last executing test programs: 5.150975371s ago: executing program 0 (id=3397): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0xc8, 0x19, 0x1, 0x0, 0x3, {{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x5c}, {}, {0x0, 0x0, 0x0, 0x4}, 0x0, 0x200}, [@replay_val={0x10, 0xa, {0x70bd2c, 0x70bd26, 0x3}}]}, 0xc8}}, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}}}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="a4020000", @ANYRES16=r2, @ANYBLOB="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"], 0x2a4}, 0x1, 0x0, 0x0, 0x24000014}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002400)=ANY=[@ANYBLOB="1c001e0007012bbd7000ffdbdf25087c000008000380fce10c6b0000"], 0x1c}}, 0xc010) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x38, r3, 0x3, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}]}, 0x38}}, 0x4044844) 4.863189952s ago: executing program 0 (id=3402): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.kill\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r3 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r3, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) recvmmsg(r3, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}, 0xc60e}], 0x1, 0x102, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, r2, 0x1f4d2000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000ee0f000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000008200000018260000", @ANYRES32=r2, @ANYBLOB="000000000800000018480000000000000000000000000000bf91000000000000b7020000020000008500000000000000b7000000000000009500010000000000a03cb77fbfefea6678023b7a82219b5ea28c4d51d817008f974019a30702c40207767ff3e96d956817ead08eb4a41a6050cbe03913c2c4176f0b439cfbd9d87eef19808cf4ddcd219b499cb608ad88e4386296c12ecdb532c81134e176df5d386e54921f4dd8ef44bc8d04d2732ceaf1288e3a860ce895eed017f70221ecf5252420ab97f62492a6e701f7e92e1d645b48"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 4.165421643s ago: executing program 2 (id=3412): read(0xffffffffffffffff, &(0x7f0000000000)=""/212, 0xd4) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000001c0)={{r1}, 0x5, &(0x7f0000000180)=[0xe, 0x7f, 0x3, 0x4, 0x1ff], 0x5, 0x5, 0x1}) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x80010, r0, 0x5d0bf000) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa0, 0x0, 0x9, 0x801, 0x0, 0x0, {0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_TUPLE={0x68, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x89f}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f00000003c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000840)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f0000000540)={0x284, r3, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6e3df7a1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x101}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x74}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffa}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}]}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_BEARER={0xe8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4435}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x33}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1409}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x284}}, 0x4) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), r2) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000900)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000940)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000980)={'vcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000a40)={'ip6tnl0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x0, 0x0, 0x68, @rand_addr=' \x01\x00', @private0, 0x80, 0x10, 0xb439, 0xab19}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000b00)={'gretap0\x00', &(0x7f0000000a80)={'ip_vti0\x00', 0x0, 0x98, 0x80, 0xc, 0x20, {{0xa, 0x4, 0x2, 0xc, 0x28, 0x67, 0x0, 0x2, 0x29, 0x0, @broadcast, @multicast1, {[@timestamp_addr={0x44, 0x14, 0xe5, 0x1, 0xf, [{@multicast1, 0x1}, {@empty, 0x3}]}]}}}}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000b40)={0x0, @initdev, @multicast1}, &(0x7f0000000b80)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000c00)={'sit0\x00', &(0x7f0000000bc0)={'gre0\x00', 0x0, 0x700, 0x8, 0xd03e, 0xfffffff9, {{0x6, 0x4, 0x0, 0x39, 0x18, 0x68, 0x0, 0x2, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x13}, @remote, {[@end, @end]}}}}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000e40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000c40)={0x184, r4, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x4}, 0x4008001) sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x14, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl(r0, 0x5, &(0x7f0000000f80)="f46bdccb5382fe214c425d96cff71092cd1f377de0e961cae7") sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)=@delqdisc={0x70, 0x25, 0x400, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x2, 0x8}, {0x2, 0xc}, {0x3}}, [@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x2}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xe}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x8001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x28, 0x1412, 0x10, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x24004010) r12 = socket(0x0, 0x2, 0x5) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000001200)={0x0, 0xfffffffe}, &(0x7f0000001240)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r12, 0x84, 0x1f, &(0x7f0000001280)={r13, @in={{0x2, 0x4e20, @multicast1}}, 0x4, 0xd}, 0x90) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000001340)={0x3, [0xfffa, 0x200, 0x2]}, &(0x7f0000001380)=0xa) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001400), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r14, &(0x7f0000001540)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x4c, r15, 0x101, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040084}, 0x20000000) 3.975354439s ago: executing program 2 (id=3416): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x6, @mcast2, 0x6}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000001c0)=0x1e) syz_emit_ethernet(0x96, &(0x7f00000000c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00 ', 0x60, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[], @time_exceed={0x3, 0x1, 0x0, 0x8, '\x00', {0x9, 0x6, "e183fd", 0x4, 0x2b, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, [@srh={0x3a, 0x4, 0x4, 0x2, 0x0, 0x8, 0x420, [@local, @private2={0xfc, 0x2, '\x00', 0xfc}]}], "0aa18c6ef405c29b"}}}}}}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) socket$inet6(0xa, 0x2, 0x3a) (async) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x6, @mcast2, 0x6}, 0x1c) (async) sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) (async) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) (async) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000001c0)=0x1e) (async) syz_emit_ethernet(0x96, &(0x7f00000000c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00 ', 0x60, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[], @time_exceed={0x3, 0x1, 0x0, 0x8, '\x00', {0x9, 0x6, "e183fd", 0x4, 0x2b, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, [@srh={0x3a, 0x4, 0x4, 0x2, 0x0, 0x8, 0x420, [@local, @private2={0xfc, 0x2, '\x00', 0xfc}]}], "0aa18c6ef405c29b"}}}}}}}, 0x0) (async) 3.968442196s ago: executing program 1 (id=3417): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01020000010000ecffff0600260005000400ac35000114000600626f6e643000000000000000000000001400070000000000000d00000000ffffac1e0001050005"], 0x4c}, 0x8, 0x3000000000002}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112df000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffefc, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@o_path={&(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, 0x4000, r2}, 0x18) 3.882647593s ago: executing program 0 (id=3418): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async, rerun: 32) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) (rerun: 32) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000040)=0x3, 0x4) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x10}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xe4e}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xac}}, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x105902, 0x0) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) 3.690465228s ago: executing program 1 (id=3419): r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32, @ANYBLOB="20000100", @ANYRES32], 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000023c0)={0x2c, r3, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback}}}, 0x84) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x6}, 0xaf) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000080)=""/248, 0x1a, 0xf8, 0x1}, 0x20) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000003201"], 0x138) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8947, &(0x7f00000000c0)={'macsec0\x00', 0x10001}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 3.689233282s ago: executing program 2 (id=3420): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x85}, 0xc0) 3.602828092s ago: executing program 0 (id=3421): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x9371afd2fb3b70b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}]}, 0xffffffffffffffc7}}, 0x0) 3.462487876s ago: executing program 2 (id=3423): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r1, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c0001800500020000000000080004000500000008000100020000"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 3.460499964s ago: executing program 0 (id=3424): openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000400007012bbd700000000000017c00000400c2801400018006000600843b000006001700843b0000040002"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000740)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x3, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@empty, 0x80000}, {@multicast1}]}, @ssrr={0x89, 0x3, 0xce}, @generic={0x82, 0xfffffffffffffe73}, @noop]}}, {{0x1, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) openat$cgroup_procs(r1, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x800, 0xe85) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f00000001c0)={0x2b, 0x23, '\x00', [@ra={0x5, 0x2, 0xfffb}, @generic={0xcf, 0xff, "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"}, @ra={0x5, 0x2, 0x4}, @hao={0xc9, 0x10, @mcast1}]}, 0x128) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000000500)={{r3}, "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"}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4a0, 0x0, 0x1170, 0x1170, 0x0, 0x1170, 0x3d0, 0x1398, 0x1398, 0x3d0, 0x1398, 0x3, 0x0, {[{{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff, 0xff000000, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0x2b8, 0x2e0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x8, 0x7c7, 0x5d, 0x2, 0x4, 0x2, 0x99, 0x0, 0x80, 0x78}, {0x8000000000000001}}}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@loopback, [0x0, 0xff000000, 0xffffff00, 0xff], @ipv6=@private1, [0xffffff00, 0xff000000, 0xffffffff, 0xffffff00], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xffffff00], @ipv4=@local, [0xffffffff, 0xffffff00, 0xff000000, 0xffff00], 0x0, 0x8, 0x89, 0x4e22, 0x4e21, 0x4e23, 0x4e20, 0x100, 0x1240}, 0x81, 0x41}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x8, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071113900000000008510000002000000850000003400000095000000000000000000a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000001500), &(0x7f0000001540)=0x8) 3.393605666s ago: executing program 1 (id=3425): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000001000000000000000000000018010000786c6c250000000000202020630af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000000800000018010000202070250000000000202020dd00f5ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r2, r4, 0x8f5, 0x100000000000000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000002c0)={'tunl0\x00', 0x0, 0x8, 0x80, 0x7fff, 0x3ff, {{0x6, 0x4, 0x1, 0x3, 0x18, 0x68, 0x0, 0x3, 0x2f, 0x0, @multicast1, @rand_addr=0x64010101, {[@noop]}}}}}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7e0, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0xb, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x5}, 0x50) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x4}, 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000940)={r3, 0x20, &(0x7f0000000900)={&(0x7f0000000840)=""/119, 0x77, 0x0, &(0x7f00000008c0)=""/46, 0x2e}}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="030328bd7000000000000a00000008000300", @ANYRES32=r13], 0x1c}}, 0x0) r14 = bpf$TOKEN_CREATE(0x24, &(0x7f00000006c0)={0x0, r0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_tracing={0x1a, 0x12, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xff}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_fd={0x18, 0xa, 0x1, 0x0, r5}]}, &(0x7f0000000180)='GPL\x00', 0x7, 0xff, &(0x7f00000001c0)=""/255, 0x41000, 0xa3a70e8946177cc5, '\x00', r6, 0x18, r7, 0x8, &(0x7f00000003c0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0xa, 0xfffffff9, 0x3}, 0x10, 0x415b, r0, 0x0, &(0x7f00000005c0)=[r8, r9, 0xffffffffffffffff, 0xffffffffffffffff, r10], 0x0, 0x10, 0x3, @value=r14}, 0x94) 3.309604173s ago: executing program 2 (id=3427): mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x1, 0x7fe2, 0x1, 0x12}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000640)={r0, 0x0, 0x0, 0x4}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x6, 0x23, &(0x7f0000000040)=""/40, &(0x7f0000000080)=0x28) sendmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x38}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27050200d40f00000600002f88a8", 0xe}], 0x1}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000800)={0x2, {{0x2, 0x2, @multicast2}}, 0x1, 0x1, [{{0x2, 0x4e21, @empty}}]}, 0x110) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r2, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r2, 0x0) mmap(&(0x7f000040b000/0x2000)=nil, 0x2000, 0xa, 0x12, r1, 0x0) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 3.289034746s ago: executing program 0 (id=3428): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000022c0)=@newtfilter={0x1110, 0x2c, 0x400, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0x7}, {0xfff2, 0x7}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x7}, @filter_kind_options=@f_flower={{0xb}, {0x30, 0x2, [@TCA_FLOWER_KEY_ICMPV4_TYPE={0x5}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8, 0x1e, 0xffffff00}, @TCA_FLOWER_KEY_CVLAN_ETH_TYPE={0x6, 0x4f, 0x88a8}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0x4, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_fw={{0x7}, {0x1080, 0x2, [@TCA_FW_POLICE={0xc2c, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x6, 0x0, 0xca5, 0x9, 0x3, 0x6, 0x7, 0x8, 0xd2b1, 0xc, 0x10001, 0x1ff, 0x44, 0xc, 0xd9, 0x1, 0x4, 0x62b, 0x2, 0x3, 0x2, 0x1, 0x5a9, 0x8000, 0xe2, 0x1a, 0x8, 0x4, 0x200, 0x8, 0x7fffffff, 0x0, 0x7f, 0x7f, 0x0, 0x3, 0x40, 0x2, 0x22c, 0xa, 0x40, 0x0, 0x7, 0x45a1806d, 0x4, 0x0, 0x4, 0x9f7, 0x0, 0xce7b, 0x235f, 0x2, 0xfffffff8, 0x6, 0x20000005, 0x6, 0x3, 0x6, 0x4, 0x0, 0x4, 0x438, 0x365, 0x1, 0x15631c8b, 0x3ff, 0x1000, 0x2, 0x6, 0xc, 0x3, 0x2, 0x1, 0x81, 0xff, 0x0, 0xe7, 0x2, 0x8, 0xb, 0x680000, 0x7, 0x8, 0x5, 0x2, 0x6, 0x0, 0x9, 0x7fffffff, 0x80000000, 0x5, 0x1, 0x4, 0x2, 0x2, 0x9, 0x7e4b, 0x81, 0x2, 0xa, 0x1, 0x2, 0x4d, 0x8, 0xa, 0x200, 0x3, 0x4, 0x0, 0x7ff, 0xfffffffc, 0x6, 0x3f03, 0x2, 0x5, 0x8, 0x8, 0xfff, 0x81, 0x4fb, 0xac9, 0x2, 0x1000, 0xc, 0x2, 0x8, 0x10, 0x7, 0x7, 0x16, 0x380000, 0x1ff, 0x4, 0x6, 0xe8, 0x6, 0xd85878c, 0x1, 0x6, 0x9, 0xfffffffd, 0x7, 0x2, 0xbd82, 0x101, 0xfffffffe, 0x40, 0x5, 0x1, 0x0, 0x1, 0x8000, 0x7, 0x8fed, 0x9, 0xfffffff9, 0x5cae, 0x0, 0x80, 0x9, 0x7, 0x6, 0x3, 0xffffffff, 0xb2, 0x97, 0x8d, 0x7, 0x7, 0x8001, 0x101, 0x1, 0x1, 0x80000000, 0xffffffc0, 0xfffffff8, 0x0, 0x3, 0xfffffff8, 0x400, 0xa65, 0x6, 0x0, 0xc, 0x4, 0xfff, 0x7fff, 0xffffff6a, 0x7fff, 0x101, 0x9c, 0x5, 0x8, 0x2, 0x9, 0xd9ba, 0xfffffffb, 0x1, 0xfffffa04, 0x87, 0x0, 0x5, 0xfffffff9, 0x3ff, 0x401, 0xffffffff, 0x1, 0x3, 0x3, 0xcc92, 0x5, 0x8, 0x13, 0x3, 0x3, 0x7, 0x5, 0x7, 0x4, 0x5, 0x0, 0x8, 0x3fe, 0x1f, 0x0, 0x5, 0x4, 0x3, 0xfffff001, 0x3, 0x7f, 0x2, 0x2, 0x6298a3df, 0x4e, 0x10, 0x800, 0xfffffff7, 0x400, 0x1, 0x1, 0xfe6, 0x5, 0x4, 0x9fa8, 0xf, 0x2, 0xa2, 0xff, 0x7, 0x7, 0x1, 0x2, 0x0, 0xc]}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffffe, 0x2, 0x1, 0x3, 0x7, 0xaf, 0x200, 0xac5, 0x3, 0x8000000, 0x2, 0x80000000, 0xffffff23, 0x87, 0x5, 0x2840000, 0xb, 0xa, 0x8, 0x942, 0x6, 0x5, 0x40, 0x800, 0xdd2, 0x1b, 0x7, 0xfff, 0xb47, 0x7, 0x7fff, 0x10, 0xfffffff8, 0x1, 0x81, 0x9, 0x5, 0xe, 0x3, 0xffffff9e, 0xe, 0x1c0000, 0x81, 0x7004, 0x5, 0x3, 0x3, 0x3, 0xffffc662, 0x41, 0x4, 0xfff, 0x9, 0x4, 0x62b0, 0x2, 0x8, 0x8, 0x40, 0xe, 0x8, 0x80000001, 0x59d9, 0x7, 0x10000, 0x7, 0x6, 0x400, 0x2, 0x401, 0x7fff, 0x2, 0x4, 0x5, 0x10000, 0x3fc, 0xc, 0x10, 0xfff, 0x7ff, 0x3, 0x9, 0x0, 0x8001, 0x5, 0xe1, 0x1, 0x8, 0x1, 0x1, 0x0, 0x1, 0x5, 0x3, 0x8, 0x7, 0x7, 0x0, 0x6, 0x2bf, 0x100, 0x3, 0x6, 0xc52e, 0x6, 0x6, 0x56c8759b, 0x3, 0x2d, 0x80000001, 0x3790, 0x8, 0x7fffffff, 0x3279, 0x7, 0x9, 0xffffffff, 0x2d1, 0xf44, 0xd, 0x7, 0x2, 0x3, 0x5, 0x0, 0x0, 0x6, 0x7fff, 0x3e8, 0x7, 0x2c8, 0x101, 0x6, 0x9, 0x2, 0x6, 0xfea, 0x4, 0x10001, 0x80, 0x800, 0x6, 0x2, 0x5, 0x5d91, 0x2, 0x3, 0x0, 0x5, 0x1, 0xffffffff, 0x3, 0x81, 0x6, 0x3, 0x9, 0x5, 0x88, 0x3, 0xf0, 0xfff0, 0x5, 0x6, 0x5, 0x6, 0x3, 0x3, 0x40, 0x2, 0x5, 0xe, 0x29b40092, 0x2, 0x0, 0xb0ea, 0x7, 0x4, 0xffff0001, 0x0, 0x1c, 0x1, 0x2, 0x2f, 0x7, 0x98d3, 0x6, 0x0, 0x6, 0x1, 0x1, 0x0, 0xf1, 0x7ff, 0x81, 0x8, 0x4, 0x1, 0x9, 0x42, 0xf9, 0x3, 0x400, 0x800, 0xea1d, 0x40, 0x2, 0x0, 0x7fa, 