last executing test programs: 1m10.849655824s ago: executing program 2 (id=293): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000000c0)="1a00000082000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000180)={0x4}, 0x1) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x1, 'netpci0\x00', {}, 0x8001}) 56.682937698s ago: executing program 2 (id=293): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000000c0)="1a00000082000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000180)={0x4}, 0x1) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x1, 'netpci0\x00', {}, 0x8001}) 31.188675153s ago: executing program 2 (id=293): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000000c0)="1a00000082000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000180)={0x4}, 0x1) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x1, 'netpci0\x00', {}, 0x8001}) 31.18863872s ago: executing program 2 (id=293): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000000c0)="1a00000082000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000180)={0x4}, 0x1) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x1, 'netpci0\x00', {}, 0x8001}) 23.484313176s ago: executing program 2 (id=293): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000000c0)="1a00000082000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000180)={0x4}, 0x1) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x1, 'netpci0\x00', {}, 0x8001}) 6.249014267s ago: executing program 2 (id=293): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000000c0)="1a00000082000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000180)={0x4}, 0x1) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x1, 'netpci0\x00', {}, 0x8001}) 2.411697753s ago: executing program 4 (id=1383): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r2, 0x0, 0x10, &(0x7f0000000000)="170000000200020000ffbe8c5ee17688a2003200010100000057fc5ad90200fb6a880000d6c9db0000db15d088bd8b7002300e00d9ce9bc7e28db3000200ff01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c805bbf9315033bf79ac2dfc061f15003901dee2000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f02d8e9e90539062a80e605007f71174ab498ff0b3e5a1b47b6df7b23ded2aa000000", 0xb8) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86ddfd0010000000400bb80060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0xffe) (async) syz_emit_ethernet(0x34, &(0x7f0000000080)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0xf9, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x12, 0x0, @opaque='\x00'/10}}}}}, 0x0) (async) recvfrom(r0, &(0x7f00000000c0)=""/10, 0xa, 0x0, 0x0, 0x0) 2.352132417s ago: executing program 1 (id=1385): r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x5, 0x12) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$netlink(0x10, 0x3, 0x6) (async) ioctl$int_in(r2, 0x5452, &(0x7f00000000c0)=0x5) (async) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5b}, {0x6, 0x11, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x800}, {0x6, 0x11, 0x4}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040004}, 0x10) (async) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0xb, @any, 0x7, 0x1}, 0xe) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@security={'security\x00', 0xe, 0x4, 0x390, 0xffffffff, 0xf8, 0xf8, 0x0, 0xffffffff, 0xffffffff, 0x2f8, 0x2f8, 0x2f8, 0xffffffff, 0x4, &(0x7f0000000280), {[{{@ip={@multicast1, @remote, 0x0, 0xffffffff, 'ip_vti0\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x4, 0x3, 0x10}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0x10, "fb23", 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x5, 0xb, [0x3b, 0x38, 0x32, 0x1b, 0x22, 0x1b, 0x2, 0x0, 0x18, 0x9, 0x6, 0x35, 0x18, 0x9, 0x3b, 0x2f], 0x2, 0x1, 0x3}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff000000, 'batadv_slave_0\x00', 'erspan0\x00', {}, {0xff}, 0x5c, 0x2, 0x59}, 0x0, 0x90, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x4, 0x4, 0x0, 0x3], 0x2}, {0xffffffffffffffff, [0x2, 0x7, 0x3, 0x0, 0x1], 0x4, 0x2}}}}, {{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x6, 0x5, 0xa, 0x5, 0x4, 0x5], 0x5, 0x1}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x2e}, [0xffffff00, 0xffffff00, 0xff000000, 0xff], 0x4e21, 0x4e24, 0x4e22, 0x4e24, 0x8, 0x8001, 0x2, 0x10000}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000740)={'ip6gre0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', 0x0, 0x4, 0x2, 0x13, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x3c}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x10, 0x0, 0x6}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000840)={'ip_vti0\x00', &(0x7f0000000780)={'tunl0\x00', r5, 0x80, 0x1, 0x1, 0x7, {{0x25, 0x4, 0x3, 0x2, 0x94, 0x65, 0x0, 0x2, 0x29, 0x0, @loopback, @multicast1, {[@noop, @timestamp={0x44, 0x8, 0xc9, 0x0, 0x2, [0x3]}, @timestamp_prespec={0x44, 0x24, 0x2c, 0x3, 0x8, [{@multicast1, 0x6}, {@rand_addr=0x64010101, 0x562}, {@empty, 0x1}, {@multicast1, 0x8}]}, @cipso={0x86, 0x20, 0x3, [{0x0, 0x5, "f83249"}, {0x6, 0x3, "e4"}, {0x2, 0x12, "8aa44942ceb6659a20d900848c5a1a05"}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x23, 0xcf, [@loopback, @multicast1, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x10}, @local, @private=0xa010100, @multicast2, @local]}, @end, @rr={0x7, 0xb, 0xc9, [@multicast1, @loopback]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000880)={'vxcan1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r7, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x30, 0xd, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}}, 0x45) (async) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000a00)=0x4, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a40), r1) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a80)={0xffffffffffffffff}, 0x4) (async) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c40)=@bpf_ext={0x1c, 0x1, &(0x7f0000000ac0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000000b00)='syzkaller\x00', 0x6, 0x10, &(0x7f0000000b40)=""/16, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000bc0)={0x3, 0x4, 0x5, 0x4}, 0x10, 0x240c0, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000c00)=[{0x4, 0x3, 0x8}, {0x4, 0x2, 0x2, 0xa}, {0x5, 0x3, 0x0, 0x3}, {0x3, 0x1, 0x10, 0xa}], 0x10, 0x7a5a4389}, 0x90) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000e00)={@cgroup, 0x1d, 0x0, 0x1000, &(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000dc0)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000e40)={@ifindex=r6, r9, 0x19, 0x1, r10, @prog_fd, r11}, 0x20) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r2, 0xc038943b, &(0x7f0000000f00)={0xe71d, 0x50, '\x00', 0x1, &(0x7f0000000e80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000f80)=@generic={&(0x7f0000000f40)='./file0\x00', 0x0, 0x10}, 0x18) (async) setsockopt$netlink_NETLINK_RX_RING(r8, 0x10e, 0x6, &(0x7f0000000fc0)={0x41f, 0x33, 0x5cb, 0x8}, 0x10) (async) setsockopt$MRT6_DONE(r2, 0x29, 0xc9, 0x0, 0x0) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001140)={0x1, &(0x7f0000001000)="06eb2b08f9a8c6f7515c9344d72f9df4a36b96c6629f1e9295a27947247fe974599d30fbd331b0de99ca0f792cb9ce3283e44442abbc3bd96f14c037e2f952880c228ef2a2cd5bac3a5f31318abde5f972c2faec286511ae6a25f0a1a60b41e3bb77e734b1b4155f109411fe4d59fc2d3f0737f4ee85a02aa0f09c7e56c6e25ea2e21acb5b02c1f8b7748a2b1178f1b0a8fb6b136883d0556acb9d", &(0x7f00000010c0)=""/65}, 0x20) socket$inet_sctp(0x2, 0x1, 0x84) 2.119306674s ago: executing program 1 (id=1388): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) close(0xffffffffffffffff) (async, rerun: 64) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4) (async) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) (async, rerun: 32) syz_emit_ethernet(0x112, &(0x7f0000000340)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x14, 0x4, 0x0, 0x0, 0x104, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x34, 0x2d, 0x3, 0x3, [{@loopback, 0x601}, {@local, 0x3}, {@empty, 0xfff}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@loopback, 0x3}]}, @ssrr={0x89, 0x7, 0x9e, [@broadcast]}]}}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x29, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, @loopback, @multicast2, {[@timestamp={0x44, 0x24, 0x2c, 0x0, 0x8, [0x4, 0x7, 0x1, 0x3, 0x1, 0x2, 0x7, 0x49]}, @cipso={0x86, 0x6a, 0xffffffffffffffff, [{0x2, 0x10, "07d697d72ada7f16db75f49a0a43"}, {0x0, 0x10, "500e9e06839f24561bf86b6d3703"}, {0x0, 0xf, "e787626a21607a5d2b7bb0b2a6"}, {0x4, 0x4, "ed79"}, {0x6, 0xc, "5ecf8504faa51f1007db"}, {0x6, 0xf, "2ec433e3ad3b507fc1a5f82ab6"}, {0x7, 0x2}, {0x7, 0xf, "05257b3bab6ae72f56ff0c5611"}, {0x7, 0x5, "4e13d0"}]}]}}, "00186371ae9b1c03"}}}}}, 0x0) (async, rerun: 32) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x38) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) (async) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) (async) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x8) 2.081600081s ago: executing program 3 (id=1389): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES64=0x0], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, ')'}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) 2.068014318s ago: executing program 4 (id=1390): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) (async) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1867c6870600000001016661cf641411a6f60018", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) close(r1) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x6, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x90) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x11, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4}, &(0x7f0000000280), &(0x7f0000000340)=r3}, 0x20) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)=r5}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000200), &(0x7f00000003c0)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfdea, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x2f) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x3, 0x8}, 0x48) close(r6) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) (async, rerun: 64) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0x5}}}, 0x24}}, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0xc, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETQUEUE(r11, 0x400454d9, &(0x7f0000000000)={'vlan0\x00', 0x600}) 1.963441796s ago: executing program 0 (id=1391): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000043df4a38000008000300", @ANYRES32=r8], 0x60}}, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="30b1129000008876d25fbfcf3a5383afb8cef48e4b45", @ANYRES16=r4, @ANYBLOB="010026bd7000fbdbdf2564000000080001004d00000008000300a72f5a56da097e44cc35a0315faed8679393063537af92227deea90d04c17c7387e1b37f0ba571f2835334d47bce10", @ANYRES32=r8, @ANYBLOB="0c009900010000004b000000"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4e481) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, r4, 0xe06, 0x70bd25, 0x6, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x1) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000b80)=@req3={0x585, 0x0, 0xfffffff8, 0x80000001, 0x0, 0x3, 0x2}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd600a96460014060000000000000020000000000000000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) r9 = socket$unix(0x1, 0x1, 0x0) recvmsg$unix(r9, &(0x7f0000000a40)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000980)=""/148, 0x94}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/229, 0xe5}, {&(0x7f0000000740)=""/219, 0xdb}, {&(0x7f0000000840)=""/15, 0xf}, {&(0x7f0000000880)=""/107, 0x6b}], 0x6, &(0x7f0000000c40)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}, 0x20) syz_emit_ethernet(0xa6, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd608a96460070060000000000000000000000000000000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="c0"], 0x0) sendmsg$NL80211_CMD_GET_STATION(r10, &(0x7f0000000d40)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40001}, 0xc, &(0x7f0000000d00)={&(0x7f00000004c0)={0x60, r4, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x6d3}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x3}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x7}, @NL80211_STA_WME_MAX_SP={0x5}]}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x29d}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x20010001) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x0, 0xc8, 0x8, 0x1c0, 0x5803, 0x2d0, 0x2e8, 0x2e8, 0x2d0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @empty, [], [], 'vlan0\x00', 'sit0\x00'}, 0x0, 0x198, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1b}}, @common=@ah={{0x30}}]}, @common=@unspec=@NFQUEUE3={0x28}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) 1.938311915s ago: executing program 1 (id=1392): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, 0x0, 0x0) listen(r3, 0x80080400) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) r5 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r5, 0x0) recvmmsg(r5, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) getsockopt$inet_int(r4, 0x10d, 0xf7, &(0x7f0000000000), &(0x7f0000000080)=0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c35ae23d8e4e3f2b5b1e68ec1f017af1026eebd532a25e40f266c3933b6555aba282ff9672b2a983fd44677a0d666677f2f4085e568a57e4c0c3db7d774aeb6c6bc17dd74dfba27f67f0000000000000000000000008086c50855f3b5b6e31bfcca1a7e4dc28e30644adb851a294b5e9abc136073c2b7cd0be08f631d9f5f3059bae8ba8f18ea9bb46e39e490f8"], 0x1c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000d40000000000000000000000000a20000000000a03000000000000000000010000000900010073797a3000000000bc000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000009000038008000240000000007c00038014000100626f6e64300000000000000000000000140001006970766c616e31000000000000000000140001006970766c616e300000000000000000001400010073697430000000000000fbffffffffffffff0100776c616e3000000000000000000000001400010067726530000000000000000000000400080001"], 0x4b0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x21}}]}, 0x2c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'}) (async) socket$inet6(0xa, 0x6, 0x0) (async) bind$inet6(r3, 0x0, 0x0) (async) listen(r3, 0x80080400) (async) socket$inet_dccp(0x2, 0x6, 0x0) (async) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) (async) socket$inet(0x2, 0x5, 0x0) (async) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) (async) shutdown(r5, 0x0) (async) recvmmsg(r5, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) (async) getsockopt$inet_int(r4, 0x10d, 0xf7, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c35ae23d8e4e3f2b5b1e68ec1f017af1026eebd532a25e40f266c3933b6555aba282ff9672b2a983fd44677a0d666677f2f4085e568a57e4c0c3db7d774aeb6c6bc17dd74dfba27f67f0000000000000000000000008086c50855f3b5b6e31bfcca1a7e4dc28e30644adb851a294b5e9abc136073c2b7cd0be08f631d9f5f3059bae8ba8f18ea9bb46e39e490f8"], 0x1c}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000d40000000000000000000000000a20000000000a03000000000000000000010000000900010073797a3000000000bc000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000009000038008000240000000007c00038014000100626f6e64300000000000000000000000140001006970766c616e31000000000000000000140001006970766c616e300000000000000000001400010073697430000000000000fbffffffffffffff0100776c616e3000000000000000000000001400010067726530000000000000000000000400080001"], 0x4b0}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x21}}]}, 0x2c}}, 0x0) (async) 1.887742391s ago: executing program 4 (id=1393): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x24, r4, 0x0, 0xffffffbb, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x400}]}, 0x24}}, 0x20010000) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}}}, 0x24}}, 0x0) r7 = accept4$nfc_llcp(r0, &(0x7f0000000140), &(0x7f00000001c0)=0x60, 0x80000) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r8, 0x8b2a, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010005f3f7700050000000000000000008642b52b4a8d724286b93e65d97825a574997563bca1e8e0175d050be42259baf6f7505936bf078a64", @ANYRES32=0x0, @ANYBLOB="fd00000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 1.791543093s ago: executing program 3 (id=1394): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r2) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB=' \x00\x00\b', @ANYRES16=r3, @ANYBLOB="01000000000000000000310000000a0001007770616e31000000"], 0x20}}, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r5, &(0x7f0000000600)={&(0x7f0000000000)=@in={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000300)="87", 0x1}], 0x1, &(0x7f0000000500)=[@init={0x18, 0x84, 0x0, {0x0, 0x0, 0x0, 0xfff8}}, @dstaddrv6={0x20, 0x84, 0x8, @local}], 0x38}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x31}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000cf73174021e26a6900"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x43400) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000180)=0x8) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000009c0)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, {[{{@ip, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@ip, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@ip, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) socket$inet_tcp(0x2, 0x1, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="000100001000010800"/20, @ANYRES32, @ANYBLOB="0000000000000000e00016801c00018018000c80140001"], 0x100}}, 0x0) r9 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r9, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet6(r9, &(0x7f0000000f80)={0xa, 0x0, 0x0, @private0}, 0x1c) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="18000000200015"], 0x18}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x24044001, &(0x7f0000000140)={0x11, 0x888e, r11, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14) socket$kcm(0x10, 0x3, 0x10) 1.233326889s ago: executing program 1 (id=1395): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='dctcp\x00', 0x6) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000000)=0x4, 0x4) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f00000007c0), 0x4) close(r1) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x96, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6010104000600601fe80007acef3566881d30a00ad703df679be000020000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="84c200009078fd5f220503c0ab0303001e0410000402000a8bfbd54ae56dd076080a0000000000000000040213127232407c80067615774fdbb46eb86cc8000a111fad2ea7434823fe09f989b43eb61a1a000000"], 0x0) 1.210149975s ago: executing program 0 (id=1396): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000004c0)={0x184, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x10, 0x0, 0x1, [@generic="25b57e35619bf282cfcd8fba0cb7f2934efacde0a223b473fe77f3e5ba760d3793b2f943b7528ea34883bc4a506cf756740574b89d396af9b59638700500000005006f88d6e1db9b2b"]}, @nested={0x11e, 0x6, 0x0, 0x1, [@typed={0xf1, 0x12b, 0x0, 0x0, @binary="8eab44a5159d834f7a577417b5091d0aac85ef225fb8e3c8fdd2f87bc9333944af4d958747a97f5dfa8f3a0df989a8f4cfcc8a0b0c74808d8ddfb58a24ace32cd6545f956216b8471f880e80f1f26bdcc7e4a4205744b9ceb87f7e8ba79cf7a294a9009fb421d24d53c0707e155e078a7839c40f0105a02b9c169f981fa3c96661f8579e1edb7b3b4222e84bfc269b9600d7e7e52d0874b155d588b935b48ae618a36ca423735f466467d01823ab53aff4cffb81a84735653bf5e2656f1c5db992060d7766b7aac5fffd3d2aea3579c8074e0f8681f4f8192dcda190a364823142539c7ad525134d072c0655df"}, @generic="26c1e5e4409b7b2f21eaecd84205d99f8ad8c8696cd5d3eed9ad9a6c845fff292724b9ce7c1b"]}]}, 0x184}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x18, 0x35}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd0c}, 0x64) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x18, 0x35}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd0c}, 0x64) 1.139745205s ago: executing program 3 (id=1397): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x56, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0xa, 0x5, 0xa, 0x0, @local}]}}}}}}}}, 0x0) 1.036932283s ago: executing program 0 (id=1398): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804aff03020006d758e60803dc", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xbb}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'geneve1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b050600f4ff020006004788aa96a13bb1000011000088ca1a00", 0x1001a, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 934.256177ms ago: executing program 4 (id=1399): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x5c, 0x10, 0x44b, 0x0, 0x25dfdbff, {0x7a}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}, @IFLA_GRE_LOCAL={0x8, 0x6, @empty}, @IFLA_GRE_OKEY={0x8, 0x5, 0x3}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xae979}, @IFLA_GRE_LOCAL={0x8, 0x6, @remote}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x5c}}, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f91424fc60110207000d000200063582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r4) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r4) r7 = socket$inet6(0xa, 0x3, 0x81) ioctl$sock_inet6_udp_SIOCOUTQ(r7, 0x5411, &(0x7f0000000000)) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e24, 0x1, @private1, 0x699}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000069b20d636cfe920185efef82b83fb8162db5859cd609693dc812a30304a647814222e7ed57e662a28b", @ANYRES16=r6, @ANYBLOB="01002bbd7000000000001e000000"], 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x0) sendmsg$NFC_CMD_GET_SE(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r5, 0x8, 0x70bd2d, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x74, r3, 