last executing test programs: 47.03970177s ago: executing program 1 (id=761): socket$nl_generic(0x10, 0x3, 0x10) gettid() socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 64) r0 = accept$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, &(0x7f0000000200)=0x10) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000", @ANYRES16=0x0, @ANYBLOB="100026bd7000ffdbdf256c00000008000300", @ANYRES32=r0, @ANYBLOB="0c009900000001003e000000080022019d020000"], 0x30}, 0x1, 0x0, 0x0, 0x85}, 0x40a0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000008a6000000c0000000c000000020000000000000000000004f6ffffff"], 0x0, 0x26}, 0x20) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000000000100000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async, rerun: 32) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x1c, &(0x7f0000000280)}, 0x20000084) (async, rerun: 64) r1 = socket$kcm(0x10, 0x2, 0x0) (rerun: 64) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x33fe0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x89b0, &(0x7f0000000040)={'bond0\x00'}) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r4, 0x2, 0x2}, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) socket(0x10, 0x3, 0x0) (async) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) (async) socket$netlink(0x10, 0x3, 0x0) (async) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00", 0x24}], 0x1) write$binfmt_misc(r7, &(0x7f0000000000)=ANY=[@ANYRES32=r5], 0x15) (async) splice(r6, 0x0, r8, 0x0, 0x19404, 0x0) 46.905572502s ago: executing program 1 (id=765): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c1300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000048aab3dc850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x42) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000005200000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x66, 0x0, 0x0) 46.60618851s ago: executing program 1 (id=768): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x0, 0x26}, 0x20) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x11}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000000000007410000004c0018000008d062726f6164636173742d93582d0f000000000000000000000b0000000000000000000000000000000000eb0fbeff01000000000000001000"/104], 0x68}}, 0x0) 31.535258962s ago: executing program 1 (id=768): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x0, 0x26}, 0x20) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x11}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000000000007410000004c0018000008d062726f6164636173742d93582d0f000000000000000000000b0000000000000000000000000000000000eb0fbeff01000000000000001000"/104], 0x68}}, 0x0) 20.101114521s ago: executing program 1 (id=768): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x0, 0x26}, 0x20) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x11}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000000000007410000004c0018000008d062726f6164636173742d93582d0f000000000000000000000b0000000000000000000000000000000000eb0fbeff01000000000000001000"/104], 0x68}}, 0x0) 8.829034971s ago: executing program 1 (id=768): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x0, 0x26}, 0x20) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x11}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000000000007410000004c0018000008d062726f6164636173742d93582d0f000000000000000000000b0000000000000000000000000000000000eb0fbeff01000000000000001000"/104], 0x68}}, 0x0) 2.002909415s ago: executing program 2 (id=1270): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003b15000000000000000000004888", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r0, @ANYBLOB], 0x40}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x5, 0x5, 0x2, &(0x7f0000000400)) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f00000006c0)='veth0_to_bridge\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}], {0x14, 0x10}}, 0x58}, 0x1, 0xe00}, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000080)=0x1, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$ETHTOOL_MSG_RINGS_GET(r4, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={0x0}}, 0x8001) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00'}) ioctl$SIOCGIFHWADDR(r6, 0x8927, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x0, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r7], 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) 1.786701679s ago: executing program 2 (id=1274): close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000140)=0x56) bpf$PROG_LOAD(0x5, 0x0, 0x5a) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000100000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x7}, 