last executing test programs: 1m40.947788455s ago: executing program 4 (id=240): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x20, 0x18, 0x229, 0x0, 0x0, {0x5}, [@typed={0x8, 0x800, 0x0, 0x0, @u32}, @nested={0x4, 0x9}]}, 0x20}}, 0x14000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv4_getnetconf={0x2c, 0x52, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x80000001}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x72}, @NETCONFA_FORWARDING={0x8, 0x2, 0x9}]}, 0x2c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x20, 0x18, 0x229, 0x0, 0x0, {0x5}, [@typed={0x8, 0x800, 0x0, 0x0, @u32}, @nested={0x4, 0x9}]}, 0x20}}, 0x14000000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv4_getnetconf={0x2c, 0x52, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x80000001}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x72}, @NETCONFA_FORWARDING={0x8, 0x2, 0x9}]}, 0x2c}}, 0x0) (async) 1m25.690781311s ago: executing program 0 (id=547): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg$inet6(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000022c0)='`', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000003580)=[{&(0x7f0000000940)='z', 0x1}], 0x1}}], 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) shutdown(r0, 0x1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000080)={r4, 0x8001}, 0x8) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x24, r5, 0x121, 0x70bd2c, 0x100000, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0x6}]}, 0x24}}, 0x4000040) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={r4, 0x38, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x69, @loopback, 0x1}, @in6={0xa, 0x4e23, 0x7, @private2, 0x2}]}, &(0x7f0000000100)=0x10) 1m22.490100558s ago: executing program 4 (id=240): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x20, 0x18, 0x229, 0x0, 0x0, {0x5}, [@typed={0x8, 0x800, 0x0, 0x0, @u32}, @nested={0x4, 0x9}]}, 0x20}}, 0x14000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv4_getnetconf={0x2c, 0x52, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x80000001}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x72}, @NETCONFA_FORWARDING={0x8, 0x2, 0x9}]}, 0x2c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x20, 0x18, 0x229, 0x0, 0x0, {0x5}, [@typed={0x8, 0x800, 0x0, 0x0, @u32}, @nested={0x4, 0x9}]}, 0x20}}, 0x14000000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv4_getnetconf={0x2c, 0x52, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x80000001}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x72}, @NETCONFA_FORWARDING={0x8, 0x2, 0x9}]}, 0x2c}}, 0x0) (async) 1m8.391275046s ago: executing program 0 (id=547): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg$inet6(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000022c0)='`', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000003580)=[{&(0x7f0000000940)='z', 0x1}], 0x1}}], 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) shutdown(r0, 0x1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000080)={r4, 0x8001}, 0x8) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x24, r5, 0x121, 0x70bd2c, 0x100000, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0x6}]}, 0x24}}, 0x4000040) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={r4, 0x38, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x69, @loopback, 0x1}, @in6={0xa, 0x4e23, 0x7, @private2, 0x2}]}, &(0x7f0000000100)=0x10) 1m4.203927017s ago: executing program 4 (id=240): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x20, 0x18, 0x229, 0x0, 0x0, {0x5}, [@typed={0x8, 0x800, 0x0, 0x0, @u32}, @nested={0x4, 0x9}]}, 0x20}}, 0x14000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv4_getnetconf={0x2c, 0x52, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x80000001}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x72}, @NETCONFA_FORWARDING={0x8, 0x2, 0x9}]}, 0x2c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x20, 0x18, 0x229, 0x0, 0x0, {0x5}, [@typed={0x8, 0x800, 0x0, 0x0, @u32}, @nested={0x4, 0x9}]}, 0x20}}, 0x14000000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv4_getnetconf={0x2c, 0x52, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x80000001}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x72}, @NETCONFA_FORWARDING={0x8, 0x2, 0x9}]}, 0x2c}}, 0x0) (async) 51.761761454s ago: executing program 4 (id=240): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x20, 0x18, 0x229, 0x0, 0x0, {0x5}, [@typed={0x8, 0x800, 0x0, 0x0, @u32}, @nested={0x4, 0x9}]}, 0x20}}, 0x14000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv4_getnetconf={0x2c, 0x52, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x80000001}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x72}, @NETCONFA_FORWARDING={0x8, 0x2, 0x9}]}, 0x2c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x20, 0x18, 0x229, 0x0, 0x0, {0x5}, [@typed={0x8, 0x800, 0x0, 0x0, @u32}, @nested={0x4, 0x9}]}, 0x20}}, 0x14000000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv4_getnetconf={0x2c, 0x52, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x80000001}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x72}, @NETCONFA_FORWARDING={0x8, 0x2, 0x9}]}, 0x2c}}, 0x0) (async) 51.10466542s ago: executing program 0 (id=547): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg$inet6(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000022c0)='`', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000003580)=[{&(0x7f0000000940)='z', 0x1}], 0x1}}], 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) shutdown(r0, 0x1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000080)={r4, 0x8001}, 0x8) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x24, r5, 0x121, 0x70bd2c, 0x100000, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0x6}]}, 0x24}}, 0x4000040) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={r4, 0x38, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x69, @loopback, 0x1}, @in6={0xa, 0x4e23, 0x7, @private2, 0x2}]}, &(0x7f0000000100)=0x10) 35.176717622s ago: executing program 0 (id=547): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg$inet6(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000022c0)='`', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000003580)=[{&(0x7f0000000940)='z', 0x1}], 0x1}}], 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) shutdown(r0, 0x1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000080)={r4, 0x8001}, 0x8) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x24, r5, 0x121, 0x70bd2c, 0x100000, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0x6}]}, 0x24}}, 0x4000040) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={r4, 0x38, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x69, @loopback, 0x1}, @in6={0xa, 0x4e23, 0x7, @private2, 0x2}]}, &(0x7f0000000100)=0x10) 33.968574032s ago: executing program 4 (id=240): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x20, 0x18, 0x229, 0x0, 0x0, {0x5}, [@typed={0x8, 0x800, 0x0, 0x0, @u32}, @nested={0x4, 0x9}]}, 0x20}}, 0x14000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv4_getnetconf={0x2c, 0x52, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x80000001}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x72}, @NETCONFA_FORWARDING={0x8, 0x2, 0x9}]}, 0x2c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x20, 0x18, 0x229, 0x0, 0x0, {0x5}, [@typed={0x8, 0x800, 0x0, 0x0, @u32}, @nested={0x4, 0x9}]}, 0x20}}, 0x14000000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv4_getnetconf={0x2c, 0x52, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x80000001}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x72}, @NETCONFA_FORWARDING={0x8, 0x2, 0x9}]}, 0x2c}}, 0x0) (async) 16.508902574s ago: executing program 4 (id=240): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x20, 0x18, 0x229, 0x0, 0x0, {0x5}, [@typed={0x8, 0x800, 0x0, 0x0, @u32}, @nested={0x4, 0x9}]}, 0x20}}, 0x14000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv4_getnetconf={0x2c, 0x52, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x80000001}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x72}, @NETCONFA_FORWARDING={0x8, 0x2, 0x9}]}, 0x2c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x20, 0x18, 0x229, 0x0, 0x0, {0x5}, [@typed={0x8, 0x800, 0x0, 0x0, @u32}, @nested={0x4, 0x9}]}, 0x20}}, 0x14000000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv4_getnetconf={0x2c, 0x52, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x80000001}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x72}, @NETCONFA_FORWARDING={0x8, 0x2, 0x9}]}, 0x2c}}, 0x0) (async) 16.399371329s ago: executing program 0 (id=547): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg$inet6(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000022c0)='`', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000003580)=[{&(0x7f0000000940)='z', 0x1}], 0x1}}], 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) shutdown(r0, 0x1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000080)={r4, 0x8001}, 0x8) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x24, r5, 0x121, 0x70bd2c, 0x100000, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0x6}]}, 0x24}}, 0x4000040) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={r4, 0x38, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x69, @loopback, 0x1}, @in6={0xa, 0x4e23, 0x7, @private2, 0x2}]}, &(0x7f0000000100)=0x10) 6.840276004s ago: executing program 2 (id=1679): r0 = socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c) (async) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x800) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10) (async) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x24000054}, 0xc001) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r4) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f00000002c0)={0x0, 0x900, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="410000000000000001000603000014000300060afc04090300f006e8ffff00000001080007003a3a2f09140002"], 0x44}, 0x1, 0x1000000}, 0x0) (async) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000540)={0x38, r6, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_EXTENDED_ADDR={0x0, 0x17, {0xaaaaaaaaaaaa0202}}, @NL802154_ATTR_IFINDEX={0x0, 0x3, r7}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xfffffffd}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004812}, 0x8000) (async) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffc4c, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) (async) recvmmsg$unix(r2, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)=""/116, 0x74}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)={0xb8, r5, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:mqueue_spool_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x18}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:fuse_device_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:ptchown_exec_t:s0\x00'}]}, 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x40) 2.743456121s ago: executing program 2 (id=1693): r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000004c0)={r0}) r1 = socket$inet6(0xa, 0x6, 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000200)=0x100000001) socket(0x2b, 0x1, 0x1) (async) r2 = socket(0x2b, 0x1, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x18, r4, 0x1, 0x0, 0xffffffff, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x20000000) (async) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x18, r4, 0x1, 0x0, 0xffffffff, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x20000000) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0xc, 0x24, 0x4, @void, @void, @void, @value}, 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0xc, 0x24, 0x4, @void, @void, @void, @value}, 0x20) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={&(0x7f0000000600)="3680e9f0bd59b57eb95eae5aa760a53a7c6b8928dfb1e770ebc8b3484618c4806d1fdf624d812b6abe6630819b71aa2cc51024c09412a2cf016a8bed55989c952a851890492eeecd26e4f11c995f265aafac4c0304ed28f991434a103f37c6800068a67f", &(0x7f0000000680)=""/168, &(0x7f0000000740)="7e87518a0b72d1c3d6cf5e67ea06704fd028befbe0c212b81e3498635f4770d799461716e1de74e910740bcde65f2e7439bb6e5650f916f2657d4b436155b8c8aea807e97ad140628ca0860155c12ad56a2be24e2fbd6faa0d9a70dd8ab4c13080cba43c72838def3003f81952554ca9d7de3f6b7be0522c638a84c3b4af9e621ee194edc9bdd09d1d9638520409551ece85f049660dec5ee640cfa580afabadd95ca20269dd9f7464e946be6940a033775b835a1a1c3dcc05cf99e194be3671b692ea3bc96d1a1a1c470da32a761b60cb9117e335eaa1bd56e2eb", &(0x7f0000000840)="3d75e817797b9660a4652aee39b41b105e6f747a98e9ebdc03c2ade3ce67a03f854b954484177d43810a7c7b6d8969e8c49275a25fedd002e77f7ff265fa2bb14a611c7e7de345047f662fdf02d00c88aded267e409891cb7eba6f270d4ef7949a5b7365a5fabda44aede260ff69", 0xc, r5}, 0x38) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r5}, 0x8) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r7, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000) (async) sendmmsg$inet(r7, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r7, 0x84, 0x23, &(0x7f0000000240)={r8, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000003c0)={0x0, 0x7fff, 0x4, 0x7, 0x2, 0x8, 0x5, 0x1fc6024c, r8}, &(0x7f0000000400)=0x20) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000003c0)={0x0, 0x7fff, 0x4, 0x7, 0x2, 0x8, 0x5, 0x1fc6024c, r8}, &(0x7f0000000400)=0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000b8d3d1bfebb99a370000", @ANYRES32=r6, @ANYBLOB="00002dff00000000b708000000000000798af8ff00000000bfa200000000010000800000f8ffffffbf03000008000000b7040000007852088f5ffacfdc4cc60000850000005900000095c0a239e400714855fb906946dc96cafce241fa69da487b9533450595b1c20425e7a37162932ac3fd3953efa28b0ca76a63fb7055591ae8fe7a65af680bf5d78adb8b69942a1ba9e2481d9d01004cca9333ac8767366e4840712ecc4a36b09581dd"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.359902268s ago: executing program 2 (id=1695): syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @remote, @link_local, @broadcast}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd602a8435001406ff00000000000000000000000043bc8f7e313d2100000000fe8000000000000000000000000000aa00004e2224cf2d224a4bfaa6b93ef8cd9e14f14f326de30b8c34596acd1bbff59a32b0c1e2c19c340a", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="58c2000090780000"], 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b2b, &(0x7f0000000080)={'wlan1\x00', @random="02001c00004a"}) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x18, 0x1401, 0x5, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x40) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x89f1, 0x0) 2.110287101s ago: executing program 2 (id=1697): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000700)={0x3, &(0x7f0000000000)=[{0x50}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="01002cbd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="32003300209c0600080211000001080211000000ffffffffffffd9c404008001100009000802110000ee2c84ef6749c1efa062c14600000602020202020200000a00cd000700080001008384e9c4df39fe8462b96f0b1f5ed68d7409bd7cb4c841b8ebaa30e5648c573593862d65d8c337229dd48d690785f02c8f"], 0x5c}, 0x1, 0x0, 0x0, 0x6a845ecb4f20be71}, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fec8df25050000000800090002000000060001000500000008000c00aa0a000008000b"], 0x40}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000005700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r6, &(0x7f00000059c0)={0x0, 0x0, &(0x7f0000005980)={&(0x7f0000005740)={0x2c, 0x0, 0x105, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20008804) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1b400}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) 1.836795656s ago: executing program 2 (id=1699): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x44000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbf9, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) recvmmsg(r0, &(0x7f0000001f80)=[{{0x0, 0x0, 0x0}, 0xfb}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000005c40)=""/4096, 0x1000}, {&(0x7f0000000340)=""/182, 0xb6}, {&(0x7f0000000480)=""/175, 0xaf}], 0x3}, 0x9}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000003a80)=""/4110, 0x100e}, {&(0x7f0000000540)=""/216, 0xd8}, {&(0x7f0000000900)=""/4104, 0x1008}, {&(0x7f0000001940)=""/209, 0xd1}], 0x4}, 0x7ffffffe}, {{0x0, 0x0, 0x0}, 0xfcd4}], 0x5, 0x40008062, 0x0) 1.567374781s ago: executing program 2 (id=1700): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@bridge_setlink={0x34, 0x13, 0xa2f, 0x70bd25, 0x0, {0x7, 0x0, 0x68, r2, 0x900, 0x62010}, [@IFLA_LINKINFO={0x14, 0x1a, 0x0, 0x1, @vlan={{0x9}, {0x4, 0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x44030}, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="d4000000240001002abd7000fedbdf2544000000bd000e80ff"], 0xd4}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100800000000000000000001000000011"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r7, 0x0, 0x10000008ebc, 0x0) splice(r6, 0x0, r9, 0x0, 0x25a5, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x400000000000235, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r10, 0x400448cb, 0x0) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="0401", @ANYRES32, @ANYBLOB="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608"], 0x104}], 0x1}, 0x0) syz_emit_ethernet(0xdc, &(0x7f00000003c0)={@link_local, @dev, @void, {@ipv4={0x8864, @gre={{0x5, 0x4, 0x0, 0x8, 0xce, 0x67, 0x0, 0x5, 0x2f, 0x0, @local, @multicast1}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x0, {{0x5, 0x1, 0x7, 0x3, 0x0, 0x0, 0x6, 0xb}, 0x1, {0x38}}}, {0x8, 0x22eb, 0x4, {{0x3, 0x2, 0x6, 0x1, 0x0, 0x1, 0x3, 0x6}, 0x2, {0x7, 0x4, 0x0, 0x5, 0x1, 0x1, 0x2}}}, {0x8, 0x6558, 0x0, "b045d1206a51329c95e184f888b4ab90c0537bc85be8c475edf28c093030dfd5c8e97f9eca319a93ae964422a900385d2effa2dafe74d19eff06a11ae7b2fdd64b0d78bad7f77eef3308ce9befef166f07f9e5f47b587962e68a9ca81c67437737d863d9256ac2940036791b820f66ee3dcd6b8de729"}}}}}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) bind$bt_hci(r11, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r11, &(0x7f0000000040)="05000000010000", 0x7) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWT_BPF_XMIT_HEADROOM={0x8}}]}, 0x30}}, 0x0) 1.48650799s ago: executing program 1 (id=1701): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="040100001a0001000000000000000000e00000020000000000000000000000002001000000000000000000000000000100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.316111185s ago: executing program 1 (id=1702): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)={0x24, r1, 0xdac7a804b810efff, 0x70bd2b, 0x3f, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, 0x0) 1.22484248s ago: executing program 1 (id=1703): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000800)={0xf, 0x2, 0x1, 0x590}, 0x10) write$cgroup_int(r0, &(0x7f0000000200)=0x1, 0x12) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @rand_addr=0x64010102}}}, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) 1.020239767s ago: executing program 1 (id=1705): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) sendmsg(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)}, {&(0x7f0000000ac0)="07d98d396058a855921d034d0fb8034a5317ce586c382c8d41f8212309f82dd261e5f9263338a10244d7b49f8608f304ee79d951cd4ca8c44b84d8b2da6feb009a0d53224f69c7a037105aa12b36d0f2fa926dad5b4a129773ae0025ee2dccc42c4cc23ddd896f77e5b427f7950212eaeb0dd9c789f8def4d9fbf6274bbf72f31c5a548464395d9a68564fc12ef2196d7eac2b93ba137c89c360011aa0c15d2a0db9dfc760b6e069968685b051123d404ba4e94ccfdfebeaa7a30c8de388e00edff56b0c6968ec98e00ad8decf9dec77295a37e60510e906474b55034f7f6594c92e49dd422bb4346631b852e64add94f0ee30da8e199a89d8969df24601639c324ea084f8b00dbb3322aa7b1759fde71e4279841257c589725c12070d0cd41423d566d8b73b2936119519e31f4c8243e9207e688e77550867081b9b685d277a4800", 0xfffffd6b}, {&(0x7f0000000640)="74a892e6122d0e9da29a40f6060049f3ab51554d", 0x14}], 0x3, &(0x7f00000005c0)=ANY=[], 0x158}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000480), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0x66, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1000}, @exit, @exit, @call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, r1, 0x0, 0x4, &(0x7f0000000140)='GPL\x00', 0x0}, 0x30) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@cgroup=r1, r1, 0x10, 0x24, 0x0, @void, @void, @void, @value=r3}, 0x20) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010004b040000000000005f007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010062726964676500001800028005002600020000000c002e"], 0x48}}, 0x0) 813.474804ms ago: executing program 3 (id=1706): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x20, &(0x7f00000001c0)={&(0x7f0000000000)=""/17, 0x11, 0x0, &(0x7f0000000180)}}, 0x10) r1 = socket$unix(0x1, 0x1, 0x0) recvmsg$unix(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/155, 0x9b}, {&(0x7f00000004c0)=""/215, 0xd7}, {&(0x7f00000005c0)=""/121, 0x79}], 0x3}, 0x120) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) syz_emit_ethernet(0x4e, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd604dd70800180600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60c2000090780000030396005512d01e49c4e377b3aea595b70f776cb9fbf2be3b392252c3ac4609"], 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x36, &(0x7f00000000c0)=[{0x7}, {0x3, 0x5, 0x2c, 0x4}, {0xfac3, 0x2, 0x4, 0x2}, {0x77cf, 0x7f, 0x1, 0x80000001}, {0x7, 0x11, 0xcf, 0x7}]}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, 0x0, &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500000000000000000000000200000000000000000008"], 0x1c}}, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000040)=ANY=[], 0x6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000180)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) readv(r7, &(0x7f0000000080)=[{&(0x7f0000000040)=""/24, 0x18}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000280)=ANY=[@ANYRES16=r2], &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 675.728359ms ago: executing program 1 (id=1707): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x6) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000000008500000061000000850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000000008500000061000000850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) (async) r2 = accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) ioctl$sock_ax25_SIOCDELRT(r2, 0x890c, &(0x7f0000000180)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x7, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) socket(0xa, 0x2, 0x0) (async) r3 = socket(0xa, 0x2, 0x0) close(r3) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x21, 0x0, &(0x7f0000003c00)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x0, 0x36, 0x0, &(0x7f00000003c0)="e02742e8680d85ff970c2d2f86dd1835e83dcd7105227dad63d67dfbeb9f39fc145a147f3958c985e6f1e330389c6546a8d9547652e5", 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000003d0007010000007c00003bc2ab9ae42ebac03d819eb047f204003080100001000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0xc000) (async) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000003d0007010000007c00003bc2ab9ae42ebac03d819eb047f204003080100001000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0xc000) 512.171102ms ago: executing program 1 (id=1708): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = socket$inet6(0xa, 0x1, 0x0) (rerun: 32) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@remote, 0x0, 0x0, 0xfffc, 0x41, 0x2, 0x0, 0x20, 0xff}, {0x5, 0x3, 0xfffffffffffffffe, 0x0, 0x4, 0x0, 0x80000000000000}, {0x400, 0x3, 0x0, 0x800}, 0x8, 0x0, 0x1, 0x0, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0xf}, 0x10000000, 0x2b}, 0x2, @in=@empty, 0xffffffff, 0x4, 0x3, 0x0, 0xfffffffe, 0x0, 0xfffffffe}}, 0xe8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4800000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000001000058009"], 0x48}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}}, 0x1c) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) (async, rerun: 32) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) (rerun: 32) 472.658784ms ago: executing program 3 (id=1709): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000700)={0x3, &(0x7f0000000000)=[{0x50}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="01002cbd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="32003300209c0600080211000001080211000000ffffffffffffd9c404008001100009000802110000ee2c84ef6749c1efa062c14600000602020202020200000a00cd000700080001008384e9c4df39fe8462b96f0b1f5ed68d7409bd7cb4c841b8ebaa30e5648c573593862d65d8c337229dd48d690785f02c8f"], 0x5c}, 0x1, 0x0, 0x0, 0x6a845ecb4f20be71}, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fec8df25050000000800090002000000060001000500000008000c00aa0a000008000b"], 0x40}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000005700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r6, &(0x7f00000059c0)={0x0, 0x0, &(0x7f0000005980)={&(0x7f0000005740)={0x2c, 0x0, 0x105, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20008804) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1b400}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) 288.620682ms ago: executing program 3 (id=1710): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x44000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, 0x0, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) recvmmsg(r0, &(0x7f0000001f80)=[{{0x0, 0x0, 0x0}, 0xfb}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000005c40)=""/4096, 0x1000}, {&(0x7f0000000340)=""/182, 0xb6}, {&(0x7f0000000480)=""/175, 0xaf}], 0x3}, 0x9}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000003a80)=""/4110, 0x100e}, {&(0x7f0000000540)=""/216, 0xd8}, {&(0x7f0000000900)=""/4104, 0x1008}, {&(0x7f0000001940)=""/209, 0xd1}], 0x4}, 0x7ffffffe}, {{0x0, 0x0, 0x0}, 0xfcd4}], 0x5, 0x40008062, 0x0) 215.129564ms ago: executing program 3 (id=1711): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@remote, @in6=@loopback}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 64.280686ms ago: executing program 3 (id=1712): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004500"], 0x0) r0 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) sendmsg(r0, &(0x7f00000001c0)={&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, 0x2, 0x2, 0x0, 0x2}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000480)="e26310484f860a45e114d7d573bafd28245a8a2762055f5fb93f61f3b4c0f24aecb389eba5479c38f576cd9966cb159dc86f0813ea5eb929c4ed58ba89eff4c15ad74c5d6ab9f85fe8023a6d3ba5cce5572450d9e1d9e3fcabe563c1521c91b691eda96d26b78548edf206f2ccba22305df8c5e4a3e1e0f56ff0d44748eb9605775e", 0x82}], 0x1, &(0x7f0000000800)=[{0x18, 0x110, 0x1000, "2f049a0b98090472"}, {0x28, 0x10b, 0x8001, "e2f4b6bf36bf44bd9e7e50ea4e985a2f4bd0a7d41c4b"}, {0xc0, 0x29, 0x70, "7181cb080431e61fc96497705cac016a94dc3a3af2de1fc5812661dc15556979dc91cb3b0ddc46ed69b8cf8d8763acccd8e9a7d253730822146618ad771298112665ddfb6c471b47059dca8f0a1119bc2e04f40a5012a09a17e3aa946b641a9436e719a4baf8b91f2d763bc2067e5b3eb2581956626fd5b1e952ff2b99d04340d26f11a07bd8a9f6bea6607faf618bbf40fb628abfe480a5f7e3c6616f25b8fa2d5578cdf319c5f8abbe0bfa8b"}], 0x100}, 0x0) recvmmsg(r1, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10004}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000000)=""/203, 0xcb}, {&(0x7f0000000340)=""/257, 0x101}, {&(0x7f0000001b40)=""/4109, 0x100d}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x4}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000005080)=""/4093, 0xffd}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/88, 0x58}], 0x5}, 0xb0}, {{0x0, 0xfffffea6, 0x0}, 0xa}], 0x8, 0x20, 0x0) 21.190407ms ago: executing program 3 (id=1713): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)={0x24, r1, 0xdac7a804b810efff, 0x70bd2b, 0xa1, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, 0x0) 0s ago: executing program 0 (id=547): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg$inet6(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000022c0)='`', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000003580)=[{&(0x7f0000000940)='z', 0x1}], 0x1}}], 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) shutdown(r0, 0x1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000080)={r4, 0x8001}, 0x8) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x24, r5, 0x121, 0x70bd2c, 0x100000, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0x6}]}, 0x24}}, 0x4000040) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={r4, 0x38, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x69, @loopback, 0x1}, @in6={0xa, 0x4e23, 0x7, @private2, 0x2}]}, &(0x7f0000000100)=0x10) kernel console output (not intermixed with test programs): 94] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.203693][ T6594] bond0 (unregistering): Released all slaves [ 251.636863][T10052] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 251.765848][T10055] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1010'. [ 251.962582][T10062] vxcan1: tx drop: invalid sa for name 0x0000000000000002 [ 251.983806][ T6594] hsr_slave_0: left promiscuous mode [ 252.002113][ T6594] hsr_slave_1: left promiscuous mode [ 252.012570][ T6594] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.020967][ T6594] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.040584][ T6594] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.050663][ T6594] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.083000][ T6594] veth1_macvtap: left promiscuous mode [ 252.089344][ T6594] veth0_macvtap: left promiscuous mode [ 252.095237][ T6594] veth1_vlan: left promiscuous mode [ 252.100806][ T6594] veth0_vlan: left promiscuous mode [ 252.689216][ T5850] Bluetooth: hci4: command tx timeout [ 252.766932][ T6594] team0 (unregistering): Port device team_slave_1 removed [ 252.806028][ T6594] team0 (unregistering): Port device team_slave_0 removed [ 253.167422][ T5842] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 253.247251][ T5842] Bluetooth: hci0: command 0x0401 tx timeout [ 253.873290][ T9823] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 253.884924][T10103] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1021'. [ 254.000813][ T9823] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 254.026410][T10113] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1021'. [ 254.047839][ T9823] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 254.153711][ T9823] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 254.618952][T10131] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1024'. [ 254.950293][ T9863] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 254.965482][T10146] x_tables: ip6_tables: nfacct.0 match: invalid size 40 (kernel) != (user) 144 [ 254.977713][ T9863] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 255.005373][ T9863] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 255.040727][ T9863] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 255.108904][ T9823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.261083][ T9823] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.269934][T10155] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1031'. [ 255.291071][ T6597] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.298332][ T6597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.330658][T10155] gretap0: entered promiscuous mode [ 255.381810][ T6594] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.389033][ T6594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.433173][T10162] netlink: 'syz.2.1032': attribute type 1 has an invalid length. [ 255.523743][T10162] 8021q: adding VLAN 0 to HW filter on device bond1 [ 255.563752][T10155] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1031'. [ 255.613117][T10165] 8021q: adding VLAN 0 to HW filter on device bond1 [ 255.637806][T10159] netlink: 'syz.3.1031': attribute type 10 has an invalid length. [ 255.663939][T10165] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 255.682801][T10165] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 255.734062][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.784852][T10162] veth5: entered promiscuous mode [ 255.797635][T10162] bond1: (slave veth5): Enslaving as an active interface with a down link [ 255.814244][T10155] 0ªî{X¹¦: renamed from gretap0 [ 255.824857][T10155] 0ªî{X¹¦: left promiscuous mode [ 255.839317][T10155] 0ªî{X¹¦: entered allmulticast mode [ 255.846994][T10155] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 255.880548][T10170] vlan4: entered allmulticast mode [ 255.885823][T10170] bond1: entered allmulticast mode [ 256.092230][ T9863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.150417][T10182] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 256.176091][ T9863] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.194332][ T6597] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.201570][ T6597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.225219][ T6597] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.232475][ T6597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.625374][ T9823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.824842][T10208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1038'. [ 256.832820][ T9823] veth0_vlan: entered promiscuous mode [ 256.870379][ T9823] veth1_vlan: entered promiscuous mode [ 256.965095][ T9823] veth0_macvtap: entered promiscuous mode [ 257.049173][ T9823] veth1_macvtap: entered promiscuous mode [ 257.135209][ T9863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.229239][ T9823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.317876][ T9823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.385827][ T9823] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.402767][ T9823] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.436544][ T9823] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.476320][ T9823] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.691959][T10243] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1044'. [ 257.729765][T10243] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1044'. [ 257.777693][T10243] netlink: 'syz.3.1044': attribute type 6 has an invalid length. [ 257.805679][T10243] netlink: 'syz.3.1044': attribute type 5 has an invalid length. [ 257.875542][T10243] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1044'. [ 257.891545][ T6604] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.903725][T10251] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1046'. [ 257.930531][ T6604] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.946096][T10246] netlink: 'syz.3.1044': attribute type 6 has an invalid length. [ 257.966915][T10246] netlink: 'syz.3.1044': attribute type 5 has an invalid length. [ 258.118584][ T6604] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.139199][ T6604] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.316538][ T9863] veth0_vlan: entered promiscuous mode [ 258.351837][T10266] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 258.353527][ T9863] veth1_vlan: entered promiscuous mode [ 258.468813][ T9863] veth0_macvtap: entered promiscuous mode [ 258.500194][ T9863] veth1_macvtap: entered promiscuous mode [ 258.550918][ T9863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.581008][ T9863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.604879][ T9863] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.634572][ T9863] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.653718][ T9863] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.672771][ T9863] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.684725][T10277] x_tables: ip6_tables: nfacct.0 match: invalid size 40 (kernel) != (user) 144 [ 258.784966][ T6589] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.930918][ T6589] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.082486][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.094311][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.211779][ T6589] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.235972][ T6594] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.253403][ T6594] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.432329][ T6589] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.665398][ T6589] bridge_slave_1: left allmulticast mode [ 259.689391][ T6589] bridge_slave_1: left promiscuous mode [ 259.696201][ T6589] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.738678][ T6589] bridge_slave_0: left allmulticast mode [ 259.744479][ T6589] bridge_slave_0: left promiscuous mode [ 259.756889][ T6589] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.956202][T10303] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 260.434373][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 260.448986][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 260.461412][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 260.471663][ T6589] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.480588][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 260.490118][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 260.501607][ T6589] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.520081][ T6589] bond0 (unregistering): Released all slaves [ 261.142239][ T6589] hsr_slave_0: left promiscuous mode [ 261.196708][ T6589] hsr_slave_1: left promiscuous mode [ 261.202875][ T6589] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.256775][ T6589] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.277613][ T6589] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.298684][ T6589] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.332183][T10339] __nla_validate_parse: 5 callbacks suppressed [ 261.332205][T10339] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1060'. [ 261.372285][T10339] netlink: zone id is out of range [ 261.382400][T10339] netlink: get zone limit has 8 unknown bytes [ 261.409846][ T6589] veth1_macvtap: left promiscuous mode [ 261.426700][ T6589] veth0_macvtap: left promiscuous mode [ 261.432407][ T6589] veth1_vlan: left promiscuous mode [ 261.461846][ T6589] veth0_vlan: left promiscuous mode [ 261.619510][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 261.631918][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 261.640275][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 261.652060][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 261.661121][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 262.103146][T10353] netlink: 'syz.2.1062': attribute type 10 has an invalid length. [ 262.280895][ T6589] team0 (unregistering): Port device team_slave_1 removed [ 262.322747][ T6589] team0 (unregistering): Port device team_slave_0 removed [ 262.539600][ T5850] Bluetooth: hci0: command tx timeout [ 262.684411][T10309] chnl_net:caif_netlink_parms(): no params data found [ 262.972815][T10364] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 263.190786][T10376] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 263.225259][T10309] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.239718][T10309] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.250906][T10309] bridge_slave_0: entered allmulticast mode [ 263.262519][T10309] bridge_slave_0: entered promiscuous mode [ 263.289573][T10309] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.300647][T10309] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.309112][T10309] bridge_slave_1: entered allmulticast mode [ 263.321229][T10309] bridge_slave_1: entered promiscuous mode [ 263.432422][T10309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.455648][T10309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.554720][T10309] team0: Port device team_slave_0 added [ 263.585315][T10309] team0: Port device team_slave_1 added [ 263.718869][ T6589] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.729699][ T5850] Bluetooth: hci4: command tx timeout [ 263.752281][T10309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.778938][T10309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.783062][T10392] SET target dimension over the limit! [ 263.840472][T10309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.853323][T10309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.865123][T10309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.909821][T10309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.073349][ T6589] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.393731][T10417] x_tables: duplicate underflow at hook 2 [ 264.437731][ T6589] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.470695][T10309] hsr_slave_0: entered promiscuous mode [ 264.477453][T10309] hsr_slave_1: entered promiscuous mode [ 264.484374][T10309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.492305][T10309] Cannot create hsr debugfs directory [ 264.502671][T10423] tipc: Started in network mode [ 264.516039][T10423] tipc: Node identity @, cluster identity 4711 [ 264.523859][T10423] tipc: Enabling of bearer rejected, failed to enable media [ 264.548808][T10346] chnl_net:caif_netlink_parms(): no params data found [ 264.608384][ T5850] Bluetooth: hci0: command tx timeout [ 264.625416][T10426] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 264.664543][T10431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1076'. [ 264.679050][ T6589] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.743345][T10434] x_tables: ip6_tables: nfacct.0 match: invalid size 40 (kernel) != (user) 144 [ 265.000608][T10443] netlink: 'syz.3.1080': attribute type 1 has an invalid length. [ 265.011613][T10443] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1080'. [ 265.089325][T10446] netlink: 211872 bytes leftover after parsing attributes in process `syz.3.1080'. [ 265.119926][T10446] netlink: zone id is out of range [ 265.138313][T10446] netlink: zone id is out of range [ 265.149299][T10446] netlink: zone id is out of range [ 265.160168][T10446] netlink: zone id is out of range [ 265.178743][T10446] netlink: zone id is out of range [ 265.183995][T10446] netlink: zone id is out of range [ 265.192120][T10446] netlink: zone id is out of range [ 265.304816][T10451] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 265.413841][T10346] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.427186][T10346] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.436173][T10346] bridge_slave_0: entered allmulticast mode [ 265.444826][T10346] bridge_slave_0: entered promiscuous mode [ 265.506058][T10346] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.514081][T10346] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.525702][T10346] bridge_slave_1: entered allmulticast mode [ 265.533857][T10346] bridge_slave_1: entered promiscuous mode [ 265.715190][T10346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.793737][ T6589] bridge_slave_1: left allmulticast mode [ 265.802113][ T6589] bridge_slave_1: left promiscuous mode [ 265.808166][ T5850] Bluetooth: hci4: command tx timeout [ 265.819784][T10469] syz.3.1084: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 265.839094][ T6589] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.847927][T10469] CPU: 0 UID: 0 PID: 10469 Comm: syz.3.1084 Not tainted 6.15.0-rc7-syzkaller-00088-gd8d85ef0a631 #0 PREEMPT(full) [ 265.847961][T10469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 265.847988][T10469] Call Trace: [ 265.847998][T10469] [ 265.848009][T10469] dump_stack_lvl+0x189/0x250 [ 265.848050][T10469] ? __pfx_dump_stack_lvl+0x10/0x10 [ 265.848081][T10469] ? __pfx__printk+0x10/0x10 [ 265.848103][T10469] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 265.848126][T10469] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 265.848152][T10469] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 265.848178][T10469] warn_alloc+0x214/0x310 [ 265.848209][T10469] ? __pfx___schedule+0x10/0x10 [ 265.848237][T10469] ? __pfx_warn_alloc+0x10/0x10 [ 265.848267][T10469] ? kasan_save_track+0x4f/0x80 [ 265.848291][T10469] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 265.848316][T10469] ? xskq_create+0x56/0x170 [ 265.848343][T10469] ? __x64_sys_setsockopt+0x18b/0x220 [ 265.848371][T10469] ? do_syscall_64+0xf6/0x210 [ 265.848396][T10469] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.848430][T10469] __vmalloc_node_range_noprof+0x125/0x12c0 [ 265.848494][T10469] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 265.848528][T10469] ? __kasan_kmalloc+0x93/0xb0 [ 265.848560][T10469] vmalloc_user_noprof+0x74/0x80 [ 265.848591][T10469] ? xskq_create+0xbf/0x170 [ 265.848613][T10469] xskq_create+0xbf/0x170 [ 265.848642][T10469] xsk_init_queue+0xb0/0x110 [ 265.848669][T10469] xsk_setsockopt+0x43f/0x710 [ 265.848696][T10469] ? __pfx_xsk_setsockopt+0x10/0x10 [ 265.848733][T10469] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 265.848757][T10469] ? __pfx_xsk_setsockopt+0x10/0x10 [ 265.848790][T10469] do_sock_setsockopt+0x25a/0x3e0 [ 265.848823][T10469] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 265.848849][T10469] ? __fget_files+0x2a/0x420 [ 265.848883][T10469] ? __fget_files+0x3a0/0x420 [ 265.848910][T10469] ? __fget_files+0x2a/0x420 [ 265.848947][T10469] __x64_sys_setsockopt+0x18b/0x220 [ 265.848983][T10469] do_syscall_64+0xf6/0x210 [ 265.849011][T10469] ? clear_bhb_loop+0x60/0xb0 [ 265.849035][T10469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.849056][T10469] RIP: 0033:0x7fa0d7f8e969 [ 265.849075][T10469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.849093][T10469] RSP: 002b:00007fa0d8ebf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 265.849116][T10469] RAX: ffffffffffffffda RBX: 00007fa0d81b5fa0 RCX: 00007fa0d7f8e969 [ 265.849132][T10469] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 265.849145][T10469] RBP: 00007fa0d8010ab1 R08: 0000000000000004 R09: 0000000000000000 [ 265.849157][T10469] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 265.849171][T10469] R13: 0000000000000000 R14: 00007fa0d81b5fa0 R15: 00007fff5e163fd8 [ 265.849205][T10469] [ 265.849213][T10469] Mem-Info: [ 266.144300][T10469] active_anon:5930 inactive_anon:0 isolated_anon:0 [ 266.144300][T10469] active_file:1567 inactive_file:39920 isolated_file:0 [ 266.144300][T10469] unevictable:768 dirty:74 writeback:0 [ 266.144300][T10469] slab_reclaimable:10921 slab_unreclaimable:115245 [ 266.144300][T10469] mapped:29544 shmem:1406 pagetables:970 [ 266.144300][T10469] sec_pagetables:0 bounce:0 [ 266.144300][T10469] kernel_misc_reclaimable:0 [ 266.144300][T10469] free:1325660 free_pcp:637 free_cma:0 [ 266.192164][ T6589] bridge_slave_0: left allmulticast mode [ 266.206612][T10469] Node 0 active_anon:23720kB inactive_anon:0kB active_file:6268kB inactive_file:159476kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118176kB dirty:292kB writeback:0kB shmem:4088kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11640kB pagetables:3880kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 266.250590][ T6589] bridge_slave_0: left promiscuous mode [ 266.281087][ T6589] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.294561][T10469] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 266.329653][T10469] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 266.385779][T10469] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 266.410649][T10469] Node 0 DMA32 free:1380924kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:23712kB inactive_anon:0kB active_file:6268kB inactive_file:159384kB unevictable:1536kB writepending:288kB present:3129332kB managed:2564116kB mlocked:0kB bounce:0kB free_pcp:1400kB local_pcp:372kB free_cma:0kB [ 266.441391][T10469] lowmem_reserve[]: 0 0 0 0 0 [ 266.446305][T10469] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:4kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 266.501514][T10469] lowmem_reserve[]: 0 0 0 0 0 [ 266.509588][T10469] Node 1 Normal free:3908272kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:32kB free_cma:0kB [ 266.564763][T10469] lowmem_reserve[]: 0 0 0 0 0 [ 266.573312][T10469] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 266.586440][T10469] Node 0 DMA32: 52*4kB (UM) 24*8kB (ME) 46*16kB (UME) 84*32kB (UME) 46*64kB (UME) 38*128kB (UME) 33*256kB (UME) 6*512kB (UME) 2*1024kB (ME) 8*2048kB (UME) 327*4096kB (UM) = 1380976kB [ 266.609488][T10469] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 266.633772][T10469] Node 1 Normal: 216*4kB (UME) 68*8kB (UME) 33*16kB (UME) 205*32kB (UME) 94*64kB (UME) 28*128kB (UME) 12*256kB (UME) 8*512kB (UME) 2*1024kB (ME) 3*2048kB (UE) 946*4096kB (M) = 3908272kB [ 266.655351][T10469] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 266.667101][T10469] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 266.680043][T10469] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 266.690563][T10469] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 266.700137][T10469] 42889 total pagecache pages [ 266.704856][T10469] 0 pages in swap cache [ 266.709140][T10469] Free swap = 124996kB [ 266.709291][ T5850] Bluetooth: hci0: command tx timeout [ 266.713303][T10469] Total swap = 124996kB [ 266.729018][T10469] 2097051 pages RAM [ 266.733025][T10469] 0 pages HighMem/MovableOnly [ 266.739540][T10469] 424364 pages reserved [ 266.744019][T10469] 0 pages cma reserved [ 266.820354][T10488] netlink: 'syz.3.1087': attribute type 18 has an invalid length. [ 266.916119][ T6589] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.928352][ T6589] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.938916][ T6589] bond0 (unregistering): Released all slaves [ 266.961502][T10346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.153957][T10492] x_tables: ip6_tables: nfacct.0 match: invalid size 40 (kernel) != (user) 144 [ 267.195207][T10498] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1090'. [ 267.396669][T10346] team0: Port device team_slave_0 added [ 267.404568][T10502] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 267.436188][T10502] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 267.518146][T10346] team0: Port device team_slave_1 added [ 267.808078][T10508] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1092'. [ 267.887560][ T5850] Bluetooth: hci4: command tx timeout [ 267.914555][T10346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.941731][T10346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.036317][T10346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.061378][T10524] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 268.079357][T10346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.097323][T10346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.144476][T10346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.223487][ T6589] hsr_slave_0: left promiscuous mode [ 268.242752][ T6589] hsr_slave_1: left promiscuous mode [ 268.261047][ T6589] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.268761][ T6589] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.283860][ T6589] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.292409][ T6589] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.329991][ T6589] veth1_macvtap: left promiscuous mode [ 268.335690][ T6589] veth0_macvtap: left promiscuous mode [ 268.348880][ T6589] veth1_vlan: left promiscuous mode [ 268.354443][ T6589] veth0_vlan: left promiscuous mode [ 268.461136][T10537] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1099'. [ 268.605104][T10541] x_tables: ip6_tables: nfacct.0 match: invalid size 40 (kernel) != (user) 144 [ 268.778852][ T5850] Bluetooth: hci0: command tx timeout [ 268.981278][ T6589] team0 (unregistering): Port device team_slave_1 removed [ 269.048591][ T6589] team0 (unregistering): Port device team_slave_0 removed [ 269.112988][T10550] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 269.532871][T10553] C: renamed from team_slave_0 (while UP) [ 269.553273][T10553] netlink: 'syz.2.1105': attribute type 1 has an invalid length. [ 269.562629][T10553] net_ratelimit: 7 callbacks suppressed [ 269.562648][T10553] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 269.619374][T10346] hsr_slave_0: entered promiscuous mode [ 269.625918][T10346] hsr_slave_1: entered promiscuous mode [ 269.634224][T10346] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 269.644314][T10346] Cannot create hsr debugfs directory [ 269.972975][ T5850] Bluetooth: hci4: command tx timeout [ 270.298054][T10580] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 270.547855][T10309] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 270.633047][T10309] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 270.680516][T10309] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 270.748417][T10309] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 271.308289][T10608] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 271.391495][T10309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.419865][T10346] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 271.453032][T10346] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 271.520941][T10346] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 271.601584][T10346] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 271.690991][T10309] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.777363][ T6594] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.784666][ T6594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.831539][ T6604] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.838799][ T6604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.880005][T10629] netlink: 'syz.2.1126': attribute type 11 has an invalid length. [ 271.888821][T10629] netlink: 'syz.2.1126': attribute type 11 has an invalid length. [ 271.917975][T10629] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1126'. [ 272.034201][T10309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 272.120643][T10639] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.1129'. [ 272.232532][T10346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.314688][T10346] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.350881][ T6594] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.358166][ T6594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.374654][T10649] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1132'. [ 272.422424][ T6589] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.429712][ T6589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.602428][T10346] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 272.712163][T10661] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1133'. [ 272.754130][T10661] gretap0: entered promiscuous mode [ 272.821489][T10309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.865453][T10661] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1133'. [ 272.887836][T10661] 0ªî{X¹¦: renamed from gretap0 [ 272.898766][T10661] 0ªî{X¹¦: left promiscuous mode [ 272.911313][T10661] 0ªî{X¹¦: entered allmulticast mode [ 272.947489][T10665] netlink: 'syz.2.1133': attribute type 10 has an invalid length. [ 272.970835][T10661] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 273.213384][T10309] veth0_vlan: entered promiscuous mode [ 273.294865][T10309] veth1_vlan: entered promiscuous mode [ 273.497331][T10309] veth0_macvtap: entered promiscuous mode [ 273.519797][T10309] veth1_macvtap: entered promiscuous mode [ 