0x1, 0x3, 0x25dffbfd, {}, [@NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008014}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r9) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x5c, 0x10, 0x44b, 0x0, 0x25dfdbff, {0x7a}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}, @IFLA_GRE_LOCAL={0x8, 0x6, @empty}, @IFLA_GRE_OKEY={0x8, 0x5, 0x3}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xae979}, @IFLA_GRE_LOCAL={0x8, 0x6, @remote}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x5c}}, 0x0) (async) socket$kcm(0x10, 0x3, 0x10) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f91424fc60110207000d000200063582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NFC_CMD_GET_TARGET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r4) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r4) (async) socket$inet6(0xa, 0x3, 0x81) (async) ioctl$sock_inet6_udp_SIOCOUTQ(r7, 0x5411, &(0x7f0000000000)) (async) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e24, 0x1, @private1, 0x699}, 0x1c) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x0) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000069b20d636cfe920185efef82b83fb8162db5859cd609693dc812a30304a647814222e7ed57e662a28b", @ANYRES16=r6, @ANYBLOB="01002bbd7000000000001e000000"], 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x0) (async) sendmsg$NFC_CMD_GET_SE(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r5, 0x8, 0x70bd2d, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x74, r3, 0x1, 0x3, 0x25dffbfd, {}, [@NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008014}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r9) (async) 916.648265ms ago: executing program 3 (id=1400): r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@hci, &(0x7f0000000080)=0x80, 0x80c00) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, 0x5, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.events\x00', 0x0, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0, 0x8a, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x6d, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000680)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x60, r3, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x9}, @ETHTOOL_A_EEE_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x4011) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000006c0)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000700)={"e55dc1b689ef9c04a3bc100338726881", 0x0, 0x0, {0x4, 0x200}, {0x1, 0x14eb}, 0x4, [0x9, 0x1, 0xffffffff, 0x7fffffffffffffff, 0xe359, 0x7000000000, 0x0, 0x10001, 0x8, 0x5f8178b8, 0x200, 0x10, 0x2, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000800)={"0ff838df9886c3dd1d974d7f23cfc579", r5, r6, {0x0, 0x9}, {0x8001, 0xc16}, 0xc000000, [0xf0, 0x401, 0x36, 0x80000000, 0x3, 0x18, 0x5, 0x3, 0x0, 0x101, 0x8, 0xdf95, 0xfffffffffffffff1, 0xf11f, 0x400, 0x3]}) r7 = openat$cgroup_ro(r1, &(0x7f0000000900)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), r0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000980)={"2bc8f0b51723275db2ad47837117df22", r6, r5, {0x4, 0xfd735ebb}, {0x5, 0x4}, 0x2, [0x8, 0x1, 0x3, 0x38, 0xac, 0x8, 0x23f, 0x6, 0x7e3, 0x1, 0x7, 0x4, 0x0, 0x5, 0x101, 0x2]}) ioctl$PPPIOCCONNECT(r7, 0x4004743a, &(0x7f0000000a80)=0x2) bind$inet6(0xffffffffffffffff, &(0x7f0000000ac0)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000b80)={'ip6tnl0\x00', &(0x7f0000000b00)={'ip6tnl0\x00', r4, 0x29, 0x3, 0x2c, 0x101, 0x42, @local, @ipv4={'\x00', '\xff\xff', @empty}, 0x10, 0x8, 0x81, 0x80}}) bind$inet6(r0, &(0x7f0000000bc0)={0xa, 0x4e21, 0x7abf, @rand_addr=' \x01\x00', 0x44}, 0x1c) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000c00)={0x0, @in={{0x2, 0x4e24, @private=0xa010102}}, 0xb, 0x1fc4}, &(0x7f0000000cc0)=0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000000d00)={r9, @in={{0x2, 0x4e20, @private=0xa010100}}, 0xf801, 0xe}, 0x90) r10 = openat$cgroup_ro(r1, &(0x7f0000000dc0)='freezer.self_freezing\x00', 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000e00), &(0x7f0000000e40)=0x14) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f0000000f80)={0x3, 0x4, 0xfb, &(0x7f0000000e80)=""/251}) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r11, 0x8982, &(0x7f0000000fc0)={0x7, 'bond_slave_1\x00', {0x2}, 0x6}) bind$inet6(r0, &(0x7f0000001000)={0xa, 0x4e21, 0x6, @remote, 0x5}, 0x1c) sendmsg$IPCTNL_MSG_EXP_GET(r10, &(0x7f0000001200)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000011c0)={&(0x7f0000001080)={0x110, 0x1, 0x2, 0x200, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASTER={0x38, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xa7}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz0\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x4}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x5}, @CTA_EXPECT_HELP_NAME={0xa, 0x6, 'Q.931\x00'}, @CTA_EXPECT_MASK={0xc, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_TUPLE={0x80, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x31}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x2004c844}, 0x410c1) r12 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r12, 0x11b, 0x6, &(0x7f0000001240)=0x10, 0x4) 687.833208ms ago: executing program 0 (id=1401): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000def7ab5501c85c578b2aa105fa08909191003f8708a0063cc49a4aa484e55056ec1c007ba8d1094bdb0dd81f92f790ad383f7be14b7c1a54906317"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000def7ab5501c85c578b2aa105fa08909191003f8708a0063cc49a4aa484e55056ec1c007ba8d1094bdb0dd81f92f790ad383f7be14b7c1a54906317"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x1) (async) r2 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0) r3 = socket$inet(0x2, 0xa, 0x59d) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc000000850000000800000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc000000850000000800000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000001ba100de0000000871123b00000000009500000700cd7c47cccb5991ae36e07b852082e05544036e5b4da153e82571297ff2d8331522b7e5a0e30ba2184091821be2c8a7930bccb810150d8c900300e55d1aa7c79bb0cddf0db4c1470d92433342f7eaad0fb4f8d8cf89664ce5e58e27887dfefb30f356e1bcfb2489b082383218f5b6cd90b73299d2ea6d0298dfc360b5f1871386776ae83e69f18d4905d37196cfb7870c33b40024d48eb2e43f6f7bbcdcda4e0362ea89da1691de120f408e2173b97fc13a"], &(0x7f00000005c0)='syzkaller\x00', 0xff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000001ba100de0000000871123b00000000009500000700cd7c47cccb5991ae36e07b852082e05544036e5b4da153e82571297ff2d8331522b7e5a0e30ba2184091821be2c8a7930bccb810150d8c900300e55d1aa7c79bb0cddf0db4c1470d92433342f7eaad0fb4f8d8cf89664ce5e58e27887dfefb30f356e1bcfb2489b082383218f5b6cd90b73299d2ea6d0298dfc360b5f1871386776ae83e69f18d4905d37196cfb7870c33b40024d48eb2e43f6f7bbcdcda4e0362ea89da1691de120f408e2173b97fc13a"], &(0x7f00000005c0)='syzkaller\x00', 0xff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRES8=r2, @ANYBLOB="17a54ccb7cf4f8e9c2a7c58dd48b2456cf035323921d1926ee6993e7af0a1cf2299448f1ae3c5ef9a7c588cb1ed2c2f060ce34016d0b0e864aa632d319b857dad87de1da6a8ebe552bbb208f97a9459e3125c331ee0dfef8fc907e03f4809b7496ee63a9a072f849eee1bcd1ad0f8cea56ad3d9926eda0dd70f21d9113f75a0e431be71f1f4d6a27af5d1e1a797b8ac55a0a0706b9c3dcdab111671fa92bcabb3f2bc299e17e8e7d1f1f04bb2d", @ANYRESOCT=r4, @ANYRESHEX=r0], 0x58}}, 0x0) bind$unix(r6, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) getpeername$unix(r5, 0x0, &(0x7f0000000240)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00'}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00'}, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x7ff}, 0x1c) (async) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x7ff}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32, @ANYBLOB="b10000000080fd00280012000c00010076657468"], 0x48}}, 0x0) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000300), 0xc, &(0x7f0000000340)={&(0x7f0000001b80)=ANY=[@ANYBLOB="10100000530400082dbd7000fbdbdf25d0d9b5a98c5473fc33189a06e150fe5932686c5281769016b5c6a8ea7b0cc9ca02abdd94a69ec4eefb471728da6453eb8501aaf3d35d8f7a659a4b90c8adadd1b02ca9e020df3eaec193f6b0925378401f7c65e66999b8afc48decabfa496ce022dafaa0e9f2db7078165e27a8dd5cb35ac9e8dd869fec96d95a5465814e88d93d2d6aa15cb4a498ab327f9e8e50db9f28ea3fa6772f166a4c33da756011a55566c08b5b863ab70400321f100ce5cba4caaf3fbbf2235143837a4940fe330358bb4cb40a114ca7dd2863eb15a68e4ba464075b78ce0d0db961c8aba0f4fa700b56d9e45fe53e6faaad1170b89c006e9da36b1dde68243acbcb3bd3b1f7f486140c558e789c249b2b38c58ca0317b8d5ab36f1d7d4d8b23e6a6108ba0dfd2954e76a83f9bc146259716a5f88557e1e93cc1fd2748dd260de59cc62e4edc3450ae23df7030430dbc86a3689ca91b2c777c2f0b4ea9bc4c3ec98fcda244cc755414019d67e5a1bf9ae3849df3b9859d21819f8c33eeb2b4bd377a55aab6718aec8a7a176023465f742e22a1f3aa2d7cb6a47b1fa4cc9c04be6deabf99ab34a5ba6834cf862f54a40bd391fd2514034e95d8745ae130906db6e2bb5b7de4bd5c7fc309096a6afaa85acaeb53282d9fde4339393cd86099073efd964628bb76f3291074bb32a6b5db684b96048c44d714850bdb6f8e0755fff028385f6d5fdd586a372a9233cd09b423007358d6a18ac15ac1f36b9649b9041a918ffb581ec6f2306974c6781d3ecec1ff4da30778ff7b478808671eb8b046349dd4a5c7220ad9fb5eec7db495beec484e5dace77291e9dafb80deff6afd01ac81d5d2713d3c07fc4756e4b4dafd2f4971e229d48495cbcf867c6df0e85c31d64faa2d886fc64f68232d7c20d98c77a3b87e917e851bc476728b250b3480d5d9d9c96d32bc58db4e67d124ffc4acdbb37f01e16f2cffade5d9e59ab6f0c80c54cf617ea91f5e702eb7b26efbcb236bdd2ef8198325c2190fda8cf2e7f10ae73f34243fb8aa7c27b88066a3dd34153ea0ea3016e4b60b529252fbb461aad5cc46b57e707aed557d69eccc67ca14410d04f15b58707944a9fd35e66a4e25f15bf8a67bbc98d5d48e19150ea876a89660e143f47b11fead12969471d03e462a4c8823c8f943fb7370879d62edc603f71ff1e1ae455e642379769fc90a5c1cbaf9b71389315edf6718fde6510e579c8e992ce5476273a2b9c962afb7746202662116f0816dc9b3562a19462ebc09b22f81c8ecf5a2b2df51af8c292155c5fe009a5d3f7eade05ab96b739952fc564f423c5c7c4265174de8cf577d721fcdbc11eaa4424da3253ca254c1e6764c8057b063f0d86d54372ebd7ff2cd44e65cae7fe0a25784a3d0f4b0aea389f1ec152d517e1561d618eae62732cc349f0b707a39d3ac8aa9cac2185bc5bac72181e3b54ee19fd7b2a3857d3beb55dd47ae985b81f7f0bf4dd83c2dd5c46c063f51d449ce4c25e3faa4ea37b418c75252e70810b0d45e78891d3687f1d6220b4fa376f42193971e28543d1a0ff87c630df0f41c03e7482a411ba43cbc8eb1a131fcd766d1def92a6b60d2e9a0c1daf052e85810a1a92bbce09f813a94e933d6762f92a0d12721639389e5c92f9db322ad4d74b9f8631e9d92bdc5bdb84d0e79a7d5ea83ea48e8bbec662072439367f47851665350efbe324fb3a35355e417ae6227facbec5a5c866c2128ba0771da3e546635dc8986b29a06f5c4fe7e25a31f4a64c0e925229821e90228ebb926212faffd2195032a58decf09d442c175999e589fd01c56ec53ad6b19f7c2c5409f9f62d872acc2a2b100555bc3e3ed69a3084c4279bbc65f26e8d8d0fdfe46e59ef9f82643de300d814a23b34e665f6d982ef6301c1e4f50be8f8e6dd342da84281dbfb14d4cc16848168fa241939779e549cad805362a07d9a382b195e9e5b9c3980b8022c9c2ca8575e70435a777bad7e898c990ee7082ec2037f19d2e4c2b7ea4a7b576bded5a4be95cd6855939b63b150f74506bd9e944cde2f021e8362fecd78303f2a47ca15b72ec4b46878a417ab802cfeef5ed7dd40594c2565d1db894cf23c42960ed024bdef436d57ee521b809fa5d18645e5173a83db8d416ae0a4fc4740f63c083826216ceca5de2572dc0732b054d63d260a79b44e657bd1219f30cbd265be107fa2fa05191559a16872715ece22f220fb37b1e558d8a8062df37e7eea9f0f99b69b7ab8ca8c5aeadea6f90e50e54945d456e58630d9975982ca1383966aa55f1fbdb685951862f07944c4a9fa3669c2e603ffbba141f7c7eed562cf76233872e1ac6267bbfde6bae52c002e9e0c9f016e8ad7f19d13beabf3e0c29d0a1da40c3cffb753d6e798f056f36ce481daa98508579733d9af09551b619480604905453211385e8872cde77e7d01ed45a6ac48276ccc7d2be34e6496532cda05be08f9e1839b4a416fceb46518f0afeb565fb880f66de68daff051b994365566e1711c87cef056503768d63bc83f69a5f934d086c3d4e7dee3da175be2138c491599d529092f74ee73aaca22ac75633b8f2483c64819cc2794c5d0cf1c57b7c22bfb9a9c24e8114198b08a605fe824caf92151b338aa1adb5947fd4ce191e8e07a358bfb5243e6137505aeb32caf9d70983004244a9478151134b6fa734ae22114f283edf6095567df70de621f6a26f711dfae655039ff779bd25504d4bb9292dbefafd9732d13268389b57586d035aecbf2991825e8ae311b053132e8df57f966a6b00999b08157f2d880e37ffe3210c3aba5b2cc496377d7111973b80dc9ef6242c8e08ebb4cc0866aba0204dcb96314a51128b3971a641454916c5f636c074725355d3f8c2b4ed3339bb57af53d9a7daf0fa0c49d1f586ecadbc509307fa8c0410ef64de2999c376c8e2f0772408b387461b269627b9a445576436f9eb1b5d18e04a874275d297f8327fc4fabfd994861d0b1c6a8b3ae92f3913f5c97392af6f16987d4a596c0b97ebac94414523db6a76b867506824b8f46273de3f881f33eb8afb72e5fad8d7eb29d397bc219152345edcbafeb523e1fe5aec1e08e54b5f6ab9639e008f48bc276b10c0dd30c77ec21b406cef95deccded1c7f891a7690442b1256ceab8db6940b8e85f782c99e53298cb3f94561d34fcab766463f646549369d42253405515e91f64583d69bc68e73a143b87058607f226eaad4a1d6d70710e200d0176df20d04ab84c933e546a0dc3d8ce46365da58285efd5a0b55769fb2d110e923259226463958d6e676264518786bc2cb1e8cda9bf2d14bd187fe842265f55db3a3db6908ba8f341f8a08058a0efb166aa4fd29c13cbc229502ef1a64e99fa21cf8fb17693f697ec64d225fc7882d6ccc748a9ac0caacdcc06d77d79bd074a5e9f505f65968d3b347340127c28ee7d0ea8742534f71a98123843500cdd212a3c12cfaeeaa55feba05594de7586ecee40ad44dc3bfb392ade6b386ad681d164aa51cd2f27c90392f169b1ec0584f6ceb36c09efb5b05f1d0e9b3ee80e70782cd5ebd31442e2cd6c07d268644e7abed8c24ab9123b3a6caf1167977b62e4d2470dba6dbea3497e58b0a40a2c9a02907f97e4878f74e478454212d4bed50d5c74d75cb68a2e90bcefb9c1c19124575ad6a4c9b0ca33fc9e156a0d5e8690df8f7270f8ba4f794ae07ae05349ca3954b198c6827b82ffa6519e2a016d13d4ae74e8741a98830b586b7a1602f808e2a05be3cc16567b5e33e3899ee6f1d635ecdc6100658bbe718ffd21f2d4ba5ec394e39d71184495b6c9cd87274fd058f2c6af31f2e03f6c57b3bb1558eccdc96d17f98bb676fbffe8fd9b295e320404f40e043747acb9dbc8e8907b6f0247a2e18fe921cdcf09c1929ba8431a119c9c7701f7dbc98c43f51988471b3e9fee7247ea2b76e2f8ccd26e2e01d6515332d21db218be670a07e17d4bfa4ae0d8e55997a251c1dceb874c8f6a420fff1aa94cdebf6f7b37724ec8475c44f172dbf80757a04df1caf491b236a4f520e5ff1655fbf97aad16f9df99ea9754dc7f277545c1a51b1777f600ac7564f82b984dc4bbd85a62b20ea5a24ccdb8f3e4dd7e6c7ad6ac7dba1ed1c01a08fb2e0c306d6cf436f4aeed152538bbdff3c152f1004b425dbca80912e933357e9ea4ba3972bdfc8423e9bfd7afcfd4215fbd0e7fc7d029f9e17815dc42b3dc802376e56687dd731806111a5b45277192de95878d3158017c76e4d0ff8f5566e872b65d81467fc05fe8d948c11d2e6e581fd7dcb65a2319c4667e05833eb177ed33215a5481effa4f68156788b1a7b778ce1aa12be532a7590aa1586cace742ddb775d8b61843bcdb6807fb13aa1bae1593fd3478b007afd1d48e22e741610378a679528db0c40778cfcd22dc9e09d3950310fdf34e6464cfb9d13cf7d00c1ad35747654416a3d82a93ec28d1e5b4a3f6f3bca9cfa37a5fbe68d9f9979635163146fe35f7b23d418733205416d45beeabc4eae7cdf2fe914b90ca53b7c6f06cb87e082c5f4f87dc21ec2e1801cc38ad7f5e19840e833cf75136bbb0415331ce7a72fde710eddaa4d86ec9ec3074c5be35ec9d8ce75e90bf1473eadd31b2c186a57568336e7e088eed59d8e5368a4ec6f5e594a8313ba5435443864b6005b3e53825a6fe2c87b315e0749771e6c3aa092ba9497a46224b5c1149f4cbde84b190b413f779d42fea26b65d41e8052587b02a6d32e4dbfdba244bc48ad4cb1c6cad49bdd61745154d7fb1c8b057ae2a377a8cbfc2b8f17c220bf2a345af1ba970770196d9625125208117e8783947ffb18a65cea2273e2a6f3a7b7b55c9145932440e3803bbc379ef581e2de4116ce55e7d7275377011f0b994e2d524eb49a7879192a1e4d0e7e347fa8ac53ee04c965fdb040c5a8753d59448813d03a60f0279ad117889b2d1d23e1451b3e9ca55e3a0ff876d57db667c67b1515528e8bdf18fcdb963f8cdfa5452c6b4c361ff036a6da07966c85934b9c1654b9562eace6abfcc659a9fce1aef3829663e035dfa2fd9d544f63426c5fdb1adf7588a73b399a02b2ca28eaf012496646223634f1005f6436e4a9b85aa2c30669d9a2d41785a8b7023e0cab42b5bbe1a0d250c4bf2fa8bc4cc209a8d72692e12e52fce349660a224aead19173ae0777274070ace61c261e9461b38054783cd7a8bb841e4e52f418e41dba7583f81e64ba3827768732f0747d70b6c7c6ccb28c02dad4fcb52cee9d624ecc7c520d5f83163aff70189527a1c95a39ed71e4b4816b35c0236b059b033334b729f9ef6aebedb6d65d58cc3a56fa1cd2159554c32fd7d2aad80618bfad14585a34f8da3beefe472aa3fbd19df3a92a44bc5bff9e59e577e1618c5f3d7251f829327a9bb95e35279ad64b706173f2b7e1eae5157e68a6021ee44b12cfe544842de4513a0a2891bc045bae87958d517ca2f760e91e4aad84d009501d28b9bb9d67e0904b2bb1dbf757f63ccc7218155b789fcf0d09e135e93706d50a5dfc4ea731ec715267f0e867da0b4f84069cecdf828603a853c89bb68d3e852125215fc3d940c3432a983d7cca1460a6ddf6cfb74c08256faa6310f2d564285dfdd5105ae22b291b94ad988dd05fef689497596e6a5b84243e1ebd5a95f13abfaca7cb36f05effd3fcc5fff2c954a3562e31501d572b1c90d31293a30367a2ebe07b3a7a489e5d344a4512a613b1965bf086d467df5b5404737a0c4095df3e744ab72dc767432a907f37064955f63af25cedb327a09e6fd3e"], 0x1010}, 0x1, 0x0, 0x0, 0x4000}, 0x0) listen(0xffffffffffffffff, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) accept4$ax25(0xffffffffffffffff, &(0x7f0000000680)={{0x3, @netrom}, [@bcast, @remote, @rose, @rose, @bcast, @remote, @remote, @netrom]}, &(0x7f0000000580)=0x48, 0x800) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB='\x00'], &(0x7f0000001640)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x4e, &(0x7f0000000800)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08029bf6837c6a33b91dd325edca66fb669cc2348b8bbf518ceac49a2a8fb633ee5e0345bd9669eb101f0000ac4a5f5d9294fd2b1a4bd99063e95170c64d3d6084b7492b5730cbdeea727eba02944b7e210643f137afea94543000fea78685858e09e8ee99715b98537ad707a200c52dcdc85ad4c19fd1ec328374a4bc1c0239d39914dec459fe8ff39c10557d8f651558dbed9a94dd"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @multicast1}, 0xc) 606.699603ms ago: executing program 0 (id=1402): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) (async, rerun: 32) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async, rerun: 32) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000440)={"27efd37ead9846eb5ba758abcbd3bb7c", 0x0, 0x0, {0x6, 0xfffff07b}, {0x3, 0xd07a}, 0xb6edead, [0x100000001, 0x2, 0x7, 0x80000001, 0x0, 0x58a3, 0x1, 0x6, 0x0, 0x4, 0x1, 0x0, 0x3, 0x0, 0x3, 0x4]}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000001100)={{r0}, r2, 0x2c, @unused=[0x8, 0x4, 0x7, 0x8000000000000001], @subvolid=0x6}) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x80}, [@FRA_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x30}}, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x60, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_HE_BSS_COLOR={0xc, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}]}, 0x60}}, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x4000040) (rerun: 64) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1000}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5195c342}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x4010) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000002c0)={0x0, 0xffffff01}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000005c0)={r9, 0x70, &(0x7f0000000540)=[@in6={0xa, 0x4e23, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2c73f594}, @in6={0xa, 0x4e21, 0x3, @private1, 0x8}, @in6={0xa, 0x4e20, 0xd, @rand_addr=' \x01\x00', 0x7}, @in6={0xa, 0x4e21, 0x80, @mcast1, 0xfffffffe}]}, &(0x7f0000000600)=0x10) sendmsg$NFT_MSG_GETFLOWTABLE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x2c, 0x17, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}}, 0x0) (async) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r4, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x6, 0xe}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x8010) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x3c}}, 0x0) 469.753029ms ago: executing program 3 (id=1403): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) r2 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000180)={'icmp6\x00'}, &(0x7f0000000200)=0x1e) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="b91b0000", @ANYRES16=r1, @ANYBLOB="010000000000000000001200000008000300", @ANYRES32, @ANYBLOB="0a00060008021100000100000800a400020000000500c2003e000000"], 0x38}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r4) socket$packet(0x11, 0x3, 0x300) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000100000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf0007010022be00f8ffffffbfa400000000f7a53f00009d749aa30239a79600000800000018230000f55d12ba7182e679897ea6c6f0d5b32fbc1de7e3478f7eb06f528c98a3af1c8795a7327b1e3adcca41ec302ac8984a33402070e2836fdae12ed4fa8b51f284fdce08d31aa38ae0ae3880299a1fe1be91111b192870d7197158d507a60d6a9704ba46f0243cc43e2d"], 0x0, 0xffff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0x0, 0xffffffffffffffff, 0x0, 0x144, &(0x7f0000000a00)='/proc/sys/net/ipv4/vs/sync_qlen_Vax\x00\x7fl\xcd\xf5@u,l\a\xb9\x83\v\x16\x16\xdf\"\xbe\x9dhiQz2<=\xa1\xfa\xa4\xc3(\n\xc8#\x04\x00\x00\x00\xa9v\xad\x03\x93\xe0\xbc0C\x03!=D\\\x91\f\xa0\x8b\x82:\x987)y\xf3\x03k\n\x17-\x1dL\xcf;^] Gd\xce\x10v\xbfQ\xaa\xbaB\x91i\x90}\xb4V\xb1\f\xff\xeb\x8c\x18D\xa9L\x88!