0x10) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x0, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="4c87fe555ceb79157b1e507ff4d3cc053321e42ae89f596427188b4877ab8f1776c0685784f1174c6401ecc1dd6e2a77bc79238f87ad9215a92ff203a30099e77c543e702b4a4438d358616381745f24f74e585498af129c4b173b242f445b08135f7fa40eb7ba78160ff4f0c80e1b324d0c234cb7f43a3ff9e9535dc16000c797113a039f4508a09144090000009f38a90a24f173b3e68377e4272950a80cfcd3aa6850e917bc7e57370060f5e6db941d67fc98a1e98103830b821657438325578d2af822dd4fc13ea7a7eef8d9be4e715aec8fd6cadc41c8da5ce9da2b9e1559d92a1936fc2b3a00000000000000000072200e10ba6269b634f10f7098c65ba67ba65c0e2687637e131fb8d5ba6c12c09c8356853c434a44ff0878e496dcf9a4f5ca02c293279948f37ebb28843f92c87c057a3b410e04418557d5deda7ddd3bd1d384d64ec980187e8b64a0696571a49e847db79349c9b3c3fab5f1f977bde4d802d9026ae0c11744eb1525c5195fd215d7a432497f35c2f2cfcd2b6336b26dfef0cb968c910ea2af5cdd4d58cc08535d5514", 0x2, 0x0, 0x10000}, 0x24) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r7, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x90}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={r5, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000340)={r5, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x9c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ZERO(r8, 0x0, 0x48f, &(0x7f00000000c0)={0x0, @empty, 0x0, 0x0, 'sed\x00'}, 0x2c) socket$nl_route(0x10, 0x3, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r9, &(0x7f0000000080)=ANY=[], 0x32600) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000001, 0x12, 0xffffffffffffffff, 0x2000) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r9, 0x1) setsockopt(r10, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) 1.630483644s ago: executing program 2 (id=1276): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100766c616e000000001400028006000100000000000600050088a8000008000500", @ANYRES32=r1, @ANYBLOB="080003"], 0x54}}, 0x0) 1.555652763s ago: executing program 0 (id=1278): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c1300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000048aab3dc850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x42) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="180500000000000e0000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x66, 0x0, 0x0) 1.45173843s ago: executing program 2 (id=1279): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6e}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140b}, 0x7}]}, &(0x7f00000002c0)=0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000014c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x12400000}, 0xc, &(0x7f0000001480)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000000104050100000000000000000100000808000340000000ff050001000000000008000540000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8000) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r2 = socket(0x40000000015, 0x0, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000200), 0x10) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}, 0x2, 0x0, 0x2}}, 0x2e) close(0xffffffffffffffff) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000540)={{{@in, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x9, 0xa, 0x0, 0x0, 0x5e}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}}, {{@in=@multicast2, 0x0, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x3a}}}, 0xe8) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x189042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000440)=0x40000400) ioctl$PPPIOCSACTIVE(r5, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 1.297827873s ago: executing program 0 (id=1281): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x0, 0x84) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0xe, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000002a00090000000000003000000400002c14001600fc01000000000000000000000000000008000c"], 0x30}, 0x1, 0x3000000}, 0x0) 1.087926469s ago: executing program 4 (id=1283): r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x14}], {0x14}}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000058", @ANYRES32=r1, @ANYBLOB="000000000000000014001a80100005800c00038008"], 0x34}}, 0x0) 1.03532316s ago: executing program 4 (id=1284): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000005f4800000c0000000200"/38], 0x0, 0x26}, 0x20) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x11}}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000000000007410000004c0018000008d062726f6164636173742d93582d0f00000000000000000000000000000000000000000000000000000000eb0fbeff01000000000000001000"/104], 0x68}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) socket(0x11, 0x800000003, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x6, "000000000000000000040200050000ff"}}}]}, 0x48}, 0x1, 0x0, 0x11000000}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000004300)={0x0, 