last executing test programs: 1m40.472922421s ago: executing program 0 (id=259): r0 = socket$rds(0x15, 0x5, 0x0) getsockopt(r0, 0x1, 0x24, 0x0, &(0x7f0000000300)) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x56, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x88}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1fb6}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) 1m26.40162899s ago: executing program 0 (id=259): r0 = socket$rds(0x15, 0x5, 0x0) getsockopt(r0, 0x1, 0x24, 0x0, &(0x7f0000000300)) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x56, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x88}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1fb6}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) 1m8.318068451s ago: executing program 0 (id=259): r0 = socket$rds(0x15, 0x5, 0x0) getsockopt(r0, 0x1, 0x24, 0x0, &(0x7f0000000300)) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x56, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x88}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1fb6}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) 56.403567753s ago: executing program 0 (id=259): r0 = socket$rds(0x15, 0x5, 0x0) getsockopt(r0, 0x1, 0x24, 0x0, &(0x7f0000000300)) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x56, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x88}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1fb6}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) 44.56826585s ago: executing program 0 (id=259): r0 = socket$rds(0x15, 0x5, 0x0) getsockopt(r0, 0x1, 0x24, 0x0, &(0x7f0000000300)) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x56, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x88}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1fb6}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) 2.277263915s ago: executing program 4 (id=1793): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x64, 0x0, @dev}, 0x10, 0x0}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1}, 0x48) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000100)=0x9) r3 = epoll_create(0x80) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) sendto$inet(r4, &(0x7f0000000200)='@', 0x1, 0x0, &(0x7f0000000380)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000780)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000007c0)=0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x5}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2}, 0x8}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r6}, 0x57) shutdown(r4, 0x1) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000040)=0x90) socket$nl_route(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r8}, &(0x7f0000000440), &(0x7f0000000480)=r7}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f00000000c0)={r8, &(0x7f0000000100), 0x20000000}, 0x20) 1.71626539s ago: executing program 3 (id=1804): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x8, 0x8, 0x8, 0x8, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2}, 0x48) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=@ipv4_delroute={0x20, 0x18, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x8}, [@RTA_METRICS={0x4}]}, 0x20}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb}}]}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @mcast2, 0xc}, 0x1c) (async, rerun: 64) r5 = socket$inet6(0xa, 0x6, 0x0) (rerun: 64) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x2}, 0x4}, 0x1c) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) recvmsg(r6, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x2000) (async, rerun: 32) socket$rds(0x15, 0x5, 0x0) (rerun: 32) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000040000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200640000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000003800038034000080080003400000000228000b80100001800c000100636f756e746572", @ANYRES8, @ANYRES64=r8], 0xf8}}, 0x0) (async) read(r3, &(0x7f0000000080)=""/26, 0x1a) 1.693984787s ago: executing program 1 (id=1805): socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000080)={0x0, @in6={{0xa, 0x0, 0x0, @remote, 0x52c0}}}, &(0x7f0000000140)=0x98) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11c21d0005000000", 0x29}], 0x1) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x5, 0x211b, 0x41a, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000100), 0x1003, r5}, 0x38) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}, 0x38) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000001740)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001700)={&(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x1384}, 0x1, 0x0, 0x0, 0x4}, 0x24000041) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="11ca00000000000000003f00000008000300", @ANYRES32=r12, @ANYBLOB="14005e8808540001000310902e00001200000000"], 0x30}}, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r9, &(0x7f0000001880)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001840)={&(0x7f00000031c0)=ANY=[@ANYRESDEC=r2, @ANYRESOCT=r1, @ANYRES8=r13, @ANYRES32=r8, @ANYRES8=r9, @ANYRES64, @ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="e0aa1a3627e8b992765d5bf776847db2d6ff96197b7738d5eaf1c05015d37e957a0ebc2442571b7848266d3e9a6b6cc1d0071feb2316daf080fe3ddeab2e534294687f4cfd63228bec5325706872673d6c65fe92a4b108338675f91895465c6dc46e2bd547a40ed9c37d02b592e86e8d0a8601b5cfeb0a78ed95b19280d7eac41f7d9312a29e6ca713c26dcac894ad8ca42474f4be37d5a5016b1b6ecab6071023f5ef3d324b1c141c8c29bfae57", @ANYRES16=r2], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003180), r7) r15 = socket$rds(0x15, 0x5, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x38}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r15, 0x114, 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r10, &(0x7f00000016c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r14, 0x300, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x5a}}}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004010) ioctl$sock_SIOCGIFINDEX_80211(r15, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001940)=ANY=[@ANYBLOB="3000000051f704e871f2d20a475e8c43d798c7ccea2b4db3941e160da707bf78d2b6c3825d00d82b1d53773335ba7aed67b41f39bb34c453ae20ab5c7e3ae118a399295e7b327b7e88edf32539874ca6ba643f9d70a1861fe7988757a3bdfd79669374fa1ce5982c", @ANYRES16=r8, @ANYBLOB="050400000000feffffff6600000008000300", @ANYRES32=r16, @ANYBLOB="0800b700ad000000080026008a0900000400b800"], 0x30}}, 0x0) 1.587742581s ago: executing program 2 (id=1806): r0 = socket$pptp(0x18, 0x1, 0x2) (async) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={0x0}, &(0x7f0000000300)=0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000000a4f1c0000000000000000020000000900010073797a300000000008000240000000020900010073797a310000000014000000110001"], 0x5c}}, 0x0) (async) sendmsg$NFT_MSG_GETSET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000000a0a010200000000000000000200000009000133e0bf2b860b51c92d17364ea8007279923100000000"], 0x20}}, 0x0) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private0}}, &(0x7f0000000480)=0xe8) r7 = getgid() bind$inet6(r1, &(0x7f0000000540)={0xa, 0x4e22, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xa4}, 0x1c) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)="2a2b6889d098b9504acf10073ceab5badf43cf9b995e9e20846125baf378788fb05fdfc3729d3b7d786eeaef45f17686f9acc69dea43bb66d8560ac4634be96b742217158669bde4e17cce7d7dbe457a1356b20ad184de5e77a33e47d2", 0x5d}], 0x1, &(0x7f0000000d40)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB='\x00\x00C\x00\x00'], 0x48, 0x40080}, 0x0) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x17, &(0x7f0000000140)=0xe70, 0x4) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r9 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg(r9, &(0x7f0000003040)={&(0x7f0000001a00)=@qipcrtr={0x2a, 0xffffffff, 0x7ffe}, 0x80, 0x0}, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r10, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) (async) bind$bt_l2cap(r8, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x6011, r11, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r11, 0xd1383000) ioctl$FS_IOC_RESVSP(r11, 0x40305829, &(0x7f0000000040)={0x1100, 0x2, 0x8, 0x10003}) (async) getsockopt$bt_l2cap_L2CAP_LM(r11, 0x6, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) (async) r12 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r12, 0x1, 0x22, &(0x7f0000000000)=0x6, 0x4) (async) sendto(r12, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x4000000, 0x0, 0x0) (async) recvmmsg(r12, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 1.527889559s ago: executing program 2 (id=1807): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x4, 0x0, &(0x7f0000000040)) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000100)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000600008000f0fffeffe809005300fff5dd00000010000100080c10000000ffffffffffff", 0x58}, {&(0x7f0000000000)="4fde69c51689001024f58780812d0b47e86e684b0fd1", 0x16}], 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000009060300000000000000000003000000040008800500010007000000a90009400000000f0900020073797a3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) 1.428457792s ago: executing program 2 (id=1808): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x0, 0xfffffffffffffff8, 0x40}) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{}, &(0x7f0000000140), &(0x7f00000002c0)}, 0x20) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0xfecc) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x1c}}, 0x0) (async) r3 = socket$nl_crypto(0x10, 0x3, 0x15) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300000000000000000000007368613235362d61767832"], 0xe0}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async) sendmsg$nl_crypto(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x44040) (async) syz_emit_ethernet(0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000640)={'vcan0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x3000002, 0x10, r4, 0xf9c1d000) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680)={0x1}, 0x4) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000006c0)={0xffffffffffffffff, 0x5, 0x28}, 0xc) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000009000000b7040000000000008500000033000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200001f000000b703000000000000850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{}, &(0x7f0000000700), &(0x7f0000000740)='%+9llu \x00'}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000008c0)={{0x1}, &(0x7f0000000840), &(0x7f0000000880)='%pK \x00'}, 0x20) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x5, 0x8}, 0xc) 1.223800918s ago: executing program 4 (id=1809): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_queued\x00', 0x26e1, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x24, r2, 0x41, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x401}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x50) (async) close(r0) (async) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) (async, rerun: 64) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="80fd"], 0x9) (rerun: 64) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x804004d8}, 0xc, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="bc04000000050500000000000000000000000006540201000000000007000000d40301000700030073797a3000000000000000000000000000000000000000000000000000000000993033c3f59272b975d78ebc84fd5e27c3b9ba80d4f175b5106c4656e1bb9c908b0611e83bbdc17865e4a6f555dff373bfe3c4261751f382b1856402179ebbdb0700050002000000000000000006000002000000020000000300060001000000020000000f00000001000000d20000000070810002000000040000000800020000000000020000000700fcff010000000a000000060081000300000000004000610000100000000021ed000000000400000000000100000000040000000000000d0000000800070003000000070000000100e2cb02000000160000000700000001000000010400000100090000000000e7da0000c600fdff000000000100008007000004020000000900000000000a0802000000080000000800300103000000060000000400040003000000020000000180050003000000120000000008ad36030000000800000002005c00010000000400000075090600010000000000000000200c00030000000d0000000300becd03000000680000005f0096040100000004000000d7bb810001000000c59b00000100ca72030000004e39000004000300e30000000200000008000200010000000500000001000900010000000400000000107b0000000000090000000008cf1f02000000070000000010ff010100000009000000ff01030000000000040000400300010101000000f2ffffff0400f8ff00000000b70900000600050001000000070000000400ff0702000000001000005402010001000000ad5c0000010606000700050073797a3000000000000000000000000000000000000000000000000000000000b0c4f95796e6ae35b0d6c355811d10cd3bf243861fec07394ab93126b4b581bd2eebb06c0d422c5e4244d4fe292230d436a801f791c828dc6ed0d4f98c29e813380eaa3b0000000009000000050000000000000006000000080001ff0300000001000000b1570500000000000800000008000500010000000d0000005a0d0b000200000008000000000000000000000000080000040010000200000006000000030008000300000000100000808b00010300000043d90000eb070200000000002fba0000860d410003000000ba0c00000400070000000000000004000008fcff02000000060000000600080000000000060000000400f900030000001bffffff0600080003000000070000000200040000000000080000000300d0fdffffff000100000006000700020000000000008004008900020000000e00000003000200030000003c0000007a05ff7f0100000007000000b4fcf8ff0200000009000000ffff0300020000000100000000010900020000000180000004000300030000000200000040000b000200000008000000a600810000000000090000000200aaca0300000002000000010000020200000003000000ff0f070003000000060000000500ae0001000000ff0700000500000001000000090000000300a00002000000090000000400000102000000fc0d10640800040001000000040000004100000000000000080000000400fe540300000000080000f4ff000403000000040000005da518031373206633288938705586f5b681b3f17175c8db983554262efd1d1db30799503ead5992233479ecfbad36ced4cdb25c7017a40e5498e08739f56d6b5a99c8f7608315e478c76e5561f05a91113ebc9f73025c426c5c0a29e20e5971646dc74632c4b65e6d7f26b44969834da2b0bed01a9700a92c33a7727ca142756a13c29b9822107f0948404b2b8bf5126edd751e685520f59f1920e6186d74c5741237bedd29fe3c00660feea91806933eb2815ca356e73a3d24a85e85d3eeb0f7acdc15936ce8355b0e563993"], 0x4bc}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="180000000100000000000000000000007112110000000000950000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64) socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r3}, 0x10) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[], 0x40}}, 0x0) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) (async, rerun: 32) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) ioctl$HCIINQUIRY(r6, 0x400448dd, &(0x7f0000000240)) (async) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x20001400) (async) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6f94f90324fc60100002000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) (async) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$AUTOFS_IOC_READY(r8, 0x400442c9, 0xf3) 1.157737039s ago: executing program 1 (id=1810): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000850000009e00000095"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0xad, &(0x7f00000003c0)=""/173}, 0x90) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800900010068617368000000002c00028008000640e80000ff08000140000000030800044020000003080003400000000408000240000000120900010073797a30000000000900020073797a32"], 0x94}}, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xf, &(0x7f0000000180)=@raw=[@map_idx={0x18, 0x7, 0x5, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x31ff}, @generic={0xf, 0x3, 0x5, 0x1000, 0x6}, @generic={0xb, 0x7, 0x1, 0x5, 0x8df}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1}, @map_fd={0x18, 0x4, 0x1, 0x0, r1}, @ldst={0x3, 0x0, 0x0, 0x4, 0x4, 0x1, 0x4}, @jmp={0x5, 0x0, 0xa, 0x2, 0x6, 0x18, 0xffffffffffffffff}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xd}, @ldst={0x2, 0x3, 0x4, 0x3, 0x1, 0xc, 0x1}], &(0x7f0000000240)='GPL\x00', 0xfffffbff, 0xa, &(0x7f0000000280)=""/10, 0x41100, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x10, 0x6, 0x68}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f00000003c0)=[{0x2, 0x3, 0x1, 0xa}, {0x2, 0x1, 0x2, 0x6}, {0x3, 0x5, 0x7, 0x4}, {0x0, 0x5, 0xd, 0x5}], 0x10, 0x5d45}, 0x90) 1.135546275s ago: executing program 2 (id=1811): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0xb6, 0x4, 0x2813}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x100) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 1.07172073s ago: executing program 3 (id=1812): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010100}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x4000000, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @empty, 0x400}, 0x1c) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\n\x00\x00\x00', @ANYBLOB="14000200000000000000000000000000000000011400060000000000ff7f000000000000000000"], 0x40}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x40000080806, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000b5ce1e0c677ec463cae39e46d2ce67bb542d4ddf19274e37529f1b61f2403c40e3d6c5de18a305a2e9f19af14fd267022367d100bb590aab7e78e01ef9eac6f6b70329051c5f3cc52c88f27143ac5d611e0ec9981642426d11993dea6ac8570d61a3ce7d93b4eacbffd0f68c3de66a97afd73280bae70bf11493315df5b09947dceeb07f9966faf65041"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r6}, 0x10) sendmsg$NBD_CMD_CONNECT(r5, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x18) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)={0x34, r8, 0x1, 0x0, 0x25dfdbfc, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}]}, 0x34}}, 0x0) sendmsg$NL802154_CMD_SET_PAN_ID(r7, 0x0, 0x20004048) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, r3) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x2, 0x4, 0x1, {0xa, 0x4e22, 0x5, @rand_addr=' \x01\x00', 0x6}}}, 0x32) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="240000001a000100000000000000000002000000000000000000000006001ed452b5f34d4eccc78d6317c6ec521171b697930b55eaa472a352771b43141d7e88d29c15c8ae618f47e434b091abc6c49485dcdd1f1ce84c9dda231d1ffbbff67d5eea95e22fea1dd3e28d8717a976ae62bc78e5262faebc3fbcf185fd7d87e08b8c2445a9b1a8f2d23ba97120f4150b57c68075347ce29783a956f38fdeace57aea47e1f44d9ed18e6fae66014146204265749c77d06006d3c27690b854c402d4bddcbcfd08676f2c171b309de66b357cf30f0b4739edf7c86c530d03224f546622e3264b9873f359561e20e6b7565870cff2934063ff"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x80) sendmsg$IPSET_CMD_LIST(r10, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12, 0x0) socket(0x2a, 0x2, 0x0) 1.023757702s ago: executing program 4 (id=1813): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1}, 