~*\xec\x0f\x9f\x12\xe8\xdd\x16g\xdd\xa6x\x14\xc7,\xda\xc0Y\xe4\x96\xb4\xb3sMF|\x1e\xfd\xb9(\xf4\xa9\x8e}Q\xd1I\t\xd8\xaf\x02\f\xa9.i\'%`\xfb\x18\xeb\x96x\xe6G\xd5\x1b\xca:}b%2\xf9\xd6\xbc\x15+\x8d\x9a\xaa\xa7O\x8ea\x8c\xb8\xa7\xc9\xb1\x0e\x10\xa1\xa7j\xbd\x8d\xca\xf7/\x19\xe1\x01\x8c\xca\x7f\x02\x11\x1en\xf9\xcbk\xb0\xdc\xda\xb1\x02R7\x98=\x9c\xf4g\x89\xd5\x9fV\a\x029\xcb9e\xe5\xed\xb5\n\x90\xa7,\xc1L-\x84\x16`\x9a\xcb\xaf[\xcbE\xc9i\t\a\xd1\xc9A\x93h\xdaW\xa0\xa0\x85\xeb\xda\xe1\x1d\x19\xf03\xb5\xdap\xd3\xa9\x86\xc6K&O\x9cJ\x04\xbd%f9r\x84\x06\x10'}, 0x30) r6 = socket(0x1d, 0xa, 0x80000001) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000000)=0xf8000000, 0x4) bind$inet(r6, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r6, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003100)=""/195, 0xc3}}], 0x1, 0x60010020, 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000600), 0x3fffff) write$binfmt_script(r5, &(0x7f0000000100)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0) 383.876459ms ago: executing program 4 (id=1404): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x20}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000440)={0x0, 0x1, 0x1, 0x5, @vifc_lcl_addr=@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 228.842082ms ago: executing program 0 (id=1405): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xffffffff, '\x00', 0x0, 0x0, 0x20000, 0xffffffff, 0xfffffffc}, 0x48) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvmmsg(r2, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async, rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) (async, rerun: 64) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x20300}, 0x1c) socket(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) (async) shutdown(0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x43}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) (rerun: 32) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async, rerun: 64) write$bt_hci(r1, &(0x7f0000000040)=ANY=[@ANYRES8=r1], 0x6) (async, rerun: 64) socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff000000007110100000"], &(0x7f0000000480)='GPL\x00'}, 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)={0x1c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x40) r7 = socket(0x10, 0x3, 0x0) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r7) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="220329bd7000ffdbdf5e80c9a095d54889dfeac2d1626e124ae8ae6acbf4cc4b9dbef23be902c993498b64afff9b34553ca05b0e38de5c52dd932b152403cf68b103f4333ffc783c47eaf7a54ad5f05dededa5a509191c6d4e46a8b532b91181fdb37fce07d345a8b3d1dc2926cf30eebc98b7607debe0c1447c407dec533fefaaed27f2920a62a0e89ff4b769f0e02ce6602e8bb6ca9a81b2f6"], 0x14}, 0x1, 0x0, 0x0, 0x4040820}, 0x24044000) 218.405829ms ago: executing program 1 (id=1406): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0xe8, 0x10, 0x4, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0xb4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa4, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x21942c70}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xb, 0xfffffffa}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5ad2, 0x4}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x1}}]}, @IFLA_VLAN_ID, @IFLA_VLAN_EGRESS_QOS={0xfffffffffffffe50, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x21}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffc, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x7}}]}]}}}, @IFLA_IFALIAS={0x14, 0x14, 'netpci0\x00'}]}, 0xe8}}, 0x0) 15.422699ms ago: executing program 3 (id=1407): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e3, &(0x7f00000000c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="380100001000010000000000580cead0f70000000000000000000000000000ffffac1e0001fe80cecea12b3000000000000000000000000000bb000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000006c000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0002002000000000000000480003006465666c61746500"/240], 0x138}}, 0x0) mmap(&(0x7f00000fc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[], 0xc0}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000", @ANYRES8=r3, @ANYBLOB="0003010000000000e3973e020005000000", @ANYRES64=r3], 0x14}}, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_KEY(r9, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000005c0)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x2c}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r5) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ac00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}]}, 0x34}}, 0x24048885) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbf5c, 0x0, 0x0, 0x0, 0x437cc2a5}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x109}}}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x1}, 0x90) socketpair(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$ALG_SET_AEAD_AUTHSIZE(r11, 0x117, 0x5, 0x0, 0xc5f) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000000540)=ANY=[@ANYRES32], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0"], &(0x7f0000000100)='GPL\x00'}, 0x48) r12 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000040)) bind$phonet(r12, &(0x7f0000000140)={0x23, 0x5, 0x8, 0xe9}, 0x10) 14.223086ms ago: executing program 1 (id=1408): socket$kcm(0x11, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x44, 0x0, 0xfe, 0x116}, {0x6}]}, 0x10) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)="9f", 0x1}], 0x1}, 0x3e8) 0s ago: executing program 4 (id=1409): r0 = socket$isdn_base(0x22, 0x3, 0x0) bind$inet(r0, 0x0, 0x0) (async) ioctl$FIOCLEX(r0, 0x5451) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f740000000c0a01080000000000000000010000000900020073797a32000000004800038044000080080003400000050038000b80340001800a0001006c696d6974000000240002800c00014000000000000000050c000240000000000000000008000540000000030900010073797a30"], 0xf8}}, 0x0) kernel console output (not intermixed with test programs): tes in process `syz.4.340'. [ 95.439043][ T6307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.439075][ T6307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.462201][ T2555] IPVS: stop unused estimator thread 0... [ 95.673687][ T6307] hsr_slave_0: entered promiscuous mode [ 95.757747][ T6307] hsr_slave_1: entered promiscuous mode [ 95.788774][ T6307] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.796406][ T6307] Cannot create hsr debugfs directory [ 95.959258][ T6530] netlink: 188 bytes leftover after parsing attributes in process `syz.1.347'. [ 96.193770][ T6535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.348'. [ 96.210264][ T6539] netlink: 176 bytes leftover after parsing attributes in process `syz.1.349'. [ 96.246773][ T6540] netlink: 176 bytes leftover after parsing attributes in process `syz.1.349'. [ 96.457192][ T54] Bluetooth: hci1: command tx timeout [ 96.590437][ T6556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.354'. [ 96.611882][ T6549] netlink: 'syz.1.351': attribute type 2 has an invalid length. [ 97.014320][ T6580] netlink: 'syz.1.355': attribute type 4 has an invalid length. [ 97.100128][ T6570] netlink: 'syz.1.355': attribute type 2 has an invalid length. [ 97.440507][ T6307] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.513106][ T6307] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.541593][ T6307] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.572788][ T6610] ebt_limit: overflow, try lower: 0/0 [ 97.589276][ T6609] xt_SECMARK: invalid mode: 0 [ 97.643723][ T6307] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.742384][ T6613] netlink: 'syz.0.366': attribute type 1 has an invalid length. [ 97.848915][ T6613] bond1: entered promiscuous mode [ 97.881307][ T6618] bond1: entered allmulticast mode [ 97.887527][ T6618] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.027664][ T6627] vcan0: tx drop: invalid da for name 0x0000000004000003 [ 98.258723][ T6307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.340910][ T6307] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.363634][ T2508] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.370888][ T2508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.452380][ T2508] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.459683][ T2508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.539612][ T54] Bluetooth: hci1: command tx timeout [ 98.779215][ T6652] xt_ipvs: protocol family 7 not supported [ 99.218903][ T6686] sctp: [Deprecated]: syz.0.379 (pid 6686) Use of int in max_burst socket option deprecated. [ 99.218903][ T6686] Use struct sctp_assoc_value instead [ 99.255422][ T6688] __nla_validate_parse: 9 callbacks suppressed [ 99.255442][ T6688] netlink: 28 bytes leftover after parsing attributes in process `syz.4.381'. [ 99.285632][ T6688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.381'. [ 99.299781][ T6694] bridge_slave_1: mtu less than device minimum [ 99.306478][ T6693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.381'. [ 99.563905][ T6307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.826944][ T6307] veth0_vlan: entered promiscuous mode [ 99.835864][ T6724] netlink: 92 bytes leftover after parsing attributes in process `syz.0.388'. [ 99.887461][ T6307] veth1_vlan: entered promiscuous mode [ 99.999409][ T6729] syz.4.389 uses old SIOCAX25GETINFO [ 100.010837][ T6307] veth0_macvtap: entered promiscuous mode [ 100.060082][ T6307] veth1_macvtap: entered promiscuous mode [ 100.149805][ T6736] netlink: 'syz.1.390': attribute type 24 has an invalid length. [ 100.172904][ T6307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.238861][ T6307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.262804][ T6307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.306328][ T6307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.319287][ T6307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.343140][ T6307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.367660][ T6748] netlink: 56 bytes leftover after parsing attributes in process `syz.1.394'. [ 100.373905][ T6307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.414926][ T6307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.439748][ T6307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.462349][ T6738] netlink: 'syz.0.391': attribute type 33 has an invalid length. [ 100.479879][ T6746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.392'. [ 100.497044][ T6746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.392'. [ 100.569712][ T6307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.628895][ T6307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.664397][ T6307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.719269][ T6307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.765087][ T6307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.786587][ T6764] netlink: 'syz.0.397': attribute type 1 has an invalid length. [ 100.805757][ T6764] netlink: 244 bytes leftover after parsing attributes in process `syz.0.397'. [ 100.807096][ T6307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.867966][ T6307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.887240][ T6307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.926175][ T6307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.011599][ T6307] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.054134][ T6307] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.085598][ T6307] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.105736][ T6307] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.169148][ T6773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.399'. [ 101.198208][ T6773] netlink: 24 bytes leftover after parsing attributes in process `syz.0.399'. [ 101.662179][ T6803] netlink: 'syz.0.405': attribute type 2 has an invalid length. [ 101.882074][ T977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.902331][ T977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.074096][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.107839][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.300779][ T6845] tipc: Failed to remove unknown binding: 66,1,1/0:338844258/338844260 [ 102.375275][ T6845] tipc: Failed to remove unknown binding: 66,1,1/0:338844258/338844260 [ 102.438479][ T6845] tipc: Failed to remove unknown binding: 66,1,1/0:338844258/338844260 [ 102.722046][ T6868] netlink: 'syz.3.417': attribute type 1 has an invalid length. [ 102.806464][ T6873] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 102.825325][ T6873] bond1: (slave gre1): Error -95 calling set_mac_address [ 102.870289][ T6868] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.048835][ T6868] bond1 (unregistering): Released all slaves [ 103.645459][ T2529] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.792844][ T2529] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.993264][ T2529] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.193681][ T2529] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.310980][ T5234] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 104.322976][ T5234] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 104.342661][ T5234] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 104.355269][ T5234] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 104.368079][ T5234] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 104.378850][ T5234] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 104.439073][ T6936] __nla_validate_parse: 8 callbacks suppressed [ 104.439092][ T6936] netlink: 32 bytes leftover after parsing attributes in process `syz.4.435'. [ 104.490261][ T6936] netlink: 4 bytes leftover after parsing attributes in process `syz.4.435'. [ 104.506826][ T2529] bridge_slave_1: left allmulticast mode [ 104.513186][ T2529] bridge_slave_1: left promiscuous mode [ 104.519913][ T2529] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.543421][ T6938] netlink: 28 bytes leftover after parsing attributes in process `syz.3.436'. [ 104.548351][ T2529] bridge_slave_0: left allmulticast mode [ 104.561432][ T2529] bridge_slave_0: left promiscuous mode [ 104.568192][ T2529] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.041719][ T2529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.055784][ T2529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.085721][ T2529] bond0 (unregistering): Released all slaves [ 105.120843][ T6940] netdevsim netdevsim4 ÿÿÿÿ: renamed from netdevsim0 (while UP) [ 105.140419][ T6940] netlink: 44 bytes leftover after parsing attributes in process `syz.4.437'. [ 105.160228][ T6949] netlink: 20 bytes leftover after parsing attributes in process `syz.0.439'. [ 105.164394][ T6940] A link change request failed with some changes committed already. Interface ÿÿÿÿ may have been left with an inconsistent configuration, please check. [ 105.190232][ T6946] netlink: 56 bytes leftover after parsing attributes in process `syz.1.438'. [ 105.550092][ T6967] xt_ipcomp: unknown flags B [ 106.035220][ T6987] netlink: 'syz.3.447': attribute type 1 has an invalid length. [ 106.128676][ T6999] netlink: 'syz.4.451': attribute type 1 has an invalid length. [ 106.136545][ T6999] netlink: 9312 bytes leftover after parsing attributes in process `syz.4.451'. [ 106.175752][ T6999] netlink: 'syz.4.451': attribute type 1 has an invalid length. [ 106.251157][ T2529] hsr_slave_0: left promiscuous mode [ 106.279376][ T2529] hsr_slave_1: left promiscuous mode [ 106.328800][ T2529] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.353956][ T2529] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.392880][ T2529] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.411388][ T2529] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.455298][ T2529] veth1_macvtap: left promiscuous mode [ 106.463445][ T2529] veth0_macvtap: left promiscuous mode [ 106.467111][ T5234] Bluetooth: hci1: command tx timeout [ 106.472780][ T2529] veth1_vlan: left promiscuous mode [ 106.484213][ T2529] veth0_vlan: left promiscuous mode [ 108.537261][ T5234] Bluetooth: hci1: command tx timeout [ 109.635803][ T2529] team0 (unregistering): Port device team_slave_1 removed [ 109.683364][ T2529] team0 (unregistering): Port device team_slave_0 removed [ 110.101969][ T7015] netlink: 20 bytes leftover after parsing attributes in process `syz.1.452'. [ 110.237099][ T51] IPVS: starting estimator thread 0... [ 110.250944][ T7031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.349467][ T7039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.455'. [ 110.358504][ T7033] IPVS: using max 21 ests per chain, 50400 per kthread [ 110.489589][ T7044] xt_ipcomp: unknown flags B [ 110.511935][ T6932] chnl_net:caif_netlink_parms(): no params data found [ 110.519654][ T7042] netlink: 168 bytes leftover after parsing attributes in process `syz.1.457'. [ 110.523891][ T7045] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv_slave_1, syncid = 0, id = 0 [ 110.549220][ T7042] netlink: 'syz.1.457': attribute type 2 has an invalid length. [ 110.581580][ T7042] netlink: 60 bytes leftover after parsing attributes in process `syz.1.457'. [ 110.617639][ T5234] Bluetooth: hci1: command tx timeout [ 110.627757][ T7050] netlink: 'syz.3.459': attribute type 1 has an invalid length. [ 110.832183][ T7050] netlink: 'syz.3.459': attribute type 1 has an invalid length. [ 110.909180][ T6932] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.956279][ T6932] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.986020][ T6932] bridge_slave_0: entered allmulticast mode [ 111.019956][ T6932] bridge_slave_0: entered promiscuous mode [ 111.068392][ T6932] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.097705][ T6932] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.105162][ T6932] bridge_slave_1: entered allmulticast mode [ 111.149089][ T6932] bridge_slave_1: entered promiscuous mode [ 111.355287][ T6932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.400201][ T6932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.606848][ T7093] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 111.646964][ T6932] team0: Port device team_slave_0 added [ 111.712084][ T6932] team0: Port device team_slave_1 added [ 111.924474][ T6932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.973432][ T6932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.069985][ T7102] netlink: 28 bytes leftover after parsing attributes in process `syz.4.469'. [ 112.091572][ T6932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.144786][ T6932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.161494][ T6932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.192336][ T7113] xt_ipcomp: unknown flags B [ 112.236594][ T6932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.542251][ T6932] hsr_slave_0: entered promiscuous mode [ 112.558690][ T6932] hsr_slave_1: entered promiscuous mode [ 112.566027][ T6932] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.576294][ T6932] Cannot create hsr debugfs directory [ 112.628757][ T7133] netlink: 20 bytes leftover after parsing attributes in process `syz.4.474'. [ 112.649850][ T7142] netlink: 24 bytes leftover after parsing attributes in process `syz.1.475'. [ 112.663724][ T7142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.475'. [ 112.698867][ T5234] Bluetooth: hci1: command tx timeout [ 112.717322][ T7142] netlink: 24 bytes leftover after parsing attributes in process `syz.1.475'. [ 112.831073][ T7148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.476'. [ 113.332165][ T7171] netlink: 'syz.1.482': attribute type 3 has an invalid length. [ 113.989589][ T6932] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 114.048862][ T6932] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 114.101205][ T6932] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 114.173339][ T7207] bridge_slave_0: left allmulticast mode [ 114.217326][ T7207] bridge_slave_0: left promiscuous mode [ 114.223188][ T7207] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.308965][ T7207] bridge_slave_1: left allmulticast mode [ 114.332060][ T7207] bridge_slave_1: left promiscuous mode [ 114.348366][ T7207] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.545387][ T7207] bond0: (slave bond_slave_0): Releasing backup interface [ 114.590929][ T7207] bond0: (slave bond_slave_1): Releasing backup interface [ 114.656112][ T7207] team0: Port device team_slave_0 removed [ 114.690768][ T7207] team0: Port device team_slave_1 removed [ 114.704203][ T7207] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.712711][ T7207] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.722706][ T7207] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.731362][ T7207] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.752331][ T6932] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 114.779035][ T7211] team0: Device wg2 is up. Set it down before adding it as a team port [ 115.289592][ T6932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.396321][ T6932] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.450424][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.457630][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.529364][ T2555] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.537139][ T2555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.608860][ T7266] netlink: 'syz.0.507': attribute type 11 has an invalid length. [ 115.647246][ T7266] __nla_validate_parse: 12 callbacks suppressed [ 115.647264][ T7266] netlink: 211132 bytes leftover after parsing attributes in process `syz.0.507'. [ 115.726007][ T7266] netlink: 40 bytes leftover after parsing attributes in process `syz.0.507'. [ 115.826669][ T7273] netlink: 4 bytes leftover after parsing attributes in process `syz.4.508'. [ 115.939762][ T7287] netlink: 36 bytes leftover after parsing attributes in process `syz.0.507'. [ 116.244205][ T6932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.446683][ T6932] veth0_vlan: entered promiscuous mode [ 116.503667][ T6932] veth1_vlan: entered promiscuous mode [ 116.654275][ T6932] veth0_macvtap: entered promiscuous mode [ 116.690282][ T6932] veth1_macvtap: entered promiscuous mode [ 116.788879][ T6932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.803281][ T7316] netlink: 32 bytes leftover after parsing attributes in process `syz.0.514'. [ 116.822704][ T6932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.842852][ T6932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.864611][ T6932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.892901][ T6932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.905324][ T6932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.918547][ T6932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.930793][ T6932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.944963][ T6932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.969293][ T6932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.999776][ T6932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.025986][ T6932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.060500][ T6932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.095853][ T6932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.166196][ T6932] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.197303][ T6932] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.226987][ T6932] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.234036][ T7333] netlink: 'syz.1.518': attribute type 6 has an invalid length. [ 117.253822][ T6932] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.264304][ T7333] netlink: 20 bytes leftover after parsing attributes in process `syz.1.518'. [ 117.349418][ T7329] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 117.396155][ T7329] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.405177][ T7329] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.451853][ T7329] bridge0: entered allmulticast mode [ 117.497424][ T7337] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 117.541004][ T7337] bridge_slave_0: default FDB implementation only supports local addresses [ 117.696516][ T7333] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.705762][ T7333] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.714643][ T7333] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.723415][ T7333] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.767163][ T7333] vxlan0: entered promiscuous mode [ 117.847569][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.873531][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.973664][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.023680][ T7354] IPv6: sit1: Disabled Multicast RS [ 118.033735][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.061312][ T7354] team0: Device sit1 is of different type [ 118.145775][ T7363] netlink: 'syz.1.527': attribute type 3 has an invalid length. [ 118.186132][ T7363] netlink: 'syz.1.527': attribute type 1 has an invalid length. [ 118.195244][ T7363] netlink: 191384 bytes leftover after parsing attributes in process `syz.1.527'. [ 118.576005][ T7377] netlink: 'syz.4.531': attribute type 6 has an invalid length. [ 118.592272][ T7377] netlink: 20 bytes leftover after parsing attributes in process `syz.4.531'. [ 118.617653][ T7377] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 118.642681][ T7377] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.650597][ T7377] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.689176][ T7377] bridge0: entered allmulticast mode [ 118.743437][ T7384] IPVS: set_ctl: invalid protocol: 22 172.30.1.4:20000 [ 119.284638][ T7402] netlink: 'syz.3.537': attribute type 14 has an invalid length. [ 119.886056][ T7441] netlink: 36 bytes leftover after parsing attributes in process `syz.3.545'. [ 120.200774][ T7456] netlink: 100 bytes leftover after parsing attributes in process `syz.3.547'. [ 120.247715][ C0] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 120.303561][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.901903][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.972427][ T7485] netlink: 'syz.3.556': attribute type 1 has an invalid length. [ 121.027758][ T7485] __nla_validate_parse: 1 callbacks suppressed [ 121.027775][ T7485] netlink: 9380 bytes leftover after parsing attributes in process `syz.3.556'. [ 121.129276][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.142863][ T7495] sctp: [Deprecated]: syz.1.557 (pid 7495) Use of struct sctp_assoc_value in delayed_ack socket option. [ 121.142863][ T7495] Use struct sctp_sack_info instead [ 121.374935][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 121.385131][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 121.394156][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 121.405111][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 121.414707][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 121.423574][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 121.710014][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.744340][ T7504] netlink: 'syz.3.559': attribute type 11 has an invalid length. [ 121.763745][ T7504] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.559'. [ 121.921593][ T7534] ip6tnl0: entered promiscuous mode [ 122.046563][ T7540] netdevsim netdevsim4 netdevsim1: Unsupported IPsec algorithm [ 122.082391][ T7532] ip6tnl0: left promiscuous mode [ 122.297942][ T7549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.569'. [ 122.336633][ T7545] IPv6: sit2: Disabled Multicast RS [ 122.347944][ T12] bridge_slave_1: left allmulticast mode [ 122.355679][ T12] bridge_slave_1: left promiscuous mode [ 122.362195][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.374054][ T12] bridge_slave_0: left allmulticast mode [ 122.380435][ T12] bridge_slave_0: left promiscuous mode [ 122.386294][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.835605][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.848803][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.869139][ T12] bond0 (unregistering): Released all slaves [ 123.497379][ T54] Bluetooth: hci1: command tx timeout [ 123.781524][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 123.940993][ T7506] chnl_net:caif_netlink_parms(): no params data found [ 124.073300][ T12] hsr_slave_0: left promiscuous mode [ 124.091222][ T12] hsr_slave_1: left promiscuous mode [ 124.150126][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.172885][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.219940][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.247408][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.342891][ T12] veth1_macvtap: left promiscuous mode [ 124.362670][ T12] veth0_macvtap: left promiscuous mode [ 124.379387][ T12] veth1_vlan: left promiscuous mode [ 124.390594][ T12] veth0_vlan: left promiscuous mode [ 125.161768][ T12] team0 (unregistering): Port device team_slave_1 removed [ 125.216368][ T12] team0 (unregistering): Port device team_slave_0 removed [ 125.582191][ T54] Bluetooth: hci1: command 0x041b tx timeout [ 126.060459][ T7506] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.098891][ T7506] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.106250][ T7506] bridge_slave_0: entered allmulticast mode [ 126.135206][ T7506] bridge_slave_0: entered promiscuous mode [ 126.164246][ T7506] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.176391][ T7506] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.193918][ T7506] bridge_slave_1: entered allmulticast mode [ 126.250898][ T7506] bridge_slave_1: entered promiscuous mode [ 126.336797][ T7506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.376354][ T7506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.532782][ T7506] team0: Port device team_slave_0 added [ 126.552042][ T7506] team0: Port device team_slave_1 added [ 126.665210][ T7506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.673452][ T7506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.701957][ T7506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.726108][ T7506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.733544][ T7506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.772088][ T7506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.071098][ T7506] hsr_slave_0: entered promiscuous mode [ 127.083002][ T7506] hsr_slave_1: entered promiscuous mode [ 127.096474][ T7506] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.109545][ T7506] Cannot create hsr debugfs directory [ 127.657322][ T5234] Bluetooth: hci1: command 0x041b tx timeout [ 128.222289][ T7506] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 128.241871][ T7506] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 128.281486][ T7506] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 128.310873][ T7506] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 128.594604][ T7506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.656358][ T7506] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.726274][ T2508] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.733491][ T2508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.776493][ T2508] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.783999][ T2508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.118357][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 129.438547][ T7783] netlink: 20 bytes leftover after parsing attributes in process `syz.4.645'. [ 129.468229][ T7506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.484256][ T7783] netlink: 20 bytes leftover after parsing attributes in process `syz.4.645'. [ 129.644557][ T7506] veth0_vlan: entered promiscuous mode [ 129.705042][ T7506] veth1_vlan: entered promiscuous mode [ 129.737689][ T5234] Bluetooth: hci1: command 0x041b tx timeout [ 129.851470][ T7506] veth0_macvtap: entered promiscuous mode [ 129.883354][ T7506] veth1_macvtap: entered promiscuous mode [ 129.940408][ T7802] geneve2: entered promiscuous mode [ 130.075211][ T7506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.103206][ T7506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.135862][ T7506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.184396][ T7506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.217166][ T7506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.267100][ T7506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.303650][ T7506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.342764][ T7818] netlink: 176 bytes leftover after parsing attributes in process `syz.1.657'. [ 130.400520][ T7506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.447082][ T7506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.477909][ T7506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.532192][ T7506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.587381][ T7506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.627145][ T7506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.642979][ T7506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.708442][ T7506] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.742962][ T7506] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.787187][ T7506] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.821323][ T7506] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.930207][ T7842] vlan2: entered allmulticast mode [ 131.080612][ T7845] netlink: 12 bytes leftover after parsing attributes in process `syz.3.667'. [ 131.530112][ T977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.571666][ T977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.730833][ T2555] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.760243][ T2555] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.804566][ T7875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.678'. [ 131.818739][ T5234] Bluetooth: hci1: command 0x041b tx timeout [ 131.922278][ T7880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.679'. [ 132.546031][ T7899] wg2: entered promiscuous mode [ 132.593628][ T7899] wg2: entered allmulticast mode [ 133.052088][ T7922] syzkaller0: entered promiscuous mode [ 133.077097][ T7922] syzkaller0: entered allmulticast mode [ 133.180494][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.187503][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.829113][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 134.854950][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 134.867289][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 134.879239][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 134.894286][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 134.904367][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 135.624881][ T7929] netlink: 'syz.3.695': attribute type 10 has an invalid length. [ 135.643037][ T7929] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.652475][ T7929] bond0: (slave team0): Enslaving as an active interface with an up link [ 135.896622][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.114661][ T7982] syz.1.708[7982] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.114816][ T7982] syz.1.708[7982] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.149028][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.292527][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.474958][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.772086][ T7965] chnl_net:caif_netlink_parms(): no params data found [ 136.885987][ T12] bridge_slave_1: left allmulticast mode [ 136.901889][ T12] bridge_slave_1: left promiscuous mode [ 136.917631][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.934273][ T12] bridge_slave_0: left allmulticast mode [ 136.961162][ T12] bridge_slave_0: left promiscuous mode [ 136.971467][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.021611][ T5234] Bluetooth: hci1: command tx timeout [ 137.336037][ T8024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.723'. [ 137.686501][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.708351][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.722207][ T12] bond0 (unregistering): Released all slaves [ 137.744757][ T8030] netlink: 28 bytes leftover after parsing attributes in process `syz.0.723'. [ 137.906551][ T7965] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.948733][ T7965] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.951907][ T8043] syz.3.727[8043] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.963453][ T7965] bridge_slave_0: entered allmulticast mode [ 137.990185][ T7965] bridge_slave_0: entered promiscuous mode [ 138.006197][ T7965] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.014714][ T7965] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.023577][ T7965] bridge_slave_1: entered allmulticast mode [ 138.031655][ T7965] bridge_slave_1: entered promiscuous mode [ 138.305065][ T7965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.388222][ T7965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.745882][ T7965] team0: Port device team_slave_0 added [ 138.820028][ T7965] team0: Port device team_slave_1 added [ 138.983198][ T8077] xt_ipcomp: unknown flags B [ 139.097082][ T5234] Bluetooth: hci1: command tx timeout [ 139.180908][ T8084] netlink: 256 bytes leftover after parsing attributes in process `syz.3.735'. [ 139.196918][ T12] hsr_slave_0: left promiscuous mode [ 139.271897][ T12] hsr_slave_1: left promiscuous mode [ 139.285056][ T8087] netlink: 36 bytes leftover after parsing attributes in process `syz.1.734'. [ 139.547676][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.556270][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.592790][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.608321][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.644053][ T12] veth1_macvtap: left promiscuous mode [ 139.664956][ T12] veth0_macvtap: left promiscuous mode [ 139.680681][ T12] veth1_vlan: left promiscuous mode [ 139.699952][ T12] veth0_vlan: left promiscuous mode [ 140.283320][ T12] team0 (unregistering): Port device team_slave_1 removed [ 140.329065][ T12] team0 (unregistering): Port device team_slave_0 removed [ 140.765306][ T8086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.736'. [ 140.785390][ T8087] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 140.858672][ T7965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.865752][ T7965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.972312][ T7965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.036595][ T7965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.052149][ T7965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.086300][ T7965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.177508][ T5234] Bluetooth: hci1: command tx timeout [ 141.337357][ T7965] hsr_slave_0: entered promiscuous mode [ 141.399555][ T7965] hsr_slave_1: entered promiscuous mode [ 141.446688][ T7965] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.465975][ T7965] Cannot create hsr debugfs directory [ 141.470236][ T8131] netlink: 'syz.0.746': attribute type 11 has an invalid length. [ 141.569715][ T8124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.746'. [ 141.614342][ T8124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.746'. [ 141.697786][ T5234] block nbd1: Receive control failed (result -107) [ 141.800488][ T8135] geneve4: entered promiscuous mode [ 141.806315][ T8135] geneve4: entered allmulticast mode [ 141.902929][ T8150] netlink: 28 bytes leftover after parsing attributes in process `syz.0.753'. [ 141.906369][ T8146] dvmrp0: entered allmulticast mode [ 142.059902][ T8161] netlink: 184 bytes leftover after parsing attributes in process `syz.4.754'. [ 142.067614][ T8160] x_tables: duplicate underflow at hook 4 [ 142.179058][ T8166] netlink: 44 bytes leftover after parsing attributes in process `syz.3.755'. [ 142.207218][ T8166] netlink: 'syz.3.755': attribute type 5 has an invalid length. [ 142.375802][ T8183] __nla_validate_parse: 3 callbacks suppressed [ 142.375823][ T8183] netlink: 12 bytes leftover after parsing attributes in process `syz.3.759'. [ 142.527687][ T8179] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.697705][ T8189] netlink: 'syz.3.760': attribute type 20 has an invalid length. [ 142.984711][ T8205] netlink: 28 bytes leftover after parsing attributes in process `syz.0.766'. [ 143.258115][ T5234] Bluetooth: hci1: command tx timeout [ 143.351854][ T7965] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 143.400335][ T7965] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 143.451950][ T7965] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 143.492943][ T8222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.771'. [ 143.525183][ T8223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.771'. [ 143.563219][ T7965] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 143.976600][ T7965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.031020][ T8262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.780'. [ 144.066972][ T8262] netlink: 4 bytes leftover after parsing attributes in process `syz.1.780'. [ 144.080970][ T7965] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.124392][ T2555] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.131668][ T2555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.181611][ T5234] block nbd2: Receive control failed (result -107) [ 144.194049][ T977] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.201534][ T977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.253193][ T8272] netlink: 20 bytes leftover after parsing attributes in process `syz.4.782'. [ 144.278318][ T8274] netlink: 24 bytes leftover after parsing attributes in process `syz.0.781'. [ 144.361551][ T8272] ipip0: entered promiscuous mode [ 144.875668][ T7965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.940722][ T8304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.788'. [ 145.159842][ T7965] veth0_vlan: entered promiscuous mode [ 145.222608][ T7965] veth1_vlan: entered promiscuous mode [ 145.350522][ T7965] veth0_macvtap: entered promiscuous mode [ 145.401548][ T8326] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 145.417784][ T7965] veth1_macvtap: entered promiscuous mode [ 145.474363][ T7965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.556965][ T7965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.611995][ T7965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.637270][ T7965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.654980][ T7965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.678582][ T8340] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 145.758913][ T7965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.790664][ T7965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.844822][ T7965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.885417][ T7965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.927873][ T7965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.962925][ T7965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.001060][ T7965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.040346][ T7965] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.059962][ T7965] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.082518][ T7965] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.095194][ T7965] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.129160][ T8360] netlink: 'syz.0.801': attribute type 21 has an invalid length. [ 146.179810][ T8360] netlink: 156 bytes leftover after parsing attributes in process `syz.0.801'. [ 146.531469][ T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.557421][ T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.660540][ T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.672106][ T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.062673][ T8408] netlink: 'syz.3.813': attribute type 2 has an invalid length. [ 147.100959][ T8410] netlink: 'syz.1.812': attribute type 3 has an invalid length. [ 147.122847][ T8410] bridge0: left allmulticast mode [ 147.423685][ T8424] IPVS: length: 157 != 24 [ 147.453202][ T8422] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 147.568606][ T8430] netlink: 'syz.1.821': attribute type 11 has an invalid length. [ 147.666745][ T8438] __nla_validate_parse: 1 callbacks suppressed [ 147.666763][ T8438] netlink: 52 bytes leftover after