last executing test programs: 1m43.250782501s ago: executing program 2 (id=406): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000004780)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) (async) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r0, 0x8ec73000) (async) shutdown(r0, 0x1) (async, rerun: 32) setsockopt(r0, 0x84, 0x83, &(0x7f00000002c0)="1a00000002000000", 0x8) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000008200000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x3, 0x300) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='initcall_finish\x00', r2}, 0x10) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) (async) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001a000100000000000000000002000000000000000000000008000400", @ANYRES32=0x0, @ANYBLOB="140007"], 0x38}}, 0x0) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}}, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (rerun: 64) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)={0x50, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x2}, @val={0x76, 0x6, {0x4, 0x5, 0x19, 0x3}}}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r4, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x25c, 0x15}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async, rerun: 32) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r1, &(0x7f0000000180)="696a717bd290a0a6fed3bd7a3acd61695397956bafa27c81ed90d3057867069031c92da6515d034abb9e1de1540e5c48523826c74ee7255a76", &(0x7f00000001c0)=""/240, 0x4}, 0x20) (rerun: 32) 1m33.975539943s ago: executing program 2 (id=406): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000004780)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) (async) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r0, 0x8ec73000) (async) shutdown(r0, 0x1) (async, rerun: 32) setsockopt(r0, 0x84, 0x83, &(0x7f00000002c0)="1a00000002000000", 0x8) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000008200000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x3, 0x300) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='initcall_finish\x00', r2}, 0x10) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) (async) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001a000100000000000000000002000000000000000000000008000400", @ANYRES32=0x0, @ANYBLOB="140007"], 0x38}}, 0x0) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}}, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (rerun: 64) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)={0x50, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x2}, @val={0x76, 0x6, {0x4, 0x5, 0x19, 0x3}}}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r4, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x25c, 0x15}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async, rerun: 32) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r1, &(0x7f0000000180)="696a717bd290a0a6fed3bd7a3acd61695397956bafa27c81ed90d3057867069031c92da6515d034abb9e1de1540e5c48523826c74ee7255a76", &(0x7f00000001c0)=""/240, 0x4}, 0x20) (rerun: 32) 1m24.411621545s ago: executing program 2 (id=406): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000004780)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) (async) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r0, 0x8ec73000) (async) shutdown(r0, 0x1) (async, rerun: 32) setsockopt(r0, 0x84, 0x83, &(0x7f00000002c0)="1a00000002000000", 0x8) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000008200000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x3, 0x300) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='initcall_finish\x00', r2}, 0x10) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) (async) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001a000100000000000000000002000000000000000000000008000400", @ANYRES32=0x0, @ANYBLOB="140007"], 0x38}}, 0x0) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}}, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (rerun: 64) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)={0x50, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x2}, @val={0x76, 0x6, {0x4, 0x5, 0x19, 0x3}}}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r4, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x25c, 0x15}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async, rerun: 32) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r1, &(0x7f0000000180)="696a717bd290a0a6fed3bd7a3acd61695397956bafa27c81ed90d3057867069031c92da6515d034abb9e1de1540e5c48523826c74ee7255a76", &(0x7f00000001c0)=""/240, 0x4}, 0x20) (rerun: 32) 54.382485379s ago: executing program 1 (id=1077): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xffffffff}) ioctl(r0, 0x8b23, &(0x7f0000000040)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x5}}}}]}, 0x40}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="d4000000240001032abd7000000000000100000008008c"], 0xd4}}, 0x4080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x50, 0x2, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @dev}}}]}]}, 0x50}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x23, 0x3, 0x1, 0x0, 0xffffffffffffffff, 0x37, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r7, &(0x7f0000000100), 0x0}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x7, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r8, &(0x7f00000002c0), &(0x7f0000000580)=@tcp}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r8, &(0x7f0000000080)="a3", &(0x7f0000000180)=@tcp6, 0x2}, 0x20) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x16, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2ef}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@ldst={0x2, 0x0, 0x6, 0x0, 0x8, 0x100, 0x4}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @map_val={0x18, 0x7, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x2}, @alu={0x7, 0x1, 0xc, 0x2, 0x5, 0x100, 0x1}, @alu={0x4, 0x1, 0x1, 0xb, 0x0, 0x40, 0x10}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='syzkaller\x00', 0x40, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x0, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000600)={0x3, 0xd, 0x81, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0xffffffffffffffff], 0x0, 0x10, 0x2559, @void, @value}, 0x94) getsockopt$bt_hci(r6, 0x84, 0x75, &(0x7f0000001f00)=""/4062, &(0x7f00000004c0)=0xfde) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0xffffff2f, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f00000003c0)=0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000400)={0x6, 0x3, 0x8000, 0xfff, 0x7c8, 0x9, 0x8, 0xa1d1, r10}, &(0x7f0000000440)=0x20) socket$inet_icmp_raw(0x2, 0x3, 0x1) 46.941324422s ago: executing program 1 (id=1077): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xffffffff}) ioctl(r0, 0x8b23, &(0x7f0000000040)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x5}}}}]}, 0x40}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="d4000000240001032abd7000000000000100000008008c"], 0xd4}}, 0x4080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x50, 0x2, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @dev}}}]}]}, 0x50}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x23, 0x3, 0x1, 0x0, 0xffffffffffffffff, 0x37, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r7, &(0x7f0000000100), 0x0}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x7, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r8, &(0x7f00000002c0), &(0x7f0000000580)=@tcp}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r8, &(0x7f0000000080)="a3", &(0x7f0000000180)=@tcp6, 0x2}, 0x20) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x16, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2ef}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@ldst={0x2, 0x0, 0x6, 0x0, 0x8, 0x100, 0x4}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @map_val={0x18, 0x7, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x2}, @alu={0x7, 0x1, 0xc, 0x2, 0x5, 0x100, 0x1}, @alu={0x4, 0x1, 0x1, 0xb, 0x0, 0x40, 0x10}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='syzkaller\x00', 0x40, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x0, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000600)={0x3, 0xd, 0x81, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0xffffffffffffffff], 0x0, 0x10, 0x2559, @void, @value}, 0x94) getsockopt$bt_hci(r6, 0x84, 0x75, &(0x7f0000001f00)=""/4062, &(0x7f00000004c0)=0xfde) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0xffffff2f, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f00000003c0)=0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000400)={0x6, 0x3, 0x8000, 0xfff, 0x7c8, 0x9, 0x8, 0xa1d1, r10}, &(0x7f0000000440)=0x20) socket$inet_icmp_raw(0x2, 0x3, 0x1) 38.076802273s ago: executing program 1 (id=1077): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xffffffff}) ioctl(r0, 0x8b23, &(0x7f0000000040)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x5}}}}]}, 0x40}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="d4000000240001032abd7000000000000100000008008c"], 0xd4}}, 0x4080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x50, 0x2, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @dev}}}]}]}, 0x50}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x23, 0x3, 0x1, 0x0, 0xffffffffffffffff, 0x37, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r7, &(0x7f0000000100), 0x0}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x7, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r8, &(0x7f00000002c0), &(0x7f0000000580)=@tcp}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r8, &(0x7f0000000080)="a3", &(0x7f0000000180)=@tcp6, 0x2}, 0x20) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x16, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2ef}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@ldst={0x2, 0x0, 0x6, 0x0, 0x8, 0x100, 0x4}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @map_val={0x18, 0x7, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x2}, @alu={0x7, 0x1, 0xc, 0x2, 0x5, 0x100, 0x1}, @alu={0x4, 0x1, 0x1, 0xb, 0x0, 0x40, 0x10}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='syzkaller\x00', 0x40, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x0, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000600)={0x3, 0xd, 0x81, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0xffffffffffffffff], 0x0, 0x10, 0x2559, @void, @value}, 0x94) getsockopt$bt_hci(r6, 0x84, 0x75, &(0x7f0000001f00)=""/4062, &(0x7f00000004c0)=0xfde) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0xffffff2f, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f00000003c0)=0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000400)={0x6, 0x3, 0x8000, 0xfff, 0x7c8, 0x9, 0x8, 0xa1d1, r10}, &(0x7f0000000440)=0x20) socket$inet_icmp_raw(0x2, 0x3, 0x1) 34.530575217s ago: executing program 2 (id=406): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000004780)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) (async) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r0, 0x8ec73000) (async) shutdown(r0, 0x1) (async, rerun: 32) setsockopt(r0, 0x84, 0x83, &(0x7f00000002c0)="1a00000002000000", 0x8) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000008200000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x3, 0x300) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='initcall_finish\x00', r2}, 0x10) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) (async) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001a000100000000000000000002000000000000000000000008000400", @ANYRES32=0x0, @ANYBLOB="140007"], 0x38}}, 0x0) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}}, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (rerun: 64) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)={0x50, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x2}, @val={0x76, 0x6, {0x4, 0x5, 0x19, 0x3}}}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r4, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x25c, 0x15}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async, rerun: 32) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r1, &(0x7f0000000180)="696a717bd290a0a6fed3bd7a3acd61695397956bafa27c81ed90d3057867069031c92da6515d034abb9e1de1540e5c48523826c74ee7255a76", &(0x7f00000001c0)=""/240, 0x4}, 0x20) (rerun: 32) 24.582123843s ago: executing program 1 (id=1077): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xffffffff}) ioctl(r0, 0x8b23, &(0x7f0000000040)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x5}}}}]}, 0x40}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="d4000000240001032abd7000000000000100000008008c"], 0xd4}}, 0x4080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x50, 0x2, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @dev}}}]}]}, 0x50}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x23, 0x3, 0x1, 0x0, 0xffffffffffffffff, 0x37, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r7, &(0x7f0000000100), 0x0}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x7, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r8, &(0x7f00000002c0), &(0x7f0000000580)=@tcp}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r8, &(0x7f0000000080)="a3", &(0x7f0000000180)=@tcp6, 0x2}, 0x20) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x16, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2ef}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@ldst={0x2, 0x0, 0x6, 0x0, 0x8, 0x100, 0x4}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @map_val={0x18, 0x7, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x2}, @alu={0x7, 0x1, 0xc, 0x2, 0x5, 0x100, 0x1}, @alu={0x4, 0x1, 0x1, 0xb, 0x0, 0x40, 0x10}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='syzkaller\x00', 0x40, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x0, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000600)={0x3, 0xd, 0x81, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0xffffffffffffffff], 0x0, 0x10, 0x2559, @void, @value}, 0x94) getsockopt$bt_hci(r6, 0x84, 0x75, &(0x7f0000001f00)=""/4062, &(0x7f00000004c0)=0xfde) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0xffffff2f, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f00000003c0)=0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000400)={0x6, 0x3, 0x8000, 0xfff, 0x7c8, 0x9, 0x8, 0xa1d1, r10}, &(0x7f0000000440)=0x20) socket$inet_icmp_raw(0x2, 0x3, 0x1) 21.34141772s ago: executing program 2 (id=406): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000004780)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) (async) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r0, 0x8ec73000) (async) shutdown(r0, 0x1) (async, rerun: 32) setsockopt(r0, 0x84, 0x83, &(0x7f00000002c0)="1a00000002000000", 0x8) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000008200000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x3, 0x300) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='initcall_finish\x00', r2}, 0x10) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) (async) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001a000100000000000000000002000000000000000000000008000400", @ANYRES32=0x0, @ANYBLOB="140007"], 0x38}}, 0x0) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}}, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (rerun: 64) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)={0x50, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x2}, @val={0x76, 0x6, {0x4, 0x5, 0x19, 0x3}}}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r4, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x25c, 0x15}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async, rerun: 32) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r1, &(0x7f0000000180)="696a717bd290a0a6fed3bd7a3acd61695397956bafa27c81ed90d3057867069031c92da6515d034abb9e1de1540e5c48523826c74ee7255a76", &(0x7f00000001c0)=""/240, 0x4}, 0x20) (rerun: 32) 11.170656965s ago: executing program 1 (id=1077): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xffffffff}) ioctl(r0, 0x8b23, &(0x7f0000000040)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x5}}}}]}, 0x40}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="d4000000240001032abd7000000000000100000008008c"], 0xd4}}, 0x4080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x50, 0x2, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @dev}}}]}]}, 0x50}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x23, 0x3, 0x1, 0x0, 0xffffffffffffffff, 0x37, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r7, &(0x7f0000000100), 0x0}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x7, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r8, &(0x7f00000002c0), &(0x7f0000000580)=@tcp}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r8, &(0x7f0000000080)="a3", &(0x7f0000000180)=@tcp6, 0x2}, 0x20) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x16, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2ef}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@ldst={0x2, 0x0, 0x6, 0x0, 0x8, 0x100, 0x4}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @map_val={0x18, 0x7, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x2}, @alu={0x7, 0x1, 0xc, 0x2, 0x5, 0x100, 0x1}, @alu={0x4, 0x1, 0x1, 0xb, 0x0, 0x40, 0x10}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='syzkaller\x00', 0x40, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x0, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000600)={0x3, 0xd, 0x81, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0xffffffffffffffff], 0x0, 0x10, 0x2559, @void, @value}, 0x94) getsockopt$bt_hci(r6, 0x84, 0x75, &(0x7f0000001f00)=""/4062, &(0x7f00000004c0)=0xfde) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0xffffff2f, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f00000003c0)=0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000400)={0x6, 0x3, 0x8000, 0xfff, 0x7c8, 0x9, 0x8, 0xa1d1, r10}, &(0x7f0000000440)=0x20) socket$inet_icmp_raw(0x2, 0x3, 0x1) 10.250549738s ago: executing program 2 (id=406): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000004780)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) (async) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r0, 0x8ec73000) (async) shutdown(r0, 0x1) (async, rerun: 32) setsockopt(r0, 0x84, 0x83, &(0x7f00000002c0)="1a00000002000000", 0x8) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000008200000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x3, 0x300) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='initcall_finish\x00', r2}, 0x10) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) (async) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001a000100000000000000000002000000000000000000000008000400", @ANYRES32=0x0, @ANYBLOB="140007"], 0x38}}, 0x0) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}}, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (rerun: 64) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)={0x50, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x2}, @val={0x76, 0x6, {0x4, 0x5, 0x19, 0x3}}}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r4, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x25c, 0x15}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async, rerun: 32) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r1, &(0x7f0000000180)="696a717bd290a0a6fed3bd7a3acd61695397956bafa27c81ed90d3057867069031c92da6515d034abb9e1de1540e5c48523826c74ee7255a76", &(0x7f00000001c0)=""/240, 0x4}, 0x20) (rerun: 32) 2.486192206s ago: executing program 0 (id=1546): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = gettid() sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xff05, 0x70bd28, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x42c0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r2}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000feec4a00000002", @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) 2.037675568s ago: executing program 0 (id=1549): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x4, 0x7, 0x2281, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.857399646s ago: executing program 0 (id=1550): r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@rc={0x1f, @fixed}, &(0x7f0000000080)=0x80, 0x80000) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000000c0)={0xb, 0x9, 0x2, 0x2, 0x62c52232, 0xfff, 0x8001, 0x8, 0x0}, &(0x7f0000000100)=0x20) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000140)={r1, @in={{0x2, 0x4e22, @private=0xa010101}}}, 0x84) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000280)={&(0x7f0000000200)=""/109, 0x6d, 0x3750000, 0x4ab}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x70, r2, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x3, 0x22}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'ip6tnl0\x00'}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'macvlan1\x00'}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_vlan\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040}, 0x4044054) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000440)={r1, 0xf4, "88decbdf73530af6ff4a5b63700a5557874442dba5e7a05276d782397fc185c513acc85ff326077ea221f5f55cb9385d16a9034f4fde0e4c44dd9127ed6264e018b3515f356f38c8d0327a5f91cb0995f40d51d540a123051c66790f5759e4096442cbd08393e099eacc9ca211a53cfc7555bd2362cb9c6e1074cf5d0379f722e51f49cbdff73d41e22543d6d883b600d24e6751c5c67a336812d3fdb46810fd46dd29bb82af5f3ba811ccf2ad5ccaecdf8dfe24a328713c6404383f91a43c3c7e715852cf59e71227498c39ce3fa429446e67a39d62ecfc9a4d765efa7a38505d96c6a902d8c18e3e02ec63e156f1790d0f7323"}, &(0x7f0000000540)=0xfc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={r3, @in={{0x2, 0x4e23, @loopback}}, 0x1, 0x0, 0xfc8, 0x8, 0x3}, &(0x7f0000000640)=0x98) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xc8, r2, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0x23, 0x34, @random="31ae558220a3dc77676125af6aa3fdbbaf2191099b5a2f65eb933f77f23719"}, @NL80211_ATTR_IE={0x5a, 0x2a, [@cf={0x4, 0x6, {0x81, 0x9, 0x73, 0x6}}, @perr={0x84, 0xf, {0x3, 0x1, [{{}, @device_a, 0x1, @void, 0x27}]}}, @preq={0x82, 0x3b, {{0x1}, 0x5, 0x81, 0x7c, @device_a, 0xfa, @void, 0x2, 0x908, 0x3, [{{0x1, 0x0, 0x1}, @device_a, 