x11, &(0x7f0000002680), &(0x7f00000026c0)=0x4) (async) socket(0x18, 0x4, 0x2) recvmmsg(r12, &(0x7f0000007940)=[{{&(0x7f0000002700)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000003800)=[{&(0x7f0000002780)=""/4096, 0x1000}, {&(0x7f0000003780)=""/97, 0x61}], 0x2, &(0x7f0000003840)=""/223, 0xdf}}, {{&(0x7f0000003940)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000003b00)=[{&(0x7f00000039c0)=""/159, 0x9f}, {&(0x7f0000003a80)=""/99, 0x63}], 0x2, &(0x7f0000003b40)=""/105, 0x69}, 0x9}, {{&(0x7f0000003bc0)=@isdn, 0x80, &(0x7f0000004e80)=[{&(0x7f0000003c40)=""/29, 0x1d}, {&(0x7f0000003c80)=""/33, 0x21}, {&(0x7f0000003cc0)=""/44, 0x2c}, {&(0x7f0000003d00)}, {&(0x7f0000003d40)=""/4096, 0x1000}, {&(0x7f0000004d40)=""/13, 0xd}, {&(0x7f0000004d80)=""/58, 0x3a}, {&(0x7f0000004dc0)=""/166, 0xa6}], 0x8, &(0x7f0000004f00)=""/94, 0x5e}, 0x1}, {{0x0, 0x0, &(0x7f0000006400)=[{&(0x7f0000004f80)=""/91, 0x5b}, {&(0x7f0000005000)=""/149, 0x95}, {&(0x7f00000050c0)=""/4096, 0x1000}, {&(0x7f00000060c0)=""/154, 0x9a}, {&(0x7f0000006180)=""/188, 0xbc}, {&(0x7f0000006240)=""/127, 0x7f}, {&(0x7f00000062c0)=""/229, 0xe5}, {&(0x7f00000063c0)=""/5, 0x5}], 0x8, &(0x7f0000006480)=""/147, 0x93}, 0x4}, {{&(0x7f0000006540)=@pppol2tpv3, 0x80, &(0x7f0000007800)=[{&(0x7f00000065c0)=""/134, 0x86}, {&(0x7f0000006680)=""/225, 0xe1}, {&(0x7f0000006780)=""/81, 0x51}, {&(0x7f0000006800)=""/4096, 0x1000}], 0x4, &(0x7f0000007840)=""/254, 0xfe}, 0x1}], 0x5, 0x1, &(0x7f0000007ac0)) 609.333801ms ago: executing program 0 (id=1911): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRESOCT=0x0], 0x14}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x100, 0x70bd2b, 0x6, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20090005}, 0x11) 579.133772ms ago: executing program 0 (id=1912): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="310300000000000000000900000008000300", @ANYBLOB='\b'], 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) shutdown(r5, 0x1) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x3c, 0x14, 0x400, 0x70bd2d, 0x25dfdbfc, {0x2, 0x10, 0x44, 0xff, r3}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_CACHEINFO={0x14, 0x6, {0x7, 0x1c3, 0x6, 0x7}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}]}, 0x3c}}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x40}}, 0x0) 477.099219ms ago: executing program 3 (id=1913): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff8}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x40000) r2 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x14, 0x110}}], 0x18, 0x4c00}, 0x12) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)=@newtaction={0xc70, 0x30, 0x1, 0x0, 0x0, {}, [{0x1c0, 0x1, [@m_mpls={0x8c, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x9, 0x1000000c, 0x0, 0x2}, 0x4}}, @TCA_MPLS_BOS={0x5}]}, {0x3a, 0x4, "d2b48afd2aa4d91ebe1e097fc6a5b53c4a73b5fd647168567e59f155f236ff6eca57bbd6cb7a4109534c7da639dbc79b3074cfc1cc4b"}, {0xc}, {0xc}}}, @m_ct={0xbc, 0x11, 0x0, 0x0, {{0x7}, {0x74, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x10}}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private2={0xfc, 0x2, '\x00', 0x1}}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @empty}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}, @TCA_CT_LABELS_MASK={0x14, 0x8, "612b591efcd6b00dca46c8d2cac42857"}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @broadcast}, @TCA_CT_MARK_MASK={0x8, 0x6, 0xc8}]}, {0x22, 0x6, "15737c5307bca1381c881862d526924312dd646fc561c33a851795087be5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_csum={0x74, 0xf, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x22c9, 0x4, 0x2, 0x22}, 0x61}}]}, {0x29, 0x6, "5edbc0df6f5b0bf2d993bc9a454b6a80cba13e02c47b73c37c98178994d4a914132bd296df"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}, {0x568, 0x1, [@m_nat={0x100, 0x13, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x41960a3f, 0x9000000, 0x6, 0x790, 0x6}, @remote, @local, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x9, 0x20000000, 0x100, 0x8}, @multicast2, @multicast1, 0xffffffff, 0x1}}]}, {0x87, 0x6, "4457970a1e7ad362a4ef16094b19092f3be4f641112fbc8f4ce03b18bcf26bb2d8311b8034c2d66c4e0bf0c5e2ac5ab1d3cbb21225470e3cbd862c35351565473436e7a21cf1c1b4f33c4e075fbf6b2ef5ccf437974ede88ebe4df0abae35ba8d2d22b4781846879629feff82c97c86f50996c94d4c676de43fe1c7e200882165634bf"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_sample={0x104, 0x1c, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3ff}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1c}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x1, 0x7, 0x0, 0x72, 0x5}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x17d}]}, {0x96, 0x6, "dfe5fb4a94ab7ce0ed6f464c53e8049667a98347e43c9e4998c749abdf81e31a07f969ed9a14f098f9d38fc9c5ead27d920c0dbaaf2ad5828bcc0b2df3d0d11c9366a91ce4e7ab5792d4ceb3715f3463db5fc89f8026219307c9b82f8356ea58cfa4763294e92b499f26392637add68e74a0f897aa7b1ead55f8c3a6ae4db9b9a5a179063aec27679a21d1e6503835602583"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_sample={0x48, 0x1d, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x4}]}, {0x14, 0x6, "f4a5bf7a4b8b9690d6930c7aca817c28"}, {0xc}, {0xc}}}, @m_gact={0xc4, 0x3, 0x0, 0x0, {{0x9}, {0x94, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1c0b, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x767, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x4, 0x2, 0x4, 0xfffffff3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x6, 0x20000000, 0x7, 0x2a1844a2}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1fec, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x1, 0x7, 0x8, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x401, 0x20000000, 0x30, 0x4f8}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x157f, 0xffffffffffffffff}}]}, {0x7, 0x6, "c0af34"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_sample={0x12c, 0x2, 0x0, 0x0, {{0xb}, {0x94, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x6}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x1, 0x8, 0x0, 0x9, 0x8}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x5, 0x7cfde7b2, 0x5, 0x7, 0x80}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x101}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7f, 0x4, 0x1, 0x8, 0x969e}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xa6d, 0x86e, 0x1, 0x3f3, 0x2}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x10000}]}, {0x6f, 0x6, "63f87850eafb3845b6c58849d70cc286e5278c0437d1b1cd928cb873d0a6755929f75d0b3841f45ffe62e2d3d371683bd65542fb699383ae1225aeb0abc69497ae4c99182c755b159ff50aad46bf34bbfe8fb11acf8878ef5f1806076bff302b8dc2ecdd33ef6fdb2a401c"}, {0xc, 0x7, {0x1, 0x5ec84ed3d5afb243}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbmod={0x128, 0x1, 0x0, 0x0, {{0xb}, {0x18, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5}]}, {0xe6, 0x6, "b1b0d70f305112b3736155a69745857b14b9a14cd283722ed2b381a746f4e1b068618b73d572ae91adcbeb64cc876c963fa901a6241ff4474388c6a5a2dc39f19f877960588dba432fb564e1c296938341e6d900f0a4be5cc16f8f6c506b70f935c573b52d946e4f8fd930a1d012d41101ddb6d738064528602661fa796ac4e4194eb76373bbb04fcf42c748813364d6e6c70e48761bb1cad3baf0a98ca078c73a0ea61475d8f1186eb42726e870bea79f0e568b02f0dbc26cba319a562743df663814ddc892b983bcc1b9c2dde338133e4c23e92c42cc5547e9a8a5293aa127b21b"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}, {0x2e0, 0x1, [@m_mirred={0xec, 0x5, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x1, 0x0, 0x4, 0x1}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x20000000, 0x9, 0xfffffffb}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x2d0c, 0x1, 0x9, 0xd}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x4, 0x7, 0x5}, 0x4}}]}, {0x3d, 0x6, "d5e4d2e8a70cd9ec04b7defe36f00b9ccbb4ba8ec9cf8113d33da7dc3cb8f70df12e78a57949af2ed8b53f0d59186931a21c2d823490f57899"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_connmark={0x1f0, 0x6, 0x0, 0x0, {{0xd}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x1, 0xffffffffffffffff, 0x1, 0x1}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x66d2, 0xc23, 0x3, 0x400, 0x3}, 0xa945}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x6, 0x4, 0x5a468485, 0xf23}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x5, 0x10000000, 0x3, 0x8}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x7c0dba8c, 0x8, 0x1, 0x7ff}, 0x7fff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0xffff2c06, 0x0, 0x80000000, 0x2f3}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8000, 0xc0000000, 0x1, 0x6, 0xfffffff9}, 0x3}}]}, {0xfa, 0x6, "9230238021da409ee5469bcd9ca97048402cf0a6214b159b78ceeff95e12dbb85f94daa57c89a229663554bef1be308b7f023af916a0302c36ac041cad4d43a7e140343c0c08737e78d0084ac8ea2339cf05e7fb0e8c8f9255d8e1b7ef990c7710b07e5f8b5a9e07ed8248528d00faa9a08c6189f148c4b32369609283ba70963f7f98c5faa6a48abf7f8eb08070ba4fc6989a7a497dca9bb13abecd50ec316a533d42600c27db7c090d470e90c6ffd73c8c02de281fc9177ff7bdd717ba9d5354e442a54be28b2e95bccae0e9a6b7b6c8a77875226766be7526683527099553c5d30c466b79cd62a42766e99e1c1a249986cef61df5"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}, {0x254, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x68d, 0x5, 0xfffffff9, 0x6}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffff84f, 0x7, 0x8, 0xffffff67, 0x5}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_tunnel_key={0xc4, 0xf, 0x0, 0x0, {{0xf}, {0x40, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x9}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xff}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, {0x56, 0x6, "21a93e7ba260893bee6ff5cd0d95d21c0185939e45ca4be90f5090397d1299cd301e8964f98852223c2a1f7de0daac15969afff6f66db7d06854d419ade2a9b7bf234e135ac88ece8261aba8a9d483d51b1a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_bpf={0x11c, 0x11, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0xcb, 0x6, "528edf6a2e2f4dc304b64e8cb56e94edea2ba1f6aeb365c3afc78867bb06d00bd429b386e7841bc839d6a6334df151fcd77c0b0645c2f70f228a69fd033c954f9ad0e90d0d9206702141b14ab353071d4f4172affc02563a8ae78c2d6dc74d394fd7308d253149c807922158471205299320617914c24c681ecddb8715c9f8f648ef46ba11435285ef226faebb586334b4d0a6aeb85c0114cc599b941eb90671ef3e476978addd195f2a9368b59968832de1fd39ce2be74ecafc48cdada657c6a2e6c1422afdd3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xc70}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x40000) r7 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001bb6bbd36eb0c"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) recvmmsg(r8, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) connect$inet(r7, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000400)="526bbc2abc666945a7efd9a10379026fcb5990e84c495699c32b2f0e27a733d98f70c0355f24aff042b9f5e266b02570bffd43ea4dfffb29c27507f00b0fc7218847b6042cc171b1c2f4005ae31116e5fb3d87", 0x53}], 0x1, &(0x7f0000000780)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @empty}}}], 0x60}}], 0x1, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r9, 0x1, 0x29, 0x0, 0x0) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100), 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x19, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000730118000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10}, 0x94) 377.03753ms ago: executing program 1 (id=1914): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) close(0x3) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x400000, @empty}, 0x1c) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) (async) sendfile(r2, r3, 0x0, 0xffffffff005) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'ipvlan0\x00', 0x1000}) (async) sendto$inet(r1, &(0x7f00000002c0)="24e374f8d4bded02aefa0fb889ebb3f6c36cbfe065827930616403800860a078e7bfe8b53a957213bd5a0bffb62aea89ae1d202aa143e32a199a508e3bc56a29acd8378288f1d491a121a7b49c3c668086c1d19fea9bbc9da91d2fffda7eb8c75a35cf8193e252a3bfa687e060a4554d4a529c44dd3070dc810190a8675fa5aed9f169040ad0c2020787df585c102845a7778837422d5c106a34b06773e80db3c11aaffcf4e4cfbf5cd2389288158395806622bdcb9a2f0dc2452e1fa056b4571ba4bb68fd9c0bc4744ef5d4b8a720bb53163a31", 0xd4, 0x10008095, 0x0, 0x0) (async) listen(r0, 0x0) (async) ioctl$sock_TIOCINQ(r0, 0x541b, 0x0) (async) unshare(0x24020400) (async) r4 = socket(0x2000000000000021, 0x2, 0x2) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) (async) syz_init_net_socket$802154_raw(0x24, 0x4, 0x0) 275.297496ms ago: executing program 1 (id=1915): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={0xffffffffffffffff, 0x0, 0x7b, 0x40, &(0x7f0000000700)="76784a3e704a06c43f1582a6ac0bf04d58c83c27d0c49e4b5adbef7f6ff0b47b312febbc45068c148d942e7960cb1f8904d8ee045cecf0c57c2c5a90c3b7ee51a6d891f23dbff5cc68c33e94f0d3ee31be1cdc03a408aadc213d069e4d1641aac9430ad97d4547039d7a0ccd1125b4191642a48266d02eed50c25f", &(0x7f0000000800)=""/64, 0x6, 0x0, 0x98, 0x15, &(0x7f0000000840)="eeb2e0010212072ed8673ef8619245e8c711c84dd594b1723aac35de7c00784d9e052470073413fdf759e6d5a358d3cf974f29d06d84ccdd1b69fa24ea0cc3d0b794bec05fef124990b7dd1f448c15a68631d7de64c182c4d38f897252227bc6132aa9692b200e7cc90616f2f95d631c8cc31bf6ce6a779154f0e3bbf2720727c92dc05a35734115663c0464c2f45895768b4a0fe05dd670", &(0x7f0000000940)="219a65794a477459483c5434f0b9a8bcc5b4e1526e", 0x6, 0x0, 0x2}, 0x50) socket(0x8, 0x3, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) connect$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket(0x1d, 0x6, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x6a, 0x2, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) accept4(r1, 0x0, &(0x7f00000004c0), 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r3) sendmsg$IEEE802154_LLSEC_DEL_KEY(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="00f11e00", @ANYRES16=r4, @ANYBLOB="01002bbd7000fedbdf252800000005002e000200000005002b000300000000010077000800"/55], 0x30}, 0x1, 0x0, 0x0, 0x240400d1}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="b400000000000000dd0a00fdd244d2074fbb5a000300009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x800}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10003ff}, 0x94) bind$can_raw(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e00000000000000108000000300000000000000a40512def5630983a88ed4bfaebf9334d69721f7712a99af57483e390b941f6ac2d1df1242b2a23f3839363663c56d612dde5a76d0c055d5046b02a8c6124d739efa83fac3d2e07a881312710c4dee16eb15c84ee9b9fd09310bf555e25b9570b4c17ef2605df246b135d1dae248f2d268ea7807f3bd232497d2bf70d9fb9a1e91ae1b610947d9c4b2cb1d589f237d50f8d19632d2c365fb258b8dbc8cec8a47d6bfa8", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x4, 0xb, 0xc, 0xe583, 0x14, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x20, 0x80, 0x1, 0xf038}}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000300)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e000000080000000b00000000d700", @ANYRES16=r1, @ANYBLOB='y\x00'/20, @ANYRES32=r5, @ANYRES32, @ANYBLOB="0100000001000000020000000a00"/28], 0x50) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a40)=ANY=[@ANYBLOB="38010000100013070000040000000000ac1414bb00000000faae206a10e45f8cee63cf1f657e530000000000000000ac1e000100000000000000000000000000000000000000000000000000000000f0fcae421b9d4ac5d632b3cb0c0115f0703fc5362e4b4f39ca996fac5d783dfa5e707cd506f1085ed4265ea4c2aead045e78", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0100000000000000000000000000010000000032000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000000000000a00020b0000000000000000480002006563622d73657270656e742d61767800"/240], 0x138}}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, 0x0, 0x200080c0) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r7, &(0x7f00000000c0)=[{{&(0x7f0000000140)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000) 271.492452ms ago: executing program 3 (id=1916): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x4e24, 0x3, 'lblcr\x00', 0xd, 0x7, 0x49}, 0x2c) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000080)=""/88, &(0x7f0000000100)=0x58) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b80)=@newtaction={0x6c, 0x30, 0x109, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x10}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @private}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @loopback, 0x4e21, 0x3, 'wrr\x00', 0x4, 0x7e, 0x25}, {@rand_addr=0xac1414aa, 0x4e22, 0x3, 0x1cb, 0x12d5c, 0x12d5c}}, 0x44) 112.627736ms ago: executing program 3 (id=1917): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRESOCT=r0, @ANYRES16=r0], 0x34}}, 0x4044044) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r0, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000011c0)=""/70, 0x46}, {&(0x7f00000000c0)=""/43, 0x2b}, {&(0x7f0000002a00)=""/4106, 0x104d}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x4}, 0x1801}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000000aaaad07bf8ef86dd4520005800670000052f0000010014aae00000010c21880b000000010c000800090086dd080088be000000001538080022eb00000004230669060200000000000007000494050800655800000000"], 0x0) 0s ago: executing program 1 (id=1918): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'macsec0\x00', 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000680)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x2, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x34, r5, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000804}, 0x10) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r1], 0x54}}, 0x800) r10 = syz_genetlink_get_family_id$team(&(0x7f0000000100), r2) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f00000006c0)={0x168, r10, 0x100, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r1}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x108, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r1}}}]}}]}, 0x168}, 0x1, 0x0, 0x0, 0x40000002}, 0x4000810) kernel console output (not intermixed with test programs): e2: entered promiscuous mode [ 203.689746][T10215] bridge2: entered allmulticast mode [ 203.791703][T10039] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 203.812395][T10039] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 203.846748][T10039] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 203.863019][T10039] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 