0x0, &(0x7f00000042c0)={&(0x7f0000002540)=ANY=[@ANYBLOB=' \f\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000200000008000100", @ANYRES32=0x0, @ANYBLOB="4401028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000000000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="5c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000002c0004000000000000000000000000000000000000000000000000000000000000000000000000000000000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000000000008000100", @ANYRES32=0x0, @ANYBLOB="740002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="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"/403, @ANYRES32=r1, @ANYBLOB="f00002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="400002803c00010024000100757365725f6c696e6b757000000000220000000000000004000000000000000005000300063745f1cd0000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="7c00028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040000000000080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="6801028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES64=r5, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000000000008000100", @ANYRES32=0x0, @ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000040000100240001006c625f686133685f737461747300000000000000000000000000000000000000050003000b0000000800040000000000080007000000000038000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000005000300030000000800040000000000400001002400010071756575655f696400000000000000000000000000000000000000000000000005000300030000000800040000000000080600", @ANYRES32=0x0, @ANYBLOB="44000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b00000014000400000000000000000000000000000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000000000008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ec01028038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400000000003c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000c0004000000000000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000000008000600", @ANYRES8, @ANYBLOB="44000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000140004000000000000000000000000000000000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000000000008000100", @ANYRES32=0x0, @ANYBLOB="70010280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040000000000080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000005000300030000000800040000000000"], 0xc20}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x31, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) 931.865616ms ago: executing program 0 (id=1286): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB="40010000100013070000000000000000fe8000000000000000000000000000aa7f000001000000000000000000000000222c787953794cc50000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000010000000000000000000000000000000032000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080016007d000000"], 0x140}}, 0x800) 910.36823ms ago: executing program 4 (id=1288): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b40500000000000071106e00000000000600000000000000950000000000000073095de24582ce6f8c56f175b17ccc3ab0aa9f12a44fb85111bb5ab73a9a3799cc9bc04538286349ae498381ee19e95afd9b9a4d70c01e1c65cccae85b6e5f44"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007110b0000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = accept(r0, &(0x7f00000001c0)=@ethernet={0x0, @link_local}, &(0x7f0000000240)=0x80) recvfrom(r1, &(0x7f0000000440)=""/190, 0xbe, 0x2020, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000008018300000000000000000500000134000480080008400000000308d0ab32ad00000408000b40000000040800034000000001080001400000000e0800f63f0000000c0600ee3f890600000900010073797a31f7cc00000000"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1}) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x65) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x48) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f00000000c0)={0x3, 'veth0_to_team\x00', {0xff}}) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b}, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r6 = socket(0x840000000002, 0x3, 0xff) setsockopt$inet_int(r6, 0x0, 0x16, &(0x7f0000000000)=0x9, 0x4) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r6, &(0x7f0000000bc0)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000b00)="1667dbca63e151d2a42d020949b4d03863a664469252181d", 0x18}], 0x1}}], 0x1, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a3c000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a30000000000800054000", @ANYRES16=r3], 0x64}}, 0x4000) getpeername(r5, 0x0, &(0x7f0000000340)) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0xff, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@ra={0x94, 0x4, 0x7}, @timestamp={0x44, 0x14, 0x5, 0x3, 0x0, [0x0, 0x0, 0x0, 0x0]}, @cipso={0x86, 0x6, 0xffffffffffffffff}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000940a000000000000567e3432297448add6909cef38ee3f502cd3321eb922ecb5a7f575c08500000083000000bf091f000000000000b9cba3fc1edada58698300010000000000b600000000000000bf91000000000000b7020000000000008500000000000000b700000000000000950000000000000089aee95de51cda7ea7d2"], 0x0, 0x3}, 0x90) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r7, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 844.984029ms ago: executing program 3 (id=1289): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002a00)='memory.current\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x3, 0x0, 0x0) (async) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000013000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006772653000000000000000000000000018001a80080002"], 