0x0, 0x0}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x309, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x5, 0x6, 0x1, 0x0, 'R'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x82}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00'}, 0x90) 955.203456ms ago: executing program 1 (id=1814): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0xfffffffffffffffe) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_FIOGETOWN(r3, 0x8903, 0xfffffffffffffffe) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$sock(r4, &(0x7f0000000bc0)=[{{&(0x7f00000001c0)=@phonet={0x23, 0xaa, 0x8, 0x5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000340)="7448a5364234d8373718925f4cf6d81c8fd1d01ed863edaedbbe0505bbfb41d2566c84ef3808a8d22da8c8f3c64531ae40f40fe948ab36b472f1e0b41bcc5b12c286148230d1de8bf3690f9f6b6f0917f5ba3004b94b6566d451b900ad45b660118a704dd27eba3cf25e2baa0d49ed56ee61435c78968fec5fcae98cdaac7244655faf16f9891a5d8ad11c168fd77b4aebd1a349569670dbcd39b130", 0x9c}, {&(0x7f0000000280)="214b0117418ff3f1dc5b4ffdb7d5127fdb974e9d5f8c052093be3bdd7efa05fbf19205bd254a4a9f743c7722224d34fb22e17eb0e7d066a21b511944f3c60ebc5d9a20f0b4425187309793ba1e1beea3657b322b0aab8defee2eadd81209f3575feeeff68f57052a8277a10e0e4077033c7db49f0915f6ad2c31a95ebb9f066628dfaa3fbde852547b469fea2cdce53f909fb65839167fddc2a4af35bfb0dc4398315f5816040a28aa", 0xa9}], 0x2, &(0x7f0000000780)}}, {{&(0x7f0000000500)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e20, 0x2}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000880)="10d1c55bd55a4c5ea71d154cefbd03cddbb246098e85f7751f042ccc1c325982359b7ea9c16e23ca4e9bb4164a87b73c90db76e7ed0edeb3e66f1d5646808ee9be02de01b2d34a8851750d68403e297f5f3757c8270a440bfa2a776448e23d096851c53cf3f7566337d55c6e26930a086fe3ee9c7c8ef9b973ac144af8a0f40e07dbe6e21d5e4479fde8e331d8e75b2956abe98c88873a1d5b3d88581c5d92a47b4c328c5dba69048b3c90d35f3d6607df72180da13124f374755f4c0579cd083a7f4adb50e6dbd6ce40", 0xca}, {&(0x7f0000000080)="5cb31fce0ddcc9d4b0aaeb105365a537a474e1a53532f92057dcccaa3405b73e7c0766f1bd6e3c40fa31db50ed92743f26c2", 0x32}, {&(0x7f0000000a40)="5b6249da0b4d915394628ba148b8b948d96e2d030315526e6347fa30b213b7235d7cbd0077d8293ad187dfdfb86e05666d5c35b5d8326ab90bbd2e3f41e7404927db4dc26098b393b5d405000bff369080983ea53276325fbffabf2e9f6cdbd8cde6b487d52d97d4d7eaa9ad41ec2062dae0997ec87379c7add8b91165", 0x7d}], 0x3, &(0x7f0000000ac0)=[@mark={{0x14, 0x1, 0x24, 0x7ff}}, @txtime={{0x18, 0x1, 0x3d, 0xcf}}, @timestamping={{0x14, 0x1, 0x25, 0xabc0}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x80000000}}, @mark={{0x14, 0x1, 0x24, 0xe8}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffb}}, @txtime={{0x18, 0x1, 0x3d, 0x8000}}, @mark={{0x14, 0x1, 0x24, 0x6}}], 0xd8}}], 0x2, 0xc4) (async) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000015c0)=@mangle={'mangle\x00', 0x10, 0x6, 0x5b8, 0x0, 0x418, 0x348, 0x278, 0x418, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28, 'HL\x00', 0x0, {0x3}}}, {{@ipv6={@dev, @loopback, [], [], 'pim6reg\x00', 'veth1_macvtap\x00'}, 0x0, 0x180, 0x1a8, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @common=@dst={{0x48}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x618) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1f, 0x4, 0x6}, 0x48) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000300000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'bridge_slave_0\x00', 0x0}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r10, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r11, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000010000100760100000475000000000000", @ANYRES32=r7, @ANYBLOB="9a"], 0x20}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) (async, rerun: 32) r13 = socket$qrtr(0x2a, 0x2, 0x0) (rerun: 32) connect$qrtr(r13, &(0x7f0000000040), 0xc) r14 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r14, &(0x7f0000000880)={0x2a, 0x1, 0x4000}, 0xc) 867.797757ms ago: executing program 3 (id=1815): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x2d8, 0x1f0, 0x0, 0x108, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) syz_emit_ethernet(0x8a, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000300"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012800b00010067656e6576650000040002800c001a80"], 0x40}, 0x1, 0x2}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffffff}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) 867.487617ms ago: executing program 4 (id=1816): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@cgroup=r2, 0x2, 0x1, 0x0, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) socket(0x1d, 0x2, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r3], 0x3c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000b40)={'ip6tnl0\x00', 0x4000}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) 741.454426ms ago: executing program 4 (id=1817): write(0xffffffffffffffff, &(0x7f00000000c0)="240000001a005f021451094131647c0eebb7a100e549adf9f4079459f45a871eec1d27b25581517bee709b0008000008000f000000000000", 0x38) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040)=0xfffff801, &(0x7f0000000080)=0x4) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) 732.563712ms ago: executing program 3 (id=1818): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 659.748407ms ago: executing program 1 (id=1819): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES32=r0, @ANYRES16=r0, @ANYRES16=r0, @ANYRES16=r0, @ANYRES64, @ANYRES32], 0x50}, 0x1, 0x0, 0x0, 0x880}, 0x2048010) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r0, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, {0x4}}]}]}, 0x64}, 0x1, 0x7a00}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0x52, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) r7 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r7, 0x10d, 0x92, 0x0, &(0x7f0000000080)) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000740)={@broadcast, @local, r2}, 0xc) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000c00", 0x33fe0}], 0x1}, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r9, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r10, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="4400000010001fff00000000ffdbdf0100000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800a00010069706f69620000000c000280060001003700000008000a00", @ANYRES32=r11, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4000080) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000005000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 659.105968ms ago: executing program 2 (id=1820): syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="9f6b01001800000000000000b80000001ce51de9912f0b00ad11d7a0339fac0000000600000025bbd89a366b03b325ec42e1c15900c79b0bf282d90000000000000100001d7223000059003d"], &(0x7f0000000080)=""/103, 0x3b, 0x67, 0x8, 0x2}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000002c0), 0x8) sendto$inet6(r2, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x5, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff}) getsockopt$rose(r5, 0x104, 0x7, &(0x7f0000000340), &(0x7f0000000380)=0x4) shutdown(r2, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r1, 0x1, 0x0, 0x0, {{}, {}, {0xc, 0x14, 'broadcast-link\x00'}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x2c}}, 0x4000) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000400)={'erspan0\x00', 0x0, 0x780, 0x80, 0x3, 0x820, {{0x35, 0x4, 0x2, 0x3f, 0xd4, 0x64, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x2c, 0xe0, 0x1, 0x0, [{@loopback, 0x4}, {@local, 0x5b6}, {@local, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x92}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}]}, @noop, @noop, @cipso={0x86, 0x34, 0x1, [{0x7, 0xb, "c59ff8fd82fa91efdc"}, {0x2, 0x9, "ff38a24a6aa73d"}, {0x5, 0x10, "1bf757e8ee1b14f74c7aa977e1f8"}, {0x5, 0xa, "fbcd62cc303e5dd9"}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x57, 0x2, [{0xe70d95644b9b2b0e, 0x5, "9233d6"}, {0x4, 0xc, "c702adffdd399ebde544"}, {0x6, 0x11, "93922bcd5e94581821947fd2e4d362"}, {0x5, 0xa, "e2eae8719c37c8f9"}, {0x2, 0x3, "a0"}, {0x0, 0x8, "4481a2d835f9"}, {0x1, 0x7, "97d6e3ee9d"}, {0x1, 0xc, "49ad3f5596ad44251a95"}, {0xe, 0x7, "a5182d73c4"}]}]}}}}}) getpeername$packet(r6, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@gettfilter={0x34, 0x2e, 0x200, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0xffe9, 0x8}, {0xb, 0x9}, {0xf, 0xfff1}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x4}]}, 0x34}}, 0x0) connect$bt_sco(r6, &(0x7f0000000140)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) 564.005812ms ago: executing program 3 (id=1821): r0 = socket(0x11, 0x800000002, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) bind$x25(r0, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) 467.933661ms ago: executing program 3 (id=1822): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000240)={0x1100, 0x0, 0x4, 0x7fffffffffffffff}) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x109}, {&(0x7f00000007c0)=""/154, 0x28}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 399.701859ms ago: executing program 1 (id=1823): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000000), 0x4) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000040)="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") r1 = socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000140)={0xe, 0x5, 0x8001, 0x6}, 0x10) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x1411, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x24000000) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r4, 0x20, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4) (async) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r5, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x1401, 0x100, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x840) (async) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000500)=0x4) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETSNDBUF(r6, 0x400454d4, &(0x7f0000000580)=0x4) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={r7, 0x58, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bind$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x1a, r8, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, 0x14) openat$cgroup_ro(r6, &(0x7f00000006c0)='cgroup.freeze\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), r7) (async) clock_gettime(0x0, &(0x7f0000000a00)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000009c0)=[{{&(0x7f0000000740)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000000980)=[{&(0x7f00000007c0)=""/212, 0xd4}, {&(0x7f00000008c0)=""/164, 0xa4}], 0x2}, 0xab7}], 0x1, 0x100, &(0x7f0000000a40)={r9, r10+10000000}) (async) recvfrom$inet6(r6, &(0x7f0000000a80)=""/74, 0x4a, 0x10100, &(0x7f0000000b00)={0xa, 0x4e24, 0x7, @local, 0xd1}, 0x1c) (async) socket$l2tp6(0xa, 0x2, 0x73) write$binfmt_elf64(r5, &(0x7f0000000b40)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0xd0, 0x10, 0x5, 0x8, 0x1, 0x3, 0x20000000, 0x7a, 0x40, 0x1a, 0x8, 0x2, 0x38, 0x1, 0x1000, 0x1ff}, [{0x6474e551, 0x7, 0x6, 0x8, 0x800, 0x7, 0x2, 0x401}, {0x60000000, 0x7, 0x2, 0x87, 0x3a62eb26, 0xc, 0x1, 0x6}], "9afb9632f4069c11763a632f2118764c141423f6493bba4139268059589aae429ef62e8bf64c48cebc64cf926783aa6d758b388a601d4dcc766558099035dbfb2d771ff952a9db76b481284be84cfe456ddfe9f2b91887aa0553d697630b32a1ab3200200b5e4c40f191a8f9d4334f36c7217f614486525a165c9ca2dc476d2277835b05f1099c96cf5581b1c335ae78d2332b996a5008a257f8832ba4cfb713b2ec59c461b7c763d6470367d1206d3cd76d8afd63c219334cf46d57f3f5be615852f3e6b426a6c56805b563fcab2d67036b3cdabc2a8d53a34ae97a7af7cf9182b7b01189bff2681f083abda0d3", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x99e) (async) r11 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r11, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000001500)={0x1, 0x200, 0xfffffff1, {}, {}, {0x1, 0x0, 0x0, 0x1}, 0x1, @can={{0x0, 0x1, 0x1}, 0x6, 0x2, 0x0, 0x0, "1c0ed3a459ce06c6"}}, 0x48}, 0x1, 0x0, 0x0, 0x24004084}, 0x4000010) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001680)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r12, &(0x7f0000001780)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, r13, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4010) 371.664109ms ago: executing program 2 (id=1824): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40040}, 0x4000090) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003400128009000100626f6e64000000002400028008000310800200ffff001c000000000008000400000000000800050000000000"], 0x54}}, 0x0) r1 = socket$inet(0x2, 0x80003, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x138, r3, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x100}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x100}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffb}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb07}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff56c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}]}, @TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x20044084}, 0x4000840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb602000008000000b703000000000000850000007000000085000000d000000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = epoll_create1(0x0) r5 = socket$unix(0x1, 0x1, 0x0) close(r5) socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0xa0028000}) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffffff}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000000)) r8 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000900], 0x2, 0x0, &(0x7f0000000900)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) 324.457001ms ago: executing program 4 (id=1825): r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000200)=0x1d, 0x4) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000400)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x1d, r4}, 0x10, &(0x7f0000000180)={&(0x7f0000000200)=@can={{}, 0x0, 0x1, 0x0, 0x0, "536f6f4eceac9375"}, 0x10}, 0x2, 0x0, 0x0, 0x40000}, 0x0) accept4$unix(r0, 0x0, 0x0, 0x0) 231.858196ms ago: executing program 1 (id=1826): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="188000000000000000fdbc4e9421c57dfb108c00000000009500000000000000702f47b4957095af71fa33dce0fa519f6bf3dd476e654ac5253d3d6f641a1cf20e7b035cecf322762c5ec003b7696dad80327dad5029e9bdc03fe2479806b8857434ba0051fb4b8387db7e412d77794e7e194427ba1f3884ca7601fe2a789ceb6e1bdbe369184d43fcf5d106f6d37d12bfdd6e7519d6f1882c4bf6310a382e351db6d570423e9f4d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bind$inet6(r0, &(0x7f0000000400)={0xa, 0x4e21, 0x8, @empty}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000040)=0x633, 0x2) recvfrom(r1, 0x0, 0x0, 0x8020, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000180)="0100000000000000", 0x8, 0x0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = syz_open_procfs$namespace(0x0, 0x0) unshare(0x28000600) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e80)={0x20, 0x1402, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="3dc0f60e8b2610affd8b10de2bafb3cc9b2447a31fcc25e99d064a", 0x1b) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0xa, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x62) 0s ago: executing program 0 (id=259): r0 = socket$rds(0x15, 0x5, 0x0) getsockopt(r0, 0x1, 0x24, 0x0, &(0x7f0000000300)) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x56, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x88}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1fb6}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) kernel console output (not intermixed with test programs): 193.173549][ T1110] team0 (unregistering): Port device team_slave_1 removed [ 193.224874][ T1110] team0 (unregistering): Port device team_slave_0 removed [ 193.368412][ T5244] Bluetooth: hci0: command tx timeout [ 193.679111][ T8863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.695109][ T8863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.768112][ T5244] Bluetooth: hci1: command tx timeout [ 193.819974][ T8952] hsr0: entered promiscuous mode [ 194.002124][ T8863] team0: Port device team_slave_0 added [ 194.030346][ T8863] team0: Port device team_slave_1 added [ 194.201350][ T8863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.214450][ T8863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.231001][ T8960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.276837][ T8863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.301214][ T8965] __nla_validate_parse: 1 callbacks suppressed [ 194.301232][ T8965] netlink: 52 bytes leftover after parsing attributes in process `syz.2.863'. [ 194.359700][ T8967] Cannot find add_set index 0 as target [ 194.484291][ T8863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.499289][ T8863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.532495][ T8863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.654232][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.705886][ T8863] hsr_slave_0: entered promiscuous mode [ 194.713859][ T8863] hsr_slave_1: entered promiscuous mode [ 194.722076][ T8975] netlink: 'syz.1.865': attribute type 11 has an invalid length. [ 194.730676][ T8863] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 194.740287][ T8863] Cannot create hsr debugfs directory [ 194.744234][ T8975] netlink: 211132 bytes leftover after parsing attributes in process `syz.1.865'. [ 194.895693][ T8980] team0: Device bridge0 is up. Set it down before adding it as a team port [ 195.094443][ T8852] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 195.135435][ T8863] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.162833][ T8852] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 195.188799][ T8852] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 195.216727][ T8863] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.240752][ T8852] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 195.290444][ T8863] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.344653][ T9000] netlink: 12 bytes leftover after parsing attributes in process `syz.4.871'. [ 195.380789][ T8863] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.438962][ T8852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.449149][ T5244] Bluetooth: hci0: command tx timeout [ 195.472667][ T8852] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.492549][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.499777][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.521106][ T8994] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.528404][ T8994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.655627][ T8863] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 195.685022][ T8863] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 195.710557][ T8863] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 195.744282][ T8863] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 195.855240][ T5244] Bluetooth: hci1: command tx timeout [ 195.993505][ T8863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.034848][ T8863] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.067137][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.074505][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.149665][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.156828][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.183466][ T9018] Bluetooth: MGMT ver 1.23 [ 196.286597][ T8852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.393432][ T9026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.523820][ T8852] veth0_vlan: entered promiscuous mode [ 196.596292][ T8852] veth1_vlan: entered promiscuous mode [ 196.636739][ T9036] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.879'. [ 196.718852][ T8852] veth0_macvtap: entered promiscuous mode [ 196.771791][ T8852] veth1_macvtap: entered promiscuous mode [ 196.853258][ T8863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.868886][ T8852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.886894][ T8852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.897901][ T8852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.909476][ T8852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.919989][ T8852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.930758][ T8852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.961556][ T8852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.999319][ T8852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.031609][ T8852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.057213][ T8852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.072537][ T8852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.090274][ T8852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.106788][ T8852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.116836][ T8852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.134348][ T8852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.145551][ T8852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.156265][ T8852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.169599][ T8852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.181065][ T9048] netlink: 24 bytes leftover after parsing attributes in process `syz.2.883'. [ 197.237418][ T8852] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.249277][ T8852] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.258857][ T8852] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.267612][ T8852] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.337078][ T9056] veth0_vlan: left promiscuous mode [ 197.360502][ T9056] veth0_vlan: entered promiscuous mode [ 197.461132][ T8863] veth0_vlan: entered promiscuous mode [ 197.503145][ T8863] veth1_vlan: entered promiscuous mode [ 197.526261][ T9055] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.886'. [ 197.528319][ T5244] Bluetooth: hci0: command tx timeout [ 197.537571][ T9055] openvswitch: netlink: Tunnel attr 5 has unexpected len 1 expected 0 [ 197.757210][ T8994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.785865][ T8994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.929121][ T5244] Bluetooth: hci1: command tx timeout [ 197.976198][ T8995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.002546][ T8863] veth0_macvtap: entered promiscuous mode [ 198.003617][ T8995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.080936][ T8863] veth1_macvtap: entered promiscuous mode [ 198.175521][ T9074] sctp: [Deprecated]: syz.1.890 (pid 9074) Use of int in maxseg socket option. [ 198.175521][ T9074] Use struct sctp_assoc_value instead [ 198.178532][ T8863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.215399][ T8863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.229714][ T8863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.246935][ T8863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.257925][ T8863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.268975][ T8863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.283157][ T8863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.308926][ T8863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.327792][ T8863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.345914][ T8863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.363132][ T8863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.378725][ T9076] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.891'. [ 198.381808][ T9074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.890'. [ 198.410797][ T8863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.428901][ T8863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.439854][ T8863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.459659][ T8863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.466001][ T9079] netlink: 16 bytes leftover after parsing attributes in process `syz.1.890'. [ 198.470328][ T8863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.491107][ T8863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.501432][ T8863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.518087][ T8863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.529296][ T8863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.540027][ T8863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.552925][ T8863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.723935][ T9081] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 198.743140][ T9081] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 198.757157][ T9081] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 198.768042][ T9081] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 198.777520][ T9081] geneve2: entered promiscuous mode [ 198.783169][ T9081] geneve2: entered allmulticast mode [ 198.805881][ T8863] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.825735][ T9086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.837987][ T8863] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.846770][ T8863] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.869131][ T8863] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.196529][ T9095] dummy0: entered promiscuous mode [ 199.206197][ T9095] dummy0: left promiscuous mode [ 199.236099][ T8995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.245174][ T8995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.249943][ T9097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.896'. [ 199.324741][ T8994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.335184][ T8994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.429578][ T9099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.897'. [ 199.446452][ T9099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.897'. [ 199.749177][ T9114] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.901'. [ 200.049989][ T9132] netlink: 'syz.4.905': attribute type 1 has an invalid length. [ 200.151315][ T9132] bond1: entered promiscuous mode [ 200.187285][ T9139] netlink: 20 bytes leftover after parsing attributes in process `syz.3.907'. [ 200.232789][ T9133] netlink: 28 bytes leftover after parsing attributes in process `syz.4.905'. [ 200.288773][ T9134] netlink: 4 bytes leftover after parsing attributes in process `syz.4.905'. [ 200.324764][ T9134] bond1: entered allmulticast mode [ 200.368197][ T9134] 8021q: adding VLAN 0 to HW filter on device bond1 [ 200.449616][ T9145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.592925][ T78] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.097158][ T78] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.155462][ T78] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.220122][ T78] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.334397][ T78] bridge_slave_1: left allmulticast mode [ 201.341857][ T78] bridge_slave_1: left promiscuous mode [ 201.347572][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.356295][ T78] bridge_slave_0: left allmulticast mode [ 201.362170][ T78] bridge_slave_0: left promiscuous mode [ 201.368663][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.973107][ T5250] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 201.991336][ T5250] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 202.007178][ T5250] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 202.015493][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.016687][ T5250] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 202.035954][ T5250] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 202.043622][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.043617][ T5250] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 202.068756][ T78] bond0 (unregistering): Released all slaves [ 202.079879][ T9152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.910'. [ 202.090170][ T9152] netlink: 56 bytes leftover after parsing attributes in process `syz.1.910'. [ 202.472674][ T9187] netlink: 'syz.1.918': attribute type 10 has an invalid length. [ 202.555374][ T9187] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.578973][ T1122] bond0: (slave team0): interface is now down [ 202.589915][ T9187] bond0: (slave team0): Enslaving as an active interface with an up link [ 202.598038][ T9195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.608288][ T11] bond0: (slave team0): interface is now down [ 202.622489][ T9197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.915'. [ 202.634959][ T11] bond0: (slave team0): interface is now down [ 202.659312][ T9197] netlink: 16 bytes leftover after parsing attributes in process `syz.2.915'. [ 202.660991][ T9189] netlink: 'syz.2.915': attribute type 29 has an invalid length. [ 202.680182][ T9194] netlink: 'syz.2.915': attribute type 29 has an invalid length. [ 202.699631][ T8995] bond0: (slave team0): interface is now down [ 202.728241][ T8995] bond0: (slave team0): interface is now down [ 202.752805][ T8995] bond0: (slave team0): interface is now down [ 202.780883][ T1122] bond0: (slave team0): interface is now down [ 202.798819][ T35] bond0: (slave team0): interface is now down [ 202.838006][ T11] bond0: (slave team0): interface is now down [ 202.880168][ T11] bond0: (slave team0): interface is now down [ 202.897965][ T35] bond0: (slave team0): interface is now down [ 202.930311][ T8995] bond0: (slave team0): interface is now down [ 202.957987][ T35] bond0: (slave team0): interface is now down [ 202.992636][ T78] hsr_slave_0: left promiscuous mode [ 203.008468][ T8995] bond0: (slave team0): interface is now down [ 203.025096][ T78] hsr_slave_1: left promiscuous mode [ 203.032645][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.049069][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.051137][ T8995] bond0: (slave team0): interface is now down [ 203.086437][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.099529][ T8995] bond0: (slave team0): interface is now down [ 203.115433][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.125534][ T9205] netlink: 'syz.1.923': attribute type 5 has an invalid length. [ 203.137701][ T8995] bond0: (slave team0): interface is now down [ 203.159279][ T11] bond0: (slave team0): interface is now down [ 203.179290][ T11] bond0: (slave team0): interface is now down [ 203.208910][ T78] veth1_macvtap: left promiscuous mode [ 203.219453][ T11] bond0: (slave team0): interface is now down [ 203.228730][ T78] veth0_macvtap: left promiscuous mode [ 203.234416][ T78] veth1_vlan: left promiscuous mode [ 203.257828][ T8995] bond0: (slave team0): interface is now down [ 203.264986][ T78] veth0_vlan: left promiscuous mode [ 203.318549][ T1122] bond0: (slave team0): interface is now down [ 203.366939][ T1122] bond0: (slave team0): interface is now down [ 203.423132][ T1122] bond0: (slave team0): interface is now down [ 203.449023][ T1122] bond0: (slave team0): interface is now down [ 203.489211][ T8995] bond0: (slave team0): interface is now down [ 203.528647][ T8995] bond0: (slave team0): interface is now down [ 203.558561][ T8995] bond0: (slave team0): interface is now down [ 203.610741][ T8995] bond0: (slave team0): interface is now down [ 203.638603][ T8994] bond0: (slave team0): interface is now down [ 203.657859][ T52] bond0: (slave team0): interface is now down [ 203.679457][ T11] bond0: (slave team0): interface is now down [ 203.707941][ T11] bond0: (slave team0): interface is now down [ 203.757877][ T8994] bond0: (slave team0): interface is now down [ 203.780303][ T1122] bond0: (slave team0): interface is now down [ 203.826511][ T52] bond0: (slave team0): interface is now down [ 203.880881][ T8994] bond0: (slave team0): interface is now down [ 203.899481][ T8995] bond0: (slave team0): interface is now down [ 203.938568][ T52] bond0: (slave team0): interface is now down [ 203.970772][ T8994] bond0: (slave team0): interface is now down [ 203.988977][ T52] bond0: (slave team0): interface is now down [ 204.018595][ T11] bond0: (slave team0): interface is now down [ 204.057830][ T8994] bond0: (slave team0): interface is now down [ 204.080236][ T52] bond0: (slave team0): interface is now down [ 204.103939][ T5250] Bluetooth: hci0: command tx timeout [ 204.126397][ T8994] bond0: (slave team0): interface is now down [ 204.163697][ T52] bond0: (slave team0): interface is now down [ 204.198710][ T8994] bond0: (slave team0): interface is now down [ 204.259328][ T8994] bond0: (slave team0): interface is now down [ 204.278138][ T52] bond0: (slave team0): interface is now down [ 204.309079][ T52] bond0: (slave team0): interface is now down [ 204.355356][ T8994] bond0: (slave team0): interface is now down [ 204.400973][ T52] bond0: (slave team0): interface is now down [ 204.420069][ T52] bond0: (slave team0): interface is now down [ 204.461353][ T52] bond0: (slave team0): interface is now down [ 204.509299][ T8994] bond0: (slave team0): interface is now down [ 204.548955][ T8995] bond0: (slave team0): interface is now down [ 204.591047][ T1122] bond0: (slave team0): interface is now down [ 204.617902][ T1122] bond0: (slave team0): interface is now down [ 204.659214][ T8994] bond0: (slave team0): interface is now down [ 204.687925][ T1122] bond0: (slave team0): interface is now down [ 204.733565][ T1122] bond0: (slave team0): interface is now down [ 204.760992][ T1122] bond0: (slave team0): interface is now down [ 204.778649][ T78] team0 (unregistering): Port device team_slave_1 removed [ 204.788339][ T8994] bond0: (slave team0): interface is now down [ 204.819064][ T52] bond0: (slave team0): interface is now down [ 204.838882][ T1122] bond0: (slave team0): interface is now down [ 204.846926][ T78] team0 (unregistering): Port device team_slave_0 removed [ 204.859038][ T8994] bond0: (slave team0): interface is now down [ 204.877967][ T1122] bond0: (slave team0): interface is now down [ 204.906117][ T1122] bond0: (slave team0): interface is now down [ 204.928121][ T52] bond0: (slave team0): interface is now down [ 204.972044][ T8994] bond0: (slave team0): interface is now down [ 205.005955][ T8994] bond0: (slave team0): interface is now down [ 205.046025][ T52] bond0: (slave team0): interface is now down [ 205.081203][ T8994] bond0: (slave team0): interface is now down [ 205.113556][ T52] bond0: (slave team0): interface is now down [ 205.142688][ T8994] bond0: (slave team0): interface is now down [ 205.188911][ T8994] bond0: (slave team0): interface is now down [ 205.225723][ T8994] bond0: (slave team0): interface is now down [ 205.265073][ T8994] bond0: (slave team0): interface is now down [ 205.298085][ T52] bond0: (slave team0): interface is now down [ 205.320489][ T1122] bond0: (slave team0): interface is now down [ 205.357981][ T1122] bond0: (slave team0): interface is now down [ 205.388287][ T1122] bond0: (slave team0): interface is now down [ 205.408185][ T1122] bond0: (slave team0): interface is now down [ 205.438109][ T52] bond0: (slave team0): interface is now down [ 205.462689][ T52] bond0: (slave team0): interface is now down [ 205.497967][ T52] bond0: (slave team0): interface is now down [ 205.533617][ T52] bond0: (slave team0): interface is now down [ 205.578047][ T1122] bond0: (slave team0): interface is now down [ 205.613663][ T1122] bond0: (slave team0): interface is now down [ 205.647834][ T8995] bond0: (slave team0): interface is now down [ 205.681688][ T8995] bond0: (slave team0): interface is now down [ 205.717428][ T9171] chnl_net:caif_netlink_parms(): no params data found [ 205.725304][ T8995] bond0: (slave team0): interface is now down [ 205.738180][ T8995] bond0: now running without any active interface! [ 205.745793][ T9235] __nla_validate_parse: 3 callbacks suppressed [ 205.745808][ T9235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.930'. [ 205.777829][ T9235] netlink: 24 bytes leftover after parsing attributes in process `syz.1.930'. [ 206.014267][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 206.168798][ T5244] Bluetooth: hci0: command tx timeout [ 206.245846][ T9263] netlink: 24 bytes leftover after parsing attributes in process `syz.1.937'. [ 206.279234][ T9171] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.286414][ T9171] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.344596][ T9171] bridge_slave_0: entered allmulticast mode [ 206.359271][ T9171] bridge_slave_0: entered promiscuous mode [ 206.386064][ T9171] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.404363][ T9171] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.442628][ T9171] bridge_slave_1: entered allmulticast mode [ 206.459400][ T9171] bridge_slave_1: entered promiscuous mode [ 206.663882][ T9171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.692783][ T9171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.942562][ T9171] team0: Port device team_slave_0 added [ 206.963068][ T9171] team0: Port device team_slave_1 added [ 207.150290][ T9291] batadv_slave_1: entered promiscuous mode [ 207.164265][ T9295] netlink: 'syz.1.946': attribute type 1 has an invalid length. [ 207.164665][ T9171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.198230][ T9171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.220397][ T9303] Bluetooth: MGMT ver 1.23 [ 207.237292][ T9171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.250442][ T9269] batadv_slave_1: left promiscuous mode [ 207.257654][ T9295] netlink: 16 bytes leftover after parsing attributes in process `syz.1.946'. [ 207.268318][ T9269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.320790][ T9171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.342019][ T9171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.373600][ T9171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.585995][ T9171] hsr_slave_0: entered promiscuous mode [ 207.608881][ T9171] hsr_slave_1: entered promiscuous mode [ 207.621052][ T9171] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 207.637690][ T9171] Cannot create hsr debugfs directory [ 208.072455][ T9321] netlink: 'syz.4.953': attribute type 1 has an invalid length. [ 208.266383][ T5250] Bluetooth: hci0: command tx timeout [ 208.426400][ T9335] netlink: 24 bytes leftover after parsing attributes in process `syz.1.956'. [ 208.504436][ T9341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.956'. [ 208.607984][ T9342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.958'. [ 208.625126][ T9342] macsec0: entered promiscuous mode [ 208.706149][ T9344] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 209.204985][ T9171] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 209.232964][ T9171] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 209.252151][ T9171] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 209.286342][ T9171] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 209.478452][ T9377] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.970'. [ 209.628166][ T9171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.672076][ T9171] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.700271][ T9389] netlink: 24 bytes leftover after parsing attributes in process `syz.4.973'. [ 209.727809][ T1122] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.735009][ T1122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.783673][ T1122] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.790927][ T1122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.986362][ T9402] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.290362][ T9413] netlink: 20 bytes leftover after parsing attributes in process `syz.2.981'. [ 210.317148][ T9171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.338042][ T5244] Bluetooth: hci0: command tx timeout [ 210.353155][ T58] IPVS: starting estimator thread 0... [ 210.436707][ T9420] netlink: 'syz.2.983': attribute type 1 has an invalid length. [ 210.454950][ T9171] veth0_vlan: entered promiscuous mode [ 210.467918][ T9418] IPVS: using max 23 ests per chain, 55200 per kthread [ 210.485047][ T9171] veth1_vlan: entered promiscuous mode [ 210.554163][ T9171] veth0_macvtap: entered promiscuous mode [ 210.601299][ T9171] veth1_macvtap: entered promiscuous mode [ 210.671444][ T9426] IPv6: Can't replace route, no match found [ 210.769594][ T9171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.802459][ T9171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.836412][ T9171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.869643][ T9171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.887528][ T9171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.910119][ T9171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.923399][ T9171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.936291][ T9171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.949274][ T9171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.960063][ T9171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.972050][ T9171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.985116][ T9432] __nla_validate_parse: 2 callbacks suppressed [ 210.985133][ T9432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.988'. [ 211.009197][ T9432] bridge_slave_1: left allmulticast mode [ 211.015021][ T9432] bridge_slave_1: left promiscuous mode [ 211.028034][ T9432] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.046380][ T9432] bridge_slave_0: left allmulticast mode [ 211.054053][ T9432] bridge_slave_0: left promiscuous mode [ 211.062891][ T9432] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.275930][ T9171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.315121][ T9171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.325341][ T9171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.368065][ T9171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.397005][ T9171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.424477][ T9171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.425847][ T9451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.992'. [ 211.435157][ T9453] x_tables: unsorted entry at hook 2 [ 211.454254][ T9171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.470946][ T9171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.485681][ T9171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.497417][ T9171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.519247][ T9171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.569137][ T9453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.993'. [ 211.585954][ T9450] netlink: 'syz.3.992': attribute type 1 has an invalid length. [ 211.603481][ T9171] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.623448][ T9171] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.659006][ T9171] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.686037][ T9171] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.778211][ T9456] team0: Port device vlan2 added [ 211.998972][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.042990][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.057569][ T9461] netlink: 16 bytes leftover after parsing attributes in process `syz.2.996'. [ 212.089058][ T5244] Bluetooth: hci5: command 0x0406 tx timeout [ 212.112620][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.124305][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.165140][ T9467] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 212.343811][ T9469] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1000'. [ 212.447842][ T9474] netlink: 'syz.1.1002': attribute type 1 has an invalid length. [ 212.456012][ T9474] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 212.483535][ T9479] netlink: 'syz.2.1000': attribute type 10 has an invalid length. [ 212.556793][ T9479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.615945][ T9479] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 212.921051][ T9495] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1003'. [ 213.023025][ T9497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1005'. [ 213.607493][ T9522] sctp: [Deprecated]: syz.4.1011 (pid 9522) Use of int in maxseg socket option. [ 213.607493][ T9522] Use struct sctp_assoc_value instead [ 213.999691][ T9534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1015'. [ 214.199771][ T9538] netlink: 'syz.2.1016': attribute type 2 has an invalid length. [ 214.426766][ T8994] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.199503][ T8994] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.300970][ T8994] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.406087][ T8994] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.530247][ T8994] bridge_slave_1: left allmulticast mode [ 215.538296][ T8994] bridge_slave_1: left promiscuous mode [ 215.549005][ T8994] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.611883][ T8994] bridge_slave_0: left allmulticast mode [ 215.617591][ T8994] bridge_slave_0: left promiscuous mode [ 215.618217][ T9553] xt_CONNSECMARK: invalid mode: 0 [ 215.651512][ T8994] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.684799][ T9553] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1020'. [ 215.843156][ T9567] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1025'. [ 216.101066][ T5244] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 216.111773][ T5244] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 216.122017][ T5244] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 216.138196][ T5244] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 216.154770][ T5244] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 216.172180][ T5244] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 216.376091][ T8994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.390461][ T8994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.403816][ T8994] bond0 (unregistering): Released all slaves [ 216.446351][ T9571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1026'. [ 216.540371][ T9569] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1020'. [ 216.563160][ T9569] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1020'. [ 216.997362][ T9594] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1034'. [ 217.017879][ T9594] tc_dump_action: action bad kind [ 217.044740][ T8994] hsr_slave_0: left promiscuous mode [ 217.092287][ T8994] hsr_slave_1: left promiscuous mode [ 217.160934][ T8994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.185068][ T8994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.196258][ T8994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.203832][ T8994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.225519][ T8994] veth1_macvtap: left promiscuous mode [ 217.231349][ T8994] veth0_macvtap: left promiscuous mode [ 217.237412][ T8994] veth1_vlan: left promiscuous mode [ 217.243093][ T8994] veth0_vlan: left promiscuous mode [ 217.830902][ T8994] team0 (unregistering): Port device team_slave_1 removed [ 217.899994][ T8994] team0 (unregistering): Port device team_slave_0 removed [ 218.249911][ T5250] Bluetooth: hci0: command tx timeout [ 218.375247][ T9608] netlink: 'syz.3.1036': attribute type 1 has an invalid length. [ 218.393938][ T9608] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 218.405819][ T9610] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1036'. [ 218.655718][ T9630] Bluetooth: MGMT ver 1.23 [ 218.676822][ T9632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1039'. [ 218.785949][ T9642] pim6reg1: entered promiscuous mode [ 218.801210][ T9642] pim6reg1: entered allmulticast mode [ 218.815185][ T9572] chnl_net:caif_netlink_parms(): no params data found [ 218.822880][ T9642] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 219.022039][ T9644] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 219.388879][ T9668] netlink: 'syz.3.1050': attribute type 1 has an invalid length. [ 219.536045][ T9572] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.568470][ T9677] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20000 [ 219.585416][ T9572] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.610299][ T9572] bridge_slave_0: entered allmulticast mode [ 219.617659][ T9572] bridge_slave_0: entered promiscuous mode [ 219.656357][ T9572] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.664589][ T9572] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.672256][ T9572] bridge_slave_1: entered allmulticast mode [ 219.690329][ T9572] bridge_slave_1: entered promiscuous mode [ 219.723157][ T9683] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1055'. [ 219.935500][ T9572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.024144][ T9572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.063931][ T9706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1062'. [ 220.271106][ T9572] team0: Port device team_slave_0 added [ 220.289913][ T9715] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1064'. [ 220.314040][ T9717] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1063'. [ 220.326543][ T9572] team0: Port device team_slave_1 added [ 220.333909][ T5244] Bluetooth: hci0: command tx timeout [ 220.369624][ T9572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.376739][ T9572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.404391][ T9572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.437135][ T9572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.464308][ T9572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.497847][ T9572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.670369][ T9723] syzkaller0: entered promiscuous mode [ 220.675883][ T9723] syzkaller0: entered allmulticast mode [ 220.686261][ T9572] hsr_slave_0: entered promiscuous mode [ 220.696422][ T9572] hsr_slave_1: entered promiscuous mode [ 220.705181][ T9572] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 220.723417][ T9572] Cannot create hsr debugfs directory [ 221.106971][ T9746] netlink: 'syz.3.1073': attribute type 9 has an invalid length. [ 221.127937][ T9746] netlink: 'syz.3.1073': attribute type 7 has an invalid length. [ 221.143361][ T9746] netlink: 'syz.3.1073': attribute type 8 has an invalid length. [ 221.292714][ T9750] ebtables: ebtables: counters copy to user failed while replacing table [ 222.414390][ T5244] Bluetooth: hci0: command 0x040f tx timeout [ 223.016309][ T9743] (unnamed net_device) (uninitialized): peer notification delay (2) is not a multiple of miimon (640), value rounded to 0 ms [ 223.284741][ T9760] __nla_validate_parse: 2 callbacks suppressed [ 223.284762][ T9760] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1076'. [ 223.441429][ T9771] netlink: 4272 bytes leftover after parsing attributes in process `syz.3.1079'. [ 224.046264][ T9784] hsr0: left promiscuous mode [ 224.118144][ T9790] tipc: Started in network mode [ 224.123066][ T9790] tipc: Node identity ac141428, cluster identity 4711 [ 224.161882][ T9790] tipc: Enabled bearer , priority 10 [ 224.488231][ T5250] Bluetooth: hci0: command 0x040f tx timeout [ 224.596465][ T9572] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 224.649661][ T9572] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 224.673398][ T9572] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 224.886769][ T9572] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 225.304274][ T8] tipc: Node number set to 2886997032 [ 226.577980][ T5250] Bluetooth: hci0: command 0x040f tx timeout [ 226.988843][ T9829] pim6reg: entered allmulticast mode [ 227.206771][ T9836] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20001 [ 227.240307][ T9841] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 227.312338][ T9572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.368123][ T9842] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1100'. [ 227.400094][ T9842] --map-set only usable from mangle table [ 227.457538][ T9572] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.553006][ T1122] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.560152][ T1122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.582299][ T1122] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.589510][ T1122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.622599][ T9850] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1104'. [ 227.651233][ T9850] netlink: 9412 bytes leftover after parsing attributes in process `syz.2.1104'. [ 227.663793][ T9853] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1105'. [ 228.282055][ T9572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.360597][ T9884] netlink: 300 bytes leftover after parsing attributes in process `syz.4.1110'. [ 228.462552][ T9572] veth0_vlan: entered promiscuous mode [ 228.509420][ T9572] veth1_vlan: entered promiscuous mode [ 228.523937][ T9890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1114'. [ 228.609156][ T9572] veth0_macvtap: entered promiscuous mode [ 228.624749][ T9893] syzkaller0: entered allmulticast mode [ 228.641249][ T9890] netlink: 816 bytes leftover after parsing attributes in process `syz.1.1114'. [ 228.643718][ T9572] veth1_macvtap: entered promiscuous mode [ 228.723121][ T9572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.743826][ T9572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.777264][ T9572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.796530][ T9572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.807012][ T9572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.834149][ T9572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.845074][ T9572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.855794][ T9572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.865946][ T9572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.876455][ T9572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.888597][ T9572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.905750][ T9901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1117'. [ 228.989288][ T9572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.017448][ T9572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.045695][ T9907] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1119'. [ 229.046448][ T9572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.056164][ T9907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1119'. [ 229.076962][ T9572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.088679][ T9572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.099734][ T9572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.109862][ T9572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.120722][ T9572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.130883][ T9572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.148189][ T9572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.167066][ T9572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.203204][ T9907] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1119'. [ 229.263738][ T9572] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.296337][ T9572] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.317339][ T9572] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.333567][ T9572] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.433890][ T9918] xt_CT: You must specify a L4 protocol and not use inversions on it [ 229.509686][ T9915] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1121'. [ 229.716269][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.766736][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.833220][ T9937] ipt_ECN: cannot use operation on non-tcp rule [ 229.891110][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.921680][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.942151][ T35] tipc: Subscription rejected, illegal request [ 230.043583][ T9942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1130'. [ 230.130455][ T9948] unsupported nlmsg_type 40 [ 230.337455][ T9958] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1133'. [ 230.654976][ T9969] IPVS: set_ctl: invalid protocol: 8483 50.49.49.0:0 [ 230.756351][ T9973] xt_hashlimit: size too large, truncated to 1048576 [ 230.765924][ T9973] xt_hashlimit: max too large, truncated to 1048576 [ 230.789405][ T9973] xt_hashlimit: overflow, try lower: 0/0 [ 231.473404][T10011] netlink: 'syz.4.1152': attribute type 1 has an invalid length. [ 231.650512][T10022] netlink: 'syz.3.1155': attribute type 1 has an invalid length. [ 231.684653][T10022] 8021q: adding VLAN 0 to HW filter on device bond2 [ 231.717419][T10022] bond2: (slave ip6gretap1): making interface the new active one [ 231.727100][T10022] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 232.591315][ T1122] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.561933][ T1122] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.634482][ T1122] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.815697][ T1122] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.035787][T10078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.210502][ T1122] bridge_slave_1: left allmulticast mode [ 234.216198][ T1122] bridge_slave_1: left promiscuous mode [ 234.255031][ T1122] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.298201][ T1122] bridge_slave_0: left allmulticast mode [ 234.303903][ T1122] bridge_slave_0: left promiscuous mode [ 234.343011][ T1122] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.375380][ T5244] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 234.386577][ T5244] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 234.396902][ T5244] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 234.444411][ T5244] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 234.458093][ T5244] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 234.465901][ T5244] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 234.890344][T10114] Bluetooth: hci3: invalid length 0, exp 2 for type 1 [ 235.156524][ T1122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.168272][ T1122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.180001][ T1122] bond0 (unregistering): Released all slaves [ 235.196929][T10107] netlink: 'syz.2.1180': attribute type 21 has an invalid length. [ 235.234555][T10107] netlink: 'syz.2.1180': attribute type 1 has an invalid length. [ 235.262721][T10112] __nla_validate_parse: 13 callbacks suppressed [ 235.262741][T10112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1181'. [ 235.286957][T10116] netlink: 'syz.3.1182': attribute type 10 has an invalid length. [ 235.314086][T10112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1181'. [ 235.324586][T10116] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.1182'. [ 235.360253][T10112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1181'. [ 235.615403][T10130] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1186'. [ 235.792272][T10139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.899802][ T1122] hsr_slave_0: left promiscuous mode [ 235.911122][ T1122] hsr_slave_1: left promiscuous mode [ 235.931157][ T1122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.940637][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.954913][ T1122] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.962992][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.990663][ T1122] veth1_macvtap: left promiscuous mode [ 235.996498][ T1122] veth0_macvtap: left promiscuous mode [ 236.002439][ T1122] veth1_vlan: left promiscuous mode [ 236.010116][ T1122] veth0_vlan: left promiscuous mode [ 236.572609][ T5250] Bluetooth: hci0: command tx timeout [ 236.721178][ T1122] team0 (unregistering): Port device team_slave_1 removed [ 236.776963][ T1122] team0 (unregistering): Port device team_slave_0 removed [ 237.605099][T10087] chnl_net:caif_netlink_parms(): no params data found [ 237.928051][T10087] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.935488][T10087] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.943251][T10087] bridge_slave_0: entered allmulticast mode [ 237.951249][T10087] bridge_slave_0: entered promiscuous mode [ 237.960870][T10087] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.981143][T10087] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.990263][T10087] bridge_slave_1: entered allmulticast mode [ 237.997700][T10087] bridge_slave_1: entered promiscuous mode [ 238.066332][T10205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.070485][T10087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.111098][T10087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.145190][T10087] team0: Port device team_slave_0 added [ 238.159774][T10087] team0: Port device team_slave_1 added [ 238.193588][T10087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.200981][T10087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.231679][T10087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.244602][T10087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.252069][T10087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.278608][T10087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.385253][T10087] hsr_slave_0: entered promiscuous mode [ 238.398372][T10087] hsr_slave_1: entered promiscuous mode [ 238.405399][T10087] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.418796][T10087] Cannot create hsr debugfs directory [ 238.425466][T10211] Bluetooth: MGMT ver 1.23 [ 238.571118][T10214] netlink: 'syz.1.1204': attribute type 21 has an invalid length. [ 238.648015][ T5244] Bluetooth: hci0: command tx timeout [ 239.120534][T10087] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 239.132551][T10087] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 239.144383][T10087] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 239.155257][T10087] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 239.293740][T10235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1209'. [ 239.316914][T10087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.359805][T10087] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.373792][ T8994] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.380986][ T8994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.447388][ T8994] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.454676][ T8994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.891447][T10256] vxcan1: tx address claim with dlc 1 [ 240.118531][T10267] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1220'. [ 240.129279][T10265] Bluetooth: MGMT ver 1.23 [ 240.215933][T10265] tipc: Enabling of bearer rejected, failed to enable media [ 240.277657][T10087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.281360][ T5315] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 240.359352][ T5315] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 240.422095][ T943] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 240.450225][T10278] batadv_slave_0: entered promiscuous mode [ 240.478773][ T943] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 240.546858][T10277] batadv_slave_0: left promiscuous mode [ 240.562776][ T5334] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 240.587176][T10087] veth0_vlan: entered promiscuous mode [ 240.615563][T10286] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1228'. [ 240.617190][T10087] veth1_vlan: entered promiscuous mode [ 240.639665][ T5334] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 240.748087][ T5244] Bluetooth: hci0: command 0x040f tx timeout [ 240.749015][ T943] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 240.825641][T10087] veth0_macvtap: entered promiscuous mode [ 240.848960][ T5315] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 240.888853][ T5315] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 240.951093][T10296] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1231'. [ 240.992626][T10087] veth1_macvtap: entered promiscuous mode [ 241.008907][ T5315] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 241.191712][T10087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.247420][T10087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.271819][T10087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.303140][T10087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.323316][T10087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.335240][T10087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.357893][T10087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.371531][T10087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.394726][T10087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.413945][T10087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.434406][T10087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.521211][T10087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.558306][T10087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.573632][T10087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.595054][T10087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.650552][T10087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.680808][T10087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.702700][T10087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.732024][T10087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.752386][T10087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.783787][T10087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.809473][T10087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.817316][T10343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1239'. [ 241.847394][T10087] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.897807][T10087] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.906550][T10087] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.925281][T10087] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.946125][T10331] bridge1: entered promiscuous mode [ 241.955435][T10331] bridge1: entered allmulticast mode [ 242.304624][T10360] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 242.308019][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.348151][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.429914][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.448312][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.808171][ T5244] Bluetooth: hci0: command 0x040f tx timeout [ 243.081013][T10389] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 243.124128][T10389] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 243.164978][T10389] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 243.348321][T10412] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1260'. [ 244.030902][T10452] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.081603][T10459] netlink: zone id is out of range [ 244.090168][T10452] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1271'. [ 244.166838][T10452] bridge_slave_1: left allmulticast mode [ 244.186740][T10452] bridge_slave_1: left promiscuous mode [ 244.195833][T10452] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.218730][T10452] bridge2: port 1(bridge_slave_1) entered blocking state [ 244.226392][T10452] bridge2: port 1(bridge_slave_1) entered disabled state [ 244.259187][T10470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.294994][T10452] bridge_slave_1: entered allmulticast mode [ 244.322671][T10452] bridge_slave_1: entered promiscuous mode [ 244.559203][ T1122] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.002109][ T1122] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.073019][ T1122] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.122751][ T1122] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.237587][ T1122] bridge_slave_1: left allmulticast mode [ 245.244093][ T1122] bridge_slave_1: left promiscuous mode [ 245.250549][ T1122] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.261252][ T1122] bridge_slave_0: left allmulticast mode [ 245.266929][ T1122] bridge_slave_0: left promiscuous mode [ 245.273051][ T1122] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.666375][ T1122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.677809][ T1122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.690648][ T1122] bond0 (unregistering): Released all slaves [ 245.967845][ T1122] hsr_slave_0: left promiscuous mode [ 245.993204][ T1122] hsr_slave_1: left promiscuous mode [ 246.041207][ T1122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.049683][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.078793][ T1122] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.089501][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.203862][T10516] x_tables: duplicate underflow at hook 1 [ 246.217245][ T1122] veth1_macvtap: left promiscuous mode [ 246.239187][ T1122] veth0_macvtap: left promiscuous mode [ 246.245187][ T1122] veth1_vlan: left promiscuous mode [ 246.253293][T10515] xt_cgroup: invalid path, errno=-2 [ 246.286069][ T1122] veth0_vlan: left promiscuous mode [ 246.319740][T10522] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 246.495740][ T5244] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 246.508827][ T5244] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 246.529957][ T5244] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 246.539719][ T5244] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 246.547491][ T5244] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 246.555753][ T5244] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 247.113712][ T1122] team0 (unregistering): Port device team_slave_1 removed [ 247.192242][ T1122] team0 (unregistering): Port device team_slave_0 removed [ 247.703313][T10507] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 248.174206][T10557] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1288'. [ 248.405695][T10567] veth1: entered promiscuous mode [ 248.434134][T10567] veth1: left promiscuous mode [ 248.496271][T10570] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1292'. [ 248.518681][T10529] chnl_net:caif_netlink_parms(): no params data found [ 248.648014][ T5250] Bluetooth: hci0: command tx timeout [ 248.916427][T10529] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.952855][T10529] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.977030][T10529] bridge_slave_0: entered allmulticast mode [ 249.005254][T10529] bridge_slave_0: entered promiscuous mode [ 249.027094][T10529] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.036063][T10529] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.044620][T10529] bridge_slave_1: entered allmulticast mode [ 249.053362][T10529] bridge_slave_1: entered promiscuous mode [ 249.132272][T10529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.186433][T10529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.366528][T10529] team0: Port device team_slave_0 added [ 249.392521][T10529] team0: Port device team_slave_1 added [ 249.442631][T10529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.457300][T10529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.496037][T10529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.545435][T10529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.565665][T10529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.624483][T10615] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1302'. [ 249.667934][T10529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.695640][T10614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.845766][T10529] hsr_slave_0: entered promiscuous mode [ 249.894253][T10529] hsr_slave_1: entered promiscuous mode [ 249.927572][T10529] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 249.948090][T10529] Cannot create hsr debugfs directory [ 250.143658][T10640] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1307'. [ 250.367168][T10648] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 250.405864][T10648] netlink: 'syz.2.1312': attribute type 4 has an invalid length. [ 250.422305][T10648] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1312'. [ 250.433581][T10649] netlink: 'syz.2.1312': attribute type 4 has an invalid length. [ 250.446317][T10649] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1312'. [ 250.479207][T10653] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1313'. [ 250.516587][T10653] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1313'. [ 250.659351][T10663] ieee802154 phy1 wpan1: encryption failed: -90 [ 250.676976][T10663] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1315'. [ 250.730130][ T5250] Bluetooth: hci0: command tx timeout [ 251.009228][T10676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1320'. [ 251.043421][T10529] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 251.077398][T10529] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 251.118746][T10529] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 251.130629][T10529] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 251.168056][T10681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.238365][T10676] netlink: 'syz.4.1320': attribute type 4 has an invalid length. [ 251.299971][T10676] netlink: 'syz.4.1320': attribute type 4 has an invalid length. [ 251.385584][T10529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.437284][T10529] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.480989][ T5681] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.488222][ T5681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.521883][ T5681] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.529119][ T5681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.713807][T10529] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 252.046584][T10715] set match dimension is over the limit! [ 252.105944][T10721] set match dimension is over the limit! [ 252.192716][T10529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.367572][T10529] veth0_vlan: entered promiscuous mode [ 252.426930][T10529] veth1_vlan: entered promiscuous mode [ 252.533434][T10529] veth0_macvtap: entered promiscuous mode [ 252.553590][T10740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.575851][T10529] veth1_macvtap: entered promiscuous mode [ 252.592508][T10743] bridge_slave_0: left allmulticast mode [ 252.622979][T10743] bridge_slave_0: left promiscuous mode [ 252.642834][T10743] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.808001][ T5250] Bluetooth: hci0: command tx timeout [ 252.832181][T10758] netlink: 'syz.1.1342': attribute type 1 has an invalid length. [ 252.846972][T10529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.849615][T10758] netlink: 'syz.1.1342': attribute type 1 has an invalid length. [ 