203.865827][T10220] netlink: 'syz.1.1207': attribute type 1 has an invalid length. [ 203.885805][T10220] netlink: 'syz.1.1207': attribute type 2 has an invalid length. [ 203.907855][T10220] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1207'. [ 204.062643][T10231] netlink: 'syz.1.1209': attribute type 14 has an invalid length. [ 204.081820][T10231] netlink: 'syz.1.1209': attribute type 1 has an invalid length. [ 204.121199][T10231] gretap1: entered promiscuous mode [ 204.171525][T10039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.182837][T10231] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1209'. [ 204.223495][T10234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1210'. [ 204.228246][T10039] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.305815][ T3468] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.312974][ T3468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.352703][ T3468] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.359911][ T3468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.448781][T10063] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 204.502967][T10063] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 204.537177][T10063] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 204.551438][T10063] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 204.795676][ T5858] Bluetooth: hci4: command tx timeout [ 204.873958][T10063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.966210][T10063] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.993292][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.000416][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.066735][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.073940][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.129754][T10039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.266560][T10063] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 205.305428][T10278] x_tables: duplicate entry at hook 3 [ 205.674865][ T5858] Bluetooth: hci1: command tx timeout [ 205.742720][T10296] xfrm0: entered promiscuous mode [ 205.756161][T10300] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 205.771917][T10296] xfrm0: entered allmulticast mode [ 205.778166][T10299] sch_tbf: burst 0 is lower than device lo mtu (76) ! [ 205.848130][T10063] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.004116][T10063] veth0_vlan: entered promiscuous mode [ 206.027042][T10309] netlink: 'syz.1.1230': attribute type 1 has an invalid length. [ 206.048108][T10063] veth1_vlan: entered promiscuous mode [ 206.263274][T10309] 8021q: adding VLAN 0 to HW filter on device bond5 [ 206.277470][T10309] bond4: (slave bond5): making interface the new active one [ 206.285683][T10309] bond4: (slave bond5): Enslaving as an active interface with an up link [ 206.340031][T10320] bond4: (slave gretap1): Enslaving as a backup interface with an up link [ 206.373967][T10324] 8021q: adding VLAN 0 to HW filter on device bond4 [ 206.410561][T10327] __nla_validate_parse: 6 callbacks suppressed [ 206.410577][T10327] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1234'. [ 206.504458][T10335] netlink: 'syz.1.1236': attribute type 1 has an invalid length. [ 206.621386][T10338] bond6: (slave bridge8): making interface the new active one [ 206.631301][T10338] bond6: (slave bridge8): Enslaving as an active interface with an up link [ 206.642534][T10039] veth0_vlan: entered promiscuous mode [ 206.675234][T10063] veth0_macvtap: entered promiscuous mode [ 206.737766][T10063] veth1_macvtap: entered promiscuous mode [ 206.787875][T10039] veth1_vlan: entered promiscuous mode [ 206.846705][T10340] lo speed is unknown, defaulting to 1000 [ 206.876221][ T5858] Bluetooth: hci4: command tx timeout [ 206.936326][T10063] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.995602][T10063] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.058311][T10039] veth0_macvtap: entered promiscuous mode [ 207.100636][T10063] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.123845][T10063] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.158436][T10063] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.168066][T10063] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.190727][T10353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1243'. [ 207.215621][T10039] veth1_macvtap: entered promiscuous mode [ 207.330978][T10039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.394317][T10039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.448033][T10358] netlink: 1000 bytes leftover after parsing attributes in process `syz.1.1244'. [ 207.451879][T10039] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.475615][T10358] netlink: 1000 bytes leftover after parsing attributes in process `syz.1.1244'. [ 207.479480][T10039] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.505309][T10039] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.524985][T10039] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.719387][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.740935][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.810536][T10369] netlink: 'syz.0.1247': attribute type 10 has an invalid length. [ 207.849331][T10366] ªªªªªª†³?ÂHº: renamed from lo (while UP) [ 207.892695][T10369] bridge_slave_1: entered promiscuous mode [ 207.899669][T10369] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 207.941437][ T6029] srz1: Port: 1 Link ACTIVE [ 207.965824][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.990392][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.069622][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.083958][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.279241][ T3468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.298451][ T3468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.373383][T10382] bond0: option ad_select: unable to set because the bond device is up [ 208.452325][T10382] netlink: 'syz.0.1251': attribute type 11 has an invalid length. [ 208.489218][T10382] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1251'. [ 208.568499][T10387] syz.0.1251 uses old SIOCAX25GETINFO [ 208.740413][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.891673][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.011010][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.222796][T10396] netlink: 'syz.0.1253': attribute type 11 has an invalid length. [ 209.257753][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.264818][T10396] netlink: 'syz.0.1253': attribute type 11 has an invalid length. [ 209.310425][T10396] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1253'. [ 209.346532][T10397] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 209.435602][T10400] xt_bpf: check failed: parse error [ 209.443096][T10400] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1255'. [ 209.473012][T10400] netlink: 'syz.3.1255': attribute type 11 has an invalid length. [ 209.542221][T10403] netlink: 'syz.3.1255': attribute type 6 has an invalid length. [ 209.570669][T10405] xt_bpf: check failed: parse error [ 209.895259][ T12] bridge_slave_1: left allmulticast mode [ 209.900953][ T12] bridge_slave_1: left promiscuous mode [ 209.934110][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.978523][T10423] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 210.032530][ T12] bridge_slave_0: left allmulticast mode [ 210.049455][T10423] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 210.058465][ T12] bridge_slave_0: left promiscuous mode [ 210.072000][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.165293][ T5859] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 210.180131][ T5859] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 210.189541][ T5859] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 210.205699][ T5859] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 210.214352][ T5859] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 210.228685][T10432] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 210.268641][ T5859] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 210.277926][ T5859] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 210.285782][ T5859] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 210.293822][ T5859] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 210.301672][ T5859] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 210.568789][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.581481][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.592245][ T12] bond0 (unregistering): Released all slaves [ 210.720476][T10435] lo speed is unknown, defaulting to 1000 [ 211.035470][T10448] netlink: 'syz.3.1266': attribute type 1 has an invalid length. [ 211.044722][T10448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1266'. [ 211.329317][T10430] lo speed is unknown, defaulting to 1000 [ 211.532989][T10473] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1273'. [ 211.542079][T10473] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1273'. [ 211.677678][T10479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1276'. [ 211.706476][T10479] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1276'. [ 211.769856][T10481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1277'. [ 211.786887][T10479] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1276'. [ 211.818434][T10479] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1276'. [ 211.841948][T10479] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1276'. [ 211.851242][T10479] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1276'. [ 211.904621][T10479] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1276'. [ 211.934447][T10484] netlink: 'syz.0.1278': attribute type 10 has an invalid length. [ 212.190426][T10490] netlink: 'syz.3.1280': attribute type 1 has an invalid length. [ 212.320838][ T12] hsr_slave_0: left promiscuous mode [ 212.325471][ T5859] Bluetooth: hci1: command tx timeout [ 212.333576][ T12] hsr_slave_1: left promiscuous mode [ 212.342058][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.353728][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.362677][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.373062][T10499] netlink: 'syz.0.1282': attribute type 7 has an invalid length. [ 212.376626][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.382008][T10499] netlink: 'syz.0.1282': attribute type 8 has an invalid length. [ 212.396442][ T5859] Bluetooth: hci4: command tx timeout [ 212.418844][ T12] veth1_macvtap: left promiscuous mode [ 212.424511][ T12] veth0_macvtap: left promiscuous mode [ 212.430145][ T12] veth1_vlan: left promiscuous mode [ 212.437418][ T12] veth0_vlan: left promiscuous mode [ 212.806212][ T12] team0 (unregistering): Port device team_slave_1 removed [ 212.838840][ T12] team0 (unregistering): Port device team_slave_0 removed [ 213.234660][T10493] netlink: 'syz.3.1280': attribute type 1 has an invalid length. [ 214.034085][T10534] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 214.050439][T10534] syzkaller0: Linktype set failed because interface is up [ 214.060453][T10543] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 214.398149][ T5859] Bluetooth: hci1: command tx timeout [ 214.486152][ T5859] Bluetooth: hci4: command tx timeout [ 215.406616][T10430] chnl_net:caif_netlink_parms(): no params data found [ 215.419950][T10435] chnl_net:caif_netlink_parms(): no params data found [ 215.800601][ T49] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.000786][ T49] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.158673][T10435] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.170829][T10435] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.180718][T10435] bridge_slave_0: entered allmulticast mode [ 216.193356][T10435] bridge_slave_0: entered promiscuous mode [ 216.236771][ T49] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.312419][T10430] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.321670][T10430] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.330015][T10430] bridge_slave_0: entered allmulticast mode [ 216.338563][T10430] bridge_slave_0: entered promiscuous mode [ 216.351722][T10435] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.359341][T10435] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.368878][T10435] bridge_slave_1: entered allmulticast mode [ 216.384794][T10435] bridge_slave_1: entered promiscuous mode [ 216.474683][ T5859] Bluetooth: hci1: command tx timeout [ 216.498550][ T49] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.526290][T10430] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.533445][T10430] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.545086][T10430] bridge_slave_1: entered allmulticast mode [ 216.552867][T10430] bridge_slave_1: entered promiscuous mode [ 216.559696][ T5859] Bluetooth: hci4: command tx timeout [ 216.567175][T10605] __nla_validate_parse: 13 callbacks suppressed [ 216.567188][T10605] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1303'. [ 216.648107][T10435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.661451][T10607] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1304'. [ 216.680418][T10615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1305'. [ 216.721280][T10615] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1305'. [ 216.732073][T10615] netlink: 'syz.1.1305': attribute type 15 has an invalid length. [ 216.739442][T10435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.819136][T10430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.022734][T10623] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1307'. [ 217.100283][T10435] team0: Port device team_slave_0 added [ 217.123328][T10435] team0: Port device team_slave_1 added [ 217.140013][T10430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.370096][T10430] team0: Port device team_slave_0 added [ 217.389000][T10435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.397642][T10435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.424351][T10435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.455787][T10430] team0: Port device team_slave_1 added [ 217.501906][T10435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.517793][T10435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.562993][T10435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.604232][T10430] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.611512][T10430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.669859][T10430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.728374][T10641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1312'. [ 217.738335][T10430] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.746787][T10430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.773165][T10430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.813019][T10641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1312'. [ 217.846896][T10435] hsr_slave_0: entered promiscuous mode [ 217.853180][T10435] hsr_slave_1: entered promiscuous mode [ 217.860042][T10435] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.867685][T10435] Cannot create hsr debugfs directory [ 217.875122][ T49] bridge_slave_1: left allmulticast mode [ 217.880769][ T49] bridge_slave_1: left promiscuous mode [ 217.887168][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.897599][ T49] bridge_slave_0: left allmulticast mode [ 217.903235][ T49] bridge_slave_0: left promiscuous mode [ 217.910803][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.211891][T10643] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1313'. [ 218.258750][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.271481][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.291943][ T49] bond0 (unregistering): Released all slaves [ 218.317648][T10641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1312'. [ 218.435007][T10641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1312'. [ 218.554923][ T5859] Bluetooth: hci1: command tx timeout [ 218.617280][T10430] hsr_slave_0: entered promiscuous mode [ 218.624875][T10430] hsr_slave_1: entered promiscuous mode [ 218.631148][T10430] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.639025][ T5859] Bluetooth: hci4: command tx timeout [ 218.644943][T10430] Cannot create hsr debugfs directory [ 218.971849][T10668] pimreg: entered allmulticast mode [ 219.711010][ T49] hsr_slave_0: left promiscuous mode [ 219.729619][T10698] netlink: 'syz.1.1331': attribute type 5 has an invalid length. [ 219.739050][ T49] hsr_slave_1: left promiscuous mode [ 219.761301][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.782069][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.814009][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.824843][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.868888][ T49] veth1_macvtap: left promiscuous mode [ 219.874454][ T49] veth0_macvtap: left promiscuous mode [ 219.881178][ T49] veth1_vlan: left promiscuous mode [ 219.887256][ T49] veth0_vlan: left promiscuous mode [ 220.263854][ T49] team0 (unregistering): Port device team_slave_1 removed [ 220.298916][ T49] team0 (unregistering): Port device team_slave_0 removed [ 220.757825][T10710] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 220.810554][T10716] netlink: 'syz.0.1336': attribute type 1 has an invalid length. [ 220.947026][T10720] gretap1: entered allmulticast mode [ 220.977535][T10720] bond5: (slave gretap1): making interface the new active one [ 220.995363][T10720] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 221.300214][T10736] netlink: 'syz.0.1340': attribute type 2 has an invalid length. [ 221.463961][T10740] lo speed is unknown, defaulting to 1000 [ 221.848368][T10753] Cannot find del_set index 5 as target [ 221.930366][T10755] warn_alloc: 1 callbacks suppressed [ 221.930379][T10755] syz.1.1348: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 221.964385][T10755] CPU: 0 UID: 0 PID: 10755 Comm: syz.1.1348 Not tainted 6.16.0-rc4-syzkaller-00109-gb9fd9888a565 #0 PREEMPT(full) [ 221.964409][T10755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 221.964419][T10755] Call Trace: [ 221.964426][T10755] [ 