last executing test programs: 2.345731209s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'vlan0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macvlan0\x00'}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r3, &(0x7f0000000240)="2d9ee830be3b4c98b5f777da6f94ee3968efb0f3ccdcc42c5b73b77503e9c2e6a9184a91d3897e87e77dd945275c17e67f78811c0e8da17b04b1d051a984b0311fc67773fb6e7cd3d037f67ba7"}, 0x20) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8983, &(0x7f0000000040)={0x7, 'gre0\x00', {0x7}, 0x7}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020006c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000040000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$rds(0x15, 0x5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x40, r7, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffff}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @default=0x9b4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}]]}, 0x40}}, 0x0) bind$rds(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) unshare(0x20000400) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYRESOCT=0x0, @ANYRES16=r12, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r14, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005601000080ff0802110000010569ea7fa08e8df3d0edd086922799ded6be01d09a95b66d3d0000000000000000"], 0x398}}, 0x4811) sendmsg$IPVS_CMD_SET_DEST(r10, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYRES64=r7, @ANYRES16=0x0, @ANYBLOB="00012dbd7000fedbdf25060005000500000008000500ff07000014000180080005000400000008000b00736970000800040040000000fe0db958259fe274789e64c8db94bb35a4bdf0e82d91f15287e85ea1c6028e638419251fbc3c202951b4f437223daad19039c0ed585fe505d249abb4226523ae473a425cbd447a899f5d9d14bab1fcd7a2ef6fd7a2e03aeff205193d212da81a97a4c9dc46a5b2993911d01ec64363ffec83092d43afc1baac"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r15 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r15, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r15, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000080)='jbd2_handle_stats\x00', r4}, 0x10) 2.070412349s ago: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{}, {}, {}, {0x6, 0x0, 0x9}]}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'virt_wifi0\x00', @random="0200002000"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)={0x54, r4, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x20, 0x51, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "adff360dad"}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}]]}, 0x54}}, 0x0) ioctl$sock_netdev_private(r2, 0x89f1, &(0x7f0000000000)) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffd66, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}}, 0x0) close(r0) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r6, 0x10c, 0x6, &(0x7f0000000080)=0x101, 0x4) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000070a010100000039fc00000005000000d716749b3fac75137e3d601c67469c24fdba46b3b91bbe8bcf390853de255daff0b2aa9f58aa5f6d13"], 0x14}}, 0x40040) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}, @in6={0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, @in6={0xa, 0x4e20, 0x7, @mcast1, 0xb2}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x78) 1.84517554s ago: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x900}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x3a, 0x0, @remote, @multicast1}, {0x800e, 0x0, 0x8}}}}}}, 0x2e) 1.524311608s ago: executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x3, 0x0, 0x3, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) syz_emit_ethernet(0xfc0, &(0x7f0000001880)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd606b51cb0f8a8800fe800000000000000000000000000000ff020000000000000000000000020000000000000f8a90780200000000000000f6199e32b5a9d1c631e538af06ec44cd5e67e4663600ed9ad28b26d365324ddc4ea41b0b1ba17b244f5fd25da51bd63b1481b328311e66822e23735acd91e17ed849e3955ee76a2c3342f99aba8b0c1771050ce7863f1f296c7dcd709bccbb213959ca0f3d401e154887cbd6b08d7844951341f00eb25247a95c86965a3bb5561d63e9594ad1137c2e82b7134ec1970a015c3c729fe23c97fda809b3952c9437fd2210dd3f28f28b56716ad43358394c13257b4dc0264b5ee53b7220997e99a97696797d20e3b7cf179773470d2e57c6c0b50a198d76a89d0d67d9ef7e7cadc4dc607bf69604381abac2f57cae3e1909bafbdc5ecef6ae79d36f270f3193eb17f2aabe07d7598f17a65c481b2a8822192a8ae4882566dbacfef344a2601ac9d1c87851fc507293cad4b9e0ca072220076bcb99849d4d9edf84c6c75b75df10ceda61566332cdfe5c6ca0771c1dd9002d738e19eecf6820ac9f1e040141022b68518e3ea934aff92bf93aef07edfbc70e4ff3887ba542552c2b52f220ac1f64b7b388fd2e83d2d78311d8198971f479efd112c36cad28c08279cd1909b8f080d9eb20d9b89ecbf92f35efcdbf6f5e64ac500fb70601361b694994e7c2d9a72fc02c690a946fd8aec36b3594f9abd08d500573550e672a32ed2d311db6b82136f09461c62fa814d799f84681ba524019a6834063df79fd72f0532fac5b1fa21a29cce8cd6b4f682c0edc7b67f96339c6e5245fa273eea07160c998dcf6be443249c26a8495bfc762dbfeb1371b7bb843737f7fb9c7958ed780b87955afb4115c96be50b7231d504a0206b1568678956453e675fc38442ef313ea7ee5dd3efb5df64712c0ce98a02f5192d7ce0aed86cf89cf36f474a92249ccb61f0d553a3bd816b26bfea41c2167a48cfeb0973c835b793967b12e4cea5406a78533e71a53735138b4a721541855f4c47368d394c508f2def8075ff7bef465ad025f688c2a809d051a1ff4471f4c64f1146a974f52ecc5d46e591946c21f5720f2ccef356026aab4eecc9fe07ba6606fe5446b78502b374cd1d46611e5abd54201fa16e6e77817c8931da3086b89c961be03dfb358ee2e4e48368e919bc711494f9b0178fce33c7c9dddc357a66f88f83ddfea24150af2ffcd84120c68656f42d8a1b597287c1fd4fa764fcbcda89143aef504eece1b16929bae861acbca1d712dc1871a64ad56fea47dd391d445997033991065611487812b9be535744d2d45d77a2f25b7579802213245e73cec1d8697e914775a4243e24bef9bf1ba00ec6b535925774c5135da8fcae3fc4b46c0a61fa150c01b80e6df51a3768a75c4f413c874a9d6bf2d5a801ca13c0ff1e9eea09c0a4d645739d0918e95c4379c4c77b6e33517b7b4099f4dd19cddeb1e463130397b3de3ae4ff7bc775b79c8a1fd1f2e89effd5cf8291758268973310a15e1c40fc16a754b93c9277f9a1eda24d4d25d4980dd87e3191a9759dca6663f5e3246de4846d1054ce8afd1ac44ee89949db915f4980b5b059f53c5fc2c26e4025db6c393f3f6b1cf005f38daef4d3ebefcc0ef0a15a608f7e8ff5f06feee46daa799d92724c1e049d2b6a0186c7302340f324c29575497aad7f206c15aad974f4cdf7cf2f5e7682ad718bbe8c7d3bebda597dc469e26d3f00093996f0dec3cbd079ec2d9d2bbdb9f37abd7c70f12ef5f313f8cfcdf4c1d12c7f9a0203c17b9c757cce1d3622fa648fc9075914b5f58bea00dadf244883c6aeb3b8f32b2e5ba5281f7677b719a132d4306fe00e9c73f24eeb66320969157ff88ac6498af921d95c193965d83c264eb070f5f8681312670c2e324784e94f5e998e44673e13e2688c5e7c8e0d02f73a8ed89f072226886977f2513cd7ea7f8af00d77b718dbf94ea0382fd806ce837935271282c0e12d2b9445fb1da7ada6fc897947ddbe25ad60720bbc4cfbd6e9536463035ee979ab55824f635daa021a41dc57093646f12e38b2d4c11374e6d5e8aa9a47618cec21307922580328a1e6488ffd18e0bb4947c5000548de1356c41ea829b421f8ad9b65a2f355f49f43669329edc28aa58e35889cf65d99c624060a594f3948656b065e60c2e4611f919873f4a1ec2ba78884b764437f7c2699fca7f4c372b2b246de68bad2ccf8cf2bdec4808d2d1e2fc350effcb0d58b4e1b2113ddfda4fdb22245712a88a073f3343efbf6b24b19c95731b14105fee71dca2cec57a26790bab7e8b9e3fa91ddf98843913f6bf25cd5d40afb7c8b8a151b12cf7ef6c7832f5392ebdb4188d71fadc65124eeb78fb9b5d1927b37d53211b4fc56d38f0172e9cb6072fa964693ca157a187b0ce9f0cdb54d7f9e89f023f7baca66d8dcc961cd852f9a780444240aa42a972fede6fa1a33fb2c570be56b874293ced65e737ac7d58f2527910f05ea2873d642ae9e2a2400ed0b35df4085d830bd47f3be93ff5941e5b1867bb1c8f30f1faeb37979ab5ef34edffb1c689213bf961445f570607898d3645f10e207e95e83d8fcb13e5a73817612aed296f06a148cd5d23f4df99e1f5eb943f3e570a3700ffc4d93780fa8cf3dbecaede8a5e6a6fd98bec4fe1b5fcfbee31bb22be5133fa180cb9010a592cf14ac06414a6248e7aabb27c1af5bf0f959c659d6e2cd937e2082c7f9bd110e18757c37e47aeeaf5bd41501a5e4bfe7dcd8489ea97a2cb6fb045ae061c368b10dbdc8ff5902c4a0cd0cb497539bf122f44db6e780eb2cfbd23a4556e644808a998e7e3ab0342c3ad93793cc46f069cafb5116b09d06f31334e980585f965128fd82ff97234d4bf1c111d74aa5a1fd039dac428d75429e3fda4b0f145ab7da365a702e645b3cd53dd9e4f8495dc0db383b247f592d746bcac5a5de94331e511bb1e0a8646459b01b3022a28126755053111cebc5a2388b9fad8b100fb001c8af2c44d7563a517f46c7861a459cccc07503c58c2f8dc249c5783f718d60b119b2d84476475f31980bbd2c59858f12c357e99d7d56d90e333174c66f4ba4eecd7bb44a39c30abc6e0baeaf3460c59ebad3306df696c094fee1d38ac00bc3e0fe793f0e8989a498614a7117e0b282c9642368e797ace9fad0ce2910ade40345f8d6f70f4923730af0381ea1a94c2e6963d41d8559bfb38753d9f12a5c8283d6aa2fac8ddc5e95cf18b80f8bcd1f59c2702c99608d85edb707617bd98cd424a66fa2510d3adc8da94a590a3123dbedcc855f65e4f832b87f4779587104e62057db1f23577b8b3e88fbae5e848c2d17add6369ae71839736a33e89f1665411f409961302c42cb062800cc4cf58ede93af5b1a94dddb430803448e56664983bf382bb3b3e3c0a8982fe6095b9c8566fdd129b2964ca38739671af69f86291ab3e98644de0c3c5fedd97857be5aa8ae89ae8cdcca7d9e3db88b5fde1b9afcd7d8c5478a00ef28d47f767b95df7c4994f9df30ce28222a4bb589bb90ec01d380c3386c233804fca8e74c43c878e4387f935f36e220cd59100630ae7e689169a2f93f778c5989bd4e3aa226bfae162bf26733ce86f7e52c75c8c28603bc6a7c2ee2c2738dda525fd698b267d47e2070e07025d963f007f4cbb7aa952c834f981a206e472eddd42fa866d4ba10a0fc4d5bd68a12c6704a180882319c2097eedcdbc378d6d3b99a8e3b76cf6bf4fa66511af30c54271d72b9c81d9467db174c19d9966de5a59ac342268fdd312e635ebf97449a7056d8234cee1d03eaabaf3a30b8755eeceba33eb107d0e9724b1942074f80143c9761c9c1ee88696925d2de5a58a0525da921a1c3d88f37c2176435e089a4993a5b4f9d1eb6a6c93bf3d550f9ba4613921912ae79897d4d9568cd45976293868055b0b55bc5b72a7db88ed83fed6e50dafb3c5a8053cc643c4d1d9d023f31b412a7fa50208dd32983fa3a7e21ffe365acfd85817ec11e3a0d072bad1d0ef846e5dc64420f49d1798090e51c14743678fcc063392b67c6a7e2b3de3c8bc683944264a43793e32fcaaebb3b0d7ec12280b9cf444ca8bdd7aae9abbc550e269e43a5603437206bf28e20d7de774a85c162bea534584f376167ed621c3b2807a61bcd5b9a82f5faa5c74699af7834dfff2fb9a3ae53be7b7718b249203b6758665b8587c2bb68346214c211618e93269019756cc3b494c8168925b61b51bcfe080b7cf286fce4cbdbd3b6188dadb99fc1c05cfe3f1035a6d68cc297805ac7f78b6fd62865b625a2e0883434eee6504b4c19db6e51fd05399f2f723c032776b98beb3da568da9838df1c4257e81a74eaf4893e139723349ff45ecf636684032bdf1423d51fbfcd245ac9caf908ff2dd037647a2de150eaf6861531f9752d9ba7c37d6b1d8dbc4931a865264b5537df8505fb10abfe6175de85467a4cc1670fd5f4e107a1b470c271705daea6162883e0e911c17fc2941db92e5a629ef84f67cabb9ac6aead3913f6d2069470b1b4554865fd4aab2fba2b5cdf5fe7f785fcc41b6a11e629fdc66c30bd13494a27fd072ac14d2f3f1250f6ef03de09bc87c2a98632e44082df7d7ca26c7e643d02352b435bfdb107b5d92364a90cf229773d450e3a321735117c0e52aac13871c1b1134d46685b796716cdf68c62d35d76f635e05f78b13d2813db9da30845451a6d80271be9845f473ca32760a133b68dc89419743ed48db0a5d9db593042a4b4603e494f613d367399394a71e022883e9061b166b7ba3ad33d26a22103ddc0c1a50afa089e6897781e1015a5e4b243e85767114918931afc1eff58f81940b4baf366e33ba1ee9d332331d0ab7d54da4323277c27deee35b1d1ddff32aefb57bb1cc39e33a86b29d7c8a0daaec4ba62ad4d7ad8dcb851fed2c3ad5b277e1b22f4f4bdf6ac13d13a76967433db96cef5af3623957e66bd537632bce96d34a5d833d2586af8f18984eb2ea4ee1a59e080782a3cd16f29494b9aabc3d93bffa6a1a1ac0d343df3e5c588dff7756b5d0a58ad39097998cbf02e34cf4b300b5e7444dc1a2cd5f9d4e574e1bcebe226c8be6096c75b983288ec1b4c2bf88efb26c9c164476855d9d12d039de65cb0682bc7d2ff8c57b9b9159992fc993c19c2a615117e9eebaddb32160c27e876c5c1933fd0f8486e96d53633c1620046ef31f83caa5e5d326b9a773c2a3e20bef3b7c77ca738ce1f36076f770e4d00579c9a66666dc961035ed0a1fcdf86acd854046498607546b4970b9eb5e8e6210a494fc5001faa7cc270c3fd6450505892329191cadc9a04dab2e7b3c585ab3907e4918a4cd52e23171cb73fe67ff793fbdb43dfc3ae27ab9d03f5bfa026cdff2586e4aeca9234cd72a2cea9c47905c608933913f72c9e75c76756141dd38be500a498a4a73255b463dab6c80b027f2bae5f0e150afc0785906fba4a67c4f25e6f58609b05b0a5c20ab785e39091e47f90a19bfd5030fea955a297e1064e8f9c38f77190ad998402c9ae22049ef0a9ba9fb87ca6039c07b47f4b168c6f4e20037619ce16e84a4e887f7a7069858afe1537b79075aeca62e266b6aa7f04ecd0180c18240a6c211767075e973495ea97864ac97cccfea50e2b226a169adcc00cbd4ef967d2356a1bc1b0d9fa0187a7f30f8b931f8ed6e131587767db80fc51e27ce7d7eafa80eef9ddf7900685fbc19a1a27524d66c1888a297050b0f0e3a43c2d82bcd2a38135df93059334029f9e2cb9fbc4ec7a68d3df85a0c88b67314d708225c1e0144480145a62128faf6a6378ea09686"], 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000001840)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x8, 0xa, 0x4}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x0}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x2}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x24, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "16"}]}, 0x24}}, 0x40004) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)={0x24, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "f3"}]}, 0x24}}, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000240)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r8, @ANYBLOB="0800050009"], 0x24}}, 0x0) 1.501985841s ago: executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) close(0xffffffffffffffff) socket$nl_rdma(0x10, 0x3, 0x14) socket$kcm(0x29, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500a00000000071108d000000000006000000f37a00"/32], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x0, 0x3}, 0x6) r1 = socket$inet(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {0x7, 0x0, 0xb, 0x7}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x880}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x9}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x48}}, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r6, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) r9 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/uts\x00') sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32=r9, @ANYBLOB="8000"/14], 0x3c}}, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="10010000002001000000000200000000"], 0x10}], 0x1}, 0x0) socketpair(0x831d02c36faae47e, 0x1, 0x290a, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000000002000000000ff000000850000000f000000850000000500000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 1.411517796s ago: executing program 4: r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000004480)=[{&(0x7f0000000000)=@in6={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x48}], 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000580)) 1.360969847s ago: executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000000, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x8) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 1.324834248s ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x7000003, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r2, @ANYBLOB="0a000600080211000001000006006600c78800001c0033"], 0x4c}}, 0x0) 1.257807982s ago: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000000a4f1c0000000000000000020000000900010073797a300000000008000240000000020900010073797a310000000014000000110001"], 0x5c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f0000000380)={{0x14, 0x5, 0x4}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x58}}, 0x0) 1.236056222s ago: executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x9, [@var={0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x3e]}}, 0x0, 0x31}, 0x20) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r1, 0x8b2c, &(0x7f0000000040)) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001a000100000000000000000002000000000000000000000008000100e000000108000300", @ANYRES32=r4], 0x2c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000006c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000005) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x4, 0x4e8, 0x2d0, 0x400, 0x0, 0x400, 0x300, 0x400, 0x4, 0x0, {[{{@arp={@broadcast, @rand_addr, 0x0, 0x0, 0x0, 0x0, {@mac}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp1\x00', 'bridge0\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}, {{@arp={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {@mac=@dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg0\x00', 'syz_tun\x00'}, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:chfn_exec_t:s0\x00'}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "cfae5980e9a4982674fb933cee8bd9ff2ec9cb84e2cb32d7ad08c0d0883eaf87f4d72412bd8a4f00413fc4a282e70ebee24d73cb989b62d60ead98b4e6987bb4"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x538) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000080)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}, 0x1e) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f00000000c0)={0x18, 0x0, {0x4, @local, 'veth0_to_bridge\x00'}}, 0x1e) connect$pppoe(r7, &(0x7f0000000000)={0x18, 0x0, {0x3, @link_local, 'ip6gretap0\x00'}}, 0x1e) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r11, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}}, 0x0) 1.180883078s ago: executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000800)={'hsr0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x1100, &(0x7f0000000080)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 1.15026378s ago: executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{}, {}, {}, {0x6, 0x0, 0x9}]}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'virt_wifi0\x00', @random="0200002000"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)={0x54, r4, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x20, 0x51, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "adff360dad"}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}]]}, 0x54}}, 0x0) ioctl$sock_netdev_private(r2, 0x89f1, &(0x7f0000000000)) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffd66, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}}, 0x0) close(r0) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r6, 0x10c, 0x6, &(0x7f0000000080)=0x101, 0x4) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000070a010100000039fc00000005000000d716749b3fac75137e3d601c67469c24fdba46b3b91bbe8bcf390853de255daff0b2aa9f58aa5f6d13"], 0x14}}, 0x40040) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}, @in6={0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, @in6={0xa, 0x4e20, 0x7, @mcast1, 0xb2}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x78) 1.039357493s ago: executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000000200)=[{}], 0x1, 0x6e, &(0x7f00000001c0)={[0x400000000000009]}, 0x8) close(r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc}, 0x48) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @remote}, 0x1c) listen(r2, 0x80080400) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r3, 0x10d, 0x8e, &(0x7f0000000000), &(0x7f0000000080)=0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1802000000200000000000000000000095ecffffffffffff5519a7e74e575ec6394b422d648c972c4020b43ab2c011080000000000000084b7a9064b50ed7c2573014a3f5d3ca4c2b8fe5df2abb3d7544d0c8aeddafe7f0ad34b8e3affde537c14"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x87c5) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000340), 0x14) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303}, "2a4001011f891d5b", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "fd6ed24e", "d4e9e1c90d89691c"}, 0x38) socket(0x40000000015, 0x0, 0x0) connect$inet(r3, 0x0, 