252.864102][T10529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.882919][T10529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.899479][T10529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.911643][T10529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.922897][T10529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.933317][T10529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.943866][T10529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.953749][T10529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.964356][T10529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.976971][T10529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.013227][T10529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.051785][T10529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.086180][T10529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.107073][T10529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.151675][T10529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.182032][T10529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.200845][T10529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.212457][T10529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.222431][T10529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.234222][T10529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.256173][T10529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.272362][T10529] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.317907][T10529] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.339112][T10529] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.356258][T10529] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.711236][T10794] xt_HMARK: spi-set and port-set can't be combined [ 253.764070][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.802538][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.933208][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.953827][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.004436][T10807] __nla_validate_parse: 13 callbacks suppressed [ 254.004456][T10807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1356'. [ 254.051101][T10811] netlink: 'syz.3.1355': attribute type 11 has an invalid length. [ 254.060947][T10806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.377776][T10820] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1360'. [ 254.452702][T10820] netlink: 'syz.3.1360': attribute type 1 has an invalid length. [ 254.463050][T10820] netlink: 9396 bytes leftover after parsing attributes in process `syz.3.1360'. [ 254.474343][T10820] nftables ruleset with unbound chain [ 254.819129][T10846] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1368'. [ 255.174037][T10865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1372'. [ 255.512245][T10892] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1380'. [ 255.900295][T10906] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1385'. [ 256.006413][T10914] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1387'. [ 256.079819][T10919] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1386'. [ 256.091983][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.253874][ T78] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.295688][T10923] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1390'. [ 256.886743][ T78] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.972873][ T78] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.040023][ T78] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.177187][ T78] bridge_slave_1: left allmulticast mode [ 257.184683][ T78] bridge_slave_1: left promiscuous mode [ 257.191547][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.203863][ T78] bridge_slave_0: left allmulticast mode [ 257.212316][ T78] bridge_slave_0: left promiscuous mode [ 257.218177][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.609547][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.693449][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.737138][ T78] bond0 (unregistering): Released all slaves [ 258.158250][T10951] sch_tbf: peakrate 32768 is lower than or equals to rate 1281593178885145793 ! [ 258.181387][T10948] x_tables: duplicate underflow at hook 3 [ 258.333066][ T5244] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 258.348058][ T5244] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 258.359916][ T5244] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 258.370581][ T5244] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 258.380298][ T5244] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 258.392311][ T5244] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 258.573922][T10965] netlink: 'syz.4.1402': attribute type 1 has an invalid length. [ 258.601573][ T78] hsr_slave_0: left promiscuous mode [ 258.614603][ T78] hsr_slave_1: left promiscuous mode [ 258.623637][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.631316][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.639687][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.647242][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.684458][ T78] veth1_macvtap: left promiscuous mode [ 258.691439][ T78] veth0_macvtap: left promiscuous mode [ 258.697089][ T78] veth1_vlan: left promiscuous mode [ 258.702608][ T78] veth0_vlan: left promiscuous mode [ 259.156520][T10979] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 259.406634][ T78] team0 (unregistering): Port device team_slave_1 removed [ 259.456625][ T78] team0 (unregistering): Port device team_slave_0 removed [ 259.993606][T10967] netlink: 'syz.3.1405': attribute type 1 has an invalid length. [ 260.003532][T10971] __nla_validate_parse: 4 callbacks suppressed [ 260.003550][T10971] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1405'. [ 260.022588][T10971] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1405'. [ 260.309625][T10990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1409'. [ 260.401590][T10993] sctp: [Deprecated]: syz.4.1410 (pid 10993) Use of struct sctp_assoc_value in delayed_ack socket option. [ 260.401590][T10993] Use struct sctp_sack_info instead [ 260.508295][T11003] sctp: [Deprecated]: syz.4.1410 (pid 11003) Use of struct sctp_assoc_value in delayed_ack socket option. [ 260.508295][T11003] Use struct sctp_sack_info instead [ 260.580619][T10960] chnl_net:caif_netlink_parms(): no params data found [ 260.788863][T11009] syzkaller1: entered promiscuous mode [ 260.794402][T11009] syzkaller1: entered allmulticast mode [ 260.812748][T11016] unknown channel width for channel at 907000KHz? [ 261.023480][T10960] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.051580][T10960] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.069691][T10960] bridge_slave_0: entered allmulticast mode [ 261.080585][T10960] bridge_slave_0: entered promiscuous mode [ 261.100264][T10960] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.131115][T10960] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.167679][T10960] bridge_slave_1: entered allmulticast mode [ 261.191517][T10960] bridge_slave_1: entered promiscuous mode [ 261.247352][T11031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1420'. [ 261.279736][T11035] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 261.413215][T10960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.507418][T10960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.675875][T10960] team0: Port device team_slave_0 added [ 261.690965][T10960] team0: Port device team_slave_1 added [ 261.752552][T11046] x_tables: eb_tables: quota.0 match: invalid size 24 (kernel) != (user) 0 [ 261.838264][T10960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.845263][T10960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.922317][T10960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.951625][T10960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.967894][T10960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.047871][T10960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.318350][T10960] hsr_slave_0: entered promiscuous mode [ 262.339061][T10960] hsr_slave_1: entered promiscuous mode [ 262.352089][T10960] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.362112][T10960] Cannot create hsr debugfs directory [ 262.379079][T11066] tipc: New replicast peer: 0.0.0.0 [ 262.389696][T11066] tipc: Enabled bearer , priority 10 [ 262.639131][T11077] sctp: [Deprecated]: syz.2.1433 (pid 11077) Use of struct sctp_assoc_value in delayed_ack socket option. [ 262.639131][T11077] Use struct sctp_sack_info instead [ 262.817159][T11086] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1437'. [ 262.989790][T11089] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 263.086189][T11096] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 263.387268][T11108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1442'. [ 265.665474][T11130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1448'. [ 265.774556][T11133] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1449'. [ 265.884375][T10960] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 265.908330][T10960] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 265.970341][T11140] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1450'. [ 265.980683][T10960] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 266.006526][T10960] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 266.372246][T10960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.396214][T10960] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.428524][ T5681] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.435694][ T5681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.477570][ T5681] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.484783][ T5681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.701546][T11170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1463'. [ 266.716939][T11173] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1464'. [ 266.736459][T11173] netlink: 'syz.3.1464': attribute type 1 has an invalid length. [ 266.745905][T11173] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1464'. [ 267.005055][T10960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.114587][T10960] veth0_vlan: entered promiscuous mode [ 267.152659][T10960] veth1_vlan: entered promiscuous mode [ 267.223442][T11188] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1468'. [ 267.234936][T10960] veth0_macvtap: entered promiscuous mode [ 267.278911][T10960] veth1_macvtap: entered promiscuous mode [ 267.324468][T11194] x_tables: duplicate underflow at hook 1 [ 267.338783][T10960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.355282][T10960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.366791][T10960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.378182][T10960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.388363][T10960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.399020][T10960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.420968][T10960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.432622][T10960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.442608][T10960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.454641][T10960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.466468][T10960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.516717][T10960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.536353][T10960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.548606][T10960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.559116][T10960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.570025][T10960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.583850][T10960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.593880][T10960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.625839][T10960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.656183][T10960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.656199][T11203] netlink: set zone limit has 8 unknown bytes [ 267.685046][T10960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.701284][T10960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.730047][T10960] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.758839][T10960] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.767604][T10960] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.796639][T10960] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.849550][T11207] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1475'. [ 267.970995][T11207] gretap1: left allmulticast mode [ 267.980276][T11207] gretap1: left promiscuous mode [ 267.985898][T11207] bridge3: port 1(gretap1) entered disabled state [ 268.004100][T11207] team0: Port device gretap1 added [ 268.066715][ T5684] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.095532][ T5684] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.155788][ T5681] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.180779][ T5681] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.604858][T11231] xt_TCPMSS: Only works on TCP SYN packets [ 268.628582][T11232] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1481'. [ 268.862183][T11246] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1484'. [ 268.997403][T11253] ipvlan1: entered promiscuous mode [ 269.038115][T11252] nbd: socks must be embedded in a SOCK_ITEM attr [ 269.129716][T11258] FAULT_INJECTION: forcing a failure. [ 269.129716][T11258] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 269.143972][T11258] CPU: 0 UID: 0 PID: 11258 Comm: syz.1.1490 Not tainted 6.11.0-rc5-syzkaller-00178-g5517ae241919 #0 [ 269.154794][T11258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 269.164854][T11258] Call Trace: [ 269.168137][T11258] [ 269.171072][T11258] dump_stack_lvl+0x241/0x360 [ 269.175761][T11258] ? __pfx_dump_stack_lvl+0x10/0x10 [ 269.180986][T11258] ? __pfx__printk+0x10/0x10 [ 269.185587][T11258] ? __pfx_lock_release+0x10/0x10 [ 269.190620][T11258] should_fail_ex+0x3b0/0x4e0 [ 269.195305][T11258] _copy_from_iter+0x1f6/0x1960 [ 269.200167][T11258] ? __virt_addr_valid+0x183/0x530 [ 269.205290][T11258] ? __pfx_lock_release+0x10/0x10 [ 269.210328][T11258] ? __alloc_skb+0x28f/0x440 [ 269.214929][T11258] ? __pfx__copy_from_iter+0x10/0x10 [ 269.220354][T11258] ? __virt_addr_valid+0x183/0x530 [ 269.225502][T11258] ? __virt_addr_valid+0x183/0x530 [ 269.230607][T11258] ? __virt_addr_valid+0x45f/0x530 [ 269.235715][T11258] ? __check_object_size+0x49c/0x900 [ 269.241002][T11258] netlink_sendmsg+0x73d/0xcb0 [ 269.245770][T11258] ? __pfx_netlink_sendmsg+0x10/0x10 [ 269.251069][T11258] ? __import_iovec+0x536/0x820 [ 269.255917][T11258] ? aa_sock_msg_perm+0x91/0x160 [ 269.260851][T11258] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 269.266132][T11258] ? security_socket_sendmsg+0x87/0xb0 [ 269.271588][T11258] ? __pfx_netlink_sendmsg+0x10/0x10 [ 269.276868][T11258] __sock_sendmsg+0x221/0x270 [ 269.281635][T11258] ____sys_sendmsg+0x525/0x7d0 [ 269.286403][T11258] ? __pfx_____sys_sendmsg+0x10/0x10 [ 269.291694][T11258] __sys_sendmsg+0x2b0/0x3a0 [ 269.296288][T11258] ? __pfx___sys_sendmsg+0x10/0x10 [ 269.301418][T11258] ? vfs_write+0x7c4/0xc90 [ 269.305858][T11258] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 269.312185][T11258] ? do_syscall_64+0x100/0x230 [ 269.316949][T11258] ? do_syscall_64+0xb6/0x230 [ 269.321622][T11258] do_syscall_64+0xf3/0x230 [ 269.326118][T11258] ? clear_bhb_loop+0x35/0x90 [ 269.330792][T11258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.336688][T11258] RIP: 0033:0x7fd7b8779eb9 [ 269.341098][T11258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.360699][T11258] RSP: 002b:00007fd7b963e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 269.369121][T11258] RAX: ffffffffffffffda RBX: 00007fd7b8915f80 RCX: 00007fd7b8779eb9 [ 269.377089][T11258] RDX: 0000000000000000 RSI: 00000000200006c0 RDI: 0000000000000003 [ 269.385051][T11258] RBP: 00007fd7b963e090 R08: 0000000000000000 R09: 0000000000000000 [ 269.393016][T11258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.400980][T11258] R13: 0000000000000000 R14: 00007fd7b8915f80 R15: 00007ffeced477a8 [ 269.409043][T11258] [ 269.555387][T11262] netlink: 'syz.1.1491': attribute type 9 has an invalid length. [ 269.576627][T11262] netlink: 'syz.1.1491': attribute type 7 has an invalid length. [ 269.591348][T11263] netlink: 'syz.3.1492': attribute type 10 has an invalid length. [ 269.599542][T11262] netlink: 'syz.1.1491': attribute type 8 has an invalid length. [ 269.643826][T11263] bond0: (slave netdevsim0): Enslaving as an active interface with a down link [ 269.699376][T11269] netlink: 'syz.2.1494': attribute type 1 has an invalid length. [ 269.900459][T11287] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 269.943585][T11288] SET target dimension over the limit! [ 270.190132][T11303] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 270.447010][T11319] netlink: 'syz.1.1507': attribute type 2 has an invalid length. [ 270.520720][T11323] netlink: 'syz.3.1510': attribute type 4 has an invalid length. [ 270.539891][T11324] netlink: 'syz.3.1510': attribute type 4 has an invalid length. [ 270.935280][T11349] netlink: zone id is out of range [ 270.951531][T11349] __nla_validate_parse: 8 callbacks suppressed [ 270.951547][T11349] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1519'. [ 271.116421][T11358] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 271.494534][ T5247] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 271.506726][ T5247] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 271.515232][ T5247] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 271.527262][ T5247] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 271.535949][ T5247] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 271.543550][ T5247] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 271.634635][T11376] netlink: 'syz.2.1526': attribute type 1 has an invalid length. [ 271.670457][T11376] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1526'. [ 272.701967][T11392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 272.738718][T11396] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1532'. [ 272.748808][T11368] chnl_net:caif_netlink_parms(): no params data found [ 272.862218][T11368] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.869695][T11368] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.877145][T11368] bridge_slave_0: entered allmulticast mode [ 272.886317][T11368] bridge_slave_0: entered promiscuous mode [ 