0x5}, {{0x1}, @broadcast, 0x3}, {{0x1, 0x0, 0x1}}]}}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) sendmsg$nl_route_sched(r0, &(0x7f0000003500)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000034c0)={&(0x7f0000000980)=@delchain={0x2b30, 0x65, 0x300, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x8, 0xfff1}, {0x6, 0x1}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x2ae0, 0x2, [@TCA_CGROUP_POLICE={0x85c, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x400, 0x10000000, 0x1, 0x8000, 0x4, {0x2, 0x1, 0xf0c3, 0x8, 0x0, 0x74c}, {0x1, 0x0, 0x4, 0x7, 0x9, 0x9}, 0xffffff00, 0x5, 0x1}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfff}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffe01, 0xb3, 0xe1c1, 0xec56, 0xfff, 0x7, 0xb, 0xfffffc00, 0x8, 0x5, 0x0, 0x9, 0x7f, 0x5c27, 0x3ff, 0x9, 0x3, 0x63, 0x7, 0x4, 0x4, 0x7, 0x1ff, 0x5, 0x0, 0x1, 0xa7a, 0x409c3f08, 0xfffff937, 0xe, 0x93e, 0xef9, 0x4, 0x21, 0x1, 0x4, 0x4f, 0x6, 0x80, 0x8, 0x5, 0x4, 0x4000000, 0x270, 0x6, 0x1ff, 0x5, 0x53dc, 0xffff8000, 0x0, 0x0, 0x0, 0x32d, 0x3, 0x80000000, 0xc7, 0x5, 0x9, 0x4, 0x92, 0x7ac2, 0x3, 0xfffffffe, 0xa45e, 0x9, 0xfffffffb, 0xfffffffe, 0xffffffff, 0x9c, 0xb, 0x1, 0x0, 0x0, 0xfffffff9, 0x1, 0x100, 0x3, 0x3, 0xc7, 0x0, 0x6, 0x7, 0xb0f9, 0x6, 0x2, 0x401, 0x8, 0xfffffff9, 0x8, 0x9, 0x5, 0x661, 0xd747, 0x81cb, 0x9, 0x3, 0x4df7, 0x1, 0x3, 0x4, 0x4, 0x6, 0x4, 0x9, 0x8, 0x0, 0x4, 0x8, 0xffffffff, 0x5, 0x3, 0xf, 0xab, 0x3, 0x1a1e, 0x800, 0xef, 0x5, 0x8001, 0x9, 0x6, 0xffff, 0x8, 0x3, 0x6, 0x4, 0x5, 0xc, 0x4, 0x7, 0x8, 0x6, 0x3ff, 0x0, 0x70d4, 0xfffffff9, 0x1, 0x5, 0x4, 0x6, 0x42d1, 0x34b, 0x2d800000, 0x3, 0x9, 0x9, 0x8, 0x1000, 0x8, 0x81, 0x7, 0x9, 0xfffffffa, 0x35f0, 0xd2, 0x4, 0x5, 0xb8, 0x8, 0x98f, 0x6, 0xffffffff, 0x1ff, 0xbb, 0x6, 0x3, 0x9, 0x7, 0x0, 0x5, 0xffff, 0x28000, 0xe6, 0x3, 0x80000000, 0x8000, 0x3, 0x5, 0x7, 0x5, 0x1, 0x4, 0x3e9a6d9c, 0x40000, 0x5, 0xa7, 0x7, 0x9, 0x4, 0x80000000, 0xff, 0x8, 0xa, 0x224, 0x1, 0x2e, 0x8c, 0x7, 0x4, 0x4, 0x3ff, 0x9, 0xffffffff, 0x843, 0x1000, 0x401, 0x8, 0x2, 0x9, 0x40, 0xfffffff7, 0x8980, 0x2, 0x9, 0x7, 0x9, 0xffffffff, 0x6, 0x7fffffff, 0xa, 0x7, 0x8001, 0x7, 0x2, 0x80000000, 0x0, 0x9, 0x9, 0x9, 0x7, 0x7, 0x6e, 0x2, 0x6935c528, 0x5, 0x3, 0x2, 0x1, 0x9, 0xa, 0x8001, 0x7ff, 0x10, 0x1, 0x7, 0xbc0, 0xa, 0x4, 0x9, 0x2, 0x1, 0x39, 0xffff0000, 0x6, 0xac2, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0xf, 0x2, 0x7, 0xff, 0xfffffffd, 0xc, 0xf40, 0x2, 0x0, 0x5, 0x80000001, 0x3, 0x0, 0x5, 0x9, 0x3, 0x0, 0x8, 0x1, 0x0, 0x3, 0x200, 0xf5, 0x1, 0x71c, 0x5, 0x7fff, 0x5, 0x9d5, 0x9, 0x2, 0x1ad252c0, 0x3, 0x6, 0x6, 0x3, 0x3, 0x3, 0x8, 0x3, 0x81, 0x2, 0x0, 0x7, 0x7, 0xfffffeff, 0x5, 0x1, 0x7fff, 0x8, 0x0, 0x1, 0x1, 0x6, 0x8, 0x0, 0x0, 0xfffffffb, 0x101, 0x4, 0x81, 0x80000001, 0x82f, 0x3, 0x8, 0x7, 0xbc52, 0x7, 0x8, 0x0, 0xfffffff2, 0x7, 0x4, 0x3, 0xffffac6e, 0x1000, 0x6e7, 0x2, 0x7fff, 0x9282, 0x7, 0x7fff, 0x6, 0x4, 0x4, 0x0, 0x82, 0x7, 0x1, 0x8, 0xffffffff, 0x6a5, 0x0, 0x8, 0x6, 0x2, 0x6, 0x3, 0x101, 0x0, 0xf, 0x1, 0xfffff17d, 0x400, 0x9c, 0x7, 0x3ff, 0xf, 0x6, 0xfffffffa, 0xfe4, 0x6, 0xf, 0x99d, 0x401, 0x0, 0x8, 0x87, 0x9, 0x200, 0x6, 0x2, 0x3ff, 0xf3, 0x8ba, 0x400, 0x8, 0x6, 0x0, 0x5, 0x2f8, 0xfffffff6, 0x0, 0x1000, 0xffffffff, 0x10001, 0x9d, 0xffff2a8b, 0x2, 0x5, 0xa, 0x7, 0x16, 0x3, 0x7, 0x4, 0x4c4e0000, 0x4e07, 0x1, 0x10001, 0xffffffff, 0x3c, 0xffff, 0x4, 0x200, 0xffffffff, 0x1, 0x5, 0x5, 0x7, 0xfffffff5, 0x4, 0x2, 0x0, 0x2, 0x80, 0x7fff, 0x7fff, 0xb, 0x81, 0x7, 0x2, 0x68b, 0x2, 0x1000000, 0x4, 0xa, 0x8000, 0x4d9, 0xfffffffe, 0x6, 0x0, 0x6, 0x4, 0x401, 0x87, 0x1, 0x1, 0x7, 0x1, 0xb746, 0xfffff608, 0x5, 0x80, 0x1, 0x2, 0x1, 0xfffffffa, 0x2074, 0xc508, 0x4bc6, 0x1, 0x80000001, 0x4, 0x4, 0x2, 0x9, 0x9, 0x1000, 0x9a, 0x7, 0x9, 0x7, 0x9, 0x6, 0x9, 0xfffff000, 0x3, 0x73, 0x8, 0x10001, 0x4, 0x6b4a, 0x101, 0x7, 0x0, 0x6, 0x2, 0xa1, 0x2, 0x8d, 0x1, 0xf5e, 0xff, 0xece, 0xb, 0x80, 0x4, 0x5, 0x8, 0x7ff, 0xaf27, 0x3, 0x0, 0x9, 0x101, 0x4, 0xb2, 0xfffffbff, 0x5, 0x8001, 0x0, 0x80000001, 0x0, 0x7]}]}, @TCA_CGROUP_ACT={0x2280, 0x1, [@m_bpf={0x78, 0x19, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x14, 0x4, [{0x6, 0x1, 0x8, 0x2}, {0xd, 0x8, 0xf8, 0xffffe2cf}]}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x2d, 0x6, "3123d3433433def23be26bf3b5e648a0bdc8cb79bc95ece8cad8e5d62ea3e63fe412228d154cba9ea8"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x1dac, 0x1, 0x0, 0x0, {{0xb}, {0x1cbc, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x8001, 0xc, 0x0, 0x9, 0x2, 0x9, 0x3, 0x1, 0x25d4, 0x7fffffff, 0x7, 0x63a0a074, 0x7, 0xfffffff2, 0x2400, 0x16800, 0x8001, 0x4, 0x7, 0x5, 0x3, 0xfffffffb, 0x40, 0xbc6, 0x10001, 0x8, 0x7, 0xa, 0x40, 0x40, 0xfff, 0x401, 0x1, 0x5, 0xf5, 0xb, 0x14000000, 0x2, 0x5, 0x1fe, 0x8, 0x80, 0x9, 0xd, 0x2008000, 0x800, 0xfffffff8, 0x9, 0x3, 0xff, 0xfffffffa, 0x2, 0x2, 0xa, 0x4, 0xb5, 0x247cb178, 0xa, 0x4, 0xfc, 0x0, 0x80000001, 0x1, 0x7f, 0x0, 0x6, 0x3, 0x4, 0x4, 0x2, 0x80, 0x22d3, 0x7, 0x8, 0x8, 0x5e77, 0x7, 0xd, 0x7f, 0x4, 0x0, 0x108, 0x80000000, 0x6, 0xef, 0x2, 0x6, 0x6, 0xfffffffa, 0x7, 0x1, 0x0, 0x8, 0x0, 0x8, 0x4, 0x8001, 0x4, 0x10000, 0x3, 0x0, 0x10000, 0xea, 0x2a71, 0x9, 0xfffffff7, 0xffff, 0xff, 0x7, 0x4, 0x9, 0xc, 0x8, 0x8, 0x3, 0x3, 0x6, 0x9, 0x4, 0x7, 0x24, 0x401, 0x7, 0x0, 0x160fc0, 0x0, 0x1, 0x37596ab5, 0xb5c5, 0x735a6fae, 0x5aae, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x9, 0x9, 0xffff, 0x4, 0xa782, 0x3, 0x8, 0x1, 0xffffffff, 0x3, 0x4, 0x5, 0x5, 0x29, 0x2, 0xf, 0x400, 0x1, 0x8, 0x8, 0x9, 0x0, 0x2, 0x0, 0x5, 0x2, 0x3, 0x6, 0x10001, 0x2, 0x1, 0x8, 0x8, 0x3, 0xfffffff7, 0x80000000, 0x4, 0x2e, 0x9, 0x8, 0x0, 0x2, 0x4, 0x4, 0x70, 0x9, 0x4, 0xfffffff7, 0xa3, 0xb, 0x0, 0x0, 0x3c7, 0x9, 0x8, 0x1, 0xfffffff2, 0x4, 0x800, 0xd, 0x800, 0x0, 0x226, 0x7f, 0x3, 0xfffffff9, 0x3, 0x3, 0x5, 0x689, 0x10000, 0x5, 0x2, 0xffffff7f, 0x6, 0x8, 0x8, 0x8, 0x1, 0x10001, 0x0, 0x1, 0x6f4, 0x1, 0x40, 0x81, 0x2, 0x6, 0x2, 0x8, 0xd3b, 0x5, 0x0, 0xada, 0x0, 0x9, 0x1, 0x1, 0x4a, 0x8, 0x9, 0x10001, 0x0, 0x9, 0x6, 0x8, 0x40, 0x4, 0xfe, 0x100, 0x95, 0x100, 0x3, 0x1, 0x2, 0x6, 0x1ff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x9, 0x8, 0x0, 0x7, 0x7, 0x4, 0x2, 0xed, 0x3, 0x3, 0xd1, 0x10, 0x10001, 0x5, 0xa7c4, 0x7, 0x3, 0x8, 0x80000000, 0x8, 0x8a60, 0x4, 0x4, 0xfffffff9, 0xeb, 0x5, 0x9, 0xff, 0x10, 0x9, 0x6, 0x9, 0x4, 0x0, 0x2, 0x8, 0x2, 0x43af, 0x1000, 0x6d, 0x7375, 0x8, 0xd26b2542, 0x8, 0x1, 0x0, 0x4, 0x7, 0xfffffc79, 0x10, 0xbfe, 0x7, 0x7, 0x9, 0xfffffff7, 0x2, 0xffffffff, 0x7f, 0x8, 0x20f8, 0x6, 0xa31, 0x0, 0x1, 0x3e37886f, 0x5, 0x10, 0x8, 0x12c, 0x200, 0x3, 0x1, 0xd9, 0x5, 0xf0, 0x9, 0x3ff, 0x5, 0xfffffff9, 0x5, 0x1, 0x129, 0x0, 0x10, 0x6, 0x8, 0x7, 0x9, 0x9, 0x6, 0x4, 0x1, 0x85, 0xc3, 0x7fffffff, 0xfffffff9, 0x1, 0x1, 0x8, 0x2, 0x7, 0x8, 0x6, 0x0, 0xb1d, 0xff, 0xe, 0x2, 0x0, 0x1f, 0x6, 0x1eaf04a1, 0x8, 0xa11, 0x3, 0x0, 0x6, 0x2, 0xa2, 0x0, 0x8000, 0x0, 0x3, 0x7fffffff, 0x7ff, 0x7fffffff, 0x0, 0x5, 0x9, 0x7, 0x4, 0x3, 0x3, 0x3, 0x8, 0x4, 0x1, 0xfe55, 0xfff, 0x0, 0x37, 0x1, 0xaf6, 0x2, 0x2, 0x3ff, 0x2, 0x42b5, 0x7712d2d7, 0x80000000, 0x6, 0x2, 0x38, 0x5, 0x80, 0xc1, 0xa6a, 0x9, 0x2, 0xfffffffc, 0x2, 0x400, 0x2, 0x4, 0x1, 0x4, 0x7, 0x5, 0x5, 0x4, 0xff, 0x5, 0x9, 0xffff, 0x8e4, 0x3, 0x1ff, 0x800, 0x2, 0x1, 0x5, 0x6, 0xfffffff1, 0x101, 0xa, 0x3, 0x7, 0x4a, 0x6, 0x2, 0x3, 0x4, 0x81, 0x6, 0xd, 0x9, 0x9c, 0x4, 0x1, 0xdfb7, 0x4, 0x8, 0x6, 0xb05c, 0xfffffeff, 0xfe, 0x9, 0x10000, 0x4, 0x7fffffff, 0x9, 0x7, 0x2, 0x7, 0x8, 0x5, 0x0, 0x9, 0x6, 0x3, 0x0, 0x6, 0x4, 0x6b1, 0xfffffffc, 0x94c0, 0x7, 0x5, 0x9, 0x3, 0x7, 0x7ff, 0xcd, 0x4, 0x81, 0x403, 0x401, 0xaf, 0x9, 0x13, 0x1, 0x7, 0x7fff, 0x3, 0x4, 0x8, 0x3, 0x92c2, 0x9, 0x6, 0x6, 0x6, 0x1, 0x0, 0x1]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10000}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x80000000, 0x20000000, 0x6, 0x100, 0x401, {0xc, 0x1, 0x6, 0x100, 0xe}, {0x3, 0x1, 0x4, 0x9, 0x4, 0x7}, 0x5, 0x7d2e, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffff7, 0x5, 0x81, 0x8000, 0x8, {0x5, 0x2, 0x1, 0x3, 0x800}, {0x80, 0x2, 0x7, 0x8, 0x5, 0x1}, 0xc, 0x80000001, 0x40}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x4, 0x3, 0x80000000, 0x7f, 0x2, 0x5, 0x168, 0x8000, 0x8f15, 0x7fff, 0xe6, 0x6, 0x10001, 0xe, 0x3, 0x7b1005d6, 0x0, 0x80000001, 0xec39, 0x4, 0x761b, 0x80000000, 0x2, 0x2, 0xfffffff0, 0x8, 0x0, 0x81, 0x2, 0x3, 0x2, 0x6, 0xfffffe00, 0x200, 0x7, 0x7, 0x2, 0x1, 0xfffffffd, 0xff, 0xb52, 0xfffffffc, 0x1, 0x0, 0x800, 0x8, 0x80, 0x3a3, 0x0, 0x6, 0x800, 0x9, 0x7fff, 0x0, 0x7, 0x2e34, 0x0, 0x80000001, 0x7, 0x9, 0x5, 0x40, 0x3, 0x1, 0x464, 0x10, 0x3, 0x5, 0x1, 0xf, 0x47fd, 0x5c91ea1e, 0x3ff, 0x4, 0x4, 0x5, 0xa, 0x8, 0x1ff, 0x6, 0xf, 0x1, 0xfffffffe, 0x3, 0x80000001, 0x4, 0x3, 0xfb6, 0x80000000, 0xd, 0x6, 0x10000, 0x5a3a, 0x4, 0xc, 0x6, 0x9, 0x43, 0xfc3, 0x3, 0x8000, 0xe, 0x80, 0x9b4, 0x800, 0x7fff, 0x1, 0x10000, 0xfffffffa, 0x7f, 0xfffffffa, 0x3, 0x4, 0x2, 0x5, 0x2, 0x20c, 0x10000, 0x0, 0x2, 0x8, 0x7ff, 0x4, 0x5, 0xfffff001, 0x2, 0x2, 0x2, 0x6f, 0x2, 0xf9b0, 0xf9, 0x80000001, 0x1, 0xfffffff5, 0x7f, 0x80000001, 0x2, 0x2, 0x20000, 0x400, 0x200, 0x2afc7277, 0x800, 0x1, 0x4, 0x5, 0x100, 0x4, 0x7, 0x39, 0x7fffffff, 0x80000000, 0x20814cc9, 0x6, 0xbdd2, 0x8000, 0xfffffff8, 0x7, 0x2, 0xff, 0x10, 0x2, 0xd, 0x9, 0xfffffffc, 0x5, 0x2, 0x9, 0x2, 0xad8, 0xee, 0x0, 0x100, 0x9, 0x5, 0x917, 0x3, 0x0, 0x8, 0x6, 0x3822, 0x2, 0xfffffc01, 0x5fdc1659, 0x0, 0x4, 0xffffffd8, 0x413, 0x6, 0xfffffff8, 0xe6, 0x2, 0x8, 0x0, 0x9, 0x5, 0xfffffffd, 0x7, 0x5, 0x100, 0x7ff, 0x5, 0x2, 0x7, 0x5, 0x2, 0x3, 0x56, 0x50c5, 0x1, 0x0, 0x8, 0xcbe1, 0x5, 0x6, 0x8001, 0x2, 0x6, 0x9, 0x67, 0xea2, 0x8000, 0x12d1, 0x7, 0xd75b, 0x8001, 0x4d, 0x5225, 0x51, 0x7, 0xffffff7f, 0xfff, 0x7, 0x7, 0x4, 0x6, 0x5, 0x7, 0x6, 0x6, 0x4b, 0x3, 0x1f2, 0x10, 0x3a22, 0x7, 0xb, 0x5, 0x8, 0xa, 0x8, 0x80, 0x4, 0x6]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffff0000, 0x10001, 0x7, 0x2, 0x2, 0xa3, 0x8, 0x4, 0x3, 0x28a, 0x90, 0x5, 0x4, 0x8000, 0x3, 0x4, 0x1, 0x80, 0x8, 0x81, 0x370, 0x0, 0xfffffffa, 0xf538, 0x9, 0xfffffff7, 0xbd90, 0x6, 0x401, 0xbce, 0x3b, 0x5, 0x0, 0xd, 0x200, 0xd, 0x3ff, 0x4ab2c123, 0x1800000, 0x6, 0x2, 0x1417, 0x6, 0x6, 0x8, 0x6, 0xe4, 0x8, 0xaed, 0x2, 0x401, 0x400, 0xd1, 0x3, 0x74, 0x40, 0x2, 0x9, 0x7ff, 0xd4b5, 0x0, 0x3, 0x2, 0x0, 0xfffffb84, 0xd08f, 0x0, 0x0, 0x6, 0x4, 0x0, 0x9, 0x3, 0x6, 0x6, 0xb74, 0xff, 0x3, 0x6, 0x2, 0x0, 0x3, 0x6, 0x8, 0xf77, 0x7, 0x0, 0xffffffff, 0x8, 0x1, 0x2, 0x3, 0x80000000, 0x6, 0xd, 0x1, 0x0, 0x1, 0xd1, 0x0, 0x3, 0x8, 0x1, 0x5, 0x6, 0x4, 0x4a60, 0x7, 0x1, 0x9, 0xa, 0x1, 0x1ff, 0xadea, 0x1, 0x6, 0x8, 0x6605, 0x8, 0x2, 0x9dad, 0x400, 0x0, 0x4, 0xb17d, 0x199f, 0x8, 0x6, 0x5, 0xff, 0x6, 0x4, 0x5, 0x5, 0x0, 0x7, 0x173d, 0x7fff, 0x2, 0x7, 0x7ff, 0x5, 0xca4, 0x0, 0x5, 0x5, 0x3, 0x8, 0x70, 0x0, 0x1000, 0x1, 0x1, 0x7fff, 0x7, 0x7ff, 0x0, 0x12, 0x3, 0x3, 0xfff, 0x4, 0x1, 0x8, 0x3, 0x6, 0x81, 0x6000000, 0x6, 0x1, 0x9, 0x7f, 0x8, 0x87, 0x2, 0x80000000, 0x80000001, 0x9, 0x5, 0x9, 0x1ff, 0xe5, 0x24, 0x7, 0x4, 0x6, 0x9, 0x81, 0x5, 0x80000000, 0xfffffffd, 0x0, 0x0, 0xffffffff, 0x1c0000, 0x9, 0x8001, 0x1, 0x1, 0x1902bbf1, 0x1ff, 0x200, 0x682f, 0x5, 0xffffff80, 0x5, 0xffffffff, 0x3, 0x80000000, 0x7, 0x3, 0x2605, 0x9, 0xecb4, 0x8001, 0x5, 0x3, 0xfffffff8, 0x5, 0xffffffff, 0x0, 0x8, 0x3, 0x8, 0x0, 0xc4, 0x3, 0x7, 0x1, 0x611, 0x1, 0x1, 0x7, 0x619, 0x9, 0x3, 0x6, 0x97d, 0x1, 0x99a, 0xffff, 0x8, 0x0, 0xffff, 0x7d, 0x4, 0x7, 0x401, 0x6, 0x2, 0x6, 0x609, 0x5, 0x3, 0x88, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1ff, 0x7, 0x7, 0x34b7, 0xdced, 0x4, 0x5, 0x6, 0x9c, 0x100, 0xfffffff0, 0x4, 0x265, 0x401, 0x7f, 0x4, 0x1ff, 0x99d, 0xa, 0x4, 0x5, 0x2, 0x10001, 0x5, 0x9, 0x0, 0x1, 0x3, 0x3, 0x7f, 0x80000000, 0x0, 0x7, 0x8, 0x7, 0xb, 0x46e9, 0x7, 0x2, 0x80, 0x6, 0x80000001, 0xfffffff9, 0x1, 0x7fffffff, 0x1, 0x6238, 0x10000, 0x10000, 0x1, 0x7, 0x80, 0x5, 0x0, 0x7, 0x9, 0x3, 0x5, 0x7, 0x5f1, 0x9a, 0x1b03, 0x846b, 0x76b, 0x6e, 0x2d2166a9, 0x7, 0x1, 0x200, 0x3ff, 0x8c, 0x6010516, 0x8000, 0x6, 0xe7, 0x9, 0x80000001, 0xffffff9b, 0x9, 0xfffffeff, 0x5, 0x6, 0x7, 0x7fffffff, 0x1, 0x2, 0x3, 0xac, 0xd, 0x0, 0x5, 0xc, 0x10, 0x2, 0x6, 0xef, 0x12, 0x6, 0x1, 0x80, 0xfffffda2, 0x7, 0x8, 0x4, 0x1, 0x6, 0xfffffffc, 0x56a, 0x7, 0x3, 0x900000, 0x4, 0x7, 0x9, 0x5, 0x7, 0xa91e, 0x1fe, 0x0, 0x0, 0x4dc3, 0xbce, 0x3ba2ae79, 0x2, 0x3, 0x5b0, 0x7, 0x8, 0x2, 0x7, 0x3, 0x3f087000, 0x2, 0xfffffffd, 0x2, 0x7, 0x0, 0xfff, 0x470c, 0x44c, 0x9, 0xfffffff9, 0x8000, 0x3, 0x500000, 0x4, 0x9, 0x0, 0x1, 0x1, 0x80000000, 0x1, 0x9, 0x6, 0x324e, 0x5, 0x8, 0x7f, 0x8, 0x9, 0xfffffffe, 0x2, 0x1, 0x10e3, 0xe6d8, 0x2, 0x6, 0xfff, 0x9, 0x4, 0x1000, 0x1, 0x3, 0x10001, 0x3, 0x2, 0x9, 0x5, 0x2, 0x6, 0x80000001, 0x3, 0x8, 0x5, 0x2, 0x22a, 0x3, 0x2, 0x8, 0x8, 0xd, 0x9, 0x7ff, 0x2, 0x4, 0x3, 0xfffffff7, 0xb8, 0x5ef, 0xfffffffb, 0x0, 0x7, 0x8, 0x1c8a, 0x80000001, 0x2, 0x2, 0x0, 0x7fff, 0x80000000, 0xff, 0x8, 0xbb, 0x9, 0xffffffd5, 0x80000000, 0x7bc8, 0x6, 0x0, 0x8, 0x0, 0xf, 0xfffffc01, 0xe, 0xd84e, 0x9, 0x3, 0x2, 0x4, 0x3, 0x8, 0x1, 0x6, 0xff, 0x5, 0x4, 0x9, 0x2, 0x400, 0xd, 0x40, 0x101, 0x80000001, 0x4, 0xffffffff, 0x81, 0x7, 0xb, 0x10000, 0x8, 0x8, 0x9, 0xc, 0x3, 0x9]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x4, 0x7, 0x6, 0x8, 0xdd0, 0x5, 0x8, 0x800, 0x0, 0xa5be, 0x8000, 0x7, 0x6, 0x4, 0x8, 0x0, 0x9, 0x2, 0x8001, 0x0, 0x0, 0x3, 0x2f, 0x3, 0x1, 0x80, 0x8, 0x8, 0x800, 0x1c, 0x3, 0x7fffffff, 0x0, 0x5, 0x2, 0x9, 0x600, 0x5, 0x6, 0x7, 0x4, 0x8, 0x5, 0x7, 0x7, 0x9, 0x2fb5, 0x2, 0x6, 0xf186, 0x10, 0x3, 0x2, 0x3, 0x9, 0x8, 0x6, 0x9, 0x939, 0x6, 0xc, 0x5, 0x9, 0x5, 0x1, 0x5, 0x0, 0x9, 0x80000001, 0x10001, 0x3, 0x7fff, 0x9, 0x40, 0xc7e0, 0x7, 0x6, 0x8, 0x2, 0x8, 0x200, 0xdb5, 0x2, 0x2, 0x6, 0x8, 0x4, 0x4f21, 0x1000, 0x6f88, 0x8, 0xfffffffd, 0x7, 0x8, 0x2, 0x7, 0x9, 0x7, 0x6383b288, 0x5, 0x7, 0x9d64, 0x4, 0x10, 0x8, 0x0, 0x2, 0x1, 0x10, 0x80000000, 0x0, 0x8, 0x8, 0xff, 0xe78, 0xd96d, 0x4, 0x1, 0x5, 0x2, 0x1, 0x5, 0x6, 0x20, 0x8, 0xc1b8, 0x6, 0x8, 0x40, 0xffffff80, 0x5, 0x0, 0x80000001, 0x7, 0xff, 0x0, 0x80, 0x8, 0x9, 0x8, 0xf2, 0x1000, 0x3, 0x1, 0x9, 0x8, 0xc, 0x0, 0x8, 0x2133, 0x6, 0x1bb, 0x5, 0x10001, 0x1, 0xf805, 0xe, 0x81, 0xffffffff, 0x7, 0x4, 0x0, 0x1, 0x2, 0x5, 0x48, 0x7, 0x7, 0x7f, 0x2, 0x6, 0x8ead, 0x800, 0x9, 0x7, 0x3, 0x1, 0x0, 0x5, 0x489, 0x5, 0x7, 0xc, 0x2, 0x3, 0x7f, 0x7ff, 0x0, 0x6, 0x3ff, 0x80000001, 0x8, 0xea9, 0x8, 0x0, 0x5, 0x6, 0x3ff, 0xfffffffe, 0x2, 0x5, 0x2, 0x6, 0xffff, 0x1, 0x10, 0xff, 0xff, 0x1ff, 0x7, 0x7fffffff, 0x101, 0x1, 0xd, 0x33f4, 0x0, 0xc, 0x800, 0x7fffffff, 0x81, 0x100, 0x80, 0x0, 0x0, 0x62e, 0x4, 0x423, 0x1, 0x9, 0x8, 0x7, 0x9, 0x4, 0x68d0, 0x6, 0x6, 0x8, 0x1000, 0x1, 0x5, 0x2, 0x6c, 0x5, 0xffffff01, 0x4, 0x23, 0x6, 0x800, 0x9836, 0x2, 0x3fc, 0xe, 0x10, 0xadb, 0x4]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x668d, 0x5, 0x9, 0xb, 0xc, 0x5, 0x6, 0x6, 0x3, 0x2, 0x1, 0x6, 0x1, 0xfff, 0x3, 0xc3, 0x9, 0x1000, 0x9, 0x200, 0x4, 0xd, 0x9, 0x80, 0x9, 0x6, 0x3, 0x6, 0x0, 0x2, 0xfffffff9, 0x5446, 0x7d, 0x1, 0xe, 0x1, 0x5, 0x9, 0x8, 0x5388, 0x0, 0x3, 0x0, 0x3, 0x7fffffff, 0x5, 0x2, 0x4, 0x8, 0x4, 0xb, 0x71d, 0xffffffff, 0x200, 0x0, 0x7fff, 0x1000, 0x101, 0x4, 0xfffffff3, 0x2, 0x7, 0xfff, 0xff, 0x4, 0x7ff, 0xff, 0x4, 0x6, 0x3, 0x1, 0x9, 0x5, 0x7, 0x6c, 0x5, 0xd, 0x3, 0x0, 0x27, 0x7, 0xca, 0x7f, 0xf, 0x1, 0x8, 0x1000, 0x80, 0x3, 0x2, 0x60, 0xf, 0x3, 0x8000, 0x8e08, 0x6, 0x4, 0xfffffffa, 0x2, 0xd613, 0x6, 0x1, 0xf, 0x7, 0x2, 0x5, 0x0, 0x0, 0x938, 0x4, 0x10001, 0x10, 0x1, 0xaab6, 0xfffffff9, 0x3, 0x0, 0x1, 0x3f0e, 0xfcf, 0x0, 0x3, 0x2, 0x9, 0x9, 0x6, 0x2, 0x9, 0x1, 0x2, 0x8, 0xbdd, 0x5, 0xfffffff3, 0x4, 0x7, 0x6, 0x10001, 0x9, 0x9, 0x5, 0x7, 0x4, 0x3, 0xd, 0x2, 0x3, 0x106c, 0x7, 0x60e5, 0xfffffff9, 0x2, 0x1, 0x3, 0x80, 0x0, 0xb, 0x5, 0x80000000, 0x0, 0x1000000, 0xcdd, 0x0, 0x3, 0x5, 0x0, 0x75, 0x8000, 0x8, 0x7, 0x5, 0x3, 0x0, 0x200, 0xffffff00, 0xfffffff8, 0xc25, 0x3, 0x8, 0x6, 0x6, 0x4, 0x1, 0x2, 0x0, 0x80, 0x0, 0x40, 0xa, 0x0, 0x1, 0x6, 0x3, 0x4, 0x8, 0x29f, 0x4, 0x5, 0x1000, 0x9, 0xd42, 0x36, 0x2, 0x5, 0x9, 0x8, 0x3, 0x6, 0x100, 0x5, 0x3, 0x4, 0x7, 0x10, 0x80, 0x7, 0x2, 0x8001, 0x9a, 0x74, 0x8001, 0x12, 0xffff0000, 0x6, 0x8, 0x81, 0x1, 0x750f, 0x6, 0x4, 0x8cd, 0x6, 0x80000000, 0x6, 0x7f, 0xe9b, 0x6, 0x5, 0xa88, 0x67, 0xffffffff, 0x3, 0x97, 0x5, 0x6, 0x5, 0xffff7f08, 0x7, 0x1, 0x1, 0xd, 0x200, 0x7f, 0xfffffac2, 0x6]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}]]}, {0xc8, 0x6, "0c09fc3a3b277094273576fe770d9bc7b549727d4fabf6689b42f4f858c321c7605b8563afba585370d6b9dcabcdecf56a7e3789984e5ddaad2453678790f4e63ad4e3eb9b38e240bb84f5fbf74e27e86c3a761902e843a51e4cbd6b7638355baddace389a99b4a3d0daea20f168784e2f6daebf312668c0716cb6a93e85312bddac698fb431ef8c01c5630bbf3d0d9eef8215ff1f6df66f97c4d61d4e5c7c7a8262c4a5ab97dc74c522893e72666bf44856ace5aea003f33cffc232fa4b4242f32d48b2"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbmod={0xc8, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x70}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x74, 0x6, "b4897f0c4ec1666ec0e1d3f06630b512f7280a6a044a9cb8cc4c4f91f57990b664571568c59f8de7b75a9eca11aeb90bf4df15e85892b4980175f5edd548583845715607bb84cae1ffb6a74dd8e04eac7a29374d8e682d485732da30ee12fd6e44643b72af1ae596865a75cf4d15d161"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbedit={0x48, 0x20, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff2, 0x10}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0x78, 0x19, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x103e}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x7}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7fffffff}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xb, 0xfff2}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x2}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_simple={0x134, 0x7, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xae, 0x8, 0x6, 0xffffffff, 0x1}}, @TCA_DEF_DATA={0x7, 0x3, '!(\x00'}]}, {0xe8, 0x6, "b0a4b26a8cef6babd2742519637dc34990f19130388c6f64361211212c7b09bacbea012613eb3254dfa8db2813dde414643a33cf421718ad50adf4b26e325a9cfdc67c80263c4f130fa4dae97ad3c025ef17eb960977bf910a28f0f52c34a5a831bb398c629bc32ad447f262231d79a633537643a2030cb2d88462b00270d138ef87ee13216fed2abb5650c867885aebfab61db6be621fac0cd8a87b354e3f7ab2b00f2bde3e752269241a186533210a947c286c517cfb50c36cd1485a3739afcaa6a4c71cecf3c030fc3e6eb4055b65e75fbb9e11a25668ad0e9f57e758607c43265efa"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_nat={0x19c, 0xf, 0x0, 0x0, {{0x8}, {0x144, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0xfffff4ff, 0x0, 0xdd71, 0x8}, @multicast2, @rand_addr=0x64010102, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x101, 0xffffffff, 0x0, 0x7, 0x35a}, @broadcast, @rand_addr=0x64010101, 0xffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x0, 0x6, 0x1, 0xa3a}, @empty, @multicast2, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x400, 0x2, 0x6, 0x2, 0x10001}, @dev={0xac, 0x14, 0x14, 0x1b}, @dev={0xac, 0x14, 0x14, 0x29}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x300, 0xfffffffb, 0x8, 0xd, 0x3}, @remote, @broadcast, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x9, 0x7, 0x1, 0x6}, @private=0xa010100, @remote, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xff, 0x482b258c, 0x7, 0x5, 0x200}, @empty, @broadcast, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x400, 0x9, 0x20000000, 0x10, 0x3}, @broadcast, @broadcast}}]}, {0x34, 0x6, "5f0536335e84ed9c85be3e0d06c000be6a09f434eb51d951c3f2cb6ce961b9243f09d1a1ea456c53dae13422121e2c84"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}, @TCA_CHAIN={0x8}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_RATE={0x6, 0x5, {0x46}}, @TCA_RATE={0x6, 0x5, {0x3, 0x80}}]}, 0x2b30}, 0x1, 0x0, 0x0, 0x40001}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003540)={0x0, 0x0}, &(0x7f0000003580)=0xc) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000035c0)=r6) r8 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000003600), &(0x7f0000003640)=0x4) syz_80211_inject_frame(&(0x7f0000003680), &(0x7f00000036c0)=@mgmt_frame=@reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x8}, @broadcast, @device_b, @initial, {0x9, 0x57b}, @value=@ver_80211n={0x0, 0x7, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}}, 0x1044, 0x101, @broadcast, {0x0, 0x6, @random="27705ef64961"}, @void, @val={0x2d, 0x1a, {0x400, 0x1, 0x5, 0x0, {0xea, 0x4, 0x0, 0x7, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x800, 0x82, 0x4}}, [{0xdd, 0x45, "efd5cf642f3ffbdeebf059336bdd66470618179418b7c3502d522ab2c120e5491fc29b61c6ffb10c8ad7043101076f8ac9fe896b999120824d9e91fb50dd0557a8b832a958"}, {0xdd, 0x6f, "24c0ad920a9fbf721d473ab643a8deaafc3e5a5ab965b7043c36e046b099642ba9071f72fbd27dde90569829741e84d3c2cdccf67f663f208a5278eaae2bd633bf8ad00a13def27b2198cf30df2dc64fd63088f1816ce2494417a89b64050d588d7b2b8232f072e2e8034dfe0cb6c7"}, {0xdd, 0xf2, "842ecbea4debc46055fa1ca9de13e415d61be30c84ad8a08b260b31e58aeca8e42636a2d014adf1191f6c8e4484a019cfe76406f9f86ff0257488b9b8622cd6a098f6b72e54689a899f3cd2b3157eb87096b8348db3f04d93689896e49cd80d536c68746bf9a6a19364319e102f1fcf601849db852830aa43c14deaa2dd9fd0b517b9e498c0250da7a98f107da90b0edf193cb6bd8a6a28d509a8fcf63ef7bc77b7d0c21f5dd7ba63eda9f5d51257ed0bb2127a3b00297f251a158b9b7e2285bea5ea5105367e0d16ddd91e5828ec40daebb3334a6953a8dae746f26d8ba4e4ca081d09889a94911cc6445dec3da5f5f4f66"}, {0xdd, 0xe2, "589fb26fee2737c54d25c122ad124cae653c056cf0d8a9ccc40cabf55a2672c82bbf8a13171493d528019a302ecd1a75e5e18220a745d6aa76bce1a5b9924e6d7ae5d760ef4dce7008a898d39719f8d9b60ec7244a4297c0b43a064a6a437584e8de4e57291a3d8a28a04d3786ff7a6648e72d23192c7d7202cd8c67458d82b5247307142dcb642d0de682eeba597fb813c676ff7895ca44395e9fda3fa2a5c52ddc43e93bc054be7747421f767d3f03c87c72f180da8aad4fdfd4fbe75b7269fcf6923b569263ad7f77a8827c410deccfc4325318a00ac542b92d8cec66149a1d65"}, {0xdd, 0xe5, "6fb267cf2c5608fe99398c4e4e6c37074b5118fc7afcdfab20900aa7f083c70f0c2489c019bab909cc81c8798e7ff920888b636e5444331d80902a3ebbd52fe10f5c7c8f91d8a275c16693527d3874c243eac795b2d2a5440cbf96967db1b3ffd50c2581a644d227267597b1918d72c5f55a27fd84d41a06888cdac1b95cc6310109245c77be34155591604948334874d3f9516e3e77691a928427f1509a8dd738842c3d910ff0d1738ecc953504fedc1113af2eaae4f92f29f806b8151dbf8b141bed11a4672f45b187ec4ed57536b767f2abaaff50ada3be597e07a2b3fb7aee24582e25"}, {0xdd, 