221.964433][T10755] dump_stack_lvl+0x189/0x250 [ 221.964461][T10755] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.964484][T10755] ? __pfx__printk+0x10/0x10 [ 221.964504][T10755] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 221.964525][T10755] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 221.964547][T10755] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 221.964569][T10755] warn_alloc+0x214/0x310 [ 221.964597][T10755] ? __pfx_warn_alloc+0x10/0x10 [ 221.964628][T10755] ? __get_vm_area_node+0x28f/0x300 [ 221.964649][T10755] ? hash_netport_create+0x358/0xfe0 [ 221.964676][T10755] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 221.964697][T10755] ? do_syscall_64+0xfa/0x3b0 [ 221.964743][T10755] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 221.964770][T10755] ? rcu_is_watching+0x15/0xb0 [ 221.964791][T10755] ? hash_netport_create+0x358/0xfe0 [ 221.964810][T10755] ? hash_netport_create+0x358/0xfe0 [ 221.964828][T10755] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 221.964849][T10755] ? hash_netport_create+0x358/0xfe0 [ 221.964870][T10755] ? hash_netport_create+0x2fe/0xfe0 [ 221.964895][T10755] hash_netport_create+0x358/0xfe0 [ 221.964924][T10755] ? __nla_parse+0x40/0x60 [ 221.964942][T10755] ? __pfx_hash_netport_create+0x10/0x10 [ 221.964972][T10755] ip_set_create+0xa94/0x1940 [ 221.964989][T10755] ? ip_set_create+0x4a2/0x1940 [ 221.965016][T10755] ? __pfx_ip_set_create+0x10/0x10 [ 221.965069][T10755] nfnetlink_rcv_msg+0xb4d/0x1130 [ 221.965086][T10755] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 221.965121][T10755] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 221.965134][T10755] ? kasan_save_free_info+0x46/0x50 [ 221.965201][T10755] netlink_rcv_skb+0x205/0x470 [ 221.965220][T10755] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 221.965238][T10755] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 221.965269][T10755] ? bpf_lsm_capable+0x9/0x20 [ 221.965284][T10755] ? security_capable+0x7e/0x2e0 [ 221.965315][T10755] nfnetlink_rcv+0x26a/0x2520 [ 221.965341][T10755] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 221.965368][T10755] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 221.965390][T10755] ? __dev_queue_xmit+0x27e/0x3a70 [ 221.965412][T10755] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.965439][T10755] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 221.965462][T10755] ? __pfx___dev_queue_xmit+0x10/0x10 [ 221.965498][T10755] ? ref_tracker_free+0x63a/0x7d0 [ 221.965511][T10755] ? __copy_skb_header+0xa7/0x550 [ 221.965535][T10755] ? __pfx_ref_tracker_free+0x10/0x10 [ 221.965549][T10755] ? __skb_clone+0x63/0x7a0 [ 221.965574][T10755] ? __skb_clone+0x483/0x7a0 [ 221.965602][T10755] ? skb_clone+0x246/0x3a0 [ 221.965626][T10755] ? __netlink_deliver_tap+0x807/0x850 [ 221.965645][T10755] ? netlink_deliver_tap+0x2e/0x1b0 [ 221.965671][T10755] ? netlink_deliver_tap+0x2e/0x1b0 [ 221.965689][T10755] ? netlink_deliver_tap+0x2e/0x1b0 [ 221.965714][T10755] netlink_unicast+0x758/0x8d0 [ 221.965743][T10755] netlink_sendmsg+0x805/0xb30 [ 221.965772][T10755] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.965795][T10755] ? aa_sock_msg_perm+0x94/0x160 [ 221.965820][T10755] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 221.965834][T10755] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.965855][T10755] __sock_sendmsg+0x219/0x270 [ 221.965874][T10755] ____sys_sendmsg+0x505/0x830 [ 221.965900][T10755] ? __pfx_____sys_sendmsg+0x10/0x10 [ 221.965930][T10755] ? import_iovec+0x74/0xa0 [ 221.965954][T10755] ___sys_sendmsg+0x21f/0x2a0 [ 221.965982][T10755] ? __pfx____sys_sendmsg+0x10/0x10 [ 221.966041][T10755] ? __fget_files+0x2a/0x420 [ 221.966061][T10755] ? __fget_files+0x3a0/0x420 [ 221.966092][T10755] __x64_sys_sendmsg+0x19b/0x260 [ 221.966116][T10755] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 221.966147][T10755] ? rcu_is_watching+0x15/0xb0 [ 221.966171][T10755] ? do_syscall_64+0xbe/0x3b0 [ 221.966192][T10755] do_syscall_64+0xfa/0x3b0 [ 221.966206][T10755] ? lockdep_hardirqs_on+0x9c/0x150 [ 221.966228][T10755] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.966244][T10755] ? clear_bhb_loop+0x60/0xb0 [ 221.966263][T10755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.966279][T10755] RIP: 0033:0x7eff60b8e929 [ 221.966293][T10755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.966308][T10755] RSP: 002b:00007eff61abc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 221.966325][T10755] RAX: ffffffffffffffda RBX: 00007eff60db5fa0 RCX: 00007eff60b8e929 [ 221.966337][T10755] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 221.966347][T10755] RBP: 00007eff60c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 221.966357][T10755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.966367][T10755] R13: 0000000000000000 R14: 00007eff60db5fa0 R15: 00007ffd190c19b8 [ 221.966396][T10755] [ 222.015987][T10435] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 222.247722][T10755] Mem-Info: [ 222.486430][T10755] active_anon:4957 inactive_anon:0 isolated_anon:0 [ 222.486430][T10755] active_file:1155 inactive_file:39918 isolated_file:0 [ 222.486430][T10755] unevictable:768 dirty:54 writeback:0 [ 222.486430][T10755] slab_reclaimable:10787 slab_unreclaimable:108998 [ 222.486430][T10755] mapped:29060 shmem:1367 pagetables:1113 [ 222.486430][T10755] sec_pagetables:0 bounce:0 [ 222.486430][T10755] kernel_misc_reclaimable:0 [ 222.486430][T10755] free:1316789 free_pcp:15911 free_cma:0 [ 222.532870][T10755] Node 0 active_anon:19828kB inactive_anon:0kB active_file:4620kB inactive_file:159472kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116240kB dirty:216kB writeback:0kB shmem:3932kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12820kB pagetables:4288kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 222.572130][T10755] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 222.597817][T10435] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 222.617096][T10766] __nla_validate_parse: 9 callbacks suppressed [ 222.617111][T10766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1351'. [ 222.627534][T10755] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 222.699944][T10755] lowmem_reserve[]: 0 2498 2500 2500 2500 [ 222.711613][T10755] Node 0 DMA32 free:1358692kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19880kB inactive_anon:0kB active_file:4620kB inactive_file:157896kB unevictable:1536kB writepending:212kB present:3129332kB managed:2558404kB mlocked:0kB bounce:0kB free_pcp:41176kB local_pcp:21164kB free_cma:0kB [ 222.759284][T10755] lowmem_reserve[]: 0 0 1 1 1 [ 222.764035][T10755] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 222.815616][T10755] lowmem_reserve[]: 0 0 0 0 0 [ 222.821628][T10755] Node 1 Normal free:3893092kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:23236kB local_pcp:14672kB free_cma:0kB [ 222.858439][T10435] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 222.886389][T10772] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1353'. [ 222.896048][T10755] lowmem_reserve[]: 0 0 0 0 0 [ 222.904642][T10755] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 222.926878][T10755] Node 0 DMA32: 722*4kB (UME) 193*8kB (UME) 186*16kB (UM) 191*32kB (UM) 30*64kB (UM) 31*128kB (UME) 194*256kB (UME) 130*512kB (UM) 89*1024kB (UME) 31*2048kB (UE) 261*4096kB (UM) = 1359312kB [ 222.947368][T10755] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 222.978171][T10435] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 222.993147][T10755] Node 1 Normal: 211*4kB (UE) 67*8kB (UME) 50*16kB (UME) 69*32kB (UME) 21*64kB (UME) 8*128kB (UME) 5*256kB (UM) 4*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 947*4096kB (M) = 3893092kB [ 223.012070][T10755] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 223.025009][T10755] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 223.036370][T10755] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 223.072159][T10755] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 223.098259][T10755] 42437 total pagecache pages [ 223.105476][T10755] 0 pages in swap cache [ 223.109690][T10755] Free swap = 124996kB [ 223.113872][T10755] Total swap = 124996kB [ 223.129895][T10755] 2097051 pages RAM [ 223.137092][T10755] 0 pages HighMem/MovableOnly [ 223.142642][T10755] 425408 pages reserved [ 223.160108][T10755] 0 pages cma reserved [ 223.214875][T10430] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 223.288305][T10430] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 223.415941][T10430] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 223.421820][T10797] netlink: 'syz.3.1357': attribute type 6 has an invalid length. [ 223.469241][T10430] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 223.528093][T10799] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1360'. [ 223.921591][T10430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.001975][T10435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.037046][T10430] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.044400][T10829] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 224.067326][T10435] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.095210][ T3580] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.102415][ T3580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.120131][ T3580] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.127328][ T3580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.138860][T10828] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1366'. [ 224.170502][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.177677][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.254301][T10837] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1369'. [ 224.268455][ T3580] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.275658][ T3580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.300088][T10837] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1369'. [ 224.441282][T10846] tc_dump_action: action bad kind [ 224.920863][T10435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.938486][T10430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.056207][T10435] veth0_vlan: entered promiscuous mode [ 225.100358][T10435] veth1_vlan: entered promiscuous mode [ 225.181329][T10435] veth0_macvtap: entered promiscuous mode [ 225.227940][T10435] veth1_macvtap: entered promiscuous mode [ 225.248741][T10872] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1377'. [ 225.280707][T10435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.335921][T10435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.476211][T10872] syzkaller0: entered promiscuous mode [ 225.482384][T10872] syzkaller0: entered allmulticast mode [ 225.543929][T10435] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.556008][T10435] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.565638][T10435] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.579143][T10435] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.610572][T10881] bridge_slave_0: entered promiscuous mode [ 225.791586][T10894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1381'. [ 227.040301][ T30] audit: type=1800 audit(1751824901.234:3): pid=10901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1384" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 227.045070][T10901] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 227.075840][T10901] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 227.096141][T10901] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 227.333917][T10915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1388'. [ 227.338113][T10916] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1388'. [ 227.374282][T10913] netlink: 'syz.3.1387': attribute type 12 has an invalid length. [ 227.389662][T10915] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.403083][T10915] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.414658][T10915] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.423656][T10915] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.548354][ T4607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.603361][ T4607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.695610][T10430] veth0_vlan: entered promiscuous mode [ 227.722152][ T4607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.745472][T10930] bridge0: left allmulticast mode [ 227.767319][ T4607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.787616][T10930] veth0_to_team: left promiscuous mode [ 227.803512][T10930] veth0_vlan: left allmulticast mode [ 227.827284][T10930] gtp0: left promiscuous mode [ 227.832081][T10930] gtp0: left allmulticast mode [ 227.890627][T10930] gtp1: left promiscuous mode [ 227.899273][T10930] gtp1: left allmulticast mode [ 227.911008][T10930] hsr0: left promiscuous mode [ 227.917079][T10930] gtp2: left promiscuous mode [ 227.921754][T10930] gtp2: left allmulticast mode [ 227.931323][T10930] vlan2: left allmulticast mode [ 227.936324][T10930] veth1: left allmulticast mode [ 227.946367][T10930] gretap1: left allmulticast mode [ 227.961428][T10935] netlink: 'syz.3.1393': attribute type 3 has an invalid length. [ 227.994191][T10430] veth1_vlan: entered promiscuous mode [ 228.093545][T10430] veth0_macvtap: entered promiscuous mode [ 228.134096][T10430] veth1_macvtap: entered promiscuous mode [ 228.191961][T10938] netlink: 'syz.3.1394': attribute type 1 has an invalid length. [ 228.209216][T10430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.216586][T10938] netlink: 'syz.3.1394': attribute type 2 has an invalid length. [ 228.239212][T10938] __nla_validate_parse: 1 callbacks suppressed [ 228.239225][T10938] netlink: 1172 bytes leftover after parsing attributes in process `syz.3.1394'. [ 228.470957][T10430] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.516353][T10430] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.526691][T10430] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.544345][T10430] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.562018][T10430] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.573319][T10961] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1400'. [ 228.667606][T10963] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 228.890682][ T1156] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.038969][ T1156] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.073582][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.093275][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.137533][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.145872][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.216742][ T1156] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.457377][ T1156] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.662606][T10981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1404'. [ 229.672049][T10979] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1406'. [ 229.743119][ T1156] bridge_slave_1: left allmulticast mode [ 229.779712][ T1156] bridge_slave_1: left promiscuous mode [ 229.802761][ T1156] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.906823][ T1156] bridge_slave_0: left allmulticast mode [ 229.912508][ T1156] bridge_slave_0: left promiscuous mode [ 229.931261][T10986] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1407'. [ 229.935591][ T1156] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.027216][T10992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1408'. [ 230.432546][ T5858] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 230.444030][ T5858] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 230.452203][ T5858] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 230.461543][ T5858] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 230.470169][ T5858] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 230.532008][ T5859] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 230.541256][ T5859] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 230.550672][ T5859] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 230.559795][ T5859] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 230.570562][ T5859] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 230.740816][ T1156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.751896][ T1156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.762934][ T1156] bond0 (unregistering): Released all slaves [ 230.922645][T11003] lo speed is unknown, defaulting to 1000 [ 231.082755][T11020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1416'. [ 231.094917][T11022] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1417'. [ 231.178179][T11024] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1418'. [ 231.579943][T11007] lo speed is unknown, defaulting to 1000 [ 232.013350][T11054] netlink: 'syz.1.1427': attribute type 30 has an invalid length. [ 232.171580][T11054] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 232.191510][T11054] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 232.555593][ T5858] Bluetooth: hci1: command tx timeout [ 232.634840][ T5858] Bluetooth: hci4: command tx timeout [ 232.797640][ T1156] hsr_slave_0: left promiscuous mode [ 232.807527][ T1156] hsr_slave_1: left promiscuous mode [ 232.815295][ T1156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.822714][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.831948][ T1156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.839758][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.843382][T11091] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1436'. [ 232.870994][ T1156] veth1_macvtap: left promiscuous mode [ 232.876970][ T1156] veth0_macvtap: left promiscuous mode [ 232.882541][ T1156] veth1_vlan: left promiscuous mode [ 232.888121][ T1156] veth0_vlan: left promiscuous mode [ 233.272126][ T1156] team0 (unregistering): Port device team_slave_1 removed [ 233.303734][ T1156] team0 (unregistering): Port device team_slave_0 removed [ 233.659656][T11085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1434'. [ 233.809458][T11097] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1438'. [ 233.841741][T11102] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1439'. [ 