0x4c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x5, "000000000000000500000000f42dac55"}}}]}, 0x48}}, 0x0) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="58030000", @ANYRES16=0x0, @ANYBLOB="000225bd7000fcdbdf258800000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x358}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async) clock_gettime(0x0, &(0x7f0000002980)={0x0, 0x0}) recvmmsg$unix(r5, &(0x7f0000002800)=[{{&(0x7f00000000c0), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000300)=""/230, 0xe6}, {&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000400)=""/136, 0x88}, {&(0x7f0000000180)=""/39, 0x27}], 0x4}}, {{&(0x7f00000004c0), 0x6e, &(0x7f0000000280), 0x0, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000000600), 0x6e, &(0x7f0000000740)=[{&(0x7f0000000680)}, {&(0x7f00000006c0)=""/86, 0x56}, {&(0x7f00000007c0)=""/186, 0xba}], 0x3, &(0x7f0000000880)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000940)=""/144, 0x90}, {&(0x7f0000000a00)=""/119, 0x77}, {&(0x7f0000000a80)=""/200, 0xc8}, {&(0x7f0000000b80)=""/61, 0x3d}, {&(0x7f0000000bc0)=""/151, 0x97}, {&(0x7f0000000c80)=""/15, 0xf}, {&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000001cc0)=""/70, 0x46}], 0x8, &(0x7f0000001dc0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000001e00)=""/63, 0x3f}, {&(0x7f0000001e40)=""/201, 0xc9}, {&(0x7f0000001f40)=""/208, 0xd0}, {&(0x7f0000002040)=""/143, 0x8f}, {&(0x7f0000002100)=""/249, 0xf9}, {&(0x7f0000002200)=""/233, 0xe9}], 0x6, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f00000023c0)=@abs, 0x6e, &(0x7f0000002680)=[{&(0x7f0000002440)=""/16, 0x10}, {&(0x7f0000002480)=""/18, 0x12}, {&(0x7f00000024c0)=""/134, 0x86}, {&(0x7f0000002580)=""/121, 0x79}, {&(0x7f0000002600)=""/92, 0x5c}], 0x5, &(0x7f0000002700)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}], 0x6, 0x40, &(0x7f00000029c0)={r6, r7+10000000}) 787.672856ms ago: executing program 0 (id=1290): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="5400000010000104000000000000000000000058", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100766c616e000000001400028006000100000000000600050088a8000008000500", @ANYRES32=r1, @ANYBLOB="080003"], 0x54}}, 0x0) 772.310488ms ago: executing program 3 (id=1291): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c1300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000048aab3dc850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x42) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="180500000000000f0000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x66, 0x0, 0x0) 731.915631ms ago: executing program 4 (id=1292): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) (async) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r3, 0x29, 0x39, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0204"], 0x18) (async) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @remote, 0x7}, 0xfffffc74) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x9, 0x1ff, 0x0, 0x2058, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x4, 0x7}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000540)="49461fb426b6705168273a2be1375fe45b106b32991b4da3ee82275b39501c2103dc2ae7286637462fd5348ad1ad858f5f50aab8046fd97515c610108b19b50a37c673cc", 0xa7c, r4}, 0x38) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x4, 0xfff, 0xc}, 0x48) bpf$MAP_UPDATE_BATCH(0x19, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x16ec7077c8c871d9}, 0x38) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="98030000", @ANYRES16=r8, @ANYRESOCT, @ANYRES32=r9, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x8000) (async) syz_emit_ethernet(0x8e, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x11, &(0x7f0000001000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYRESOCT], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x4}, 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) 643.929785ms ago: executing program 0 (id=1293): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000003e0095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050059c03db6000000005e00000008000300", @ANYRES32=r2], 0x38}, 0x1, 0xe0ffff00000000}, 0x0) 632.616361ms ago: executing program 3 (id=1294): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000000)='GPL\x00', 0xd, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f0000000000)=0x101, 0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000ac0)="2d44af30f14ffcb45f8ae67e3524bb68abaf402f9f86bf3c983de585551389a262af4e8eb491dbaf6d9180b75ab28c24b740628f207aa2524bbd69d3147055ec999750b039ee36704950153059fc4a4e2774fafec142889f74336119b60427e0b8873b8e50ff7ec5cef830006cd3012d5133313890c2af87d73d4b530344c444e180cb37c5482abde6899b4ca8bbc86d6dc51b8efd7be3b8c4a530ad29a1c0f48172cab531a161a3724ad58899a68a86e12115b131c9bddbe30340e930366a0b1da4d2d503fbcf217499e1e29c18c0e0d4fa7a23992df9431ca69410", 0xdc) sendto$inet6(r2, 0x0, 0x0, 0x2404c801, &(0x7f0000000040)={0xa, 0x0, 0x200003, @loopback, 0xfffffff7}, 0x21) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0x1a, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_fd={0x18, 