0x64, "2d1b0dd3152dd655389454aa76792d20349490f773004731c2cee3c34d0ba82a35f217eaf7e0022f0e494218bc1ee9d46a71e02edb9f07c6d6af4093c4f57aebcd166e864d2e5e676c5e490790d4dce0ac7c84606ce02151d93f6e8cca3fa3d92dd4f80b"}, {0xdd, 0x38, "c0c691eb419c4094d6aa67fccde02cace3e81ca415e1535375dc9668dfa74a15f8de98e785e0f6ab9cec62cd3764017c9afcbaa84dbfa682"}, {0xdd, 0x8e, "f117c7264c9fdacdce30086c195b881ebc20d35c4b5d08a82253086ea53635086909747042d3ade3fbe81e36c98320e009b16c96f44baa821c57c67d7b132702ae147f3a680122d5d02718efd272bb3670ca9c2d9f51f4f11b4bf836d7ac1d25a16635c6cc27f7612625ba8c5b2804e33f81da295ba2b965a23a2c6533869feca7566d7379dcfc06084162274a4b"}]}, 0x4f1) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r9, &(0x7f0000003e00)={&(0x7f0000003bc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003dc0)={&(0x7f0000003c00)={0x1b8, 0x12, 0x800, 0x70bd28, 0x25dfdbfe, {0x26, 0x0, 0xbb, 0x6, {0x4e22, 0x4e22, [0x1000, 0x8, 0x6, 0x1], [0xc, 0x8001, 0xfffffffc, 0x2], 0x0, [0x800, 0x9]}, 0x7, 0x4}, [@INET_DIAG_REQ_BYTECODE={0xbb, 0x1, "929b3fdf5be9a6d280a02be184039f02c46870466b690b473147e64d0428031c7fb8fee5a1724b456059c3615069304416f100c39d05ac249eb735ab5eceb6d1797586d9056db568944c1e26945c7ea6a5bd742cff8ef7ea18ada9926dfcd2bc49f569659883b52f78bfda077f53c09175dc109c470e06a9b2233503410bf16c092893efdebe851fc3543bdc3284b27e90bf49daf1bb903e61ce33628161fb06b3e93e777c3f6bb6451d368279a99ff06591e942df09a7"}, @INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "cc8a756d8b88c1d7c580676ee8d51c7aacf4a215483dd8aefa4394ecf33c35ccf1d6b68885d69fb6ceede799f9a09e808c41bee95265052b07abece51f2879238f475eab4631d0204eafc8584497d88d4a52c6eef69cbb7958a34e1f3f47ad0ed73a91198b8fbde64637d97839b4ffa88d46bf3c53144a42a91b6d9968c868988572994e8a6242964be8a70cbceeff2e7eafc082e50c7a24b0efd2bf5bca9a3abc5f2cba24f8dc2e2263c712"}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x801}, 0x4004) ioctl$sock_SIOCOUTQ(r8, 0x5411, &(0x7f0000003e40)) connect$vsock_stream(r0, &(0x7f0000003e80)={0x28, 0x0, 0x2711}, 0x10) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000003ec0)={0x10, {{0xa, 0x4e24, 0xfffffffb, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, 0x2}}, {{0xa, 0x4e22, 0x88e, @dev={0xfe, 0x80, '\x00', 0xe}, 0x7}}}, 0x108) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000004000), 0x4) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000004080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000004140)={&(0x7f0000004040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000004100)={&(0x7f00000040c0)={0x28, r2, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x7, 0x4a}}}}, ["", "", "", "", "", "", ""]}, 0x28}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000004240)={&(0x7f0000004180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000004200)={&(0x7f00000041c0)=@ipv4_newrule={0x38, 0x20, 0x1, 0x70bd2a, 0x25dfdbfb, {0x2, 0x14, 0x10, 0x9, 0x4, 0x0, 0x0, 0x0, 0x8}, [@FRA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3b}}, @FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc, 0x14, {r7, r7}}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x4) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000004340)={&(0x7f0000004280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, r2, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x1, 0x24}}}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x2c}}, 0x4000001) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000004380)) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000004400)=r6, 0x12) 1.657277947s ago: executing program 4 (id=1554): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000069107f000000000004000000000000009508001500040000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x800001, 0x10012, r0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000140)={0x7, 'vlan0\x00', {0xf}}) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="2d72646d6120ab706572666576656eda48dd2bc4a774202d6e657420f3646798753df1ef7ab49c5dc637"], 0x17) 1.449271079s ago: executing program 4 (id=1556): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000005a00010000000000000000d531000000040005"], 0x18}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d, 0xc101}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4844}, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) getsockopt$inet_mreqn(r2, 0x0, 0x20, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8080) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000506010200000000000000000a00000109006e"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$igmp6(0xa, 0x3, 0x2) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000001400bd7f4366c07a2cbfb7eb01"], 0x14}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x4}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x48}}, 0x44040) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xa0, 0x15}, [@call={0x45, 0x0, 0x0, 0xffffffff}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x64) 1.120460969s ago: executing program 0 (id=1557): r0 = socket(0x10, 0xa, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011809ed61b77d9f16a96c594a1961ed189d63c3391c4854d66a1452ed6b21920c796c4fb58a76f04811e8a7bda7af3bdb21fcab2d6ca22909ed50d079f0b7120f9b5cb852eaa3c6ad1b9be"], 0xb4}}, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f00000005c0)={0x20c, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA={0x78, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x14f6}]}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x69}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x625}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x4c015}, 0x40040) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25GETINFOOLD(r2, 0x89e9, &(0x7f0000006d00)) 1.044162653s ago: executing program 3 (id=1558): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@sco={0x1f, @none}, &(0x7f0000000080)=0x80, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0xa4, r0, 0x6, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xa4e}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x240}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}]}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x31cfa530}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x541}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24004851}, 0x4805) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000240)={0xa0e9, 0x5, 0x100, 0x6, 0x0}, &(0x7f00000003c0)=0x10) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000400)={r3, 0x5, 0x8, [0x0, 0x4, 0x1, 0x1, 0x3, 0x5, 0xe04, 0xc542]}, 0x18) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff0100000000000000000000000000010600040001"], 0x58}}, 0x0) 922.136816ms ago: executing program 0 (id=1559): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_x25_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={@null, 0x2, 'pim6reg0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000120c0002006e6c383032313100"], 0x20}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r6, 0x0, 0xce, 0x0, &(0x7f0000000080)) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={&(0x7f0000000000)="9e", &(0x7f0000000940)=""/4096, &(0x7f0000000100), &(0x7f00000001c0), 0x1, r5}, 0x38) tee(r3, r4, 0x81, 0x0) close(0x4) recvmmsg(r2, &(0x7f0000008100)=[{{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f00000002c0)=""/248, 0xf8}, {&(0x7f0000000240)=""/116, 0x72}, {&(0x7f0000001480)=""/217, 0xd9}, {&(0x7f0000001600)=""/103, 0x67}, {&(0x7f0000001680)=""/4096, 0x1000}], 0x5, 0x0, 0xfc9d}, 0x5}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000000440)=""/170, 0xaa}, {&(0x7f0000000500)=""/159, 0x9f}, {&(0x7f0000001200)=""/237, 0xed}, {&(0x7f00000001c0)=""/127, 0x7f}, {&(0x7f00000007c0)=""/70, 0x46}], 0x6}}, {{0x0, 0x0, 0x0}}, {{&(0x7f00000005c0)=@alg, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000640)=""/138}, {&(0x7f00000027c0)=""/240}, {&(0x7f0000000180)=""/58}, {&(0x7f0000000700)=""/111}], 0x0, &(0x7f0000002680)=""/95}, 0xfffff201}, {{&(0x7f00000028c0)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x0, &(0x7f0000000780)=[{&(0x7f0000002a00)=""/137}, {&(0x7f0000002ac0)=""/229}], 0x0, &(0x7f0000002940)=""/104}, 0x9}, {{&(0x7f0000002bc0)=@in={0x2, 0x0, @broadcast}, 0x0, &(0x7f0000002d00)=[{&(0x7f0000002c40)=""/180}, {&(0x7f0000003f80)=""/4096}, {&(0x7f0000004f80)=""/4096}, {&(0x7f0000002700)=""/10}], 0x0, &(0x7f0000005f80)=""/4096}, 0xffff}, {{&(0x7f0000002d40)=@in6={0xa, 0x0, 0x0, @empty}, 0x0, &(0x7f0000007f80)=[{&(0x7f0000002dc0)=""/50}, {&(0x7f0000002e00)}, {&(0x7f0000006f80)=""/4096}, {&(0x7f0000002e40)=""/61}, {&(0x7f0000002e80)=""/36}, {&(0x7f0000002ec0)=""/159}], 0x0, &(0x7f0000008000)=""/224}, 0x2}], 0x3, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x0, './file0\x00'}}) 917.700272ms ago: executing program 4 (id=1560): socket(0x10, 0x3, 0x0) unshare(0x20000400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x891d, &(0x7f00000001c0)={'sit0\x00', 0x0}) 865.082289ms ago: executing program 4 (id=1561): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002480)=@delchain={0x1e0, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xb}, {0xfff2}}, [@TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x1a8, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x194, 0x6, [@m_ife={0xac, 0xb, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_SMAC={0xa, 0x4, @random="03413659759d"}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_METALST={0x4}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x3e02, 0xee3b, 0x0, 0x7, 0x2}, 0x1}}]}, {0x25, 0x6, "3892c4d2eb75728faed731b8708e6a332c67f787554cd94e623e16d97c61b46e68"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_tunnel_key={0xe4, 0x11, 0x0, 0x0, {{0xf}, {0x64, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x6}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xd, 0x0, 0x0, 0x7}, 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x4}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @private=0xa010100}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @local}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @broadcast}]}, {0x52, 0x6, "c78fc33872457fb92b18f538b9885cf4029ce24a38aa9dbe3fb924e6cff5ce33a2116818c53161a2bdb28082032d0bf05d2334e29dd37547c6c58243b471e1d3287a813b2cc6e0360635c31fe8e8"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0x1e0}}, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0x7, 0x7}]}}}]}, 0x3c}}, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa31086b8703110000001f00000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4004080) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0xc, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87c}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x36, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0x7, 0x8a12, 0x1}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000005c0)=[0x1, 0xffffffffffffffff], &(0x7f0000000880)=[{0x1, 0x2, 0x10, 0x3}, {0x3, 0x2, 0x10, 0x8}, {0x5, 0x4, 0xb, 0x4}, {0x2, 0x3, 0x2, 0xa}, {0x3, 0x1, 0x8, 0x2}, {0x0, 0x5, 0x1, 0x3}, {0x5, 0x4, 0x10, 0x5}], 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000000)='jbd2_shrink_checkpoint_list\x00', r3, 0x0, 0x2}, 0x18) (async, rerun: 32) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x801, 0x4) (rerun: 32) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 810.552605ms ago: executing program 3 (id=1562): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x8}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_OIF={0x8}}, @RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x30}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x800}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) setsockopt(r0, 0x0, 0x0, 0x0, 0x0) 591.716836ms ago: executing program 4 (id=1563): bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000009c0)={@cgroup, 0xffffffffffffffff, 0x1b, 0x11, 0xffffffffffffffff, @void, @value}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c000180080001008b"], 0x24}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x80010, r3, 0x180000000) 589.874828ms ago: executing program 3 (id=1564): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000100)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018000280140003"], 0x50}}, 0x0) 351.710357ms ago: executing program 3 (id=1565): syz_emit_ethernet(0x55, &(0x7f0000000200)={@broadcast, @local, @val={@void, {0x8100, 0x7, 0x0, 0xfff}}, {@generic={0x6000, "ca99336ab6236f0eb9526eaec75b9baa5e6fe331efaa837fcb1dab95797cf14519b61655ef4843635a3cf3e0e1797f409270e0f3b4106700f9677608b80fa0d2f728a5"}}}, 0x0) syz_emit_ethernet(0x55, &(0x7f0000000200)={@broadcast, @local, @val={@void, {0x8100, 0x7, 0x0, 0xfff}}, {@generic={0x6000, "ca99336ab6236f0eb9526eaec75b9baa5e6fe331efaa837fcb1dab95797cf14519b61655ef4843635a3cf3e0e1797f409270e0f3b4106700f9677608b80fa0d2f728a5"}}}, 0x0) (async) 339.28505ms ago: executing program 4 (id=1566): r0 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={r0, &(0x7f00000006c0), 0x0}, 0x20) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f00000000c0)=ANY=[@ANYRES32=r1]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000000)='.'}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r4}, 0x18) (async) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000011140100000000000000000008004a00000000f107004b"], 0x20}}, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_init_net_socket$ax25(0x3, 0x2, 0xc4) 170.064938ms ago: executing program 3 (id=1567): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@migrate={0x138, 0x21, 0x1, 0x0, 0x0, {{@in, @in6=@remote}, 0x6e6bb2}, [@migrate={0xe8, 0x11, [{@in=@multicast1, @in=@local, @in=@local, @in=@broadcast}, {@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, @in6=@empty}, {@in=@empty, @in=@private, @in6=@remote, @in6=@mcast2}]}]}, 0x138}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x198, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in6=@local}, {@in6=@private1, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}, @algo_auth={0x59, 0x1, {{'cmac(aes)\x00'}, 0x88, "b6f3e543e3ff15c934decfda52def2c9f2"}}]}, 0x198}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24000840}, 0x44000) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r4, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x8}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x1}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0xc, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0xe}]}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x1}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x5}]}, 0x40}}, 0x8000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000940)) 1.225198ms ago: executing program 0 (id=1568): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) mmap(&(0x7f0000159000/0x1000)=nil, 0x1000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000000)=""/61, 0x32a000, 0x800, 0x200, 0x3}, 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0x200000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmmsg$inet(r1, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001200)="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", 0x299}, {&(0x7f0000000100)="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", 0x2be}, {&(0x7f0000000040)="05437c98b91b1455046f57b5fc9138a114bde2bbeac2104eaea9c9d01a7838d859007067c10aa7352abbdf98e9bf033a4784a11e8463b47c77869819496de358d8105647e4e4712a2a", 0x49}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) 690.587µs ago: executing program 3 (id=1569): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004100)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001e000101000000000000001c01"], 0x14}], 0x1}, 0x0) bind$inet(r0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002580)=@newtaction={0x490, 0x30, 0x12f, 0x0, 0x0, {}, [{0x47c, 0x1, [@m_police={0x478, 0x1, 0x0, 0x0, {{0xb}, {0x44c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x13e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xffffffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffc00, 0x8, 0x8, 0x2, 0x6, {0x1, 0x1, 0xf, 0x70, 0x5d5, 0x2}, {0x20, 0x0, 0x1, 0x5, 0x6}, 0x2, 0x5, 0x40}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x490}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r4) sendmsg$NFC_CMD_GET_TARGET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r5, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r4) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r4) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000f8ffff0500000008000100"], 0x28}}, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='dctcp-reno\x00', 0xb) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000200), 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0200000001010000000000000a00000904000000000000000000000400000000040000000000000f030000000000000061"], 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) preadv(r8, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/113, 0x71}], 0x1, 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r9) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r9, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x34, r10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1=0xe0000002}, @NLBL_UNLABEL_A_SECCTX={0x4, 0x7, 'unconfined\x00'}]}, 0x34}, 0x2, 0x34005}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x60, r10, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x4000800) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x26, 0x2, 0x4) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x6, @local, 0x4e22, 0x0, 'rr\x00', 0x1c, 0x4, 0x1e}, 0x2c) write(r11, &(0x7f0000000040)="a11ce86464c89e8ca8c58f9b806cb1a3a72ee9f8000c37007b889e63da5b942b3d21d1a6eab8cc12ecf32dafd09ca1df8f5d0d445ec1ee4f0001259cd7b7d2308930d4daf759726e2a3d8ef2786bc82f2ba79445674dd995f235f524688bd136c01e9a8ba47c05fe1d0da29c", 0x6c) close(r11) write$bt_hci(r11, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x6) 0s ago: executing program 1 (id=1077): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xffffffff}) ioctl(r0, 0x8b23, &(0x7f0000000040)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x5}}}}]}, 0x40}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="d4000000240001032abd7000000000000100000008008c"], 0xd4}}, 0x4080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x50, 0x2, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @dev}}}]}]}, 0x50}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x23, 0x3, 0x1, 0x0, 0xffffffffffffffff, 0x37, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r7, &(0x7f0000000100), 0x0}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x7, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r8, &(0x7f00000002c0), &(0x7f0000000580)=@tcp}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r8, &(0x7f0000000080)="a3", &(0x7f0000000180)=@tcp6, 0x2}, 0x20) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x16, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2ef}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@ldst={0x2, 0x0, 0x6, 0x0, 0x8, 0x100, 0x4}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @map_val={0x18, 0x7, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x2}, @alu={0x7, 0x1, 0xc, 0x2, 0x5, 0x100, 0x1}, @alu={0x4, 0x1, 0x1, 0xb, 0x0, 0x40, 0x10}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='syzkaller\x00', 0x40, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x0, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000600)={0x3, 0xd, 0x81, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0xffffffffffffffff], 0x0, 0x10, 0x2559, @void, @value}, 0x94) getsockopt$bt_hci(r6, 0x84, 0x75, &(0x7f0000001f00)=""/4062, &(0x7f00000004c0)=0xfde) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0xffffff2f, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f00000003c0)=0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000400)={0x6, 0x3, 0x8000, 0xfff, 0x7c8, 0x9, 0x8, 0xa1d1, r10}, &(0x7f0000000440)=0x20) socket$inet_icmp_raw(0x2, 0x3, 0x1) kernel console output (not intermixed with test programs): ace will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.457941][ T8499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.574596][ T8499] hsr_slave_0: entered promiscuous mode [ 131.602745][ T8499] hsr_slave_1: entered promiscuous mode [ 131.652517][ T8499] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.660257][ T8499] Cannot create hsr debugfs directory [ 131.875435][ T8641] __nla_validate_parse: 2 callbacks suppressed [ 131.875455][ T8641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.757'. [ 131.984695][ T8643] xt_CT: No such helper "pptp" [ 132.353525][ T8499] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 132.394417][ T8499] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 132.434724][ T8499] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 132.484260][ T8676] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 132.500656][ T8676] team0: Device ipvlan2 is already an upper device of the team interface [ 132.592952][ T8684] validate_nla: 126 callbacks suppressed [ 132.592972][ T8684] netlink: 'syz.4.771': attribute type 8 has an invalid length. [ 132.615418][ T8686] netlink: 12 bytes leftover after parsing attributes in process `syz.0.770'. [ 132.625691][ T8499] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 132.810234][ T8688] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 132.879160][ T8692] netlink: 24 bytes leftover after parsing attributes in process `syz.0.774'. [ 132.895685][ T8499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.990021][ T8692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.774'. [ 133.021832][ T8499] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.083417][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.090584][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.124185][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.169434][ T4804] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.176619][ T4804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.280792][ T8702] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 133.301247][ T8702] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 