233.870445][T11003] chnl_net:caif_netlink_parms(): no params data found [ 234.051133][T11111] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1440'. [ 234.141616][T11007] chnl_net:caif_netlink_parms(): no params data found [ 234.278686][T11123] x_tables: duplicate underflow at hook 3 [ 234.331960][T11107] syzkaller0: entered promiscuous mode [ 234.345287][T11107] syzkaller0: entered allmulticast mode [ 234.351580][T11119] net veth1_virt_wifi .: renamed from virt_wifi0 (while UP) [ 234.419616][T11119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1442'. [ 234.599690][T11003] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.608627][T11003] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.624669][T11003] bridge_slave_0: entered allmulticast mode [ 234.626629][T11144] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1445'. [ 234.636279][T11003] bridge_slave_0: entered promiscuous mode [ 234.645708][ T5858] Bluetooth: hci1: command tx timeout [ 234.668352][T11003] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.677165][T11003] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.684338][T11003] bridge_slave_1: entered allmulticast mode [ 234.695378][T11003] bridge_slave_1: entered promiscuous mode [ 234.715195][ T5858] Bluetooth: hci4: command tx timeout [ 234.816710][T11151] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1446'. [ 234.956921][T11154] netlink: 'syz.0.1447': attribute type 1 has an invalid length. [ 234.965123][T11154] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1447'. [ 235.042984][ T30] audit: type=1107 audit(1751824909.234:4): pid=11155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 236.280012][T11003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.321335][T11007] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.329019][T11007] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.337665][T11007] bridge_slave_0: entered allmulticast mode [ 236.347039][T11007] bridge_slave_0: entered promiscuous mode [ 236.363677][T11003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.441656][T11165] bond6: entered promiscuous mode [ 236.447341][T11165] bond6: entered allmulticast mode [ 236.453628][T11165] 8021q: adding VLAN 0 to HW filter on device bond6 [ 236.461426][T11007] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.471094][T11007] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.479058][T11007] bridge_slave_1: entered allmulticast mode [ 236.487279][T11007] bridge_slave_1: entered promiscuous mode [ 236.551638][T11003] team0: Port device team_slave_0 added [ 236.698656][ T1156] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.714908][ T5858] Bluetooth: hci1: command tx timeout [ 236.743304][T11003] team0: Port device team_slave_1 added [ 236.781567][T11007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.795132][ T5858] Bluetooth: hci4: command tx timeout [ 236.881381][ T1156] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.901601][T11007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.912138][T11003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.926772][T11003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.959076][T11003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.002932][T11003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.009954][T11003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.043335][T11003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.123184][ T1156] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.166581][T11007] team0: Port device team_slave_0 added [ 237.191567][T11187] vlan3: entered promiscuous mode [ 237.202348][T11007] team0: Port device team_slave_1 added [ 237.282883][T11191] netlink: 'syz.0.1459': attribute type 10 has an invalid length. [ 237.301783][T11191] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1459'. [ 237.368219][ T1156] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.408182][T11191] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 237.426006][T11007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.432970][T11007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.459530][T11007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.475092][T11007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.482468][T11007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.518050][T11007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.739670][T11003] hsr_slave_0: entered promiscuous mode [ 237.770717][T11003] hsr_slave_1: entered promiscuous mode [ 237.792029][T11003] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.829745][T11003] Cannot create hsr debugfs directory [ 237.869366][T11214] RDS: rds_bind could not find a transport for ::ffff:10.17.1.1, load rds_tcp or rds_rdma? [ 237.954134][T11007] hsr_slave_0: entered promiscuous mode [ 237.969399][T11007] hsr_slave_1: entered promiscuous mode [ 237.987203][T11007] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.001169][T11007] Cannot create hsr debugfs directory [ 238.539445][ T1156] bridge_slave_1: left allmulticast mode [ 238.545883][ T1156] bridge_slave_1: left promiscuous mode [ 238.551553][ T1156] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.561642][ T1156] bridge_slave_0: left allmulticast mode [ 238.568390][ T1156] bridge_slave_0: left promiscuous mode [ 238.574062][ T1156] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.616015][T11238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1470'. [ 238.796957][ T5858] Bluetooth: hci1: command tx timeout [ 238.872093][ T1156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.874850][ T5858] Bluetooth: hci4: command tx timeout [ 238.890720][ T1156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.901515][ T1156] bond0 (unregistering): Released all slaves [ 239.157942][T11244] netlink: 'syz.0.1473': attribute type 1 has an invalid length. [ 240.069183][T11266] netlink: 'syz.3.1479': attribute type 18 has an invalid length. [ 240.082211][ T1156] hsr_slave_0: left promiscuous mode [ 240.092315][ T1156] hsr_slave_1: left promiscuous mode [ 240.100258][ T1156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.107871][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.116662][ T1156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.127229][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.170226][ T1156] veth1_macvtap: left promiscuous mode [ 240.178241][ T1156] veth0_macvtap: left promiscuous mode [ 240.183897][ T1156] veth1_vlan: left promiscuous mode [ 240.194212][ T1156] veth0_vlan: left promiscuous mode [ 240.602798][ T1156] team0 (unregistering): Port device team_slave_1 removed [ 240.640837][ T1156] team0 (unregistering): Port device team_slave_0 removed [ 241.019402][ T5922] hid-generic 0005:0458:5505.0003: item fetching failed at offset 0/3 [ 241.031912][ T5922] hid-generic 0005:0458:5505.0003: probe with driver hid-generic failed with error -22 [ 241.090669][T11279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1481'. [ 241.115693][T11285] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 241.122986][T11285] macsec0: entered allmulticast mode [ 241.132033][T11285] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 241.155184][T11285] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 241.162215][T11285] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 241.284322][T11291] xt_hashlimit: size too large, truncated to 1048576 [ 241.363600][T11293] : renamed from bridge_slave_0 (while UP) [ 241.845353][T11306] netlink: 'syz.1.1489': attribute type 83 has an invalid length. [ 243.084259][T11315] netlink: 'syz.1.1491': attribute type 4 has an invalid length. [ 243.176520][T11007] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 243.217027][T11007] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 243.251036][T11007] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 243.287670][T11007] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 243.383705][T11331] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.441608][T11328] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.480332][T11003] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 243.540295][T11003] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 243.620850][T11003] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 243.652843][T11003] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 243.673020][T11341] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1495'. [ 243.939552][T11007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.984373][T11007] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.014308][T11003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.033814][ T3507] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.041000][ T3507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.110697][ T4607] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.117890][ T4607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.163923][T11003] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.266083][ T3468] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.273277][ T3468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.308873][T11371] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 244.324820][T11371] tipc: Enabled bearer , priority 10 [ 244.373263][ T3468] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.380451][ T3468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.444767][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 244.568436][T11382] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1503'. [ 244.600350][T11382] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1503'. [ 244.624674][T11003] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 244.714792][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 244.920456][T11007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.180335][T11407] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1509'. [ 245.228057][T11007] veth0_vlan: entered promiscuous mode [ 245.244916][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 245.262153][T11007] veth1_vlan: entered promiscuous mode [ 245.327183][T11003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.387961][T11417] lo: Master is either lo or non-ether device [ 245.460591][T11007] veth0_macvtap: entered promiscuous mode [ 245.505718][T11007] veth1_macvtap: entered promiscuous mode [ 245.600009][T11007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.642891][T11007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.674144][T11007] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.691483][T11007] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.716059][T11429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1516'. [ 245.735499][T11007] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.744227][T11007] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.866603][T11439] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20000 [ 246.093249][ T3580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.122776][T11448] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1520'. [ 246.134500][ T3580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.143440][T11449] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 246.236441][T11448] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1520'. [ 246.301186][ T3507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.310753][T11003] veth0_vlan: entered promiscuous mode [ 246.324835][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 246.349767][T11003] veth1_vlan: entered promiscuous mode [ 246.355896][ T3507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.448290][T11003] veth0_macvtap: entered promiscuous mode [ 246.469766][T11003] veth1_macvtap: entered promiscuous mode [ 246.529915][T11003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.559252][T11003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.581732][T11003] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.594009][T11456] sctp: [Deprecated]: syz.0.1523 (pid 11456) Use of struct sctp_assoc_value in delayed_ack socket option. [ 246.594009][T11456] Use struct sctp_sack_info instead [ 246.610653][T11003] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.620167][T11003] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.638604][T11003] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.100550][ T3580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.149062][ T3580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.214162][T11475] netlink: 'syz.0.1529': attribute type 11 has an invalid length. [ 247.237075][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.265855][T11475] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1529'. [ 247.282777][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.354538][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 247.379970][T11475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1529'. [ 247.394144][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.435331][T11475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1529'. [ 247.455985][T11475] netlink: 'syz.0.1529': attribute type 15 has an invalid length. [ 247.475814][T11483] netlink: 'syz.1.1532': attribute type 10 has an invalid length. [ 247.597194][ T9] IPVS: starting estimator thread 0... [ 247.607695][T11487] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 247.631173][T11483] batman_adv: batadv0: Adding interface: team0 [ 247.638030][T11483] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 247.672146][T11483] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 247.694574][T11489] IPVS: using max 27 ests per chain, 64800 per kthread [ 247.751745][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.831367][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.899031][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.228058][ T13] bridge_slave_1: left allmulticast mode [ 248.233749][ T13] bridge_slave_1: left promiscuous mode [ 248.268524][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.312733][ T13] bridge_slave_0: left allmulticast mode [ 248.329511][ T13] bridge_slave_0: left promiscuous mode [ 248.351175][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.394558][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 248.786306][ T5859] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 248.801222][ T5859] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 248.811794][ T5859] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 248.826461][ T5859] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 248.836547][ T5859] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 248.947095][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 248.959813][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 248.978309][ T13] bond0 (unregistering): Released all slaves [ 248.992186][ T5859] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 249.001327][ T5859] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 249.010611][ T5859] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 249.018455][T11496] C: renamed from lo [ 249.023871][ T5859] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 249.054077][T11509] C speed is unknown, defaulting to 1000 [ 249.061144][ T5859] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 249.256016][T11516] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1537'. [ 249.434561][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 249.641983][T11511] C speed is unknown, defaulting to 1000 [ 249.797115][T11531] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1543'. [ 249.937846][T11531] bond0 (unregistering): left promiscuous mode [ 249.953961][T11531] bridge_slave_1: left promiscuous mode [ 249.994037][T11531] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 250.038441][T11531] bond0 (unregistering): Released all slaves [ 250.084915][ T5922] srz1: Port: 1 Link DOWN [ 250.474622][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 250.503587][T11509] chnl_net:caif_netlink_parms(): no params data found [ 250.503590][T11541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1545'. [ 250.665571][ T13] hsr_slave_0: left promiscuous mode [ 250.694436][ T13] hsr_slave_1: left promiscuous mode [ 250.711859][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.737924][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.778096][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.792356][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.838766][ T13] veth1_macvtap: left promiscuous mode [ 250.844387][ T13] veth0_macvtap: left promiscuous mode [ 250.870588][ T13] veth1_vlan: left promiscuous mode [ 250.876968][ T5858] Bluetooth: hci1: command tx timeout [ 250.883912][ T13] veth0_vlan: left promiscuous mode [ 251.116388][ T5858] Bluetooth: hci4: command tx timeout [ 251.340480][ T13] team0 (unregistering): Port device team_slave_1 removed [ 251.386156][ T13] team0 (unregistering): Port device team_slave_0 removed [ 251.515214][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 252.125946][T11585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1555'. [ 252.153501][T11509] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.172469][T11509] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.180141][T11509] bridge_slave_0: entered allmulticast mode [ 252.228536][T11509] bridge_slave_0: entered promiscuous mode [ 252.261694][T11509] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.276429][T11509] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.295508][T11509] bridge_slave_1: entered allmulticast mode [ 252.303266][T11509] bridge_slave_1: entered promiscuous mode [ 252.476158][T11511] chnl_net:caif_netlink_parms(): no params data found [ 252.501810][T11509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.554640][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 252.627221][T11509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.760796][T11612] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1560'. [ 252.779122][T11613] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1560'. [ 252.887479][T11511] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.924127][T11511] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.940048][T11511] bridge_slave_0: entered allmulticast mode [ 252.951506][T11511] bridge_slave_0: entered promiscuous mode [ 252.971410][ T5858] Bluetooth: hci1: command tx timeout [ 252.973803][T11511] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.988771][T11511] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.996318][T11511] bridge_slave_1: entered allmulticast mode [ 253.004711][T11511] bridge_slave_1: entered promiscuous mode [ 253.087013][T11509] team0: Port device team_slave_0 added [ 253.164306][T11511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.195559][ T5858] Bluetooth: hci4: command tx timeout [ 253.215357][T11509] team0: Port device team_slave_1 added [ 253.279644][T11511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.362222][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.440180][T11509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.447642][T11509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.476149][T11509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.485015][T11641] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1567'. [ 253.522926][T11509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.535613][T11509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.564299][T11509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.598908][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 253.619283][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.673936][T11511] team0: Port device team_slave_0 added [ 253.780596][T11651] netlink: 'syz.0.1570': attribute type 10 has an invalid length. [ 253.802668][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.881661][T11511] team0: Port device team_slave_1 added [ 254.077347][T11511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.084326][T11511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.171915][T11511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.222209][T11509] hsr_slave_0: entered promiscuous mode [ 254.259999][T11509] hsr_slave_1: entered promiscuous mode [ 254.270032][T11509] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 254.283223][T11509] Cannot create hsr debugfs directory [ 254.312354][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.320290][T11677] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1575'. [ 254.349484][T11511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.357231][T11511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.385122][T11511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.634644][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 254.701354][T11511] hsr_slave_0: entered promiscuous mode [ 254.717255][T11511] hsr_slave_1: entered promiscuous mode [ 254.723646][T11511] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 254.741654][T11511] Cannot create hsr debugfs directory [ 254.872620][T11699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1582'. [ 255.035549][ T5858] Bluetooth: hci1: command tx timeout [ 255.098544][ T13] bridge_slave_1: left allmulticast mode [ 255.104219][ T13] bridge_slave_1: left promiscuous mode [ 255.110465][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.188097][ T13] bridge_slave_0: left allmulticast mode [ 255.194103][ T13] bridge_slave_0: left promiscuous mode [ 255.224033][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.274842][ T5858] Bluetooth: hci4: command tx timeout [ 255.620458][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.631592][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.641725][ T13] bond0 (unregistering): Released all slaves [ 255.674756][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 255.839574][T11716] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1589'. [ 255.982727][T11721] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1591'. [ 256.213789][T11730] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1593'. [ 256.678712][T11744] bridge0: entered allmulticast mode [ 256.714620][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 256.813598][ T13] hsr_slave_0: left promiscuous mode [ 256.824335][ T13] hsr_slave_1: left promiscuous mode [ 256.836106][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.843784][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.853758][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.861618][T11754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1601'. [ 256.871754][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.898069][ T13] veth1_macvtap: left promiscuous mode [ 256.903803][ T13] veth0_macvtap: left promiscuous mode [ 256.909556][ T13] veth1_vlan: left promiscuous mode [ 256.915092][ T13] veth0_vlan: left promiscuous mode [ 257.116045][ T5858] Bluetooth: hci1: command tx timeout [ 257.311634][ T13] team0 (unregistering): Port device team_slave_1 removed [ 257.343765][ T13] team0 (unregistering): Port device team_slave_0 removed [ 257.354584][ T5858] Bluetooth: hci4: command tx timeout [ 257.718707][T11762] __nla_validate_parse: 2 callbacks suppressed [ 257.718724][T11762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1603'. [ 257.754585][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 258.094995][T11511] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 258.130941][T11511] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 258.142938][T11511] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 258.193503][T11511] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 258.273405][T11509] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 258.298219][T11509] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 258.315288][T11509] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 258.333126][T11509] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 258.526797][T11511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.599227][T11511] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.619442][T11509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.633647][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.640971][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.665000][ T3468] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.672145][ T3468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.758123][T11805] netlink: 'syz.0.1614': attribute type 1 has an invalid length. [ 258.794743][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 258.821438][T11509] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.872063][T11809] bond0: (slave bridge4): making interface the new active one [ 258.883655][T11809] bond0: (slave bridge4): Enslaving as an active interface with an up link [ 258.960729][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.967919][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.032532][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.039800][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.098457][T11823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1619'. [ 259.154122][T11823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1619'. [ 259.191873][T11823] netlink: 4468 bytes leftover after parsing attributes in process `syz.0.1619'. [ 259.412412][T11836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1622'. [ 259.450044][T11836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1622'. [ 259.517370][T11511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.541873][T11844] openvswitch: netlink: Tunnel attr 303 out of range max 16 [ 259.724158][T11509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.834704][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 259.907240][T11509] veth0_vlan: entered promiscuous mode [ 259.930537][T11509] veth1_vlan: entered promiscuous mode [ 260.024035][T11509] veth0_macvtap: entered promiscuous mode [ 260.048585][T11509] veth1_macvtap: entered promiscuous mode [ 260.096875][T11509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.113056][T11509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.168979][T11868] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1631'. [ 260.169618][T11509] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.178797][T11869] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1631'. [ 260.211244][T11509] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.228347][T11509] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.237647][T11509] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.263531][T11872] netlink: 'syz.0.1632': attribute type 2 has an invalid length. [ 260.337910][T11511] veth0_vlan: entered promiscuous mode [ 260.386315][T11511] veth1_vlan: entered promiscuous mode [ 260.433114][ T3580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.460603][ T3580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.525644][T11877] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1634'. [ 260.540103][T11511] veth0_macvtap: entered promiscuous mode [ 260.562267][T11511] veth1_macvtap: entered promiscuous mode [ 260.572221][ T3468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.587396][ T3468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.614172][T11882] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1635'. [ 260.620932][T11881] C speed is unknown, defaulting to 1000 [ 260.671548][T11511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.723393][T11511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.771240][T11511] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.798523][T11511] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.829350][T11511] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.850156][T11511] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.874698][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 260.963486][T11888] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.303309][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.334838][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.518339][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.670582][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.689729][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.914618][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 261.941615][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.178776][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.326194][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.440318][T11918] sctp: [Deprecated]: syz.1.1644 (pid 11918) Use of int in max_burst socket option deprecated. [ 262.440318][T11918] Use struct sctp_assoc_value instead [ 262.570925][ T13] bridge_slave_1: left allmulticast mode [ 262.577813][ T13] bridge_slave_1: left promiscuous mode [ 262.583575][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.599667][ T13] bridge_slave_0: left allmulticast mode [ 262.608071][ T13] bridge_slave_0: left promiscuous mode [ 262.613819][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.821106][ T5859] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 262.835487][ T5859] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 262.844826][ T5859] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 262.854182][ T5859] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 262.867421][ T5859] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 262.955015][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 263.296600][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.332037][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.349339][ T13] bond0 (unregistering): Released all slaves [ 263.394842][ T5859] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 263.404259][ T5859] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 263.432319][ T5859] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 263.461301][ T5859] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 263.469724][ T5859] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 263.490945][T11922] C speed is unknown, defaulting to 1000 [ 263.751033][T11956] __nla_validate_parse: 2 callbacks suppressed [ 263.751049][T11956] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1655'. [ 263.877981][T11963] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 263.886262][T11947] C speed is unknown, defaulting to 1000 [ 263.994535][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 264.392302][T11988] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1664'. [ 264.572719][T11922] chnl_net:caif_netlink_parms(): no params data found [ 264.668955][ T13] hsr_slave_0: left promiscuous mode [ 264.678606][ T13] hsr_slave_1: left promiscuous mode [ 264.685155][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.692636][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.704056][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.711871][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.735511][ T13] veth1_macvtap: left promiscuous mode [ 264.741033][ T13] veth0_macvtap: left promiscuous mode [ 264.746742][ T13] veth1_vlan: left promiscuous mode [ 264.752018][ T13] veth0_vlan: left promiscuous mode [ 264.966549][ T5859] Bluetooth: hci1: command tx timeout [ 265.034543][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 265.151932][ T13] team0 (unregistering): Port device team_slave_1 removed [ 265.187881][ T13] team0 (unregistering): Port device team_slave_0 removed [ 265.515064][ T5859] Bluetooth: hci4: command tx timeout [ 265.664722][T12004] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1670'. [ 265.693655][T12004] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1670'. [ 265.759852][T12008] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1671'. [ 265.840926][T12013] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 265.871783][T11922] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.886960][T11922] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.899194][T11922] bridge_slave_0: entered allmulticast mode [ 265.908455][T11922] bridge_slave_0: entered promiscuous mode [ 265.926194][T11922] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.934905][T11922] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.942309][T11922] bridge_slave_1: entered allmulticast mode [ 265.951200][T11922] bridge_slave_1: entered promiscuous mode [ 266.074550][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 266.090473][T11922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.113044][T11922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.168737][T11947] chnl_net:caif_netlink_parms(): no params data found [ 266.196097][T11922] team0: Port device team_slave_0 added [ 266.209143][T11922] team0: Port device team_slave_1 added [ 266.263650][T11922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.270796][T11922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.297947][T11922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.327578][T11922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.336885][T11922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.365589][T11922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.434588][T11922] hsr_slave_0: entered promiscuous mode [ 266.440784][T11922] hsr_slave_1: entered promiscuous mode [ 266.448205][T11922] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.455881][T11922] Cannot create hsr debugfs directory [ 266.541961][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.602380][T11947] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.609802][T11947] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.617486][T11947] bridge_slave_0: entered allmulticast mode [ 266.626458][T11947] bridge_slave_0: entered promiscuous mode [ 266.651023][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.688388][T11947] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.698090][T11947] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.705713][T11947] bridge_slave_1: entered allmulticast mode [ 266.713713][T11947] bridge_slave_1: entered promiscuous mode [ 266.801040][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.904109][T11947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.952022][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.978896][T11947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.035127][ T5859] Bluetooth: hci1: command tx timeout [ 267.098151][T11947] team0: Port device team_slave_0 added [ 267.115044][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 267.209550][T11947] team0: Port device team_slave_1 added [ 267.338945][T11947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.348782][T11947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.377886][T11947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.448603][T11947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.485054][T11947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.534322][T11947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.585786][T12064] vlan4: entered allmulticast mode [ 267.591123][T12064] team0: entered allmulticast mode [ 267.596512][ T5859] Bluetooth: hci4: command tx timeout [ 267.603031][T12064] team0: Device vlan4 is already an upper device of the team interface [ 267.843913][ T13] bridge_slave_1: left allmulticast mode [ 267.860745][ T13] bridge_slave_1: left promiscuous mode [ 267.873240][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.876459][T12082] netlink: 'syz.3.1693': attribute type 2 has an invalid length. [ 267.886267][T12083] netlink: 'syz.3.1693': attribute type 2 has an invalid length. [ 267.897988][ T13] bridge_slave_0: left allmulticast mode [ 267.903767][ T13] bridge_slave_0: left promiscuous mode [ 267.909985][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.954165][T12084] netlink: 'syz.3.1693': attribute type 2 has an invalid length. [ 268.154697][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 268.191309][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.202120][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.212171][ T13] bond0 (unregistering): Released all slaves [ 268.230955][T11947] hsr_slave_0: entered promiscuous mode [ 268.238006][T11947] hsr_slave_1: entered promiscuous mode [ 268.244033][T11947] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 268.252081][T11947] Cannot create hsr debugfs directory [ 268.643692][T12097] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1697'. [ 