273.548838][T10346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.642835][T10309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.710397][T10309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.765162][T10309] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.796718][T10309] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.819214][T10309] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.837080][T10309] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.874382][T10699] tipc: Enabling of bearer rejected, failed to enable media [ 274.121322][T10713] netlink: 'syz.2.1143': attribute type 2 has an invalid length. [ 274.145786][T10713] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1143'. [ 274.332422][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.364313][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.505014][ T6597] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.525694][ T6597] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.776614][T10738] netlink: 'syz.2.1148': attribute type 1 has an invalid length. [ 274.784467][T10738] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1148'. [ 274.993414][T10346] veth0_vlan: entered promiscuous mode [ 275.038080][T10346] veth1_vlan: entered promiscuous mode [ 275.760678][ T6589] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.865484][ T6589] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.903093][T10346] veth0_macvtap: entered promiscuous mode [ 275.924473][T10346] veth1_macvtap: entered promiscuous mode [ 275.971460][T10346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.015222][T10346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.030771][T10346] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.041631][T10346] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.056779][T10346] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.071384][T10346] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.224220][ T6591] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.244176][ T6591] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.342260][ T6589] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.457491][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.485747][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.635728][ T6589] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.135200][ T6589] bridge_slave_1: left allmulticast mode [ 277.165149][ T6589] bridge_slave_1: left promiscuous mode [ 277.174439][ T6589] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.291281][ T6589] bridge_slave_0: left allmulticast mode [ 277.324196][ T6589] bridge_slave_0: left promiscuous mode [ 277.346990][ T6589] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.372274][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 277.381413][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 277.392525][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 277.400786][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 277.410136][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 277.985547][ T6589] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.998282][ T6589] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.012468][ T6589] bond0 (unregistering): Released all slaves [ 278.313761][T10839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1162'. [ 278.328269][T10839] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1162'. [ 278.806565][ T6589] hsr_slave_0: left promiscuous mode [ 278.822084][ T6589] hsr_slave_1: left promiscuous mode [ 278.839581][ T6589] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.854925][ T6589] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.863579][ T6589] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.871114][ T6589] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.905188][ T6589] veth1_macvtap: left promiscuous mode [ 278.913031][ T6589] veth0_macvtap: left promiscuous mode [ 278.922319][ T6589] veth1_vlan: left promiscuous mode [ 278.932335][ T6589] veth0_vlan: left promiscuous mode [ 279.488392][ T5850] Bluetooth: hci0: command tx timeout [ 279.611441][ T6589] team0 (unregistering): Port device team_slave_1 removed [ 279.675734][ T6589] team0 (unregistering): Port device team_slave_0 removed [ 280.023380][T10882] IPVS: persistence engine module ip_vs_pe_À not found [ 280.445716][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 280.462738][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 280.475831][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 280.494607][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 280.502565][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 281.217586][T10817] chnl_net:caif_netlink_parms(): no params data found [ 281.313734][T10918] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1177'. [ 281.323021][T10918] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1177'. [ 281.468176][T10927] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1178'. [ 281.567281][ T5850] Bluetooth: hci0: command tx timeout [ 281.778893][T10947] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1182'. [ 281.790062][T10945] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1180'. [ 281.822192][T10817] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.831991][T10817] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.844334][T10817] bridge_slave_0: entered allmulticast mode [ 281.851498][T10948] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1180'. [ 281.854689][T10817] bridge_slave_0: entered promiscuous mode [ 281.872380][T10947] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1182'. [ 281.899325][T10947] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1182'. [ 282.073131][T10817] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.087120][T10817] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.094488][T10817] bridge_slave_1: entered allmulticast mode [ 282.103683][T10817] bridge_slave_1: entered promiscuous mode [ 282.213399][T10951] 8021q: adding VLAN 0 to HW filter on device bond2 [ 282.222867][T10951] bond0: (slave bond2): Enslaving as an active interface with a down link [ 282.258190][T10817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.324987][T10817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.483615][T10817] team0: Port device team_slave_0 added [ 282.503008][T10898] chnl_net:caif_netlink_parms(): no params data found [ 282.528335][ T5850] Bluetooth: hci4: command tx timeout [ 282.548001][ T6589] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.575210][T10817] team0: Port device team_slave_1 added [ 282.679152][ T6589] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.751088][T10977] wg2: entered promiscuous mode [ 282.773871][T10977] wg2: entered allmulticast mode [ 282.784622][T10817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.792972][T10817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.826189][T10817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.878162][ T6589] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.926175][T10817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.933863][T10817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.962595][T10817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.056022][ T6589] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.333398][T10898] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.347626][T10898] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.358058][T10898] bridge_slave_0: entered allmulticast mode [ 283.379342][T10898] bridge_slave_0: entered promiscuous mode [ 283.399028][T10817] hsr_slave_0: entered promiscuous mode [ 283.405867][T10817] hsr_slave_1: entered promiscuous mode [ 283.434231][T10817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 283.445418][T11006] __nla_validate_parse: 3 callbacks suppressed [ 283.445437][T11006] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1192'. [ 283.447433][T10817] Cannot create hsr debugfs directory [ 283.470059][T10898] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.478735][T10898] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.507659][T10898] bridge_slave_1: entered allmulticast mode [ 283.519033][T10898] bridge_slave_1: entered promiscuous mode [ 283.541983][T11006] 0ªî{X¹¦: entered promiscuous mode [ 283.555605][T11006] 0ªî{X¹¦: left allmulticast mode [ 283.649772][ T5850] Bluetooth: hci0: command tx timeout [ 283.735426][T11003] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1192'. [ 283.849076][T11006] netlink: 'syz.3.1192': attribute type 10 has an invalid length. [ 283.934183][T11003] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 283.963582][T11003] 1ªî{X¹¦: left promiscuous mode [ 283.990632][T11003] 1ªî{X¹¦: entered allmulticast mode [ 284.005992][T11003] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 284.032673][T10898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.057467][T10898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.603764][T11055] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1194'. [ 284.616580][ T5850] Bluetooth: hci4: command tx timeout [ 284.799050][T11053] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1194'. [ 284.811014][T11055] 1ªî{X¹¦: entered promiscuous mode [ 284.859962][T11066] netlink: 'syz.1.1194': attribute type 10 has an invalid length. [ 284.895523][T10898] team0: Port device team_slave_0 added [ 284.905840][T10898] team0: Port device team_slave_1 added [ 284.953591][T11053] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 284.964978][T11053] 0ªî{X¹¦: left promiscuous mode [ 285.009865][T11053] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 285.039984][T11066] team0: Port device bond0 removed [ 285.132860][ T6589] bridge_slave_1: left allmulticast mode [ 285.140434][ T6589] bridge_slave_1: left promiscuous mode [ 285.146318][ T6589] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.161533][ T6589] bridge_slave_0: left allmulticast mode [ 285.170413][ T6589] bridge_slave_0: left promiscuous mode [ 285.176181][ T6589] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.500567][ T6589] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.511913][ T6589] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.522131][ T6589] bond0 (unregistering): Released all slaves [ 285.576689][T10898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.583671][T10898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.612710][T10898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.658811][T10898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.668508][T10898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.695255][T10898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.726800][ T5850] Bluetooth: hci0: command tx timeout [ 286.156125][T10898] hsr_slave_0: entered promiscuous mode [ 286.162978][T10898] hsr_slave_1: entered promiscuous mode [ 286.171994][T10898] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 286.179921][T10898] Cannot create hsr debugfs directory [ 286.222421][ T6589] hsr_slave_0: left promiscuous mode [ 286.230984][ T6589] hsr_slave_1: left promiscuous mode [ 286.239261][ T6589] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.259430][ T6589] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.270219][ T6589] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.287182][ T6589] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.353230][ T6589] veth1_macvtap: left promiscuous mode [ 286.359642][ T6589] veth0_macvtap: left promiscuous mode [ 286.365633][ T6589] veth1_vlan: left promiscuous mode [ 286.373160][ T6589] veth0_vlan: left promiscuous mode [ 286.561503][T11099] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1207'. [ 286.686719][ T5850] Bluetooth: hci4: command tx timeout [ 286.882492][ T6589] team0 (unregistering): Port device team_slave_1 removed [ 286.918379][ T6589] team0 (unregistering): Port device team_slave_0 removed [ 287.787672][T11114] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1211'. [ 287.796941][T11114] openvswitch: netlink: Flow actions attr not present in new flow. [ 288.063835][T11122] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1215'. [ 288.081848][T10817] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 288.171892][T10817] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 288.232471][T10817] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 288.307474][T11134] x_tables: ip6_tables: nfacct.0 match: invalid size 40 (kernel) != (user) 144 [ 288.315207][T11136] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1217'. [ 288.339019][T11138] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1219'. [ 288.349683][T11128] IPVS: Unknown mcast interface: vcan0 [ 288.357972][T10817] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 288.388787][T11138] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1219'. [ 288.573300][T11143] __nla_validate_parse: 1 callbacks suppressed [ 288.573318][T11143] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1220'. [ 288.674478][T10817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.740787][T10817] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.772956][ T5850] Bluetooth: hci4: command tx timeout [ 288.820014][ T6594] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.827254][ T6594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.888389][ T6594] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.895598][ T6594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.990703][T11159] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1225'. [ 289.034243][T11164] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1224'. [ 289.254122][T10898] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 289.335480][T10898] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 289.431931][T10898] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 289.437489][T11178] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1228'. [ 289.482030][T10898] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 289.703764][T11186] xfrm0: entered promiscuous mode [ 289.732710][T11186] xfrm0: entered allmulticast mode [ 289.879798][T11193] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1232'. [ 289.931803][T11193] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1232'. [ 289.957884][T11193] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1232'. [ 290.087290][T10898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.171903][T10898] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.241102][ T152] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.248350][ T152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.265905][T11204] netlink: 'syz.2.1235': attribute type 2 has an invalid length. [ 290.280690][T10817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.298694][ T152] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.305884][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.451964][T11207] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1236'. [ 290.476758][T11209] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1237'. [ 290.504618][T11209] trusted_key: syz.2.1237 sent an empty control message without MSG_MORE. [ 290.514556][T11211] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1236'. [ 290.551128][T11207] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.583999][T10817] veth0_vlan: entered promiscuous mode [ 290.659312][T10817] veth1_vlan: entered promiscuous mode [ 290.775153][T10817] veth0_macvtap: entered promiscuous mode [ 290.813587][T10817] veth1_macvtap: entered promiscuous mode [ 290.939406][T11221] vlan2: entered promiscuous mode [ 290.953864][T11221] bridge0: entered promiscuous mode [ 290.974631][T11221] vlan2: entered allmulticast mode [ 290.991780][T11221] bridge0: entered allmulticast mode [ 291.028167][T10817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.073939][T10817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.134057][T10817] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.156366][T10817] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.165731][T10817] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.182539][T10817] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.202739][T11236] netlink: 'syz.3.1242': attribute type 10 has an invalid length. [ 291.232236][T11236] batman_adv: batadv0: Adding interface: wlan0 [ 291.243699][T11236] batman_adv: batadv0: Interface activated: wlan0 [ 291.355479][T10898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.576539][ T6612] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.618509][ T6612] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.753520][ T6602] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.787074][ T6602] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.797219][T11252] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 292.120599][T11239] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 292.446356][ T6612] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.595393][ T6612] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.645564][T10898] veth0_vlan: entered promiscuous mode [ 292.742216][ T6612] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.808722][T10898] veth1_vlan: entered promiscuous mode [ 292.868592][ T6612] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.919766][T10898] veth0_macvtap: entered promiscuous mode [ 292.941606][T10898] veth1_macvtap: entered promiscuous mode [ 292.971960][T10898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.014096][T10898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.039725][T10898] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.049949][T10898] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.063149][T10898] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.072741][T10898] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.222293][ T6612] bridge_slave_1: left allmulticast mode [ 293.231800][ T6612] bridge_slave_1: left promiscuous mode [ 293.240052][ T6612] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.255967][ T6612] bridge_slave_0: left allmulticast mode [ 293.265000][ T6612] bridge_slave_0: left promiscuous mode [ 293.270814][ T6612] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.559524][ T6612] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.571058][ T6612] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.582550][ T6612] bond0 (unregistering): Released all slaves [ 293.734029][ T152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.786916][ T152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.134457][ T6580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.175360][ T6580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.500413][ T6612] hsr_slave_0: left promiscuous mode [ 294.576572][ T6612] hsr_slave_1: left promiscuous mode [ 294.582749][ T6612] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.636820][T11326] __nla_validate_parse: 2 callbacks suppressed [ 294.636850][T11326] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1254'. [ 294.659720][ T6612] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.724689][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 294.738173][ T6612] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.745634][ T6612] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.759363][T11331] sctp: [Deprecated]: syz.3.1254 (pid 11331) Use of int in max_burst socket option deprecated. [ 294.759363][T11331] Use struct sctp_assoc_value instead [ 294.763361][T11326] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1254'. [ 294.776204][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 294.813084][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 294.831775][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 294.841038][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 294.915993][ T6612] veth1_macvtap: left promiscuous mode [ 294.935250][ T6612] veth0_macvtap: left promiscuous mode [ 294.944884][T11326] sctp: [Deprecated]: syz.3.1254 (pid 11326) Use of int in max_burst socket option. [ 294.944884][T11326] Use struct sctp_assoc_value instead [ 294.963982][ T6612] veth1_vlan: left promiscuous mode [ 294.969461][ T6612] veth0_vlan: left promiscuous mode [ 295.592662][ T6612] team0 (unregistering): Port device team_slave_1 removed [ 295.653419][ T6612] team0 (unregistering): Port device team_slave_0 removed [ 296.467201][T11372] netlink: 'syz.3.1257': attribute type 11 has an invalid length. [ 296.482080][T11372] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1257'. [ 296.840620][T11388] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1260'. [ 296.926946][ T5850] Bluetooth: hci0: command tx timeout [ 297.143865][T11333] chnl_net:caif_netlink_parms(): no params data found [ 297.600452][ T6612] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.629836][T11333] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.641483][T11333] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.652367][T11333] bridge_slave_0: entered allmulticast mode [ 297.662130][T11333] bridge_slave_0: entered promiscuous mode [ 297.674065][T11333] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.690969][T11333] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.699197][T11333] bridge_slave_1: entered allmulticast mode [ 297.710547][T11333] bridge_slave_1: entered promiscuous mode [ 297.741786][ T6612] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.830084][ T6612] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.859333][T11333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.875164][T11333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.933666][ T6612] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.986089][T11333] team0: Port device team_slave_0 added [ 298.004125][T11333] team0: Port device team_slave_1 added [ 298.076370][T11333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.085634][T11333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.118339][T11333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.142660][T11333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.152762][T11333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.185062][T11333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.613085][T11333] hsr_slave_0: entered promiscuous mode [ 298.623208][T11432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1267'. [ 298.645135][T11431] netlink: 'syz.1.1267': attribute type 33 has an invalid length. [ 298.660148][T11333] hsr_slave_1: entered promiscuous mode [ 298.667074][T11431] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1267'. [ 298.678223][T11333] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 298.685899][T11333] Cannot create hsr debugfs directory [ 298.901082][ T6612] bridge_slave_1: left allmulticast mode [ 298.907793][ T6612] bridge_slave_1: left promiscuous mode [ 298.913770][ T6612] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.963165][ T6612] bridge_slave_0: left allmulticast mode [ 298.969945][ T6612] bridge_slave_0: left promiscuous mode [ 298.975769][ T6612] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.011654][ T5850] Bluetooth: hci0: command tx timeout [ 299.071374][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 299.081305][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 299.100301][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 299.110383][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 299.120696][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 299.427174][ T6612] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.439758][ T6612] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.449975][ T6612] bond0 (unregistering): Released all slaves [ 299.622979][T11453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1270'. [ 300.003477][T11467] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1275'. [ 300.124664][T11467] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1275'. [ 300.148944][T11467] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1275'. [ 300.295778][T11481] x_tables: ip6_tables: nfacct.0 match: invalid size 40 (kernel) != (user) 144 [ 300.359697][T11483] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 300.392574][ T6612] hsr_slave_0: left promiscuous mode [ 300.409846][ T6612] hsr_slave_1: left promiscuous mode [ 300.421535][ T6612] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.432728][ T6612] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.441549][ T6612] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.466296][ T6612] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.521282][ T6612] veth1_macvtap: left promiscuous mode [ 300.528176][ T6612] veth0_macvtap: left promiscuous mode [ 300.539770][ T6612] veth1_vlan: left promiscuous mode [ 300.549256][ T6612] veth0_vlan: left promiscuous mode [ 300.555131][T11492] netlink: 'syz.2.1282': attribute type 8 has an invalid length. [ 301.087597][ T5850] Bluetooth: hci0: command tx timeout [ 301.100511][T11500] x_tables: unsorted underflow at hook 1 [ 301.127213][ T6612] team0 (unregistering): Port device team_slave_1 removed [ 301.161252][ T6612] team0 (unregistering): Port device team_slave_0 removed [ 301.168715][ T5850] Bluetooth: hci4: command tx timeout [ 301.753796][T11509] netlink: 'syz.3.1285': attribute type 10 has an invalid length. [ 301.881628][T11509] veth0_macvtap: left promiscuous mode [ 301.991172][T11521] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1289'. [ 302.126720][T11525] x_tables: ip6_tables: nfacct.0 match: invalid size 40 (kernel) != (user) 144 [ 302.518853][T11544] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1296'. [ 302.644943][T11549] netlink: 'syz.2.1296': attribute type 2 has an invalid length. [ 302.664937][T11549] netlink: 1184 bytes leftover after parsing attributes in process `syz.2.1296'. [ 302.770403][T11444] chnl_net:caif_netlink_parms(): no params data found [ 303.078965][T11333] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 303.089200][T11444] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.097145][T11444] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.104454][T11444] bridge_slave_0: entered allmulticast mode [ 303.113047][T11444] bridge_slave_0: entered promiscuous mode [ 303.130541][T11333] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 303.144673][T11333] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 303.160774][T11444] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.168686][ T5850] Bluetooth: hci0: command tx timeout [ 303.180835][T11444] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.187470][T11565] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1301'. [ 303.189340][T11444] bridge_slave_1: entered allmulticast mode [ 303.204719][T11444] bridge_slave_1: entered promiscuous mode [ 303.229300][T11333] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 303.246853][ T5850] Bluetooth: hci4: command tx timeout [ 303.267073][T11444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.287340][T11444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.401697][T11444] team0: Port device team_slave_0 added [ 303.408046][T11569] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1302'. [ 303.427233][T11444] team0: Port device team_slave_1 added [ 303.556982][T11444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.564485][T11444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.599913][T11444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.629177][T11444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.636737][T11576] x_tables: ip6_tables: nfacct.0 match: invalid size 40 (kernel) != (user) 144 [ 303.639515][T11444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.702000][T11444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.820292][T11444] hsr_slave_0: entered promiscuous mode [ 303.820498][T11582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1307'. [ 303.827362][T11444] hsr_slave_1: entered promiscuous mode [ 303.845016][T11444] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 303.857172][T11444] Cannot create hsr debugfs directory [ 303.973359][T11586] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1309'. [ 304.210733][T11333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.223051][T11596] netlink: 'syz.1.1311': attribute type 2 has an invalid length. [ 304.288696][T11333] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.348385][ T6593] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.355672][ T6593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.425385][ T6612] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.432700][ T6612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.839063][T11615] netlink: 'syz.3.1316': attribute type 29 has an invalid length. [ 304.852429][T11615] netlink: 'syz.3.1316': attribute type 29 has an invalid length. [ 304.892364][T11615] netlink: 'syz.3.1316': attribute type 29 has an invalid length. [ 304.927290][T11444] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 304.964069][T11444] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 305.022499][T11444] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 305.073979][T11627] x_tables: ip6_tables: nfacct.0 match: invalid size 40 (kernel) != (user) 144 [ 305.079529][T11444] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 305.187702][T11632] __nla_validate_parse: 1 callbacks suppressed [ 305.187724][T11632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1319'. [ 305.304913][T11636] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1321'. [ 305.328104][ T5850] Bluetooth: hci4: command tx timeout [ 305.330560][T11333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.357080][T11636] netlink: 'syz.1.1321': attribute type 7 has an invalid length. [ 305.422446][T11636] netlink: 'syz.1.1321': attribute type 8 has an invalid length. [ 305.476879][T11636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1321'. [ 305.596163][T11444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.655607][T11333] veth0_vlan: entered promiscuous mode [ 305.716203][T11333] veth1_vlan: entered promiscuous mode [ 305.736278][T11655] netlink: 'syz.1.1325': attribute type 21 has an invalid length. [ 305.773823][T11657] netlink: 'syz.3.1326': attribute type 1 has an invalid length. [ 305.776490][T11444] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.794155][T11657] netlink: 'syz.3.1326': attribute type 2 has an invalid length. [ 305.806088][T11657] netlink: 'syz.3.1326': attribute type 2 has an invalid length. [ 305.844700][ T6593] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.851982][ T6593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.891874][ T6593] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.899121][ T6593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.016836][T11333] veth0_macvtap: entered promiscuous mode [ 306.060876][T11333] veth1_macvtap: entered promiscuous mode [ 306.245723][T11668] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1331'. [ 306.343441][T11333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.374469][T11671] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1330'. [ 306.494130][T11333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.541427][T11680] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1333'. [ 306.599015][T11333] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.636641][T11333] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.645412][T11333] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.680235][T11333] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.834975][T11444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.873337][T11691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1335'. [ 306.915155][T11691] Bluetooth: MGMT ver 1.23 [ 306.954870][T11694] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 306.956912][T11686] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 307.069697][ T6602] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.089257][ T6602] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.252291][ T6612] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.304166][ T6612] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.407627][ T5842] Bluetooth: hci4: command tx timeout [ 307.864699][T11444] veth0_vlan: entered promiscuous mode [ 307.888992][T11728] nftables ruleset with unbound set [ 307.940264][T11730] bond3: entered allmulticast mode [ 307.945986][T11730] 8021q: adding VLAN 0 to HW filter on device bond3 [ 307.985629][T11444] veth1_vlan: entered promiscuous mode [ 308.106342][T11737] netlink: 212404 bytes leftover after parsing attributes in process `syz.3.1349'. [ 308.132806][T11737] netlink: 212404 bytes leftover after parsing attributes in process `syz.3.1349'. [ 308.142730][T11444] veth0_macvtap: entered promiscuous mode [ 308.161321][T11444] veth1_macvtap: entered promiscuous mode [ 308.199224][T11444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.228552][T11444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.241586][T11742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1350'. [ 308.268424][T11444] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.283712][T11444] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.295448][T11444] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.305730][T11444] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.511533][ T6612] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.552857][ T6612] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.618419][ T6599] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.631669][ T6599] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.882299][T11765] x_tables: ip6_tables: nfacct.0 match: invalid size 40 (kernel) != (user) 144 [ 309.007811][ T5850] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 309.115433][ T152] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.266254][ T152] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.378333][ T152] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.465451][ T152] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.798865][ T152] bridge_slave_1: left allmulticast mode [ 309.804578][ T152] bridge_slave_1: left promiscuous mode [ 309.814936][ T152] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.825951][ T152] bridge_slave_0: left allmulticast mode [ 309.841570][ T152] bridge_slave_0: left promiscuous mode [ 309.849100][ T152] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.270047][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 310.280825][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 310.291752][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 310.302171][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 310.311091][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 310.529492][ T152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 310.541824][ T152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 310.552624][ T152] bond0 (unregistering): Released all slaves [ 310.928782][T11813] __nla_validate_parse: 1 callbacks suppressed [ 310.928803][T11813] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1366'. [ 310.979905][T11813] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1366'. [ 311.014910][T11813] validate_nla: 1 callbacks suppressed [ 311.014931][T11813] netlink: 'syz.2.1366': attribute type 6 has an invalid length. [ 311.093628][T11813] netlink: 'syz.2.1366': attribute type 5 has an invalid length. [ 311.156904][T11813] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1366'. [ 311.455070][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 311.464451][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 311.475485][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 311.485741][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 311.494538][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 311.584573][ T152] hsr_slave_0: left promiscuous mode [ 311.626591][ T152] hsr_slave_1: left promiscuous mode [ 311.641654][T11843] x_tables: ip6_tables: nfacct.0 match: invalid size 40 (kernel) != (user) 144 [ 311.651965][ T152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.678086][T11845] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 311.696577][ T152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.709209][ T152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.732192][ T152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.768049][T11851] openvswitch: netlink: Missing key (keys=40, expected=80) [ 311.774168][ T152] veth1_macvtap: left promiscuous mode [ 311.781030][ T152] veth0_macvtap: left promiscuous mode [ 311.790909][ T152] veth1_vlan: left promiscuous mode [ 311.796670][ T152] veth0_vlan: left promiscuous mode [ 311.813972][T11855] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1374'. [ 312.347546][ T152] team0 (unregistering): Port device team_slave_1 removed [ 312.369822][ T5850] Bluetooth: hci0: command tx timeout [ 312.400319][ T152] team0 (unregistering): Port device