0x8, 0x3, 0x2, 0x6, 0xffff, 0xfff, 0x9f, 0x100, 0x6, 0x80000000, 0xb, 0x8, 0x1, 0x6, 0x4, 0xd, 0x400, 0x144, 0x441, 0x13, 0x0, 0x2, 0x5, 0x400, 0x0, 0x8, 0xf82, 0x2, 0x31af, 0x0, 0x8, 0x9, 0x2, 0x7, 0x7f, 0x552, 0x8001, 0x1, 0x6, 0x98, 0x3, 0x7ff, 0x3, 0x39, 0x4a7d, 0x1, 0xfffff001, 0x47]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xdf}, @TCA_POLICE_RATE={0x404, 0x2, [0x401, 0x7a, 0x1ff, 0x3, 0x0, 0x300, 0x0, 0x88, 0x0, 0x3, 0xffff0000, 0x7ff, 0x10, 0x0, 0x9, 0x7ff, 0x4, 0xc0000000, 0x3, 0x4, 0x80, 0x10001, 0x9, 0x7, 0x40, 0xfa9c, 0x6, 0x3, 0xa, 0xa87a, 0xd, 0x3ff, 0x100, 0x0, 0x1, 0xfff, 0x9, 0x649, 0x3, 0x800, 0x1, 0x0, 0xfffffff8, 0xffffff03, 0x5, 0x6, 0x3, 0x8, 0x8, 0x4, 0x3ff, 0xfffffff8, 0x2, 0x0, 0x6, 0x5, 0xd, 0x927, 0x44c14f9e, 0x80000000, 0x9, 0x1fbe, 0x6, 0x1c10, 0x40000, 0x0, 0x2, 0x5, 0x5da58d, 0x9, 0x1fc29cb3, 0x7ff, 0x7, 0x1, 0x10001, 0x0, 0xfffffffe, 0x7, 0xffffffff, 0x7, 0x1, 0x7, 0x9, 0x4, 0x8, 0x6, 0x0, 0x5aa7, 0x10000, 0x9, 0x1, 0x9, 0x8, 0x2, 0x80000001, 0x8510, 0x2, 0xb5, 0x6, 0x7, 0x1, 0x7, 0x1df5, 0xac1b, 0x7f, 0x1, 0x51, 0x2466, 0xcc, 0x6, 0x8, 0x401, 0x80, 0x8, 0x4, 0x6, 0x7, 0xe0, 0x8, 0x0, 0x4, 0x0, 0x5, 0x9, 0x3, 0x4612ff92, 0x7fffffff, 0x7, 0x10, 0x7, 0x5, 0xffff, 0x1, 0xabc2, 0x4, 0x0, 0x5, 0x3, 0x6b1, 0x9, 0x3, 0x6, 0xa, 0x8, 0x8, 0xd, 0x101, 0x80, 0x609, 0xf, 0x4, 0xe, 0x1, 0x7, 0xbff0, 0x80000000, 0x2, 0x7f, 0x7, 0x9, 0x60, 0x7, 0x6101, 0x1ff, 0x7, 0x9, 0x9, 0x93, 0x6, 0x258, 0xa, 0x5041b9e8, 0x49, 0x3, 0x7, 0x5, 0x0, 0x1ff, 0x7fff, 0x6, 0x81, 0x10000, 0x10000, 0x8, 0xffffff01, 0x81d4, 0x0, 0x8, 0x200, 0x6, 0x6, 0x8, 0x0, 0xffffffff, 0xde, 0x0, 0x7, 0x9e, 0x2, 0x5, 0x8000, 0x3, 0x9, 0x9, 0x80000000, 0x7, 0x5, 0x5, 0x1ff, 0x8, 0x80c, 0x8b, 0x7, 0x6, 0x0, 0x0, 0x7, 0x2, 0x6, 0x1, 0x1, 0xd, 0x2, 0xf, 0x6, 0x6, 0x5, 0xef75, 0x4, 0x4, 0x8a, 0x4, 0x9, 0x0, 0x6, 0x9, 0x9, 0x3ed, 0x4, 0xffff8676, 0xffffffff, 0x6, 0xffffffff, 0x8, 0x9, 0x1, 0x800, 0xbd, 0x5, 0x7, 0x6, 0x10001, 0x1, 0x39c, 0x0, 0x53fd]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}]}, @TCA_FW_INDEV={0x14, 0x3, 'team_slave_0\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0x5, 0xfff2}}, @TCA_FW_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fd}]}, @TCA_FW_POLICE={0x414, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x0, 0x10001, 0x7fff, 0x57db, 0xd, 0x0, 0x29, 0x7fc8, 0x1ff, 0x3, 0x8, 0x39, 0x9, 0x4, 0xe4f6, 0x10001, 0x952, 0x8, 0x6, 0xffff, 0x6, 0x18e, 0x7ff, 0x3, 0x3, 0x5, 0x5, 0x0, 0x1, 0x7, 0x67c, 0x7357, 0xfffffffa, 0x178, 0x5, 0xe, 0x7, 0x5, 0xffff, 0x8001, 0x1, 0xd206, 0x7786, 0xc, 0x9, 0xc, 0xe, 0x80000001, 0x1, 0x0, 0x7, 0x6, 0x3, 0x1, 0x800, 0x80, 0x62, 0x9, 0x6, 0x2, 0xffffffff, 0x9, 0x80, 0xe, 0x8, 0x8, 0xe2, 0xffffffff, 0x2, 0xffff0000, 0x200, 0x2, 0x1ff, 0x6, 0x224f, 0x5, 0x6, 0x26, 0xfffff001, 0x8, 0x401, 0x1, 0x0, 0x6a, 0x7, 0x7fffffff, 0x3, 0xb52, 0x1, 0x1, 0x5, 0x400, 0x3, 0x1, 0x7, 0x7, 0x2, 0x8, 0xfffffffb, 0x10001, 0x8ad, 0x2, 0x3, 0x5, 0x8, 0x2b, 0x10, 0x7ff, 0x0, 0x5, 0x7, 0x6, 0x8, 0x2b, 0x6, 0x9, 0x6, 0x1, 0x10001, 0x7, 0x1, 0x2, 0x101, 0x5, 0x7, 0x3, 0x2, 0x2, 0x8, 0x7, 0xfffffffd, 0x6b8, 0x1, 0x4, 0xb74, 0xb, 0x1000, 0x2, 0x4, 0x5, 0x2, 0x10000, 0xc06, 0x5e58, 0x3, 0x4, 0x0, 0x1ff, 0x80000001, 0x8, 0x7ff, 0x3, 0x7, 0x400, 0x9, 0x3, 0x40, 0x4, 0x6, 0xe, 0xfff, 0x81, 0x200, 0x9, 0x0, 0x80000000, 0xf, 0xffffff7f, 0x5, 0x5, 0xe458, 0x101, 0x3, 0x6ee90090, 0x10000, 0x4, 0x8, 0x2, 0x7, 0x9, 0xd, 0x1428410d, 0x70b, 0x6, 0xbd, 0x3ff00, 0x1ce5, 0x4, 0x7, 0x2, 0x26, 0x222, 0x100, 0x800, 0x9, 0xe1d9, 0x7, 0xb, 0xffff, 0x1, 0x5, 0x0, 0x9, 0x6, 0x9, 0xf, 0x8001, 0xfffffffb, 0x666, 0x9, 0x0, 0x5, 0xffffff03, 0x3, 0x4, 0x10, 0x8, 0x101, 0x5, 0x2, 0x8, 0x10000, 0x97, 0x4, 0x5, 0x0, 0x8, 0x4, 0x7, 0x2, 0x7, 0xfff, 0x1ce, 0x906, 0x6, 0x0, 0x4, 0x66e1d6b5, 0x3, 0x3b8c, 0x100, 0x7, 0x7fff, 0x7f, 0x401, 0x9, 0x9, 0x6, 0x6, 0x1, 0x4, 0x1, 0x3, 0x6, 0x98a9]}, @TCA_POLICE_PEAKRATE64={0xc}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x8, 0x2}}, @TCA_FW_CLASSID={0x8, 0x1, {0x8, 0xffff}}]}}]}, 0x1110}, 0x1, 0x0, 0x0, 0x48080}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xffff, 0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8, 0xffffffffffffffff, 0xa, 0x3}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0xfffffff5}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x90}}, 0x800) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x41}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)="b68a4e4b0d8caf", 0x7}], 0x1}, 0x4) syz_emit_ethernet(0x5a, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500004c0000000000069078ac1414bbac1414aa00804e22b73643cc55d368c21ce3c7125dd95bc51311a87eba480cd1e86a9ecbcb30552600077f739f945962e76edb9028d2ea0638c1b99f076adbaf02", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ec000000907800001d12d285b6853bc4dc54c6910c1d66f8841a1d12adf059fd789278e2fb03dc15d356998a"], 0x0) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r9, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r11 = accept$alg(r10, 0x0, 0x0) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000080)='\x00\x00\x00\x00', 0x4) sendmsg$alg(r11, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x90}, 0x2000) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r15 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r15, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="58020000", @ANYRES16=r13, @ANYBLOB="050407bd7000fedbdf250100000008000100", @ANYRES32=r14, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004"], 0x258}, 0x1, 0x0, 0x0, 0x4000401}, 0x2404c080) 3.177831558s ago: executing program 2 (id=3429): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001d00070f"], 0x1c}}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000208"], 0xe) socket(0x10, 0x3, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000000)={0x1, 0x5, 0x2, 0x0, 0x1}, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000010) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x2000000000000019, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x2, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r5, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r4}, &(0x7f00000004c0), &(0x7f0000000500)=r6}, 0x20) r7 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$EBT_SO_GET_ENTRIES(r7, 0x0, 0x81, &(0x7f0000000380)={'filter\x00', 0x0, 0x3, 0xf1, [0x228d, 0x80000000000000, 0x5, 0x401, 0x7, 0x85], 0x6, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000280)=""/241}, &(0x7f0000000400)=0x78) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r11, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xd}}, @TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x4}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0xf}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)={0x20, r13, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="340000001900100026bd7000fddbdf2580140004fc0300070001000008000100e00000010c000300", @ANYRES32=r3, @ANYBLOB="0800010064010102"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 3.017875724s ago: executing program 3 (id=3430): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x200000}]}) close(r1) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@migrate={0xf8, 0x21, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, 0xfffffffc}, [@migrate={0x50, 0x11, [{@in=@empty, @in6=@remote, @in6=@private0, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa}]}, @algo_crypt={0x56, 0x2, {{'lrw-twofish-avx\x00'}, 0x70, "dae3ce10f23ca29d30ee7caf5b8b"}}]}, 0xf8}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@mpls_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x20, 0x0, 0xfe, 0x0, 0xff}}, 0x1c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="00000000080000000a0001004af29c3fffff0000140035006d6163766c616e3000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r4, 0x891c, &(0x7f00000001c0)={'ip6tnl0\x00', {0x2, 0x4e21, @local}}) 2.982082135s ago: executing program 4 (id=3431): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000140000001400000002000000000000000100000604000000000000010000000000005bee09124180d44b258975908a13b78193bbff5f70a3ae51fb166940cee4200b96f550e8822a9a4a52cc6dd5c31d745d3a38abdd547dbc5279b59d4546b27c97b074467c49a352bec093"], 0x0, 0x2e, 0x0, 0x1}, 0x20) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000010280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x800c1}, 0x8004) recvmsg$can_bcm(r1, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x40002163) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) openat$cgroup_ro(r2, &(0x7f0000000040)='blkio.bfq.dequeue\x00', 0x0, 0x0) 2.907812692s ago: executing program 4 (id=3432): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000190000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000896a77049c296a50db0000000000000000000000000001000000000000000000000069644accebfc742945108e74d3e6249c39e2a65b5a358be6a23dbd4caacc870a15d2b8b5c828faf65ab695e0e46255c59a13d9327e20f87b04620e6fc763f3a6531ca2279abd4ab68a273f5fe207c33a37ffeab3c49f4a16f5490587a0966c4385b49cc7b2f282955b2ba9abed38bf7c651e6548da0c1e44465ba542fa2c3e6199d7c712cdf5d92ce10730c1f6f198a0f3c6ca2680472f228bc3b98632a9cf76f30ff21768244320d96fdddcdcb5eddb3f951dda00998863e366904c3e1a8b", @ANYRES8=0x0, @ANYRES32, @ANYBLOB="8b24fe2abe5020791892e88a7b71d0363295335f4aa32606afa64de205dc6779131ebd8a0c850a1e7df787f02b"], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000002c0)=@o_path={&(0x7f0000000640)='./file0\x00', r0}, 0x18) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, &(0x7f0000000340)) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e24, 0x1000, @remote, 0x9}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x3ddbd, 0x4) bind$inet(r1, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000006c0)={'ip_vti0\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={r5, 0x2, 0x6, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000180)=0xb27, 0x4) connect$inet(r1, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg(r1, &(0x7f00000001c0), 0x0, 0x2000c840) r6 = socket$kcm(0x29, 0x2, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x4000000}, 0x24004040) shutdown(r7, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r2, 0x8b1b, &(0x7f0000000380)="17d60783bead9417d1b5087111df6e8ea226b44824251c4e090a5dc1c73fce2cc060dfc93682bf1144070000000000002f8c6e4488b3b2a67f73343ade2bd6745b2f00000039080000007b2c890ee80400cd170230e83175") ppoll(&(0x7f00000000c0)=[{r7, 0xc481}], 0x1, 0x0, 0x0, 0x0) r9 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r9, 0x400442c8, &(0x7f0000000200)=ANY=[@ANYRES32=r6, @ANYBLOB="09000000f8ff0300000023f2fb2cd2e867a9fca579f55c28ea71005098d75229a7d2f380a0c0f4108e385bc83f7bb77b41fb41c9fd03857d4e0da26baf35"]) 2.849695452s ago: executing program 3 (id=3433): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000080)='@:$[_$\xa9\x00', 0x480000, 0x0, 0x4, 0x0, 0x0}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) readv(r3, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/217, 0xd9}], 0x1) listen(r2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6d4e9a1d78ad62ceef18843080078bb3fb7dbfcebd1f85fc171f748a7b5373a3126", 0x0, 0xffffffff, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500007100", @ANYRES32=r4, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0xc441}, 0x40040d4) 2.738697048s ago: executing program 3 (id=3434): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x6}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) 2.670795439s ago: executing program 3 (id=3435): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x1406, 0xc00, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x8d1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, 0x40, 0x107, 0x70bd2b, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x9c}, @nested={0x6, 0x9, 0x0, 0x1, [@generic="f8e6"]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048090}, 0xc000) 2.558429532s ago: executing program 3 (id=3436): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000200)) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r1) recvmsg(r1, &(0x7f00000020c0)={0x0, 0x0, 0x0}, 0x40010120) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x0) (async) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000003c0)={0x14, r2, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x408c9}, 0x4800) (async) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="14010000360001000000000000000000010145800c0004000700000000"], 0x114}], 0x1, 0x0, 0x0, 0x4000080}, 0x0) (async, rerun: 64) r4 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 64) r5 = socket$kcm(0x11, 0x3, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r8 = socket$unix(0x1, 0x1, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast1}}, &(0x7f0000000140)=0x1c) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) (rerun: 32) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x84, &(0x7f00000000c0)={r12, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, 0xfffffffd, 0x79b}, &(0x7f00000001c0)=0x9c) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r10, 0x84, 0x1, &(0x7f0000000340)={r12, 0xf, 0x2, 0x2, 0x7, 0xd0}, 0x14) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (rerun: 32) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0xfff1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000000) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) (async) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r14, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 2.467698581s ago: executing program 3 (id=3437): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000140)={r2}, &(0x7f0000000040)=0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="c000000040000701feffffff00000000017c1200040042800c00018006000600800a0000970002809470c4b9d425894604f2ef9d2877c76e6cff2cc03746b35836c0acd8948b974978ed58bdf5911ccfaed74609301189929cf0be024fe625adfb8a2230958e80bbcd69193952aff71c16a71b319c97f68d31a04ce3e42faf6f9a9080bc71d6fc8e88a759a2622cf548697149accdc2c647d3d025be3f7e971d8dcc3968e0c25aee12f24713c04065f88e291eec1dc708de4772dc00040008"], 0xc0}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x800, 0x5b, 0x46b9}) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd70000400000005000000080009000200000008000c000300000008000b00000000000600010007"], 0x40}}, 0x20) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r7, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2}]}, 0x38}, 0x1, 0x0, 0x0, 0x60000004}, 0xc0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=ANY=[@ANYBLOB="4000000010003b050c00"/20, @ANYRES32=0x0, @ANYBLOB="c1900000815c00001800128008000100677470000c00028008000200", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0xffffffffffffffff], 0x40}}, 0x48010) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYRESHEX=r8, @ANYRES16=r9, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB="08000d000000000008000400080008"], 0x4c}}, 0x0) 2.458886428s ago: executing program 1 (id=3438): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x5}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x169}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10}}, 0xbc}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x2, 0x5, 0x3, 0x0, 0x7, 0xfffffffd, 0xfffffffe, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) 1.928906837s ago: executing program 4 (id=3439): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004700)=""/4098, 0x1002}, {&(0x7f0000003700)=""/4074, 0xfea}, {&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f0000000200)=""/100, 0x64}, {&(0x7f0000000780)=""/190, 0xbe}, {&(0x7f0000000400)=""/170, 0xaa}, {&(0x7f0000000140)=""/184, 0xb8}], 0x7}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1d, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xae}}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) 1.885439917s ago: executing program 4 (id=3440): socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r2, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0, 0x7a, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x19, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) 1.78243521s ago: executing program 4 (id=3441): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200000038000480340001800b00010074617267657400002400028010000100434f4e4e5345434d41524b0005000300ef00000008000240000000000900010073797a30000000000900020073797a3200000000140005800800024000000000080001400080"], 0xa0}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0xc00}) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000040)=0x1) r3 = socket(0x10, 0x803, 0x0) recvmsg$unix(r3, &(0x7f0000001780)={&(0x7f0000000040), 0x6e, &(0x7f0000001740)=[{&(0x7f00000000c0)=""/108, 0x6c}, {&(0x7f0000000340)=""/217, 0xd9}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/45, 0x2d}], 0x4}, 0x40) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r3) getsockname$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010500000000fbdbdf2500000000", @ANYRES32=r4, @ANYRES16=r3, @ANYRES32=r4, @ANYBLOB="0844124e181e00"], 0x44}}, 0x4084840) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010400000f00fedbdf2500000000", @ANYRES32=r4, @ANYBLOB="1b2e010001a001001c0012800900010069706970000000000c000280080003007f000001"], 0x3c}}, 0xc004) 141.832996ms ago: executing program 1 (id=3442): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x4d, 0x0, &(0x7f0000cab000)=0x2) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000040)) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="5801000040000701feffffff00000000017c0000040042800c00018006000600800a0000340102802e011480080018", @ANYRESOCT=r0], 0x158}, 0x1, 0x0, 0x0, 0x8815}, 0xc000) 19.435957ms ago: executing program 1 (id=3443): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000640)=@o_path={0x0, 0x18, 0x4000}, 0x18) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001ac0)={0x6, 0xa, &(0x7f0000000240)=@raw=[@exit, @alu={0x0, 0x0, 0x5, 0x8, 0x2, 0x80, 0x10}, @jmp={0x5, 0x1, 