parsing attributes in process `syz.3.823'. [ 147.717890][ T8438] netlink: 52 bytes leftover after parsing attributes in process `syz.3.823'. [ 147.795160][ T8440] netlink: 40 bytes leftover after parsing attributes in process `syz.4.825'. [ 147.819521][ T8440] netlink: 24 bytes leftover after parsing attributes in process `syz.4.825'. [ 147.951894][ T8454] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.828'. [ 147.969558][ T8454] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 148.124949][ T8460] netlink: 100 bytes leftover after parsing attributes in process `syz.0.830'. [ 148.200272][ T8460] netlink: 'syz.0.830': attribute type 10 has an invalid length. [ 148.269169][ T8460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.322132][ T8460] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 148.630871][ T8483] xt_ipcomp: unknown flags B [ 148.700727][ T8487] netlink: 'syz.1.840': attribute type 1 has an invalid length. [ 148.737284][ T8487] netlink: 9396 bytes leftover after parsing attributes in process `syz.1.840'. [ 148.800826][ T8492] netlink: 60 bytes leftover after parsing attributes in process `syz.4.842'. [ 149.098916][ T8492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.200854][ T2555] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.253855][ T8502] netdevsim netdevsim0 ÿÿÿÿ: renamed from netdevsim0 (while UP) [ 149.670055][ T2555] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.745514][ T2555] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.889799][ T8521] netlink: 28 bytes leftover after parsing attributes in process `syz.4.848'. [ 149.909964][ T2555] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.957474][ T8512] netlink: 20 bytes leftover after parsing attributes in process `syz.0.845'. [ 150.274860][ T8532] xt_ipcomp: unknown flags B [ 150.369283][ T2555] bridge_slave_1: left allmulticast mode [ 150.408447][ T2555] bridge_slave_1: left promiscuous mode [ 150.447743][ T2555] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.562634][ T2555] bridge_slave_0: left allmulticast mode [ 150.609378][ T2555] bridge_slave_0: left promiscuous mode [ 150.653536][ T2555] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.738429][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 150.751012][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 150.759881][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 150.771881][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 150.781478][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 150.791814][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 151.184179][ T2555] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.196226][ T2555] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.207898][ T2555] bond0 (unregistering): Released all slaves [ 151.229298][ T8533] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 151.286320][ T8537] xfrm1: entered promiscuous mode [ 151.292556][ T8537] xfrm1: entered allmulticast mode [ 151.308564][ T8548] netem: invalid attributes len -24 [ 151.313846][ T8548] netem: change failed [ 151.739480][ T8575] nftables ruleset with unbound set [ 151.998499][ T8590] xt_ipcomp: unknown flags B [ 152.027431][ T2555] hsr_slave_0: left promiscuous mode [ 152.044695][ T2555] hsr_slave_1: left promiscuous mode [ 152.098798][ T2555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.106732][ T2555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.168431][ T2555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.206408][ T2555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.284008][ T2555] veth1_macvtap: left promiscuous mode [ 152.290441][ T2555] veth0_macvtap: left promiscuous mode [ 152.300720][ T2555] veth1_vlan: left promiscuous mode [ 152.315515][ T2555] veth0_vlan: left promiscuous mode [ 152.871321][ T5234] Bluetooth: hci1: command tx timeout [ 153.230643][ T2555] team0 (unregistering): Port device team_slave_1 removed [ 153.298399][ T2555] team0 (unregistering): Port device team_slave_0 removed [ 153.949518][ T8585] veth0_to_hsr: invalid flags given to default FDB implementation [ 154.084196][ T8611] __nla_validate_parse: 5 callbacks suppressed [ 154.084249][ T8611] netlink: 28 bytes leftover after parsing attributes in process `syz.3.868'. [ 154.314317][ T8614] netlink: 24 bytes leftover after parsing attributes in process `syz.0.869'. [ 154.386343][ T8614] netlink: 272 bytes leftover after parsing attributes in process `syz.0.869'. [ 154.456188][ T8541] chnl_net:caif_netlink_parms(): no params data found [ 154.463290][ T8614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.869'. [ 154.937250][ T5234] Bluetooth: hci1: command tx timeout [ 155.083991][ T8541] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.123784][ T8541] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.180268][ T8541] bridge_slave_0: entered allmulticast mode [ 155.210460][ T8541] bridge_slave_0: entered promiscuous mode [ 155.248908][ T8541] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.256074][ T8541] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.303001][ T8541] bridge_slave_1: entered allmulticast mode [ 155.326774][ T8541] bridge_slave_1: entered promiscuous mode [ 155.552437][ T8541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.611930][ T8541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.639630][ T8671] netlink: 'syz.3.879': attribute type 8 has an invalid length. [ 155.777250][ T8674] netlink: 56 bytes leftover after parsing attributes in process `syz.0.881'. [ 155.848615][ T8676] @ÿÿÿ: renamed from veth0_vlan (while UP) [ 155.942862][ T8541] team0: Port device team_slave_0 added [ 155.978129][ T8541] team0: Port device team_slave_1 added [ 156.129687][ T8541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.160530][ T8541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.243196][ T8541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.268877][ T8690] netlink: 'syz.3.886': attribute type 4 has an invalid length. [ 156.312148][ T8541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.335986][ T8541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.397557][ T8541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.650525][ T8541] hsr_slave_0: entered promiscuous mode [ 156.668131][ T8541] hsr_slave_1: entered promiscuous mode [ 156.697037][ T8541] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 156.727755][ T8541] Cannot create hsr debugfs directory [ 156.736303][ T8710] netlink: 268 bytes leftover after parsing attributes in process `syz.4.891'. [ 157.017147][ T5234] Bluetooth: hci1: command tx timeout [ 157.516172][ T8747] netlink: 'syz.1.899': attribute type 2 has an invalid length. [ 158.201524][ T8541] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 158.222663][ T8541] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 158.240768][ T8541] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 158.272292][ T8541] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 158.644965][ T8763] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 158.675927][ T8788] netlink: 209840 bytes leftover after parsing attributes in process `syz.4.911'. [ 158.895064][ T8541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.993431][ T8541] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.004748][ T8803] netlink: 20 bytes leftover after parsing attributes in process `syz.4.914'. [ 159.065882][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.073112][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.098067][ T5234] Bluetooth: hci1: command tx timeout [ 159.109291][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.116614][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.143514][ T8808] netlink: 'syz.3.916': attribute type 1 has an invalid length. [ 159.202951][ T8808] netlink: 'syz.3.916': attribute type 1 has an invalid length. [ 159.372938][ T8818] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.642342][ T8541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.668024][ T8837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.920'. [ 159.729851][ T8837] netlink: 4 bytes leftover after parsing attributes in process `syz.3.920'. [ 159.755216][ T8541] veth0_vlan: entered promiscuous mode [ 159.780920][ T8541] veth1_vlan: entered promiscuous mode [ 159.800339][ T5234] block nbd3: Receive control failed (result -107) [ 159.830977][ T8837] nbd3: detected capacity change from 0 to 256 [ 159.838367][ T8541] veth0_macvtap: entered promiscuous mode [ 159.868785][ T7037] block nbd3: Dead connection, failed to find a fallback [ 159.890979][ T7037] block nbd3: shutting down sockets [ 159.895869][ T8541] veth1_macvtap: entered promiscuous mode [ 159.921598][ T7037] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 159.941957][ T8541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.974288][ T7037] Buffer I/O error on dev nbd3, logical block 0, async page read [ 159.986957][ T8541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.002653][ T7037] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 160.023929][ T8541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.043095][ T7037] Buffer I/O error on dev nbd3, logical block 0, async page read [ 160.057209][ T8541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.073826][ T7037] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 160.098376][ T8541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.115214][ T8850] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.923'. [ 160.124594][ T7037] Buffer I/O error on dev nbd3, logical block 0, async page read [ 160.141740][ T8541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.153393][ T7037] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 160.163538][ T8850] openvswitch: netlink: Actions may not be safe on all matching packets [ 160.187025][ T8541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.198451][ T7037] Buffer I/O error on dev nbd3, logical block 0, async page read [ 160.206506][ T7037] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 160.229075][ T8541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.263082][ T7037] Buffer I/O error on dev nbd3, logical block 0, async page read [ 160.271809][ T8541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.292828][ T7037] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 160.313131][ T8541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.341357][ T7037] Buffer I/O error on dev nbd3, logical block 0, async page read [ 160.367083][ T8541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.377877][ T7037] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 160.402337][ T8541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.419866][ T7037] Buffer I/O error on dev nbd3, logical block 0, async page read [ 160.429115][ T8864] netlink: 'syz.1.924': attribute type 4 has an invalid length. [ 160.444515][ T7037] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 160.467419][ T8868] netlink: 440 bytes leftover after parsing attributes in process `syz.4.926'. [ 160.481172][ T8870] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 160.500009][ T8541] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.510180][ T7037] Buffer I/O error on dev nbd3, logical block 0, async page read [ 160.534264][ T7037] ldm_validate_partition_table(): Disk read failed. [ 160.541728][ T8541] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.563995][ T7037] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 160.587028][ T8541] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.606157][ T7037] Buffer I/O error on dev nbd3, logical block 0, async page read [ 160.619942][ T8541] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.643510][ T7037] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 160.687572][ T7037] Buffer I/O error on dev nbd3, logical block 0, async page read [ 160.737148][ T7037] Dev nbd3: unable to read RDB block 0 [ 160.743259][ T7037] nbd3: unable to read partition table [ 160.745805][ T8884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.847622][ T7037] ldm_validate_partition_table(): Disk read failed. [ 160.887326][ T8884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.909864][ T7037] Dev nbd3: unable to read RDB block 0 [ 160.915768][ T7037] nbd3: unable to read partition table [ 160.983644][ T8895] netlink: 12 bytes leftover after parsing attributes in process `syz.3.930'. [ 161.171929][ T8892] xt_addrtype: ipv6 does not support BROADCAST matching [ 161.343514][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.375886][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.381306][ T8916] netlink: 72 bytes leftover after parsing attributes in process `syz.1.933'. [ 161.559641][ T2508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.612147][ T2508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.712237][ T8929] netlink: zone id is out of range [ 161.734785][ T8931] xt_limit: Overflow, try lower: 0/0 [ 161.983681][ T8939] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.938'. [ 162.033120][ T8939] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.938'. [ 162.073587][ T8939] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.938'. [ 162.231405][ T8951] netlink: 12 bytes leftover after parsing attributes in process `syz.4.942'. [ 163.644744][ T9025] xt_TPROXY: Can be used only with -p tcp or -p udp [ 164.110598][ T2555] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.193876][ T9038] pimreg: entered allmulticast mode [ 164.225100][ T9042] pimreg: left allmulticast mode [ 164.409090][ T2555] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.553262][ T2555] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.649898][ T2555] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.820655][ T2555] bridge_slave_1: left allmulticast mode [ 164.832882][ T2555] bridge_slave_1: left promiscuous mode [ 164.839423][ T2555] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.858021][ T2555] bridge_slave_0: left allmulticast mode [ 164.864047][ T2555] bridge_slave_0: left promiscuous mode [ 164.870980][ T2555] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.139953][ T9074] xt_ipcomp: unknown flags B [ 165.512035][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 165.536751][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 165.554089][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 165.582461][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 165.590409][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 165.600390][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 165.646252][ T2555] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.664743][ T2555] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.677408][ T2555] bond0 (unregistering): Released all slaves [ 165.914777][ T9096] __nla_validate_parse: 6 callbacks suppressed [ 165.914797][ T9096] netlink: 68 bytes leftover after parsing attributes in process `syz.0.969'. [ 165.964835][ T9104] netlink: 76 bytes leftover after parsing attributes in process `syz.1.970'. [ 166.567630][ T9136] xt_ipcomp: unknown flags B [ 166.729414][ T2555] hsr_slave_0: left promiscuous mode [ 166.763751][ T2555] hsr_slave_1: left promiscuous mode [ 166.785072][ T2555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.803292][ T2555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.812269][ T2555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.821018][ T2555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.878136][ T2555] veth1_macvtap: left promiscuous mode [ 166.884101][ T2555] veth0_macvtap: left promiscuous mode [ 166.891819][ T2555] veth1_vlan: left promiscuous mode [ 166.898491][ T2555] veth0_vlan: left promiscuous mode [ 167.440880][ T2555] team0 (unregistering): Port device team_slave_1 removed [ 167.494327][ T2555] team0 (unregistering): Port device team_slave_0 removed [ 167.657380][ T54] Bluetooth: hci1: command tx timeout [ 168.349117][ T9164] netlink: 64 bytes leftover after parsing attributes in process `syz.3.982'. [ 168.482405][ T9089] chnl_net:caif_netlink_parms(): no params data found [ 168.702852][ T9185] netlink: 100 bytes leftover after parsing attributes in process `syz.0.988'. [ 168.750383][ T9189] xt_ipcomp: unknown flags B [ 168.985753][ T9199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.165931][ T9187] syzkaller1: entered promiscuous mode [ 169.194513][ T9187] syzkaller1: entered allmulticast mode [ 169.224723][ T9089] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.238740][ T9089] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.254507][ T9089] bridge_slave_0: entered allmulticast mode [ 169.263435][ T9089] bridge_slave_0: entered promiscuous mode [ 169.297617][ T9089] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.313834][ T9089] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.321672][ T9089] bridge_slave_1: entered allmulticast mode [ 169.329119][ T9089] bridge_slave_1: entered promiscuous mode [ 169.426283][ T9089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.450829][ T9089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.743689][ T54] Bluetooth: hci1: command tx timeout [ 169.753563][ T9089] team0: Port device team_slave_0 added [ 169.841071][ T9089] team0: Port device team_slave_1 added [ 169.887460][ T9242] netlink: 'syz.4.1000': attribute type 8 has an invalid length. [ 170.095072][ T9089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.118684][ T9089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.187695][ T9089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.209951][ T9260] netlink: 'syz.0.1004': attribute type 1 has an invalid length. [ 170.358212][ T9089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.392426][ T9089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.451712][ T9089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.530133][ T9276] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 170.538030][ T9276] IPv6: NLM_F_CREATE should be set when creating new route [ 170.715437][ T9276] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 170.727887][ T9276] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 170.744190][ T9292] xt_ipcomp: unknown flags B [ 170.787648][ T9089] hsr_slave_0: entered promiscuous mode [ 170.807836][ T9089] hsr_slave_1: entered promiscuous mode [ 170.816134][ T9089] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.833996][ T9089] Cannot create hsr debugfs directory [ 170.842941][ T9295] netlink: 'syz.1.1010': attribute type 1 has an invalid length. [ 170.857966][ T9276] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 170.894639][ T9276] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 170.959778][ T9276] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 171.003488][ T9276] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 171.094942][ T9276] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 171.150738][ T9276] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 171.814931][ T9320] tipc: Started in network mode [ 171.827506][ T5234] Bluetooth: hci1: command tx timeout [ 171.844836][ T9320] tipc: Node identity 1, cluster identity 4711 [ 171.854676][ T9320] tipc: Node number set to 1 [ 171.867412][ T9320] tipc: Cannot configure node identity twice [ 171.989490][ T9334] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 172.155846][ T9341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1021'. [ 172.531148][ T9089] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 172.570694][ T9089] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 172.600491][ T9089] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 172.615112][ T9359] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1026'. [ 172.632942][ T9089] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 172.640113][ T9359] openvswitch: netlink: Tunnel attr 5 has unexpected len 1 expected 0 [ 172.783336][ T9338] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 173.024066][ T9089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.202566][ T9089] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.298877][ T2529] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.306158][ T2529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.369652][ T2529] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.377246][ T2529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.415349][ T9389] syzkaller1: entered promiscuous mode [ 173.421826][ T9389] syzkaller1: entered allmulticast mode [ 173.781050][ T9401] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1038'. [ 173.816400][ T9401] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1038'. [ 173.898291][ T5234] Bluetooth: hci1: command 0x0419 tx timeout [ 173.966462][ T9404] bond0: (slave batadv0): Releasing backup interface [ 174.060361][ T9415] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1040'. [ 174.099430][ T9404] bridge_slave_0: left allmulticast mode [ 174.119683][ T9404] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.160267][ T9404] bridge_slave_1: left allmulticast mode [ 174.173856][ T9404] bridge_slave_1: left promiscuous mode [ 174.207879][ T9404] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.232389][ T9404] bond0: (slave bond_slave_0): Releasing backup interface [ 174.267697][ T9404] bond0: (slave bond_slave_1): Releasing backup interface [ 174.328746][ T9404] team0: Port device team_slave_0 removed [ 174.348746][ T9404] team0: Port device team_slave_1 removed [ 174.355691][ T9404] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.378631][ T9404] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.394490][ T9404] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.657373][ T9428] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1042'. [ 174.776315][ T9089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.920576][ T9437] netlink: 'syz.3.1044': attribute type 33 has an invalid length. [ 174.947641][ T9442] netlink: 'syz.4.1046': attribute type 1 has an invalid length. [ 174.986743][ T9442] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.1046'. [ 175.005994][ T9444] syz.4.1046[9444] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 175.006137][ T9444] syz.4.1046[9444] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 175.014274][ T9089] veth0_vlan: entered promiscuous mode [ 175.053022][ T9442] netlink: 'syz.4.1046': attribute type 1 has an invalid length. [ 175.085148][ T9443] sch_fq: defrate 0 ignored. [ 175.161535][ T9437] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1044'. [ 175.193247][ T9437] batadv_slave_1: entered promiscuous mode [ 175.213393][ T9437] batadv_slave_1: entered allmulticast mode [ 175.270593][ T9089] veth1_vlan: entered promiscuous mode [ 175.286200][ T9452] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1048'. [ 175.440581][ T9089] veth0_macvtap: entered promiscuous mode [ 175.488375][ T9089] veth1_macvtap: entered promiscuous mode [ 175.561204][ T9089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.583758][ T9089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.611181][ T9089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.642922][ T9089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.670918][ T9089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.733688][ T9089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.798171][ T9089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.851189][ T9089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.897527][ T9089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.925051][ T9089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.977566][ T54] Bluetooth: hci1: command 0x0419 tx timeout [ 176.041583][ T9089] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.075811][ T9089] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.100602][ T9089] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.115267][ T9089] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.450083][ T2529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.482423][ T2529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.608951][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.659421][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.735262][ T9501] syz_tun: entered promiscuous mode [ 176.757352][ T9501] macvtap1: entered promiscuous mode [ 176.778362][ T9501] macvtap1: entered allmulticast mode [ 176.783809][ T9501] syz_tun: entered allmulticast mode [ 176.824667][ T9501] syz_tun: left allmulticast mode [ 176.837347][ T9501] syz_tun: left promiscuous mode [ 176.945633][ T9503] netlink: 'syz.3.1060': attribute type 12 has an invalid length. [ 176.971082][ T9508] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 176.992931][ T9508] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 177.134717][ T9518] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1062'. [ 177.178286][ T9518] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1062'. [ 177.198136][ T9515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1062'. [ 177.621546][ T9543] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 177.682641][ T9546] netlink: 'syz.3.1068': attribute type 2 has an invalid length. [ 177.732616][ T9546] netlink: 'syz.3.1068': attribute type 2 has an invalid length. [ 177.804722][ T9546] netlink: 'syz.3.1068': attribute type 2 has an invalid length. [ 177.866972][ T9546] netlink: 'syz.3.1068': attribute type 1 has an invalid length. [ 177.874755][ T9546] netlink: 'syz.3.1068': attribute type 1 has an invalid length. [ 177.904988][ T9554] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.912639][ T9554] bridge0: port 2(bridge_slave_1) entered listening state [ 177.920259][ T9554] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.928429][ T9554] bridge0: port 1(bridge_slave_0) entered listening state [ 177.960286][ T9554] team0: Port device bridge0 added [ 178.020649][ T9560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1070'. [ 178.200635][ T2529] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.423760][ T9542] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 178.652672][ T2529] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.838120][ T2529] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.951666][ T2529] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.199810][ T2529] bridge_slave_1: left allmulticast mode [ 179.205516][ T2529] bridge_slave_1: left promiscuous mode [ 179.258069][ T2529] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.318169][ T2529] bridge_slave_0: left allmulticast mode [ 179.323980][ T2529] bridge_slave_0: left promiscuous mode [ 179.334346][ T2529] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.448587][ T9592] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1074'. [ 179.527665][ T9596] xt_connbytes: Forcing CT accounting to be enabled [ 179.930295][ T5234] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 179.957359][ T5234] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 179.972969][ T5234] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 179.986609][ T5234] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 179.998721][ T5234] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 180.011978][ T5234] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 180.433411][ T2529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.448515][ T2529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.473686][ T2529] bond0 (unregistering): Released all slaves [ 180.520096][ T9593] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1073'. [ 180.792766][ T9628] netlink: 'syz.3.1080': attribute type 10 has an invalid length. [ 180.818861][ T9628] mac80211_hwsim hwsim10 wlan1: left allmulticast mode [ 180.889024][ T9628] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 180.933694][ T9639] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 181.102967][ T9633] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1080'. [ 181.431339][ T9654] netlink: 'syz.4.1085': attribute type 8 has an invalid length. [ 181.473893][ T9657] batadv_slave_1: entered promiscuous mode [ 181.623191][ T9671] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 181.714993][ T2529] hsr_slave_0: left promiscuous mode [ 181.748034][ T2529] hsr_slave_1: left promiscuous mode [ 181.784398][ T2529] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.806609][ T2529] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.816255][ T2529] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.838181][ T2529] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.879202][ T2529] veth1_macvtap: left promiscuous mode [ 181.885083][ T9682] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 181.903262][ T2529] veth0_macvtap: left promiscuous mode [ 181.909337][ T2529] veth1_vlan: left promiscuous mode [ 181.914828][ T2529] veth0_vlan: left promiscuous mode [ 182.057072][ T5234] Bluetooth: hci1: command tx timeout [ 182.543789][ T2529] team0 (unregistering): Port device team_slave_1 removed [ 182.601662][ T2529] team0 (unregistering): Port device team_slave_0 removed [ 183.068884][ T9662] batadv_slave_1: left promiscuous mode [ 183.094287][ T9691] netlink: 'syz.0.1091': attribute type 8 has an invalid length. [ 183.134232][ T9692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1091'. [ 183.177847][ T9695] dccp_v6_rcv: dropped packet with invalid checksum [ 183.245276][ T9698] No such timeout policy "syz0" [ 183.294683][ T9698] netlink: 'syz.4.1093': attribute type 10 has an invalid length. [ 183.338500][ T9698] veth1_macvtap: left promiscuous mode [ 183.413244][ T9695] tap1: tun_chr_ioctl cmd 1074025677 [ 183.425968][ T9695] tap1: linktype set to 0 [ 183.462544][ T9700] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1092'. [ 183.519105][ T9609] chnl_net:caif_netlink_parms(): no params data found [ 183.549086][ T9695] netlink: 'syz.1.1092': attribute type 10 has an invalid length. [ 183.602491][ T9695] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 183.731650][ T9723] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1098'. [ 183.779446][ T9725] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 183.806055][ T9722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1099'. [ 183.820937][ T9722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1099'. [ 183.860480][ T9722] ipvlan3: entered allmulticast mode [ 183.890312][ T9722] veth0_vlan: entered allmulticast mode [ 184.115707][ T9741] x_tables: duplicate underflow at hook 1 [ 184.140236][ T5234] Bluetooth: hci1: command tx timeout [ 184.230165][ T9751] x_tables: duplicate underflow at hook 1 [ 184.298146][ T9609] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.338904][ T9609] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.348693][ T9760] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1108'. [ 184.383197][ T9609] bridge_slave_0: entered allmulticast mode [ 184.398583][ T9609] bridge_slave_0: entered promiscuous mode [ 184.440275][ T9759] netlink: 'syz.3.1108': attribute type 1 has an invalid length. [ 184.453498][ T9609] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.479681][ T9609] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.507317][ T9609] bridge_slave_1: entered allmulticast mode [ 184.530432][ T9609] bridge_slave_1: entered promiscuous mode [ 184.630049][ T9609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.660618][ T9609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.778492][ T9609] team0: Port device team_slave_0 added [ 184.831513][ T9609] team0: Port device team_slave_1 added [ 184.927907][ T9782] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 185.037974][ T9609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.086375][ T9609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.136258][ T9788] xt_CT: No such helper "syz1" [ 185.160716][ T9609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.199408][ T9609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.236362][ T9609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.335304][ T9609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.607230][ T9609] hsr_slave_0: entered promiscuous mode [ 185.622041][ T9820] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1123'. [ 185.635208][ T9609] hsr_slave_1: entered promiscuous mode [ 185.654936][ T9609] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 185.670081][ T9609] Cannot create hsr debugfs directory [ 185.885950][ T9836] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1125'. [ 185.982260][ T9843] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 186.217851][ T4625] Bluetooth: hci1: command tx timeout [ 186.465268][ T5238] Bluetooth: hci2: command 0x0406 tx timeout [ 186.477351][ T4625] Bluetooth: hci3: command 0x0406 tx timeout [ 186.534958][ T9881] netlink: 'syz.4.1136': attribute type 1 has an invalid length. [ 186.616468][ T9868] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1133'. [ 186.723799][ T9892] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1139'. [ 186.859707][ T9894] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 186.904750][ T9896] netlink: 'syz.0.1141': attribute type 34 has an invalid length. [ 187.098347][ T9901] ip6t_srh: unknown srh invflags 5F00 [ 187.432218][ T9919] dvmrp1: entered allmulticast mode [ 187.532504][ T9609] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 187.579279][ T9609] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 187.643741][ T9609] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 187.674722][ T9609] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 187.836041][ T9935] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20001 [ 187.880087][ T9934] netlink: 'syz.0.1151': attribute type 12 has an invalid length. [ 187.924877][ T9609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.073434][ T9609] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.118321][ T2508] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.125596][ T2508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.231257][ T2555] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.238533][ T2555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.275359][ T9949] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 188.297122][ T5234] Bluetooth: hci1: command tx timeout [ 188.620041][ T9967] __nla_validate_parse: 4 callbacks suppressed [ 188.620061][ T9967] netlink: 504 bytes leftover after parsing attributes in process `syz.0.1158'. [ 188.662228][ T9971] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1157'. [ 188.675664][ T9973] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1158'. [ 189.014622][ T9609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.105411][T10005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1165'. [ 189.171606][ T9609] veth0_vlan: entered promiscuous mode [ 189.279194][T10007] netlink: 'syz.4.1168': attribute type 11 has an invalid length. [ 189.297735][ T9609] veth1_vlan: entered promiscuous mode [ 189.326302][T10016] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 189.547961][T10018] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1170'. [ 189.614567][T10025] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1171'. [ 189.634083][T10025] netlink: 21 bytes leftover after parsing attributes in process `syz.1.1171'. [ 189.645966][T10025] netlink: 21 bytes leftover after parsing attributes in process `syz.1.1171'. [ 189.714778][T10030] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1172'. [ 189.725475][ T9609] veth0_macvtap: entered promiscuous mode [ 189.744001][ T9609] veth1_macvtap: entered promiscuous mode [ 189.752840][T10030] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1172'. [ 189.793787][ T9609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.812401][ T9609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.825784][ T9609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.840372][ T9609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.868303][ T9609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.890214][ T9609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.919043][ T9609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.929560][ T9609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.940904][ T9609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.952289][ T9609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.965839][ T9609] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.976130][ T9609] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.985305][ T9609] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.994428][ T9609] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.074180][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.083221][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.111702][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.119819][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.291124][ T2529] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.337662][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 193.346084][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 193.381862][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 193.391936][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 193.400800][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 193.409885][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 193.419723][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 193.429771][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 193.496973][ T2529] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.585821][ T2529] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.669730][ T2529] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.685302][T10039] chnl_net:caif_netlink_parms(): no params data found [ 193.762714][T10039] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.770259][T10039] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.777965][T10039] bridge_slave_0: entered allmulticast mode [ 193.785380][T10039] bridge_slave_0: entered promiscuous mode [ 193.793496][T10039] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.801009][T10039] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.809457][T10039] bridge_slave_1: entered allmulticast mode [ 193.816249][T10039] bridge_slave_1: entered promiscuous mode [ 193.855655][T10039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.879502][T10039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.955532][T10039] team0: Port device team_slave_0 added [ 193.969715][T10039] team0: Port device team_slave_1 added [ 194.007873][ T2529] bridge_slave_1: left allmulticast mode [ 194.013802][ T2529] bridge_slave_1: left promiscuous mode [ 194.020490][ T2529] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.036235][ T2529] bridge_slave_0: left allmulticast mode [ 194.047825][ T2529] bridge_slave_0: left promiscuous mode [ 194.053638][ T2529] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.628278][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.635224][ T2529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.651100][ T2529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.663394][ T2529] bond0 (unregistering): Released all slaves [ 194.754224][T10039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.761807][T10039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.789351][T10039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.828077][T10039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.835052][T10039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.864522][T10039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.916022][T10039] hsr_slave_0: entered promiscuous mode [ 194.929049][T10039] hsr_slave_1: entered promiscuous mode [ 194.935191][T10039] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 194.943307][T10039] Cannot create hsr debugfs directory [ 195.060749][ T2529] hsr_slave_0: left promiscuous mode [ 195.075927][ T2529] hsr_slave_1: left promiscuous mode [ 195.082382][ T2529] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.091912][ T2529] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.118936][ T2529] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.126412][ T2529] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.172419][ T2529] veth1_macvtap: left promiscuous mode [ 195.185581][ T2529] veth0_macvtap: left promiscuous mode [ 195.193597][ T2529] veth1_vlan: left promiscuous mode [ 195.199251][ T2529] veth0_vlan: left promiscuous mode [ 195.500719][ T54] Bluetooth: hci1: command tx timeout [ 195.765941][ T2529] team0 (unregistering): Port device team_slave_1 removed [ 195.812404][ T2529] team0 (unregistering): Port device team_slave_0 removed [ 196.891313][T10039] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 196.905461][T10039] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 196.917754][T10039] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 196.931539][T10039] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 197.029529][T10039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.054607][T10039] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.067703][ T2529] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.074822][ T2529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.094248][ T977] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.101531][ T977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.340249][T10039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.403310][T10039] veth0_vlan: entered promiscuous mode [ 197.425824][T10039] veth1_vlan: entered promiscuous mode [ 197.478457][T10039] veth0_macvtap: entered promiscuous mode [ 197.490711][T10039] veth1_macvtap: entered promiscuous mode [ 197.523096][T10039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.535035][T10039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.545630][T10039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.556516][T10039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.577588][ T54] Bluetooth: hci1: command tx timeout [ 197.578741][T10039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.606808][T10039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.626034][T10039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.643363][T10039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.654524][T10039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.673787][T10039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.698119][T10039] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.716165][T10039] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.726358][T10039] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.743378][T10039] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.874417][ T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.888494][ T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.937371][ T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.947441][ T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.498343][ T2529] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.666181][ T5234] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 201.677578][ T5234] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 201.685726][ T5234] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 201.694978][ T5234] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 201.703235][ T5234] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 201.711452][ T5234] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 201.870412][T10139] chnl_net:caif_netlink_parms(): no params data found [ 201.934730][T10139] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.942669][T10139] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.950691][T10139] bridge_slave_0: entered allmulticast mode [ 201.959466][T10139] bridge_slave_0: entered promiscuous mode [ 201.969440][T10139] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.977466][T10139] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.984906][T10139] bridge_slave_1: entered allmulticast mode [ 201.992289][T10139] bridge_slave_1: entered promiscuous mode [ 202.023145][T10139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.035961][T10139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.074093][T10139] team0: Port device team_slave_0 added [ 202.083372][T10139] team0: Port device team_slave_1 added [ 202.110529][T10139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.117998][T10139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.145531][T10139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.161372][T10139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.169800][T10139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.198926][T10139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.243160][T10139] hsr_slave_0: entered promiscuous mode [ 202.250180][T10139] hsr_slave_1: entered promiscuous mode [ 202.256314][T10139] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.264319][T10139] Cannot create hsr debugfs directory [ 203.198129][ T2529] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.276463][ T2529] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.355871][ T2529] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.514072][ T2529] bridge_slave_1: left allmulticast mode [ 203.522929][ T2529] bridge_slave_1: left promiscuous mode [ 203.529070][ T2529] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.540359][ T2529] bridge_slave_0: left allmulticast mode [ 203.546027][ T2529] bridge_slave_0: left promiscuous mode [ 203.552359][ T2529] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.666455][T10152] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1174'. [ 203.737432][ T5234] Bluetooth: hci1: command tx timeout [ 204.082510][ T2529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.099209][ T2529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.113747][ T2529] bond0 (unregistering): Released all slaves [ 204.203963][T10152] vlan4: entered promiscuous mode [ 204.276491][T10156] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.525675][T10177] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1181'. [ 204.596619][T10178] veth0_to_team: entered promiscuous mode [ 204.611524][T10177] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1181'. [ 204.768826][T10185] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 205.033354][T10186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1179'. [ 205.089686][ T2529] hsr_slave_0: left promiscuous mode [ 205.097572][ T2529] hsr_slave_1: left promiscuous mode [ 205.123974][ T2529] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.140510][ T2529] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.162624][ T2529] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.181163][ T2529] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.236723][ T2529] veth1_macvtap: left promiscuous mode [ 205.253190][ T2529] veth0_macvtap: left promiscuous mode [ 205.268560][ T2529] veth1_vlan: left promiscuous mode [ 205.279676][ T2529] veth0_vlan: left promiscuous mode [ 205.784844][ T2529] team0 (unregistering): Port device team_slave_1 removed [ 205.820352][ T5234] Bluetooth: hci1: command tx timeout [ 205.843524][ T2529] team0 (unregistering): Port device team_slave_0 removed [ 206.308238][T10202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1186'. [ 206.320822][T10170] veth0_to_team: left promiscuous mode [ 206.347393][T10203] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 206.581533][T10225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.609387][T10139] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 206.692130][T10139] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 206.761560][T10139] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 206.797764][T10139] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 207.044980][T10139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.088903][T10139] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.104952][ T2529] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.112248][ T2529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.132387][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.139602][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.314278][T10255] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1198'. [ 207.670876][T10267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1201'. [ 207.679207][T10139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.728458][T10269] x_tables: duplicate underflow at hook 2 [ 207.843398][T10139] veth0_vlan: entered promiscuous mode [ 207.867147][T10139] veth1_vlan: entered promiscuous mode [ 207.897749][ T5234] Bluetooth: hci1: command tx timeout [ 207.953067][ T5279] IPVS: starting estimator thread 0... [ 207.975117][T10139] veth0_macvtap: entered promiscuous mode [ 207.993607][T10278] Bluetooth: MGMT ver 1.23 [ 208.014867][T10278] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 208.046774][T10139] veth1_macvtap: entered promiscuous mode [ 208.059095][T10278] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20001 [ 208.097512][T10280] IPVS: using max 20 ests per chain, 48000 per kthread [ 208.116605][T10139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.146670][T10139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.172840][T10139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.205337][T10139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.222758][T10139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.286750][T10139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.323002][T10139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.346433][T10139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.385704][T10139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.403513][T10139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.421103][T10139] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.434848][T10139] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.454634][T10139] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.468827][T10139] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.506240][T10296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1209'. [ 208.697498][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.704772][ C0] bridge0: topology change detected, propagating [ 208.711679][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.718943][ C0] bridge0: topology change detected, propagating [ 208.833300][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.863604][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.934799][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.966212][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.995886][T10308] netlink: 'syz.4.1214': attribute type 21 has an invalid length. [ 209.031059][T10308] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1214'. [ 209.046542][T10311] netlink: 'syz.4.1214': attribute type 1 has an invalid length. [ 209.066663][T10311] netlink: 'syz.4.1214': attribute type 1 has an invalid length. [ 209.098581][T10308] netlink: 'syz.4.1214': attribute type 5 has an invalid length. [ 209.121545][T10308] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1214'. [ 209.140413][T10311] netlink: 'syz.4.1214': attribute type 1 has an invalid length. [ 209.167217][T10321] Bluetooth: hci3: invalid length 1, exp 2 for type 30 [ 209.167661][T10311] netlink: 'syz.4.1214': attribute type 2 has an invalid length. [ 209.226104][T10311] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1214'. [ 209.460515][T10327] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1220'. [ 209.485168][T10337] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 209.722282][T10349] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1227'. [ 209.881125][T10357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.232536][T10378] macvtap0: entered promiscuous mode [ 210.243718][T10378] macvtap0: left promiscuous mode [ 210.357283][T10384] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1238'. [ 210.371612][T10384] ieee802154 phy1 wpan1: encryption failed: -22 [ 210.442070][T10390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1238'. [ 210.477295][T10390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1238'. [ 210.530568][T10390] netlink: 'syz.1.1238': attribute type 4 has an invalid length. [ 210.557396][T10390] netlink: 'syz.1.1238': attribute type 4 has an invalid length. [ 210.743610][T10401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1243'. [ 210.781432][T10405] ebt_among: dst integrity fail: 200 [ 210.813423][T10407] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1245'. [ 210.893786][T10409] netlink: 'syz.4.1247': attribute type 4 has an invalid length. [ 211.043354][T10415] netlink: 'syz.4.1247': attribute type 4 has an invalid length. [ 211.266294][T10435] delete_channel: no stack [ 211.441929][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.816455][T10455] x_tables: eb_tables: quota.0 match: invalid size 24 (kernel) != (user) 0 [ 212.855281][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.016647][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.092084][T10466] bond0: (slave ÿÿÿÿ): Enslaving as an active interface with an up link [ 213.125971][T10472] bond0: entered promiscuous mode [ 213.144992][T10472] bond_slave_0: entered promiscuous mode [ 213.145543][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 213.152559][T10472] bond_slave_1: entered promiscuous mode [ 213.165065][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 213.165193][T10472] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 213.185184][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 213.186012][T10472] dummy0: entered promiscuous mode [ 213.200120][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 213.209522][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 213.217446][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 213.279631][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.700414][ T12] bridge_slave_1: left allmulticast mode [ 213.706114][ T12] bridge_slave_1: left promiscuous mode [ 213.720830][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.774957][ T12] bridge_slave_0: left allmulticast mode [ 213.786142][ T12] bridge_slave_0: left promiscuous mode [ 213.793819][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.820263][ T5310] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 213.944922][T10516] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 214.601295][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.615696][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.628518][ T12] bond0 (unregistering): Released all slaves [ 214.650227][T10523] __nla_validate_parse: 7 callbacks suppressed [ 214.650246][T10523] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1276'. [ 214.677492][T10523] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1276'. [ 214.718976][T10527] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1278'. [ 215.338225][ T54] Bluetooth: hci1: command tx timeout [ 215.351815][T10477] chnl_net:caif_netlink_parms(): no params data found [ 215.493867][T10586] validate_nla: 2 callbacks suppressed [ 215.493885][T10586] netlink: 'syz.4.1289': attribute type 1 has an invalid length. [ 215.737795][ T977] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 215.858232][ T12] hsr_slave_0: left promiscuous mode [ 215.875252][ T12] hsr_slave_1: left promiscuous mode [ 215.899567][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.915652][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.931185][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.944555][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.005917][ T12] veth1_macvtap: left promiscuous mode [ 216.018529][ T12] veth0_macvtap: left promiscuous mode [ 216.026769][ T12] veth1_vlan: left promiscuous mode [ 216.041744][ T12] veth0_vlan: left promiscuous mode [ 216.042002][T10606] x_tables: duplicate underflow at hook 1 [ 217.417121][ T54] Bluetooth: hci1: command tx timeout [ 218.813353][ T12] team0 (unregistering): Port device team_slave_1 removed [ 218.863707][ T12] team0 (unregistering): Port device team_slave_0 removed [ 219.402544][T10599] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1292'. [ 219.497124][ T54] Bluetooth: hci1: command tx timeout [ 219.655761][T10620] netlink: zone id is out of range [ 219.663713][T10477] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.691683][T10477] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.711213][T10620] netlink: set zone limit has 4 unknown bytes [ 219.726120][T10477] bridge_slave_0: entered allmulticast mode [ 219.769404][T10477] bridge_slave_0: entered promiscuous mode [ 219.825580][T10477] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.868731][T10477] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.876063][T10477] bridge_slave_1: entered allmulticast mode [ 219.948622][T10477] bridge_slave_1: entered promiscuous mode [ 220.248205][T10477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.300688][T10477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.321933][T10652] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1302'. [ 220.337032][T10652] netlink: 'syz.1.1302': attribute type 7 has an invalid length. [ 220.362499][T10652] netlink: 'syz.1.1302': attribute type 8 has an invalid length. [ 220.394670][T10652] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1302'. [ 220.444800][T10652] erspan0: entered promiscuous mode [ 220.468834][T10652] batadv_slave_1: entered promiscuous mode [ 220.523927][T10652] gretap0: entered promiscuous mode [ 220.555065][T10659] lo speed is unknown, defaulting to 1000 [ 220.630097][T10678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1307'. [ 220.645515][T10678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1307'. [ 220.695078][T10477] team0: Port device team_slave_0 added [ 220.711317][T10477] team0: Port device team_slave_1 added [ 220.779457][T10659] lo speed is unknown, defaulting to 1000 [ 220.845879][T10659] lo speed is unknown, defaulting to 1000 [ 220.855002][T10682] vlan4: entered promiscuous mode [ 220.862788][ T2529] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 220.880861][T10682] dummy0: entered promiscuous mode [ 220.903127][T10682] dummy0: left promiscuous mode [ 220.958892][T10477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.969749][T10688] netlink: 'syz.3.1310': attribute type 13 has an invalid length. [ 220.976983][T10477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.027367][T10477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.050196][T10477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.063901][T10477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.100075][T10477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.163404][T10659] infiniband syz0: set active [ 221.179835][T10659] infiniband syz0: added lo [ 221.192559][T10659] syz0: rxe_create_cq: returned err = -12 [ 221.214278][T10659] infiniband syz0: Couldn't create ib_mad CQ [ 221.223298][ T5309] lo speed is unknown, defaulting to 1000 [ 221.249702][T10659] infiniband syz0: Couldn't open port 1 [ 221.294657][T10693] af_packet: tpacket_rcv: packet too big, clamped from 212960 to 3952. macoff=96 [ 221.310252][T10477] hsr_slave_0: entered promiscuous mode [ 221.322280][T10477] hsr_slave_1: entered promiscuous mode [ 221.323913][T10693] netlink: 'syz.0.1312': attribute type 1 has an invalid length. [ 221.336278][T10477] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 221.339445][T10659] RDS/IB: syz0: added [ 221.359685][T10659] smc: adding ib device syz0 with port count 1 [ 221.360105][T10477] Cannot create hsr debugfs directory [ 221.368428][T10693] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.1312'. [ 221.375317][T10695] netlink: 'syz.1.1313': attribute type 1 has an invalid length. [ 221.389456][T10659] smc: ib device syz0 port 1 has pnetid [ 221.432086][ T5309] lo speed is unknown, defaulting to 1000 [ 221.518694][T10659] lo speed is unknown, defaulting to 1000 [ 221.577240][ T5234] Bluetooth: hci1: command tx timeout [ 221.601239][T10701] netlink: 'syz.0.1314': attribute type 4 has an invalid length. [ 221.696210][T10705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.015601][T10719] netlink: 'syz.0.1317': attribute type 1 has an invalid length. [ 222.048291][T10719] netlink: 9352 bytes leftover after parsing attributes in process `syz.0.1317'. [ 222.075023][T10719] netlink: 'syz.0.1317': attribute type 1 has an invalid length. [ 222.101907][T10659] lo speed is unknown, defaulting to 1000 [ 222.109408][T10719] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1317'. [ 222.389957][T10728] netlink: 'syz.0.1320': attribute type 1 has an invalid length. [ 222.452374][T10735] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1321'. [ 222.481502][T10729] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1320'. [ 222.736461][T10659] lo speed is unknown, defaulting to 1000 [ 222.930602][T10752] netlink: 'syz.1.1326': attribute type 15 has an invalid length. [ 223.016703][T10477] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 223.048408][T10477] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 223.089150][T10477] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 223.119298][T10757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1328'. [ 223.138761][T10477] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 223.210742][T10659] lo speed is unknown, defaulting to 1000 [ 223.225286][T10761] xt_l2tp: missing protocol rule (udp|l2tpip) [ 223.439259][ T943] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 223.449736][T10477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.543008][T10477] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.598397][ T2529] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.605539][ T2529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.658442][ T5234] Bluetooth: hci1: command 0x0405 tx timeout [ 223.705237][ T2529] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.712458][ T2529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.903839][T10659] lo speed is unknown, defaulting to 1000 [ 225.010445][T10803] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 225.201979][T10477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.519287][T10814] __nla_validate_parse: 5 callbacks suppressed [ 225.519307][T10814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1337'. [ 225.556281][T10477] veth0_vlan: entered promiscuous mode [ 225.662769][T10477] veth1_vlan: entered promiscuous mode [ 225.732320][T10820] xt_TCPMSS: Only works on TCP SYN packets [ 225.842639][T10814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1337'. [ 225.915361][T10814] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1337'. [ 225.956691][T10477] veth0_macvtap: entered promiscuous mode [ 225.963900][T10826] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1340'. [ 226.077774][T10477] veth1_macvtap: entered promiscuous mode [ 226.228459][T10477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.322678][T10477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.410644][T10477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.482157][T10477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.494448][T10833] xt_l2tp: v2 sid > 0xffff: 262144 [ 226.551337][T10477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.603159][T10477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.614053][T10477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.624361][T10477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.624858][ T977] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 226.636114][T10477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.668739][T10477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.684105][T10844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1344'. [ 226.726382][T10477] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.762803][T10477] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.787229][T10477] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.796067][T10477] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.132066][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.155657][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.163643][T10854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1346'. [ 227.184259][T10854] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1346'. [ 227.273077][T10864] netlink: 'syz.1.1348': attribute type 29 has an invalid length. [ 227.316328][ T2529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.324305][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888025c9a400: rx timeout, send abort [ 227.384244][ T2529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.806292][T10895] netlink: 