133.332923][ T8702] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 133.356708][ T8702] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 133.394884][ T8702] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 133.410101][ T8702] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 133.419220][ T8702] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 133.428489][ T8702] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 133.439336][ T8702] geneve2: entered promiscuous mode [ 133.448684][ T8702] geneve2: entered allmulticast mode [ 133.452874][ T5860] Bluetooth: hci2: command tx timeout [ 133.480655][ T8718] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 133.767901][ T8744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.785'. [ 133.809304][ T8744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.785'. [ 133.958007][ T8499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.038448][ T8499] veth0_vlan: entered promiscuous mode [ 134.077026][ T8499] veth1_vlan: entered promiscuous mode [ 134.154308][ T8499] veth0_macvtap: entered promiscuous mode [ 134.203747][ T8499] veth1_macvtap: entered promiscuous mode [ 134.236238][ T8499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.262207][ T8499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.294497][ T8499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.322171][ T8499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.332461][ T8499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.342986][ T8499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.352914][ T8499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.363960][ T8499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.375227][ T8499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.385219][ T8499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.396202][ T8499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.407342][ T8499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.418224][ T8499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.428509][ T8499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.439113][ T8499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.449339][ T8499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.460383][ T8499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.473206][ T8499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.486772][ T8499] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.495610][ T8499] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.504485][ T8499] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.513644][ T8499] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.614984][ T8775] netlink: 16 bytes leftover after parsing attributes in process `syz.3.796'. [ 134.696978][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.732416][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.791186][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.799921][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.069323][ T8790] netlink: 'syz.1.799': attribute type 10 has an invalid length. [ 135.522273][ T5159] Bluetooth: hci2: command tx timeout [ 135.594900][ T8822] xt_l2tp: missing protocol rule (udp|l2tpip) [ 135.998660][ T8844] syzkaller0: entered allmulticast mode [ 136.007808][ T8844] netlink: 4100 bytes leftover after parsing attributes in process `syz.0.817'. [ 136.288170][ T8858] netlink: 4 bytes leftover after parsing attributes in process `syz.4.822'. [ 136.340741][ T8861] netlink: 20 bytes leftover after parsing attributes in process `syz.0.824'. [ 137.053607][ T8898] netlink: 'syz.4.833': attribute type 4 has an invalid length. [ 137.114939][ T8900] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 137.575313][ T8933] netem: incorrect gi model size [ 137.580674][ T8933] netem: change failed [ 137.610165][ T8938] netlink: 'syz.1.845': attribute type 10 has an invalid length. [ 137.662738][ T8938] bond0: (slave bond_slave_0): Releasing backup interface [ 137.717941][ T8941] netlink: 'syz.1.845': attribute type 1 has an invalid length. [ 137.731633][ T8941] __nla_validate_parse: 1 callbacks suppressed [ 137.731654][ T8941] netlink: 56 bytes leftover after parsing attributes in process `syz.1.845'. [ 137.774793][ T8943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.846'. [ 137.792145][ T8943] netlink: 12 bytes leftover after parsing attributes in process `syz.4.846'. [ 137.845734][ T8946] Cannot find del_set index 3 as target [ 138.043478][ T8953] netlink: 24 bytes leftover after parsing attributes in process `syz.4.850'. [ 138.062589][ T8955] Dead loop on virtual device ipvlan1, fix it urgently! [ 138.102088][ T8955] syz.1.852 (8955) used greatest stack depth: 6928 bytes left [ 138.140425][ T8957] sctp: [Deprecated]: syz.0.851 (pid 8957) Use of int in maxseg socket option. [ 138.140425][ T8957] Use struct sctp_assoc_value instead [ 138.159466][ T8962] netlink: 'syz.4.854': attribute type 21 has an invalid length. [ 138.167890][ T8962] netlink: 156 bytes leftover after parsing attributes in process `syz.4.854'. [ 138.730524][ T8988] netlink: 20 bytes leftover after parsing attributes in process `syz.4.862'. [ 138.786424][ T8988] veth1_macvtap: entered promiscuous mode [ 138.890672][ T8999] syzkaller1: entered promiscuous mode [ 138.900329][ T8999] syzkaller1: entered allmulticast mode [ 139.137297][ T9011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.868'. [ 139.252839][ T9017] netlink: 12 bytes leftover after parsing attributes in process `syz.4.867'. [ 139.431426][ T9028] xt_CT: You must specify a L4 protocol and not use inversions on it [ 139.454472][ T9030] netlink: 104 bytes leftover after parsing attributes in process `syz.0.873'. [ 139.549621][ T9038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.876'. [ 139.739548][ T9049] IPv6: NLM_F_CREATE should be specified when creating new route [ 140.199967][ T9069] netlink: 'syz.4.887': attribute type 29 has an invalid length. [ 140.258527][ T9069] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 140.531568][ T9081] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 140.769391][ T9087] 8021q: VLANs not supported on lo [ 141.058432][ T9108] macvlan2: entered allmulticast mode [ 141.092059][ T9108] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 141.489859][ T9131] netlink: 'syz.4.911': attribute type 1 has an invalid length. [ 141.768867][ T9158] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 141.816392][ T9158] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 142.243039][ T9169] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.395431][ T9169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.407587][ T9169] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.467152][ T9169] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.476217][ T9169] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.486025][ T9169] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.495231][ T9169] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.587723][ T9187] netlink: 'syz.3.928': attribute type 10 has an invalid length. [ 142.680655][ T9187] bridge0: port 1(wlan1) entered blocking state [ 142.708338][ T9187] bridge0: port 1(wlan1) entered disabled state [ 142.729090][ T9187] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 142.737280][ T9189] xt_CT: No such helper "netbios-ns" [ 142.755952][ T9187] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 142.888730][ T9203] netlink: 'syz.1.932': attribute type 8 has an invalid length. [ 142.926739][ T9207] __nla_validate_parse: 10 callbacks suppressed [ 142.926759][ T9207] netlink: 28 bytes leftover after parsing attributes in process `syz.0.933'. [ 143.059648][ T9213] netlink: 'syz.1.938': attribute type 2 has an invalid length. [ 143.077656][ T9213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.938'. [ 143.229585][ T9217] Dead loop on virtual device ipvlan1, fix it urgently! [ 143.253552][ T9217] Dead loop on virtual device ipvlan1, fix it urgently! [ 143.438726][ T9222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.942'. [ 143.469414][ T9228] netlink: 4 bytes leftover after parsing attributes in process `syz.3.943'. [ 143.701335][ T9242] netlink: 'syz.4.948': attribute type 21 has an invalid length. [ 143.722144][ T9242] netlink: 156 bytes leftover after parsing attributes in process `syz.4.948'. [ 143.862854][ T9252] macvlan2: entered allmulticast mode [ 143.868287][ T9252] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 144.105646][ T9265] netlink: 'syz.0.955': attribute type 4 has an invalid length. [ 144.124094][ T9265] netlink: 152 bytes leftover after parsing attributes in process `syz.0.955'. [ 144.152369][ T9265] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 144.184154][ T9267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.957'. [ 144.326151][ T9272] netlink: 'syz.0.959': attribute type 4 has an invalid length. [ 144.341378][ T9272] netlink: 152 bytes leftover after parsing attributes in process `syz.0.959'. [ 144.378494][ T9272] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 144.747143][ T9298] netlink: 'syz.3.967': attribute type 1 has an invalid length. [ 144.760464][ T9298] netlink: 'syz.3.967': attribute type 4 has an invalid length. [ 144.784606][ T9298] netlink: 188 bytes leftover after parsing attributes in process `syz.3.967'. [ 144.803655][ T9298] NCSI netlink: No device for ifindex 458760 [ 144.822494][ T9307] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 144.916195][ T9309] bridge5: entered promiscuous mode [ 144.921604][ T9309] bridge5: entered allmulticast mode [ 145.008025][ T9312] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.047300][ T9318] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 145.137828][ T9312] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.243816][ T9322] netlink: 64 bytes leftover after parsing attributes in process `syz.0.975'. [ 145.258566][ T9312] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.343191][ T9312] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.495660][ T9312] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.539819][ T9312] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.563954][ T9312] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.580761][ T9312] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.737016][ T9338] dvmrp0: entered allmulticast mode [ 145.957902][ T9355] unsupported nla_type 174 [ 146.457231][ T9380] hsr0: entered promiscuous mode [ 146.517195][ T9387] syzkaller0: entered promiscuous mode [ 146.523258][ T9387] syzkaller0: entered allmulticast mode [ 146.581585][ T9391] sctp: [Deprecated]: syz.3.1000 (pid 9391) Use of int in max_burst socket option. [ 146.581585][ T9391] Use struct sctp_assoc_value instead [ 146.709431][ T9399] af_packet: tpacket_rcv: packet too big, clamped from 4748 to 3952. macoff=96 [ 146.714197][ T9401] mac80211_hwsim hwsim4 ÿ: renamed from wlan1 (while UP) [ 146.871804][ T9408] xt_bpf: check failed: parse error [ 147.350733][ T9443] netdevsim netdevsim0 : renamed from netdevsim0 [ 147.599819][ T9459] netlink: 'syz.4.1023': attribute type 10 has an invalid length. [ 147.634117][ T9459] team0: Device veth0_macvtap failed to register rx_handler [ 147.759802][ T9464] netlink: 'syz.3.1026': attribute type 1 has an invalid length. [ 147.838994][ T9464] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.911600][ T9477] x_tables: duplicate underflow at hook 3 [ 147.942016][ T9480] __nla_validate_parse: 5 callbacks suppressed [ 147.942035][ T9480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1030'. [ 148.115809][ T9491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1034'. [ 148.140884][ T9494] Dead loop on virtual device ipvlan1, fix it urgently! [ 148.158478][ T9491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1034'. [ 148.207839][ T9494] Dead loop on virtual device ipvlan1, fix it urgently! [ 148.328419][ T9504] @ÿÿÿ: renamed from veth0_vlan (while UP) [ 148.481853][ T9518] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1042'. [ 148.599333][ T9523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1046'. [ 148.772191][ T9533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1049'. [ 148.915165][ T9540] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1050'. [ 149.140923][ T9554] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1057'. [ 149.365369][ T9572] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1061'. [ 149.634278][ T9591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1068'. [ 151.067954][ T9622] openvswitch: netlink: Flow key attr not present in new flow. [ 151.145586][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 151.155785][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 151.164411][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 151.173893][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 151.183329][ T5852] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 151.192829][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 151.481362][ T9637] Bluetooth: MGMT ver 1.23 [ 151.558654][ T9639] can: request_module (can-proto-5) failed. [ 151.811635][ T9625] chnl_net:caif_netlink_parms(): no params data found [ 152.168506][ T9625] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.178965][ T9625] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.186572][ T9625] bridge_slave_0: entered allmulticast mode [ 152.194525][ T9625] bridge_slave_0: entered promiscuous mode [ 152.211344][ T9625] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.224883][ T9625] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.240194][ T9625] bridge_slave_1: entered allmulticast mode [ 152.254009][ T9625] bridge_slave_1: entered promiscuous mode [ 152.302744][ T9625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.320191][ T9625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.360540][ T9682] x_tables: duplicate underflow at hook 2 [ 152.417470][ T9625] team0: Port device team_slave_0 added [ 152.426639][ T9625] team0: Port device team_slave_1 added [ 152.457321][ T9625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.472280][ T9625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.513348][ T9625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.526594][ T9625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.533763][ T9625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.560950][ T9625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.663916][ T9625] hsr_slave_0: entered promiscuous mode [ 152.681839][ T9625] hsr_slave_1: entered promiscuous mode [ 152.696168][ T9625] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 152.713703][ T9625] Cannot create hsr debugfs directory [ 152.819073][ T9625] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.877601][ T9625] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.937906][ T9625] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.001193][ T9625] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.115528][ T9706] __nla_validate_parse: 2 callbacks suppressed [ 153.115548][ T9706] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1106'. [ 153.132243][ T9705] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1106'. [ 153.146567][ T9705] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1106'. [ 153.282225][ T5159] Bluetooth: hci0: command tx timeout [ 153.327022][ T9625] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 153.373221][ T9625] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 153.398071][ T9625] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 153.417982][ T9625] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 153.573999][ T9625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.641069][ T9625] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.687320][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.694506][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.721438][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.728666][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.130952][ T9625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.210354][ T9625] veth0_vlan: entered promiscuous mode [ 154.243693][ T9625] veth1_vlan: entered promiscuous mode [ 154.295552][ T9625] veth0_macvtap: entered promiscuous mode [ 154.304727][ T9625] veth1_macvtap: entered promiscuous mode [ 154.321139][ T9625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.332104][ T9625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.342027][ T9625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.352507][ T9625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.362719][ T9625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.373237][ T9625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.383209][ T9625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.394204][ T9625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.405399][ T9625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.415179][ T9625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.426004][ T9625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.435886][ T9625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.446398][ T9625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.456540][ T9625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.467016][ T9625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.476941][ T9625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.487761][ T9625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.499107][ T9625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.509671][ T9625] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.518880][ T9625] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.527684][ T9625] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.536462][ T9625] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.627174][ T9770] netlink: 'syz.3.1123': attribute type 21 has an invalid length. [ 154.643343][ T9770] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1123'. [ 154.675362][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.690828][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.738729][ T194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.755807][ T194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.964206][ T9789] netlink: 'syz.0.1127': attribute type 2 has an invalid length. [ 155.128828][ T9801] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1129'. [ 155.139732][ T9801] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1129'. [ 155.329486][ T9813] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1131'. [ 155.346421][ T9813] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1131'. [ 155.355698][ T9813] netlink: 'syz.0.1131': attribute type 9 has an invalid length. [ 155.728940][ T9835] IPVS: length: 157 != 24 [ 156.076866][ T194] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.365044][ T9853] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1145'. [ 156.455777][ T9853] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1145'. [ 156.504713][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 156.514188][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 156.523505][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 156.534113][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 156.541777][ T5852] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 156.549697][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 156.678736][ T9858] netlink: 'syz.4.1146': attribute type 22 has an invalid length. [ 156.849158][ T9855] chnl_net:caif_netlink_parms(): no params data found [ 156.896901][ T9872] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 156.903065][ T9870] netlink: 'syz.3.1150': attribute type 2 has an invalid length. [ 156.922257][ T9870] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 157.181089][ T9855] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.189046][ T9855] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.202596][ T9855] bridge_slave_0: entered allmulticast mode [ 157.209683][ T9855] bridge_slave_0: entered promiscuous mode [ 157.246132][ T194] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.265876][ T9855] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.273175][ T9855] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.280356][ T9855] bridge_slave_1: entered allmulticast mode [ 157.288003][ T9855] bridge_slave_1: entered promiscuous mode [ 157.314667][ T9855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.335454][ T9855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.417422][ T9855] team0: Port device team_slave_0 added [ 157.426115][ T9855] team0: Port device team_slave_1 added [ 157.460678][ T9855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.476520][ T9855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.502908][ T9855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.531048][ T194] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.553532][ T9855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.560755][ T9855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.587703][ T9855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.621015][ T194] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.697361][ T9855] hsr_slave_0: entered promiscuous mode [ 157.710132][ T9855] hsr_slave_1: entered promiscuous mode [ 157.717491][ T9855] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.725726][ T9855] Cannot create hsr debugfs directory [ 157.878797][ T194] bridge_slave_1: left allmulticast mode [ 157.889220][ T194] bridge_slave_1: left promiscuous mode [ 157.926143][ T194] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.953831][ T194] bridge_slave_0: left allmulticast mode [ 157.959542][ T194] bridge_slave_0: left promiscuous mode [ 157.972966][ T194] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.410643][ T194] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.421654][ T194] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.433825][ T194] bond0 (unregistering): Released all slaves [ 158.463532][ T9922] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.505580][ T9919] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.513170][ T9919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.597066][ T9929] __nla_validate_parse: 1 callbacks suppressed [ 158.597086][ T9929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1166'. [ 158.646545][ T9930] delete_channel: no stack [ 158.653181][ T5852] Bluetooth: hci0: command tx timeout [ 158.662765][ T9932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1166'. [ 158.743486][ T9934] netlink: 15930 bytes leftover after parsing attributes in process `syz.4.1168'. [ 159.402608][ T194] hsr_slave_0: left promiscuous mode [ 159.422908][ T194] hsr_slave_1: left promiscuous mode [ 159.436751][ T194] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.452494][ T194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.474439][ T194] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.483908][ T194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.533327][ T194] veth1_macvtap: left promiscuous mode [ 159.557794][ T194] veth0_macvtap: left promiscuous mode [ 159.566543][ T194] veth1_vlan: left promiscuous mode [ 159.576333][ T194] veth0_vlan: left promiscuous mode [ 160.096783][ T194] team0 (unregistering): Port device team_slave_1 removed [ 160.138880][ T194] team0 (unregistering): Port device team_slave_0 removed [ 160.434857][ T9984] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1182'. [ 160.571115][ T9977] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 160.590694][ T9978] netem: incorrect ge model size [ 160.605561][ T9978] netem: change failed [ 160.724537][ T5852] Bluetooth: hci0: command tx timeout [ 160.760733][ T9855] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 160.780102][ T9855] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 160.815101][ T9855] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 160.835264][ T9855] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 161.011592][ T9855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.044419][ T9855] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.067594][ T3772] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.074796][ T3772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.099943][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.108623][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.131264][ T9855] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 161.142030][ T9855] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 161.153854][T10001] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1188'. [ 161.412396][ T9855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.442268][ T9855] veth0_vlan: entered promiscuous mode [ 161.458205][ T9855] veth1_vlan: entered promiscuous mode [ 161.485036][ T9855] veth0_macvtap: entered promiscuous mode [ 161.501521][ T9855] veth1_macvtap: entered promiscuous mode [ 161.527803][T10022] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1193'. [ 161.528416][ T9855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.553189][ T9855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.564125][ T9855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.575357][ T9855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.587036][ T9855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.601368][ T9855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.619137][ T9855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.635288][ T9855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.647355][ T9855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.687851][ T9855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.699961][ T9855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.711206][ T9855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.722244][ T9855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.735778][T10032] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1196'. [ 161.736479][ T9855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.768213][ T9855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.786316][ T9855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.799467][ T9855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.820797][ T9855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.864623][ T9855] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.888760][ T9855] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.910071][ T9855] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.919596][ T9855] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.939001][T10043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1198'. [ 162.017814][T10045] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 162.052411][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.070209][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.097940][ T194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.115426][ T194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.229697][T10057] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1203'. [ 162.675873][T10090] netlink: 'syz.0.1212': attribute type 29 has an invalid length. [ 162.685282][T10090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1212'. [ 162.695895][T10090] netlink: 'syz.0.1212': attribute type 29 has an invalid length. [ 163.021050][T10107] netlink: 'syz.0.1219': attribute type 1 has an invalid length. [ 163.051619][T10107] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 163.098577][T10111] netlink: 'syz.4.1221': attribute type 1 has an invalid length. [ 163.263560][T10117] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ0 [ 163.539140][ T194] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.709076][T10144] FAULT_INJECTION: forcing a failure. [ 163.709076][T10144] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 163.729255][T10144] CPU: 1 UID: 0 PID: 10144 Comm: syz.4.1229 Not tainted 6.12.0-syzkaller-05480-gfcc79e1714e8 #0 [ 163.739721][T10144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 163.749822][T10144] Call Trace: [ 163.753124][T10144] [ 163.756072][T10144] dump_stack_lvl+0x241/0x360 [ 163.760801][T10144] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.766022][T10144] ? __pfx__printk+0x10/0x10 [ 163.770642][T10144] ? __pfx_lock_release+0x10/0x10 [ 163.775723][T10144] should_fail_ex+0x3b0/0x4e0 [ 163.780425][T10144] _copy_from_iter+0x21f/0x1e70 [ 163.785299][T10144] ? __virt_addr_valid+0x183/0x530 [ 163.790432][T10144] ? __pfx_lock_release+0x10/0x10 [ 163.795486][T10144] ? __alloc_skb+0x28f/0x440 [ 163.800101][T10144] ? __pfx__copy_from_iter+0x10/0x10 [ 163.805415][T10144] ? __virt_addr_valid+0x183/0x530 [ 163.810552][T10144] ? __virt_addr_valid+0x183/0x530 [ 163.815684][T10144] ? __virt_addr_valid+0x45f/0x530 [ 163.820827][T10144] ? __check_object_size+0x48e/0x900 [ 163.826142][T10144] netlink_sendmsg+0x73d/0xcb0 [ 163.830938][T10144] ? __pfx_netlink_sendmsg+0x10/0x10 [ 163.836249][T10144] ? aa_sock_msg_perm+0x91/0x160 [ 163.841217][T10144] ? __pfx_netlink_sendmsg+0x10/0x10 [ 163.846523][T10144] __sock_sendmsg+0x221/0x270 [ 163.851231][T10144] ____sys_sendmsg+0x52a/0x7e0 [ 163.856025][T10144] ? __pfx_____sys_sendmsg+0x10/0x10 [ 163.861331][T10144] ? __fget_files+0x2a/0x410 [ 163.865942][T10144] ? __fget_files+0x2a/0x410 [ 163.870563][T10144] __sys_sendmsg+0x269/0x350 [ 163.875175][T10144] ? __pfx_lock_release+0x10/0x10 [ 163.880220][T10144] ? __pfx___sys_sendmsg+0x10/0x10 [ 163.885363][T10144] ? __pfx_vfs_write+0x10/0x10 [ 163.890177][T10144] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 163.896532][T10144] ? do_syscall_64+0x100/0x230 [ 163.901318][T10144] ? do_syscall_64+0xb6/0x230 [ 163.906015][T10144] do_syscall_64+0xf3/0x230 [ 163.910538][T10144] ? clear_bhb_loop+0x35/0x90 [ 163.915240][T10144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.921152][T10144] RIP: 0033:0x7f63c1f7e819 [ 163.925603][T10144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.945235][T10144] RSP: 002b:00007f63c2cfa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 163.953701][T10144] RAX: ffffffffffffffda RBX: 00007f63c2135fa0 RCX: 00007f63c1f7e819 [ 163.961745][T10144] RDX: 0000000000008810 RSI: 0000000020000600 RDI: 0000000000000004 [ 163.969748][T10144] RBP: 00007f63c2cfa090 R08: 0000000000000000 R09: 0000000000000000 [ 163.977758][T10144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.985757][T10144] R13: 0000000000000000 R14: 00007f63c2135fa0 R15: 00007ffceecbed08 [ 163.993777][T10144] [ 164.009229][T10145] veth1_macvtap: left promiscuous mode [ 164.018603][ T5159] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 164.029914][ T5159] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 164.038757][ T5159] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 164.047367][ T5159] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 164.055631][ T5159] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 164.064947][ T5159] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 164.293649][T10158] __nla_validate_parse: 4 callbacks suppressed [ 164.293671][T10158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1232'. [ 164.321084][T10149] chnl_net:caif_netlink_parms(): no params data found [ 164.533582][T10149] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.551388][T10149] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.582396][T10149] bridge_slave_0: entered allmulticast mode [ 164.609864][T10149] bridge_slave_0: entered promiscuous mode [ 164.617795][T10149] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.625100][T10149] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.633230][T10149] bridge_slave_1: entered allmulticast mode [ 164.640222][T10149] bridge_slave_1: entered promiscuous mode [ 164.694397][T10171] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1235'. [ 164.700428][T10149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.765114][T10149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.815444][T10149] team0: Port device team_slave_0 added [ 164.863125][ T194] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.908142][T10149] team0: Port device team_slave_1 added [ 164.964359][T10149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.980070][T10149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.007954][T10149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.031509][T10149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.039927][T10149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.075278][T10149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.177701][T10149] hsr_slave_0: entered promiscuous mode [ 165.185396][T10149] hsr_slave_1: entered promiscuous mode [ 165.192536][T10149] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 165.200891][T10149] Cannot create hsr debugfs directory [ 165.255824][T10189] FAULT_INJECTION: forcing a failure. [ 165.255824][T10189] name failslab, interval 1, probability 0, space 0, times 1 [ 165.279661][T10189] CPU: 1 UID: 0 PID: 10189 Comm: syz.0.1240 Not tainted 6.12.0-syzkaller-05480-gfcc79e1714e8 #0 [ 165.290132][T10189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 165.300214][T10189] Call Trace: [ 165.303518][T10189] [ 165.306470][T10189] dump_stack_lvl+0x241/0x360 [ 165.311201][T10189] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.316424][T10189] ? __pfx__printk+0x10/0x10 [ 165.321044][T10189] ? __kmalloc_noprof+0xb0/0x400 [ 165.326003][T10189] ? __pfx___might_resched+0x10/0x10 [ 165.331330][T10189] should_fail_ex+0x3b0/0x4e0 [ 165.336050][T10189] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 165.342319][T10189] should_failslab+0xac/0x100 [ 165.347026][T10189] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 165.353301][T10189] __kmalloc_noprof+0xd8/0x400 [ 165.358091][T10189] ? apparmor_capable+0x13b/0x1b0 [ 165.363130][T10189] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 165.369201][T10189] genl_rcv_msg+0x802/0xec0 [ 165.373708][T10189] ? __pfx_genl_rcv_msg+0x10/0x10 [ 165.378750][T10189] ? __pfx_lock_acquire+0x10/0x10 [ 165.383771][T10189] ? __pfx_ieee802154_set_macparams+0x10/0x10 [ 165.389861][T10189] ? __pfx___might_resched+0x10/0x10 [ 165.395155][T10189] netlink_rcv_skb+0x1e3/0x430 [ 165.399916][T10189] ? __pfx_genl_rcv_msg+0x10/0x10 [ 165.404953][T10189] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 165.410275][T10189] genl_rcv+0x28/0x40 [ 165.414258][T10189] netlink_unicast+0x7f6/0x990 [ 165.419021][T10189] ? __pfx_netlink_unicast+0x10/0x10 [ 165.424313][T10189] ? __virt_addr_valid+0x183/0x530 [ 165.429443][T10189] ? __check_object_size+0x48e/0x900 [ 165.434739][T10189] netlink_sendmsg+0x8e4/0xcb0 [ 165.439498][T10189] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.444800][T10189] ? aa_sock_msg_perm+0x91/0x160 [ 165.449762][T10189] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.455046][T10189] __sock_sendmsg+0x221/0x270 [ 165.459729][T10189] ____sys_sendmsg+0x52a/0x7e0 [ 165.464491][T10189] ? __pfx_____sys_sendmsg+0x10/0x10 [ 165.469791][T10189] ? __fget_files+0x2a/0x410 [ 165.474391][T10189] ? __fget_files+0x2a/0x410 [ 165.479021][T10189] __sys_sendmsg+0x269/0x350 [ 165.483642][T10189] ? __pfx_lock_release+0x10/0x10 [ 165.488706][T10189] ? __pfx___sys_sendmsg+0x10/0x10 [ 165.493836][T10189] ? __pfx_vfs_write+0x10/0x10 [ 165.498615][T10189] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 165.504949][T10189] ? do_syscall_64+0x100/0x230 [ 165.509710][T10189] ? do_syscall_64+0xb6/0x230 [ 165.514387][T10189] do_syscall_64+0xf3/0x230 [ 165.518885][T10189] ? clear_bhb_loop+0x35/0x90 [ 165.523600][T10189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.529535][T10189] RIP: 0033:0x7fa71fd7e819 [ 165.533978][T10189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.553692][T10189] RSP: 002b:00007fa720abd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 165.562116][T10189] RAX: ffffffffffffffda RBX: 00007fa71ff35fa0 RCX: 00007fa71fd7e819 [ 165.570109][T10189] RDX: 0000000000008810 RSI: 0000000020000600 RDI: 0000000000000004 [ 165.578098][T10189] RBP: 00007fa720abd090 R08: 0000000000000000 R09: 0000000000000000 [ 165.586070][T10189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.594036][T10189] R13: 0000000000000000 R14: 00007fa71ff35fa0 R15: 00007fff02799098 [ 165.602028][T10189] [ 165.657566][ T194] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.766783][ T194] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.127469][ T194] bridge_slave_1: left allmulticast mode [ 166.138469][ T194] bridge_slave_1: left promiscuous mode [ 166.145580][ T194] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.162894][ T5159] Bluetooth: hci0: command tx timeout [ 166.189720][ T194] bridge_slave_0: left allmulticast mode [ 166.203934][ T194] bridge_slave_0: left promiscuous mode [ 166.208981][T10215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1249'. [ 166.209735][T10216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1249'. [ 166.218982][ T194] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.559213][ T194] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.570583][ T194] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.581466][ T194] bond0 (unregistering): Released all slaves [ 166.761814][T10222] FAULT_INJECTION: forcing a failure. [ 166.761814][T10222] name failslab, interval 1, probability 0, space 0, times 0 [ 166.786144][T10222] CPU: 1 UID: 0 PID: 10222 Comm: syz.0.1252 Not tainted 6.12.0-syzkaller-05480-gfcc79e1714e8 #0 [ 166.796618][T10222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 166.806695][T10222] Call Trace: [ 166.809975][T10222] [ 166.812927][T10222] dump_stack_lvl+0x241/0x360 [ 166.817638][T10222] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.822854][T10222] ? __pfx__printk+0x10/0x10 [ 166.827449][T10222] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 166.833438][T10222] ? __pfx___might_resched+0x10/0x10 [ 166.838739][T10222] ? kfree+0x1a0/0x440 [ 166.842804][T10222] should_fail_ex+0x3b0/0x4e0 [ 166.847480][T10222] should_failslab+0xac/0x100 [ 166.852161][T10222] ? __alloc_skb+0x1c3/0x440 [ 166.856770][T10222] kmem_cache_alloc_node_noprof+0x71/0x320 [ 166.862592][T10222] __alloc_skb+0x1c3/0x440 [ 166.867009][T10222] ? __pfx___alloc_skb+0x10/0x10 [ 166.871956][T10222] ? netlink_ack_tlv_len+0x6e/0x200 [ 166.877175][T10222] netlink_ack+0x13f/0xa30 [ 166.881610][T10222] ? __pfx_lock_acquire+0x10/0x10 [ 166.886652][T10222] ? __pfx_ieee802154_set_macparams+0x10/0x10 [ 166.892734][T10222] netlink_rcv_skb+0x262/0x430 [ 166.897498][T10222] ? __pfx_genl_rcv_msg+0x10/0x10 [ 166.902536][T10222] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 166.907837][T10222] genl_rcv+0x28/0x40 [ 166.911815][T10222] netlink_unicast+0x7f6/0x990 [ 166.916584][T10222] ? __pfx_netlink_unicast+0x10/0x10 [ 166.921860][T10222] ? __virt_addr_valid+0x183/0x530 [ 166.926977][T10222] ? __check_object_size+0x48e/0x900 [ 166.932265][T10222] netlink_sendmsg+0x8e4/0xcb0 [ 166.937037][T10222] ? __pfx_netlink_sendmsg+0x10/0x10 [ 166.942320][T10222] ? aa_sock_msg_perm+0x91/0x160 [ 166.947262][T10222] ? __pfx_netlink_sendmsg+0x10/0x10 [ 166.952552][T10222] __sock_sendmsg+0x221/0x270 [ 166.957233][T10222] ____sys_sendmsg+0x52a/0x7e0 [ 166.962010][T10222] ? __pfx_____sys_sendmsg+0x10/0x10 [ 166.967301][T10222] ? __fget_files+0x2a/0x410 [ 166.971898][T10222] ? __fget_files+0x2a/0x410 [ 166.976496][T10222] __sys_sendmsg+0x269/0x350 [ 166.981089][T10222] ? __pfx_lock_release+0x10/0x10 [ 166.986117][T10222] ? __pfx___sys_sendmsg+0x10/0x10 [ 166.991232][T10222] ? __pfx_vfs_write+0x10/0x10 [ 166.996014][T10222] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 167.002338][T10222] ? do_syscall_64+0x100/0x230 [ 167.007097][T10222] ? do_syscall_64+0xb6/0x230 [ 167.011768][T10222] do_syscall_64+0xf3/0x230 [ 167.016270][T10222] ? clear_bhb_loop+0x35/0x90 [ 167.020943][T10222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.026830][T10222] RIP: 0033:0x7fa71fd7e819 [ 167.031241][T10222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.050854][T10222] RSP: 002b:00007fa720abd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.059272][T10222] RAX: ffffffffffffffda RBX: 00007fa71ff35fa0 RCX: 00007fa71fd7e819 [ 167.067244][T10222] RDX: 0000000000008810 RSI: 0000000020000600 RDI: 0000000000000004 [ 167.075219][T10222] RBP: 00007fa720abd090 R08: 0000000000000000 R09: 0000000000000000 [ 167.083185][T10222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.091153][T10222] R13: 0000000000000000 R14: 00007fa71ff35fa0 R15: 00007fff02799098 [ 167.099133][T10222] [ 167.110999][T10223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1250'. [ 167.131867][T10223] gretap0: left allmulticast mode [ 167.138016][T10223] gretap0: left promiscuous mode [ 167.143534][T10223] bridge0: port 3(gretap0) entered disabled state [ 167.168925][T10223] bridge_slave_1: left allmulticast mode [ 167.178138][T10223] bridge_slave_1: left promiscuous mode [ 167.199819][T10223] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.227082][T10223] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.548966][T10149] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 167.580937][T10149] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 167.613378][T10149] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 167.633270][T10149] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 167.729285][T10243] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1258'. [ 167.791251][ T194] hsr_slave_0: left promiscuous mode [ 167.797465][ T194] hsr_slave_1: left promiscuous mode [ 167.809511][ T194] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.821251][ T194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.835889][ T194] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.844015][ T194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.866876][ T194] veth1_macvtap: left promiscuous mode [ 167.872844][ T194] veth0_macvtap: left promiscuous mode [ 167.878453][ T194] veth1_vlan: left promiscuous mode [ 167.885819][ T194] veth0_vlan: left promiscuous mode [ 168.252301][ T5159] Bluetooth: hci0: command tx timeout [ 168.301683][ T194] team0 (unregistering): Port device team_slave_1 removed [ 168.345253][ T194] team0 (unregistering): Port device team_slave_0 removed [ 168.786952][T10149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.840791][T10149] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.879650][ T4784] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.886872][ T4784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.935649][ T4804] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.942852][ T4804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.390921][T10274] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1268'. [ 169.662527][T10285] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1270'. [ 169.840144][T10291] No such timeout policy "syz0" [ 169.840602][ T4784] smc: removing ib device syz0 [ 169.887992][T10292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1273'. [ 169.918317][T10292] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1273'. [ 169.933677][T10290] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1273'. [ 169.983964][T10149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.128460][T10149] veth0_vlan: entered promiscuous mode [ 170.157614][T10149] veth1_vlan: entered promiscuous mode [ 170.262430][T10149] veth0_macvtap: entered promiscuous mode [ 170.297321][T10149] veth1_macvtap: entered promiscuous mode [ 170.339531][ T5159] Bluetooth: hci0: command tx timeout [ 