0x1, 0x2, 0x7, 0x1, 0x4}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x1}, @alu={0x7, 0x1, 0x0, 0x1, 0x7, 0x80, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000a40)=""/4096, 0x41100, 0x20, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001a40)=[r1, r1, r1, r1, r1, r1, r1], &(0x7f0000001a80)=[{0x5, 0x5, 0x7, 0x3}, {0x1, 0x2, 0x10, 0x9}, {0x0, 0x4, 0x10}], 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000200)=ANY=[@ANYRESHEX=r2, @ANYRES32=r1, @ANYRESHEX=r1], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', r2, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f0000000180)=0x80000001) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x20, r5, 0x200, 0x70bd25, 0x0, {{}, {@void, @val={0xc, 0x99, {0xd, 0x6d}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000140), 0x9) 0s ago: executing program 4 (id=3444): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) listen(r0, 0x1) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) listen(r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000006110a30000000000956aaa6915c8dc573200000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) kernel console output (not intermixed with test programs): 96 bytes leftover after parsing attributes in process `syz.4.2433'. [ 370.756430][T14765] netlink: 'syz.4.2433': attribute type 1 has an invalid length. [ 370.766354][T14765] netlink: 'syz.4.2433': attribute type 8 has an invalid length. [ 370.775446][T14765] netlink: 606 bytes leftover after parsing attributes in process `syz.4.2433'. [ 370.979937][T14779] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2438'. [ 371.073804][T14766] syzkaller0: entered promiscuous mode [ 371.084751][T14766] syzkaller0: entered allmulticast mode [ 371.114790][T14774] tipc: Started in network mode [ 371.151652][T14774] tipc: Node identity , cluster identity 128 [ 371.168434][T14774] tipc: Failed to obtain node identity [ 371.191220][T14792] netlink: 45 bytes leftover after parsing attributes in process `syz.1.2440'. [ 371.204904][T14774] tipc: Enabling of bearer rejected, failed to enable media [ 371.639857][T14811] netlink: 'syz.1.2445': attribute type 1 has an invalid length. [ 373.321453][T14800] kthread_run failed with err -4 [ 373.327539][T14803] netlink: 'syz.1.2445': attribute type 1 has an invalid length. [ 373.336562][T14803] netlink: 2108 bytes leftover after parsing attributes in process `syz.1.2445'. [ 373.348626][T14811] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 374.136962][T14832] netlink: 'syz.2.2448': attribute type 4 has an invalid length. [ 374.250186][T14839] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2453'. [ 374.622295][T14855] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2459'. [ 374.663140][T14855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2459'. [ 374.699380][T14855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2459'. [ 374.922703][ T24] IPVS: starting estimator thread 0... [ 374.929655][T14878] IPVS: set_ctl: invalid protocol: 213 10.1.1.1:20265 [ 375.056814][T14879] IPVS: using max 31 ests per chain, 74400 per kthread [ 375.460890][T14899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2472'. [ 375.472098][T14902] pimreg3: entered allmulticast mode [ 375.589427][T14899] dvmrp0: entered allmulticast mode [ 375.847813][T14929] __nla_validate_parse: 2 callbacks suppressed [ 375.847833][T14929] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2480'. [ 375.940168][T14929] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2480'. [ 376.077263][T14939] nbd: nbd0 already in use [ 376.115982][T14939] block nbd0: NBD_DISCONNECT [ 376.131395][T14939] block nbd0: Send disconnect failed -32 [ 376.157903][T14939] block nbd0: shutting down sockets [ 376.229927][T14950] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2487'. [ 376.264832][T14951] netlink: 'syz.2.2486': attribute type 1 has an invalid length. [ 376.464718][T14951] 8021q: adding VLAN 0 to HW filter on device bond8 [ 377.179222][T14995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2502'. [ 377.240361][T15000] netlink: 'syz.2.2504': attribute type 1 has an invalid length. [ 377.474548][T14986] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 377.537972][T14986] ipvlan2: left promiscuous mode [ 377.571928][T14986] gtp1: left promiscuous mode [ 377.579993][T14986] gtp1: left allmulticast mode [ 377.591018][T14986] bridge3: left promiscuous mode [ 377.596055][T14986] bridge3: left allmulticast mode [ 377.604760][T14986] bridge4: left promiscuous mode [ 377.610085][T14986] bridge4: left allmulticast mode [ 377.619974][T14986] vlan2: left allmulticast mode [ 377.624891][T14986] bond0: left allmulticast mode [ 377.630545][T14986] ip6gretap1: left allmulticast mode [ 377.638232][T14986] syz_tun: left allmulticast mode [ 377.643515][T14986] macvtap1: left promiscuous mode [ 377.649267][T14986] macvtap1: left allmulticast mode [ 377.658557][T14986] hsr1: left promiscuous mode [ 377.668981][T14986] bond7: left promiscuous mode [ 377.673948][T14986] bridge8: left promiscuous mode [ 377.683159][T14986] veth1: left promiscuous mode [ 377.689040][T14986] veth1: left allmulticast mode [ 377.702798][T14991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2500'. [ 377.813145][T15000] 8021q: adding VLAN 0 to HW filter on device bond9 [ 377.828700][ T6259] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.870265][ T6259] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.880292][ T6259] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 377.913856][ T6259] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.945947][ T6259] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.982093][ T6259] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 378.015657][ T6259] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.040542][ T6259] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.059302][ T6259] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 378.129711][ T6259] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.145795][T15026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2511'. [ 378.155382][ T6259] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.165204][ T6259] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 378.177046][T15026] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2511'. [ 378.466008][T15034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2513'. [ 378.468405][T15039] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2514'. [ 378.488191][T15034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.690050][T15045] netlink: 'syz.4.2517': attribute type 1 has an invalid length. [ 378.698858][T15045] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2517'. [ 378.721101][T15046] netlink: 'syz.3.2519': attribute type 1 has an invalid length. [ 378.741578][T15045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 378.768331][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.774883][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.861990][T15046] 8021q: adding VLAN 0 to HW filter on device bond9 [ 378.939163][T15058] netlink: 'syz.2.2522': attribute type 8 has an invalid length. [ 379.286452][T15077] netlink: 'syz.2.2530': attribute type 24 has an invalid length. [ 379.537878][ T29] audit: type=1804 audit(1777968718.899:12): pid=15096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2533" name="/newroot/528/cgroup.controllers" dev="tmpfs" ino=2711 res=1 errno=0 [ 379.626053][ T29] audit: type=1800 audit(1777968718.899:13): pid=15096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2533" name="cgroup.controllers" dev="tmpfs" ino=2711 res=0 errno=0 [ 379.862135][T15108] netlink: 'syz.2.2537': attribute type 11 has an invalid length. [ 379.886000][T15108] netlink: 'syz.2.2537': attribute type 11 has an invalid length. [ 380.537477][T15136] netlink: 'syz.2.2544': attribute type 1 has an invalid length. [ 380.590694][T15136] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 380.979051][T15157] __nla_validate_parse: 3 callbacks suppressed [ 380.979084][T15157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2547'. [ 381.146006][T15171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2550'. [ 381.475421][T15178] syzkaller0: entered promiscuous mode [ 381.502837][T15178] syzkaller0: entered allmulticast mode [ 381.530143][T15183] openvswitch: netlink: IPv4 tun info is not correct [ 381.974380][ T4960] block nbd3: Possible stuck request ffff888027170000: control (read@0,1024B). Runtime 60 seconds [ 381.988542][ T4960] block nbd3: Possible stuck request ffff8880271701c0: control (read@1024,1024B). Runtime 60 seconds [ 382.000851][ T4960] block nbd3: Possible stuck request ffff888027170380: control (read@2048,1024B). Runtime 60 seconds [ 382.012416][ T4960] block nbd3: Possible stuck request ffff888027170540: control (read@3072,1024B). Runtime 60 seconds [ 382.078124][T15213] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2556'. [ 382.212991][T15206] bond16 (unregistering): Released all slaves [ 382.277946][T15216] 8021q: VLANs not supported on lo [ 382.511800][T15231] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2562'. [ 382.583026][T15236] xt_CT: You must specify a L4 protocol and not use inversions on it [ 382.595184][T15231] bridge0: port 4(batadv1) entered blocking state [ 382.607824][T15231] bridge0: port 4(batadv1) entered disabled state [ 382.624487][T15231] batadv1: entered allmulticast mode [ 382.635909][T15231] batadv1: entered promiscuous mode [ 382.648036][T15234] 8021q: VLANs not supported on sit0 [ 382.852530][T15252] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2569'. [ 382.863504][T15252] openvswitch: netlink: Flow key attr not present in new flow. [ 382.950829][T15254] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2571'. [ 383.077161][ T3386] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 383.087342][ T3386] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 383.231452][T15269] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2576'. [ 383.329516][T15274] sctp: [Deprecated]: syz.1.2578 (pid 15274) Use of struct sctp_assoc_value in delayed_ack socket option. [ 383.329516][T15274] Use struct sctp_sack_info instead [ 383.361797][T15273] sctp: [Deprecated]: syz.1.2578 (pid 15273) Use of struct sctp_assoc_value in delayed_ack socket option. [ 383.361797][T15273] Use struct sctp_sack_info instead [ 383.391024][T15271] tipc: Started in network mode [ 383.404564][T15271] tipc: Node identity de52e6aaabe2, cluster identity 128 [ 383.426953][T15271] tipc: Enabled bearer , priority 0 [ 383.453034][T15277] syzkaller0: entered promiscuous mode [ 383.466229][T15277] syzkaller0: entered allmulticast mode [ 383.473995][T15280] netlink: 'syz.4.2579': attribute type 10 has an invalid length. [ 383.498123][T15271] tipc: Resetting bearer [ 383.515084][T15280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2579'. [ 383.527213][T15270] tipc: Resetting bearer [ 383.567629][T15282] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2579'. [ 383.582291][T15270] tipc: Disabling bearer [ 383.762465][T15290] netlink: 'syz.3.2585': attribute type 1 has an invalid length. [ 383.979656][T15303] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2586'. [ 384.346614][T15325] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.354088][T15325] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.442409][T15328] netlink: 'syz.2.2594': attribute type 61 has an invalid length. [ 384.550836][T15336] netlink: 'syz.1.2597': attribute type 1 has an invalid length. [ 384.881421][T15351] netlink: 'syz.0.2601': attribute type 30 has an invalid length. [ 384.999312][T15365] netlink: 'syz.2.2604': attribute type 83 has an invalid length. [ 385.098174][T15367] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 386.130744][T15429] __nla_validate_parse: 7 callbacks suppressed [ 386.130773][T15429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2622'. [ 386.452188][T15444] netlink: 'syz.0.2626': attribute type 25 has an invalid length. [ 386.471459][T15446] netlink: 'syz.1.2628': attribute type 62 has an invalid length. [ 386.769008][T15455] xt_hashlimit: size too large, truncated to 1048576 [ 387.086095][T15474] netlink: 'syz.3.2635': attribute type 1 has an invalid length. [ 387.119028][T15474] netlink: 'syz.3.2635': attribute type 1 has an invalid length. [ 387.190728][T15474] netdevsim netdevsim3: Direct firmware load for .. failed with error -2 [ 387.222216][T15474] netdevsim netdevsim3: Falling back to sysfs fallback for: .. [ 387.239069][T15476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2636'. [ 388.289506][T15506] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.301838][T15506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.379337][T15506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.390445][T15506] batadv0: mtu less than device minimum [ 388.398811][T15506] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 388.411828][T15506] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 388.423617][T15506] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 388.435386][T15506] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 388.447183][T15506] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 388.458966][T15506] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 388.470714][T15506] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 388.482527][T15506] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 388.494326][T15506] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 388.548431][T15506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.598031][ T42] lo speed is unknown, defaulting to 1000 [ 388.605621][ T42] syz0: Port: 1 Link ACTIVE [ 388.618567][ T1009] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.625774][ T1009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.635827][ T1009] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.643074][ T1009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.952349][T15538] validate_nla: 2 callbacks suppressed [ 388.952369][T15538] netlink: 'syz.0.2654': attribute type 1 has an invalid length. [ 389.040539][T15541] netlink: 'syz.2.2655': attribute type 1 has an invalid length. [ 389.142993][T15541] 8021q: adding VLAN 0 to HW filter on device bond10 [ 389.261697][T15556] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2659'. [ 389.357650][T15561] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2662'. [ 389.359482][T15560] netlink: 'syz.0.2659': attribute type 1 has an invalid length. [ 389.386279][T15565] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2661'. [ 389.410432][T15567] netlink: 'syz.4.2662': attribute type 4 has an invalid length. [ 389.444191][T15567] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2662'. [ 389.447370][T15556] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2659'. [ 389.543466][T15573] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2663'. [ 389.561357][T15574] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2664'. [ 389.679024][T15577] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2665'. [ 389.718008][ T3386] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 389.748814][ T6478] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 389.757688][ T3386] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 389.828287][ T6478] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 389.863708][T15590] netlink: 'syz.0.2669': attribute type 1 has an invalid length. [ 389.879636][T15587] netlink: 'syz.2.2668': attribute type 1 has an invalid length. [ 389.921713][T15580] bond10: option packets_per_slave: invalid value (18446744073709551615) [ 389.972344][T15580] bond10: option packets_per_slave: allowed values 0 - 65535 [ 389.982557][T15580] bond10 (unregistering): Released all slaves [ 390.129980][ T5741] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 390.271116][T15611] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 390.278446][T15611] IPv6: NLM_F_CREATE should be set when creating new route [ 390.794849][T15637] netlink: 'syz.1.2684': attribute type 1 has an invalid length. [ 391.115773][T15650] IPVS: length: 24 != 984 [ 391.148598][T15659] netlink: 'syz.3.2692': attribute type 1 has an invalid length. [ 391.342202][T15669] __nla_validate_parse: 14 callbacks suppressed [ 391.342224][T15669] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2694'. [ 391.427402][T15674] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 391.455474][T15664] syzkaller0: entered promiscuous mode [ 391.461639][T15664] syzkaller0: entered allmulticast mode [ 393.666946][ T6259] net_ratelimit: 53 callbacks suppressed [ 393.666969][ T6259] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 393.687617][ T6259] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 393.960516][T15707] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2706'. [ 393.970196][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 394.023839][T15708] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2708'. [ 394.168740][T15716] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2710'. [ 394.206875][T15716] openvswitch: netlink: Flow key attr not present in new flow. [ 394.217946][ T48] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 394.233115][ T48] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 394.351799][T15720] IPVS: set_ctl: invalid protocol: 47 10.1.1.1:20002 [ 394.816897][ T3386] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 394.832115][ T3386] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 394.996520][T15742] netlink: 'syz.3.2718': attribute type 4 has an invalid length. [ 395.082129][T15716] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2710'. [ 395.417018][ T6269] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 395.432031][ T6269] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 