0xfffffffffffffe07) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000006d0847c6300000080000000000850000002c00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="3504000010000511d25a80648c63940d0324fc60040035400c0002000200002037153e370c040180060410004500", 0x2e}, {&(0x7f0000000a40)="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", 0x407}], 0x2}, 0x0) 873.139122ms ago: executing program 2: r0 = socket$inet6(0xa, 0x3, 0x8) sendmsg$inet6(r0, &(0x7f0000000440)={&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x80000000}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x28}, 0x0) 841.492013ms ago: executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001e00), 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000020240), 0x10010) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000ad000000660000000000000016000000000000009500000000010000"], &(0x7f0000000140)='GPL\x00', 0x8, 0xb, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x23) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000100)={@local, 0x0, r2}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$sock_int(r6, 0x1, 0x29, &(0x7f00000001c0)=0x5, 0x4) bind$l2tp6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r5, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000800)={0x240, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x40001}}, {0x8, 0xb, 0x1000}, {0x6, 0x16, 0x8000}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x400}, {0x5}, {0x6, 0x11, 0x200}, {0x8, 0xb, 0xadc3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfffffffb}, {0x6, 0x16, 0x2e6}, {0x5}, {0x6, 0x11, 0xfffc}, {0x8, 0xb, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4ee6}, {0x6, 0x16, 0x40}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xfc01}, {0x8, 0xb, 0x80}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x200}, {0x5}, {0x6, 0x11, 0x40}, {0x8, 0xb, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x16, 0x7f}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x3f}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3ff}, {0x6, 0x16, 0x7}, {0x5}, {0x6, 0x11, 0x81}, {0x8, 0xb, 0x8cde}}]}, 0x240}, 0x1, 0x0, 0x0, 0x4008050}, 0x85) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r2}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000540)={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r7}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'veth1_to_bridge\x00'}) 841.124084ms ago: executing program 1: socket$kcm(0x2, 0x200000000000001, 0x106) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) socket$packet(0x11, 0x0, 0x300) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) (async) r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'veth1_to_hsr\x00', &(0x7f0000000480)=@ethtool_perm_addr={0x20, 0x5c, "4ccf53e3fb9d0a75523de4882c71916b3ae3771e0fddd4abea718e04006ded0000070024e9e3d78208000000df9dfe0f315a24476986052b57c3b09c443aff7ca0b3b1af33cf00b54ab752d6e016bf0dbe44e653ac4087f387e28855"}}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8946, &(0x7f0000000900)={'wlan1\x00', @broadcast}) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000012850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000000000008500000005000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'veth0_vlan\x00', 0x0}) (async) r5 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r5, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_int(r6, &(0x7f0000000440)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0) (async) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000740)=0xc) (async) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}]}}]}, 0x48}}, 0x0) (async) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000240)={0x41, 0x8000000}, 0x10) (async) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_256={{0x304}, "a3c613b7c788323c", "7051e261dcb878a709171442e6b403e6b1a42575876df6ae2f23471e22fca39d", "0868e4a0", "322a6c4643ab91d7"}, 0xfffffffffffffe32) (async) unshare(0x8040480) (async) epoll_create1(0x0) 731.207999ms ago: executing program 2: r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000004480)=[{&(0x7f0000000000)=@in6={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x48}], 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000580)) 713.156774ms ago: executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000280)=@framed={{}, [@ringbuf_query, @printk={@lu}]}, 0x0}, 0x90) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@ccm_128={{0x304}, "8e44c05dfd57e5b3", "591f44ef0756020a9e1d86882c0348a6", "a29f817c", "51eb071129f5da07"}, 0x28) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x11a, 0x4, &(0x7f0000000100), 0x4) (async) r2 = socket$inet6(0xa, 0x6, 0x0) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_smc(0x2b, 0x1, 0x0) (async) shutdown(r3, 0x1) (async) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) (async) socket$inet_dccp(0x2, 0x6, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) unshare(0x22020400) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="14000b00fe8000000000000000000000000002aa0800090000000000140001000000000000000000000094cb00000001000000"], 0x48}}, 0x0) (async) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000040)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="850000002200000007000000000000089500000000000000e26c9bd1a6361b6f8dc33cdf00000000000869045aac0000659f55df08f9b90788ff7f00000010000029c21ebbcde61d8ab5920aef6c3e007fe6123e638962cf0b89ef506cfd3f1d4163d3cfca3733b30070a7cf53021a95b6c87850bfb70897c1fdaf3c7220a0e23db436659a8c54328a702688f92b6b71569d65e33d46f8d8ae24ba69c657afac04379cb536008c219991704f11c51b1d076f03b0f917c766f3a7598bbc00feb3bc8e88f79df517b37b56bcbc290080000000000000e675458a43b8a8935bf9cf0be7d0aeaac41405e341cd0ba0d6fd562489dad595712a4051bb6cf826ab757193fc09d305f95c55d5746419000000000000007b61803bd430ef06000000000000001e93f640f159320c8b088f4d6497682eb312d4967aff9e4c14c66c90000054ed82c7cba4c81f91d6dfed18767bf0df584b4b6c4204df411f921e3aa02a67dd324b8176020e9c024751e539c05727f82c92046bfe64babb6d7ba86526b7886a0c2481c5812812a6fa3fca3758cbd8c32b25c28be225bd1f16297baa065f5bb96330fad0aaa4388c06c0eb2ecdf829af9577fcd868cc269b740000b7ad193c5e5850df01aff96877d73a63246ce6f0467167626329ab910b7a13d9ec9a64e7f6b56aeab8c38f69a213c96e2d2ad7978c9d721c270f27e7025d576535198742d403ec43572d7d0baf00e88261fb260627805ca44200335ea4363066944d0aa6feb9705b09ba40d4642519281151f875cbf13a582f90ad719f0eccf02a473dd508a16138904933689ea6050041206473075eaeff2b69c2f2bf6f691c3560e068743a08e9771280da61fd8fdc3f7a35ea352e35753c59ebc1bd27ab6603e6afb1b3f057fbb7ed3aabe702b3c6301d3f5c295d1d69d1541d0e64631c95d6c0999e27e8d1a58f6a00f19102d2bfaf53f25a45637b1c577ae50c4c5669b13a4ed999dd10d2f091dcda39d9abc40c64a20c14ff0b1bf4d23fe07ae90fa0eba9c64bf89b26e7d8d70710b04f9ece5969023acadbb4582272e5b3a0429a5645b0c824ad36f7cc8be12b3874d5a19349b0ede845e9dddcab4a78b08ed60104002aabb17eb1840bc8e0ed1dd8b9b7eeaf32a185d80250a7f2252775905eeeb756eadafe20bbc616bc44b347abc8caf722b2c3b06884c1d3690f23b06fa4541bb2a81073b452764f04bd39008b65ee222cf697ac21b087548e9708dffaff2859e973b1e88668c8022cc6dac8548167e5798ec9c7d288a7fa7749f07513187cd8f060abbbc5e37dd1ba3aab927be1b409be733b7408534e5b0951e9ecfd0a1c77e3a29be4c4093330124615056e3ce0ce6ac91b1242d3bb2e787a186dc2ec284d60e9d8a03884a22eeaa1efa497ee88c6cb565b164a260afb5157e392b1ebb1a4d4f992011ecbac4a0a7ff5bdcef7994a422bb2761edd2d8f20f5f879a88f89d48b8314f862585e4b7a9d6a6681f40e8b82cc6555dce2db951d164cc9a70e640ac8974faa2587a6e3af3b9458f7d4b4077b3002536b10ea24d73307a33090c4c270909a5322eac32cb175e68fa83457b21465c08c02dcefccc0c714c2862ddbe567755f05c1e671328d160d3752345ca1db6e74c720e42afca982ba6befd96c5575f1dd8f87ff6606301c0000000000000000000000000000000000000004d0d54b4caf78018766cdb971e8b168d4763c1f00000003d4e1d842caf457797f93db93e4f38a9dbd79f6bf5dc40b55fdbf9b856665061b2e2924f27eb2d2b5a181ccfd9eeb11dec165b6f12433f00bb06124041ffdcdcdc91f3b3b76635a689c9249cf69bcae654bfa81e75b7c7002b883c56026d83520395b7d511f607cf2f899c7b1c75e2192f775d72247167285857588ace1115fbebfee3c16b84cf7036d41c493a63c09f2ce46c1f5995c2d7fe58c15e64bb4cb7e7f336cc22fa1ea1363bce375bd3d579be1dddb08ed5147b629e4b3f0e65783ee5e20d9270802f2a7500738d95216743bc36a04ba8d486fb26252d684b84fa24639089064ca7b93057c041f12d544dab4d24a4f952b4f265a69ba279929959991b7ac63786055b3c029a0e8b6e42ad33cba2661957cff0700000000000029bb61462623a58556cd62844d4d23cc738ee50400000000000000251d5806000b1ade92dd9f441468967c052aecd9de81b4b55d06670597991f37ddc4fa19a6369d5bf76c474633a337f676ad255869881da5cadcf49ce9188129cc978977f87b32bd4945717075cbb4d3e01e67ff087644f52fcf0a3c732b0586cb87972c43d2616bf4e521dc3126bf1760243d51a197d3ecfd74bd625e9f496175cfeaaa020817d33d513f3e97854ea76e26e96a8639a297871485a8609f8ca842b3321932c4d9e224a0cec5946cec9e359fd3687415cad5fb8c678136f36d9f781fade9f2469477748f4dfa0f56c326c89bb5d07f35aaf95303b5a620fc84e1c73557b2277831f8f633f0d293c0e3f4f93149887271e645f50a4e57010a9b76457f6ad73231a905206bbb1b95248aed85a9df9dea64cc1fd1f06a98530000000000000045fcc1fb138fce0faec0a423e860d5b308d7849381b294106af25f15fec047d5b844a99f36e342165df728e381b48c20e0900f8d265157467d3494f2b93c7f3c817688cec2d226f50edb115c2e075f3c663a4b4169bc6fd7d4fbce205f2a1ae263ae0db900fa0a13cf796e0d7a9dad86953c13ed6241206d682e194c64c491de6a531e9bd45abe705f07000a82ccd41a2c1b23bac44b7371a3a0aeab3647c56f0680cd30ca260189dffed79c2cfae39d8160d3fac695b75654a4a5695b9edec673e75d97950fd4d80bdf8e2d83a3232768b1231b09ef4d995a783eb8f731523e9f6c2ee9119d567acd471bc391bd4f07600d5b04b71c1f1fd7e219b8df5123e4c529db3ce74353e8a39e2d21ce0954334951d509cdce531fb14230fa3b7331a943e7223b0ac8725a0d45a213fa249a8801959480ecdc5999c9df72debe8510d0620fce7be7086d5b72e857243f0a7883d9749b1f40936b51631e0060a0d9901d730bc27d42c1ce01bbbb003e1e6e458a29ec6e9b4be6e1df4774d4d2d22f153a76179434a5ac05f62bcb895f4bf620161cf4016c2bdcd2c3f66c4800eed3e3ba2883c978854c53890ecd22a22a5e82efc1aa3da86cb084faddcf3e87c963ac90686c571103c3613c726ba70381be87ab717096739aa9623fff8de37eac6e3577135587951642bb0c5117518017be9737d5bd19"], 0x0, 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, &(0x7f0000000b80)}, 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, 0x2, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_FLAGS={0x8}]}, 0x24}}, 0x0) (async) sendmsg$NFQNL_MSG_VERDICT(r6, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x14, 0x1, 0x3, 0x401}, 0x14}}, 0x0) 691.18289ms ago: executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) close(0xffffffffffffffff) socket$nl_rdma(0x10, 0x3, 0x14) socket$kcm(0x29, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500a00000000071108d000000000006000000f37a00"/32], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x0, 0x3}, 0x6) r1 = socket$inet(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {0x7, 0x0, 0xb, 0x7}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x880}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x9}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x48}}, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r6, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) r9 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/uts\x00') sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32=r9, @ANYBLOB="8000"/14], 0x3c}}, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="10010000002001000000000200000000"], 0x10}], 0x1}, 0x0) socketpair(0x831d02c36faae47e, 0x1, 0x290a, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000000002000000000ff000000850000000f000000850000000500000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 662.926476ms ago: executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002100)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000000) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) 566.628939ms ago: executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000000, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x8) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000000c0)=0x7, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r1, &(0x7f0000000040)='u', 0xa792a, 0x807, 0x0, 0x0) 469.011178ms ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x3a) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, '\x00'}], 0x18, 0xe000}, 0x5}], 0x1, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000900)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x1c}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 439.775213ms ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r1, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffff81}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x400c4) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffcf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x3b6, &(0x7f00000009c0)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a700e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000100000000001995319c00"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x0, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x6, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000020a000000000000000000000850000001700000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x98, &(0x7f0000000000)=""/152}, 0x80) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)={0x34, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r5}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x14, 0x2b, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x1, 0x0, 0x0, @fd=r5}]}]}, 0x34}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f00000004c0)={0x604, 0x0, 0x12, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7, 0x49}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x1ae, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1}, {0x7}, @broadcast, @device_b, @initial, {0x1, 0xf0a}}, 0x5, @random=0x7, 0xb80, @void, @void, @void, @val={0x4, 0x6, {0x2, 0x9, 0x4c, 0x8}}, @void, @void, @val={0x72, 0x6}, @void, [{0xdd, 0x84, "415a307b0f1fc488225f0408f6889835f1f02fa82977fa11d3f10135129450722a200e48cbb048fc4dc62ac67e417c7f63752d60b2f077146caf97ca351bc68862c2590081f2e0eec141c63b71b326fdbc01a729cbfd283f1f3688b7443042473e102455efb0794ec698492f1849baafb2be2fc9a60877c29a562a6f9db30be42f7c3b28"}, {0xdd, 0xee, "9eb373f95ef9f5f53737973f76405658ac51ab28b78be08ab0672386eb44750331d9dfe4499c8e2514bce9a43cfa9534fce8253ca552e7fdbd978c943650bc5fdcdb0720c7982aa834d924eec736bda157ae18f46bdd113ec0b54d7101f7fd7872324c793e16e9c89242c02748423098f7fbbd0a335c95549e1c6b5ab8ad27915eba60c7bd401a0fe7f728f41d03dc3b77fe2910323ce24a8410ca1cd21b0aa064011d974965cb9e671d517cda4d68f27cf5f2b8a78e810143674346f265d41567159be77b906fe00e9b3b0d279cae72554ef0017d6d3b62bac4f30cda02db91268c362237063420a07deabc5b57"}]}}, @NL80211_ATTR_FRAME={0x3fb, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x8}, @device_b, @broadcast, @initial, {0x0, 0x7f}}, @void, @val={0x1, 0x3, [{0x2, 0x1}, {0x16, 0x1}, {0x48, 0x1}]}, @void, @val={0x2d, 0x1a, {0x800, 0x0, 0x2, 0x0, {0x10001, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x400, 0x2, 0x10}}, @val={0x72, 0x6}, [{0xdd, 0x3e, "3450315ce9dadef0c3e78f7d661965ffa9d69e1daea033b43c538adb5222707b1034d02d2278848bb309e410431a99e5b780a15b65be24f0143a8c665c63"}, {0xdd, 0xa, "be9d1ac2b9ec2169ccb6"}, {0xdd, 0xa5, "3794b553f9f706057153aaf49b3652fdec65178e6b34cc57a74ac18c32870b9f66c582cf42742a5bd770972d1d2304f090a97bafa7f64155b6f9cc957ec70278e96b0d9c1630ee3b4c673575be24b163c2625fefeb7d8d79d53e2ba35aca29c16b7dbe835eead07843ec9c0a9bb12c6c9da7fe4d410c731f223b2aebbbc6c12f2f8de840a6de26d672e6e1bc9baef75238c471eaf946debaf076cf2c6d384afbacba72f2f2"}, {0xdd, 0x4a, "85efc33dad5d6be7088e6a346e4c420afb48a99432655f331594b15418ca86910eb814b1afc63a077014179d427b2eec60e901ad5482d8cb94a3c88973e617ea0bc74cda522640dc1295"}, {0xdd, 0xac, "fef1b95c405b6ff3398eeec132d8fb7cdd35d2a0e34a5ee9baf982d836bec58535da518a811ec7c6b641f261ed82afd8d1006bbec59c3d677ff0fe1c5cb73b77d1f52b9e3fb4de1f83f71a58a544632a386522645135d9bc1a7675cd385b0f19836c50f5115b424fc1ff42894e988227f1b2ad195328e7ffb135a27d10f9b46c3c42dd9944a80c1d142e6938b585bf74d03a0a295db970fc53c16afb0568a77aba2cd109407b3a6fd5303a7b"}, {0xdd, 0xc9, "4730d4ddd56f7baaa5b5550121e6e84479af74df7160c2ce61a23978902b60d9f4828a4fb8abdb754caef638a85bdc9685f90435db8bdd8152a853adce3256d39b72bb3d98066bf5824dfdb95da24b0ca0e2574ac4a338afb00533e6210a5e9d1dc13ca2d65d3d7012c7724698f682095765b713c264cbdadb50d35e82820c5ce233d50e05c7d4a8a319d9b26e712153ddfa4a84f671ce804eaa998ae4d3dc5997dc901a1cb37a41447ce66f918d64e17eedf25143cd1eecf6037cae0a838b55071f89dda4a005f778"}, {0xdd, 0x1b, "a8a1dd04b6f3495af8dae05a6f0b509c67ffe03c299698194d3171"}, {0xdd, 0xdf, "05be12b4652cb6b526f104f5f23737fecbaad509a17ed868f679383fb63a5e2139f29cdb8fe329d5a9aa1b0013d575cf76c17fe06a462e4927b8cb0d6a5d7f8e0ed7208e79a1e668a1ac8ae297973b0ddd26c6909c8274abd0771bbd47782f4afa8c713f1d4f19792dacb46833d92ecd49a973cf953ded4676dd3a87e1e60d1bed3b758b3ecce960cb37eb80f170d572fb87db4a4b9bd4def6c6ccd7167aa0165844729a1f4ed8112036f70775292b7ce46e5536fa953af4e5554c434b21a78f87ab20879591578895ed5b78236d7bd36ba8a16988e0bfb3c092358e2b08a6"}]}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x119b}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x604}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414000800080004"], 0x2c}}, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x25, &(0x7f0000000100)=0x8, 0x4) 311.885246ms ago: executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x34}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac141400000000000000000000000000000340006c0000002001000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000480003006465666c61746500"/240], 0x138}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x0, 0x803, 0x0) socketpair(0x2b, 0x4, 0x0, &(0x7f0000000000)) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008400000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000220000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x3, 0x4, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 308.49753ms ago: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{}, {}, {}, {0x6, 0x0, 0x9}]}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'virt_wifi0\x00', @random="0200002000"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)={0x54, r4, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x20, 0x51, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "adff360dad"}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}]]}, 0x54}}, 0x0) ioctl$sock_netdev_private(r2, 0x89f1, &(0x7f0000000000)) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffd66, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}}, 0x0) close(r0) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r6, 0x10c, 0x6, &(0x7f0000000080)=0x101, 0x4) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000070a010100000039fc00000005000000d716749b3fac75137e3d601c67469c24fdba46b3b91bbe8bcf390853de255daff0b2aa9f58aa5f6d13"], 0x14}}, 0x40040) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}, @in6={0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, @in6={0xa, 0x4e20, 0x7, @mcast1, 0xb2}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x78) 279.704875ms ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000006b00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000000}}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x22}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000600)={r1, 0x0, 0xf, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x7cb, @local, 0x8}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x3}, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0xffffffffffffff4a, 0x11, 0x0, @private2, @mcast2, {[@routing={0x3a, 0x0, 0x1, 0x6, 0x0, [@local, @mcast2, @remote, @mcast1, @local]}, @dstopts={0x73, 0x0, '\x00', [@calipso={0x7, 0x0, {0x1, 0x0, 0x0, 0x0, [0x4, 0x7, 0x1, 0x3, 0x23fd, 0x1]}}, @hao={0xc9, 0x0, @local}, @hao={0xc9, 0x0, @empty}, @enc_lim, @calipso={0x7, 0x0, {0x1, 0x0, 0x48, 0x3, [0x400, 0x1]}}, @generic={0x7f, 0x0, "88bade7b153bf4fab9df679436efb4c61e77859c8a1dce92cd309c7cb3df16c76544540033c9f8342b047b8ff5e6fed862d64c07ef61a7f8febe3e130d9fd16b33c3a6368a88ec1ff2996de2f0dd459c33c66e9c2f256cf138828094eaaa73a637717829a1b96128b2957ef68a54752ca343e5241ab462687e35c3cbf9258e861aefa785832e9d037988f63fabe4bbe6f52783038cd6959cbcaca08e6d036116b70e67ca4468bfc9b1dfa31ab2506f36ff2a39f9a02c50f69a1ebcd124f9e7d8dbd26bbccdb0896a79c891fbaec16d82f748928f49a8d30ef3739fa87fb2"}]}, @dstopts={0x25, 0x0, '\x00', [@ra={0x5, 0x2, 0x9}, @enc_lim={0x4, 0x1, 0x81}]}, @routing={0x8, 0x0, 0x2, 0x2, 0x0, [@mcast2, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}], {0x0, 0xe22, 0x8}}}}}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xc3ffffff, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r5}, 0x10) 104.964196ms ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x5, 0x24, [{0x2}]}, @NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) unshare(0x20040600) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x5, &(0x7f0000000580), 0x4) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), r2) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x38, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x1c, 0x18, {0x40, @bearer=@l2={'eth', 0x3a, 'veth0_virt_wifi\x00'}}}}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4004000) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000540)={0x0, r4, 0x84b2, 0x8, 0x6, 0x400}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xd, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0x10, 0x10, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rpcgss_need_reencode\x00', r8}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r9}, 0x10) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r10, 0xc004743e, 0x20001400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x90) ioctl$TUNSETOFFLOAD(r10, 0x4010744d, 0x20000000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'tunl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x20, 0x7800, 0x8, 0x6, {{0xd, 0x4, 0x3, 0x38, 0x34, 0x66, 0x0, 0x5f, 0x6, 0x0, @rand_addr=0x64010102, @empty, {[@ssrr={0x89, 0x1f, 0xac, [@local, @multicast1, @broadcast, @remote, @multicast1, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)={0x68, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4004000) 54.526896ms ago: executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001e00), 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000020240), 0x10010) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000ad000000660000000000000016000000000000009500000000010000"], &(0x7f0000000140)='GPL\x00', 0x8, 0xb, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x23) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000100)={@local, 0x0, r2}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$sock_int(r6, 0x1, 0x29, &(0x7f00000001c0)=0x5, 0x4) bind$l2tp6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r5, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000800)={0x240, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x40001}}, {0x8, 0xb, 0x1000}, {0x6, 0x16, 0x8000}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x400}, {0x5}, {0x6, 0x11, 0x200}, {0x8, 0xb, 0xadc3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfffffffb}, {0x6, 0x16, 0x2e6}, {0x5}, {0x6, 0x11, 0xfffc}, {0x8, 0xb, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4ee6}, {0x6, 0x16, 0x40}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xfc01}, {0x8, 0xb, 0x80}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x200}, {0x5}, {0x6, 0x11, 0x40}, {0x8, 0xb, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x16, 0x7f}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x3f}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3ff}, {0x6, 0x16, 0x7}, {0x5}, {0x6, 0x11, 0x81}, {0x8, 0xb, 0x8cde}}]}, 0x240}, 0x1, 0x0, 0x0, 0x4008050}, 0x85) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r2}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000540)={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r7}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'veth1_to_bridge\x00'}) 51.343756ms ago: executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x20, 0x4, &(0x7f00000003c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1fe}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a563301bf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00123d00010000080000023d000007bc7a46e3988285dcdf12f21308f868fece01008000000000000014e6a065c806539ff5b1326f67958f0a947ee2b49e33", 0x89}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x8, 0x8, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRESDEC=r2, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRESDEC=r2, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYRESOCT=r0, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYRESOCT=r0, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00'}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000140)) r3 = openat$tun(0xffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) r4 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000340)={0x2, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380)=r5, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6(0xa, 0x3, 0x38) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) setsockopt$inet6_int(r6, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4) (async) setsockopt$inet6_int(r6, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4) accept4$x25(0xffffffffffffffff, &(0x7f0000000000)={0x9, @remote}, 0x0, 0x0) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x6c) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1) (async) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) 0s ago: executing program 2: r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000004480)=[{&(0x7f0000000000)=@in6={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x48}], 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000480)={0x0, 0xd4, "4987b5982a19934051301a5e3289de57e6ddec15b5f37ab05757d9a7790387139e506b3fb28f36cc3801878f2a71eb86db8ad6523e0e77623e3a4f6c994c807dca0a799d581ff547ddef0f7dad57ce19d15605f022ed9508e869538762780905606f662bb48020d846184b0867addadfd6a1ee6db4d956e055d65d17863ad0f418c1086b34331ea74e628c0b881f558e0722650453751d82aeffccdc33f95b588c75e65cf3980c9c567bb94a8a0a32d2b2f93c54e0d8f03ec63f809d3b11e58048a83ed57bff6fc75abe9aaa00390f2181d0a873"}, &(0x7f0000000580)=0xdc) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.157' (ED25519) to the list of known hosts. 2024/06/22 19:49:04 fuzzer started 2024/06/22 19:49:04 dialing manager at 10.128.0.169:30018 [ 54.967430][ T5093] cgroup: Unknown subsys name 'net' [ 55.090184][ T5093] cgroup: Unknown subsys name 'rlimit' 2024/06/22 19:49:05 starting 5 executor processes [ 56.193906][ T5103] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 57.299480][ T5116] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 57.309148][ T5116] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 57.333876][ T5120] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 57.342580][ T5120] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 57.361385][ T5125] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 57.369595][ T5125] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 57.371651][ T5122] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 57.377224][ T5125] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 57.384575][ T5122] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 57.392839][ T5125] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 57.399559][ T5127] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 57.405460][ T5125] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 57.419269][ T5125] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 57.423528][ T5127] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 57.428293][ T5125] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 57.440820][ T5127] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 57.447484][ T5125] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 57.448094][ T5127] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 57.455673][ T5125] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 57.474542][ T4493] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 57.475845][ T5125] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 57.489360][ T5125] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 57.497801][ T4493] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 57.507968][ T4493] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 57.592848][ T5125] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 57.601733][ T5125] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 57.609985][ T5125] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 57.619743][ T5125] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 57.639392][ T5125] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 57.653926][ T5125] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 58.013189][ T5113] chnl_net:caif_netlink_parms(): no params data found [ 58.191105][ T5117] chnl_net:caif_netlink_parms(): no params data found [ 58.200853][ T5118] chnl_net:caif_netlink_parms(): no params data found [ 58.248469][ T5121] chnl_net:caif_netlink_parms(): no params data found [ 58.260550][ T5113] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.268452][ T5113] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.275774][ T5113] bridge_slave_0: entered allmulticast mode [ 58.283005][ T5113] bridge_slave_0: entered promiscuous mode [ 58.340228][ T5113] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.347587][ T5113] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.354726][ T5113] bridge_slave_1: entered allmulticast mode [ 58.362341][ T5113] bridge_slave_1: entered promiscuous mode [ 58.436498][ T5113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.468323][ T5131] chnl_net:caif_netlink_parms(): no params data found [ 58.485075][ T5113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.528643][ T5117] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.538855][ T5117] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.545970][ T5117] bridge_slave_0: entered allmulticast mode [ 58.553067][ T5117] bridge_slave_0: entered promiscuous mode [ 58.592626][ T5113] team0: Port device team_slave_0 added [ 58.608051][ T5113] team0: Port device team_slave_1 added [ 58.621559][ T5117] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.629064][ T5117] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.636185][ T5117] bridge_slave_1: entered allmulticast mode [ 58.643140][ T5117] bridge_slave_1: entered promiscuous mode [ 58.702944][ T5118] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.710922][ T5118] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.718760][ T5118] bridge_slave_0: entered allmulticast mode [ 58.725497][ T5118] bridge_slave_0: entered promiscuous mode [ 58.748775][ T5113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.755735][ T5113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.785265][ T5113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.799915][ T5113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.806977][ T5113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.833184][ T5113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.857676][ T5118] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.864861][ T5118] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.872297][ T5118] bridge_slave_1: entered allmulticast mode [ 58.879562][ T5118] bridge_slave_1: entered promiscuous mode [ 58.908504][ T5117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.937760][ T5121] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.944948][ T5121] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.952370][ T5121] bridge_slave_0: entered allmulticast mode [ 58.960390][ T5121] bridge_slave_0: entered promiscuous mode [ 58.990180][ T5131] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.997499][ T5131] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.004657][ T5131] bridge_slave_0: entered allmulticast mode [ 59.011734][ T5131] bridge_slave_0: entered promiscuous mode [ 59.021038][ T5117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.042306][ T5118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.059543][ T5121] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.067487][ T5121] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.074639][ T5121] bridge_slave_1: entered allmulticast mode [ 59.082120][ T5121] bridge_slave_1: entered promiscuous mode [ 59.103120][ T5131] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.110797][ T5131] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.118568][ T5131] bridge_slave_1: entered allmulticast mode [ 59.125249][ T5131] bridge_slave_1: entered promiscuous mode [ 59.146189][ T5117] team0: Port device team_slave_0 added [ 59.154632][ T5118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.220689][ T5117] team0: Port device team_slave_1 added [ 59.252768][ T5118] team0: Port device team_slave_0 added [ 59.274998][ T5113] hsr_slave_0: entered promiscuous mode [ 59.282264][ T5113] hsr_slave_1: entered promiscuous mode [ 59.291971][ T5121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.304696][ T5121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.319494][ T5131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.341903][ T5117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.348942][ T5117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.375426][ T5117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.388751][ T5118] team0: Port device team_slave_1 added [ 59.395200][ T5117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.402240][ T5117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.428455][ T5117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.465340][ T5131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.507778][ T5120] Bluetooth: hci0: command tx timeout [ 59.539818][ T5118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.547170][ T5118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.574195][ T5118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.587796][ T5118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.594749][ T5118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.596634][ T5120] Bluetooth: hci2: command tx timeout [ 59.620903][ T5125] Bluetooth: hci1: command tx timeout [ 59.626265][ T5116] Bluetooth: hci3: command tx timeout [ 59.638194][ T5118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.675511][ T5121] team0: Port device team_slave_0 added [ 59.711962][ T5121] team0: Port device team_slave_1 added [ 59.732544][ T5131] team0: Port device team_slave_0 added [ 59.740612][ T5131] team0: Port device team_slave_1 added [ 59.756553][ T5116] Bluetooth: hci4: command tx timeout [ 59.783146][ T5117] hsr_slave_0: entered promiscuous mode [ 59.790075][ T5117] hsr_slave_1: entered promiscuous mode [ 59.796246][ T5117] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.804422][ T5117] Cannot create hsr debugfs directory [ 59.861918][ T5118] hsr_slave_0: entered promiscuous mode [ 59.868692][ T5118] hsr_slave_1: entered promiscuous mode [ 59.874756][ T5118] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.882465][ T5118] Cannot create hsr debugfs directory [ 59.900119][ T5121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.907351][ T5121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.933633][ T5121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.947992][ T5121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.954956][ T5121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.981038][ T5121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.993313][ T5131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.000665][ T5131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.026635][ T5131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.039852][ T5131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.046952][ T5131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.072956][ T5131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.220478][ T5121] hsr_slave_0: entered promiscuous mode [ 60.228430][ T5121] hsr_slave_1: entered promiscuous mode [ 60.235101][ T5121] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.242770][ T5121] Cannot create hsr debugfs directory [ 60.295392][ T5131] hsr_slave_0: entered promiscuous mode [ 60.302026][ T5131] hsr_slave_1: entered promiscuous mode [ 60.309266][ T5131] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.317384][ T5131] Cannot create hsr debugfs directory [ 60.541311][ T5113] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.572379][ T5113] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.608447][ T5113] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.618651][ T5113] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.747712][ T5117] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.761449][ T5117] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.771932][ T5117] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.783173][ T5117] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.890610][ T5118] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.902615][ T5118] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.913362][ T5118] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.924420][ T5118] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.988209][ T5113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.042063][ T5121] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.073328][ T5121] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.084267][ T5121] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.110463][ T5113] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.125817][ T5121] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.171640][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.179061][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.237935][ T932] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.245078][ T932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.265694][ T5131] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.299766][ T5131] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.314762][ T5131] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.332560][ T5117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.349600][ T5131] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.372230][ T5118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.402417][ T5117] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.439729][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.446899][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.467954][ T5118] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.492867][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.499993][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.559225][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.566306][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.587285][ T5116] Bluetooth: hci0: command tx timeout [ 61.600882][ T5113] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.631973][ T5166] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.639144][ T5166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.673557][ T5116] Bluetooth: hci1: command tx timeout [ 61.674083][ T5120] Bluetooth: hci3: command tx timeout [ 61.680641][ T5125] Bluetooth: hci2: command tx timeout [ 61.733072][ T5117] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.814299][ T5131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.831921][ T5116] Bluetooth: hci4: command tx timeout [ 61.881256][ T5121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.922327][ T5131] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.960168][ T5121] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.972869][ T932] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.980112][ T932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.008662][ T5166] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.015799][ T5166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.033845][ T5113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.052443][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.059636][ T5166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.089623][ T5166] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.096832][ T5166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.205239][ T5121] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.224406][ T5121] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.326044][ T5117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.520355][ T5118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.586177][ T5117] veth0_vlan: entered promiscuous mode [ 62.650476][ T5121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.664010][ T5117] veth1_vlan: entered promiscuous mode [ 62.745745][ T5118] veth0_vlan: entered promiscuous mode [ 62.772192][ T5117] veth0_macvtap: entered promiscuous mode [ 62.781878][ T5118] veth1_vlan: entered promiscuous mode [ 62.791370][ T5131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.821558][ T5121] veth0_vlan: entered promiscuous mode [ 62.830391][ T5117] veth1_macvtap: entered promiscuous mode [ 62.843783][ T5113] veth0_vlan: entered promiscuous mode [ 62.871786][ T5121] veth1_vlan: entered promiscuous mode [ 62.915699][ T5113] veth1_vlan: entered promiscuous mode [ 62.948424][ T5118] veth0_macvtap: entered promiscuous mode [ 62.965822][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.989740][ T5118] veth1_macvtap: entered promiscuous mode [ 63.000797][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.012880][ T5117] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.025790][ T5117] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.038773][ T5117] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.047705][ T5117] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.079994][ T5131] veth0_vlan: entered promiscuous mode [ 63.101102][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.115029][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.129561][ T5118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.157134][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.168101][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.180655][ T5118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.195543][ T5121] veth0_macvtap: entered promiscuous mode [ 63.214677][ T5118] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.225350][ T5118] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.235853][ T5118] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.246235][ T5118] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.279301][ T5131] veth1_vlan: entered promiscuous mode [ 63.289857][ T5121] veth1_macvtap: entered promiscuous mode [ 63.299050][ T5113] veth0_macvtap: entered promiscuous mode [ 63.373314][ T5113] veth1_macvtap: entered promiscuous mode [ 63.385636][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.405134][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.419866][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.433938][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.443800][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.454492][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.465525][ T5121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.521640][ T2829] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.537805][ T2829] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.547480][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.558203][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.568283][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.578802][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.593865][ T5121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.609419][ T5131] veth0_macvtap: entered promiscuous mode [ 63.631098][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.643001][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.655645][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.666607][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.667279][ T5116] Bluetooth: hci0: command tx timeout [ 63.676408][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.692659][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.707561][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.722297][ T5121] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.732690][ T5121] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.743860][ T5121] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.746795][ T5125] Bluetooth: hci2: command tx timeout [ 63.756992][ T5116] Bluetooth: hci1: command tx timeout [ 63.758330][ T5125] Bluetooth: hci3: command tx timeout [ 63.766546][ T5121] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.783586][ T5131] veth1_macvtap: entered promiscuous mode [ 63.804350][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.819982][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.831337][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.841992][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.852048][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.863279][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.875322][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.897911][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.914460][ T5125] Bluetooth: hci4: command tx timeout [ 63.922896][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.945597][ T5131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.957369][ T5131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.971017][ T5131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.981912][ T5131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.995299][ T5131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.006106][ T5131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.017128][ T5131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.029331][ T5131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.042533][ T5131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.055432][ T5113] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.073079][ T5113] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.082842][ T5113] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.091786][ T5113] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.116906][ T5131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.127824][ T5131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.140821][ T5131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.151829][ T5131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.161786][ T5131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.172274][ T5131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.184110][ T5131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.194613][ T5131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.207405][ T5131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.244381][ T5131] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.255160][ T5131] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.263940][ T5131] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.272675][ T5131] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.285435][ T1112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.323319][ T1112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.446684][ T2462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.454544][ T2462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.462164][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.480244][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.572749][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.607178][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.633571][ T2829] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.669254][ T2829] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.698526][ T5207] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 64.729951][ T2503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.759380][ T2503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.883081][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.955380][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.352622][ T5234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 65.365579][ T5237] Zero length message leads to an empty skb [ 65.438209][ T5234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 65.577836][ T5244] x_tables: duplicate underflow at hook 1 [ 65.746956][ T5125] Bluetooth: hci0: command tx timeout [ 65.762307][ T5261] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 65.827186][ T5125] Bluetooth: hci1: command tx timeout [ 65.829248][ T5120] Bluetooth: hci3: command tx timeout [ 65.832742][ T5125] Bluetooth: hci2: command tx timeout [ 65.987464][ T5125] Bluetooth: hci4: command tx timeout [ 66.024993][ T5270] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 66.077374][ T5270] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 66.188295][ T5283] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 66.263579][ T5276] warning: `syz-executor.0' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 66.312610][ T5279] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 66.437721][ T5289] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 66.494146][ T5297] veth0_vlan: entered allmulticast mode [ 66.763216][ T5310] syz-executor.2 (5310) used obsolete PPPIOCDETACH ioctl [ 66.994770][ T5322] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. [ 67.260324][ T5335] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 67.284133][ T5334] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 67.388655][ T5337] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 67.474559][ T5337] bond0: (slave bond_slave_0): Releasing backup interface [ 67.623595][ T5334] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 67.679780][ T5334] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.798217][ T5334] bridge_slave_1 (unregistering): left allmulticast mode [ 67.813079][ T5334] bridge_slave_1 (unregistering): left promiscuous mode [ 67.833077][ T5334] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.875426][ T5340] syzkaller1: entered promiscuous mode [ 67.885711][ T5340] syzkaller1: entered allmulticast mode [ 67.912141][ T5345] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 68.334533][ T5362] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. [ 68.428971][ T5372] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET) [ 68.608724][ T5377] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 68.639967][ T5370] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.211520][ T5401] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 69.927283][ T5434] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.190892][ T5442] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 70.216192][ T5442] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 70.315163][ T5450] netem: unknown loss type 8 [ 70.356214][ T5450] netem: change failed [ 71.269228][ T5469] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 71.286657][ T5469] __nla_validate_parse: 4 callbacks suppressed [ 71.286676][ T5469] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 71.288524][ T5471] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.318763][ T5469] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 71.337324][ T5469] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.3'. [ 71.485587][ T5475] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 71.661691][ T5477] x_tables: ip6_tables: esp match: only valid for protocol 50 [ 71.758451][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.766028][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.800542][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888076c1cc00: rx timeout, send abort [ 71.810685][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888076c1cc00: 0x3f001: (3) A timeout occurred and this is the connection abort to close the session. [ 71.999679][ T5494] netem: unknown loss type 8 [ 72.012513][ T5494] netem: change failed [ 72.026100][ T5495] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 72.840854][ T5521] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 73.212968][ T5534] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 73.650293][ T5563] netem: unknown loss type 8 [ 73.670850][ T5563] netem: change failed [ 73.838635][ T5571] x_tables: duplicate underflow at hook 3 [ 73.869327][ T5571] netlink: 292 bytes leftover after parsing attributes in process `syz-executor.1'. [ 73.901861][ T5571] xt_CT: You must specify a L4 protocol and not use inversions on it [ 73.916343][ T5574] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 74.414337][ T5596] syzkaller0: entered promiscuous mode [ 74.457891][ T5596] syzkaller0: entered allmulticast mode [ 74.570243][ T5606] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 74.689536][ T5613] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 75.302512][ T5638] netem: unknown loss type 8 [ 75.322945][ T5638] netem: change failed [ 75.824743][ T5652] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 76.047559][ T5660] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 76.055779][ T5660] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 76.067506][ T5120] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.075424][ T5120] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.086712][ T5120] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.094545][ T5660] netlink: 126008 bytes leftover after parsing attributes in process `syz-executor.3'. [ 76.119636][ T5120] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.132770][ T5120] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.141394][ T5120] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.298008][ T63] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.358542][ T5673] validate_nla: 1 callbacks suppressed [ 76.358562][ T5673] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 76.419306][ T5673] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 76.429357][ T5673] netlink: 126008 bytes leftover after parsing attributes in process `syz-executor.4'. [ 76.524128][ T63] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.680561][ T63] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.888871][ T45] cfg80211: failed to load regulatory.db [ 76.971612][ T63] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.083691][ T5693] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 77.131878][ T5700] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 77.154716][ T5702] IPVS: set_ctl: invalid protocol: 22 224.0.0.2:20003 [ 77.184532][ T5702] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 77.246381][ T5700] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.264497][ T5700] bond0: (slave team0): Enslaving as an active interface with an up link [ 77.304856][ T5704] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 77.330880][ T5704] bond0: (slave team0): Releasing backup interface [ 77.445333][ T5704] bridge0: port 3(team0) entered blocking state [ 77.456889][ T5704] bridge0: port 3(team0) entered disabled state [ 77.474033][ T5704] team0: entered allmulticast mode [ 77.481074][ T5704] team_slave_0: entered allmulticast mode [ 77.530616][ T5704] team_slave_1: entered allmulticast mode [ 77.553167][ T5704] team0: entered promiscuous mode [ 77.579263][ T5704] team_slave_0: entered promiscuous mode [ 77.606808][ T5704] team_slave_1: entered promiscuous mode [ 77.639544][ T5721] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 77.720323][ T5727] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 2147221507 (only 8 groups) [ 77.955746][ T63] bridge_slave_0: left allmulticast mode [ 77.996603][ T63] bridge_slave_0: left promiscuous mode [ 78.009072][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.212101][ T5752] Unknown options in mask 1f4 [ 78.226850][ T5125] Bluetooth: hci1: command tx timeout [ 78.707071][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.721579][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.733426][ T63] bond0 (unregistering): Released all slaves [ 78.746175][ T63] bond1 (unregistering): Released all slaves [ 78.765678][ T5746] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 78.848355][ T5662] chnl_net:caif_netlink_parms(): no params data found [ 79.092563][ T5772] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 79.233830][ T5778] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 79.256034][ T5778] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 79.388445][ T5794] netlink: 165 bytes leftover after parsing attributes in process `syz-executor.1'. [ 79.432245][ T5786] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 79.459725][ T5790] ip6gretap1: entered allmulticast mode [ 79.492487][ T5797] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 79.511667][ T5662] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.521412][ T5662] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.529133][ T5662] bridge_slave_0: entered allmulticast mode [ 79.537630][ T5662] bridge_slave_0: entered promiscuous mode [ 79.578586][ T5662] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.618070][ T5662] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.625328][ T5662] bridge_slave_1: entered allmulticast mode [ 79.636257][ T5662] bridge_slave_1: entered promiscuous mode [ 79.684884][ T63] hsr_slave_0: left promiscuous mode [ 79.706110][ T63] hsr_slave_1: left promiscuous mode [ 79.716244][ T5806] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 79.735417][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.752004][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.779556][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.804610][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.853176][ T63] veth1_macvtap: left promiscuous mode [ 79.867189][ T63] veth0_macvtap: left promiscuous mode [ 79.880049][ T63] veth1_vlan: left promiscuous mode [ 79.892738][ T63] veth0_vlan: left promiscuous mode [ 80.307139][ T5125] Bluetooth: hci1: command tx timeout [ 80.509687][ T63] team0 (unregistering): Port device team_slave_1 removed [ 80.546748][ T63] team0 (unregistering): Port device team_slave_0 removed [ 80.989739][ T5662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.028197][ T5662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.052054][ T5831] block nbd0: not configured, cannot reconfigure [ 81.208785][ T5662] team0: Port device team_slave_0 added [ 81.234910][ T5662] team0: Port device team_slave_1 added [ 81.380265][ T5662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.411918][ T5662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.464173][ T5662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.517849][ T5662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.555548][ T5662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.656469][ T5662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.731760][ T5849] ip6gretap1: entered allmulticast mode [ 81.768526][ T5853] __nla_validate_parse: 2 callbacks suppressed [ 81.768544][ T5853] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 81.804112][ T5852] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 82.051357][ T5662] hsr_slave_0: entered promiscuous mode [ 82.072568][ T5662] hsr_slave_1: entered promiscuous mode [ 82.102385][ T5662] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.121052][ T5662] Cannot create hsr debugfs directory [ 82.263195][ T5884] syzkaller1: entered promiscuous mode [ 82.297706][ T5884] syzkaller1: entered allmulticast mode [ 82.368044][ T5878] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 82.387189][ T5125] Bluetooth: hci1: command tx timeout [ 82.850446][ T5904] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 83.067775][ T5912] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 83.304486][ T5662] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.345040][ T5662] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.380115][ T5662] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.448359][ T5924] ip6gretap0: entered allmulticast mode [ 83.474770][ T5662] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.492547][ T5924] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 83.831464][ T5941] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 83.898335][ T5662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.946199][ T5662] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.025902][ T5947] bridge1: entered promiscuous mode [ 84.036135][ T5947] bridge1: entered allmulticast mode [ 84.053346][ T5312] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.060631][ T5312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.101194][ T5312] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.108404][ T5312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.467032][ T5125] Bluetooth: hci1: command tx timeout [ 84.643284][ T5985] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 84.681753][ T5662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.805112][ T5662] veth0_vlan: entered promiscuous mode [ 84.846811][ T5992] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 84.909524][ T5662] veth1_vlan: entered promiscuous mode [ 84.980919][ T5662] veth0_macvtap: entered promiscuous mode [ 85.021365][ T5662] veth1_macvtap: entered promiscuous mode [ 85.073748][ T5662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.109066][ T5662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.163163][ T5662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.191339][ T5662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.217570][ T5662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.256571][ T5662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.296890][ T5662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.328317][ T5662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.367055][ T5662] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.431720][ T5662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.467801][ T5662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.493029][ T5662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.513831][ T5662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.541791][ T5662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.564584][ T5662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.616485][ T5662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.649894][ T5662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.668135][ T5662] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.710753][ T5662] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.729845][ T5662] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.767621][ T5662] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.776354][ T5662] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.945191][ T6041] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 85.984721][ T6041] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.0'. [ 86.101227][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.125106][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.217579][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.245736][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.410468][ T6054] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 87.224995][ T6117] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.3'. [ 87.256924][ T6118] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 87.297807][ T6116] syzkaller1: entered promiscuous mode [ 87.304931][ T6116] syzkaller1: entered allmulticast mode [ 87.433265][ T6125] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 87.528962][ T6129] bridge0: port 3(macvlan2) entered blocking state [ 87.535979][ T6129] bridge0: port 3(macvlan2) entered disabled state [ 87.564773][ T6129] macvlan2: entered allmulticast mode [ 87.587236][ T6129] macvlan2: entered promiscuous mode [ 87.632930][ T6125] macvlan2 (unregistering): left allmulticast mode [ 87.640144][ T6125] macvlan2 (unregistering): left promiscuous mode [ 87.651071][ T6125] bridge0: port 3(macvlan2) entered disabled state [ 87.741670][ T6129] vlan2: entered promiscuous mode [ 87.785909][ T6142] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 87.975601][ T6142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.098670][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807152d400: rx timeout, send abort [ 88.107406][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888022bcb000: rx timeout, send abort [ 88.241663][ T6142] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 88.607079][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807152d400: abort rx timeout. Force session deactivation [ 88.619091][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888022bcb000: abort rx timeout. Force session deactivation [ 88.631085][ T6154] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 88.911773][ T6169] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 88.939258][ T6172] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 88.954688][ T6169] netlink: 43 bytes leftover after parsing attributes in process `syz-executor.3'. [ 88.977356][ T6169] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 88.989800][ T6169] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 89.002456][ T6169] netlink: 43 bytes leftover after parsing attributes in process `syz-executor.3'. [ 89.068518][ T6180] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 89.222772][ T6182] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 89.255954][ T6182] bond1: entered promiscuous mode [ 89.261570][ T6189] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 89.410915][ T6201] tun0: tun_chr_ioctl cmd 1074025680 [ 89.464824][ T6205] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 89.779901][ T6225] vlan0: entered promiscuous mode [ 89.785073][ T6225] vlan0: entered allmulticast mode [ 89.817727][ T6225] veth0_vlan: entered allmulticast mode [ 89.844718][ T6225] team0: Port device vlan0 added [ 90.324416][ T6242] Bluetooth: MGMT ver 1.22 [ 90.641803][ T6250] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 90.894149][ T6271] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 91.258324][ T6290] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 91.285879][ T6290] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 91.317974][ T6290] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 92.024050][ T6343] sit0: entered promiscuous mode [ 92.067027][ T6343] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 92.135937][ T6352] openvswitch: netlink: Key type 29 is not supported [ 92.287875][ T29] audit: type=1804 audit(1719085781.996:2): pid=6361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D74657374646972313131323430303531312F73797A6B616C6C65722E443972686C512F35352F08 dev="sda1" ino=1961 res=1 errno=0 [ 92.410058][ T5163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.513723][ T6375] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 92.531978][ T6375] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 92.564398][ T6375] __nla_validate_parse: 21 callbacks suppressed [ 92.564418][ T6375] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 92.614936][ T6375] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 92.740796][ T6387] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 92.834003][ T6396] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 92.929424][ T6403] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 92.978239][ T6401] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 92.993584][ T6401] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 93.427265][ T5163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.668978][ T6438] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 93.712538][ T6438] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20003 [ 93.794891][ T6450] Driver unsupported XDP return value 0 on prog (id 152) dev N/A, expect packet loss! [ 94.468430][ T5163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.626915][ T5312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.129146][ T6528] validate_nla: 2 callbacks suppressed [ 95.129165][ T6528] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 95.174666][ T6528] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.214787][ T6528] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.237142][ T6528] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 95.250073][ T6528] bond1: (slave ip6tnl1): Error -95 calling set_mac_address [ 95.311491][ T6541] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 95.345111][ T6541] bond2: entered promiscuous mode [ 95.382102][ T6541] bridge3: entered promiscuous mode [ 95.388501][ T6541] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 95.409213][ T6541] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 95.426183][ T6541] bond2 (unregistering): (slave bridge3): Releasing backup interface [ 95.443996][ T6541] bridge3: left promiscuous mode [ 95.478285][ T6541] bond2 (unregistering): Released all slaves [ 95.515163][ T5164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.734109][ T6567] SET target dimension over the limit! [ 95.826251][ T6566] veth0_vlan: entered allmulticast mode [ 95.875133][ T6574] netlink: 666 bytes leftover after parsing attributes in process `syz-executor.2'. [ 95.896656][ T6575] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 95.925884][ T6566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.928011][ T6575] bond2: entered promiscuous mode [ 95.935464][ T6566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.948153][ T6566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.975117][ T6579] bridge4: entered promiscuous mode [ 95.984406][ T6579] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 96.005516][ T6578] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 96.035871][ T6565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.045427][ T6565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.288854][ T6602] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 96.341845][ T6602] netlink: 'syz-executor.0': attribute type 68 has an invalid length. [ 96.483571][ T29] audit: type=1804 audit(1719085786.196:3): pid=6613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1672726261/syzkaller.5dNsE9/112/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 96.547732][ T5164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.712523][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.724318][ T6621] ieee802154 phy0 wpan0: encryption failed: -22 [ 96.743977][ T6621] syz-executor.2 (6621) used greatest stack depth: 17976 bytes left [ 97.340143][ T6653] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 97.470890][ T6660] x_tables: unsorted underflow at hook 2 [ 97.508716][ T6660] x_tables: unsorted underflow at hook 2 [ 97.925329][ T6681] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 97.926747][ T6682] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 97.950049][ T6681] __nla_validate_parse: 5 callbacks suppressed [ 97.950066][ T6681] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.4'. [ 97.968338][ T6682] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.4'. [ 98.189825][ T6687] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 98.204750][ T6687] netlink: 168864 bytes leftover after parsing attributes in process `syz-executor.4'. [ 98.541381][ T6700] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 98.802963][ T6710] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 99.161342][ T6742] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 99.343170][ T6752] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 99.754373][ T6770] ip6erspan0: entered promiscuous mode [ 100.053414][ T6781] net_ratelimit: 10 callbacks suppressed [ 100.053433][ T6781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.068061][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.346817][ T6798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.358038][ T6798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.363030][ T6792] ip6erspan0: entered promiscuous mode [ 100.366806][ T6798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.390660][ T6798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.400284][ T6798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.428964][ T6797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.514382][ T6807] raw_sendmsg: syz-executor.4 forgot to set AF_INET. Fix it! [ 100.537607][ T6807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.655553][ T6816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.595430][ T29] audit: type=1800 audit(1719085791.306:4): pid=6864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1965 res=0 errno=0 [ 101.682304][ T29] audit: type=1804 audit(1719085791.306:5): pid=6864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1112400511/syzkaller.D9rhlQ/96/memory.events" dev="sda1" ino=1965 res=1 errno=0 [ 101.760370][ T29] audit: type=1804 audit(1719085791.306:6): pid=6864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1112400511/syzkaller.D9rhlQ/96/memory.events" dev="sda1" ino=1965 res=1 errno=0 [ 101.844989][ T29] audit: type=1804 audit(1719085791.306:7): pid=6864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1112400511/syzkaller.D9rhlQ/96/memory.events" dev="sda1" ino=1965 res=1 errno=0 [ 101.921269][ T29] audit: type=1804 audit(1719085791.376:8): pid=6864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1112400511/syzkaller.D9rhlQ/96/memory.events" dev="sda1" ino=1965 res=1 errno=0 [ 101.949849][ T29] audit: type=1804 audit(1719085791.376:9): pid=6864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1112400511/syzkaller.D9rhlQ/96/memory.events" dev="sda1" ino=1965 res=1 errno=0 [ 101.980044][ T6873] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 101.999257][ T6873] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 102.513302][ T6891] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 102.685445][ T6902] ieee802154 phy0 wpan0: encryption failed: -22 [ 102.967877][ T6912] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 102.983320][ T6912] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 103.162837][ T6916] syzkaller1: entered promiscuous mode [ 103.183751][ T6916] syzkaller1: entered allmulticast mode [ 104.638492][ T29] audit: type=1800 audit(1719085794.346:10): pid=6936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1964 res=0 errno=0 [ 104.668341][ T6936] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 104.708070][ T6936] netlink: 211132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 104.747459][ T29] audit: type=1804 audit(1719085794.346:11): pid=6936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2221689555/syzkaller.IOI1z3/115/memory.events" dev="sda1" ino=1964 res=1 errno=0 [ 104.845184][ T29] audit: type=1804 audit(1719085794.366:12): pid=6936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2221689555/syzkaller.IOI1z3/115/memory.events" dev="sda1" ino=1964 res=1 errno=0 [ 104.921295][ T6936] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 104.953320][ T29] audit: type=1804 audit(1719085794.366:13): pid=6936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2221689555/syzkaller.IOI1z3/115/memory.events" dev="sda1" ino=1964 res=1 errno=0 [ 105.328163][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 105.370786][ T6949] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 105.389801][ T6948] net_ratelimit: 201 callbacks suppressed [ 105.389820][ T6948] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 105.414673][ T6949] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 105.459360][ T6951] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 105.490882][ T6951] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 