268.644865][T12096] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1698'. [ 268.709987][T12094] syzkaller1: entered promiscuous mode [ 268.722866][T12094] syzkaller1: entered allmulticast mode [ 268.755551][T12099] bond8: entered promiscuous mode [ 268.760594][T12099] bond8: entered allmulticast mode [ 268.767286][T12099] 8021q: adding VLAN 0 to HW filter on device bond8 [ 268.874036][T12105] netlink: 'syz.1.1700': attribute type 1 has an invalid length. [ 268.884891][T12105] netlink: 'syz.1.1700': attribute type 2 has an invalid length. [ 268.896645][T11922] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 268.905997][T12105] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1700'. [ 268.961594][T12108] netlink: 'syz.1.1700': attribute type 15 has an invalid length. [ 268.999482][T11922] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 269.031880][T11922] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 269.115627][ T5859] Bluetooth: hci1: command tx timeout [ 269.152598][T11922] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 269.194668][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 269.274702][ T13] hsr_slave_0: left promiscuous mode [ 269.284265][ T13] hsr_slave_1: left promiscuous mode [ 269.292713][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.300982][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.319907][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.330780][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.376697][ T13] veth1_macvtap: left promiscuous mode [ 269.382265][ T13] veth0_macvtap: left promiscuous mode [ 269.388535][ T13] veth1_vlan: left promiscuous mode [ 269.393874][ T13] veth0_vlan: left promiscuous mode [ 269.685626][ T5859] Bluetooth: hci4: command tx timeout [ 269.868861][ T13] team0 (unregistering): Port device team_slave_1 removed [ 269.903374][ T13] team0 (unregistering): Port device team_slave_0 removed [ 270.234543][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 270.497794][T12157] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1714'. [ 270.521871][T12154] syzkaller1: entered allmulticast mode [ 270.660881][T11922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.806868][T11922] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.906241][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.913390][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.966873][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.974072][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.990247][T11947] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 271.030363][T11947] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 271.045845][T11947] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 271.072677][T12184] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1721'. [ 271.089726][T11947] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 271.116920][T12177] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1721'. [ 271.194738][ T5859] Bluetooth: hci1: command tx timeout [ 271.274728][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 271.309155][T12200] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1725'. [ 271.473303][T11947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.520651][T11947] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.523637][T12205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1727'. [ 271.544429][ T3468] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.551652][ T3468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.722898][ T3468] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.730059][ T3468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.754942][ T5859] Bluetooth: hci4: command tx timeout [ 271.795777][T11922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.919710][T11922] veth0_vlan: entered promiscuous mode [ 271.941094][T11922] veth1_vlan: entered promiscuous mode [ 272.004127][T11922] veth0_macvtap: entered promiscuous mode [ 272.021828][T11922] veth1_macvtap: entered promiscuous mode [ 272.051415][T11922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.064343][T11922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.128728][T11922] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.168557][T11922] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.187965][T11922] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.212212][T11922] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.314677][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 272.459763][T11947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.605709][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.654722][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.743011][ T3507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.772358][ T3507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.151776][T11947] veth0_vlan: entered promiscuous mode [ 273.157939][T12253] block nbd2: server does not support multiple connections per device. [ 273.182856][T12253] block nbd2: shutting down sockets [ 273.190216][T11947] veth1_vlan: entered promiscuous mode [ 273.259538][T11947] veth0_macvtap: entered promiscuous mode [ 273.271592][T12253] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 273.289447][T11947] veth1_macvtap: entered promiscuous mode [ 273.354719][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 273.411269][T12261] netlink: 'syz.1.1740': attribute type 23 has an invalid length. [ 273.432764][ T1156] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.487098][T11947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.519951][T11947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.568786][T11947] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.584534][T11947] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.593244][T11947] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.603042][T11947] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.738480][ T3507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.757566][ T3507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.803902][ T1156] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.822904][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.832778][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.219922][ T1156] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.394582][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 274.441475][ T1156] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.601176][ T1156] bridge_slave_1: left allmulticast mode [ 274.613654][ T1156] bridge_slave_1: left promiscuous mode [ 274.623746][ T1156] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.647733][ T1156] bridge_slave_0: left allmulticast mode [ 274.653402][ T1156] bridge_slave_0: left promiscuous mode [ 274.667893][ T1156] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.058827][ T5858] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 275.079048][ T5858] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 275.102996][ T5858] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 275.124293][ T5858] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 275.143522][ T5858] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 275.167602][ T1156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.193315][ T1156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.204024][ T1156] bond0 (unregistering): Released all slaves [ 275.257728][T12273] C speed is unknown, defaulting to 1000 [ 275.401623][T12277] xt_CT: You must specify a L4 protocol and not use inversions on it [ 275.434649][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 275.669104][T12284] vlan0: entered promiscuous mode [ 275.691285][T12284] vlan0: entered allmulticast mode [ 275.705831][T12284] hsr_slave_1: entered allmulticast mode [ 276.036024][T12300] openvswitch: netlink: Missing key (keys=40, expected=80) [ 276.083006][ T5858] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 276.115397][ T5858] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 276.131850][ T5858] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 276.142471][ T5858] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 276.155659][ T5858] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 276.179654][T12308] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1750'. [ 276.222540][T12311] netlink: 'syz.0.1753': attribute type 10 has an invalid length. [ 276.269873][T12311] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1753'. [ 276.318631][T12311] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 276.401560][T12312] bridge0: port 1(batadv1) entered blocking state [ 276.417702][T12312] bridge0: port 1(batadv1) entered disabled state [ 276.424359][T12312] batadv1: entered allmulticast mode [ 276.438800][T12312] batadv1: entered promiscuous mode [ 276.474533][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 276.561016][ T1156] hsr_slave_0: left promiscuous mode [ 276.572161][ T1156] hsr_slave_1: left promiscuous mode [ 276.579747][ T1156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.591167][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.599725][ T1156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.607609][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.634065][ T1156] veth1_macvtap: left promiscuous mode [ 276.640836][ T1156] veth0_macvtap: left promiscuous mode [ 276.647923][ T1156] veth1_vlan: left promiscuous mode [ 276.653332][ T1156] veth0_vlan: left promiscuous mode [ 276.860284][ T3507] batman_adv: batadv1: IGMP Querier appeared [ 276.868911][ T3507] batman_adv: batadv1: MLD Querier appeared [ 277.043064][ T1156] team0 (unregistering): Port device team_slave_1 removed [ 277.081634][ T1156] team0 (unregistering): Port device team_slave_0 removed [ 277.211077][ T5859] Bluetooth: hci1: command tx timeout [ 277.416772][T12299] C speed is unknown, defaulting to 1000 [ 277.421944][T12322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1756'. [ 277.514529][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 277.696307][T12342] netlink: 'syz.0.1759': attribute type 4 has an invalid length. [ 277.704291][T12273] chnl_net:caif_netlink_parms(): no params data found [ 277.731303][T12344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1760'. [ 278.115524][T12273] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.122691][T12273] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.130560][T12273] bridge_slave_0: entered allmulticast mode [ 278.139556][T12273] bridge_slave_0: entered promiscuous mode [ 278.165807][T12273] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.171422][T12371] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20004 [ 278.172989][T12273] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.215636][T12273] bridge_slave_1: entered allmulticast mode [ 278.224373][T12273] bridge_slave_1: entered promiscuous mode [ 278.236661][ T5859] Bluetooth: hci4: command tx timeout [ 278.277714][T12372] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 278.449733][T12380] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 278.554623][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 278.601132][ T1156] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.642748][T12273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.661673][T12273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.802677][ T1156] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.952678][ T1156] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.963615][T12394] xt_CT: No such helper "snmp" [ 278.995154][T12273] team0: Port device team_slave_0 added [ 279.051718][T12392] batman_adv: batadv0: Removing interface: team0 [ 279.064211][T12392] team0: Device xfrm1 is up. Set it down before adding it as a team port [ 279.090256][T12273] team0: Port device team_slave_1 added [ 279.152610][ T1156] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.272519][T12406] netlink: 'syz.3.1775': attribute type 4 has an invalid length. [ 279.280798][ T5859] Bluetooth: hci1: command tx timeout [ 279.306061][T12273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.313037][T12273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.363657][T12273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.383977][T12413] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1777'. [ 279.407466][T12273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.415848][T12273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.442547][T12273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.461562][T12299] chnl_net:caif_netlink_parms(): no params data found [ 279.594533][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 279.766558][T12273] hsr_slave_0: entered promiscuous mode [ 279.772708][T12273] hsr_slave_1: entered promiscuous mode [ 279.788002][T12273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 279.804553][T12273] Cannot create hsr debugfs directory [ 279.827818][T12299] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.836360][T12299] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.843597][T12299] bridge_slave_0: entered allmulticast mode [ 279.853737][T12299] bridge_slave_0: entered promiscuous mode [ 279.894207][T12435] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1783'. [ 279.910955][T12299] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.918877][T12299] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.926601][T12299] bridge_slave_1: entered allmulticast mode [ 279.934065][T12299] bridge_slave_1: entered promiscuous mode [ 279.953103][ T1156] bridge_slave_1: left allmulticast mode [ 279.960792][ T1156] bridge_slave_1: left promiscuous mode [ 279.968369][ T1156] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.980368][ T1156] bridge_slave_0: left allmulticast mode [ 279.986666][ T1156] bridge_slave_0: left promiscuous mode [ 279.992535][ T1156] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.120654][T12438] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1784'. [ 280.196999][T12440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1785'. [ 280.224579][T12440] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 280.240485][T12440] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 280.324761][ T5858] Bluetooth: hci4: command tx timeout [ 280.364546][ T1156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.377246][ T1156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.387238][ T1156] bond0 (unregistering): Released all slaves [ 280.429789][T12441] pim6reg: entered allmulticast mode [ 280.597868][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805aa84c00: rx timeout, send abort [ 280.613786][T12299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.634525][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 280.680714][T12299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.853697][T12299] team0: Port device team_slave_0 added [ 280.878533][T12299] team0: Port device team_slave_1 added [ 281.085487][T12299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.092478][T12299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.118480][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805aa84c00: abort rx timeout. Force session deactivation [ 281.213193][T12299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.251036][T12470] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1792'. [ 281.254586][T12469] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1792'. [ 281.270409][T12470] openvswitch: netlink: Flow key attr not present in new flow. [ 281.291616][ T1156] hsr_slave_0: left promiscuous mode [ 281.299984][ T1156] hsr_slave_1: left promiscuous mode [ 281.307072][ T1156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.314886][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.322040][T12469] openvswitch: netlink: Flow key attr not present in new flow. [ 281.329725][T12473] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1793'. [ 281.330524][T12473] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1793'. [ 281.349666][ T1156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.357701][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.374499][ T5858] Bluetooth: hci1: command tx timeout [ 281.384064][ T1156] veth1_macvtap: left promiscuous mode [ 281.392966][ T1156] veth0_macvtap: left promiscuous mode [ 281.399224][ T1156] veth1_vlan: left promiscuous mode [ 281.404727][ T1156] veth0_vlan: left promiscuous mode [ 281.555801][T12478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1794'. [ 281.674710][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 281.853778][ T1156] team0 (unregistering): Port device team_slave_1 removed [ 281.892397][ T1156] team0 (unregistering): Port device team_slave_0 removed [ 282.240483][T12299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.249042][T12299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.276831][T12299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.304035][T12476] veth0: entered promiscuous mode [ 282.397961][ T5858] Bluetooth: hci4: command tx timeout [ 282.432788][T12478] bond4: (slave vlan2): Releasing active interface [ 282.540132][T12490] xt_TCPMSS: Only works on TCP SYN packets [ 282.673009][T12299] hsr_slave_0: entered promiscuous mode [ 282.680015][T12498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1797'. [ 282.684912][T12299] hsr_slave_1: entered promiscuous mode [ 282.701203][T12299] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 282.709446][T12299] Cannot create hsr debugfs directory [ 282.714828][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 282.719872][T12498] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1797'. [ 282.730577][T12497] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 283.031829][T12519] raw_sendmsg: syz.0.1803 forgot to set AF_INET. Fix it! [ 283.067234][T12519] netlink: 'syz.0.1803': attribute type 1 has an invalid length. [ 283.283820][T12273] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 283.328273][T12273] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 283.350243][T12273] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 