395.565676][T15761] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2721'. [ 395.988215][ T6269] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 396.130445][T15796] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2731'. [ 396.229745][T15804] wg2: Caught tx_queue_len zero misconfig [ 396.435272][T15817] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2737'. [ 396.464723][T15817] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2737'. [ 396.493176][T15817] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2737'. [ 396.513379][T15817] netlink: 'syz.0.2737': attribute type 5 has an invalid length. [ 396.541180][T15817] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2737'. [ 396.643399][T15826] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2740'. [ 396.711137][T15826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2740'. [ 396.757641][T15826] netlink: 'syz.2.2740': attribute type 64 has an invalid length. [ 397.323943][T15868] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2749'. [ 397.414084][T15871] netlink: 'syz.1.2751': attribute type 1 has an invalid length. [ 397.614591][T15883] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2754'. [ 397.844713][T15887] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2756'. [ 397.886152][T15887] syzkaller0: entered promiscuous mode [ 397.898131][T15887] syzkaller0: entered allmulticast mode [ 398.118799][T15898] syzkaller0: entered promiscuous mode [ 398.131394][T15898] syzkaller0: entered allmulticast mode [ 398.589916][T15923] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2767'. [ 398.675579][T15930] netlink: 'syz.0.2768': attribute type 1 has an invalid length. [ 398.693866][T15922] bond16: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 398.705847][T15927] netlink: 'syz.3.2769': attribute type 3 has an invalid length. [ 399.081781][T15949] netlink: 'syz.3.2776': attribute type 11 has an invalid length. [ 399.138609][ T6269] net_ratelimit: 12 callbacks suppressed [ 399.138630][ T6269] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 399.159511][ T6269] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 399.189084][T15958] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 399.212560][T15958] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 399.238584][T15958] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 399.279322][T15958] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 399.366538][T15958] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 399.391144][T15958] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 399.411295][T15958] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 399.431045][T15958] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 399.442352][T15958] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 399.452076][T15958] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 399.687130][T14334] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 399.701695][T14334] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 399.937724][T15984] netlink: 'syz.2.2788': attribute type 11 has an invalid length. [ 400.189237][ T5639] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 400.203667][ T5639] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 400.213720][ T5639] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 400.222160][ T5639] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 400.233393][ T5639] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 400.256848][ T6269] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 400.271640][ T6269] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 400.317170][ T4945] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 400.326527][ T4945] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 400.340920][ T4945] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 400.351610][ T4945] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 400.360131][ T4945] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 400.800555][T16011] openvswitch: netlink: Actions may not be safe on all matching packets [ 400.809031][ T13] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 400.809092][ T13] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 401.049756][T16018] netlink: 'syz.4.2795': attribute type 2 has an invalid length. [ 401.317536][ T6259] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 401.493809][T16045] __nla_validate_parse: 62 callbacks suppressed [ 401.493831][T16045] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2801'. [ 401.710193][T15990] lo speed is unknown, defaulting to 1000 [ 401.729228][T16053] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2807'. [ 401.763084][T15990] hsr0 speed is unknown, defaulting to 1000 [ 401.829792][T16058] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2808'. [ 402.030923][T16065] netlink: 'syz.2.2810': attribute type 83 has an invalid length. [ 402.040229][T16068] sctp: [Deprecated]: syz.3.2811 (pid 16068) Use of struct sctp_assoc_value in delayed_ack socket option. [ 402.040229][T16068] Use struct sctp_sack_info instead [ 402.084913][T16068] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2811'. [ 402.245567][T16070] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.280854][T16079] netlink: 'syz.3.2815': attribute type 21 has an invalid length. [ 402.295572][T16070] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 402.313195][T16079] IPv6: NLM_F_CREATE should be specified when creating new route [ 402.358850][T16070] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 402.447894][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 402.461418][ T4945] Bluetooth: hci5: command tx timeout [ 402.484728][T16079] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2815'. [ 402.521050][T16090] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2817'. [ 402.608420][T16070] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.642802][T16070] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 402.666364][T16070] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 402.819061][T16096] team0: Port device vlan0 removed [ 402.900895][T16070] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.930139][T16070] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 402.944143][T16070] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 403.313038][ T3386] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.334159][ T3386] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.344454][ T3386] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 403.400340][ T3386] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.414674][ T3386] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.425118][ T3386] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 403.437780][T16115] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2823'. [ 403.458954][ T3386] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.477764][ T3386] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.488083][ T3386] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 403.511269][ T3386] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.531370][ T3386] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.555350][ T3386] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 403.858186][T16134] bond10: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 403.895008][T16134] bond10: (slave lo): Enslaving as an active interface with an up link [ 404.154426][T16147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2831'. [ 404.185183][T16144] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2829'. [ 404.209354][T16152] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2831'. [ 404.361972][T15990] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.398145][T15990] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.429869][ T3386] net_ratelimit: 13 callbacks suppressed [ 404.429888][ T3386] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 404.439322][T15990] bridge_slave_0: entered allmulticast mode [ 404.451421][ T3386] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 404.463782][T15990] bridge_slave_0: entered promiscuous mode [ 404.480581][T15990] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.492257][T15990] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.500785][T15990] bridge_slave_1: entered allmulticast mode [ 404.509576][T15990] bridge_slave_1: entered promiscuous mode [ 404.527703][ T4945] Bluetooth: hci5: command tx timeout [ 404.645047][T15990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.710415][T15990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.908705][T15990] team0: Port device team_slave_0 added [ 404.922588][T15990] team0: Port device team_slave_1 added [ 405.031138][T15990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.035394][ T6259] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 405.053371][ T6259] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 405.057848][T15990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.169275][T15990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.204025][T15990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.215726][T16193] netlink: 'syz.3.2840': attribute type 64 has an invalid length. [ 405.221911][T15990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.276481][T15990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.279637][T16201] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 405.325190][T16193] : entered promiscuous mode [ 405.402641][T16195] xt_limit: Overflow, try lower: 604147548/4200216962 [ 405.441449][T16196] xt_limit: Overflow, try lower: 604147548/4200216962 [ 405.466301][T16208] syzkaller0: entered promiscuous mode [ 405.482643][T16208] syzkaller0: entered allmulticast mode [ 405.509236][T15990] hsr_slave_0: entered promiscuous mode [ 405.516301][T15990] hsr_slave_1: entered promiscuous mode [ 405.524037][T15990] debugfs: 'hsr0' already exists in 'hsr' [ 405.536098][T15990] Cannot create hsr debugfs directory [ 405.661189][ T13] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 405.675612][ T13] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 406.250925][ T6269] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 406.265639][ T6269] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 406.426345][T15990] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.482457][T16253] netlink: 'syz.2.2857': attribute type 21 has an invalid length. [ 406.588028][T16253] bond11: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 406.603480][T16253] bond11 (unregistering): Released all slaves [ 406.610610][ T4945] Bluetooth: hci5: command tx timeout [ 406.626480][T16258] __nla_validate_parse: 9 callbacks suppressed [ 406.626499][T16258] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2859'. [ 406.692492][T16259] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2859'. [ 406.705629][T15990] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.827443][T14334] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 406.842204][T14334] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 406.865491][T15990] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.943286][T16265] netlink: 'syz.4.2862': attribute type 1 has an invalid length. [ 407.036130][T16272] netlink: 'syz.0.2864': attribute type 8 has an invalid length. [ 407.060152][T16272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2864'. [ 407.091714][T15990] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.439548][T16287] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2868'. [ 407.650064][T16292] IPv6: NLM_F_REPLACE set, but no existing node found! [ 407.825699][T16302] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2874'. [ 408.082496][T16322] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2877'. [ 408.127888][T16324] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2878'. [ 408.149658][T16324] ip6gre0: Caught tx_queue_len zero misconfig [ 408.199415][T15990] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 408.234207][T15990] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 408.249976][T16327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2878'. [ 408.260524][T15990] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 408.280842][T16327] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 408.346515][T15990] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 408.374378][T15990] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 408.396006][T15990] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 408.417785][T15990] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 408.466215][T15990] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 408.494190][T16338] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 408.501587][T16338] IPv6: NLM_F_CREATE should be set when creating new route [ 408.509363][T16338] IPv6: NLM_F_CREATE should be set when creating new route [ 408.525645][T16332] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2881'. [ 408.547128][T16332] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2881'. [ 408.687386][ T4945] Bluetooth: hci5: command tx timeout [ 408.770381][T15990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.804097][T15990] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.832399][ T6259] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.839637][ T6259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.908352][T14334] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.915607][T14334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.155678][T16365] netlink: 'syz.3.2889': attribute type 8 has an invalid length. [ 409.448718][ T13] net_ratelimit: 8 callbacks suppressed [ 409.448761][ T13] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 409.469496][ T13] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 410.067439][ T9586] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 410.081947][ T9586] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 410.632394][T16428] syzkaller0: entered promiscuous mode [ 410.643193][T16428] syzkaller0: entered allmulticast mode [ 410.779624][ T48] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 410.794425][ T48] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 411.349007][T16455] netlink: 'syz.0.2905': attribute type 3 has an invalid length. [ 411.351250][ T9588] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 411.371758][ T9588] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 411.907142][ T9588] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 411.921895][ T9588] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 412.051123][ T4960] block nbd3: Possible stuck request ffff888027170000: control (read@0,1024B). Runtime 90 seconds [ 412.072114][ T4960] block nbd3: Possible stuck request ffff8880271701c0: control (read@1024,1024B). Runtime 90 seconds [ 412.085105][ T4960] block nbd3: Possible stuck request ffff888027170380: control (read@2048,1024B). Runtime 90 seconds [ 412.097497][ T4960] block nbd3: Possible stuck request ffff888027170540: control (read@3072,1024B). Runtime 90 seconds [ 413.183753][T15990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.315374][T16465] __nla_validate_parse: 6 callbacks suppressed [ 413.315406][T16465] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2906'. [ 413.347482][T15990] veth0_vlan: entered promiscuous mode [ 413.397660][T15990] veth1_vlan: entered promiscuous mode [ 413.445365][T16474] netlink: 'syz.2.2909': attribute type 1 has an invalid length. [ 413.454546][T16474] netlink: 'syz.2.2909': attribute type 2 has an invalid length. [ 413.587269][T16481] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2911'. [ 413.601344][T15990] veth0_macvtap: entered promiscuous mode [ 413.667112][T16481] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2911'. [ 413.678894][T15990] veth1_macvtap: entered promiscuous mode [ 413.694434][T16486] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2912'. [ 413.712708][T16488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2910'. [ 413.763746][T15990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.804841][T16486] xfrm2: entered promiscuous mode [ 413.826052][T16486] xfrm2: entered allmulticast mode [ 413.852556][T15990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.906013][T14332] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.926097][T14332] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.956393][T14332] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.989107][T14332] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.021189][T16495] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.2914'. [ 414.092045][T16495] netlink: 'syz.4.2914': attribute type 1 has an invalid length. [ 414.281941][T14332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.304810][T14332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.401620][T16507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2917'. [ 414.413679][ T135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.443977][ T135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.483895][T16507] netlink: 'syz.4.2917': attribute type 5 has an invalid length. [ 414.493249][ T662] net_ratelimit: 8 callbacks suppressed [ 414.493271][ T662] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 414.513905][ T662] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 414.567188][T16507] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2917'. [ 414.722074][T16507] geneve5: entered promiscuous mode [ 414.783821][T16507] geneve5: entered allmulticast mode [ 414.885275][ T35] netdevsim netdevsim4 eth0: set [1, 2] type 2 family 0 port 256 - 0 [ 414.935517][ T35] netdevsim netdevsim4 eth1: set [1, 2] type 2 family 0 port 256 - 0 [ 414.974111][ T35] netdevsim netdevsim4 eth2: set [1, 2] type 2 family 0 port 256 - 0 [ 415.019582][ T35] netdevsim netdevsim4 eth3: set [1, 2] type 2 family 0 port 256 - 0 [ 415.126368][T16535] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 415.145060][T16535] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 415.209667][T16539] netlink: 'syz.3.2921': attribute type 2 has an invalid length. [ 415.287059][T14333] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 415.302063][T14333] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 415.528748][T16544] veth5: entered promiscuous mode [ 415.551648][T16544] veth5: entered allmulticast mode [ 415.754345][ T5639] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 415.769378][ T5639] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 415.779869][ T5639] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 415.789632][ T5639] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 415.801704][ T5639] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 415.877166][ T35] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 415.892929][ T35] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 416.532588][ T9588] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 416.547777][ T9588] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 416.673150][T16593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2937'. [ 416.871703][T16597] netlink: 'syz.2.2938': attribute type 8 has an invalid length. [ 417.137920][T16555] lo speed is unknown, defaulting to 1000 [ 417.194276][T16555] hsr0 speed is unknown, defaulting to 1000 [ 417.363279][T16621] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2946'. [ 417.530606][T16627] xfrm1: entered allmulticast mode [ 417.890687][ T4945] Bluetooth: hci3: command tx timeout [ 418.002892][T16634] netlink: 'syz.1.2949': attribute type 21 has an invalid length. [ 418.490033][T16654] __nla_validate_parse: 3 callbacks suppressed [ 418.490053][T16654] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2954'. [ 418.547225][T16656] netlink: 'syz.2.2955': attribute type 23 has an invalid length. [ 418.549454][T16654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2954'. [ 418.609325][T16555] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.642693][T16555] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.667019][T16555] bridge_slave_0: entered allmulticast mode [ 418.704239][T16555] bridge_slave_0: entered promiscuous mode [ 418.749071][T16555] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.773292][T16555] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.811966][T16555] bridge_slave_1: entered allmulticast mode [ 418.852128][T16555] bridge_slave_1: entered promiscuous mode [ 419.061128][T16680] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2961'. [ 419.086784][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 419.104306][T16555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.143421][T16555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.295026][T16692] netlink: 'syz.2.2964': attribute type 29 has an invalid length. [ 419.332072][T16555] team0: Port device team_slave_0 added [ 419.339610][T16689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2962'. [ 419.351199][T16692] netlink: 'syz.2.2964': attribute type 29 has an invalid length. [ 419.366535][T16555] team0: Port device team_slave_1 added [ 419.374735][T16692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2964'. [ 419.426513][T16696] netlink: 588 bytes leftover after parsing attributes in process `syz.2.2964'. [ 419.460403][T16692] netlink: 'syz.2.2964': attribute type 1 has an invalid length. [ 419.469039][T16692] netlink: 'syz.2.2964': attribute type 2 has an invalid length. [ 419.528941][T16555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.542152][T16555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.585855][T16555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.630615][T16555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.651562][T16555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.706414][ T1009] net_ratelimit: 10 callbacks suppressed [ 419.706434][ T1009] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 419.729247][ T1009] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 419.758786][T16555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.774794][T16685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2960'. [ 419.811195][T16708] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2967'. [ 419.822348][T16708] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2967'. [ 419.836567][T16685] team0: Port device team_slave_0 removed [ 419.855140][T16706] netlink: 'syz.2.2966': attribute type 1 has an invalid length. [ 419.914259][T16706] 8021q: adding VLAN 0 to HW filter on device bond11 [ 419.967895][ T4945] Bluetooth: hci3: command tx timeout [ 420.067220][T16707] 8021q: adding VLAN 0 to HW filter on device bond12 [ 420.079606][T16707] bond11: (slave bond12): Enslaving as an active interface with a down link [ 420.154125][T16555] hsr_slave_0: entered promiscuous mode [ 420.164243][T16555] hsr_slave_1: entered promiscuous mode [ 420.178024][T16555] debugfs: 'hsr0' already exists in 'hsr' [ 420.183851][T16555] Cannot create hsr debugfs directory [ 420.310452][ T135] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 420.324885][ T135] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 420.375064][T16716] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2969'. [ 420.804747][T16555] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.850346][T16555] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.888118][ T1009] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 420.903255][ T1009] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 421.019984][T16738] syzkaller0: entered promiscuous mode [ 421.039726][T16738] syzkaller0: entered allmulticast mode [ 421.111214][T16555] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.142995][T16555] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.246125][T16740] tipc: Enabled bearer , priority 0 [ 421.264896][T16738] tipc: Enabling of bearer rejected, already enabled [ 421.338907][T16555] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.374912][T16555] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.437355][T16754] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 421.443671][T16737] tipc: Resetting bearer [ 421.520872][T14333] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 421.535364][T14333] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 421.615024][T16737] tipc: Disabling bearer [ 421.726458][T16555] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.771302][T16555] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.909041][T16780] tipc: Invalid UDP bearer configuration [ 421.909122][T16780] tipc: Enabling of bearer rejected, failed to enable media [ 422.047376][ T4945] Bluetooth: hci3: command tx timeout [ 422.147138][ T135] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 422.162357][ T135] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 422.730707][T16812] syzkaller1: entered promiscuous mode [ 422.745241][T16812] syzkaller1: entered allmulticast mode [ 422.976044][T16555] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 423.015138][T16555] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 423.036084][T16555] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 423.082025][T16555] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 423.119572][T16555] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 423.189133][T16555] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 423.190965][T16841] xt_CT: You must specify a L4 protocol and not use inversions on it [ 423.205342][T16841] xt_CT: You must specify a L4 protocol and not use inversions on it [ 423.232479][T16555] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 423.315818][T16555] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 423.502906][T16863] netlink: 'syz.4.3002': attribute type 1 has an invalid length. [ 423.535670][T16862] netlink: 'syz.4.3002': attribute type 1 has an invalid length. [ 423.589394][T16862] __nla_validate_parse: 13 callbacks suppressed [ 423.589413][T16862] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3002'. [ 423.666313][T16863] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3002'. [ 423.735457][T16853] syzkaller0: entered promiscuous mode [ 423.750492][T16853] syzkaller0: entered allmulticast mode [ 423.843009][T16878] netlink: 'syz.1.3005': attribute type 4 has an invalid length. [ 423.873576][T16878] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3005'. [ 423.903512][T16555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.925787][T16882] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.3005'. [ 423.975837][T16878] netlink: 'syz.1.3005': attribute type 1 has an invalid length. [ 424.139312][ T4945] Bluetooth: hci3: command tx timeout [ 424.808081][T14333] net_ratelimit: 8 callbacks suppressed [ 424.808102][T14333] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 424.829250][T14333] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 425.351752][ T135] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 425.367650][ T135] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 425.888600][ T1009] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 425.903317][ T1009] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 426.405792][T16555] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.433201][ T1009] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 426.448097][ T1009] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 426.501684][ T3386] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.509036][ T3386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.569354][ T3386] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.576652][ T3386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.668408][T16908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3010'. [ 426.754150][T16918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3011'. [ 426.881050][T16911] netlink: 'syz.1.3011': attribute type 1 has an invalid length. [ 426.990283][T16911] 8021q: adding VLAN 0 to HW filter on device bond1 [ 427.052481][T16929] sctp: [Deprecated]: syz.2.3015 (pid 16929) Use of int in max_burst socket option. [ 427.052481][T16929] Use struct sctp_assoc_value instead [ 427.084593][ T135] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 427.100568][ T135] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 427.374508][T16942] netlink: 'syz.1.3017': attribute type 1 has an invalid length. [ 428.123639][T16984] netlink: 54 bytes leftover after parsing attributes in process `syz.2.3030'. [ 428.147499][T16984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3030'. [ 428.230039][T16555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.333518][T16555] veth0_vlan: entered promiscuous mode [ 428.353299][T16555] veth1_vlan: entered promiscuous mode [ 428.403903][T16555] veth0_macvtap: entered promiscuous mode [ 428.421527][T16555] veth1_macvtap: entered promiscuous mode [ 428.445878][T16555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.469262][T16555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.492031][ T3386] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.504141][ T3386] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.519780][ T3386] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.535101][ T3386] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.594224][T16996] syzkaller0: entered promiscuous mode [ 428.601266][T16996] syzkaller0: entered allmulticast mode [ 430.201948][ T1009] net_ratelimit: 11 callbacks suppressed [ 430.201969][ T1009] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 430.222801][ T1009] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 430.753100][T14333] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 430.768423][T14333] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 431.138324][ T662] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.182572][ T662] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.219422][T17032] x_tables: duplicate underflow at hook 2 [ 431.288441][ T662] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 431.303375][ T662] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 431.405105][ T135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.440645][ T135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.453470][T17041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3043'. [ 431.479499][T17041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3043'. [ 431.503224][T17041] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3043'. [ 431.529293][T17041] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3043'. [ 431.584985][T17045] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3042'. [ 431.630432][T17048] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 431.850179][T14332] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 431.865464][T14332] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 432.103449][T17070] netlink: 'syz.0.3049': attribute type 2 has an invalid length. [ 432.147719][T17070] netlink: 'syz.0.3049': attribute type 2 has an invalid length. [ 432.176873][T17071] syzkaller0: entered promiscuous mode [ 432.182431][T17071] syzkaller0: entered allmulticast mode [ 432.284274][T17077] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3052'. [ 432.343253][ T5639] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 432.361294][ T5639] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 432.374150][ T5639] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 432.384028][ T5639] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 432.395247][ T5639] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 432.467947][ T1009] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 432.482704][ T1009] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 432.733211][T17075] syzkaller0: entered promiscuous mode [ 432.756509][T17075] syzkaller0: entered allmulticast mode [ 432.985881][T17101] netlink: 'syz.0.3054': attribute type 10 has an invalid length. [ 433.051623][T17104] netlink: 312 bytes leftover after parsing attributes in process `syz.4.3055'. [ 433.264743][T17112] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3055'. [ 434.450094][ T4945] Bluetooth: hci4: command tx timeout [ 435.191352][T17101] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.200892][T17101] bond0: (slave team0): Enslaving as an active interface with an up link [ 435.273874][T17112] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 435.305514][T17112] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 435.341722][T17112] gretap2: entered promiscuous mode [ 435.348349][T17112] gretap2: entered allmulticast mode [ 435.434098][T17126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3058'. [ 435.462022][T17126] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3058'. [ 435.595980][ T6259] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.634470][ T6259] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.678550][ T662] net_ratelimit: 10 callbacks suppressed [ 435.678571][ T662] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 435.699235][ T662] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 435.742045][T17139] dvmrp0: entered allmulticast mode [ 435.793202][T17078] lo speed is unknown, defaulting to 1000 [ 435.956524][ T6259] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.996022][T17148] openvswitch: netlink: Missing key (keys=40, expected=100) [ 436.003956][ T6259] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.100967][T17078] hsr0 speed is unknown, defaulting to 1000 [ 436.156519][T17151] smc: net device team0 applied user defined pnetid SYZ2 [ 436.208258][ T6259] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.229007][ T6259] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.258719][ T662] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 436.273271][ T662] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 436.527043][ T4945] Bluetooth: hci4: command tx timeout [ 436.638325][ T6259] netdevsim netdevsim2  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.676371][ T6259] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.724011][T17179] netlink: 'syz.0.3071': attribute type 4 has an invalid length. [ 436.746713][T17179] __nla_validate_parse: 5 callbacks suppressed [ 436.746731][T17179] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3071'. [ 436.787286][T17180] netlink: 'syz.0.3071': attribute type 4 has an invalid length. [ 436.812076][T17180] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3071'. [ 436.878740][T17184] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3072'. [ 436.888887][T14332] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 436.903367][T14332] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 436.944255][T17184] netlink: 'syz.4.3072': attribute type 9 has an invalid length. [ 437.117989][T17191] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3074'. [ 437.270380][T17193] syzkaller1: entered promiscuous mode [ 437.288706][T17193] syzkaller1: entered allmulticast mode [ 437.350415][T17193] syzkaller1: left promiscuous mode [ 437.377458][T17193] syzkaller1: left allmulticast mode [ 437.479397][ T1009] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 437.495086][ T1009] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 437.834608][T17218] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 437.940558][ T6259] bridge_slave_1: left allmulticast mode [ 437.958176][ T6259] bridge_slave_1: left promiscuous mode [ 437.981192][ T6259] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.999197][T17227] xt_TCPMSS: Only works on TCP SYN packets [ 438.014429][ T6259] bridge_slave_0: left allmulticast mode [ 438.027323][ T6259] bridge_slave_0: left promiscuous mode [ 438.051051][ T6259] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.100399][T17233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3082'. [ 438.111386][ T662] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 438.174918][T17234] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3081'. [ 438.191855][ T6259] dvmrp0: left allmulticast mode [ 438.214750][ T6259] pimreg7: left allmulticast mode [ 438.339197][T17241] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3083'. [ 438.611379][ T4945] Bluetooth: hci4: command tx timeout [ 438.669114][ T6259] bond4 (unregistering): (slave ip6gre2): Releasing backup interface [ 438.836103][ T6259] bond2 (unregistering): (slave gretap1): Releasing backup interface [ 439.482033][ T6259] bond1 (unregistering): Released all slaves [ 439.504335][ T6259] bond2 (unregistering): (slave bond3): Releasing backup interface [ 439.513360][ T6259] bond2 (unregistering): Released all slaves [ 439.531527][ T6259] bond3 (unregistering): Released all slaves [ 439.556123][ T6259] bond0 (unregistering): (slave lo): Releasing backup interface [ 439.565063][ T6259] bond0 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 439.580490][ T6259] bond0 (unregistering): Released all slaves [ 439.600176][ T6259] bond4 (unregistering): Released all slaves [ 439.617794][ T6259] bond5 (unregistering): Released all slaves [ 439.640047][ T6259] bond6 (unregistering): Released all slaves [ 439.670783][ T6259] bond7 (unregistering): Released all slaves [ 439.687185][ T6259] bond8 (unregistering): Released all slaves [ 439.705975][ T6259] bond9 (unregistering): Released all slaves [ 439.736030][ T6259] bond10 (unregistering): Released all slaves [ 439.756289][ T6259] bond11 (unregistering): (slave bond12): Releasing active interface [ 439.765968][ T6259] bond11 (unregistering): Released all slaves [ 439.783368][ T6259] bond12 (unregistering): Released all slaves [ 439.974709][ T5290] 8021q: adding VLAN 0 to HW filter on device eth1 [ 440.025165][ T6259] : left promiscuous mode [ 440.187244][T17267] netlink: 'syz.0.3086': attribute type 10 has an invalid length. [ 440.210402][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.276994][T17276] netlink: 'syz.0.3086': attribute type 10 has an invalid length. [ 440.351855][T17267] team0: Port device dummy0 added [ 440.361850][T17277] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3087'. [ 440.422805][T17276] team0: Port device dummy0 removed [ 440.513916][T17276] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 440.566419][ T6259] tipc: Disabling bearer [ 440.592355][ T6259] tipc: Left network mode [ 440.598863][T17284] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3089'. [ 440.667648][T17284] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3089'. [ 440.687465][ T4945] Bluetooth: hci4: command tx timeout [ 440.695529][ T135] net_ratelimit: 9 callbacks suppressed [ 440.695549][ T135] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 440.716691][ T135] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 441.086094][ T6259] IPVS: stopping backup sync thread 9747 ... [ 441.277042][T14332] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 441.291724][T14332] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 441.414831][T17078] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.435981][T17078] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.460013][T17078] bridge_slave_0: entered allmulticast mode [ 441.498587][T17078] bridge_slave_0: entered promiscuous mode [ 441.525951][T17078] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.559911][T17078] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.569376][T17320] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 441.576533][T17321] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 441.603294][T17078] bridge_slave_1: entered allmulticast mode [ 441.623102][T17078] bridge_slave_1: entered promiscuous mode [ 441.841770][ T135] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 441.856818][ T135] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 441.929963][T17331] netlink: 'syz.0.3097': attribute type 1 has an invalid length. [ 441.940325][T17331] __nla_validate_parse: 3 callbacks suppressed [ 441.940343][T17331] netlink: 204 bytes leftover after parsing attributes in process `syz.0.3097'. [ 441.983425][T17078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.059133][T17078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.131300][ T4960] block nbd3: Possible stuck request ffff888027170000: control (read@0,1024B). Runtime 120 seconds [ 442.144434][ T4960] block nbd3: Possible stuck request ffff8880271701c0: control (read@1024,1024B). Runtime 120 seconds [ 442.157339][ T4960] block nbd3: Possible stuck request ffff888027170380: control (read@2048,1024B). Runtime 120 seconds [ 442.168893][ T4960] block nbd3: Possible stuck request ffff888027170540: control (read@3072,1024B). Runtime 120 seconds [ 442.395517][T17078] team0: Port device team_slave_0 added [ 442.431675][T17078] team0: Port device team_slave_1 added [ 442.455140][ T9586] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 442.470505][ T9586] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 442.713927][T17078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.733008][T17365] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3102'. [ 442.749547][T17078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.839760][T17078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.938565][T17078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.954491][T17078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.035607][T17078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.235839][T17383] ip6t_srh: unknown srh invflags 4000 [ 443.247365][T17381] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3106'. [ 443.320743][T17381] bond11: entered promiscuous mode [ 443.328775][T17381] 8021q: adding VLAN 0 to HW filter on device bond11 [ 443.361178][T17387] netlink: 'syz.1.3107': attribute type 39 has an invalid length. [ 443.458859][T17078] hsr_slave_0: entered promiscuous mode [ 443.483426][T17078] hsr_slave_1: entered promiscuous mode [ 443.509101][T17078] debugfs: 'hsr0' already exists in 'hsr' [ 443.531933][T17078] Cannot create hsr debugfs directory [ 443.637232][T17381] bridge12: entered promiscuous mode [ 443.650269][T17381] bond11: (slave bridge12): Enslaving as an active interface with an up link [ 444.228021][T17424] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3113'. [ 444.386491][T17414] syzkaller1: entered promiscuous mode [ 444.406761][T17414] syzkaller1: entered allmulticast mode [ 444.450502][T17430] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3114'. [ 444.509576][T17432] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3114'. [ 444.698769][ T6259] hsr_slave_0: left promiscuous mode [ 444.715004][ T6259] hsr_slave_1: left promiscuous mode [ 444.746118][ T6259] veth1_vlan: left promiscuous mode [ 444.761980][ T6259] veth0_vlan: left promiscuous mode [ 444.977460][T17450] netlink: 'syz.3.3120': attribute type 19 has an invalid length. [ 445.287598][ T6259] team0 (unregistering): Port device team_slave_1 removed [ 445.461376][T17438] debugfs: 'Ku crK:̥B| lS-!' already exists in 'ieee80211' [ 445.668365][T17462] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3124'. [ 445.740304][T17462] ip6erspan1: entered allmulticast mode [ 445.760296][T17459] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 445.794022][T17459] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3122'. [ 446.149692][ T9588] net_ratelimit: 12 callbacks suppressed [ 446.149712][ T9588] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 446.169972][ T9588] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 446.333291][ T6259] IPVS: stop unused estimator thread 0... [ 446.456171][T17490] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3130'. [ 446.519234][T17495] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3132'. [ 446.775407][ T662] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 446.791308][ T662] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 447.388722][ T9588] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 447.403249][ T9588] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 447.555965][T17078] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 447.637923][T17078] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 447.675412][T17078] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 447.732894][T17078] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 447.780477][T17078] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 447.824301][T17078] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 447.850099][T17545] netlink: 240 bytes leftover after parsing attributes in process `syz.1.3143'. [ 447.954504][T17078] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 447.993896][T17078] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 448.008339][ T35] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 448.023231][ T35] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 448.489902][T17576] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3151'. [ 448.518948][T17577] netlink: 'syz.1.3149': attribute type 10 has an invalid length. [ 448.588428][ T9586] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 448.603827][ T9586] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 448.682449][T17078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.683872][T17576] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3151'. [ 448.857454][T17078] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.881767][T17590] netlink: 'syz.0.3153': attribute type 1 has an invalid length. [ 448.910080][ T1009] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.917368][ T1009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.022910][T17592] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3153'. [ 449.045228][T17590] bond1: entered promiscuous mode [ 449.052245][T17590] 8021q: adding VLAN 0 to HW filter on device bond1 [ 449.060671][T17592] bond1: entered allmulticast mode [ 449.120372][ T1009] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.127617][ T1009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.157100][T17595] netlink: 'syz.1.3154': attribute type 8 has an invalid length. [ 449.210407][T17604] netlink: 'syz.4.3155': attribute type 1 has an invalid length. [ 449.211485][T17595] sch_fq: defrate 0 ignored. [ 449.230070][T17604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 449.237418][T17604] IPv6: NLM_F_CREATE should be set when creating new route [ 449.292393][T17592] bond1: (slave bridge2): making interface the new active one [ 449.311526][T17592] bridge2: entered promiscuous mode [ 449.337538][T17590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3153'. [ 449.367581][T17592] bridge2: entered allmulticast mode [ 449.384765][T17592] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 449.574259][T17619] rdma_rxe: rxe_newlink: failed to add lo [ 450.267268][T17647] macvtap3: entered promiscuous mode [ 450.278917][T17647] macvtap3: entered allmulticast mode [ 450.284911][T17647] syz_tun: entered allmulticast mode [ 450.526316][T17657] veth0: entered promiscuous mode [ 450.564533][T17657] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3164'. [ 450.641877][T17657] veth0 (unregistering): left promiscuous mode [ 450.888040][T17673] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3167'. [ 451.162960][T17680] netlink: 'syz.1.3170': attribute type 1 has an invalid length. [ 451.191448][T17680] netlink: 236 bytes leftover after parsing attributes in process `syz.1.3170'. [ 451.201737][ T35] net_ratelimit: 8 callbacks suppressed [ 451.201755][ T35] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 451.222707][ T35] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 451.317576][T17078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.514759][T17703] netlink: 212356 bytes leftover after parsing attributes in process `syz.4.3173'. [ 451.584270][T17078] veth0_vlan: entered promiscuous mode [ 451.631822][T17708] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3175'. [ 451.660298][T17078] veth1_vlan: entered promiscuous mode [ 451.750578][T17708] bond2 (unregistering): Released all slaves [ 451.769982][ T6259] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 451.785451][ T6259] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 452.023552][T17078] veth0_macvtap: entered promiscuous mode [ 452.056593][T17078] veth1_macvtap: entered promiscuous mode [ 452.150856][T17078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 452.174618][T17727] openvswitch: netlink: Flow key attr not present in new flow. [ 452.213876][T17078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 452.269936][ T9588] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.302282][ T9588] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.329210][ T6259] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 452.343897][ T6259] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 452.388330][ T9588] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.409174][ T9588] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.690840][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.763315][ T9588] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.794158][ T9588] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.911261][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.937608][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.945155][ T9588] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 452.960390][ T9588] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 453.007676][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 453.681649][ T5639] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 453.694706][ T5639] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 453.709442][ T5639] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 453.722626][ T5639] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 453.734947][ T5639] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 453.795114][T17767] wireguard0: entered promiscuous mode [ 453.821472][T17767] wireguard0: entered allmulticast mode [ 453.873476][T17765] lo speed is unknown, defaulting to 1000 [ 453.908908][T17765] hsr0 speed is unknown, defaulting to 1000 [ 454.312646][T17789] veth0: entered promiscuous mode [ 454.330970][T17788] veth0: left promiscuous mode [ 454.567080][ T5630] bond5: (slave syz_tun): Removing an active aggregator [ 454.585573][T17795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3196'. [ 454.610956][ T5630] bond5: (slave syz_tun): Releasing backup interface [ 454.859955][ T9586] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.871411][ T9586] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.883144][ T9586] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 454.893679][ T9586] netdevsim netdevsim4 eth3 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 454.914196][T17802] netlink: 'syz.2.3198': attribute type 1 has an invalid length. [ 455.161973][ T9586] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.173770][ T9586] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.188774][ T9586] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 455.199118][ T9586] netdevsim netdevsim4 eth2 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 455.242496][T17802] bridge0: port 3(ipvlan2) entered blocking state [ 455.261329][T17802] bridge0: port 3(ipvlan2) entered disabled state [ 455.274308][T17802] ipvlan2: entered allmulticast mode [ 455.286995][T17802] bridge0: entered allmulticast mode [ 455.305649][T17802] ipvlan2: left allmulticast mode [ 455.317062][T17802] bridge0: left allmulticast mode [ 455.364246][T17771] lo speed is unknown, defaulting to 1000 [ 455.374597][ T9586] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.404068][ T9586] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.428117][ T9586] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 455.448189][ T9586] netdevsim netdevsim4 eth1 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 455.527287][T17771] hsr0 speed is unknown, defaulting to 1000 [ 455.623827][ T9586] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.682628][ T9586] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.723748][ T9586] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 455.769313][ T9586] netdevsim netdevsim4 eth0 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 455.807686][ T4945] Bluetooth: hci2: command tx timeout [ 456.636970][ T35] net_ratelimit: 17 callbacks suppressed [ 456.636991][ T35] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 456.657785][ T35] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 456.848816][ T7172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.928476][ T7179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.975606][T17832] openvswitch: netlink: Message has 8 unknown bytes. [ 457.009338][T17832] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 457.119587][T17837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3205'. [ 457.170484][ T7172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.218859][ T662] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 457.233622][ T662] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 457.268048][ T9586] batadv1: left allmulticast mode [ 457.273193][ T9586] batadv1: left promiscuous mode [ 457.279464][ T9586] bridge0: port 4(batadv1) entered disabled state [ 457.303061][ T9586] veth0_to_bridge: left allmulticast mode [ 457.309149][ T9586] veth0_to_bridge: left promiscuous mode [ 457.316025][ T9586] bridge0: port 3(veth0_to_bridge) entered disabled state [ 457.331755][ T9586] bridge_slave_1: left