team_slave_0 removed [ 312.827896][T11789] chnl_net:caif_netlink_parms(): no params data found [ 313.272276][T11888] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1382'. [ 313.411626][T11789] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.422158][T11896] x_tables: ip6_tables: nfacct.0 match: invalid size 40 (kernel) != (user) 144 [ 313.455073][T11789] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.477263][T11789] bridge_slave_0: entered allmulticast mode [ 313.485081][T11789] bridge_slave_0: entered promiscuous mode [ 313.516330][T11789] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.543514][T11789] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.565444][T11789] bridge_slave_1: entered allmulticast mode [ 313.571580][ T5850] Bluetooth: hci4: command tx timeout [ 313.583285][T11902] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1385'. [ 313.604499][T11789] bridge_slave_1: entered promiscuous mode [ 313.771214][T11789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.784541][T11789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.801632][T11908] +: renamed from syzkaller0 [ 313.986268][T11789] team0: Port device team_slave_0 added [ 314.033866][T11789] team0: Port device team_slave_1 added [ 314.214360][T11789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.228227][T11789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.260813][T11789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.274693][T11789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.284059][T11789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.314212][T11789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.385352][ T6599] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.447744][ T5850] Bluetooth: hci0: command tx timeout [ 314.646227][T11944] x_tables: ip6_tables: nfacct.0 match: invalid size 40 (kernel) != (user) 144 [ 314.712018][ T6599] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.763069][T11789] hsr_slave_0: entered promiscuous mode [ 314.801912][T11789] hsr_slave_1: entered promiscuous mode [ 314.823486][T11789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 314.831897][T11789] Cannot create hsr debugfs directory [ 314.844330][T11833] chnl_net:caif_netlink_parms(): no params data found [ 314.935241][ T6599] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.135161][ T6599] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.225313][T11965] Bluetooth: MGMT ver 1.23 [ 315.236922][T11957] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 315.425099][T11979] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 315.571592][T11833] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.616787][T11833] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.646745][ T5842] Bluetooth: hci4: command tx timeout [ 315.646759][T11833] bridge_slave_0: entered allmulticast mode [ 315.648827][T11833] bridge_slave_0: entered promiscuous mode [ 315.709363][T11833] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.715227][T11990] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1405'. [ 315.742587][T11990] netlink: 'syz.1.1405': attribute type 11 has an invalid length. [ 315.744405][T11833] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.766732][T11990] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1405'. [ 315.792788][T11833] bridge_slave_1: entered allmulticast mode [ 315.810122][T11833] bridge_slave_1: entered promiscuous mode [ 315.950135][T11999] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1408'. [ 316.043147][T11833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.088779][T11833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.313963][T12004] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1409'. [ 316.394212][T11833] team0: Port device team_slave_0 added [ 316.431568][T11833] team0: Port device team_slave_1 added [ 316.534221][ T6599] bridge_slave_1: left allmulticast mode [ 316.552614][ T6599] bridge_slave_1: left promiscuous mode [ 316.574051][ T6599] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.601808][ T6599] bridge_slave_0: left allmulticast mode [ 316.647012][ T6599] bridge_slave_0: left promiscuous mode [ 316.652875][ T6599] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.188595][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.326625][ T5850] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 317.465922][ T6599] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.477464][ T6599] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 317.488502][ T6599] bond0 (unregistering): Released all slaves [ 317.630578][T11833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.655814][T11833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.711550][T11833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.725249][T11833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.737963][ T5850] Bluetooth: hci4: command tx timeout [ 317.774070][T11833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.800789][T11833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.496312][T11833] hsr_slave_0: entered promiscuous mode [ 318.515544][T11833] hsr_slave_1: entered promiscuous mode [ 318.522596][T11833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 318.530512][T11833] Cannot create hsr debugfs directory [ 318.644171][ T6599] hsr_slave_0: left promiscuous mode [ 318.661535][ T6599] hsr_slave_1: left promiscuous mode [ 318.670879][ T6599] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.694913][ T6599] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.727094][ T6599] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.741016][ T6599] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.767498][ T6599] veth1_macvtap: left promiscuous mode [ 318.773199][ T6599] veth0_macvtap: left promiscuous mode [ 318.779006][ T6599] veth1_vlan: left promiscuous mode [ 318.784680][ T6599] veth0_vlan: left promiscuous mode [ 318.812000][T12101] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1435'. [ 318.863804][T12102] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1435'. [ 319.307481][ T6599] team0 (unregistering): Port device team_slave_1 removed [ 319.358125][ T6599] team0 (unregistering): Port device team_slave_0 removed [ 319.808761][ T5850] Bluetooth: hci4: command tx timeout [ 319.892881][T12097] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 319.919074][T12101] 0ªî{X¹¦: entered promiscuous mode [ 319.943937][T12101] 0ªî{X¹¦: left allmulticast mode [ 319.967142][T12102] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 319.975755][T12102] 1ªî{X¹¦: left promiscuous mode [ 319.988008][T12102] 1ªî{X¹¦: entered allmulticast mode [ 319.995899][T12102] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 320.354476][T12127] netem: change failed [ 320.421874][T12133] netlink: 'syz.2.1444': attribute type 6 has an invalid length. [ 320.443048][T12131] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1444'. [ 320.471417][T12129] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1444'. [ 320.813487][T11789] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 320.875520][T11789] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 320.911224][T12148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1448'. [ 321.005170][T11789] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 321.005256][T12148] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1448'. [ 321.095959][T11789] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 321.639677][T11789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.661408][T12174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1454'. [ 321.699696][T12174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1454'. [ 321.747576][T12181] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1454'. [ 321.791913][T12174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1454'. [ 321.801429][T12181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1454'. [ 321.841876][T11789] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.922195][ T6599] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.929441][ T6599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.959125][ T6599] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.966383][ T6599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.980714][T12190] x_tables: arp_tables: MARK.2 target: invalid size 8 (kernel) != (user) 0 [ 322.072849][T11833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 322.106648][T11833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 322.126378][T11833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 322.160519][T11833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 322.310006][T12203] sock: sock_set_timeout: `syz.3.1460' (pid 12203) tries to set negative timeout [ 322.348322][T12203] netlink: 'syz.3.1460': attribute type 1 has an invalid length. [ 322.356133][T12203] netlink: 'syz.3.1460': attribute type 10 has an invalid length. [ 322.417409][T12203] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1460'. [ 322.497365][T11833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.569869][T11833] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.610102][ T6580] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.617381][ T6580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.662930][ T6580] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.670210][ T6580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.973351][T11789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.560465][T11833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.762166][T11833] veth0_vlan: entered promiscuous mode [ 323.812931][T11833] veth1_vlan: entered promiscuous mode [ 323.990397][T11833] veth0_macvtap: entered promiscuous mode [ 324.035633][T11833] veth1_macvtap: entered promiscuous mode [ 324.145472][T12269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1475'. [ 324.183315][T11789] veth0_vlan: entered promiscuous mode [ 324.196854][T12269] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 324.247667][T11833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.298178][T11789] veth1_vlan: entered promiscuous mode [ 324.323486][T11833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.381599][T12279] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1477'. [ 324.413613][T12279] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.440959][T12279] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1477'. [ 324.443421][T12282] netlink: 'syz.3.1476': attribute type 10 has an invalid length. [ 324.465955][T12279] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.509776][T12285] mac80211_hwsim hwsim6 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 324.520541][T11833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.534252][T11833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.543983][T11833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.552785][T11833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.662596][T11789] veth0_macvtap: entered promiscuous mode [ 324.734606][T11789] veth1_macvtap: entered promiscuous mode [ 324.800698][T11789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.817780][ T6589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.825974][ T6589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.873015][T11789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.911493][T11789] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.924181][T11789] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.935669][T11789] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.946218][T11789] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.011422][ T6594] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.031146][ T6594] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.239082][ T6599] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.268286][ T6599] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.464370][ T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.482372][ T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.733440][T12319] netlink: 'syz.3.1487': attribute type 1 has an invalid length. [ 325.819394][T12321] netlink: 'syz.1.1486': attribute type 1 has an invalid length. [ 325.914461][ T6593] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.142497][T12318] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1485'. [ 326.174401][T12323] 8021q: adding VLAN 0 to HW filter on device bond1 [ 326.296058][ T6593] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.320653][T12330] syzkaller0: entered promiscuous mode [ 326.334296][T12330] syzkaller0: entered allmulticast mode [ 326.428780][ T6593] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.640338][ T6593] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.936981][ T6612] wlan0: Trigger new scan to find an IBSS to join [ 327.142004][ T6593] bridge_slave_1: left allmulticast mode [ 327.159633][ T6593] bridge_slave_1: left promiscuous mode [ 327.165502][ T6593] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.198942][ T6593] bridge_slave_0: left allmulticast mode [ 327.204658][ T6593] bridge_slave_0: left promiscuous mode [ 327.216822][ T6593] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.454059][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 327.469913][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 327.482205][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 327.492371][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 327.502073][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 327.814497][ T6593] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.830562][ T6593] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.843806][ T6593] bond0 (unregistering): Released all slaves [ 328.501818][ T6593] hsr_slave_0: left promiscuous mode [ 328.520164][ T6593] hsr_slave_1: left promiscuous mode [ 328.526280][ T6593] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.550231][ T6593] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.581336][ T6593] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.595625][ T6593] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.681435][ T6593] veth1_macvtap: left promiscuous mode [ 328.701303][ T6593] veth0_macvtap: left promiscuous mode [ 328.726709][ T6593] veth1_vlan: left promiscuous mode [ 328.735863][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 328.742431][ T6593] veth0_vlan: left promiscuous mode [ 328.749883][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 328.758692][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 328.771400][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 328.780998][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 329.102328][T12420] netlink: 'syz.2.1500': attribute type 2 has an invalid length. [ 329.245538][T12428] x_tables: duplicate underflow at hook 1 [ 329.443020][T12433] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1500'. [ 329.510865][ T6593] team0 (unregistering): Port device team_slave_1 removed [ 329.553316][ T6593] team0 (unregistering): Port device team_slave_0 removed [ 329.569649][ T5850] Bluetooth: hci0: command tx timeout [ 329.896849][ T6612] wlan0: Trigger new scan to find an IBSS to join [ 330.289145][T12444] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1505'. [ 330.406991][T12447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1506'. [ 330.450497][T12364] chnl_net:caif_netlink_parms(): no params data found [ 330.615428][T12457] netlink: 'syz.3.1507': attribute type 2 has an invalid length. [ 330.846683][ T5850] Bluetooth: hci4: command tx timeout [ 331.183600][T12487] x_tables: ip6_tables: nfacct.0 match: invalid size 40 (kernel) != (user) 144 [ 331.311369][T12364] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.341723][T12364] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.357452][T12364] bridge_slave_0: entered allmulticast mode [ 331.371936][T12364] bridge_slave_0: entered promiscuous mode [ 331.382477][T12407] chnl_net:caif_netlink_parms(): no params data found [ 331.463716][T12497] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1516'. [ 331.509085][ T6593] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.542458][T12364] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.550062][T12364] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.564005][T12364] bridge_slave_1: entered allmulticast mode [ 331.587454][T12364] bridge_slave_1: entered promiscuous mode [ 331.646809][ T5850] Bluetooth: hci0: command tx timeout [ 331.673713][ T6593] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.806349][ T6593] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.829092][T12364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.842564][T12364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.873248][T12508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1518'. [ 332.075496][T12364] team0: Port device team_slave_0 added [ 332.124944][ T6593] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.220035][T12364] team0: Port device team_slave_1 added [ 332.269881][T12532] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1523'. [ 332.349221][T12407] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.370675][T12407] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.386703][T12407] bridge_slave_0: entered allmulticast mode [ 332.399710][T12407] bridge_slave_0: entered promiscuous mode [ 332.477686][T12538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1526'. [ 332.523748][T12364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.560708][T12364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.628106][T12364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.658585][T12407] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.685698][T12407] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.720664][T12407] bridge_slave_1: entered allmulticast mode [ 332.743415][T12407] bridge_slave_1: entered promiscuous mode [ 332.815854][T12364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.832393][T12364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.936807][ T5850] Bluetooth: hci4: command tx timeout [ 332.937522][ T6580] wlan0: Trigger new scan to find an IBSS to join [ 332.946521][T12364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.134763][T12551] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 333.209838][T12569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1530'. [ 