283.351893][T12523] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1804'. [ 283.370779][T12523] netlink: zone id is out of range [ 283.391938][T12273] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 283.435147][ T5858] Bluetooth: hci1: command tx timeout [ 283.681891][T12539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1807'. [ 283.725514][T12539] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1807'. [ 283.800214][T12273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.859837][T12299] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 283.898689][T12551] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 283.912872][T12299] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 283.931674][T12552] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 283.953572][T12299] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 283.998726][T12273] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.027588][T12299] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 284.072246][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.079427][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.136616][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.143781][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.388993][T12299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.475145][ T5858] Bluetooth: hci4: command tx timeout [ 284.514429][T12299] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.585843][ T3580] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.593007][ T3580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.616371][ T3580] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.623568][ T3580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.794650][ C0] net_ratelimit: 2 callbacks suppressed [ 284.794668][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 284.816438][T12273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.903889][T12605] netlink: 'syz.3.1823': attribute type 4 has an invalid length. [ 284.929876][T12606] nbd: socks must be embedded in a SOCK_ITEM attr [ 284.947020][T12605] netlink: 'syz.3.1823': attribute type 4 has an invalid length. [ 284.997089][T12273] veth0_vlan: entered promiscuous mode [ 285.028115][ T9] C speed is unknown, defaulting to 1000 [ 285.033784][ T9] syz0: Port: 1 Link ACTIVE [ 285.064164][T12273] veth1_vlan: entered promiscuous mode [ 285.080140][ T6029] C speed is unknown, defaulting to 1000 [ 285.154128][T12273] veth0_macvtap: entered promiscuous mode [ 285.186229][T12273] veth1_macvtap: entered promiscuous mode [ 285.258811][T12273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.318933][T12273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.351774][T12273] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.376170][T12273] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.395120][T12273] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.411008][T12273] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.429094][T12618] netlink: 'syz.3.1825': attribute type 32 has an invalid length. [ 285.442306][T12618] (unnamed net_device) (uninitialized): option coupled_control: invalid value (11) [ 285.503616][T12620] tipc: Enabling of bearer rejected, already enabled [ 285.576946][T12299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.674288][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.686635][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.747618][T12629] netlink: 'syz.3.1830': attribute type 1 has an invalid length. [ 285.760764][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.779003][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.834582][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 286.243652][T12299] veth0_vlan: entered promiscuous mode [ 286.288869][T12299] veth1_vlan: entered promiscuous mode [ 286.393840][T12299] veth0_macvtap: entered promiscuous mode [ 286.422562][T12299] veth1_macvtap: entered promiscuous mode [ 286.516301][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.564749][T12661] bond0: entered promiscuous mode [ 286.569818][T12661] bridge4: entered promiscuous mode [ 286.585135][T12661] bond0: left promiscuous mode [ 286.590349][T12661] bridge4: left promiscuous mode [ 286.650496][T12299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.684033][T12299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.749258][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.777686][T12299] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.794263][T12299] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.816277][T12299] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.825988][T12299] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.864939][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.875481][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 286.952714][ T3468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.967620][ T3468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.000196][ T3580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.011442][ T3580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.030411][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.441682][ T12] bridge_slave_1: left allmulticast mode [ 287.452378][ T12] bridge_slave_1: left promiscuous mode [ 287.459162][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.469450][ T12] bridge_slave_0: left allmulticast mode [ 287.475744][ T12] bridge_slave_0: left promiscuous mode [ 287.481487][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.838189][T12668] __nla_validate_parse: 8 callbacks suppressed [ 287.838205][T12668] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1836'. [ 287.916024][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 287.976881][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.999410][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.016347][ T12] bond0 (unregistering): Released all slaves [ 288.058591][T12674] tipc: Enabling of bearer rejected, failed to enable media [ 288.190978][ T5859] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 288.201573][ T5859] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 288.211964][ T5859] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 288.221693][ T5859] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 288.232289][ T5859] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 288.298370][T12679] C speed is unknown, defaulting to 1000 [ 288.945747][T12698] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1843'. [ 288.954844][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 289.005240][T12700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1844'. [ 289.023944][ T12] hsr_slave_0: left promiscuous mode [ 289.062242][ T12] hsr_slave_1: left promiscuous mode [ 289.075604][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.083025][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.110257][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.124615][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.187552][ T12] veth1_macvtap: left promiscuous mode [ 289.193288][ T12] veth0_macvtap: left promiscuous mode [ 289.203925][ T12] veth1_vlan: left promiscuous mode [ 289.211590][ T12] veth0_vlan: left promiscuous mode [ 289.260119][ T5859] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 289.269098][ T5859] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 289.278001][ T5859] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 289.286220][ T5859] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 289.299872][ T5859] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 289.681873][ T12] team0 (unregistering): Port device team_slave_1 removed [ 289.719055][ T12] team0 (unregistering): Port device team_slave_0 removed [ 289.996158][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 290.219233][T12711] C speed is unknown, defaulting to 1000 [ 290.310546][T12679] chnl_net:caif_netlink_parms(): no params data found [ 290.324877][ T5859] Bluetooth: hci1: command tx timeout [ 290.671256][T12679] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.708178][T12679] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.739721][T12679] bridge_slave_0: entered allmulticast mode [ 290.756892][T12679] bridge_slave_0: entered promiscuous mode [ 290.864419][T12679] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.881212][T12679] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.897758][T12679] bridge_slave_1: entered allmulticast mode [ 290.918590][T12679] bridge_slave_1: entered promiscuous mode [ 291.034614][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 291.073230][T12679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.106630][T12679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.178190][T12757] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1859'. [ 291.309598][T12770] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1864'. [ 291.356225][T12679] team0: Port device team_slave_0 added [ 291.370917][ T5859] Bluetooth: hci4: command tx timeout [ 291.390047][T12679] team0: Port device team_slave_1 added [ 291.406030][T12778] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1863'. [ 291.531885][T12679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.540390][T12679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.569904][T12679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.685614][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.737868][T12679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.761833][T12679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.789298][T12679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.912538][T12799] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1870'. [ 291.934070][T12801] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1870'. [ 291.955340][T12805] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1871'. [ 291.964884][T12805] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1871'. [ 291.983469][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.985669][T12804] ipt_ECN: cannot use operation on non-tcp rule [ 292.074545][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 292.090509][T12679] hsr_slave_0: entered promiscuous mode [ 292.095199][T12810] netlink: 'syz.3.1873': attribute type 1 has an invalid length. [ 292.105529][T12679] hsr_slave_1: entered promiscuous mode [ 292.111794][T12679] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 292.145437][T12679] Cannot create hsr debugfs directory [ 292.197913][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.325150][T12821] nbd: couldn't find a device at index 1 [ 292.332703][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.360189][T12711] chnl_net:caif_netlink_parms(): no params data found [ 292.396476][ T5859] Bluetooth: hci1: command tx timeout [ 292.459808][T12827] netlink: 'syz.1.1879': attribute type 15 has an invalid length. [ 292.623205][T12835] sock: sock_timestamping_bind_phc: sock not bind to device [ 292.678655][T12827] netlink: 'syz.1.1879': attribute type 33 has an invalid length. [ 292.679191][T12711] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.697497][T12711] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.705415][T12711] bridge_slave_0: entered allmulticast mode [ 292.713304][T12711] bridge_slave_0: entered promiscuous mode [ 292.729984][T12835] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 292.773254][T12711] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.792294][T12711] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.799901][T12711] bridge_slave_1: entered allmulticast mode [ 292.807935][T12711] bridge_slave_1: entered promiscuous mode [ 292.966136][T12711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.978560][ T12] bridge_slave_1: left allmulticast mode [ 292.989397][ T12] bridge_slave_1: left promiscuous mode [ 292.998429][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.009985][ T12] bridge_slave_0: left allmulticast mode [ 293.016273][ T12] bridge_slave_0: left promiscuous mode [ 293.022173][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.027512][T12844] can: request_module (can-proto-0) failed. [ 293.114526][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 293.272136][T12859] netlink: 'syz.0.1886': attribute type 8 has an invalid length. [ 293.434657][ T5859] Bluetooth: hci4: command tx timeout [ 293.506705][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.519171][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.529918][ T12] bond0 (unregistering): Released all slaves [ 293.547080][T12711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.791365][T12711] team0: Port device team_slave_0 added [ 293.800506][T12711] team0: Port device team_slave_1 added [ 293.812660][T12869] __nla_validate_parse: 2 callbacks suppressed [ 293.812674][T12869] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1888'. [ 293.837354][T12872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1888'. [ 293.986377][T12868] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1888'. [ 293.995116][T12711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.029591][T12711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.078567][T12711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.108958][T12711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.116520][T12711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.143011][T12711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.154519][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 294.256554][T12891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1893'. [ 294.310019][T12893] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1894'. [ 294.485084][ T5859] Bluetooth: hci1: command tx timeout [ 294.503547][T12893] netlink: 284 bytes leftover after parsing attributes in process `syz.3.1894'. [ 294.588746][T12679] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 294.643355][T12679] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 294.674391][T12711] hsr_slave_0: entered promiscuous mode [ 294.687068][T12711] hsr_slave_1: entered promiscuous mode [ 294.693595][T12711] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 294.710245][T12711] Cannot create hsr debugfs directory [ 294.768097][T12679] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 294.868108][ T12] hsr_slave_0: left promiscuous mode [ 294.894674][ T12] hsr_slave_1: left promiscuous mode [ 294.900759][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.908978][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.919829][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.939257][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.987534][T12932] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1904'. [ 295.007249][ T12] veth1_macvtap: left promiscuous mode [ 295.013523][ T12] veth0_macvtap: left promiscuous mode [ 295.020258][ T12] veth1_vlan: left promiscuous mode [ 295.025683][T12932] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1904'. [ 295.035487][ T12] veth0_vlan: left promiscuous mode [ 295.194586][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 295.528258][ T5859] Bluetooth: hci4: command tx timeout [ 295.552905][ T12] team0 (unregistering): Port device team_slave_1 removed [ 295.589441][ T12] team0 (unregistering): Port device team_slave_0 removed [ 295.922789][T12679] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 296.101195][T12952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1909'. [ 296.234552][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 296.502344][T12982] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1916'. [ 296.527355][T12679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.559823][ T5859] Bluetooth: hci1: command tx timeout [ 296.608511][T12679] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.629923][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.637096][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.691350][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.698534][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.736427][T12988] macsec0: entered promiscuous mode [ 296.741927][T12988] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:579 [ 296.751261][T12988] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 12988, name: syz.1.1918 [ 296.760410][T12988] preempt_count: 201, expected: 0 [ 296.765485][T12988] RCU nest depth: 0, expected: 0 [ 296.770444][T12988] 3 locks held by syz.1.1918/12988: [ 296.775716][T12988] #0: ffffffff8fa219b8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 296.785287][T12988] #1: ffffffff8f51c5c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 296.794377][T12988] #2: ffff888032358368 (&macsec_netdev_addr_lock_key/1){+...