allmulticast mode [ 457.337749][ T9586] bridge_slave_1: left promiscuous mode [ 457.343561][ T9586] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.355644][ T9586] bridge_slave_0: left allmulticast mode [ 457.364390][ T9586] bridge_slave_0: left promiscuous mode [ 457.370665][ T9586] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.413149][T17842] sctp: [Deprecated]: syz.2.3208 (pid 17842) Use of int in max_burst socket option deprecated. [ 457.413149][T17842] Use struct sctp_assoc_value instead [ 457.432298][ T9586] dvmrp0: left allmulticast mode [ 457.447276][ T9586] lo: left allmulticast mode [ 457.495102][ T6478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.741234][ T9586] erspan0 (unregistering): left allmulticast mode [ 457.871072][ T9586] bond10 (unregistering): (slave geneve4): Releasing active interface [ 457.887298][ T4945] Bluetooth: hci2: command tx timeout [ 458.057777][ T9586] bond4 (unregistering): (slave bridge3): Removing an active aggregator [ 458.068948][ T9586] bond4 (unregistering): (slave bridge3): Releasing backup interface [ 458.078048][ T9586] bond4 (unregistering): (slave bridge3): the permanent HWaddr of slave - c2:22:9c:7a:dc:72 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 458.098285][ T9586] bridge3 (unregistering): left promiscuous mode [ 458.336313][ T9586] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 458.350914][ T9586] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 458.364182][ T9586] bond0 (unregistering): Released all slaves [ 458.376795][ T9586] bond1 (unregistering): Released all slaves [ 458.396946][ T9586] bond2 (unregistering): (slave veth5): Releasing active interface [ 458.407938][ T9586] bond2 (unregistering): Released all slaves [ 458.424613][ T9586] bond3 (unregistering): Released all slaves [ 458.453304][ T9586] bond4 (unregistering): (slave veth7): Releasing backup interface [ 458.463795][ T9586] bond4 (unregistering): Released all slaves [ 458.486781][ T9586] bond5 (unregistering): Released all slaves [ 458.521184][ T9586] bond6 (unregistering): Released all slaves [ 458.542391][ T9586] bond7 (unregistering): Released all slaves [ 458.574533][ T9586] bond8 (unregistering): Released all slaves [ 458.608533][ T9586] bond9 (unregistering): Released all slaves [ 458.626243][ T9586] bond10 (unregistering): Released all slaves [ 458.651938][T17839] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3208'. [ 458.672004][T17841] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 458.711958][T17854] netlink: 'syz.1.3211': attribute type 1 has an invalid length. [ 458.823240][T17854] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3211'. [ 458.884121][T17859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3212'. [ 458.950908][ T9586] : left promiscuous mode [ 459.165840][ T9586] : left promiscuous mode [ 459.464195][ T9586] IPVS: stopping master sync thread 17048 ... [ 459.967362][ T4945] Bluetooth: hci2: command tx timeout [ 460.055386][T17771] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.080106][T17771] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.097734][T17771] bridge_slave_0: entered allmulticast mode [ 460.142671][T17771] bridge_slave_0: entered promiscuous mode [ 460.163472][T17771] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.188128][T17771] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.208861][T17771] bridge_slave_1: entered allmulticast mode [ 460.220682][T17771] bridge_slave_1: entered promiscuous mode [ 460.455758][T17927] netlink: 'syz.2.3226': attribute type 21 has an invalid length. [ 460.469220][T17924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3225'. [ 460.500664][T17771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.705453][T17927] bond1: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 460.742544][T17927] bond1 (unregistering): Released all slaves [ 460.802410][T17944] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 460.879883][T17771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.917151][T17944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3230'. [ 461.131569][T17944] veth1_macvtap: left promiscuous mode [ 461.145383][T17954] ieee802154 phy0 wpan0: encryption failed: -22 [ 461.151873][T17957] Unsupported ieee802154 address type: 0 [ 461.187858][ T5290] 8021q: adding VLAN 0 to HW filter on device eth1 [ 461.205388][ T4945] Bluetooth: hci3: link tx timeout [ 461.212040][T17771] team0: Port device team_slave_0 added [ 461.219395][ T4945] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 461.385054][T17771] team0: Port device team_slave_1 added [ 461.515336][T17967] siw: device registration error -23 [ 461.680415][T17771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.709696][T17771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.742558][T17969] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3236'. [ 461.771540][T17972] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3237'. [ 461.780801][T17771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.783879][T17969] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3236'. [ 461.890498][ T35] net_ratelimit: 24 callbacks suppressed [ 461.890518][ T35] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 461.911589][ T35] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 461.975042][T17771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.008625][T17771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.049588][ T4945] Bluetooth: hci2: command tx timeout [ 462.079424][T17771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.115351][T17969] gretap1: entered promiscuous mode [ 462.128554][T17969] gretap1: entered allmulticast mode [ 462.134810][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.468462][ T35] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 462.482892][ T35] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 462.569245][T17771] hsr_slave_0: entered promiscuous mode [ 462.631370][T17771] hsr_slave_1: entered promiscuous mode [ 463.035167][T18027] netlink: 'syz.2.3249': attribute type 20 has an invalid length. [ 463.110135][ T662] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 463.124630][ T662] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 463.169734][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.190927][T18034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3252'. [ 463.218841][ T9586] hsr_slave_0: left promiscuous mode [ 463.232613][ T9586] hsr_slave_1: left promiscuous mode [ 463.253477][ T4945] Bluetooth: hci3: command 0x0406 tx timeout [ 463.270398][ T9586] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 463.288491][ T9586] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 463.312381][ T9586] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 463.335387][ T9586] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 463.367371][ T9586] batman_adv: batadv0: Removing interface: dummy0 [ 463.402201][ T9586] dummy0: left allmulticast mode [ 463.520046][T18046] xt_policy: too many policy elements [ 463.571823][ T7172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.743521][ T35] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 463.790131][T18023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 464.238751][ T5290] 8021q: adding VLAN 0 to HW filter on device eth2 [ 464.565925][T18073] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3259'. [ 464.696483][T18076] xt_l2tp: wrong L2TP version: 0 [ 464.730194][T18076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3260'. [ 464.757915][ T9586] IPVS: stop unused estimator thread 0... [ 464.775835][T18076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3260'. [ 465.034394][T18087] syzkaller0: entered promiscuous mode [ 465.071938][T18087] syzkaller0: entered allmulticast mode [ 465.324387][T18111] netlink: 'syz.0.3268': attribute type 1 has an invalid length. [ 465.566319][T18118] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3270'. [ 465.599103][T18119] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 465.642942][T18119] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 465.682101][T18119] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 466.405752][T18158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3281'. [ 466.480893][T18152] syzkaller0: entered promiscuous mode [ 466.490637][T18152] syzkaller0: entered allmulticast mode [ 467.332134][ T24] net_ratelimit: 17 callbacks suppressed [ 467.332170][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.347025][ T3386] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 467.361820][ T3386] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 467.742277][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.751209][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.877749][ T35] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 467.893074][ T35] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 468.370761][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.378981][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.430587][ T35] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 468.920019][T18181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3286'. [ 468.969200][T18181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3286'. [ 469.059938][T17771] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 469.092047][T17771] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 469.120873][T17771] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 469.153729][T17771] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 469.171109][T17771] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 469.228131][T17771] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 469.350686][T17771] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 469.417134][T18207] Cannot find set identified by id 0 to match [ 469.424770][T17771] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 469.778650][T17771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.848398][T17771] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.904469][ T135] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.911745][ T135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.980848][ T9586] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.988086][ T9586] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.360156][T18242] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3298'. [ 470.552548][T18247] netlink: 'syz.0.3297': attribute type 12 has an invalid length. [ 471.269349][T18279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3305'. [ 471.323076][T18283] netlink: 'syz.3.3305': attribute type 10 has an invalid length. [ 471.344763][T18283] netlink: 396 bytes leftover after parsing attributes in process `syz.3.3305'. [ 471.602849][T18295] netlink: 'syz.2.3307': attribute type 1 has an invalid length. [ 471.846800][T18295] 8021q: adding VLAN 0 to HW filter on device bond1 [ 471.927652][T18285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3306'. [ 472.015859][T17771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.214468][ T4960] block nbd3: Possible stuck request ffff888027170000: control (read@0,1024B). Runtime 150 seconds [ 472.225946][ T4960] block nbd3: Possible stuck request ffff8880271701c0: control (read@1024,1024B). Runtime 150 seconds [ 472.237973][ T4960] block nbd3: Possible stuck request ffff888027170380: control (read@2048,1024B). Runtime 150 seconds [ 472.251035][ T4960] block nbd3: Possible stuck request ffff888027170540: control (read@3072,1024B). Runtime 150 seconds [ 472.325481][T18312] netlink: 'syz.1.3310': attribute type 142 has an invalid length. [ 472.382949][T18317] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3311'. [ 472.527611][ T7177] net_ratelimit: 32 callbacks suppressed [ 472.527631][ T7177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.548624][ T9588] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 472.563475][ T9588] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 472.823836][T18331] netlink: 'syz.1.3315': attribute type 10 has an invalid length. [ 472.880684][T18331] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.915191][T18331] bond0: (slave team0): Enslaving as an active interface with an up link [ 472.996379][T18340] xt_CT: You must specify a L4 protocol and not use inversions on it [ 473.036167][T18340] netlink: 404 bytes leftover after parsing attributes in process `syz.2.3317'. [ 473.149371][ T135] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 473.164187][ T135] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 473.567887][ T7177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.596950][T18362] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3323'. [ 473.636084][T17771] veth0_vlan: entered promiscuous mode [ 473.765781][T17771] veth1_vlan: entered promiscuous mode [ 473.807512][ T7172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.827636][ T6259] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 473.842755][ T6259] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 473.935722][T17771] veth0_macvtap: entered promiscuous mode [ 473.983922][T17771] veth1_macvtap: entered promiscuous mode [ 474.152066][T17771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 474.218812][T17771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 474.261141][ T6259] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.291524][ T6259] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.340493][ T6259] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.354563][ T6259] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.417552][ T1345] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 474.863083][T18413] IPVS: set_ctl: invalid protocol: 8 255.255.255.255:5 [ 475.243828][ T135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.285207][ T135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.314436][T18420] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3330'. [ 475.365784][T18420] netlink: 'syz.0.3330': attribute type 21 has an invalid length. [ 475.404357][ T135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.444619][ T135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.558774][T18441] xt_TPROXY: Can be used only with -p tcp or -p udp [ 475.660556][T18449] netlink: 'syz.0.3336': attribute type 58 has an invalid length. [ 475.681909][T18449] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3336'. [ 475.705913][T18443] netlink: 'syz.2.3335': attribute type 1 has an invalid length. [ 475.902058][T18453] netlink: 'syz.3.3337': attribute type 1 has an invalid length. [ 476.082597][T18453] 8021q: adding VLAN 0 to HW filter on device bond12 [ 476.140915][T18457] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3338'. [ 476.585777][T18486] netlink: 'syz.4.3344': attribute type 3 has an invalid length. [ 476.836358][T18494] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3346'. [ 476.881434][ T4945] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 476.894822][ T4945] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 476.909565][ T4945] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 476.923797][ T4945] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 476.931661][ T4945] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 476.977399][T18497] tipc: Started in network mode [ 477.002467][T18497] tipc: Node identity ce825343e911, cluster identity 4711 [ 477.040799][T18497] tipc: Enabled bearer , priority 0 [ 477.319093][T18505] syzkaller0: entered promiscuous mode [ 477.334732][T18505] syzkaller0: entered allmulticast mode [ 477.349523][T18505] tipc: Resetting bearer [ 477.406127][ T5631] syz_tun (unregistering): left allmulticast mode [ 477.534724][T18495] tipc: Resetting bearer [ 477.628492][T14333] net_ratelimit: 15 callbacks suppressed [ 477.628514][T14333] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 477.649004][T14333] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 477.727816][ T7179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.973434][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.200509][ T3386] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 478.215268][ T3386] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 478.738470][ T3386] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 478.752970][ T3386] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 478.768586][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.012217][ T4945] Bluetooth: hci0: command tx timeout [ 479.289867][ T3386] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 479.952063][T18495] tipc: Disabling bearer [ 479.979500][ T5734] tipc: Node number set to 663966531 [ 480.212884][T18556] ipvlan2: entered allmulticast mode [ 480.238751][T18556] batadv_slave_1: entered allmulticast mode [ 480.249695][T18556] batman_adv: batadv0: Adding interface: ipvlan2 [ 480.275427][T18556] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.366397][T18556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.420837][T18556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.462475][T18556] batman_adv: batadv0: Interface activated: ipvlan2 [ 480.505643][T18572] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3363'. [ 480.515545][T18559] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3357'. [ 480.631264][T18496] lo speed is unknown, defaulting to 1000 [ 480.644349][T18496] hsr0 speed is unknown, defaulting to 1000 [ 480.792490][T18579] x_tables: duplicate underflow at hook 4 [ 481.086785][ T4945] Bluetooth: hci0: command tx timeout [ 481.303245][T18589] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3370'. [ 481.695216][T18602] vlan2: entered allmulticast mode [ 481.704033][T18602] bond0: entered allmulticast mode [ 481.742374][T18602] bond_slave_0: entered allmulticast mode [ 481.757590][T18602] bond_slave_1: entered allmulticast