4068 bytes leftover after parsing attributes in process `syz.3.1352'. [ 227.824418][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888025c9a400: abort rx timeout. Force session deactivation [ 228.065345][T10919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1357'. [ 228.104336][T10919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1357'. [ 228.173591][T10921] netlink: 'syz.1.1357': attribute type 21 has an invalid length. [ 228.325135][T10919] tipc: Started in network mode [ 228.351997][T10919] tipc: Node identity , cluster identity 4711 [ 228.390365][T10937] netlink: 'syz.4.1361': attribute type 3 has an invalid length. [ 228.598535][T10945] tls_set_device_offload_rx: netdev not found [ 228.711973][T10940] syzkaller0: entered promiscuous mode [ 228.736996][T10940] syzkaller0: entered allmulticast mode [ 228.849131][ T977] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.894302][ T52] syzkaller0: tun_net_xmit 48 [ 228.905180][T10946] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 228.913651][T10946] syzkaller0: Linktype set failed because interface is up [ 230.577014][ T5234] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 230.597817][ T5234] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 230.606245][ T5234] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 230.629585][ T5234] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 230.641824][ T5234] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 230.650488][ T5234] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 231.496702][T10989] x_tables: duplicate underflow at hook 2 [ 231.696014][ T977] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.744576][T10992] netlink: 'syz.4.1374': attribute type 5 has an invalid length. [ 231.806714][T10996] netlink: 'syz.1.1376': attribute type 1 has an invalid length. [ 231.888394][ T977] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.921952][T10998] __nla_validate_parse: 4 callbacks suppressed [ 231.921973][T10998] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1376'. [ 231.940230][T10982] lo speed is unknown, defaulting to 1000 [ 231.957463][T10996] netlink: 'syz.1.1376': attribute type 1 has an invalid length. [ 231.996251][T11004] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1378'. [ 232.195879][ T977] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.381326][ T2529] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 232.647099][ T977] bridge_slave_1: left allmulticast mode [ 232.657353][ T977] bridge_slave_1: left promiscuous mode [ 232.663654][ T977] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.730076][ T977] bridge_slave_0: left allmulticast mode [ 232.757296][ T977] bridge_slave_0: left promiscuous mode [ 232.776301][ T977] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.778503][ T5234] Bluetooth: hci1: command tx timeout [ 232.848863][T11056] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1391'. [ 232.912697][T11058] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1393'. [ 232.999968][T11061] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1392'. [ 233.019451][ T943] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 233.395182][ T977] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.406770][ T977] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.421861][ T977] bond0 (unregistering): Released all slaves [ 233.709632][T11082] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 233.954856][T11090] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1399'. [ 234.015393][T10982] chnl_net:caif_netlink_parms(): no params data found [ 234.029445][T11090] netlink: 'syz.4.1399': attribute type 2 has an invalid length. [ 234.062462][T11090] netlink: 509 bytes leftover after parsing attributes in process `syz.4.1399'. [ 234.300852][T11110] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1402'. [ 234.643464][T11122] dvmrp0: entered allmulticast mode [ 234.854276][ T977] hsr_slave_0: left promiscuous mode [ 234.859734][ T5234] Bluetooth: hci1: command tx timeout [ 234.883009][ T977] hsr_slave_1: left promiscuous mode [ 234.902200][ C0] ------------[ cut here ]------------ [ 234.907977][ C0] WARNING: CPU: 0 PID: 11135 at net/hsr/hsr_forward.c:602 hsr_fill_frame_info+0x3da/0x570 [ 234.918074][ C0] Modules linked in: [ 234.922025][ C0] CPU: 0 UID: 0 PID: 11135 Comm: syz.1.1408 Not tainted 6.11.0-rc6-syzkaller-00178-gd759ee240d3c #0 [ 234.932883][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 234.943042][ C0] RIP: 0010:hsr_fill_frame_info+0x3da/0x570 [ 234.949093][ C0] Code: 00 31 c0 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 e5 16 f9 f5 90 0f 0b 90 e9 09 ff ff ff e8 d7 16 f9 f5 90 <0f> 0b 90 eb 93 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c a3 fc ff ff 48 [ 234.968822][ C0] RSP: 0018:ffffc90000007278 EFLAGS: 00010246 [ 234.974935][ C0] RAX: ffffffff8b9a75d9 RBX: 0000000000000000 RCX: ffff88802d025a00 [ 234.982995][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 234.991051][ C0] RBP: ffff88807ca26cc0 R08: ffffffff8b9a7429 R09: 0000000000000000 [ 234.999107][ C0] R10: ffffc900000073c8 R11: fffff52000000e7b R12: dffffc0000000000 [ 235.007586][ C0] R13: 0000000000000008 R14: ffff88802851db20 R15: ffffc900000073c0 [ 235.015591][ C0] FS: 00007f32079ff6c0(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 235.024604][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 235.031269][ C0] CR2: 00007fe401a0bd58 CR3: 000000004f038000 CR4: 00000000003506f0 [ 235.039326][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 235.047368][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 235.055373][ C0] Call Trace: [ 235.058721][ C0] [ 235.061583][ C0] ? __warn+0x163/0x4e0 [ 235.065812][ C0] ? hsr_fill_frame_info+0x3da/0x570 [ 235.071196][ C0] ? report_bug+0x2b3/0x500 [ 235.075745][ C0] ? hsr_fill_frame_info+0x3da/0x570 [ 235.081120][ C0] ? handle_bug+0x3e/0x70 [ 235.085494][ C0] ? exc_invalid_op+0x1a/0x50 [ 235.090258][ C0] ? asm_exc_invalid_op+0x1a/0x20 [ 235.095328][ C0] ? hsr_fill_frame_info+0x229/0x570 [ 235.100731][ C0] ? hsr_fill_frame_info+0x3d9/0x570 [ 235.106063][ C0] ? hsr_fill_frame_info+0x3da/0x570 [ 235.111432][ C0] ? hsr_fill_frame_info+0x3d9/0x570 [ 235.116897][ C0] hsr_forward_skb+0x847/0x2b60 [ 235.121805][ C0] ? hsr_forward_skb+0xaf/0x2b60 [ 235.126783][ C0] ? __pfx_hsr_forward_skb+0x10/0x10 [ 235.132255][ C0] ? metadata_dst_alloc+0x2b/0x3f0 [ 235.137492][ C0] ? skb_push+0x97/0x100 [ 235.141787][ C0] hsr_handle_frame+0x51b/0x7d0 [ 235.146740][ C0] ? __pfx_hsr_handle_frame+0x10/0x10 [ 235.152218][ C0] __netif_receive_skb_core+0x13e8/0x4570 [ 235.158032][ C0] ? gre_rcv+0xd5/0x460 [ 235.162254][ C0] ? validate_chain+0x11e/0x5900 [ 235.167280][ C0] ? ip_local_deliver_finish+0x230/0x5f0 [ 235.172977][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 235.179249][ C0] ? mark_lock+0x9a/0x350 [ 235.183624][ C0] ? __pfx_validate_chain+0x10/0x10 [ 235.188930][ C0] ? __lock_acquire+0x137a/0x2040 [ 235.194011][ C0] __netif_receive_skb_list_core+0x2b7/0x980 [ 235.200100][ C0] ? mark_lock+0x9a/0x350 [ 235.204479][ C0] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 235.211101][ C0] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 235.217512][ C0] netif_receive_skb_list_internal+0xa51/0xe30 [ 235.223716][ C0] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 235.230148][ C0] ? dev_gro_receive+0x108f/0x24b0 [ 235.235301][ C0] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 235.242090][ C0] napi_complete_done+0x310/0x8e0 [ 235.247222][ C0] ? __pfx_napi_complete_done+0x10/0x10 [ 235.252819][ C0] ? rcu_is_watching+0x15/0xb0 [ 235.257689][ C0] ? napi_gro_receive+0x6f3/0xc90 [ 235.262766][ C0] gro_cell_poll+0x19a/0x1c0 [ 235.267470][ C0] __napi_poll+0xcb/0x490 [ 235.271862][ C0] net_rx_action+0x89b/0x1240 [ 235.276603][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 235.281828][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 235.287578][ C0] handle_softirqs+0x2c4/0x970 [ 235.292395][ C0] ? do_softirq+0x11b/0x1e0 [ 235.296997][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 235.302436][ C0] do_softirq+0x11b/0x1e0 [ 235.306887][ C0] [ 235.309844][ C0] [ 235.312795][ C0] ? __pfx_do_softirq+0x10/0x10 [ 235.317745][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 235.323418][ C0] ? rcu_is_watching+0x15/0xb0 [ 235.328293][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 235.333562][ C0] ? __dev_queue_xmit+0x2da/0x3e90 [ 235.338791][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 235.344736][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 235.350055][ C0] ? __dev_queue_xmit+0x2da/0x3e90 [ 235.355216][ C0] __dev_queue_xmit+0x1763/0x3e90 [ 235.360484][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 235.366656][ C0] ? __dev_queue_xmit+0x2da/0x3e90 [ 235.371968][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 235.377433][ C0] ? neigh_resolve_output+0x450/0x740 [ 235.382848][ C0] ? read_seqbegin+0x157/0x2b0 [ 235.387700][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 235.392939][ C0] ? read_seqbegin+0x208/0x2b0 [ 235.397811][ C0] ? __pfx_read_seqbegin+0x10/0x10 [ 235.402989][ C0] ? neigh_resolve_output+0x2e5/0x740 [ 235.408466][ C0] ? eth_header+0x11c/0x1f0 [ 235.413013][ C0] ? __asan_memcpy+0x40/0x70 [ 235.417687][ C0] ? eth_header+0x11c/0x1f0 [ 235.422232][ C0] ? __pfx_eth_header+0x10/0x10 [ 235.427259][ C0] ? neigh_resolve_output+0x61f/0x740 [ 235.432682][ C0] ? ip_finish_output2+0x45f/0x1390 [ 235.437957][ C0] ? ip_finish_output2+0x45f/0x1390 [ 235.443203][ C0] ip_finish_output2+0xe70/0x1390 [ 235.448318][ C0] ? ip_finish_output2+0x45f/0x1390 [ 235.453550][ C0] ? __pfx_ip_finish_output+0x10/0x10 [ 235.459030][ C0] ? __pfx_ip_finish_output2+0x10/0x10 [ 235.464539][ C0] ? ip_mc_finish_output+0x20d/0x570 [ 235.469934][ C0] ? ip_skb_dst_mtu+0x6ba/0x9b0 [ 235.475092][ C0] ? __ip_finish_output+0x349/0x400 [ 235.480404][ C0] __ip_queue_xmit+0x118c/0x1b80 [ 235.485401][ C0] ? __ip_queue_xmit+0x5f/0x1b80 [ 235.490445][ C0] sctp_packet_transmit+0x26af/0x2ca0 [ 235.495983][ C0] sctp_packet_singleton+0x22c/0x320 [ 235.501365][ C0] ? __pfx_sctp_packet_singleton+0x10/0x10 [ 235.507258][ C0] ? sctp_outq_select_transport+0x474/0x580 [ 235.513192][ C0] ? sctp_transport_burst_limited+0x18c/0x270 [ 235.519371][ C0] sctp_outq_flush+0x6d5/0x3e20 [ 235.524431][ C0] ? rcu_is_watching+0x15/0xb0 [ 235.529329][ C0] ? __pfx_sctp_outq_flush+0x10/0x10 [ 235.534663][ C0] ? sctp_outq_tail+0x67a/0x930 [ 235.539629][ C0] ? sctp_outq_uncork+0x4f/0xb0 [ 235.544531][ C0] sctp_do_sm+0x59cc/0x60c0 [ 235.549126][ C0] ? stack_depot_save_flags+0x29/0x830 [ 235.554627][ C0] ? kasan_save_track+0x51/0x80 [ 235.559582][ C0] ? __kasan_kmalloc+0x98/0xb0 [ 235.564376][ C0] ? sctp_stream_init_ext+0x56/0x180 [ 235.569755][ C0] ? __pfx_sctp_do_sm+0x10/0x10 [ 235.574656][ C0] ? __sk_mem_raise_allocated+0xa5f/0x1140 [ 235.580537][ C0] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 235.585961][ C0] sctp_sendmsg_to_asoc+0xfa5/0x1800 [ 235.591358][ C0] ? __asan_memcpy+0x40/0x70 [ 235.596002][ C0] ? sctp_assoc_add_peer+0xe3c/0x15c0 [ 235.601563][ C0] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 235.607374][ C0] ? sctp_connect_new_asoc+0x3fe/0x6c0 [ 235.612860][ C0] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 235.618738][ C0] ? sctp_sendmsg+0xbb9/0x3520 [ 235.623550][ C0] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 235.629237][ C0] ? security_sctp_bind_connect+0x90/0xb0 [ 235.635012][ C0] sctp_sendmsg+0x1bc3/0x3520 [ 235.639822][ C0] ? __pfx_sctp_sendmsg+0x10/0x10 [ 235.644879][ C0] ? __pfx_aa_sk_perm+0x10/0x10 [ 235.649821][ C0] ? inet_sendmsg+0x330/0x390 [ 235.654575][ C0] __sock_sendmsg+0x1a6/0x270 [ 235.659354][ C0] ____sys_sendmsg+0x525/0x7d0 [ 235.664174][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 235.669588][ C0] __sys_sendmsg+0x2b0/0x3a0 [ 235.674219][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 235.679465][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 235.685824][ C0] ? do_syscall_64+0x100/0x230 [ 235.690666][ C0] ? do_syscall_64+0xb6/0x230 [ 235.695364][ C0] do_syscall_64+0xf3/0x230 [ 235.700062][ C0] ? clear_bhb_loop+0x35/0x90 [ 235.704769][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.710744][ C0] RIP: 0033:0x7f3207f7cef9 [ 235.715209][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.715248][T11136] base_sock_release(ffff88807fe81800) sk=ffff8880330c9000 [ 235.735054][ C0] RSP: 002b:00007f32079ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 235.735099][ C0] RAX: ffffffffffffffda RBX: 00007f3208135f80 RCX: 00007f3207f7cef9 [ 235.735117][ C0] RDX: 00000000000003e8 RSI: 00000000200004c0 RDI: 0000000000000005 [ 235.735130][ C0] RBP: 00007f3207fef046 R08: 0000000000000000 R09: 0000000000000000 [ 235.735145][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.735160][ C0] R13: 0000000000000000 R14: 00007f3208135f80 R15: 00007fff311360b8 [ 235.735194][ C0] [ 235.735206][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 235.735219][ C0] CPU: 0 UID: 0 PID: 11135 Comm: syz.1.1408 Not tainted 6.11.0-rc6-syzkaller-00178-gd759ee240d3c #0 [ 235.735244][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 235.735257][ C0] Call Trace: [ 235.735266][ C0] [ 235.735274][ C0] dump_stack_lvl+0x241/0x360 [ 235.735306][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 235.735328][ C0] ? __pfx__printk+0x10/0x10 [ 235.735345][ C0] ? _printk+0xd5/0x120 [ 235.735373][ C0] ? vscnprintf+0x5d/0x90 [ 235.735402][ C0] panic+0x349/0x860 [ 235.735425][ C0] ? __warn+0x172/0x4e0 [ 235.735449][ C0] ? __pfx_panic+0x10/0x10 [ 235.735467][ C0] ? show_trace_log_lvl+0x4e6/0x520 [ 235.735521][ C0] __warn+0x346/0x4e0 [ 235.735543][ C0] ? hsr_fill_frame_info+0x3da/0x570 [ 235.735567][ C0] report_bug+0x2b3/0x500 [ 235.735604][ C0] ? hsr_fill_frame_info+0x3da/0x570 [ 235.735630][ C0] handle_bug+0x3e/0x70 [ 235.735652][ C0] exc_invalid_op+0x1a/0x50 [ 235.735672][ C0] asm_exc_invalid_op+0x1a/0x20 [ 235.735696][ C0] RIP: 0010:hsr_fill_frame_info+0x3da/0x570 [ 235.735714][ C0] Code: 00 31 c0 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 e5 16 f9 f5 90 0f 0b 90 e9 09 ff ff ff e8 d7 16 f9 f5 90 <0f> 0b 90 eb 93 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c a3 fc ff ff 48 [ 235.735731][ C0] RSP: 0018:ffffc90000007278 EFLAGS: 00010246 [ 235.735749][ C0] RAX: ffffffff8b9a75d9 RBX: 0000000000000000 RCX: ffff88802d025a00 [ 235.735764][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 235.735777][ C0] RBP: ffff88807ca26cc0 R08: ffffffff8b9a7429 R09: 0000000000000000 [ 235.735791][ C0] R10: ffffc900000073c8 R11: fffff52000000e7b R12: dffffc0000000000 [ 235.735806][ C0] R13: 0000000000000008 R14: ffff88802851db20 R15: ffffc900000073c0 [ 235.735827][ C0] ? hsr_fill_frame_info+0x229/0x570 [ 235.735845][ C0] ? hsr_fill_frame_info+0x3d9/0x570 [ 235.735871][ C0] ? hsr_fill_frame_info+0x3d9/0x570 [ 235.735895][ C0] hsr_forward_skb+0x847/0x2b60 [ 235.735931][ C0] ? hsr_forward_skb+0xaf/0x2b60 [ 235.735952][ C0] ? __pfx_hsr_forward_skb+0x10/0x10 [ 235.735969][ C0] ? metadata_dst_alloc+0x2b/0x3f0 [ 235.736004][ C0] ? skb_push+0x97/0x100 [ 235.736033][ C0] hsr_handle_frame+0x51b/0x7d0 [ 235.736064][ C0] ? __pfx_hsr_handle_frame+0x10/0x10 [ 235.736091][ C0] __netif_receive_skb_core+0x13e8/0x4570 [ 235.736121][ C0] ? gre_rcv+0xd5/0x460 [ 235.736150][ C0] ? validate_chain+0x11e/0x5900 [ 235.736169][ C0] ? ip_local_deliver_finish+0x230/0x5f0 [ 235.736203][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 235.736238][ C0] ? mark_lock+0x9a/0x350 [ 235.736263][ C0] ? __pfx_validate_chain+0x10/0x10 [ 235.736286][ C0] ? __lock_acquire+0x137a/0x2040 [ 235.736330][ C0] __netif_receive_skb_list_core+0x2b7/0x980 [ 235.736356][ C0] ? mark_lock+0x9a/0x350 [ 235.736392][ C0] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 235.736434][ C0] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 235.736461][ C0] netif_receive_skb_list_internal+0xa51/0xe30 [ 235.736493][ C0] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 235.736517][ C0] ? dev_gro_receive+0x108f/0x24b0 [ 235.736542][ C0] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 235.736594][ C0] napi_complete_done+0x310/0x8e0 [ 235.736627][ C0] ? __pfx_napi_complete_done+0x10/0x10 [ 235.736659][ C0] ? rcu_is_watching+0x15/0xb0 [ 235.736685][ C0] ? napi_gro_receive+0x6f3/0xc90 [ 235.736715][ C0] gro_cell_poll+0x19a/0x1c0 [ 235.736742][ C0] __napi_poll+0xcb/0x490 [ 235.736772][ C0] net_rx_action+0x89b/0x1240 [ 235.736824][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 235.736852][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 235.736911][ C0] handle_softirqs+0x2c4/0x970 [ 235.736941][ C0] ? do_softirq+0x11b/0x1e0 [ 235.736968][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 235.737001][ C0] do_softirq+0x11b/0x1e0 [ 235.737024][ C0] [ 235.737031][ C0] [ 235.737040][ C0] ? __pfx_do_softirq+0x10/0x10 [ 235.737063][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 235.737093][ C0] ? rcu_is_watching+0x15/0xb0 [ 235.737121][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 235.737145][ C0] ? __dev_queue_xmit+0x2da/0x3e90 [ 235.737169][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 235.737193][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 235.737219][ C0] ? __dev_queue_xmit+0x2da/0x3e90 [ 235.737245][ C0] __dev_queue_xmit+0x1763/0x3e90 [ 235.737282][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 235.737307][ C0] ? __dev_queue_xmit+0x2da/0x3e90 [ 235.737335][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 235.737361][ C0] ? neigh_resolve_output+0x450/0x740 [ 235.737384][ C0] ? read_seqbegin+0x157/0x2b0 [ 235.737408][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 235.737429][ C0] ? read_seqbegin+0x208/0x2b0 [ 235.737456][ C0] ? __pfx_read_seqbegin+0x10/0x10 [ 235.737478][ C0] ? neigh_resolve_output+0x2e5/0x740 [ 235.737503][ C0] ? eth_header+0x11c/0x1f0 [ 235.737527][ C0] ? __asan_memcpy+0x40/0x70 [ 235.737552][ C0] ? eth_header+0x11c/0x1f0 [ 235.737581][ C0] ? __pfx_eth_header+0x10/0x10 [ 235.737602][ C0] ? neigh_resolve_output+0x61f/0x740 [ 235.737637][ C0] ? ip_finish_output2+0x45f/0x1390 [ 235.737655][ C0] ? ip_finish_output2+0x45f/0x1390 [ 235.737673][ C0] ip_finish_output2+0xe70/0x1390 [ 235.737695][ C0] ? ip_finish_output2+0x45f/0x1390 [ 235.737715][ C0] ? __pfx_ip_finish_output+0x10/0x10 [ 235.737745][ C0] ? __pfx_ip_finish_output2+0x10/0x10 [ 235.737762][ C0] ? ip_mc_finish_output+0x20d/0x570 [ 235.737790][ C0] ? ip_skb_dst_mtu+0x6ba/0x9b0 [ 235.737819][ C0] ? __ip_finish_output+0x349/0x400 [ 235.737850][ C0] __ip_queue_xmit+0x118c/0x1b80 [ 235.737883][ C0] ? __ip_queue_xmit+0x5f/0x1b80 [ 235.737913][ C0] sctp_packet_transmit+0x26af/0x2ca0 [ 235.737963][ C0] sctp_packet_singleton+0x22c/0x320 [ 235.737989][ C0] ? __pfx_sctp_packet_singleton+0x10/0x10 [ 235.738022][ C0] ? sctp_outq_select_transport+0x474/0x580 [ 235.738045][ C0] ? sctp_transport_burst_limited+0x18c/0x270 [ 235.738074][ C0] sctp_outq_flush+0x6d5/0x3e20 [ 235.738094][ C0] ? rcu_is_watching+0x15/0xb0 [ 235.738142][ C0] ? __pfx_sctp_outq_flush+0x10/0x10 [ 235.738170][ C0] ? sctp_outq_tail+0x67a/0x930 [ 235.738192][ C0] ? sctp_outq_uncork+0x4f/0xb0 [ 235.738215][ C0] sctp_do_sm+0x59cc/0x60c0 [ 235.738237][ C0] ? stack_depot_save_flags+0x29/0x830 [ 235.738265][ C0] ? kasan_save_track+0x51/0x80 [ 235.738288][ C0] ? __kasan_kmalloc+0x98/0xb0 [ 235.738313][ C0] ? sctp_stream_init_ext+0x56/0x180 [ 235.738343][ C0] ? __pfx_sctp_do_sm+0x10/0x10 [ 235.738398][ C0] ? __sk_mem_raise_allocated+0xa5f/0x1140 [ 235.738438][ C0] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 235.738470][ C0] sctp_sendmsg_to_asoc+0xfa5/0x1800 [ 235.738506][ C0] ? __asan_memcpy+0x40/0x70 [ 235.738530][ C0] ? sctp_assoc_add_peer+0xe3c/0x15c0 [ 235.738559][ C0] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 235.738591][ C0] ? sctp_connect_new_asoc+0x3fe/0x6c0 [ 235.738612][ C0] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 235.738630][ C0] ? sctp_sendmsg+0xbb9/0x3520 [ 235.738662][ C0] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 235.738688][ C0] ? security_sctp_bind_connect+0x90/0xb0 [ 235.738719][ C0] sctp_sendmsg+0x1bc3/0x3520 [ 235.738763][ C0] ? __pfx_sctp_sendmsg+0x10/0x10 [ 235.738793][ C0] ? __pfx_aa_sk_perm+0x10/0x10 [ 235.738821][ C0] ? inet_sendmsg+0x330/0x390 [ 235.738852][ C0] __sock_sendmsg+0x1a6/0x270 [ 235.738884][ C0] ____sys_sendmsg+0x525/0x7d0 [ 235.738916][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 235.738957][ C0] __sys_sendmsg+0x2b0/0x3a0 [ 235.738984][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 235.739049][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 235.739076][ C0] ? do_syscall_64+0x100/0x230 [ 235.739100][ C0] ? do_syscall_64+0xb6/0x230 [ 235.739123][ C0] do_syscall_64+0xf3/0x230 [ 235.739144][ C0] ? clear_bhb_loop+0x35/0x90 [ 235.739170][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.739193][ C0] RIP: 0033:0x7f3207f7cef9 [ 235.739210][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.739227][ C0] RSP: 002b:00007f32079ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 235.739247][ C0] RAX: ffffffffffffffda RBX: 00007f3208135f80 RCX: 00007f3207f7cef9 [ 235.739262][ C0] RDX: 00000000000003e8 RSI: 00000000200004c0 RDI: 0000000000000005 [ 235.739275][ C0] RBP: 00007f3207fef046 R08: 0000000000000000 R09: 0000000000000000 [ 235.739288][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.739301][ C0] R13: 0000000000000000 R14: 00007f3208135f80 R15: 00007fff311360b8 [ 235.739330][ C0] [ 235.742961][ C0] Kernel Offset: disabled