170.386744][T10149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.441558][T10149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.468385][T10149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.479532][T10149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.512212][T10149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.532133][T10149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.558553][T10149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.577094][T10149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.588795][T10149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.639295][T10149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.651803][T10149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.662646][T10149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.674364][T10149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.684581][T10149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.730977][T10149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.741595][T10149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.766240][T10149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.782520][T10149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.799915][T10149] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.810908][T10149] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.830087][T10149] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.839146][T10149] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.215293][ T4804] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.223456][ T4804] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.291472][ T3772] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.310821][ T3772] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.347337][T10330] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1283'. [ 171.482696][T10334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1284'. [ 171.493721][T10334] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1284'. [ 171.674611][T10347] FAULT_INJECTION: forcing a failure. [ 171.674611][T10347] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.689688][T10347] CPU: 0 UID: 0 PID: 10347 Comm: syz.0.1287 Not tainted 6.12.0-syzkaller-05480-gfcc79e1714e8 #0 [ 171.700160][T10347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 171.710248][T10347] Call Trace: [ 171.713556][T10347] [ 171.716521][T10347] dump_stack_lvl+0x241/0x360 [ 171.721229][T10347] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.726466][T10347] ? __pfx__printk+0x10/0x10 [ 171.731087][T10347] ? __pfx_lock_release+0x10/0x10 [ 171.736154][T10347] ? __lock_acquire+0x1397/0x2100 [ 171.741214][T10347] should_fail_ex+0x3b0/0x4e0 [ 171.745940][T10347] _copy_from_user+0x2f/0xc0 [ 171.750539][T10347] kstrtouint_from_user+0xc6/0x190 [ 171.755647][T10347] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 171.761363][T10347] ? __pfx_lock_acquire+0x10/0x10 [ 171.766391][T10347] proc_fail_nth_write+0xaa/0x2d0 [ 171.771409][T10347] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 171.777298][T10347] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 171.782932][T10347] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 171.788560][T10347] vfs_write+0x2a3/0xd30 [ 171.792812][T10347] ? __pfx_vfs_write+0x10/0x10 [ 171.797580][T10347] ? __fget_files+0x2a/0x410 [ 171.802178][T10347] ? __fget_files+0x395/0x410 [ 171.806858][T10347] ? __fget_files+0x2a/0x410 [ 171.811448][T10347] ksys_write+0x18f/0x2b0 [ 171.815777][T10347] ? __pfx_ksys_write+0x10/0x10 [ 171.820624][T10347] ? do_syscall_64+0x100/0x230 [ 171.825385][T10347] ? do_syscall_64+0xb6/0x230 [ 171.830058][T10347] do_syscall_64+0xf3/0x230 [ 171.834556][T10347] ? clear_bhb_loop+0x35/0x90 [ 171.839231][T10347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.845129][T10347] RIP: 0033:0x7fa71fd7d2ff [ 171.849539][T10347] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 171.869140][T10347] RSP: 002b:00007fa720abd030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 171.877550][T10347] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa71fd7d2ff [ 171.885516][T10347] RDX: 0000000000000001 RSI: 00007fa720abd0a0 RDI: 0000000000000003 [ 171.893483][T10347] RBP: 00007fa720abd090 R08: 0000000000000000 R09: 0000000000000000 [ 171.901453][T10347] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 171.909422][T10347] R13: 0000000000000000 R14: 00007fa71ff35fa0 R15: 00007fff02799098 [ 171.917403][T10347] [ 171.959184][T10351] IPv6: sit2: Disabled Multicast RS [ 172.178219][T10361] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 172.179197][T10363] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1294'. [ 172.215695][T10363] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1294'. [ 172.264715][T10363] netlink: 'syz.0.1294': attribute type 3 has an invalid length. [ 172.272857][T10363] netlink: 'syz.0.1294': attribute type 2 has an invalid length. [ 172.383709][ T4804] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.547010][ T4804] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.740236][ T4804] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.914717][ T4804] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.117765][ T4804] bridge_slave_1: left allmulticast mode [ 173.128497][ T4804] bridge_slave_1: left promiscuous mode [ 173.145632][ T4804] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.181163][ T4804] bridge_slave_0: left allmulticast mode [ 173.202446][ T4804] bridge_slave_0: left promiscuous mode [ 173.208214][ T4804] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.369000][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 173.384733][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 173.395402][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 173.407754][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 173.416079][ T5852] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 173.427015][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 173.483807][T10405] netlink: 'syz.4.1303': attribute type 24 has an invalid length. [ 173.724928][ T4804] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.737477][ T4804] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.748593][ T4804] bond0 (unregistering): Released all slaves [ 174.123904][T10423] netlink: 'syz.0.1308': attribute type 1 has an invalid length. [ 174.136352][T10419] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 174.290356][T10421] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 174.314839][T10430] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 174.340811][T10429] IPv6: NLM_F_CREATE should be specified when creating new route [ 174.360932][T10400] chnl_net:caif_netlink_parms(): no params data found [ 174.394916][ T4804] hsr_slave_0: left promiscuous mode [ 174.421434][ T4804] hsr_slave_1: left promiscuous mode [ 174.435315][ T4804] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.456061][ T4804] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.475291][ T4804] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.508405][ T4804] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.537862][ T4804] veth1_macvtap: left promiscuous mode [ 174.557168][ T4804] veth0_macvtap: left promiscuous mode [ 174.564874][ T4804] veth1_vlan: left promiscuous mode [ 174.570192][ T4804] veth0_vlan: left promiscuous mode [ 174.630192][T10445] __nla_validate_parse: 11 callbacks suppressed [ 174.630208][T10445] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1313'. [ 174.667266][T10445] xt_hashlimit: Unknown mode mask 115, kernel too old? [ 175.095116][ T4804] team0 (unregistering): Port device team_slave_1 removed [ 175.137237][ T4804] team0 (unregistering): Port device team_slave_0 removed [ 175.522457][ T5860] Bluetooth: hci0: command tx timeout [ 175.739692][T10463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1318'. [ 175.753864][T10459] can: request_module (can-proto-5) failed. [ 175.914344][T10400] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.934796][T10400] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.949372][T10400] bridge_slave_0: entered allmulticast mode [ 175.965674][T10400] bridge_slave_0: entered promiscuous mode [ 175.997312][T10400] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.014543][T10400] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.028095][T10400] bridge_slave_1: entered allmulticast mode [ 176.050039][T10400] bridge_slave_1: entered promiscuous mode [ 176.098734][T10400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.111074][T10400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.157816][T10400] team0: Port device team_slave_0 added [ 176.175412][T10400] team0: Port device team_slave_1 added [ 176.200237][T10400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.207470][T10400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.233756][T10400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.246453][T10400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.254025][T10400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.280327][T10400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.321220][ T4804] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.354527][T10400] hsr_slave_0: entered promiscuous mode [ 176.362720][T10400] hsr_slave_1: entered promiscuous mode [ 176.369011][T10400] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.376875][T10400] Cannot create hsr debugfs directory [ 176.398858][ T4804] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.474930][ T4804] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.648311][T10487] xt_TCPMSS: Only works on TCP SYN packets [ 176.676077][ T4804] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.972689][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 176.982789][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 176.993900][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 177.003883][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 177.011523][ T5852] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 177.019040][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 177.334085][T10504] netlink: 340 bytes leftover after parsing attributes in process `syz.0.1327'. [ 177.400865][T10508] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1328'. [ 177.602692][ T5860] Bluetooth: hci0: command tx timeout [ 177.825551][ T4804] bridge_slave_1: left allmulticast mode [ 177.833600][ T4804] bridge_slave_1: left promiscuous mode [ 177.839842][ T4804] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.855863][ T4804] bridge_slave_0: left allmulticast mode [ 177.861654][ T4804] bridge_slave_0: left promiscuous mode [ 177.870456][ T4804] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.044017][ T5860] Bluetooth: hci2: command tx timeout [ 179.682669][ T5860] Bluetooth: hci0: command tx timeout [ 180.214265][ T4804] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.228128][ T4804] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.238415][ T4804] bond0 (unregistering): Released all slaves [ 180.250793][T10520] tc_dump_action: action bad kind [ 180.449812][T10533] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1336'. [ 180.750314][T10498] chnl_net:caif_netlink_parms(): no params data found [ 180.929039][ T4804] hsr_slave_0: left promiscuous mode [ 180.952602][ T4804] hsr_slave_1: left promiscuous mode [ 180.981172][ T4804] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.011996][ T4804] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.020884][ T4804] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.042842][ T4804] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.080502][ T4804] veth1_macvtap: left promiscuous mode [ 181.086402][ T4804] veth0_macvtap: left promiscuous mode [ 181.112145][ T4804] veth1_vlan: left promiscuous mode [ 181.117520][ T4804] veth0_vlan: left promiscuous mode [ 181.131262][ T5860] Bluetooth: hci2: command tx timeout [ 181.600632][ T4804] team0 (unregistering): Port device team_slave_1 removed [ 181.645260][ T4804] team0 (unregistering): Port device team_slave_0 removed [ 181.778131][ T5860] Bluetooth: hci0: command tx timeout [ 181.966610][T10562] delete_channel: no stack [ 182.099459][T10567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1345'. [ 182.123499][T10567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1345'. [ 182.140246][T10567] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1345'. [ 182.172332][T10574] batadv_slave_0: entered promiscuous mode [ 182.191394][T10574] batadv_slave_0: left promiscuous mode [ 182.205367][T10400] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 182.223344][T10575] netlink: 'syz.4.1347': attribute type 1 has an invalid length. [ 182.223715][T10577] netlink: 'syz.4.1347': attribute type 1 has an invalid length. [ 182.251437][T10400] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 182.331814][T10584] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 182.371547][T10400] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 182.429796][T10400] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 182.472829][T10586] sctp: [Deprecated]: syz.0.1351 (pid 10586) Use of struct sctp_assoc_value in delayed_ack socket option. [ 182.472829][T10586] Use struct sctp_sack_info instead [ 182.503584][T10498] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.510779][T10498] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.519298][T10498] bridge_slave_0: entered allmulticast mode [ 182.526618][T10498] bridge_slave_0: entered promiscuous mode [ 182.538381][T10498] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.546292][T10498] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.553665][T10498] bridge_slave_1: entered allmulticast mode [ 182.560683][T10498] bridge_slave_1: entered promiscuous mode [ 182.574825][T10591] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 182.628832][T10498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.652890][T10498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.677145][T10590] tc_dump_action: action bad kind [ 182.777110][T10498] team0: Port device team_slave_0 added [ 182.813412][T10498] team0: Port device team_slave_1 added [ 182.832900][T10595] netlink: 'syz.4.1354': attribute type 1 has an invalid length. [ 182.883465][T10598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1355'. [ 182.958016][T10498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.971816][T10498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.010826][T10498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.050987][T10595] bond3: entered allmulticast mode [ 183.066266][T10595] 8021q: adding VLAN 0 to HW filter on device bond3 [ 183.076710][T10595] bond2: (slave bond3): making interface the new active one [ 183.085498][T10595] bond2: (slave bond3): Enslaving as an active interface with an up link [ 183.110887][T10498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.120502][T10498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.147274][T10498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.202545][ T5860] Bluetooth: hci2: command tx timeout [ 183.248218][T10498] hsr_slave_0: entered promiscuous mode [ 183.273333][T10498] hsr_slave_1: entered promiscuous mode [ 183.287496][T10498] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 183.295518][T10498] Cannot create hsr debugfs directory [ 183.411617][T10400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.429456][T10620] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1361'. [ 183.507359][T10400] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.553601][ T3772] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.560751][ T3772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.591806][ T4804] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.599010][ T4804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.788506][T10400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.878477][T10400] veth0_vlan: entered promiscuous mode [ 183.888091][T10498] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 183.898134][T10498] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 183.908742][T10498] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 183.917699][T10498] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 183.935318][T10400] veth1_vlan: entered promiscuous mode [ 183.979331][T10400] veth0_macvtap: entered promiscuous mode [ 183.989870][T10400] veth1_macvtap: entered promiscuous mode [ 184.039917][T10400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.051598][T10400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.061464][T10400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.073212][T10400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.083391][T10400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.094052][T10400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.126296][T10631] xt_cgroup: invalid path, errno=-2 [ 184.137544][T10631] xt_cgroup: invalid path, errno=-2 [ 184.139616][T10400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.161679][T10400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.177776][T10400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.187977][T10400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.198642][T10400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.208780][T10400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.219279][T10400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.230929][T10400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.241200][T10400] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.251387][T10400] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.260333][T10400] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.269460][T10400] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.289866][T10498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.441556][T10498] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.482259][ T3772] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.489405][ T3772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.509110][ T4784] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.516335][ T4784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.545684][ T4804] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.554043][ T4804] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.655659][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.665160][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.717625][T10656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1372'. [ 185.019256][T10498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.123038][T10682] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1378'. [ 185.140321][T10498] veth0_vlan: entered promiscuous mode [ 185.159598][T10682] netlink: 'syz.4.1378': attribute type 1 has an invalid length. [ 185.177142][T10498] veth1_vlan: entered promiscuous mode [ 185.257753][T10498] veth0_macvtap: entered promiscuous mode [ 185.275913][T10498] veth1_macvtap: entered promiscuous mode [ 185.283976][ T5852] Bluetooth: hci2: command tx timeout [ 185.325677][T10498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.352564][T10498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.367965][T10498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.389598][T10498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.418809][T10498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.446340][T10498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.461718][T10498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.479574][T10498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.491148][T10498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.519300][T10498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.542396][T10498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.552389][T10498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.562998][T10498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.573274][T10498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.583853][T10498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.593849][T10498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.604961][T10498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.616850][T10498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.649963][T10498] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.660263][T10498] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.669389][T10498] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.678312][T10498] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.851065][ T4784] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.108963][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.132538][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.220265][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.250024][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.409141][ T5852] Bluetooth: hci1: command 0x0406 tx timeout [ 186.409153][ T5862] Bluetooth: hci3: command 0x0406 tx timeout [ 186.546367][T10725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1388'. [ 186.727633][ T5159] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 186.746870][ T5159] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 186.765582][ T5159] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 186.779929][ T5159] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 186.790805][ T5159] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 186.798390][ T5159] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 188.252844][ T4784] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.397456][ T4784] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.467915][T10751] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1393'. [ 188.481605][T10749] pimreg: entered allmulticast mode [ 188.489492][T10752] pimreg: left allmulticast mode [ 188.643960][ T4784] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.685346][T10760] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1396'. [ 188.717731][T10760] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1396'. [ 188.882826][ T5860] Bluetooth: hci0: command tx timeout [ 188.919415][T10732] chnl_net:caif_netlink_parms(): no params data found [ 188.989467][ T4784] bridge_slave_1: left allmulticast mode [ 188.995707][ T4784] bridge_slave_1: left promiscuous mode [ 189.001771][ T4784] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.037832][ T4784] bridge_slave_0: left allmulticast mode [ 189.058400][ T4784] bridge_slave_0: left promiscuous mode [ 189.073022][ T4784] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.525438][ T4784] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.537299][ T4784] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.547462][ T4784] bond0 (unregistering): Released all slaves [ 189.622979][T10732] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.630121][T10732] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.642322][T10732] bridge_slave_0: entered allmulticast mode [ 189.658757][T10732] bridge_slave_0: entered promiscuous mode [ 189.697563][T10732] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.705139][T10732] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.714955][T10732] bridge_slave_1: entered allmulticast mode [ 189.721608][T10732] bridge_slave_1: entered promiscuous mode [ 189.779741][T10732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.793811][T10732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.864931][T10732] team0: Port device team_slave_0 added [ 189.901389][T10732] team0: Port device team_slave_1 added [ 190.008962][ T4784] hsr_slave_0: left promiscuous mode [ 190.017480][ T4784] hsr_slave_1: left promiscuous mode [ 190.024524][ T4784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.034642][ T4784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.048092][ T4784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.056741][ T4784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.098445][ T4784] veth1_macvtap: left promiscuous mode [ 190.112250][ T4784] veth0_macvtap: left promiscuous mode [ 190.123505][ T4784] veth1_vlan: left promiscuous mode [ 190.134894][ T4784] veth0_vlan: left promiscuous mode [ 190.265651][ T5159] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 190.277468][ T5159] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 190.286397][ T5159] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 190.297464][ T5159] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 190.315614][ T5159] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 190.325402][ T5159] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 190.644930][ T4784] team0 (unregistering): Port device team_slave_1 removed [ 190.691548][ T4784] team0 (unregistering): Port device team_slave_0 removed [ 190.972575][ T5860] Bluetooth: hci0: command tx timeout [ 191.171117][T10732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.178966][T10732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.206378][T10732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.241519][T10732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.282185][T10732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.336489][T10732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.379511][T10820] netlink: 'syz.3.1410': attribute type 1 has an invalid length. [ 191.520063][T10732] hsr_slave_0: entered promiscuous mode [ 191.534402][T10732] hsr_slave_1: entered promiscuous mode [ 191.542692][T10732] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 191.551628][T10732] Cannot create hsr debugfs directory [ 191.567222][T10820] bond3 (unregistering): Released all slaves [ 191.731206][T10838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1415'. [ 191.813616][T10843] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 192.158709][ T4784] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.186344][T10861] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1421'. [ 192.222359][T10863] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1422'. [ 192.277313][ T4784] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.318935][T10805] chnl_net:caif_netlink_parms(): no params data found [ 192.402664][ T5860] Bluetooth: hci2: command tx timeout [ 192.437420][ T4784] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.541237][ T4784] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.571408][T10889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1426'. [ 192.590134][T10889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1426'. [ 192.663938][T10732] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 192.683464][T10805] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.692282][T10805] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.699535][T10805] bridge_slave_0: entered allmulticast mode [ 192.730540][T10805] bridge_slave_0: entered promiscuous mode [ 192.741409][T10732] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 192.766102][T10805] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.786141][T10805] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.793634][T10899] xt_TCPMSS: Only works on TCP SYN packets [ 192.799001][T10805] bridge_slave_1: entered allmulticast mode [ 192.810867][T10805] bridge_slave_1: entered promiscuous mode [ 192.848393][T10732] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 192.915703][T10732] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 192.947566][T10805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.017863][T10805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.042451][ T5860] Bluetooth: hci0: command tx timeout [ 193.069633][ T4784] bridge_slave_1: left allmulticast mode [ 193.079360][ T4784] bridge_slave_1: left promiscuous mode [ 193.086287][ T4784] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.095535][ T4784] bridge_slave_0: left allmulticast mode [ 193.101219][ T4784] bridge_slave_0: left promiscuous mode [ 193.107928][ T4784] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.401617][T10918] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20003 [ 193.489592][ T4784] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.503155][ T4784] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.515077][ T4784] bond0 (unregistering): Released all slaves [ 193.539093][T10805] team0: Port device team_slave_0 added [ 193.546371][T10910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1434'. [ 193.609820][T10805] team0: Port device team_slave_1 added [ 193.739776][T10927] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1438'. [ 193.782837][T10805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.789825][T10805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.847775][T10805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.855454][T10935] tipc: Failed to remove unknown binding: 66,1,1/4294967284:3886099739/3886099741 [ 193.870780][T10936] tipc: Failed to remove unknown binding: 66,1,1/4294967284:3886099739/3886099741 [ 193.876525][T10805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.887341][T10805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.917038][T10805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.076209][T10805] hsr_slave_0: entered promiscuous mode [ 194.093340][T10805] hsr_slave_1: entered promiscuous mode [ 194.114150][T10805] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 194.132335][T10805] Cannot create hsr debugfs directory [ 194.203221][ T4784] hsr_slave_0: left promiscuous mode [ 194.210403][ T4784] hsr_slave_1: left promiscuous mode [ 194.225067][ T4784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.243064][ T4784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.256824][ T4784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.271799][ T4784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.296930][ T4784] veth1_macvtap: left promiscuous mode [ 194.302983][ T4784] veth0_macvtap: left promiscuous mode [ 194.308590][ T4784] veth1_vlan: left promiscuous mode [ 194.315209][ T4784] veth0_vlan: left promiscuous mode [ 194.482600][ T5860] Bluetooth: hci2: command tx timeout [ 194.562569][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 194.569654][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.673822][T10960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1446'. [ 194.894097][ T4784] team0 (unregistering): Port device team_slave_1 removed [ 194.939196][ T4784] team0 (unregistering): Port device team_slave_0 removed [ 195.122265][ T5860] Bluetooth: hci0: command tx timeout [ 195.442091][T10965] sch_fq: defrate 0 ignored. [ 195.464869][T10968] netlink: 'syz.0.1448': attribute type 62 has an invalid length. [ 195.514595][T10967] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 195.589564][T10732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.717160][T10978] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1451'. [ 195.781616][T10732] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.869655][T10984] xt_bpf: check failed: parse error [ 195.908547][ T4804] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.915760][ T4804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.958951][T10988] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1455'. [ 195.971129][ T4804] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.978310][ T4804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.210170][T11000] syz.0.1458: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 196.252532][T11000] CPU: 0 UID: 0 PID: 11000 Comm: syz.0.1458 Not tainted 6.12.0-syzkaller-05480-gfcc79e1714e8 #0 [ 196.263007][T11000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 196.273092][T11000] Call Trace: [ 196.276399][T11000] [ 196.279354][T11000] dump_stack_lvl+0x241/0x360 [ 196.284065][T11000] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.289290][T11000] ? __pfx__printk+0x10/0x10 [ 196.293928][T11000] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 196.300375][T11000] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 196.303228][T10805] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 196.306892][T11000] warn_alloc+0x278/0x410 [ 196.317939][T11000] ? stack_depot_save_flags+0x29/0x830 [ 196.323411][T11000] ? __vmalloc_node_range_noprof+0x106/0x13f0 [ 196.329481][T11000] ? __pfx_warn_alloc+0x10/0x10 [ 196.334333][T11000] ? kasan_save_track+0x3f/0x80 [ 196.339182][T11000] ? __kasan_kmalloc+0x98/0xb0 [ 196.343940][T11000] ? xsk_setsockopt+0x4ea/0x950 [ 196.348791][T11000] ? do_sock_setsockopt+0x3af/0x720 [ 196.353986][T11000] ? __x64_sys_setsockopt+0x1ee/0x280 [ 196.359351][T11000] ? do_syscall_64+0xf3/0x230 [ 196.364030][T11000] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.370105][T11000] __vmalloc_node_range_noprof+0x126/0x13f0 [ 196.376018][T11000] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 196.382347][T11000] ? __kasan_kmalloc+0x98/0xb0 [ 196.387107][T11000] ? xskq_create+0x54/0x170 [ 196.391609][T11000] vmalloc_user_noprof+0x74/0x80 [ 196.396546][T11000] ? xskq_create+0xb6/0x170 [ 196.401043][T11000] xskq_create+0xb6/0x170 [ 196.405375][T11000] xsk_init_queue+0xa1/0x100 [ 196.410050][T11000] xsk_setsockopt+0x4ea/0x950 [ 196.414733][T11000] ? __pfx_xsk_setsockopt+0x10/0x10 [ 196.419932][T11000] ? __pfx_aa_sk_perm+0x10/0x10 [ 196.424790][T11000] ? aa_sock_opt_perm+0x79/0x120 [ 196.429751][T11000] ? __pfx_xsk_setsockopt+0x10/0x10 [ 196.434981][T11000] do_sock_setsockopt+0x3af/0x720 [ 196.440026][T11000] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 196.445593][T11000] ? __fget_files+0x395/0x410 [ 196.450268][T11000] ? __fget_files+0x2a/0x410 [ 196.454864][T11000] __x64_sys_setsockopt+0x1ee/0x280 [ 196.460066][T11000] do_syscall_64+0xf3/0x230 [ 196.464569][T11000] ? clear_bhb_loop+0x35/0x90 [ 196.469248][T11000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.475135][T11000] RIP: 0033:0x7fa71fd7e819 [ 196.479547][T11000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.499150][T11000] RSP: 002b:00007fa720abd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 196.507565][T11000] RAX: ffffffffffffffda RBX: 00007fa71ff35fa0 RCX: 00007fa71fd7e819 [ 196.515536][T11000] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 196.523509][T11000] RBP: 00007fa71fdf175e R08: 0000000000000004 R09: 0000000000000000 [ 196.531478][T11000] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.539467][T11000] R13: 0000000000000000 R14: 00007fa71ff35fa0 R15: 00007fff02799098 [ 196.547453][T11000] [ 196.584614][ T5860] Bluetooth: hci2: command tx timeout [ 196.589684][T10805] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 196.595879][T11000] Mem-Info: [ 196.599865][T11000] active_anon:3778 inactive_anon:0 isolated_anon:0 [ 196.599865][T11000] active_file:1518 inactive_file:38263 isolated_file:0 [ 196.599865][T11000] unevictable:768 dirty:48 writeback:0 [ 196.599865][T11000] slab_reclaimable:11157 slab_unreclaimable:101259 [ 196.599865][T11000] mapped:28744 shmem:1438 pagetables:661 [ 196.599865][T11000] sec_pagetables:0 bounce:0 [ 196.599865][T11000] kernel_misc_reclaimable:0 [ 196.599865][T11000] free:1338030 free_pcp:362 free_cma:0 [ 196.614385][T11006] netlink: 'syz.0.1458': attribute type 20 has an invalid length. [ 196.645427][T11000] Node 0 active_anon:15112kB inactive_anon:0kB active_file:6072kB inactive_file:152976kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114976kB dirty:192kB writeback:0kB shmem:4216kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11520kB pagetables:2644kB sec_pagetables:0kB all_unreclaimable? no [ 196.689372][T10805] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 196.706397][T11000] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 196.748888][T10805] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 196.825133][T11000] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 196.872399][T11000] lowmem_reserve[]: 0 2463 2464 0 0 [ 196.904090][T11018] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 196.911784][T11018] team0: Device ipvlan0 is already an upper device of the team interface [ 196.932297][T11000] Node 0 DMA32 free:1428472kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB active_anon:15272kB inactive_anon:0kB active_file:6072kB inactive_file:152412kB unevictable:1536kB writepending:188kB present:3129332kB managed:2550496kB mlocked:0kB bounce:0kB free_pcp:1880kB local_pcp:900kB free_cma:0kB [ 196.990941][T11000] lowmem_reserve[]: 0 0 0 0 0 [ 196.998906][T11000] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:564kB unevictable:0kB writepending:4kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:12kB free_cma:0kB [ 197.035690][T11000] lowmem_reserve[]: 0 0 0 0 0 [ 197.040506][T11000] Node 1 Normal free:3908104kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 197.074875][T11000] lowmem_reserve[]: 0 0 0 0 0 [ 197.079768][T11000] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 197.093589][T11000] Node 0 DMA32: 0*4kB 124*8kB (UME) 67*16kB (UME) 111*32kB (UME) 138*64kB (UME) 62*128kB (UME) 36*256kB (UM) 17*512kB (UME) 6*1024kB (UME) 6*2048kB (ME) 334*4096kB (M) = 1426800kB [ 197.112248][T11000] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 197.124589][T11000] Node 1 Normal: 184*4kB (UE) 47*8kB (UME) 45*16kB (UME) 199*32kB (UME) 100*64kB (UME) 36*128kB (UME) 13*256kB (UME) 9*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 946*4096kB (M) = 3908104kB [ 197.145305][T11000] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 197.154988][T11000] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 197.164752][T11000] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 197.174714][T11000] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 197.184334][T11000] 41285 total pagecache pages [ 197.189039][T11000] 0 pages in swap cache [ 197.193264][T11000] Free swap = 124996kB [ 197.197421][T11000] Total swap = 124996kB [ 197.201563][T11000] 2097051 pages RAM [ 197.205808][T11000] 0 pages HighMem/MovableOnly [ 197.210507][T11000] 427641 pages reserved [ 197.214883][T11000] 0 pages cma reserved [ 197.229315][T11022] netem: change failed [ 197.328253][T10732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.376470][T10805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.411175][T10805] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.450586][T10293] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.457770][T10293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.467016][T10293] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.474183][T10293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.541192][T10732] veth0_vlan: entered promiscuous mode [ 197.576545][T10732] veth1_vlan: entered promiscuous mode [ 197.670006][T10732] veth0_macvtap: entered promiscuous mode [ 197.680492][T10732] veth1_macvtap: entered promiscuous mode [ 197.728630][T10732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.751544][T10732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.764348][T10732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.774966][T10732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.785583][T10732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.796608][T10732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.807930][T10732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.838165][T10732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.869358][T10732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.886464][T10732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.899212][T10732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.913987][T10732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.925765][T10732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.936976][T10732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.957989][T10732] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.968269][T10732] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.992206][T10732] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.000935][T10732] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.020597][T10805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.068497][T11064] __nla_validate_parse: 4 callbacks suppressed [ 198.068515][T11064] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1470'. [ 198.174326][T11067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1471'. [ 198.201239][ T194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.202045][T10805] veth0_vlan: entered promiscuous mode [ 198.214995][ T194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.226154][T11067] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 198.233279][T11067] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 198.240201][T11067] bridge0: port 1(wlan1) entered disabled state [ 198.249165][T11067] bridge_slave_1: left allmulticast mode [ 198.255455][T11067] bridge_slave_1: left promiscuous mode [ 198.261220][T11067] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.316175][T11067] bond0: (slave bridge0): Releasing backup interface [ 198.407570][T10805] veth1_vlan: entered promiscuous mode [ 198.436168][T11071] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 198.450108][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.467323][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.556114][T10805] veth0_macvtap: entered promiscuous mode [ 198.566045][T10805] veth1_macvtap: entered promiscuous mode [ 198.601694][T10805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.621842][T10805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.638650][T10805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.649342][ T5860] Bluetooth: hci2: command tx timeout [ 198.655241][T10805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.665142][T10805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.676111][T10805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.686087][T10805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.696605][T10805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.708970][T10805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.718709][T10805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.729579][T10805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.739615][T10805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.750558][T10805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.760587][T10805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.771454][T10805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.781688][T10805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.792797][T10805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.804145][T10805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.890545][T11096] xt_CT: No such helper "pptp" [ 199.012280][T10805] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.021034][T10805] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.036938][T10805] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.046282][T10805] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.067195][T11105] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1481'. [ 199.082471][T11105] ip6gretap0: entered promiscuous mode [ 199.088792][T11105] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1481'. [ 199.284428][ T3772] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.359585][ T194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.375281][ T194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.397587][ T3772] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.430275][T10293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.439550][T10293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.606376][ T3772] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.879135][ T3772] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.219662][ T3772] bridge_slave_1: left allmulticast mode [ 200.227712][ T3772] bridge_slave_1: left promiscuous mode [ 200.246797][ T3772] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.279995][ T3772] bridge_slave_0: left allmulticast mode [ 200.312656][ T3772] bridge_slave_0: left promiscuous mode [ 200.318433][ T3772] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.462472][ T5159] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 200.474295][ T5159] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 200.487520][ T5159] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 200.504410][ T5159] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 200.513401][ T5159] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 200.520829][ T5159] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 200.814005][ T3772] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.825684][ T3772] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.836310][ T3772] bond0 (unregistering): Released all slaves [ 201.040669][T11124] chnl_net:caif_netlink_parms(): no params data found [ 201.110262][ T3772] hsr_slave_0: left promiscuous mode [ 201.116343][ T3772] hsr_slave_1: left promiscuous mode [ 201.129671][ T3772] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.137498][ T3772] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.149436][ T3772] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.157048][ T3772] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.177033][ T3772] veth1_macvtap: left promiscuous mode [ 201.183057][ T3772] veth0_macvtap: left promiscuous mode [ 201.188671][ T3772] veth1_vlan: left promiscuous mode [ 201.193995][ T3772] veth0_vlan: left promiscuous mode [ 201.460023][T11141] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1488'. [ 201.540293][ T5159] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 201.566761][ T5159] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 201.575357][ T5159] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 201.589026][ T5159] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 201.597648][ T5159] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 201.605541][ T5159] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 201.877862][ T3772] team0 (unregistering): Port device team_slave_1 removed [ 201.921026][ T3772] team0 (unregistering): Port device team_slave_0 removed [ 202.388340][T11124] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.397023][T11124] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.404717][T11124] bridge_slave_0: entered allmulticast mode [ 202.412495][T11124] bridge_slave_0: entered promiscuous mode [ 202.506750][T11124] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.521163][T11124] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.522614][T11162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1493'. [ 202.530018][T11124] bridge_slave_1: entered allmulticast mode [ 202.551395][T11124] bridge_slave_1: entered promiscuous mode [ 202.569246][ T5159] Bluetooth: hci0: command tx timeout [ 202.585123][T11162] netlink: 'syz.0.1493': attribute type 5 has an invalid length. [ 202.712490][T11124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.726466][T11124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.829707][T11124] team0: Port device team_slave_0 added [ 202.854788][T11124] team0: Port device team_slave_1 added [ 202.936713][T11173] ip6tnl2: entered promiscuous mode [ 202.944671][T11173] ip6tnl2: entered allmulticast mode [ 202.957246][T11124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.965717][T11124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.993561][T11124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.013048][T11124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.020035][T11124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.047012][T11124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.113758][T11124] hsr_slave_0: entered promiscuous mode [ 203.123280][T11124] hsr_slave_1: entered promiscuous mode [ 203.129467][T11124] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.137976][T11124] Cannot create hsr debugfs directory [ 203.261243][T11143] chnl_net:caif_netlink_parms(): no params data found [ 203.376875][ T4784] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.467417][T11196] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 203.476263][T11197] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 203.497451][ T4784] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.643182][ T4784] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.661333][T11143] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.683126][ T5159] Bluetooth: hci2: command tx timeout [ 203.689851][T11143] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.712332][T11143] bridge_slave_0: entered allmulticast mode [ 203.719294][T11143] bridge_slave_0: entered promiscuous mode [ 203.791679][ T4784] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.829404][T11211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1506'. [ 203.834026][T11216] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1509'. [ 203.848387][T11211] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1506'. [ 203.903367][T11143] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.936023][T11143] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.954413][T11143] bridge_slave_1: entered allmulticast mode [ 203.961421][T11143] bridge_slave_1: entered promiscuous mode [ 204.043796][T11228] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 204.106172][T11143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.150844][T11143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.298684][T11143] team0: Port device team_slave_0 added [ 204.321267][T11143] team0: Port device team_slave_1 added [ 204.497033][ T4784] bridge_slave_1: left allmulticast mode [ 204.513165][ T4784] bridge_slave_1: left promiscuous mode [ 204.518942][ T4784] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.564926][ T4784] bridge_slave_0: left allmulticast mode [ 204.580290][ T4784] bridge_slave_0: left promiscuous mode [ 204.587815][ T4784] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.646816][ T5159] Bluetooth: hci0: command tx timeout [ 204.794484][T11259] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1521'. [ 204.816644][T11259] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1521'. [ 204.837248][T11259] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1521'. [ 204.875650][T11259] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1521'. [ 205.117514][ T4784] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.129333][ T4784] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.140174][ T4784] bond0 (unregistering): Released all slaves [ 205.150245][T11143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.169719][T11143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.196651][T11143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.316895][T11143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.324111][T11143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.351243][T11143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.614481][T11143] hsr_slave_0: entered promiscuous mode [ 205.632521][T11143] hsr_slave_1: entered promiscuous mode [ 205.642456][T11143] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.652850][T11143] Cannot create hsr debugfs directory [ 205.725642][T11282] gretap1: entered allmulticast mode [ 205.762531][ T5159] Bluetooth: hci2: command tx timeout [ 205.783531][ T4784] hsr_slave_0: left promiscuous mode [ 205.822383][ T4784] hsr_slave_1: left promiscuous mode [ 205.828694][ T4784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.836675][ T4784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.845801][ T4784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.854427][ T4784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.875027][ T4784] veth1_macvtap: left promiscuous mode [ 205.880559][ T4784] veth0_macvtap: left promiscuous mode [ 205.886631][ T4784] veth1_vlan: left promiscuous mode [ 205.892078][ T4784] veth0_vlan: left promiscuous mode [ 206.296251][ T4784] team0 (unregistering): Port device team_slave_1 removed [ 206.340490][ T4784] team0 (unregistering): Port device team_slave_0 removed [ 206.722514][ T5159] Bluetooth: hci0: command tx timeout [ 206.744486][T11296] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1530'. [ 206.755663][T11297] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1530'. [ 206.893175][T11124] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 206.914391][T11307] netlink: 'syz.4.1534': attribute type 46 has an invalid length. [ 206.931292][T11124] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 206.977551][T11124] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 207.067080][T11124] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 207.132738][T11323] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1537'. [ 207.435864][T10293] tipc: Subscription rejected, illegal request [ 207.479776][T11124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.588343][T11124] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.620120][ T3772] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.627313][ T3772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.701287][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.708479][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.844061][ T5159] Bluetooth: hci2: command tx timeout [ 207.891458][T11321] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 207.926425][T11143] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 207.959148][T11143] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 207.984456][T11143] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 208.073789][T11357] veth13: entered allmulticast mode [ 208.102761][T11143] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 208.396353][T11143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.481408][T11124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.508766][T11143] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.546082][ T3772] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.553280][ T3772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.586415][T11371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.607635][ T3772] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.614807][ T3772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.743116][T11124] veth0_vlan: entered promiscuous mode [ 208.762355][T11124] veth1_vlan: entered promiscuous mode [ 208.810988][ T5159] Bluetooth: hci0: command tx timeout [ 208.825957][T11124] veth0_macvtap: entered promiscuous mode [ 208.864081][T11124] veth1_macvtap: entered promiscuous mode [ 208.909483][T11124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.923124][T11124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.933809][T11124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.944524][T11124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.954782][T11124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.966353][T11124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.977923][T11124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.006195][T11124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.030954][T11124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.041623][T11124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.055561][T11124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.072110][T11124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.083472][T11124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.094877][T11124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.135989][T11124] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.145102][T11124] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.155222][T11124] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.164866][T11124] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.261570][T11397] syz.0.1557 uses old SIOCAX25GETINFO [ 209.328292][T11143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.426503][T11399] IPVS: Error joining to the multicast group [ 209.455657][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.483824][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.522442][ T4804] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.536313][T11143] veth0_vlan: entered promiscuous mode [ 209.543065][T11407] netlink: 'syz.4.1561': attribute type 10 has an invalid length. [ 209.550913][T11407] __nla_validate_parse: 1 callbacks suppressed [ 209.550928][T11407] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1561'. [ 209.573795][ T4804] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.593459][T11407] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 209.616877][T11143] veth1_vlan: entered promiscuous mode [ 209.689073][T11143] veth0_macvtap: entered promiscuous mode [ 209.724516][T11143] veth1_macvtap: entered promiscuous mode [ 209.741440][T11143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.752391][T11143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.764892][T11143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.782715][T11143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.793088][T11143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.804157][T11143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.812530][T11416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1564'. [ 209.819520][T11143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.833670][T11143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.842335][T11416] netlink: 'syz.3.1564': attribute type 3 has an invalid length. [ 209.845594][T11143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.907002][T11143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.917861][T11143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.925657][ T5159] Bluetooth: hci2: command 0x0419 tx timeout [ 209.930935][T11143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.962082][T11143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.973403][T11143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.984780][T11143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.996663][T11143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.010824][T11143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.023837][T11143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.079028][T11143] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.112626][T11143] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.121379][T11143] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.159444][T11143] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.614671][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.685002][T11433] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1569'. [ 210.693476][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.702897][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.736262][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.780844][T11433] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1569'. [ 210.790206][ T4804] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.798657][ T4804] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.869312][T11424] ------------[ cut here ]------------ [ 210.875333][T11424] refcount_t: underflow; use-after-free. [ 210.881173][T11424] WARNING: CPU: 1 PID: 11424 at lib/refcount.c:28 refcount_warn_saturate+0x15a/0x1d0 [ 210.890797][T11424] Modules linked in: [ 210.894789][T11424] CPU: 1 UID: 0 PID: 11424 Comm: kbnepd bnep0 Not tainted 6.12.0-syzkaller-05480-gfcc79e1714e8 #0 [ 210.905484][T11424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 210.915818][T11424] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 210.922562][T11424] Code: e0 ec 60 8c e8 47 47 96 fc 90 0f 0b 90 90 eb 99 e8 6b 4e d5 fc c6 05 85 55 48 0b 01 90 48 c7 c7 40 ed 60 8c e8 27 47 96 fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 48 4e d5 fc c6 05 5f 55 48 0b 01 90 [ 210.942196][T11424] RSP: 0018:ffffc900031877c0 EFLAGS: 00010246 [ 210.948282][T11424] RAX: f478ba731e83d900 RBX: ffff8880351dd078 RCX: ffff888069bb9e00 [ 210.956275][T11424] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 210.964252][T11424] RBP: 0000000000000003 R08: ffffffff8155fe42 R09: fffffbfff1cfa898 [ 210.972232][T11424] R10: dffffc0000000000 R11: fffffbfff1cfa898 R12: ffff8880351dd060 [ 210.980188][T11424] R13: 1ffff11006a3ba0c R14: ffff8880351dd060 R15: ffffffff85fe66a0 [ 210.988390][T11424] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 210.997326][T11424] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 211.003912][T11424] CR2: 00007ffc7c6bcb18 CR3: 000000000e738000 CR4: 00000000003526f0 [ 211.011897][T11424] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 211.020063][T11424] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 211.028218][T11424] Call Trace: [ 211.031488][T11424] [ 211.034633][T11424] ? __warn+0x168/0x4e0 [ 211.038784][T11424] ? refcount_warn_saturate+0x15a/0x1d0 [ 211.044348][T11424] ? report_bug+0x2b3/0x500 [ 211.048842][T11424] ? refcount_warn_saturate+0x15a/0x1d0 [ 211.054396][T11424] ? handle_bug+0x60/0x90 [ 211.058710][T11424] ? exc_invalid_op+0x1a/0x50 [ 211.063396][T11424] ? asm_exc_invalid_op+0x1a/0x20 [ 211.068403][T11424] ? __pfx_klist_children_put+0x10/0x10 [ 211.073959][T11424] ? __warn_printk+0x292/0x360 [ 211.078712][T11424] ? refcount_warn_saturate+0x15a/0x1d0 [ 211.084624][T11424] klist_dec_and_del+0x3ec/0x3f0 [ 211.089559][T11424] ? __pfx_klist_children_put+0x10/0x10 [ 211.095114][T11424] klist_del+0xa7/0x110 [ 211.099263][T11424] device_del+0x2c9/0x9b0 [ 211.103598][T11424] ? __pfx_device_del+0x10/0x10 [ 211.108437][T11424] ? netdev_unregister_kobject+0x178/0x250 [ 211.114262][T11424] unregister_netdevice_many_notify+0x1859/0x1da0 [ 211.120876][T11424] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 211.127832][T11424] ? rcu_is_watching+0x15/0xb0 [ 211.133042][T11424] ? trace_contention_end+0x3c/0x120 [ 211.138321][T11424] ? __mutex_lock+0x37f/0xee0 [ 211.143006][T11424] ? __pfx_lock_acquire+0x10/0x10 [ 211.148043][T11424] ? unregister_netdev+0x12/0x30 [ 211.153033][T11424] unregister_netdevice_queue+0x303/0x370 [ 211.158763][T11424] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 211.165027][T11424] ? down_write+0x18c/0x220 [ 211.169529][T11424] ? __pfx_down_write+0x10/0x10 [ 211.174408][T11424] unregister_netdev+0x1c/0x30 [ 211.179184][T11424] bnep_session+0x2e3c/0x3030 [ 211.184116][T11424] ? __pfx_bnep_session+0x10/0x10 [ 211.189137][T11424] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 211.195045][T11424] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 211.201365][T11424] ? __pfx_woken_wake_function+0x10/0x10 [ 211.207005][T11424] ? __kthread_parkme+0x169/0x1d0 [ 211.212038][T11424] ? __pfx_bnep_session+0x10/0x10 [ 211.217049][T11424] kthread+0x2f0/0x390 [ 211.221317][T11424] ? __pfx_bnep_session+0x10/0x10 [ 211.226561][T11424] ? __pfx_kthread+0x10/0x10 [ 211.231144][T11424] ret_from_fork+0x4b/0x80 [ 211.235935][T11424] ? __pfx_kthread+0x10/0x10 [ 211.240523][T11424] ret_from_fork_asm+0x1a/0x30 [ 211.245356][T11424] [ 211.248367][T11424] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 211.255628][T11424] CPU: 1 UID: 0 PID: 11424 Comm: kbnepd bnep0 Not tainted 6.12.0-syzkaller-05480-gfcc79e1714e8 #0 [ 211.266192][T11424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 211.276227][T11424] Call Trace: [ 211.279488][T11424] [ 211.282407][T11424] dump_stack_lvl+0x241/0x360 [ 211.287069][T11424] ? __pfx_dump_stack_lvl+0x10/0x10 [ 211.292252][T11424] ? __pfx__printk+0x10/0x10 [ 211.296852][T11424] ? vscnprintf+0x5d/0x90 [ 211.301166][T11424] panic+0x349/0x880 [ 211.305046][T11424] ? __warn+0x177/0x4e0 [ 211.309188][T11424] ? __pfx_panic+0x10/0x10 [ 211.313598][T11424] ? ret_from_fork_asm+0x1a/0x30 [ 211.318530][T11424] __warn+0x34b/0x4e0 [ 211.322498][T11424] ? refcount_warn_saturate+0x15a/0x1d0 [ 211.328038][T11424] report_bug+0x2b3/0x500 [ 211.332353][T11424] ? refcount_warn_saturate+0x15a/0x1d0 [ 211.337886][T11424] handle_bug+0x60/0x90 [ 211.342023][T11424] exc_invalid_op+0x1a/0x50 [ 211.346514][T11424] asm_exc_invalid_op+0x1a/0x20 [ 211.351350][T11424] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 211.357491][T11424] Code: e0 ec 60 8c e8 47 47 96 fc 90 0f 0b 90 90 eb 99 e8 6b 4e d5 fc c6 05 85 55 48 0b 01 90 48 c7 c7 40 ed 60 8c e8 27 47 96 fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 48 4e d5 fc c6 05 5f 55 48 0b 01 90 [ 211.377104][T11424] RSP: 0018:ffffc900031877c0 EFLAGS: 00010246 [ 211.383155][T11424] RAX: f478ba731e83d900 RBX: ffff8880351dd078 RCX: ffff888069bb9e00 [ 211.391108][T11424] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 211.399061][T11424] RBP: 0000000000000003 R08: ffffffff8155fe42 R09: fffffbfff1cfa898 [ 211.407013][T11424] R10: dffffc0000000000 R11: fffffbfff1cfa898 R12: ffff8880351dd060 [ 211.414969][T11424] R13: 1ffff11006a3ba0c R14: ffff8880351dd060 R15: ffffffff85fe66a0 [ 211.422926][T11424] ? __pfx_klist_children_put+0x10/0x10 [ 211.428465][T11424] ? __warn_printk+0x292/0x360 [ 211.433221][T11424] klist_dec_and_del+0x3ec/0x3f0 [ 211.438154][T11424] ? __pfx_klist_children_put+0x10/0x10 [ 211.443684][T11424] klist_del+0xa7/0x110 [ 211.447828][T11424] device_del+0x2c9/0x9b0 [ 211.452147][T11424] ? __pfx_device_del+0x10/0x10 [ 211.456979][T11424] ? netdev_unregister_kobject+0x178/0x250 [ 211.462773][T11424] unregister_netdevice_many_notify+0x1859/0x1da0 [ 211.469178][T11424] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 211.475922][T11424] ? rcu_is_watching+0x15/0xb0 [ 211.480672][T11424] ? trace_contention_end+0x3c/0x120 [ 211.485943][T11424] ? __mutex_lock+0x37f/0xee0 [ 211.490603][T11424] ? __pfx_lock_acquire+0x10/0x10 [ 211.495612][T11424] ? unregister_netdev+0x12/0x30 [ 211.500543][T11424] unregister_netdevice_queue+0x303/0x370 [ 211.506248][T11424] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 211.512471][T11424] ? down_write+0x18c/0x220 [ 211.516961][T11424] ? __pfx_down_write+0x10/0x10 [ 211.521799][T11424] unregister_netdev+0x1c/0x30 [ 211.526548][T11424] bnep_session+0x2e3c/0x3030 [ 211.531228][T11424] ? __pfx_bnep_session+0x10/0x10 [ 211.536235][T11424] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 211.542113][T11424] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 211.548427][T11424] ? __pfx_woken_wake_function+0x10/0x10 [ 211.554044][T11424] ? __kthread_parkme+0x169/0x1d0 [ 211.559058][T11424] ? __pfx_bnep_session+0x10/0x10 [ 211.564084][T11424] kthread+0x2f0/0x390 [ 211.568160][T11424] ? __pfx_bnep_session+0x10/0x10 [ 211.573182][T11424] ? __pfx_kthread+0x10/0x10 [ 211.577763][T11424] ret_from_fork+0x4b/0x80 [ 211.582163][T11424] ? __pfx_kthread+0x10/0x10 [ 211.586738][T11424] ret_from_fork_asm+0x1a/0x30 [ 211.591523][T11424] [ 212.676637][T11424] Shutting down cpus with NMI [ 212.681668][T11424] Kernel Offset: disabled [ 212.686121][T11424] Rebooting in 86400 seconds..