272.897264][T11368] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.904822][T11368] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.912822][T11368] bridge_slave_1: entered allmulticast mode [ 272.920560][T11368] bridge_slave_1: entered promiscuous mode [ 272.970472][T11368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.983425][T11368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.018744][T11368] team0: Port device team_slave_0 added [ 273.030175][T11368] team0: Port device team_slave_1 added [ 273.074536][T11368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.081848][T11368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.122661][T11368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.136223][T11368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.143491][T11368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.181266][T11368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.291497][T11413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1536'. [ 273.326192][T11368] hsr_slave_0: entered promiscuous mode [ 273.340997][T11368] hsr_slave_1: entered promiscuous mode [ 273.347586][T11368] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 273.355780][T11368] Cannot create hsr debugfs directory [ 273.362830][T11413] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1536'. [ 273.393840][T11416] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1537'. [ 273.403140][T11416] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1537'. [ 273.436301][T11413] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1536'. [ 273.458330][T11413] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 273.608574][ T5250] Bluetooth: hci6: command tx timeout [ 273.658678][T11428] netlink: 'syz.1.1540': attribute type 34 has an invalid length. [ 273.833307][T11368] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.008916][T11368] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.142242][T11368] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.226106][T11368] bond0: (slave netdevsim0): Releasing backup interface [ 274.239747][T11368] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.439834][T11368] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 274.465117][T11368] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 274.503150][T11368] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 274.519965][T11368] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 274.749995][T11368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.784041][T11368] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.799227][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.806511][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.848391][ T8288] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.855637][ T8288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.991809][T11464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1549'. [ 275.322339][T11368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.533532][T11479] netlink: 'syz.1.1552': attribute type 1 has an invalid length. [ 275.620678][T11485] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 275.626063][T11479] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 275.656118][T11479] bond4: (slave batadv1): Enslaving as a backup interface with an up link [ 275.699259][ T5250] Bluetooth: hci6: command tx timeout [ 275.750223][T11479] bond4 (unregistering): (slave batadv1): Releasing backup interface [ 275.786691][T11487] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 275.802046][T11479] bond4 (unregistering): Released all slaves [ 275.896106][T11496] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode [ 275.928412][ T2560] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.949221][ T2560] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.969095][T11368] veth0_vlan: entered promiscuous mode [ 276.004638][T11368] veth1_vlan: entered promiscuous mode [ 276.082195][T11368] veth0_macvtap: entered promiscuous mode [ 276.099144][T11501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1558'. [ 276.110082][T11500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1559'. [ 276.117765][T11368] veth1_macvtap: entered promiscuous mode [ 276.134910][T11498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.146967][T11501] FAULT_INJECTION: forcing a failure. [ 276.146967][T11501] name failslab, interval 1, probability 0, space 0, times 1 [ 276.153946][T11368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.160138][T11501] CPU: 1 UID: 0 PID: 11501 Comm: syz.3.1558 Not tainted 6.11.0-rc5-syzkaller-00178-g5517ae241919 #0 [ 276.171735][T11368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.181259][T11501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 276.181275][T11501] Call Trace: [ 276.181284][T11501] [ 276.181293][T11501] dump_stack_lvl+0x241/0x360 [ 276.191115][T11368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.201215][T11501] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.201240][T11501] ? __pfx__printk+0x10/0x10 [ 276.204498][T11368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.207427][T11501] ? __pfx_validate_chain+0x10/0x10 [ 276.212152][T11368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.222483][T11501] should_fail_ex+0x3b0/0x4e0 [ 276.222522][T11501] ? skb_clone+0x20c/0x390 [ 276.222543][T11501] should_failslab+0xac/0x100 [ 276.222569][T11501] ? skb_clone+0x20c/0x390 [ 276.222589][T11501] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 276.222614][T11501] skb_clone+0x20c/0x390 [ 276.222633][T11501] ? ieee80211_store_ack_skb+0x5a/0x1a0 [ 276.222659][T11501] ieee80211_store_ack_skb+0x67/0x1a0 [ 276.222680][T11501] ? ieee80211_build_hdr+0x2203/0x2bb0 [ 276.222703][T11501] ieee80211_build_hdr+0x1601/0x2bb0 [ 276.222738][T11501] ? __pfx___skb_get_hash_net+0x10/0x10 [ 276.222763][T11501] ? __pfx_ieee80211_build_hdr+0x10/0x10 [ 276.222800][T11501] ? ieee80211_tx_skb_fixup+0x364/0x4b0 [ 276.222827][T11501] __ieee80211_subif_start_xmit+0xddd/0x1600 [ 276.222865][T11501] ? __ieee80211_subif_start_xmit+0x300/0x1600 [ 276.222889][T11501] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 276.222912][T11501] ? sta_info_get_bss+0x50/0x320 [ 276.222936][T11501] ? ieee80211_tx_control_port+0x38d/0xdb0 [ 276.222964][T11501] ? ieee80211_tx_control_port+0xb58/0xdb0 [ 276.222986][T11501] ieee80211_tx_control_port+0xb98/0xdb0 [ 276.223010][T11501] ? __pfx___mutex_trylock_common+0x10/0x10 [ 276.223031][T11501] ? ieee80211_tx_control_port+0x7a6/0xdb0 [ 276.223064][T11501] ? __pfx_ieee80211_tx_control_port+0x10/0x10 [ 276.223089][T11501] ? __rtnl_unlock+0xcc/0xf0 [ 276.223110][T11501] ? netdev_run_todo+0xf88/0x1000 [ 276.223137][T11501] nl80211_tx_control_port+0x672/0xa50 [ 276.223177][T11501] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 276.223211][T11501] genl_rcv_msg+0xb14/0xec0 [ 276.223233][T11501] ? mark_lock+0x9a/0x350 [ 276.223268][T11501] ? __pfx_genl_rcv_msg+0x10/0x10 [ 276.223319][T11501] ? __pfx_lock_acquire+0x10/0x10 [ 276.223341][T11501] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 276.223364][T11501] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 276.223384][T11501] ? __pfx_nl80211_post_doit+0x10/0x10 [ 276.223409][T11501] ? __pfx___might_resched+0x10/0x10 [ 276.223445][T11501] netlink_rcv_skb+0x1e3/0x430 [ 276.223476][T11501] ? __pfx_genl_rcv_msg+0x10/0x10 [ 276.223499][T11501] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 276.223528][T11501] ? __netlink_deliver_tap+0x77e/0x7c0 [ 276.223559][T11501] genl_rcv+0x28/0x40 [ 276.223579][T11501] netlink_unicast+0x7f6/0x990 [ 276.230225][T11368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.233355][T11501] ? __pfx_netlink_unicast+0x10/0x10 [ 276.243333][T11368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.248304][T11501] ? __virt_addr_valid+0x183/0x530 [ 276.248332][T11501] ? __check_object_size+0x49c/0x900 [ 276.258909][T11368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.263367][T11501] ? bpf_lsm_netlink_send+0x9/0x10 [ 276.281568][T11368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.282186][T11501] netlink_sendmsg+0x8e4/0xcb0 [ 276.286405][T11368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.291942][T11501] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.291966][T11501] ? __import_iovec+0x536/0x820 [ 276.291985][T11501] ? aa_sock_msg_perm+0x91/0x160 [ 276.292008][T11501] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 276.292028][T11501] ? security_socket_sendmsg+0x87/0xb0 [ 276.292050][T11501] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.292065][T11501] __sock_sendmsg+0x221/0x270 [ 276.297563][T11368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.302859][T11501] ____sys_sendmsg+0x525/0x7d0 [ 276.302895][T11501] ? __pfx_____sys_sendmsg+0x10/0x10 [ 276.308313][T11368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.313684][T11501] __sys_sendmsg+0x2b0/0x3a0 [ 276.330472][T11368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.330783][T11501] ? __pfx___sys_sendmsg+0x10/0x10 [ 276.343698][T11368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.348232][T11501] ? vfs_write+0x7c4/0xc90 [ 276.348301][T11501] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 276.348327][T11501] ? do_syscall_64+0x100/0x230 [ 276.354254][T11368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.359898][T11501] ? do_syscall_64+0xb6/0x230 [ 276.359925][T11501] do_syscall_64+0xf3/0x230 [ 276.359946][T11501] ? clear_bhb_loop+0x35/0x90 [ 276.365739][T11368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.371419][T11501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.371452][T11501] RIP: 0033:0x7fbfca979eb9 [ 276.371469][T11501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.371484][T11501] RSP: 002b:00007fbfcb782038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 276.371505][T11501] RAX: ffffffffffffffda RBX: 00007fbfcab15f80 RCX: 00007fbfca979eb9 [ 276.371518][T11501] RDX: 0000000000000000 RSI: 00000000200006c0 RDI: 0000000000000003 [ 276.371531][T11501] RBP: 00007fbfcb782090 R08: 0000000000000000 R09: 0000000000000000 [ 276.371543][T11501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.371555][T11501] R13: 0000000000000000 R14: 00007fbfcab15f80 R15: 00007ffd8199c048 [ 276.371585][T11501] [ 276.791670][T11368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.801664][T11368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.826172][T11368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.840727][T11368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.854011][T11368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.864456][T11368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.874989][T11368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.889122][T11368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.900777][T11368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.911975][T11368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.926741][T11368] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.935832][T11368] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.946395][T11368] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.955336][T11368] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.980314][T11503] netlink: 'syz.1.1557': attribute type 2 has an invalid length. [ 277.141669][T11521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1563'. [ 277.170583][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.188270][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.247019][ T5684] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.263220][ T5684] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.692128][T11540] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1569'. [ 277.705026][T11540] FAULT_INJECTION: forcing a failure. [ 277.705026][T11540] name failslab, interval 1, probability 0, space 0, times 0 [ 277.718200][T11540] CPU: 1 UID: 0 PID: 11540 Comm: syz.4.1569 Not tainted 6.11.0-rc5-syzkaller-00178-g5517ae241919 #0 [ 277.729081][T11540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 277.739341][T11540] Call Trace: [ 277.742643][T11540] [ 277.745601][T11540] dump_stack_lvl+0x241/0x360 [ 277.750324][T11540] ? __pfx_dump_stack_lvl+0x10/0x10 [ 277.755569][T11540] ? __pfx__printk+0x10/0x10 [ 277.760198][T11540] ? look_up_lock_class+0x77/0x160 [ 277.765364][T11540] ? register_lock_class+0x102/0x980 [ 277.770685][T11540] ? deref_stack_reg+0x1c7/0x260 [ 277.775813][T11540] should_fail_ex+0x3b0/0x4e0 [ 277.780530][T11540] ? radix_tree_node_alloc+0x8b/0x3c0 [ 277.785933][T11540] should_failslab+0xac/0x100 [ 277.790655][T11540] ? radix_tree_node_alloc+0x8b/0x3c0 [ 277.796068][T11540] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 277.801485][T11540] radix_tree_node_alloc+0x8b/0x3c0 [ 277.806824][T11540] idr_get_free+0x296/0xab0 [ 277.808494][ T5250] Bluetooth: hci6: command tx timeout [ 277.811365][T11540] idr_alloc_u32+0x195/0x330 [ 277.811452][T11540] ? __pfx_idr_alloc_u32+0x10/0x10 [ 277.811483][T11540] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 277.811504][T11540] ? __asan_memcpy+0x40/0x70 [ 277.811536][T11540] idr_alloc+0xdf/0x1b0 [ 277.811563][T11540] ? __pfx_idr_alloc+0x10/0x10 [ 277.811597][T11540] ? skb_clone+0x240/0x390 [ 277.811619][T11540] ? ieee80211_store_ack_skb+0x5a/0x1a0 [ 277.811649][T11540] ieee80211_store_ack_skb+0xa8/0x1a0 [ 277.811679][T11540] ieee80211_build_hdr+0x1601/0x2bb0 [ 277.811716][T11540] ? __pfx___skb_get_hash_net+0x10/0x10 [ 277.811745][T11540] ? __pfx_ieee80211_build_hdr+0x10/0x10 [ 277.811787][T11540] ? ieee80211_tx_skb_fixup+0x364/0x4b0 [ 277.811815][T11540] __ieee80211_subif_start_xmit+0xddd/0x1600 [ 277.811853][T11540] ? __ieee80211_subif_start_xmit+0x300/0x1600 [ 277.811877][T11540] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 277.811898][T11540] ? sta_info_get_bss+0x50/0x320 [ 277.811920][T11540] ? ieee80211_tx_control_port+0x38d/0xdb0 [ 277.811947][T11540] ? ieee80211_tx_control_port+0xb58/0xdb0 [ 277.811969][T11540] ieee80211_tx_control_port+0xb98/0xdb0 [ 277.811993][T11540] ? __pfx___mutex_trylock_common+0x10/0x10 [ 277.812011][T11540] ? ieee80211_tx_control_port+0x7a6/0xdb0 [ 277.812041][T11540] ? __pfx_ieee80211_tx_control_port+0x10/0x10 [ 277.812065][T11540] ? __rtnl_unlock+0xcc/0xf0 [ 277.812087][T11540] ? netdev_run_todo+0xf88/0x1000 [ 277.812115][T11540] nl80211_tx_control_port+0x672/0xa50 [ 277.812156][T11540] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 277.812191][T11540] genl_rcv_msg+0xb14/0xec0 [ 277.967428][T11540] ? mark_lock+0x9a/0x350 [ 277.971796][T11540] ? __pfx_genl_rcv_msg+0x10/0x10 [ 277.976838][T11540] ? __pfx_lock_acquire+0x10/0x10 [ 277.981915][T11540] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 277.987320][T11540] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 277.993317][T11540] ? __pfx_nl80211_post_doit+0x10/0x10 [ 277.998872][T11540] ? __pfx___might_resched+0x10/0x10 [ 278.004164][T11540] netlink_rcv_skb+0x1e3/0x430 [ 278.008930][T11540] ? __pfx_genl_rcv_msg+0x10/0x10 [ 278.013963][T11540] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 278.019265][T11540] ? __netlink_deliver_tap+0x77e/0x7c0 [ 278.024732][T11540] genl_rcv+0x28/0x40 [ 278.028713][T11540] netlink_unicast+0x7f6/0x990 [ 278.033485][T11540] ? __pfx_netlink_unicast+0x10/0x10 [ 278.038763][T11540] ? __virt_addr_valid+0x183/0x530 [ 278.043873][T11540] ? __check_object_size+0x49c/0x900 [ 278.049158][T11540] ? bpf_lsm_netlink_send+0x9/0x10 [ 278.054306][T11540] netlink_sendmsg+0x8e4/0xcb0 [ 278.059077][T11540] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.064357][T11540] ? __import_iovec+0x536/0x820 [ 278.069289][T11540] ? aa_sock_msg_perm+0x91/0x160 [ 278.074221][T11540] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 278.079502][T11540] ? security_socket_sendmsg+0x87/0xb0 [ 278.084958][T11540] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.090233][T11540] __sock_sendmsg+0x221/0x270 [ 278.094917][T11540] ____sys_sendmsg+0x525/0x7d0 [ 278.099711][T11540] ? __pfx_____sys_sendmsg+0x10/0x10 [ 278.105030][T11540] __sys_sendmsg+0x2b0/0x3a0 [ 278.109643][T11540] ? __pfx___sys_sendmsg+0x10/0x10 [ 278.114753][T11540] ? vfs_write+0x7c4/0xc90 [ 278.119200][T11540] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 278.125534][T11540] ? do_syscall_64+0x100/0x230 [ 278.130294][T11540] ? do_syscall_64+0xb6/0x230 [ 278.134965][T11540] do_syscall_64+0xf3/0x230 [ 278.139464][T11540] ? clear_bhb_loop+0x35/0x90 [ 278.144138][T11540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.150027][T11540] RIP: 0033:0x7f5da0179eb9 [ 278.154478][T11540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.174079][T11540] RSP: 002b:00007f5da0f42038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 278.182514][T11540] RAX: ffffffffffffffda RBX: 00007f5da0315f80 RCX: 00007f5da0179eb9 [ 278.190498][T11540] RDX: 0000000000000000 RSI: 00000000200006c0 RDI: 0000000000000003 [ 278.198555][T11540] RBP: 00007f5da0f42090 R08: 0000000000000000 R09: 0000000000000000 [ 278.206521][T11540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 278.214503][T11540] R13: 0000000000000000 R14: 00007f5da0315f80 R15: 00007ffc10f30f18 [ 278.223014][T11540] [ 278.540731][T11561] netlink: 'syz.1.1576': attribute type 32 has an invalid length. [ 278.606701][T11561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1576'. [ 278.624270][T11561] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 278.702589][T11567] wg2: entered promiscuous mode [ 278.708533][T11567] wg2: entered allmulticast mode [ 278.900784][T11577] netlink: 9412 bytes leftover after parsing attributes in process `syz.4.1581'. [ 278.912679][T11577] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1581'. [ 279.016374][T11581] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1583'. [ 279.245622][T11590] netlink: 'syz.4.1586': attribute type 11 has an invalid length. [ 279.275959][T11575] --map-set only usable from mangle table [ 279.385730][T11593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1587'. [ 279.856660][T11622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1595'. [ 279.866613][ T5250] Bluetooth: hci6: command tx timeout [ 280.011408][T11630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.185705][T11633] veth0_macvtap: left promiscuous mode [ 280.225147][T11637] netlink: 'syz.3.1601': attribute type 4 has an invalid length. [ 280.238564][T11637] netlink: 'syz.3.1601': attribute type 4 has an invalid length. [ 280.309778][T11639] netlink: 'syz.3.1602': attribute type 2 has an invalid length. [ 280.691519][T11658] sctp: [Deprecated]: syz.2.1608 (pid 11658) Use of int in max_burst socket