333.432746][T12407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.449182][T12407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.558989][T12573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1532'. [ 333.587133][T12364] hsr_slave_0: entered promiscuous mode [ 333.594231][T12364] hsr_slave_1: entered promiscuous mode [ 333.607326][T12364] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 333.615105][T12364] Cannot create hsr debugfs directory [ 333.714069][T12577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1533'. [ 333.727164][ T5850] Bluetooth: hci0: command tx timeout [ 333.793301][T12407] team0: Port device team_slave_0 added [ 333.840463][T12407] team0: Port device team_slave_1 added [ 333.875749][T12588] netlink: 'syz.2.1536': attribute type 10 has an invalid length. [ 333.896329][T12588] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1536'. [ 333.911195][T12589] tls_set_device_offload: netdev not found [ 333.962474][ T6594] wlan0: Creating new IBSS network, BSSID ca:29:ce:f8:3b:d1 [ 334.116386][T12600] x_tables: ip6_tables: nfacct.0 match: invalid size 40 (kernel) != (user) 144 [ 334.150255][T12407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.166773][T12407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.227333][T12407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.252223][ T6593] bridge_slave_1: left allmulticast mode [ 334.267279][ T6593] bridge_slave_1: left promiscuous mode [ 334.273096][ T6593] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.302659][ T6593] bridge_slave_0: left allmulticast mode [ 334.309719][ T6593] bridge_slave_0: left promiscuous mode [ 334.315529][ T6593] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.710260][ T6593] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 334.724179][ T6593] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 334.735010][ T6593] bond0 (unregistering): Released all slaves [ 334.771689][T12407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.804442][T12407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.845402][T12407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.007674][ T5850] Bluetooth: hci4: command tx timeout [ 335.081697][T12627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1543'. [ 335.442882][T12407] hsr_slave_0: entered promiscuous mode [ 335.457451][T12647] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1548'. [ 335.458151][T12407] hsr_slave_1: entered promiscuous mode [ 335.488014][T12407] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 335.509858][T12407] Cannot create hsr debugfs directory [ 335.605778][T12654] netlink: 'syz.3.1550': attribute type 10 has an invalid length. [ 335.735386][ T6593] hsr_slave_0: left promiscuous mode [ 335.800959][ T6593] hsr_slave_1: left promiscuous mode [ 335.812396][ T5850] Bluetooth: hci0: command tx timeout [ 335.840035][ T6593] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.861478][ T6593] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.878038][ T6593] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.886280][ T6593] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.922127][ T6593] veth1_macvtap: left promiscuous mode [ 335.928059][ T6593] veth0_macvtap: left promiscuous mode [ 335.933830][ T6593] veth1_vlan: left promiscuous mode [ 335.939538][ T6593] veth0_vlan: left promiscuous mode [ 336.408694][ T6593] team0 (unregistering): Port device team_slave_1 removed [ 336.444348][ T6593] team0 (unregistering): Port device team_slave_0 removed [ 336.902333][T12665] geneve1: mtu less than device minimum [ 337.071525][T12671] __nla_validate_parse: 1 callbacks suppressed [ 337.071548][T12671] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1553'. [ 337.087446][ T5850] Bluetooth: hci4: command tx timeout [ 337.088073][T12672] raw_sendmsg: syz.2.1554 forgot to set AF_INET. Fix it! [ 337.122610][T12675] x_tables: ip6_tables: nfacct.0 match: invalid size 40 (kernel) != (user) 144 [ 337.399493][T12684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1557'. [ 337.663840][T12694] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1562'. [ 337.897622][T12698] syzkaller0: entered promiscuous mode [ 337.903158][T12698] syzkaller0: entered allmulticast mode [ 337.945304][T12709] x_tables: ip6_tables: nfacct.0 match: invalid size 40 (kernel) != (user) 144 [ 338.465474][T12407] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 338.530849][T12407] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 338.627952][T12407] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 338.690314][T12747] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1572'. [ 338.700717][T12407] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 338.716382][T12742] netlink: 'syz.1.1571': attribute type 26 has an invalid length. [ 338.931345][T12752] netlink: 'syz.1.1575': attribute type 3 has an invalid length. [ 338.943181][T12364] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 339.017178][T12364] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 339.033804][T12364] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 339.076675][T12364] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 339.102702][T12762] x_tables: ip6_tables: nfacct.0 match: invalid size 40 (kernel) != (user) 144 [ 339.303690][T12407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.411010][T12407] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.466079][ T6602] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.473334][ T6602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.578735][ T6593] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.585930][ T6593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.885295][T12798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1587'. [ 340.009667][T12364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.080505][T12806] netlink: 'syz.3.1589': attribute type 3 has an invalid length. [ 340.091955][T12364] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.109649][T12806] netlink: 'syz.3.1589': attribute type 1 has an invalid length. [ 340.133263][ T6602] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.140499][ T6602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.185667][ T6594] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.192918][ T6594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.336540][T12809] syzkaller1: entered promiscuous mode [ 340.342072][T12809] syzkaller1: entered allmulticast mode [ 340.405830][T12817] Cannot find del_set index 3 as target [ 340.665959][T12407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.811766][T12830] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1594'. [ 340.845181][T12830] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1594'. [ 341.050170][T12364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.241044][T12364] veth0_vlan: entered promiscuous mode [ 341.273652][T12853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1597'. [ 341.405545][T12859] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1600'. [ 341.509531][T12868] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1601'. [ 341.557480][T12870] Bluetooth: MGMT ver 1.23 [ 341.604073][T12859] veth0_to_hsr: invalid flags given to default FDB implementation [ 341.647841][T12364] veth1_vlan: entered promiscuous mode [ 341.784735][T12875] syzkaller0: refused to change device tx_queue_len [ 341.880158][T12364] veth0_macvtap: entered promiscuous mode [ 341.915490][T12364] veth1_macvtap: entered promiscuous mode [ 342.019724][T12407] veth0_vlan: entered promiscuous mode [ 342.093590][T12885] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 342.111489][T12883] netlink: 'syz.3.1603': attribute type 4 has an invalid length. [ 342.140178][T12407] veth1_vlan: entered promiscuous mode [ 342.151375][T12364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.279012][T12364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.330576][T12364] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.359812][T12364] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.387464][T12364] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.396518][T12364] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.453421][T12407] veth0_macvtap: entered promiscuous mode [ 342.473383][T12904] netlink: 'syz.2.1608': attribute type 10 has an invalid length. [ 342.510288][T12407] veth1_macvtap: entered promiscuous mode [ 342.593406][T12904] team0: Cannot enslave team device to itself [ 342.807344][T12407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.891797][T12407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.968888][T12407] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.980448][ T152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.996640][T12407] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.005420][T12407] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.016696][ T152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.032778][T12407] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.220824][ T6602] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.254566][ T6602] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.595026][ T6580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.634985][ T6580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.773404][ T6580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.795515][ T6580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.001228][T12965] __nla_validate_parse: 2 callbacks suppressed [ 344.001249][T12965] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1622'. [ 344.145560][ T5850] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 344.471484][ T6612] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.692022][ T6612] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.830726][ T6612] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.972254][ T6612] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.199818][ T6612] bridge_slave_1: left allmulticast mode [ 345.217070][ T6612] bridge_slave_1: left promiscuous mode [ 345.222955][ T6612] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.242608][ T6612] bridge_slave_0: left allmulticast mode [ 345.268731][ T6612] bridge_slave_0: left promiscuous mode [ 345.274580][ T6612] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.392983][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 345.425620][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 345.434455][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 345.443574][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 345.458120][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 345.878842][ T6612] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 345.895370][ T6612] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 345.910380][ T6612] bond0 (unregistering): Released all slaves [ 346.327263][T13024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1629'. [ 346.884223][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 346.893415][ T6612] hsr_slave_0: left promiscuous mode [ 346.906674][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 346.917587][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 346.923858][ T6612] hsr_slave_1: left promiscuous mode [ 346.950587][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 346.960121][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 346.967102][ T6612] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.967140][ T6612] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.983279][ T6612] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.035894][ T6612] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.098501][ T6612] veth1_macvtap: left promiscuous mode [ 347.104252][ T6612] veth0_macvtap: left promiscuous mode [ 347.118265][ T6612] veth1_vlan: left promiscuous mode [ 347.123685][ T6612] veth0_vlan: left promiscuous mode [ 347.224196][T13064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1637'. [ 347.427406][T13071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1637'. [ 347.492300][ T5850] Bluetooth: hci0: command tx timeout [ 347.651230][ T6612] team0 (unregistering): Port device team_slave_1 removed [ 347.697657][ T6612] team0 (unregistering): Port device team_slave_0 removed [ 348.075458][T12995] chnl_net:caif_netlink_parms(): no params data found [ 348.289343][T13075] mac80211_hwsim hwsim12 wlan1: entered allmulticast mode [ 348.325670][T13075] netlink: 71 bytes leftover after parsing attributes in process `syz.3.1639'. [ 348.489752][T13088] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1642'. [ 348.553135][T13072] mac80211_hwsim hwsim12 wlan1: left allmulticast mode [ 348.612239][T12995] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.630157][T12995] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.647253][T12995] bridge_slave_0: entered allmulticast mode [ 348.665333][T12995] bridge_slave_0: entered promiscuous mode [ 348.705105][T12995] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.722889][T12995] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.755065][T12995] bridge_slave_1: entered allmulticast mode [ 348.758185][T13096] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 348.780896][T12995] bridge_slave_1: entered promiscuous mode [ 348.826832][T13096] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 349.014476][T12995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.039392][T13110] netlink: 'syz.3.1648': attribute type 11 has an invalid length. [ 349.041075][T12995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.096580][ T5850] Bluetooth: hci4: command tx timeout [ 349.180333][T13111] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 349.338056][T12995] team0: Port device team_slave_0 added [ 349.363052][T13123] xt_CT: You must specify a L4 protocol and not use inversions on it [ 349.394954][T12995] team0: Port device team_slave_1 added [ 349.445999][T13123] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 349.485516][T13123] netlink: 'syz.3.1650': attribute type 1 has an invalid length. [ 349.567902][ T5850] Bluetooth: hci0: command tx timeout [ 349.663785][T13138] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1654'. [ 349.697108][ T6612] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.715957][T12995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.728845][T12995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.760412][T12995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.841408][ T6612] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.874750][T13142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1655'. [ 349.888321][T12995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.895359][T12995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.922317][T13142] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1655'. [ 349.931053][T12995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.003606][ T6612] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.079612][T13045] chnl_net:caif_netlink_parms(): no params data found [ 350.121347][ T6612] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.144437][T13150] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1657'. [ 350.146740][T12995] hsr_slave_0: entered promiscuous mode [ 350.160562][T12995] hsr_slave_1: entered promiscuous mode [ 350.167974][T12995] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 350.175669][T12995] Cannot create hsr debugfs directory [ 350.190553][T13150] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1657'. [ 350.294240][T13153] x_tables: ip6_tables: nfacct.0 match: invalid size 40 (kernel) != (user) 144 [ 350.440311][T13158] netlink: 'syz.1.1660': attribute type 11 has an invalid length. [ 350.466170][T13158] netlink: 'syz.1.1660': attribute type 4 has an invalid length. [ 350.479956][T13158] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1660'. [ 350.669673][T13045] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.686683][T13045] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.694983][T13045] bridge_slave_0: entered allmulticast mode [ 350.726604][T13045] bridge_slave_0: entered promiscuous mode [ 350.818207][T13179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 350.899923][T13045] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.971926][T13045] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.978939][T13185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 351.002512][T13045] bridge_slave_1: entered allmulticast mode [ 351.048822][T13045] bridge_slave_1: entered promiscuous mode [ 351.095561][T13170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 351.131900][T13170] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1663'. [ 351.167612][ T5850] Bluetooth: hci4: command tx timeout [ 351.252449][T13045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.312487][ T6612] bridge_slave_1: left allmulticast mode [ 351.318949][ T6612] bridge_slave_1: left promiscuous mode [ 351.324831][ T6612] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.351291][ T6612] bridge_slave_0: left allmulticast mode [ 351.383060][ T6612] bridge_slave_0: left promiscuous mode [ 351.402348][ T6612] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.642265][ T6632] udevd[6632]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 351.659516][ T5850] Bluetooth: hci0: command tx timeout [ 352.028712][ T6612] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.042132][ T6612] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.053214][ T6612] bond0 (unregistering): Released all slaves [ 352.074607][T13045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.163102][T13208] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 352.170475][T13208] IPv6: NLM_F_CREATE should be set when creating new route [ 352.352940][T13216] netlink: 'syz.3.1668': attribute type 1 has an invalid length. [ 352.426237][T13211] netlink: 'syz.2.1667': attribute type 1 has an invalid length. [ 352.460038][T13224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1668'. [ 352.577080][T13221] netlink: 'syz.3.1668': attribute type 5 has an invalid length. [ 352.595770][T13224] veth7: entered promiscuous mode [ 352.604874][T13221] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1668'. [ 352.810519][T13216] 8021q: adding VLAN 0 to HW filter on device bond3 [ 352.859046][T13045] team0: Port device team_slave_0 added [ 353.011556][T13221] vlan3: entered allmulticast mode [ 353.033882][T13221] bond3: entered allmulticast mode [ 353.075329][T13045] team0: Port device team_slave_1 added [ 353.246880][ T5850] Bluetooth: hci4: command tx timeout [ 353.410756][T13045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.434914][T13045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.464198][T13045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.525769][ T6612] hsr_slave_0: left promiscuous mode [ 353.533723][ T6612] hsr_slave_1: left promiscuous mode [ 353.541656][ T6612] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.553730][ T6612] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.571554][ T6612] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.580791][ T6612] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.632821][ T6612] veth1_macvtap: left promiscuous mode [ 353.639777][ T6612] veth0_macvtap: left promiscuous mode [ 353.645662][ T6612] veth1_vlan: left promiscuous mode [ 353.663273][ T6612] veth0_vlan: left promiscuous mode [ 353.726769][ T5850] Bluetooth: hci0: command tx timeout [ 354.657427][ T6612] team0 (unregistering): Port device team_slave_1 removed [ 354.710854][ T6612] team0 (unregistering): Port device team_slave_0 removed [ 355.217342][T13045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.224354][T13045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.257657][T13045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.272896][T13265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1678'. [ 355.337389][ T5850] Bluetooth: hci4: command tx timeout [ 355.579495][T13045] hsr_slave_0: entered promiscuous mode [ 355.622410][T13045] hsr_slave_1: entered promiscuous mode [ 355.649738][T13045] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 355.671048][T13045] Cannot create hsr debugfs directory [ 355.694704][T13283] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1681'. [ 355.765805][T13275] Bluetooth: MGMT ver 1.23 [ 355.772946][T13273] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 355.815614][T13275] netlink: 'syz.3.1680': attribute type 4 has an invalid length. [ 355.996876][T13289] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1683'. [ 356.108441][T12995] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 356.148530][T12995] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 356.282984][T12995] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 356.308145][T12995] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 356.664265][T13315] x_tables: ip6_tables: nfacct.0 match: invalid size 40 (kernel) != (user) 144 [ 356.788494][T12995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.876159][T12995] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.899764][T13319] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 357.004009][T13319] mac80211_hwsim hwsim7 wlan1 (unregistering): left allmulticast mode [ 357.064172][ T6580] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.071400][ T6580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.114861][ T6580] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.122123][ T6580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.413583][T13045] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 357.447690][T13045] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 357.486287][T13045] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 357.521092][T13045] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 357.537237][T13329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1692'. [ 357.782840][T13045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.807020][ T5850] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 357.855625][T13045] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.894814][ T6580] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.902064][ T6580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.958737][ T6580] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.965966][ T6580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.990791][T12995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.115878][T13045] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 358.774958][T13363] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1697'. [ 358.889226][T13045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.051106][T12995] veth0_vlan: entered promiscuous mode [ 359.095358][T12995] veth1_vlan: entered promiscuous mode [ 359.146909][T13370] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 359.174528][T13045] veth0_vlan: entered promiscuous mode [ 359.184257][T13375] netlink: 'syz.1.1698': attribute type 4 has an invalid length. [ 359.267290][T13045] veth1_vlan: entered promiscuous mode [ 359.302887][T12995] veth0_macvtap: entered promiscuous mode [ 359.327852][T12995] veth1_macvtap: entered promiscuous mode [ 359.405361][T13045] veth0_macvtap: entered promiscuous mode [ 359.463888][T12995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.503879][T13045] veth1_macvtap: entered promiscuous mode [ 359.530458][T12995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 359.562177][T12995] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.571414][T12995] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.581382][T12995] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.590622][T12995] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.601824][T13379] netlink: 'syz.2.1700': attribute type 4 has an invalid length. [ 359.664833][T13045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.700680][T13045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 359.747521][T13045] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.762843][T13045] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.774577][T13045] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.796573][T13045] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.025126][T13400] netlink: 'syz.3.1706': attribute type 4 has an invalid length. [ 360.025527][ T6612] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.074950][ T6612] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.191966][ T6589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.198858][ T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.220845][ T6589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.221217][ T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.338649][ T6589] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.386576][ T6589] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.416025][T13411] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1709'. [ 360.594255][T13417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1711'. [ 360.603653][T13417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1711'. [ 360.852450][ T6580] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.000336][ T6580] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.112769][ T6580] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.245806][ T6580] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.257318][ T5850] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 361.274744][T13382] ================================================================== [ 361.282866][T13382] BUG: KASAN: slab-use-after-free in skb_queue_purge_reason+0x99/0x360 [ 361.291160][T13382] Read of size 8 at addr ffff88807962c058 by task syz.2.1700/13382 [ 361.299088][T13382] [ 361.301442][T13382] CPU: 0 UID: 0 PID: 13382 Comm: syz.2.1700 Not tainted 6.15.0-rc7-syzkaller-00088-gd8d85ef0a631 #0 PREEMPT(full) [ 361.301473][T13382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 361.301488][T13382] Call Trace: [ 361.301496][T13382] [ 361.301505][T13382] dump_stack_lvl+0x189/0x250 [ 361.301541][T13382] ? __virt_addr_valid+0x18c/0x540 [ 361.301569][T13382] ? rcu_is_watching+0x15/0xb0 [ 361.301587][T13382] ? __kasan_check_byte+0x12/0x40 [ 361.301615][T13382] ? __pfx_dump_stack_lvl+0x10/0x10 [ 361.301644][T13382] ? rcu_is_watching+0x15/0xb0 [ 361.301662][T13382] ? lock_release+0x4b/0x3e0 [ 361.301695][T13382] ? __virt_addr_valid+0x18c/0x540 [ 361.301723][T13382] ? __virt_addr_valid+0x469/0x540 [ 361.301751][T13382] print_report+0xb4/0x290 [ 361.301777][T13382] ? skb_queue_purge_reason+0x99/0x360 [ 361.301802][T13382] kasan_report+0x118/0x150 [ 361.301830][T13382] ? skb_queue_purge_reason+0x99/0x360 [ 361.301858][T13382] skb_queue_purge_reason+0x99/0x360 [ 361.301884][T13382] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 361.301907][T13382] ? __pfx___mutex_lock+0x10/0x10 [ 361.301934][T13382] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 361.301966][T13382] ? drain_workqueue+0x2cb/0x390 [ 361.301990][T13382] ? __pfx_vhci_flush+0x10/0x10 [ 361.302014][T13382] vhci_flush+0x44/0x50 [ 361.302046][T13382] hci_dev_reset+0x420/0x5c0 [ 361.302072][T13382] sock_do_ioctl+0xd9/0x300 [ 361.302096][T13382] ? __pfx_sock_do_ioctl+0x10/0x10 [ 361.302116][T13382] ? __lock_acquire+0xaac/0xd20 [ 361.302151][T13382] sock_ioctl+0x576/0x790 [ 361.302172][T13382] ? __pfx_sock_ioctl+0x10/0x10 [ 361.302193][T13382] ? __fget_files+0x3a0/0x420 [ 361.302219][T13382] ? __fget_files+0x2a/0x420 [ 361.302248][T13382] ? bpf_lsm_file_ioctl+0x9/0x20 [ 361.302276][T13382] ? __pfx_sock_ioctl+0x10/0x10 [ 361.302294][T13382] __se_sys_ioctl+0xf9/0x170 [ 361.302317][T13382] do_syscall_64+0xf6/0x210 [ 361.302345][T13382] ? clear_bhb_loop+0x60/0xb0 [ 361.302368][T13382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.302389][T13382] RIP: 0033:0x7f3c5298e969 [ 361.302408][T13382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.302426][T13382] RSP: 002b:00007f3c537b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 361.302449][T13382] RAX: ffffffffffffffda RBX: 00007f3c52bb6080 RCX: 00007f3c5298e969 [ 361.302464][T13382] RDX: 0000000000000000 RSI: 00000000400448cb RDI: 0000000000000011 [ 361.302478][T13382] RBP: 00007f3c52a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 361.302491][T13382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 361.302504][T13382] R13: 0000000000000000 R14: 00007f3c52bb6080 R15: 00007ffdecfc4848 [ 361.302528][T13382] [ 361.302535][T13382] [ 361.574980][T13382] Allocated by task 12995: [ 361.579401][T13382] kasan_save_track+0x3e/0x80 [ 361.584080][T13382] __kasan_kmalloc+0x93/0xb0 [ 361.588674][T13382] __kmalloc_cache_noprof+0x230/0x3d0 [ 361.594055][T13382] vhci_open+0x57/0x360 [ 361.598216][T13382] misc_open+0x2b9/0x330 [ 361.602469][T13382] chrdev_open+0x4cc/0x5e0 [ 361.606890][T13382] do_dentry_open+0xdf0/0x1970 [ 361.611663][T13382] vfs_open+0x3b/0x340 [ 361.615739][T13382] path_openat+0x2ee5/0x3830 [ 361.620460][T13382] do_filp_open+0x1fa/0x410 [ 361.624963][T13382] do_sys_openat2+0x121/0x1c0 [ 361.629639][T13382] __x64_sys_openat+0x138/0x170 [ 361.634525][T13382] do_syscall_64+0xf6/0x210 [ 361.639045][T13382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.644939][T13382] [ 361.647268][T13382] Freed by task 12995: [ 361.651332][T13382] kasan_save_track+0x3e/0x80 [ 361.656094][T13382] kasan_save_free_info+0x46/0x50 [ 361.661118][T13382] __kasan_slab_free+0x62/0x70 [ 361.665895][T13382] kfree+0x193/0x440 [ 361.669788][T13382] vhci_release+0xbc/0xd0 [ 361.674141][T13382] __fput+0x44c/0xa70 [ 361.678121][T13382] task_work_run+0x1d1/0x260 [ 361.682712][T13382] do_exit+0x8d6/0x2550 [ 361.686870][T13382] do_group_exit+0x21c/0x2d0 [ 361.691469][T13382] __x64_sys_exit_group+0x3f/0x40 [ 361.696674][T13382] x64_sys_call+0x21ba/0x21c0 [ 361.701350][T13382] do_syscall_64+0xf6/0x210 [ 361.705852][T13382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.711836][T13382] [ 361.714154][T13382] The buggy address belongs to the object at ffff88807962c000 [ 361.714154][T13382] which belongs to the cache kmalloc-1k of size 1024 [ 361.728212][T13382] The buggy address is located 88 bytes inside of [ 361.728212][T13382] freed 1024-byte region [ffff88807962c000, ffff88807962c400) [ 361.742023][T13382] [ 361.744345][T13382] The buggy address belongs to the physical page: [ 361.750765][T13382] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807962a000 pfn:0x79628 [ 361.760844][T13382] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 361.769602][T13382] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 361.778098][T13382] page_type: f5(slab) [ 361.782246][T13382] raw: 00fff00000000240 ffff88801a041dc0 ffffea00009b2e10 ffffea0001e91010 [ 361.790842][T13382] raw: ffff88807962a000 000000000010000d 00000000f5000000 0000000000000000 [ 361.799449][T13382] head: 00fff00000000240 ffff88801a041dc0 ffffea00009b2e10 ffffea0001e91010 [ 361.808140][T13382] head: ffff88807962a000 000000000010000d 00000000f5000000 0000000000000000 [ 361.816828][T13382] head: 00fff00000000003 ffffea0001e58a01 00000000ffffffff 00000000ffffffff [ 361.825499][T13382] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 361.834167][T13382] page dumped because: kasan: bad access detected [ 361.840583][T13382] page_owner tracks the page as allocated [ 361.846286][T13382] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 13, tgid 13 (kworker/u8:1), ts 134976391166, free_ts 133046948412 [ 361.865469][T13382] post_alloc_hook+0x1d8/0x230 [ 361.870239][T13382] get_page_from_freelist+0x21ce/0x22b0 [ 361.875779][T13382] __alloc_frozen_pages_noprof+0x181/0x370 [ 361.881579][T13382] alloc_pages_mpol+0x232/0x4a0 [ 361.886433][T13382] allocate_slab+0x8a/0x3b0 [ 361.890948][T13382] ___slab_alloc+0xbfc/0x1480 [ 361.895635][T13382] __kmalloc_noprof+0x305/0x4f0 [ 361.900489][T13382] ieee802_11_parse_elems_full+0x152/0x2b20 [ 361.906381][T13382] ieee80211_inform_bss+0x10c/0x10a0 [ 361.911673][T13382] cfg80211_inform_single_bss_data+0xd02/0x1ac0 [ 361.917936][T13382] cfg80211_inform_bss_data+0x1fb/0x3b20 [ 361.923575][T13382] cfg80211_inform_bss_frame_data+0x362/0x700 [ 361.929641][T13382] ieee80211_bss_info_update+0x746/0x9e0 [ 361.935268][T13382] ieee80211_ibss_rx_queued_mgmt+0xa36/0x2ae0 [ 361.941336][T13382] ieee80211_iface_work+0x806/0xfe0 [ 361.946543][T13382] cfg80211_wiphy_work+0x2df/0x460 [ 361.951665][T13382] page last free pid 36 tgid 36 stack trace: [ 361.957636][T13382] __free_frozen_pages+0xb0e/0xcd0 [ 361.962757][T13382] __put_partials+0x161/0x1c0 [ 361.967444][T13382] put_cpu_partial+0x17c/0x250 [ 361.972223][T13382] __slab_free+0x2f7/0x400 [ 361.976651][T13382] qlist_free_all+0x9a/0x140 [ 361.981240][T13382] kasan_quarantine_reduce+0x148/0x160 [ 361.986694][T13382] __kasan_slab_alloc+0x22/0x80 [ 361.991540][T13382] kmem_cache_alloc_lru_noprof+0x1c6/0x3d0 [ 361.997351][T13382] sock_alloc_inode+0x28/0xc0 [ 362.002025][T13382] alloc_inode+0x67/0x1b0 [ 362.006350][T13382] __sock_create+0x12d/0x9f0 [ 362.010936][T13382] rds_tcp_conn_path_connect+0x282/0x680 [ 362.016576][T13382] rds_connect_worker+0x1d5/0x290 [ 362.021608][T13382] process_scheduled_works+0xadb/0x17a0 [ 362.027147][T13382] worker_thread+0x8a0/0xda0 [ 362.031731][T13382] kthread+0x70e/0x8a0 [ 362.035796][T13382] [ 362.038112][T13382] Memory state around the buggy address: [ 362.043730][T13382] ffff88807962bf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 362.051786][T13382] ffff88807962bf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 362.059841][T13382] >ffff88807962c000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 362.067890][T13382] ^ [ 362.074811][T13382] ffff88807962c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 362.082864][T13382] ffff88807962c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 362.090915][T13382] ================================================================== [ 362.102270][T13382] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 362.109508][T13382] CPU: 1 UID: 0 PID: 13382 Comm: syz.2.1700 Not tainted 6.15.0-rc7-syzkaller-00088-gd8d85ef0a631 #0 PREEMPT(full) [ 362.121595][T13382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 362.131671][T13382] Call Trace: [ 362.134975][T13382] [ 362.137929][T13382] dump_stack_lvl+0x99/0x250 [ 362.142535][T13382] ? __asan_memcpy+0x40/0x70 [ 362.147135][T13382] ? __pfx_dump_stack_lvl+0x10/0x10 [ 362.152368][T13382] ? __pfx__printk+0x10/0x10 [ 362.156969][T13382] panic+0x2db/0x790 [ 362.160881][T13382] ? __pfx_panic+0x10/0x10 [ 362.165310][T13382] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 362.171209][T13382] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 362.177543][T13382] ? print_memory_metadata+0x314/0x400 [ 362.183010][T13382] ? skb_queue_purge_reason+0x99/0x360 [ 362.188475][T13382] check_panic_on_warn+0x89/0xb0 [ 362.193424][T13382] ? skb_queue_purge_reason+0x99/0x360 [ 362.198888][T13382] end_report+0x78/0x160 [ 362.203142][T13382] kasan_report+0x129/0x150 [ 362.207662][T13382] ? skb_queue_purge_reason+0x99/0x360 [ 362.213132][T13382] skb_queue_purge_reason+0x99/0x360 [ 362.218425][T13382] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 362.224354][T13382] ? __pfx___mutex_lock+0x10/0x10 [ 362.229391][T13382] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 362.235383][T13382] ? drain_workqueue+0x2cb/0x390 [ 362.240328][T13382] ? __pfx_vhci_flush+0x10/0x10 [ 362.245181][T13382] vhci_flush+0x44/0x50 [ 362.249350][T13382] hci_dev_reset+0x420/0x5c0 [ 362.253951][T13382] sock_do_ioctl+0xd9/0x300 [ 362.258462][T13382] ? __pfx_sock_do_ioctl+0x10/0x10 [ 362.263577][T13382] ? __lock_acquire+0xaac/0xd20 [ 362.268441][T13382] sock_ioctl+0x576/0x790 [ 362.272774][T13382] ? __pfx_sock_ioctl+0x10/0x10 [ 362.277635][T13382] ? __fget_files+0x3a0/0x420 [ 362.282325][T13382] ? __fget_files+0x2a/0x420 [ 362.286926][T13382] ? bpf_lsm_file_ioctl+0x9/0x20 [ 362.291874][T13382] ? __pfx_sock_ioctl+0x10/0x10 [ 362.296730][T13382] __se_sys_ioctl+0xf9/0x170 [ 362.301334][T13382] do_syscall_64+0xf6/0x210 [ 362.305852][T13382] ? clear_bhb_loop+0x60/0xb0 [ 362.310540][T13382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.316445][T13382] RIP: 0033:0x7f3c5298e969 [ 362.320869][T13382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.340489][T13382] RSP: 002b:00007f3c537b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 362.348914][T13382] RAX: ffffffffffffffda RBX: 00007f3c52bb6080 RCX: 00007f3c5298e969 [ 362.356893][T13382] RDX: 0000000000000000 RSI: 00000000400448cb RDI: 0000000000000011 [ 362.364868][T13382] RBP: 00007f3c52a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 362.373186][T13382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 362.381174][T13382] R13: 0000000000000000 R14: 00007f3c52bb6080 R15: 00007ffdecfc4848 [ 362.389157][T13382] [ 362.392511][T13382] Kernel Offset: disabled [ 362.396840][T13382] Rebooting in 86400 seconds..