mode [ 481.769170][T18602] team0: entered allmulticast mode [ 481.783057][T18602] team_slave_0: entered allmulticast mode [ 481.803069][T18602] team_slave_1: entered allmulticast mode [ 481.830866][T18602] dummy0: entered allmulticast mode [ 482.132439][T18614] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3378'. [ 482.149444][T18616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3377'. [ 482.229856][T18617] vlan1: entered allmulticast mode [ 482.235846][T18617] bond0: entered allmulticast mode [ 482.242000][T18617] bond_slave_0: entered allmulticast mode [ 482.248743][T18617] bond_slave_1: entered allmulticast mode [ 482.254677][T18617] team0: entered allmulticast mode [ 482.260350][T18617] team_slave_1: entered allmulticast mode [ 482.764066][T18633] vlan3: entered allmulticast mode [ 482.901215][T14333] net_ratelimit: 20 callbacks suppressed [ 482.901236][T14333] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 482.923901][T14333] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 482.939092][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.977601][ T7172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.014541][T18496] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.022307][T18496] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.030410][T18496] bridge_slave_0: entered allmulticast mode [ 483.039387][T18496] bridge_slave_0: entered promiscuous mode [ 483.049177][T18496] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.056516][T18496] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.064210][T18496] bridge_slave_1: entered allmulticast mode [ 483.073464][T18496] bridge_slave_1: entered promiscuous mode [ 483.137828][T18496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 483.153672][T18496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 483.168590][ T4945] Bluetooth: hci0: command tx timeout [ 483.239155][T18496] team0: Port device team_slave_0 added [ 483.248907][T18496] team0: Port device team_slave_1 added [ 483.292530][T18496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.301348][T18496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.331816][T18496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 483.345228][T18496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 483.352891][T18496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.381021][T18496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.453283][T18496] hsr_slave_0: entered promiscuous mode [ 483.468384][T18496] hsr_slave_1: entered promiscuous mode [ 483.475606][T18496] debugfs: 'hsr0' already exists in 'hsr' [ 483.481892][T18496] Cannot create hsr debugfs directory [ 483.497972][ T3386] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 483.512397][ T3386] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 483.967877][ T7179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.018731][T18496] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 484.030593][T18496] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 484.039199][T18496] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 484.054742][T18496] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 484.062496][ T3386] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 484.069747][T18496] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 484.076955][ T3386] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 484.103127][T18496] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 484.111943][T18496] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 484.122575][T18496] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 484.205461][T18496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.226174][T18496] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.241034][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.248244][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.263392][ T135] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.270526][ T135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 484.586916][ T3386] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 484.679014][T18496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.731095][T18496] veth0_vlan: entered promiscuous mode [ 484.743864][T18496] veth1_vlan: entered promiscuous mode [ 484.778640][T18496] veth0_macvtap: entered promiscuous mode [ 484.788601][T18496] veth1_macvtap: entered promiscuous mode [ 484.810579][T18496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 484.828374][T18496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.843950][ T135] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.854927][ T9588] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.865169][ T9588] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.875353][ T9588] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.979696][ T9588] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.994330][ T9588] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.029575][ T6269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.038251][ T6269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.246917][ T4945] Bluetooth: hci0: command tx timeout [ 488.127227][ T42] net_ratelimit: 18 callbacks suppressed [ 488.127243][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.154692][ T4995] udevd[4995]: worker [11998] /devices/virtual/block/nbd3 is taking a long time [ 488.167030][ T35] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 488.181574][ T35] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 488.208584][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.697228][ T35] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 488.712024][ T35] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 488.858257][ T6478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.167557][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.227374][ T6269] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 489.241862][ T6269] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 493.329257][ T42] net_ratelimit: 20 callbacks suppressed [ 493.329275][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.348136][ T6269] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 493.362625][ T6269] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 493.888804][ T3386] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 493.903590][ T3386] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 494.367407][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.427195][ T6269] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 494.441643][ T6269] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 494.927370][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.956913][ T135] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 498.527023][ T42] net_ratelimit: 17 callbacks suppressed [ 498.527041][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.541957][ T135] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 498.556537][ T135] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 499.077333][T14333] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 499.094018][T14333] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 499.099430][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.118948][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.567294][ T7177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.626867][ T135] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 499.641277][ T135] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 501.658831][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.289102][ T4960] block nbd3: Possible stuck request ffff888027170000: control (read@0,1024B). Runtime 180 seconds [ 502.300018][ T4960] block nbd3: Possible stuck request ffff8880271701c0: control (read@1024,1024B). Runtime 180 seconds [ 502.311803][ T4960] block nbd3: Possible stuck request ffff888027170380: control (read@2048,1024B). Runtime 180 seconds [ 502.323239][ T4960] block nbd3: Possible stuck request ffff888027170540: control (read@3072,1024B). Runtime 180 seconds [ 503.188559][ T4995] udevd[4995]: worker [11998] /devices/virtual/block/nbd3 timeout; kill it [ 503.198320][ T4995] udevd[4995]: seq 18395 '/devices/virtual/block/nbd3' killed [ 503.726876][ T42] net_ratelimit: 19 callbacks suppressed [ 503.726892][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.747367][ T35] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 503.761871][ T35] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 504.287444][T14333] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 504.302401][T14333] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 504.767751][ T7177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.826898][ T35] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 504.841506][ T35] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 505.246894][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.367331][ T6269] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 508.227553][T18672] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3386'. [ 508.257030][T18671] netlink: 'syz.4.3390': attribute type 1 has an invalid length. [ 508.275319][T18671] netlink: 'syz.4.3390': attribute type 11 has an invalid length. [ 508.303514][T18671] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3390'. [ 508.438363][T18689] netlink: 'syz.2.3391': attribute type 1 has an invalid length. [ 508.459597][T18689] netlink: 'syz.2.3391': attribute type 2 has an invalid length. [ 508.487795][T18691] netlink: 'syz.2.3391': attribute type 1 has an invalid length. [ 508.495914][T18691] netlink: 'syz.2.3391': attribute type 2 has an invalid length. [ 508.714878][T18696] netlink: 'syz.1.3393': attribute type 2 has an invalid length. [ 508.724634][T18700] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3394'. [ 508.926921][ T24] net_ratelimit: 17 callbacks suppressed [ 508.926941][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.956029][T14333] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 508.970829][T14333] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 509.018285][T18709] netlink: 'syz.4.3399': attribute type 27 has an invalid length. [ 509.061121][T18709] x_tables: duplicate underflow at hook 2 [ 509.061227][T18711] sctp: [Deprecated]: syz.1.3400 (pid 18711) Use of int in max_burst socket option. [ 509.061227][T18711] Use struct sctp_assoc_value instead [ 509.142501][T18713] Cannot find add_set index 0 as target [ 509.238658][T18721] IPv6: NLM_F_CREATE should be specified when creating new route [ 509.252937][T18721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3404'. [ 509.329006][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.558322][T14333] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 509.572805][T14333] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 509.593804][T18734] netlink: 'syz.3.3409': attribute type 5 has an invalid length. [ 509.697462][T18738] openvswitch: netlink: Key 6 has unexpected len 16 expected 2 [ 509.968346][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.074673][T18758] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3415'. [ 510.120205][T18758] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3415'. [ 510.144244][ T3386] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 510.158970][ T3386] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 510.218902][ T35] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.245747][T18758] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3415'. [ 510.257370][T18758] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3415'. [ 510.267165][ T6269] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.278078][ T6269] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.306511][ T6269] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.364986][T18770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3419'. [ 510.404566][T18770] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3419'. [ 510.552397][T18780] xt_hashlimit: invalid interval [ 512.847096][ T4945] Bluetooth: hci5: command 0x0c1a tx timeout [ 512.855131][T18789] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 512.862072][T18789] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 513.777827][T18789] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 513.785804][T18789] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 513.918058][T18789] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 513.930031][T18789] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 513.938494][T18789] CPU: 0 UID: 0 PID: 18789 Comm: syz.0.3428 Not tainted syzkaller #0 PREEMPT(full) [ 513.947901][T18789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 513.957998][T18789] RIP: 0010:klist_remove+0x156/0x340 [ 513.963342][T18789] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 2d 4b 92 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 0e 4b 92 f6 49 8b 44 24 58 48 89 44 24 08 [ 513.982985][T18789] RSP: 0018:ffffc90003457820 EFLAGS: 00010202 [ 513.989073][T18789] RAX: 000000000000000b RBX: ffff8880277d9ec0 RCX: 0000000000000000 [ 513.997089][T18789] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 514.005099][T18789] RBP: ffffc90003457920 R08: ffffffff90171403 R09: 1ffffffff202e280 [ 514.013123][T18789] R10: dffffc0000000000 R11: fffffbfff202e281 R12: 0000000000000000 [ 514.021141][T18789] R13: 1ffff1100b68d10c R14: ffff88805b468860 R15: dffffc0000000000 [ 514.029139][T18789] FS: 00007f73d43756c0(0000) GS:ffff888125290000(0000) knlGS:0000000000000000 [ 514.038092][T18789] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 514.044702][T18789] CR2: 00007f5eca0d9000 CR3: 0000000058484000 CR4: 00000000003526f0 [ 514.052696][T18789] Call Trace: [ 514.056006][T18789] [ 514.058959][T18789] ? __pfx_klist_remove+0x10/0x10 [ 514.064017][T18789] ? kobject_move+0x5de/0x720 [ 514.068726][T18789] ? __pfx_kobject_move+0x10/0x10 [ 514.073778][T18789] ? do_raw_spin_unlock+0xf5/0x210 [ 514.078927][T18789] ? get_device_parent+0x366/0x3a0 [ 514.084066][T18789] device_move+0x193/0x730 [ 514.088509][T18789] hci_conn_del_sysfs+0xb8/0x1a0 [ 514.093469][T18789] hci_conn_del+0xc36/0x1230 [ 514.098079][T18789] hci_conn_hash_flush+0x191/0x260 [ 514.103213][T18789] hci_dev_close_sync+0x821/0x10e0 [ 514.108351][T18789] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 514.113916][T18789] ? do_raw_spin_lock+0x12b/0x2f0 [ 514.118972][T18789] hci_dev_do_close+0x30/0xc0 [ 514.123668][T18789] hci_rfkill_set_block+0x1f4/0x290 [ 514.128894][T18789] ? __pfx_hci_rfkill_set_block+0x10/0x10 [ 514.134654][T18789] rfkill_set_block+0x1a4/0x4e0 [ 514.139546][T18789] rfkill_fop_write+0x461/0x5a0 [ 514.144432][T18789] ? apparmor_file_permission+0x1f4/0x300 [ 514.150264][T18789] ? __pfx_rfkill_fop_write+0x10/0x10 [ 514.155667][T18789] ? security_kernfs_init_security+0x210/0x270 [ 514.161841][T18789] ? rw_verify_area+0x255/0x4d0 [ 514.166730][T18789] ? __pfx_rfkill_fop_write+0x10/0x10 [ 514.172135][T18789] vfs_write+0x29a/0xb90 [ 514.176408][T18789] ? __pfx_vfs_write+0x10/0x10 [ 514.181200][T18789] ? __fget_files+0x2a/0x420 [ 514.185814][T18789] ? __fget_files+0x2a/0x420 [ 514.190432][T18789] ? __fget_files+0x3a0/0x420 [ 514.195142][T18789] ? __fget_files+0x2a/0x420 [ 514.199760][T18789] ksys_write+0x150/0x270 [ 514.204121][T18789] ? __pfx_ksys_write+0x10/0x10 [ 514.209003][T18789] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.215096][T18789] do_syscall_64+0x15f/0xf80 [ 514.219732][T18789] ? trace_irq_disable+0x3b/0x140 [ 514.224789][T18789] ? clear_bhb_loop+0x40/0x90 [ 514.229485][T18789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.235398][T18789] RIP: 0033:0x7f73d359cdd9 [ 514.239830][T18789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 514.259458][T18789] RSP: 002b:00007f73d4375028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 514.267896][T18789] RAX: ffffffffffffffda RBX: 00007f73d3815fa0 RCX: 00007f73d359cdd9 [ 514.276242][T18789] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 000000000000000a [ 514.284237][T18789] RBP: 00007f73d3632d69 R08: 0000000000000000 R09: 0000000000000000 [ 514.292234][T18789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 514.300221][T18789] R13: 00007f73d3816038 R14: 00007f73d3815fa0 R15: 00007ffcfb761ca8 [ 514.308227][T18789] [ 514.311313][T18789] Modules linked in: [ 514.315539][ T24] net_ratelimit: 19 callbacks suppressed [ 514.315561][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.317009][T18789] ---[ end trace 0000000000000000 ]--- [ 514.369499][ T9588] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 514.384716][ T9588] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 514.411849][T18789] RIP: 0010:klist_remove+0x156/0x340 [ 514.417611][T18789] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 2d 4b 92 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 0e 4b 92 f6 49 8b 44 24 58 48 89 44 24 08 [ 514.418395][ T6478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.456377][T18789] RSP: 0018:ffffc90003457820 EFLAGS: 00010202 [ 514.465181][T18789] RAX: 000000000000000b RBX: ffff8880277d9ec0 RCX: 0000000000000000 [ 514.475945][T18789] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 514.484767][T18789] RBP: ffffc90003457920 R08: ffffffff90171403 R09: 1ffffffff202e280 [ 514.493206][T18789] R10: dffffc0000000000 R11: fffffbfff202e281 R12: 0000000000000000 [ 514.538109][T18789] R13: 1ffff1100b68d10c R14: ffff88805b468860 R15: dffffc0000000000 [ 514.560768][T18789] FS: 00007f73d43756c0(0000) GS:ffff888125390000(0000) knlGS:0000000000000000 [ 514.584126][T18789] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 514.613793][T18789] CR2: 00007fa9a9f356d0 CR3: 0000000058484000 CR4: 00000000003526f0 [ 514.623322][T18789] Kernel panic - not syncing: Fatal exception [ 514.629610][T18789] Kernel Offset: disabled [ 514.633943][T18789] Rebooting in 86400 seconds..