option. [ 280.691519][T11658] Use struct sctp_assoc_value instead [ 280.706640][T11659] sctp: [Deprecated]: syz.2.1608 (pid 11659) Use of int in max_burst socket option. [ 280.706640][T11659] Use struct sctp_assoc_value instead [ 281.060610][T11668] netlink: 'syz.4.1611': attribute type 1 has an invalid length. [ 281.087697][T11668] lo: entered promiscuous mode [ 281.263376][T11684] netlink: 'syz.2.1614': attribute type 29 has an invalid length. [ 281.279954][T11678] netlink: 'syz.2.1614': attribute type 29 has an invalid length. [ 281.373971][T11686] __nla_validate_parse: 6 callbacks suppressed [ 281.373990][T11686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1616'. [ 281.415486][T11685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 281.482772][T11692] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1619'. [ 281.492687][T11692] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1619'. [ 281.543177][T11692] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1619'. [ 281.560192][T11692] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1619'. [ 281.571188][T11692] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1619'. [ 281.581548][T11692] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1619'. [ 281.594072][T11692] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1619'. [ 281.604709][T11692] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1619'. [ 281.617483][T11692] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1619'. [ 281.740306][T11703] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 282.063301][T11711] syzkaller1: entered promiscuous mode [ 282.069116][T11711] syzkaller1: entered allmulticast mode [ 282.831144][T11719] IPVS: Error joining to the multicast group [ 283.514204][T11740] netlink: 'syz.3.1634': attribute type 4 has an invalid length. [ 283.793724][T11752] xt_l2tp: wrong L2TP version: 0 [ 284.855465][T11796] netlink: 'syz.1.1650': attribute type 1 has an invalid length. [ 284.863810][T11796] netlink: 'syz.1.1650': attribute type 1 has an invalid length. [ 284.872105][T11796] netlink: 'syz.1.1650': attribute type 1 has an invalid length. [ 285.880405][T11852] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 286.503059][T11881] dummy0: entered promiscuous mode [ 286.515047][T11881] dummy0: left promiscuous mode [ 286.564294][T11888] validate_nla: 62 callbacks suppressed [ 286.564312][T11888] netlink: 'syz.1.1678': attribute type 267 has an invalid length. [ 286.583339][T11888] __nla_validate_parse: 98 callbacks suppressed [ 286.583358][T11888] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1678'. [ 286.640790][T11888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1678'. [ 286.748510][T11895] netlink: 'syz.2.1680': attribute type 29 has an invalid length. [ 286.873799][T11904] netlink: 'syz.1.1682': attribute type 6 has an invalid length. [ 286.896129][T11901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1681'. [ 287.089774][T11911] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.1686'. [ 287.108901][T11911] openvswitch: netlink: Actions may not be safe on all matching packets [ 287.111713][T11919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1687'. [ 287.121684][T11911] netlink: 'syz.2.1686': attribute type 21 has an invalid length. [ 287.144289][T11911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1686'. [ 287.161033][T11918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 287.300702][T11928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1690'. [ 287.593002][T11951] IPVS: set_ctl: invalid protocol: 43 100.1.1.2:20004 [ 288.573193][T11990] syzkaller0: entered promiscuous mode [ 288.586998][T11990] syzkaller0: entered allmulticast mode [ 288.896034][T12008] netlink: 'syz.2.1714': attribute type 1 has an invalid length. [ 288.918071][T12008] netlink: 512 bytes leftover after parsing attributes in process `syz.2.1714'. [ 289.095802][T12017] netlink: 'syz.3.1717': attribute type 1 has an invalid length. [ 289.109218][T12017] netlink: 'syz.3.1717': attribute type 3 has an invalid length. [ 289.127957][T12017] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1717'. [ 289.145701][T12017] NCSI netlink: No device for ifindex 131080 [ 291.310196][T11999] vlan2: entered allmulticast mode [ 291.486216][T12036] netlink: 'syz.1.1722': attribute type 5 has an invalid length. [ 291.554114][T12043] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1724'. [ 291.661850][T12051] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1726'. [ 291.666158][T12042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1723'. [ 291.679049][T12050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 291.957590][T12071] netlink: 'syz.1.1729': attribute type 29 has an invalid length. [ 291.966580][T12058] netlink: 'syz.1.1729': attribute type 29 has an invalid length. [ 292.092181][T12077] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20003 [ 292.107439][T12077] x_tables: duplicate underflow at hook 3 [ 292.233261][T12082] netlink: 596 bytes leftover after parsing attributes in process `syz.3.1736'. [ 292.314329][T12085] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1736'. [ 292.625978][T12091] netlink: 'syz.4.1739': attribute type 13 has an invalid length. [ 292.720053][T12061] delete_channel: no stack [ 292.812561][T12097] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1741'. [ 292.829036][T12099] netlink: 'syz.1.1741': attribute type 1 has an invalid length. [ 292.836813][T12099] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1741'. [ 292.867936][T12097] netlink: 'syz.1.1741': attribute type 1 has an invalid length. [ 292.891106][T12097] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1741'. [ 292.955677][T12101] --map-set only usable from mangle table [ 293.113344][T12111] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1745'. [ 293.319640][T12115] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1747'. [ 293.348940][T12114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.683657][T12130] netlink: 'syz.3.1752': attribute type 1 has an invalid length. [ 293.771195][T12134] sctp: [Deprecated]: syz.3.1754 (pid 12134) Use of int in max_burst socket option. [ 293.771195][T12134] Use struct sctp_assoc_value instead [ 293.887387][T12144] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1756'. [ 293.922882][T12144] netlink: 'syz.2.1756': attribute type 12 has an invalid length. [ 293.957957][T12144] netlink: 'syz.2.1756': attribute type 11 has an invalid length. [ 293.991261][T12144] netlink: 'syz.2.1756': attribute type 11 has an invalid length. [ 294.008219][T12144] netlink: 'syz.2.1756': attribute type 11 has an invalid length. [ 294.039778][T12144] netlink: 'syz.2.1756': attribute type 11 has an invalid length. [ 294.047901][T12144] netlink: 'syz.2.1756': attribute type 11 has an invalid length. [ 294.064137][T12144] netlink: 'syz.2.1756': attribute type 11 has an invalid length. [ 294.077934][T12144] netlink: 'syz.2.1756': attribute type 4 has an invalid length. [ 294.101828][T12144] netlink: 'syz.2.1756': attribute type 5 has an invalid length. [ 294.270770][T12159] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:17 to non-existent VLAN 1280 [ 294.313568][T12159] netlink: 'syz.2.1762': attribute type 7 has an invalid length. [ 294.443558][T12166] ebt_among: src integrity fail: 30a [ 294.650493][ T5684] ip6_tnl_xmit_ctl: 3 callbacks suppressed [ 294.650515][ T5684] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 294.683524][ T46] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 294.691731][ T5684] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 294.739507][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 294.768006][T12160] ip6gretap0: entered promiscuous mode [ 295.368573][ T943] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 295.535505][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 295.688462][ T943] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 296.063523][T12245] openvswitch: netlink: Key type 29 is not supported [ 298.348172][T12257] validate_nla: 1 callbacks suppressed [ 298.348192][T12257] netlink: 'syz.2.1791': attribute type 1 has an invalid length. [ 298.675405][T12283] sch_tbf: peakrate 32768 is lower than or equals to rate 1281593178885145793 ! [ 298.692349][T12283] __nla_validate_parse: 10 callbacks suppressed [ 298.692371][T12283] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1799'. [ 298.709769][T12283] 0·: renamed from hsr_slave_1 (while UP) [ 298.718816][T12283] 0·: entered allmulticast mode [ 298.728540][T12283] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 298.758489][T12280] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1798'. [ 298.888121][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 299.203694][T12319] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1807'. [ 299.671021][T12342] pim6reg1: entered promiscuous mode [ 299.676367][T12342] pim6reg1: entered allmulticast mode [ 299.846915][T12352] x_tables: unsorted entry at hook 1 [ 300.528938][T12371] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1824'. [ 300.621762][T12371] ebtables: ebtables: counters copy to user failed while replacing table [ 300.719885][ T2560] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.880426][ T2560] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.976631][ T5250] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 300.986319][ T5250] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 301.001303][ T5250] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 301.022695][ T5250] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 301.023277][ T2560] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.047157][ T5250] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 301.055909][ T5250] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 301.108623][ T2560] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.341657][ T2560] bridge_slave_1: left allmulticast mode [ 301.347514][ T2560] bridge_slave_1: left promiscuous mode [ 301.353929][ T2560] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.365357][ T2560] bridge_slave_0: left allmulticast mode [ 301.371891][ T2560] bridge_slave_0: left promiscuous mode [ 301.377682][ T2560] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.806641][ T2560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 301.824158][ T2560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 301.835176][ T2560] bond0 (unregistering): Released all slaves [ 301.845209][T12382] chnl_net:caif_netlink_parms(): no params data found [ 301.952547][T12382] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.967044][T12382] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.974468][T12382] bridge_slave_0: entered allmulticast mode [ 301.983676][T12382] bridge_slave_0: entered promiscuous mode [ 302.022508][T12382] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.030403][T12382] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.037611][T12382] bridge_slave_1: entered allmulticast mode [ 302.045431][T12382] bridge_slave_1: entered promiscuous mode [ 302.130567][T12382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.144653][ T2560] ------------[ cut here ]------------ [ 302.150485][ T2560] Have pending ack frames! [ 302.160594][T12382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.173353][ T2560] WARNING: CPU: 0 PID: 2560 at net/mac80211/main.c:1701 ieee80211_free_ack_frame+0x4c/0x60 [ 302.185023][ T2560] Modules linked in: [ 302.189465][ T2560] CPU: 0 UID: 0 PID: 2560 Comm: kworker/u8:8 Not tainted 6.11.0-rc5-syzkaller-00178-g5517ae241919 #0 [ 302.200424][ T2560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 302.210585][ T2560] Workqueue: netns cleanup_net [ 302.215372][ T2560] RIP: 0010:ieee80211_free_ack_frame+0x4c/0x60 [ 302.221915][ T2560] Code: 00 00 00 e8 d6 5c 5e fe 31 c0 5b c3 cc cc cc cc e8 39 31 72 f6 c6 05 97 f2 e0 04 01 90 48 c7 c7 60 24 29 8d e8 55 55 34 f6 90 <0f> 0b 90 90 eb c9 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 90 [ 302.241924][ T2560] RSP: 0018:ffffc9000965f7d0 EFLAGS: 00010246 [ 302.249003][ T2560] RAX: d344b931a47ebd00 RBX: ffff88807961e780 RCX: ffff88802f2fbc00 [ 302.257161][ T2560] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 302.265678][ T2560] RBP: ffffc9000965f8d8 R08: ffffffff8155b2f2 R09: fffffbfff1cfa0e0 [ 302.274161][ T2560] R10: dffffc0000000000 R11: fffffbfff1cfa0e0 R12: ffffc9000965f840 [ 302.283236][ T2560] R13: dffffc0000000000 R14: ffff888029be952c R15: ffff88802d58cdf0 [ 302.291763][ T2560] FS: 0000000000000000(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 302.301158][ T2560] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 302.308122][ T2560] CR2: 00007ff6caa47d60 CR3: 000000007a806000 CR4: 00000000003506f0 [ 302.316127][ T2560] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 302.324407][ T2560] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 302.332556][ T2560] Call Trace: [ 302.335857][ T2560] [ 302.338951][ T2560] ? __warn+0x163/0x4e0 [ 302.343136][ T2560] ? ieee80211_free_ack_frame+0x4c/0x60 [ 302.348819][ T2560] ? report_bug+0x2b3/0x500 [ 302.353437][ T2560] ? ieee80211_free_ack_frame+0x4c/0x60 [ 302.359054][ T2560] ? handle_bug+0x3e/0x70 [ 302.363400][ T2560] ? exc_invalid_op+0x1a/0x50 [ 302.368204][ T2560] ? asm_exc_invalid_op+0x1a/0x20 [ 302.373269][ T2560] ? __warn_printk+0x292/0x360 [ 302.378119][ T2560] ? ieee80211_free_ack_frame+0x4c/0x60 [ 302.383707][ T2560] idr_for_each+0x1e2/0x2d0 [ 302.388801][ T2560] ? __pfx_ieee80211_free_ack_frame+0x10/0x10 [ 302.395134][ T2560] ? __pfx_idr_for_each+0x10/0x10 [ 302.400263][ T2560] ? kobject_put+0x272/0x480 [ 302.404965][ T2560] ? kfree+0x149/0x360 [ 302.409498][ T2560] ieee80211_free_hw+0xd0/0x480 [ 302.414603][ T2560] mac80211_hwsim_del_radio+0x32b/0x4c0 [ 302.420574][ T2560] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 302.426701][ T2560] hwsim_exit_net+0x5c1/0x670 SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 302.431533][ T2560] ? __pfx_hwsim_exit_net+0x10/0x10 [ 302.436774][ T2560] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 302.442732][ T2560] cleanup_net+0x802/0xcc0 [ 302.447180][ T2560] ? __pfx_cleanup_net+0x10/0x10 [ 302.453137][ T2560] ? process_scheduled_works+0x945/0x1830 [ 302.458981][ T2560] process_scheduled_works+0xa2c/0x1830 [ 302.464588][ T2560] ? __pfx_process_scheduled_works+0x10/0x10 [ 302.470691][ T2560] ? assign_work+0x364/0x3d0 [ 302.475312][ T2560] worker_thread+0x86d/0xd10 [ 302.480548][ T2560] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 302.486485][ T2560] ? __kthread_parkme+0x169/0x1d0 [ 302.492206][ T2560] ? __pfx_worker_thread+0x10/0x10 [ 302.497359][ T2560] kthread+0x2f0/0x390 [ 302.501740][ T2560] ? __pfx_worker_thread+0x10/0x10 [ 302.506881][ T2560] ? __pfx_kthread+0x10/0x10 [ 302.511679][ T2560] ret_from_fork+0x4b/0x80 [ 302.516124][ T2560] ? __pfx_kthread+0x10/0x10 [ 302.521083][ T2560] ret_from_fork_asm+0x1a/0x30 [ 302.525891][ T2560] [ 302.528986][ T2560] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 302.536283][ T2560] CPU: 0 UID: 0 PID: 2560 Comm: kworker/u8:8 Not tainted 6.11.0-rc5-syzkaller-00178-g5517ae241919 #0 [ 302.547155][ T2560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 302.557231][ T2560] Workqueue: netns cleanup_net [ 302.562027][ T2560] Call Trace: [ 302.565313][ T2560] [ 302.568432][ T2560] dump_stack_lvl+0x241/0x360 [ 302.573129][ T2560] ? __pfx_dump_stack_lvl+0x10/0x10 [ 302.578368][ T2560] ? __pfx__printk+0x10/0x10 [ 302.582964][ T2560] ? _printk+0xd5/0x120 [ 302.587132][ T2560] ? vscnprintf+0x5d/0x90 [ 302.591483][ T2560] panic+0x349/0x860 [ 302.595402][ T2560] ? __warn+0x172/0x4e0 [ 302.599574][ T2560] ? __pfx_panic+0x10/0x10 [ 302.603996][ T2560] ? show_trace_log_lvl+0x4e6/0x520 [ 302.609223][ T2560] ? ret_from_fork_asm+0x1a/0x30 [ 302.614188][ T2560] __warn+0x346/0x4e0 [ 302.618186][ T2560] ? ieee80211_free_ack_frame+0x4c/0x60 [ 302.623748][ T2560] report_bug+0x2b3/0x500 [ 302.628076][ T2560] ? ieee80211_free_ack_frame+0x4c/0x60 [ 302.633621][ T2560] handle_bug+0x3e/0x70 [ 302.637772][ T2560] exc_invalid_op+0x1a/0x50 [ 302.642281][ T2560] asm_exc_invalid_op+0x1a/0x20 [ 302.647131][ T2560] RIP: 0010:ieee80211_free_ack_frame+0x4c/0x60 [ 302.653284][ T2560] Code: 00 00 00 e8 d6 5c 5e fe 31 c0 5b c3 cc cc cc cc e8 39 31 72 f6 c6 05 97 f2 e0 04 01 90 48 c7 c7 60 24 29 8d e8 55 55 34 f6 90 <0f> 0b 90 90 eb c9 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 90 [ 302.672889][ T2560] RSP: 0018:ffffc9000965f7d0 EFLAGS: 00010246 [ 302.678954][ T2560] RAX: d344b931a47ebd00 RBX: ffff88807961e780 RCX: ffff88802f2fbc00 [ 302.686917][ T2560] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 302.694878][ T2560] RBP: ffffc9000965f8d8 R08: ffffffff8155b2f2 R09: fffffbfff1cfa0e0 [ 302.702844][ T2560] R10: dffffc0000000000 R11: fffffbfff1cfa0e0 R12: ffffc9000965f840 [ 302.710824][ T2560] R13: dffffc0000000000 R14: ffff888029be952c R15: ffff88802d58cdf0 [ 302.718793][ T2560] ? __warn_printk+0x292/0x360 [ 302.723560][ T2560] idr_for_each+0x1e2/0x2d0 [ 302.728063][ T2560] ? __pfx_ieee80211_free_ack_frame+0x10/0x10 [ 302.734130][ T2560] ? __pfx_idr_for_each+0x10/0x10 [ 302.739152][ T2560] ? kobject_put+0x272/0x480 [ 302.743733][ T2560] ? kfree+0x149/0x360 [ 302.747800][ T2560] ieee80211_free_hw+0xd0/0x480 [ 302.752656][ T2560] mac80211_hwsim_del_radio+0x32b/0x4c0 [ 302.758212][ T2560] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 302.764283][ T2560] hwsim_exit_net+0x5c1/0x670 [ 302.768964][ T2560] ? __pfx_hwsim_exit_net+0x10/0x10 [ 302.774163][ T2560] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 302.779966][ T2560] cleanup_net+0x802/0xcc0 [ 302.784382][ T2560] ? __pfx_cleanup_net+0x10/0x10 [ 302.789326][ T2560] ? process_scheduled_works+0x945/0x1830 [ 302.795041][ T2560] process_scheduled_works+0xa2c/0x1830 [ 302.800608][ T2560] ? __pfx_process_scheduled_works+0x10/0x10 [ 302.806590][ T2560] ? assign_work+0x364/0x3d0 [ 302.811185][ T2560] worker_thread+0x86d/0xd10 [ 302.815778][ T2560] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 302.821691][ T2560] ? __kthread_parkme+0x169/0x1d0 [ 302.826739][ T2560] ? __pfx_worker_thread+0x10/0x10 [ 302.831861][ T2560] kthread+0x2f0/0x390 [ 302.835935][ T2560] ? __pfx_worker_thread+0x10/0x10 [ 302.841042][ T2560] ? __pfx_kthread+0x10/0x10 [ 302.845642][ T2560] ret_from_fork+0x4b/0x80 [ 302.850055][ T2560] ? __pfx_kthread+0x10/0x10 [ 302.854642][ T2560] ret_from_fork_asm+0x1a/0x30 [ 302.859416][ T2560] [ 302.862538][ T2560] Kernel Offset: disabled [ 302.866906][ T2560] Rebooting in 86400 seconds..