}-{3:3}, at: dev_uc_add+0x67/0x120 [ 296.804892][T12988] Preemption disabled at: [ 296.804905][T12988] [] dev_uc_add+0x56/0x120 [ 296.815236][T12988] CPU: 1 UID: 0 PID: 12988 Comm: syz.1.1918 Not tainted 6.16.0-rc4-syzkaller-00109-gb9fd9888a565 #0 PREEMPT(full) [ 296.815258][T12988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 296.815270][T12988] Call Trace: [ 296.815278][T12988] [ 296.815285][T12988] dump_stack_lvl+0x189/0x250 [ 296.815313][T12988] ? __pfx_dump_stack_lvl+0x10/0x10 [ 296.815334][T12988] ? __pfx__printk+0x10/0x10 [ 296.815361][T12988] ? print_lock_name+0xde/0x100 [ 296.815382][T12988] ? dev_uc_add+0x56/0x120 [ 296.815407][T12988] __might_resched+0x495/0x610 [ 296.815426][T12988] ? stack_depot_save_flags+0x40/0x900 [ 296.815455][T12988] ? dev_uc_add+0x56/0x120 [ 296.815475][T12988] ? __pfx___might_resched+0x10/0x10 [ 296.815497][T12988] ? kasan_save_track+0x4f/0x80 [ 296.815532][T12988] __mutex_lock+0x106/0xe80 [ 296.815562][T12988] ? dev_set_promiscuity+0x10e/0x260 [ 296.815586][T12988] ? __pfx___mutex_lock+0x10/0x10 [ 296.815602][T12988] ? netdev_info+0x10a/0x160 [ 296.815633][T12988] ? __pfx_netdev_info+0x10/0x10 [ 296.815667][T12988] dev_set_promiscuity+0x10e/0x260 [ 296.815692][T12988] ? __pfx_macsec_dev_change_rx_flags+0x10/0x10 [ 296.815712][T12988] __dev_set_promiscuity+0x534/0x740 [ 296.815737][T12988] ? __hw_addr_add_ex+0x3c5/0x770 [ 296.815762][T12988] __dev_set_rx_mode+0x17c/0x260 [ 296.815787][T12988] dev_uc_add+0xc8/0x120 [ 296.815810][T12988] macsec_dev_open+0xd9/0x530 [ 296.815830][T12988] ? ib_device_get_by_netdev+0x46b/0x4d0 [ 296.815848][T12988] ? __pfx_macsec_dev_open+0x10/0x10 [ 296.815867][T12988] ? ib_device_get_by_netdev+0x84/0x4d0 [ 296.815882][T12988] ? hsr_netdev_notify+0x29e/0xcf0 [ 296.815901][T12988] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 296.815921][T12988] ? udp_tunnel_nic_netdevice_event+0x1b6/0x1500 [ 296.815949][T12988] ? ip6_route_dev_notify+0x9a/0x5b0 [ 296.815972][T12988] ? notifier_call_chain+0x3bf/0x3e0 [ 296.816000][T12988] __dev_open+0x470/0x880 [ 296.816025][T12988] ? __pfx___dev_open+0x10/0x10 [ 296.816061][T12988] __dev_change_flags+0x1ea/0x6d0 [ 296.816085][T12988] ? validate_linkmsg+0x765/0x950 [ 296.816112][T12988] ? __pfx___dev_change_flags+0x10/0x10 [ 296.816146][T12988] rtnl_newlink_create+0x555/0xb00 [ 296.816182][T12988] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 296.816201][T12988] ? rtnl_newlink+0x8db/0x1c70 [ 296.816222][T12988] ? __pfx___mutex_lock+0x10/0x10 [ 296.816251][T12988] ? ns_capable+0x8a/0xf0 [ 296.816275][T12988] rtnl_newlink+0x16d6/0x1c70 [ 296.816295][T12988] ? netlink_sendmsg+0x805/0xb30 [ 296.816329][T12988] ? __pfx_rtnl_newlink+0x10/0x10 [ 296.816373][T12988] ? kasan_quarantine_put+0xdd/0x220 [ 296.816392][T12988] ? lockdep_hardirqs_on+0x9c/0x150 [ 296.816424][T12988] ? nlmon_xmit+0xb0/0x100 [ 296.816440][T12988] ? kmem_cache_free+0x18f/0x400 [ 296.816469][T12988] ? __local_bh_enable_ip+0x12d/0x1c0 [ 296.816488][T12988] ? lockdep_hardirqs_on+0x9c/0x150 [ 296.816514][T12988] ? __local_bh_enable_ip+0x12d/0x1c0 [ 296.816533][T12988] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 296.816556][T12988] ? __dev_queue_xmit+0x27e/0x3a70 [ 296.816594][T12988] ? __lock_acquire+0xab9/0xd20 [ 296.816640][T12988] ? __pfx_rtnl_newlink+0x10/0x10 [ 296.816658][T12988] rtnetlink_rcv_msg+0x7cc/0xb70 [ 296.816681][T12988] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 296.816699][T12988] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 296.816716][T12988] ? ref_tracker_free+0x63a/0x7d0 [ 296.816730][T12988] ? __copy_skb_header+0xa7/0x550 [ 296.816753][T12988] ? __pfx_ref_tracker_free+0x10/0x10 [ 296.816769][T12988] ? __skb_clone+0x63/0x7a0 [ 296.816799][T12988] netlink_rcv_skb+0x205/0x470 [ 296.816820][T12988] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 296.816840][T12988] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 296.816875][T12988] ? netlink_deliver_tap+0x2e/0x1b0 [ 296.816894][T12988] ? netlink_deliver_tap+0x2e/0x1b0 [ 296.816922][T12988] netlink_unicast+0x758/0x8d0 [ 296.816953][T12988] netlink_sendmsg+0x805/0xb30 [ 296.816984][T12988] ? __pfx_netlink_sendmsg+0x10/0x10 [ 296.817009][T12988] ? aa_sock_msg_perm+0x94/0x160 [ 296.817036][T12988] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 296.817058][T12988] ? __pfx_netlink_sendmsg+0x10/0x10 [ 296.817081][T12988] __sock_sendmsg+0x219/0x270 [ 296.817101][T12988] ____sys_sendmsg+0x505/0x830 [ 296.817128][T12988] ? __pfx_____sys_sendmsg+0x10/0x10 [ 296.817160][T12988] ? import_iovec+0x74/0xa0 [ 296.817184][T12988] ___sys_sendmsg+0x21f/0x2a0 [ 296.817208][T12988] ? __pfx____sys_sendmsg+0x10/0x10 [ 296.817265][T12988] ? __fget_files+0x2a/0x420 [ 296.817285][T12988] ? __fget_files+0x3a0/0x420 [ 296.817318][T12988] __x64_sys_sendmsg+0x19b/0x260 [ 296.817342][T12988] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 296.817375][T12988] ? rcu_is_watching+0x15/0xb0 [ 296.817398][T12988] ? do_syscall_64+0xbe/0x3b0 [ 296.817416][T12988] do_syscall_64+0xfa/0x3b0 [ 296.817431][T12988] ? lockdep_hardirqs_on+0x9c/0x150 [ 296.817455][T12988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.817471][T12988] ? clear_bhb_loop+0x60/0xb0 [ 296.817491][T12988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.817506][T12988] RIP: 0033:0x7eff60b8e929 [ 296.817521][T12988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.817536][T12988] RSP: 002b:00007eff61abc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 296.817554][T12988] RAX: ffffffffffffffda RBX: 00007eff60db5fa0 RCX: 00007eff60b8e929 [ 296.817567][T12988] RDX: 0000000000000800 RSI: 0000200000000280 RDI: 0000000000000019 [ 296.817578][T12988] RBP: 00007eff60c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 296.817589][T12988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.817599][T12988] R13: 0000000000000000 R14: 00007eff60db5fa0 R15: 00007ffd190c19b8 [ 296.817629][T12988] [ 296.817652][T12988] [ 297.274535][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 297.276394][T12988] ============================= [ 297.276402][T12988] [ BUG: Invalid wait context ] [ 297.386827][T12988] 6.16.0-rc4-syzkaller-00109-gb9fd9888a565 #0 Tainted: G W [ 297.395494][T12988] ----------------------------- [ 297.400328][T12988] syz.1.1918/12988 is trying to lock: [ 297.405684][T12988] ffff88805ae04d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_set_promiscuity+0x10e/0x260 [ 297.416125][T12988] other info that might help us debug this: [ 297.421993][T12988] context-{5:5} [ 297.425431][T12988] 3 locks held by syz.1.1918/12988: [ 297.430605][T12988] #0: ffffffff8fa219b8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 297.440085][T12988] #1: ffffffff8f51c5c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 297.449125][T12988] #2: ffff888032358368 (&macsec_netdev_addr_lock_key/1){+...}-{3:3}, at: dev_uc_add+0x67/0x120 [ 297.459558][T12988] stack backtrace: [ 297.463259][T12988] CPU: 1 UID: 0 PID: 12988 Comm: syz.1.1918 Tainted: G W 6.16.0-rc4-syzkaller-00109-gb9fd9888a565 #0 PREEMPT(full) [ 297.463279][T12988] Tainted: [W]=WARN [ 297.463283][T12988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 297.463292][T12988] Call Trace: [ 297.463298][T12988] [ 297.463306][T12988] dump_stack_lvl+0x189/0x250 [ 297.463324][T12988] ? __pfx_dump_stack_lvl+0x10/0x10 [ 297.463338][T12988] ? __pfx__printk+0x10/0x10 [ 297.463356][T12988] ? print_lock_name+0xde/0x100 [ 297.463373][T12988] __lock_acquire+0xbcb/0xd20 [ 297.463388][T12988] ? dev_set_promiscuity+0x10e/0x260 [ 297.463402][T12988] lock_acquire+0x120/0x360 [ 297.463414][T12988] ? dev_set_promiscuity+0x10e/0x260 [ 297.463433][T12988] __mutex_lock+0x182/0xe80 [ 297.463446][T12988] ? dev_set_promiscuity+0x10e/0x260 [ 297.463463][T12988] ? dev_set_promiscuity+0x10e/0x260 [ 297.463479][T12988] ? __pfx___mutex_lock+0x10/0x10 [ 297.463490][T12988] ? netdev_info+0x10a/0x160 [ 297.463510][T12988] ? __pfx_netdev_info+0x10/0x10 [ 297.463530][T12988] dev_set_promiscuity+0x10e/0x260 [ 297.463546][T12988] ? __pfx_macsec_dev_change_rx_flags+0x10/0x10 [ 297.463561][T12988] __dev_set_promiscuity+0x534/0x740 [ 297.463577][T12988] ? __hw_addr_add_ex+0x3c5/0x770 [ 297.463593][T12988] __dev_set_rx_mode+0x17c/0x260 [ 297.463608][T12988] dev_uc_add+0xc8/0x120 [ 297.463624][T12988] macsec_dev_open+0xd9/0x530 [ 297.463637][T12988] ? ib_device_get_by_netdev+0x46b/0x4d0 [ 297.463650][T12988] ? __pfx_macsec_dev_open+0x10/0x10 [ 297.463663][T12988] ? ib_device_get_by_netdev+0x84/0x4d0 [ 297.463674][T12988] ? hsr_netdev_notify+0x29e/0xcf0 [ 297.463689][T12988] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 297.463701][T12988] ? udp_tunnel_nic_netdevice_event+0x1b6/0x1500 [ 297.463719][T12988] ? ip6_route_dev_notify+0x9a/0x5b0 [ 297.463739][T12988] ? notifier_call_chain+0x3bf/0x3e0 [ 297.463757][T12988] __dev_open+0x470/0x880 [ 297.463771][T12988] ? __pfx___dev_open+0x10/0x10 [ 297.463787][T12988] __dev_change_flags+0x1ea/0x6d0 [ 297.463802][T12988] ? validate_linkmsg+0x765/0x950 [ 297.463820][T12988] ? __pfx___dev_change_flags+0x10/0x10 [ 297.463839][T12988] rtnl_newlink_create+0x555/0xb00 [ 297.463858][T12988] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 297.463872][T12988] ? rtnl_newlink+0x8db/0x1c70 [ 297.463886][T12988] ? __pfx___mutex_lock+0x10/0x10 [ 297.463901][T12988] ? ns_capable+0x8a/0xf0 [ 297.463916][T12988] rtnl_newlink+0x16d6/0x1c70 [ 297.463930][T12988] ? netlink_sendmsg+0x805/0xb30 [ 297.463948][T12988] ? __pfx_rtnl_newlink+0x10/0x10 [ 297.463969][T12988] ? kasan_quarantine_put+0xdd/0x220 [ 297.463983][T12988] ? lockdep_hardirqs_on+0x9c/0x150 [ 297.464004][T12988] ? nlmon_xmit+0xb0/0x100 [ 297.464016][T12988] ? kmem_cache_free+0x18f/0x400 [ 297.464034][T12988] ? __local_bh_enable_ip+0x12d/0x1c0 [ 297.464048][T12988] ? lockdep_hardirqs_on+0x9c/0x150 [ 297.464066][T12988] ? __local_bh_enable_ip+0x12d/0x1c0 [ 297.464079][T12988] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 297.464094][T12988] ? __dev_queue_xmit+0x27e/0x3a70 [ 297.464115][T12988] ? __lock_acquire+0xab9/0xd20 [ 297.464135][T12988] ? __pfx_rtnl_newlink+0x10/0x10 [ 297.464148][T12988] rtnetlink_rcv_msg+0x7cc/0xb70 [ 297.464163][T12988] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 297.464176][T12988] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 297.464188][T12988] ? ref_tracker_free+0x63a/0x7d0 [ 297.464200][T12988] ? __copy_skb_header+0xa7/0x550 [ 297.464216][T12988] ? __pfx_ref_tracker_free+0x10/0x10 [ 297.464227][T12988] ? __skb_clone+0x63/0x7a0 [ 297.464245][T12988] netlink_rcv_skb+0x205/0x470 [ 297.464260][T12988] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 297.464273][T12988] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 297.464291][T12988] ? netlink_deliver_tap+0x2e/0x1b0 [ 297.464305][T12988] ? netlink_deliver_tap+0x2e/0x1b0 [ 297.464321][T12988] netlink_unicast+0x758/0x8d0 [ 297.464338][T12988] netlink_sendmsg+0x805/0xb30 [ 297.464356][T12988] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.464371][T12988] ? aa_sock_msg_perm+0x94/0x160 [ 297.464390][T12988] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 297.464401][T12988] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.464416][T12988] __sock_sendmsg+0x219/0x270 [ 297.464429][T12988] ____sys_sendmsg+0x505/0x830 [ 297.464447][T12988] ? __pfx_____sys_sendmsg+0x10/0x10 [ 297.464469][T12988] ? import_iovec+0x74/0xa0 [ 297.464488][T12988] ___sys_sendmsg+0x21f/0x2a0 [ 297.464504][T12988] ? __pfx____sys_sendmsg+0x10/0x10 [ 297.464531][T12988] ? __fget_files+0x2a/0x420 [ 297.464547][T12988] ? __fget_files+0x3a0/0x420 [ 297.464566][T12988] __x64_sys_sendmsg+0x19b/0x260 [ 297.464582][T12988] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 297.464601][T12988] ? rcu_is_watching+0x15/0xb0 [ 297.464617][T12988] ? do_syscall_64+0xbe/0x3b0 [ 297.464631][T12988] do_syscall_64+0xfa/0x3b0 [ 297.464643][T12988] ? lockdep_hardirqs_on+0x9c/0x150 [ 297.464659][T12988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.464672][T12988] ? clear_bhb_loop+0x60/0xb0 [ 297.464685][T12988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.464697][T12988] RIP: 0033:0x7eff60b8e929 [ 297.464710][T12988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.464722][T12988] RSP: 002b:00007eff61abc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 297.464740][T12988] RAX: ffffffffffffffda RBX: 00007eff60db5fa0 RCX: 00007eff60b8e929 [ 297.464750][T12988] RDX: 0000000000000800 RSI: 0000200000000280 RDI: 0000000000000019 [ 297.464758][T12988] RBP: 00007eff60c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 297.464766][T12988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 297.464774][T12988] R13: 0000000000000000 R14: 00007eff60db5fa0 R15: 00007ffd190c19b8 [ 297.464789][T12988] [ 298.059215][ T5859] Bluetooth: hci4: command tx timeout [ 298.129326][T12711] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 298.149590][T12711] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 298.158276][T12711] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 298.169265][T12711] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 298.247758][T12711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.263643][T12711] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.274677][ T3468] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.281758][ T3468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.295103][ T3468] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.302169][ T3468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.314626][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 298.325946][T12679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.378695][T12679] veth0_vlan: entered promiscuous mode [ 298.389073][T12679] veth1_vlan: entered promiscuous mode [ 298.413350][T12679] veth0_macvtap: entered promiscuous mode [ 298.422986][T12679] veth1_macvtap: entered promiscuous mode [ 298.442216][T12679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.462495][T12679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.475445][T12679] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.484140][T12679] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.495450][T12679] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.504226][T12679] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.526688][T12711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.551057][T12679] ieee80211 phy62: Selected rate control algorithm 'minstrel_ht' [ 298.588182][T12679] ieee80211 phy63: Selected rate control algorithm 'minstrel_ht' [ 298.596620][ T3507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.613582][ T3507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.637345][ T3468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.649048][ T3468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.737266][T12711] veth0_vlan: entered promiscuous mode [ 298.748547][T12711] veth1_vlan: entered promiscuous mode [ 298.768596][T12711] veth0_macvtap: entered promiscuous mode [ 298.778078][T12711] veth1_macvtap: entered promiscuous mode [ 298.792944][T12711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.805435][T12711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.815447][T12711] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.824122][T12711] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.833470][T12711] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.842177][T12711] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.867041][T12711] ieee80211 phy64: Selected rate control algorithm 'minstrel_ht' [ 298.889837][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.891227][T12711] ieee80211 phy65: Selected rate control algorithm 'minstrel_ht' [ 298.909770][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.928304][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.936199][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.354601][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 299.607874][ T1156] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.030980][ T1156] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.394595][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 300.699225][ T1156] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.949235][ T1156] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.050862][ T1156] bridge_slave_1: left allmulticast mode [ 301.059541][ T1156] bridge_slave_1: left promiscuous mode [ 301.065436][ T1156] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.073977][ T1156] bridge_slave_0: left allmulticast mode [ 301.079874][ T1156] bridge_slave_0: left promiscuous mode [ 301.087410][ T1156] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.205724][ T1156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 301.217461][ T1156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 301.227252][ T1156] bond0 (unregistering): Released all slaves [ 301.434508][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 301.480100][ T1156] hsr_slave_0: left promiscuous mode [ 301.489158][ T1156] hsr_slave_1: left promiscuous mode [ 301.495218][ T1156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.502616][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.518970][ T1156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.526593][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.537722][ T1156] veth1_macvtap: left promiscuous mode [ 301.543233][ T1156] veth0_macvtap: left promiscuous mode [ 301.548877][ T1156] veth1_vlan: left promiscuous mode [ 301.554142][ T1156] veth0_vlan: left promiscuous mode [ 301.737973][ T1156] team0 (unregistering): Port device team_slave_1 removed [ 301.766032][ T1156] team0 (unregistering): Port device team_slave_0 removed [ 302.180614][ T1156] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.241912][ T1156] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.299974][ T1156] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.351175][ T1156] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.452067][ T1156] bridge_slave_1: left allmulticast mode [ 302.458896][ T1156] bridge_slave_1: left promiscuous mode [ 302.465653][ T1156] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.474121][ T1156] bridge_slave_0: left allmulticast mode [ 302.479826][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 302.487862][ T1156] bridge_slave_0: left promiscuous mode [ 302.493567][ T1156] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.605387][ T1156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.615900][ T1156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.625675][ T1156] bond0 (unregistering): Released all slaves [ 302.907132][ T1156] hsr_slave_0: left promiscuous mode [ 302.912877][ T1156] hsr_slave_1: left promiscuous mode [ 302.940753][ T1156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.948384][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.957079][ T1156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.964661][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.975555][ T1156] veth1_macvtap: left promiscuous mode [ 302.981079][ T1156] veth0_macvtap: left promiscuous mode [ 302.986849][ T1156] veth1_vlan: left promiscuous mode [ 302.992124][ T1156] veth0_vlan: left promiscuous mode [ 303.183875][ T1156] team0 (unregistering): Port device team_slave_1 removed [ 303.206411][ T1156] team0 (unregistering): Port device team_slave_0 removed [ 303.514536][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 304.554537][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 305.594513][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 306.634510][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available