105.582552][ T6955] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 105.800064][ T6963] bond_slave_0: entered promiscuous mode [ 105.806853][ T6963] bond_slave_1: entered promiscuous mode [ 105.823859][ T6963] vlan2: entered promiscuous mode [ 105.837010][ T6963] bond0: entered promiscuous mode [ 105.842625][ T6963] vlan2: entered allmulticast mode [ 105.869672][ T6963] bond0: entered allmulticast mode [ 105.875095][ T6963] bond_slave_0: entered allmulticast mode [ 105.899094][ T6963] bond_slave_1: entered allmulticast mode [ 106.084676][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801e275800: rx timeout, send abort [ 106.095149][ T6976] netlink: zone id is out of range [ 106.106965][ T6976] netlink: zone id is out of range [ 106.123434][ T6976] netlink: zone id is out of range [ 106.138748][ T6976] netlink: zone id is out of range [ 106.149613][ T6980] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 106.182864][ T6976] netlink: set zone limit has 4 unknown bytes [ 106.306811][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.592971][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801e275800: abort rx timeout. Force session deactivation [ 106.657283][ T7005] hsr_slave_0: left promiscuous mode [ 106.682921][ T7005] hsr_slave_1: left promiscuous mode [ 106.794491][ T7002] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 107.780446][ T5120] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 107.789054][ T5120] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 107.803315][ T5120] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 107.816687][ T5120] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 107.826946][ T5120] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 107.834275][ T5120] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 107.935458][ T7055] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 107.984921][ T7059] hsr_slave_0: left promiscuous mode [ 107.995517][ T7059] hsr_slave_1: left promiscuous mode [ 108.289811][ T7070] xt_CT: You must specify a L4 protocol and not use inversions on it [ 108.401000][ T7052] chnl_net:caif_netlink_parms(): no params data found [ 108.443036][ T7079] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 108.543451][ T7052] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.554294][ T7052] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.576696][ T7052] bridge_slave_0: entered allmulticast mode [ 108.584329][ T7052] bridge_slave_0: entered promiscuous mode [ 108.599617][ T7052] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.617186][ T7052] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.624389][ T7052] bridge_slave_1: entered allmulticast mode [ 108.655655][ T7052] bridge_slave_1: entered promiscuous mode [ 108.728233][ T7052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.765817][ T7052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.820585][ T7052] team0: Port device team_slave_0 added [ 108.835184][ T7052] team0: Port device team_slave_1 added [ 108.891804][ T7052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.905334][ T7052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.932434][ T7052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.947230][ T7052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.954301][ T7052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.983459][ T7052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.069701][ T7052] hsr_slave_0: entered promiscuous mode [ 109.088243][ T7052] hsr_slave_1: entered promiscuous mode [ 109.163163][ T7103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.190680][ T7103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.443413][ T7052] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.640005][ T7052] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.780939][ T7052] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.907766][ T5120] Bluetooth: hci1: command tx timeout [ 109.964811][ T7052] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.983855][ T7134] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 110.011099][ T7138] syz-executor.0[7138] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.011337][ T7138] syz-executor.0[7138] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.246801][ T7147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.295953][ T7052] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 110.313114][ T5125] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 110.323986][ T7052] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 110.332473][ T5125] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 110.340575][ T5125] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 110.349497][ T5125] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 110.358108][ T5125] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 110.365604][ T5125] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 110.390376][ T7052] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 110.404362][ T7052] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 110.525202][ T7154] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.4'. [ 110.855265][ T7133] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 110.921476][ T7052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.056001][ T7052] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.109608][ T5312] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.116778][ T5312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.153199][ T7150] chnl_net:caif_netlink_parms(): no params data found [ 111.202333][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.209532][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.484432][ T7150] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.492573][ T7150] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.500758][ T7150] bridge_slave_0: entered allmulticast mode [ 111.508579][ T7150] bridge_slave_0: entered promiscuous mode [ 111.528382][ T7150] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.539571][ T7150] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.548322][ T7150] bridge_slave_1: entered allmulticast mode [ 111.555683][ T7150] bridge_slave_1: entered promiscuous mode [ 111.613970][ T7150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.619850][ T7201] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 111.653411][ T7150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.783243][ T7150] team0: Port device team_slave_0 added [ 111.793806][ T7150] team0: Port device team_slave_1 added [ 111.802563][ T7204] syzkaller1: entered promiscuous mode [ 111.812926][ T7204] syzkaller1: entered allmulticast mode [ 111.913830][ T7150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.922371][ T7150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.948669][ T7150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.974215][ T7150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.983387][ T7150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.010060][ T5120] Bluetooth: hci1: command tx timeout [ 112.015606][ T7150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.051061][ T7209] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 112.068915][ T45] net_ratelimit: 4 callbacks suppressed [ 112.068928][ T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.083076][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.111566][ T7150] hsr_slave_0: entered promiscuous mode [ 112.118609][ T7150] hsr_slave_1: entered promiscuous mode [ 112.124967][ T7150] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.134848][ T7150] Cannot create hsr debugfs directory [ 112.152737][ T7210] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. [ 112.214574][ T7052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.393843][ T7220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.403280][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.413213][ T5120] Bluetooth: hci5: command tx timeout [ 112.444763][ T7220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.453453][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.498490][ T7220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.499416][ T7052] veth0_vlan: entered promiscuous mode [ 112.507072][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.569498][ T7150] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.650166][ T7052] veth1_vlan: entered promiscuous mode [ 112.750515][ T7150] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.850590][ T7150] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.891242][ T7052] veth0_macvtap: entered promiscuous mode [ 112.935874][ T7150] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.959848][ T7052] veth1_macvtap: entered promiscuous mode [ 113.004428][ T7052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.026947][ T7052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.047980][ T7052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.058932][ T7052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.069300][ T7235] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 113.078439][ T7052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.089949][ T7052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.115071][ T7052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.133676][ T7052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.146037][ T7052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.156860][ T7052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.168731][ T7052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.218066][ T7052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.240699][ T7052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.251369][ T7052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.276226][ T7052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.299948][ T7052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.315795][ T7244] syz-executor.3[7244] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.316028][ T7244] syz-executor.3[7244] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.317272][ T7052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.349002][ T7245] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 113.352992][ T7052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.369039][ T7052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.379190][ T7052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.391371][ T7052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.404021][ T7052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.427678][ T7245] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 113.458551][ T7052] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.487016][ T7052] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.495759][ T7052] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.506034][ T7052] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.581946][ T7256] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 113.642116][ T7150] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 113.683364][ T7150] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 113.704993][ T7150] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 113.727775][ T7258] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 113.770226][ T7150] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 113.866129][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.876267][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.974176][ T2493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.983386][ T2493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.033552][ T7266] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 114.066616][ T5120] Bluetooth: hci1: command tx timeout [ 114.233733][ T7150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.265028][ T7277] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 114.304366][ T7277] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 114.424895][ T7283] syz-executor.4[7283] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.425120][ T7283] syz-executor.4[7283] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.457304][ T7150] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.476931][ T5120] Bluetooth: hci5: command tx timeout [ 114.570911][ T5164] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.578118][ T5164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.638258][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.645489][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.668631][ T7291] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 114.772229][ T7150] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 114.825218][ T7297] bridge0: port 3(vlan3) entered blocking state [ 114.839541][ T7297] bridge0: port 3(vlan3) entered disabled state [ 114.846153][ T7297] vlan3: entered allmulticast mode [ 114.853515][ T7297] vlan3: left allmulticast mode [ 114.968395][ T7150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.177005][ T7310] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 115.192577][ T7150] veth0_vlan: entered promiscuous mode [ 115.203759][ C1] vxcan0: j1939_tp_txtimer: 0xffff8880233f0000: tx aborted with unknown reason: -2 [ 115.213514][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88801f9c9000: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 115.232479][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff8880233f0000: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 115.245450][ T7150] veth1_vlan: entered promiscuous mode [ 115.332409][ T7150] veth0_macvtap: entered promiscuous mode [ 115.359527][ T7150] veth1_macvtap: entered promiscuous mode [ 115.413732][ T7150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.428800][ T7150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.454260][ T7150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.465573][ T7150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.487311][ T7150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.503872][ T7150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.513773][ T7150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.525139][ T7150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.537102][ T7150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.549323][ T7150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.559827][ T7150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.570457][ T7150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.582907][ T7150] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.605833][ T7150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.654367][ T7150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.673887][ T7150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.699183][ T7150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.711556][ T7150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.722851][ T7150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.732909][ T7150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.745552][ T7328] syz-executor.0[7328] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.745791][ T7328] syz-executor.0[7328] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.746321][ T7150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.781646][ T7150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.792845][ T7150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.803015][ T7150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.814940][ T7150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.828512][ T7150] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.840548][ T7150] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.852635][ T7150] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.878382][ T7150] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.910676][ T1795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.923621][ T7150] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.101285][ T7336] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 116.158098][ T5120] Bluetooth: hci1: command tx timeout [ 116.200589][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.232727][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.263731][ T7346] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 116.306003][ T2493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.324483][ T2493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.470999][ T7355] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 116.548857][ T5120] Bluetooth: hci5: command tx timeout [ 116.642697][ T7364] syz-executor.3[7364] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.642927][ T7364] syz-executor.3[7364] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.747712][ T7371] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 116.762230][ T7373] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 116.781804][ T7371] netlink: 9388 bytes leftover after parsing attributes in process `syz-executor.0'. [ 117.145015][ T7348] net_ratelimit: 8 callbacks suppressed [ 117.145036][ T7348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.169175][ T7348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.200120][ T7348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.253931][ T7399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.263477][ T7399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.274406][ T7399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.284974][ T7399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.293617][ T7399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.304047][ T7398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.645268][ T7412] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 117.931784][ T7430] syz_tun: entered promiscuous mode [ 117.945639][ T7429] syz_tun: left promiscuous mode [ 118.035273][ T7437] syz-executor.1[7437] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.035624][ T7437] syz-executor.1[7437] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.342250][ T7457] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 118.636616][ T5120] Bluetooth: hci5: command tx timeout [ 118.725683][ T7476] syz-executor.4[7476] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.725907][ T7476] syz-executor.4[7476] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.759550][ T7476] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.004605][ T7487] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 119.141019][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 119.141036][ T29] audit: type=1804 audit(1719085808.856:16): pid=7496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1112400511/syzkaller.D9rhlQ/163/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 [ 119.162541][ T7496] : renamed from gretap0 [ 119.358376][ T7507] syz-executor.2[7507] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 119.358618][ T7507] syz-executor.2[7507] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 119.653202][ T7521] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 119.694630][ T7524] syzkaller1: entered allmulticast mode [ 119.784007][ T7531] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 119.792874][ T7531] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.1'. [ 120.293687][ T7550] tipc: Started in network mode [ 120.308840][ T7550] tipc: Node identity ffffffff, cluster identity 4711 [ 120.315914][ T7550] tipc: Node number set to 4294967295 [ 120.333729][ T7552] sch_tbf: burst 3 is lower than device lo mtu (65550) ! [ 120.549824][ T7561] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 120.662933][ T7565] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 121.060613][ T7594] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 121.085808][ T7594] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 121.101867][ T7594] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 121.131360][ T7594] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 121.152450][ T7594] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 121.301833][ T7608] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 121.329501][ T7608] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 121.417268][ T7620] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 121.449511][ T7619] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 121.515130][ T7619] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.525489][ T7619] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.534912][ T7619] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.544051][ T7619] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.581881][ T7619] vxlan0: entered promiscuous mode [ 121.618479][ T7630] sit0: entered allmulticast mode [ 121.643731][ T7636] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 121.747494][ T5125] Bluetooth: hci5: command 0x0405 tx timeout [ 122.118427][ T7659] trusted_key: syz-executor.4 sent an empty control message without MSG_MORE. [ 122.142766][ T7659] tipc: Started in network mode [ 122.156117][ T7659] tipc: Node identity 080211, cluster identity 4711 [ 122.229316][ T7659] tipc: Enabled bearer , priority 0 [ 122.242532][ T7665] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. [ 122.368304][ T7672] net_ratelimit: 12 callbacks suppressed [ 122.368332][ T7672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.402239][ T7672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.422128][ T7672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.431485][ T7672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.555017][ T7680] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 122.613663][ T7683] atomic_op ffff88807910c198 conn xmit_atomic 0000000000000000 [ 122.614419][ T7686] ipvlan2: entered promiscuous mode [ 122.635734][ T7686] ipvlan2: entered allmulticast mode [ 122.655974][ T7686] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 122.951118][ T7701] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 123.313511][ T7717] IPVS: set_ctl: invalid protocol: 59 172.30.0.2:20000 [ 123.348766][ T9] tipc: Node number set to 134353152 [ 123.368563][ T7725] validate_nla: 9 callbacks suppressed [ 123.368581][ T7725] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 123.391969][ T7725] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.4'. [ 123.493762][ T7735] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 123.502593][ T7735] netlink: 168864 bytes leftover after parsing attributes in process `syz-executor.4'. [ 123.763990][ T29] audit: type=1804 audit(1719085813.476:17): pid=7750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1112400511/syzkaller.D9rhlQ/186/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 [ 124.005232][ T7757] Cannot find add_set index 0 as target [ 124.213946][ T7768] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 124.599063][ T7773] x_tables: duplicate underflow at hook 1 [ 124.745975][ T7756] delete_channel: no stack [ 125.518415][ T5201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.803404][ T7814] pim6reg1: entered promiscuous mode [ 125.852475][ T7814] pim6reg1: entered allmulticast mode [ 125.926008][ T7814] x_tables: unsorted entry at hook 3 [ 126.125120][ T7831] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 126.150049][ T5166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.158481][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.360551][ T7849] __nla_validate_parse: 4 callbacks suppressed [ 126.360571][ T7849] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 126.378393][ T7846] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 126.396828][ T7849] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 126.465193][ T7835] veth0_vlan: left promiscuous mode [ 126.609588][ T7861] bpf_get_probe_write_proto: 2 callbacks suppressed [ 126.609607][ T7861] syz-executor.0[7861] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 126.633063][ T7861] syz-executor.0[7861] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 126.667153][ T7824] delete_channel: no stack [ 126.960130][ T7873] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 127.008956][ T7869] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 127.704946][ T7896] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 127.742188][ T7896] netlink: 666 bytes leftover after parsing attributes in process `syz-executor.4'. [ 128.426679][ T5201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.474447][ T7919] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 128.994894][ T7949] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 129.218554][ T7957] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 129.315519][ T7964] netlink: 9384 bytes leftover after parsing attributes in process `syz-executor.2'. [ 129.413810][ T7964] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 129.538096][ T7964] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 129.836771][ T5120] Bluetooth: hci5: command 0x0405 tx timeout [ 130.000312][ T5201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.399806][ T5163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.427548][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.210566][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.720459][ T8021] bridge_slave_0: default FDB implementation only supports local addresses [ 131.758359][ T8023] __nla_validate_parse: 2 callbacks suppressed [ 131.758380][ T8023] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 131.895817][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.010338][ T8036] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 132.076717][ T8042] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 132.125057][ T8042] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 132.173054][ T8042] cannot load conntrack support for proto=3 [ 132.199893][ T8049] syz-executor.2[8049] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.200132][ T8049] syz-executor.2[8049] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.449234][ T8060] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 132.623575][ T8074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.633481][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.643391][ T8074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.651785][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.715168][ T8071] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 132.736594][ T8071] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 132.761474][ T8071] bridge0: port 3(batadv0) entered blocking state [ 132.775109][ T8071] bridge0: port 3(batadv0) entered disabled state [ 132.804467][ T8083] syz-executor.3[8083] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.804863][ T8083] syz-executor.3[8083] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.813008][ T8071] batadv0: entered allmulticast mode [ 132.843457][ T8071] batadv0: entered promiscuous mode [ 132.850115][ T8071] bridge0: port 3(batadv0) entered blocking state [ 132.856703][ T8071] bridge0: port 3(batadv0) entered forwarding state [ 133.188386][ T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.191639][ T145] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 133.197184][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.206031][ T145] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 133.214997][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.231012][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.511938][ T8109] dummy0: entered promiscuous mode [ 133.561482][ T8114] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 133.677777][ T8114] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 133.827185][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.833866][ T2829] batman_adv: batadv0: MLD Querier appeared [ 134.156006][ T8151] delete_channel: no stack [ 134.242796][ T8160] syz-executor.2[8160] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.243039][ T8160] syz-executor.2[8160] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.303028][ T8165] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 134.373413][ T8169] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 134.396770][ T8165] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 134.406102][ T8165] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 134.437782][ T8165] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 134.448052][ T8169] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 134.462393][ T8175] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 134.602715][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.630671][ T8183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.640702][ T8183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.658470][ T8183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.688018][ T8183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.758531][ T8183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.789285][ T8182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.943029][ T8199] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 134.984904][ T8204] syz-executor.2[8204] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.985140][ T8204] syz-executor.2[8204] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.019548][ T8200] syzkaller1: entered promiscuous mode [ 135.056988][ T8200] syzkaller1: entered allmulticast mode [ 135.215450][ T8216] pim6reg1: entered promiscuous mode [ 135.221221][ T8216] pim6reg1: entered allmulticast mode [ 135.245349][ T8216] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 135.246650][ T8218] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 135.252385][ T8216] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 135.474582][ T8230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.716034][ T8244] syz-executor.0[8244] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.716273][ T8244] syz-executor.0[8244] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.754226][ T8242] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 135.901571][ T8250] sctp: [Deprecated]: syz-executor.4 (pid 8250) Use of struct sctp_assoc_value in delayed_ack socket option. [ 135.901571][ T8250] Use struct sctp_sack_info instead [ 136.161049][ T8263] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 136.237765][ T8263] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 136.519904][ T8285] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 136.723199][ T8297] syzkaller0: entered allmulticast mode [ 136.727084][ T8295] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 137.188717][ T8323] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 137.199585][ T8323] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 137.894809][ T8361] bpf_get_probe_write_proto: 2 callbacks suppressed [ 137.894828][ T8361] syz-executor.4[8361] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.912605][ T8361] syz-executor.4[8361] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 138.114792][ T8371] macvlan6: entered promiscuous mode [ 138.273225][ T8382] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 138.282239][ T8382] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.0'. [ 138.618173][ T8405] syz-executor.2[8405] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 138.618407][ T8405] syz-executor.2[8405] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 138.659293][ T8382] netdevsim netdevsim0 netdevsim1: Unsupported IPsec algorithm [ 139.014759][ T8418] bridge0: entered promiscuous mode [ 139.591341][ T9] net_ratelimit: 14 callbacks suppressed [ 139.591360][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.231055][ T5163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.239679][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.131720][ T8413] bridge0: left promiscuous mode [ 141.343497][ T8462] bridge_slave_1: left allmulticast mode [ 141.366654][ T8462] bridge_slave_1: left promiscuous mode [ 141.372478][ T8462] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.417954][ T8457] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 141.426155][ T8457] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.4'. [ 141.443668][ T8457] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 141.475512][ T8467] syz-executor.1[8467] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 141.475731][ T8467] syz-executor.1[8467] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 141.502019][ T8457] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.4'. [ 141.728526][ T8477] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 141.974975][ T8501] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 142.119332][ T8533] syz-executor.4[8533] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.119568][ T8533] syz-executor.4[8533] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.146154][ T8533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.170979][ T8533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.179605][ T8533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.193338][ T8532] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.203259][ T8532] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.244583][ T8535] syz-executor.2[8535] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.244816][ T8535] syz-executor.2[8535] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.359658][ T8541] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 142.405473][ T8541] vlan2: entered promiscuous mode [ 142.417875][ T8541] gretap0: entered promiscuous mode [ 142.441819][ T8541] gretap0: left promiscuous mode [ 142.617906][ T8553] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 142.654843][ T8553] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 142.943893][ T8577] syz-executor.4[8577] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.944133][ T8577] syz-executor.4[8577] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.147076][ T8592] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 143.256150][ T8600] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 143.279240][ T8592] bond2 (unregistering): Released all slaves [ 143.799376][ T8637] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 143.858468][ T8637] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 143.875070][ T8641] hsr_slave_0: left promiscuous mode [ 143.959717][ T8641] hsr_slave_1: left promiscuous mode [ 144.256757][ T8659] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 144.296367][ T8659] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 144.487613][ T8683] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 144.635374][ T8691] net_ratelimit: 6 callbacks suppressed [ 144.635393][ T8691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.649585][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 144.660661][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.678933][ T8691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.709308][ T1795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.718265][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.755658][ T8689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.766747][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.782714][ T8689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.924023][ T8707] ip6gretap0: entered promiscuous mode [ 144.935517][ T8707] batadv_slave_0: entered promiscuous mode [ 144.947430][ T8707] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 144.955566][ T8707] Cannot create hsr debugfs directory [ 145.084419][ T8716] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 145.208421][ T8723] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 145.244744][ T8723] vlan0: entered promiscuous mode [ 145.260494][ T8723] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 145.301783][ T8723] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 145.420721][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 145.542950][ T8741] syzkaller1: entered promiscuous mode [ 145.558019][ T8741] syzkaller1: entered allmulticast mode [ 145.678393][ T8745] netlink: 'syz-executor.4': attribute type 63 has an invalid length. [ 145.708842][ T8745] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 145.736063][ T8745] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 145.780500][ T8753] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 145.802946][ T8755] Κό: entered promiscuous mode [ 145.824897][ T8753] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 145.964071][ T8761] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 146.280645][ T8789] bridge0: port 3(vlan0) entered blocking state [ 146.295139][ T8789] bridge0: port 3(vlan0) entered disabled state [ 146.309263][ T8789] vlan0: entered allmulticast mode [ 146.338191][ T8789] vlan0: left allmulticast mode [ 146.854646][ T8825] Κό: entered promiscuous mode [ 147.315843][ T8851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.370740][ T8851] team0: Port device virt_wifi0 added [ 147.425751][ T8858] syz-executor.2[8858] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.425990][ T8858] syz-executor.2[8858] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.987500][ T8892] netlink: 212424 bytes leftover after parsing attributes in process `syz-executor.2'. [ 148.012530][ T8894] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 148.124538][ T8901] syz-executor.4[8901] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.124780][ T8901] syz-executor.4[8901] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.172505][ T8894] sock: sock_timestamping_bind_phc: sock not bind to device [ 149.000194][ T8929] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.0'. [ 149.139074][ T8934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.174941][ T8934] team0: Port device virt_wifi0 added [ 149.283954][ T8939] syz-executor.0[8939] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 149.284189][ T8939] syz-executor.0[8939] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 149.822725][ T29] audit: type=1804 audit(1719085839.536:18): pid=8953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1112400511/syzkaller.D9rhlQ/272/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 150.044901][ T8965] x_tables: duplicate underflow at hook 4 [ 150.067017][ T932] net_ratelimit: 13 callbacks suppressed [ 150.067035][ T932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.250336][ T8981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.259272][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 150.269980][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.307096][ T8981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.343898][ T8978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.356514][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.378571][ T8978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.510886][ T8994] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 150.531073][ T8994] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.0'. [ 150.573861][ T8995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.587183][ T8995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.687656][ T9001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.764097][ T9001] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 150.785199][ T9001] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 150.812867][ T9001] team0: Port device virt_wifi0 added [ 150.855395][ T29] audit: type=1804 audit(1719085840.566:19): pid=9012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3522784831/syzkaller.yHb5hr/131/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 [ 151.224516][ T9014] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 151.230336][ T9023] syz-executor.1[9023] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.234317][ T9023] syz-executor.1[9023] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.728961][ T9048] ebt_among: dst integrity fail: 100 [ 151.898788][ T5312] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.960041][ T9059] syz-executor.2[9059] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.960287][ T9059] syz-executor.2[9059] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.121529][ T9069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.177094][ T9069] team0: Port device virt_wifi0 added [ 152.567658][ T9095] syz-executor.4[9095] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.567885][ T9095] syz-executor.4[9095] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.605985][ T9098] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 152.655625][ T9098] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 153.080828][ T9128] x_tables: duplicate entry at hook 3 [ 153.115463][ T9128] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 153.136674][ T9128] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 153.214465][ T9137] syz-executor.3[9137] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 153.214719][ T9137] syz-executor.3[9137] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 153.316365][ T9143] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 153.327176][ T29] audit: type=1804 audit(1719085843.036:20): pid=9140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3522784831/syzkaller.yHb5hr/137/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 153.900088][ T9182] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 153.929631][ T9182] gtp0: entered promiscuous mode [ 153.945666][ T9182] gtp0: entered allmulticast mode [ 154.239981][ T9205] team0: entered promiscuous mode [ 154.252399][ T9205] team_slave_0: entered promiscuous mode [ 154.259755][ T9205] team_slave_1: entered promiscuous mode [ 154.266978][ T9205] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 154.276970][ T9205] 8021q: adding VLAN 0 to HW filter on device macvlan7 [ 154.289498][ T9205] team0: left promiscuous mode [ 154.294557][ T9205] team_slave_0: left promiscuous mode [ 154.306283][ T9205] team_slave_1: left promiscuous mode [ 154.324136][ T9205] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 154.873117][ T932] IPVS: starting estimator thread 0... [ 154.977595][ T9232] IPVS: using max 20 ests per chain, 48000 per kthread [ 155.269609][ T932] net_ratelimit: 25 callbacks suppressed [ 155.269626][ T932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.327762][ T9248] syz-executor.2[9248] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.328011][ T9248] syz-executor.2[9248] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.479408][ T9253] team0: entered promiscuous mode [ 155.528424][ T9253] team_slave_0: entered promiscuous mode [ 155.534285][ T9253] team_slave_1: entered promiscuous mode [ 155.558089][ T9253] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 155.631458][ T9253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.699595][ T9253] batadv0: entered promiscuous mode [ 155.709574][ T9253] team0: Port device batadv0 added [ 156.102565][ T9286] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 156.285225][ T9251] team0: left promiscuous mode [ 156.300599][ T9251] team_slave_0: left promiscuous mode [ 156.311891][ T9251] team_slave_1: left promiscuous mode [ 156.326320][ T9251] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 156.344513][ T9251] batadv0: left promiscuous mode [ 156.466252][ T9304] x_tables: duplicate underflow at hook 1 [ 156.479277][ T9305] syz-executor.2[9305] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 156.479504][ T9305] syz-executor.2[9305] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 156.668158][ T9310] IPVS: length: 215 != 24 [ 156.967300][ T9326] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 157.000389][ T9326] block nbd0: not configured, cannot reconfigure [ 157.032027][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 157.107058][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.180073][ T9342] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 157.341575][ T9355] syz-executor.4[9355] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.341812][ T9355] syz-executor.4[9355] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.408575][ T9355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.437077][ T9355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.452000][ T9355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.468235][ T9354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.477948][ T9354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.643100][ T9375] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 157.664982][ T9375] tipc: Enabling of bearer rejected, failed to enable media [ 157.711145][ T9380] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 157.728248][ T9380] tipc: Enabling of bearer rejected, failed to enable media [ 157.777864][ T9384] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.3'. [ 158.255963][ T9415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.264408][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.519259][ T9428] vlan0: entered allmulticast mode [ 158.540256][ T9428] bond0: entered allmulticast mode [ 158.560452][ T9428] bond_slave_0: entered allmulticast mode [ 158.578141][ T9428] bond_slave_1: entered allmulticast mode [ 158.591564][ T9428] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode [ 158.676133][ T9428] bond0: left allmulticast mode [ 158.696061][ T9428] bond_slave_0: left allmulticast mode [ 158.703169][ T9428] bond_slave_1: left allmulticast mode [ 158.723492][ T9428] mac80211_hwsim hwsim17 wlan1: left allmulticast mode [ 159.059770][ T5120] Bluetooth: hci5: link tx timeout [ 159.065359][ T5120] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 159.432126][ T9475] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 159.919574][ T9501] tipc: Enabling of bearer rejected, failed to enable media [ 160.282306][ T9525] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 160.287137][ T9526] net_ratelimit: 2049 callbacks suppressed [ 160.287154][ T9526] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.359930][ T9526] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.392704][ T9526] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.508384][ T9526] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.527224][ T9526] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.557490][ T9535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.588384][ T9524] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.695124][ T9528] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 160.714173][ T9528] netlink: 203156 bytes leftover after parsing attributes in process `syz-executor.2'. [ 161.116951][ T5125] Bluetooth: hci5: command 0x0405 tx timeout [ 161.349418][ T1795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.357917][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.460308][ T9591] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.0'. [ 162.604219][ T9612] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 162.630195][ T932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.651838][ T9612] netlink: 197276 bytes leftover after parsing attributes in process `syz-executor.2'. [ 162.724418][ T9625] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 162.857560][ T9625] nbd: socks must be embedded in a SOCK_ITEM attr [ 163.157723][ T29] audit: type=1804 audit(1719085852.876:21): pid=9643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2221689555/syzkaller.IOI1z3/268/memory.events" dev="sda1" ino=1969 res=1 errno=0 [ 163.936118][ T9682] syz-executor.3[9682] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.938355][ T9682] syz-executor.3[9682] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 164.322121][ T9699] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 164.499808][ T9715] syz-executor.4[9715] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 164.500047][ T9715] syz-executor.4[9715] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 164.777643][ T9732] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 164.824832][ T9732] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 164.837328][ T9736] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 164.909136][ T9739] vlan0: entered promiscuous mode [ 164.914219][ T9739] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 164.935805][ T9739] netdevsim netdevsim4 netdevsim1: left promiscuous mode [ 165.417628][ T9772] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 165.729012][ T9796] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 166.266926][ T9815] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 166.453038][ T9832] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 166.801192][ T9860] netlink: 165 bytes leftover after parsing attributes in process `syz-executor.0'. [ 167.110681][ T9879] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 167.133542][ T9879] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 167.334525][ T9886] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 167.623903][ T9912] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 167.663206][ T9912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.686881][ T9912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.716673][ T9912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.744544][ T9912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.779535][ T9912] bond0: (slave batadv0): Releasing backup interface [ 167.808219][ T9914] ip6gretap0: left promiscuous mode [ 167.814570][ T9914] batadv_slave_0: left promiscuous mode [ 167.918837][ T9923] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 167.946979][ T9923] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.0'. [ 168.156300][ T9943] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 168.267326][ T9957] net_ratelimit: 6 callbacks suppressed [ 168.267346][ T9957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.281496][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 168.292195][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.307625][ T9957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.318188][ T9957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.326560][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.342472][ T9957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.350981][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.361737][ T9957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.370211][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.793928][ T8527] ------------[ cut here ]------------ [ 168.799828][ T8527] WARNING: CPU: 1 PID: 8527 at net/wireless/sme.c:846 __cfg80211_connect_result+0x19ea/0x21d0 [ 168.810687][ T8527] Modules linked in: [ 168.814631][ T8527] CPU: 1 PID: 8527 Comm: kworker/u8:34 Not tainted 6.10.0-rc4-syzkaller-00869-g185d72112b95 #0 [ 168.825178][ T8527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 168.835332][ T8527] Workqueue: cfg80211 cfg80211_event_work 2024/06/22 19:50:58 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 168.841521][ T8527] RIP: 0010:__cfg80211_connect_result+0x19ea/0x21d0 [ 168.848220][ T8527] Code: a4 00 89 c3 31 ff 89 c6 e8 93 36 b3 f6 85 db 74 29 e8 5a 62 99 f6 84 c0 74 27 e8 41 32 b3 f6 e9 84 00 00 00 e8 37 32 b3 f6 90 <0f> 0b 90 4c 89 ff 4c 89 f6 e8 68 23 00 00 eb 91 e8 21 32 b3 f6 eb [ 168.868747][ T8527] RSP: 0018:ffffc9000c6e79e0 EFLAGS: 00010293 [ 168.874947][ T8527] RAX: ffffffff8ae2f309 RBX: 0000000000000000 RCX: ffff88807953bc00 [ 168.882958][ T8527] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 168.891718][ T8527] RBP: ffffc9000c6e7b00 R08: ffffffff8ae2eed9 R09: 1ffffffff25f64bd [ 168.900793][ T8527] R10: dffffc0000000000 R11: fffffbfff25f64be R12: ffff88802de65898 [ 168.908886][ T8527] R13: dffffc0000000000 R14: ffff88802de65818 R15: ffff88805da5b000 [ 168.917256][ T8527] FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 168.926295][ T8527] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 168.934301][ T8527] CR2: 0000000020000040 CR3: 000000002b914000 CR4: 00000000003506f0 [ 168.942354][ T8527] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 168.950660][ T8527] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 168.959219][ T8527] Call Trace: [ 168.962516][ T8527] [ 168.965458][ T8527] ? __warn+0x163/0x4e0 [ 168.969710][ T8527] ? __cfg80211_connect_result+0x19ea/0x21d0 [ 168.975723][ T8527] ? report_bug+0x2b3/0x500 [ 168.980304][ T8527] ? __cfg80211_connect_result+0x19ea/0x21d0 [ 168.986317][ T8527] ? handle_bug+0x3e/0x70 [ 168.991807][ T8527] ? exc_invalid_op+0x1a/0x50 [ 168.996848][ T8527] ? asm_exc_invalid_op+0x1a/0x20 [ 169.001906][ T8527] ? __cfg80211_connect_result+0x15b9/0x21d0 [ 169.007982][ T8527] ? __cfg80211_connect_result+0x19e9/0x21d0 [ 169.013985][ T8527] ? __cfg80211_connect_result+0x19ea/0x21d0 [ 169.020572][ T8527] ? __pfx___cfg80211_connect_result+0x10/0x10 [ 169.027108][ T8527] ? lockdep_hardirqs_on+0x99/0x150 [ 169.032450][ T8527] cfg80211_process_wdev_events+0x356/0x510 [ 169.038445][ T8527] cfg80211_process_rdev_events+0xac/0x110 [ 169.044278][ T8527] ? process_scheduled_works+0x945/0x1830 [ 169.050576][ T8527] cfg80211_event_work+0x2f/0x40 [ 169.055530][ T8527] process_scheduled_works+0xa2c/0x1830 [ 169.061207][ T8527] ? __pfx_process_scheduled_works+0x10/0x10 [ 169.067282][ T8527] ? assign_work+0x364/0x3d0 [ 169.071894][ T8527] worker_thread+0x86d/0xd70 [ 169.077047][ T8527] ? __kthread_parkme+0x169/0x1d0 [ 169.082099][ T8527] ? __pfx_worker_thread+0x10/0x10 [ 169.087310][ T8527] kthread+0x2f0/0x390 [ 169.091971][ T8527] ? __pfx_worker_thread+0x10/0x10 [ 169.097473][ T8527] ? __pfx_kthread+0x10/0x10 [ 169.102107][ T8527] ret_from_fork+0x4b/0x80 [ 169.107087][ T8527] ? __pfx_kthread+0x10/0x10 [ 169.111698][ T8527] ret_from_fork_asm+0x1a/0x30 [ 169.116576][ T8527] [ 169.119614][ T8527] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 169.126893][ T8527] CPU: 1 PID: 8527 Comm: kworker/u8:34 Not tainted 6.10.0-rc4-syzkaller-00869-g185d72112b95 #0 [ 169.137311][ T8527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 169.147377][ T8527] Workqueue: cfg80211 cfg80211_event_work [ 169.153120][ T8527] Call Trace: [ 169.156423][ T8527] [ 169.159451][ T8527] dump_stack_lvl+0x241/0x360 [ 169.164131][ T8527] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.169326][ T8527] ? __pfx__printk+0x10/0x10 [ 169.173917][ T8527] ? vscnprintf+0x5d/0x90 [ 169.178247][ T8527] panic+0x349/0x860 [ 169.182137][ T8527] ? __warn+0x172/0x4e0 [ 169.186286][ T8527] ? __pfx_panic+0x10/0x10 [ 169.190706][ T8527] ? ret_from_fork_asm+0x1a/0x30 [ 169.195653][ T8527] __warn+0x346/0x4e0 [ 169.199636][ T8527] ? __cfg80211_connect_result+0x19ea/0x21d0 [ 169.205706][ T8527] report_bug+0x2b3/0x500 [ 169.210027][ T8527] ? __cfg80211_connect_result+0x19ea/0x21d0 [ 169.216095][ T8527] handle_bug+0x3e/0x70 [ 169.220262][ T8527] exc_invalid_op+0x1a/0x50 [ 169.224761][ T8527] asm_exc_invalid_op+0x1a/0x20 [ 169.229615][ T8527] RIP: 0010:__cfg80211_connect_result+0x19ea/0x21d0 [ 169.236198][ T8527] Code: a4 00 89 c3 31 ff 89 c6 e8 93 36 b3 f6 85 db 74 29 e8 5a 62 99 f6 84 c0 74 27 e8 41 32 b3 f6 e9 84 00 00 00 e8 37 32 b3 f6 90 <0f> 0b 90 4c 89 ff 4c 89 f6 e8 68 23 00 00 eb 91 e8 21 32 b3 f6 eb [ 169.255795][ T8527] RSP: 0018:ffffc9000c6e79e0 EFLAGS: 00010293 [ 169.261875][ T8527] RAX: ffffffff8ae2f309 RBX: 0000000000000000 RCX: ffff88807953bc00 [ 169.269837][ T8527] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 169.277796][ T8527] RBP: ffffc9000c6e7b00 R08: ffffffff8ae2eed9 R09: 1ffffffff25f64bd [ 169.285759][ T8527] R10: dffffc0000000000 R11: fffffbfff25f64be R12: ffff88802de65898 [ 169.293723][ T8527] R13: dffffc0000000000 R14: ffff88802de65818 R15: ffff88805da5b000 [ 169.301701][ T8527] ? __cfg80211_connect_result+0x15b9/0x21d0 [ 169.307683][ T8527] ? __cfg80211_connect_result+0x19e9/0x21d0 [ 169.313675][ T8527] ? __pfx___cfg80211_connect_result+0x10/0x10 [ 169.319827][ T8527] ? lockdep_hardirqs_on+0x99/0x150 [ 169.325024][ T8527] cfg80211_process_wdev_events+0x356/0x510 [ 169.330919][ T8527] cfg80211_process_rdev_events+0xac/0x110 [ 169.336720][ T8527] ? process_scheduled_works+0x945/0x1830 [ 169.342433][ T8527] cfg80211_event_work+0x2f/0x40 [ 169.347363][ T8527] process_scheduled_works+0xa2c/0x1830 [ 169.352922][ T8527] ? __pfx_process_scheduled_works+0x10/0x10 [ 169.358898][ T8527] ? assign_work+0x364/0x3d0 [ 169.363481][ T8527] worker_thread+0x86d/0xd70 [ 169.368076][ T8527] ? __kthread_parkme+0x169/0x1d0 [ 169.373097][ T8527] ? __pfx_worker_thread+0x10/0x10 [ 169.378201][ T8527] kthread+0x2f0/0x390 [ 169.382260][ T8527] ? __pfx_worker_thread+0x10/0x10 [ 169.387360][ T8527] ? __pfx_kthread+0x10/0x10 [ 169.391943][ T8527] ret_from_fork+0x4b/0x80 [ 169.396358][ T8527] ? __pfx_kthread+0x10/0x10 [ 169.400949][ T8527] ret_from_fork_asm+0x1a/0x30 [ 169.405718][ T8527] [ 169.408950][ T8527] Kernel Offset: disabled [ 169.413337][ T8527] Rebooting in 86400 seconds..