0x7, 0x1, 0x0, r3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) unshare(0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e21, 0xffff, @dev={0xfe, 0x80, '\x00', 0x35}, 0x7}, 0x1c) getpeername$inet6(r0, 0x0, &(0x7f00000003c0)=0xff9b) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001580)=@filter={'filter\x00', 0x2, 0x4, 0x450, 0xffffffff, 0x1b8, 0xd0, 0x1b8, 0xfeffffff, 0xffffffff, 0x380, 0x380, 0x380, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "fbfbe99de20a7cb68740471957ef111c864b3225fd3ed4cd5d2d06a79ff0"}}, {{@uncond, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x3, 0x7ff, 0x0, 0x0, 'syz1\x00', 0x6}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newsa={0xf0, 0x12, 0x713, 0x0, 0x0, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@remote}, @in=@rand_addr=0x64010102}}, 0xf0}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000e40)=@mangle={'mangle\x00', 0x2, 0x6, 0x6a8, 0x508, 0xf8, 0x1d8, 0x508, 0xf8, 0x5d8, 0x5d8, 0x5d8, 0x5d8, 0x5d8, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [], [], 'macvlan1\x00', 'erspan0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000000000000}, [@inet=@rpfilter={{0x28}}]}, @HL={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [], [], 'syzkaller0\x00', 'team_slave_1\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {}, 0xf3dd}}}, {{@ipv6={@mcast1, @remote, [], [], 'veth1_virt_wifi\x00', 'dummy0\x00'}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @local, @empty}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:etc_mail_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x708) recvmmsg(r2, &(0x7f0000000c40), 0x2, 0x10000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100009}) socket$inet6_mptcp(0xa, 0x1, 0x106) 484.156995ms ago: executing program 3 (id=1295): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae000000a5000000d000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='global_dirty_state\x00', r0}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) syz_emit_ethernet(0xfdef, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x0) unshare(0x20000400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x0, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003a00)=@can_delroute={0x154, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_CS_XOR={0x8, 0x5, {0x0, 0x8}}, @CGW_MOD_AND={0x15, 0x1, {{{}, 0x0, 0x0, 0x0, 0x0, "0eabdac5a3619b2c"}, 0x1}}, @CGW_CS_CRC8={0x11e, 0x6, {0x0, 0xfd, 0x0, 0x0, 0x0, "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", 0x0, "c900c08ac1d7b60600"}}]}, 0x154}}, 0x0) socket$kcm(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) socket$inet6(0xa, 0x800000000000002, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000080)={0x8041}, 0x10) bind$tipc(r4, 0x0, 0x0) sendmsg$tipc(r5, &(0x7f0000000340)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) socket$inet(0xa, 0x801, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) 411.856122ms ago: executing program 0 (id=1296): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x22}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x40, 0x0, 0x1, 0x0, 0x0, 0x0, {}, [@CTA_FILTER={0x24, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_REPLY_FLAGS={0x8}, @CTA_FILTER_REPLY_FLAGS={0x8}]}, @CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x4}}]}, 0x40}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000100)=[{r3, 0x480}, {r0, 0x404}, {r2, 0x2000}], 0x3, &(0x7f0000000240), &(0x7f00000002c0)={[0x60000000000]}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8}]}}}]}, 0xfffffeeb}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r3, 0x0, r5, 0x0, 0x4ffe2, 0x0) 299.900032ms ago: executing program 3 (id=1297): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x1, 0x3}]}, @struct, @int]}, {0x0, [0x61, 0x30, 0x2e, 0x5f]}}, 0x0, 0x4e}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r0, 0x20, &(0x7f0000000100)={&(0x7f0000000040)=""/159, 0x9f, 0x0, &(0x7f0000000240)=""/147, 0x93}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="59c98638", @ANYRES16=r2, @ANYBLOB="010800000000000000000f00000008000300", @ANYRES32=r3, @ANYBLOB="05002d0000000000"], 0x24}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x1, 0x3}]}, @struct, @int]}, {0x0, [0x61, 0x30, 0x2e, 0x5f]}}, 0x0, 0x4e}, 0x20) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r0, 0x20, &(0x7f0000000100)={&(0x7f0000000040)=""/159, 0x9f, 0x0, &(0x7f0000000240)=""/147, 0x93}}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)) (async) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="59c98638", @ANYRES16=r2, @ANYBLOB="010800000000000000000f00000008000300", @ANYRES32=r3, @ANYBLOB="05002d0000000000"], 0x24}}, 0x0) (async) 257.172822ms ago: executing program 4 (id=1298): poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x9247}, {0xffffffffffffffff, 0x120}], 0x3, 0x8) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x20) connect$inet(0xffffffffffffffff, 0x0, 0x0) epoll_create1(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x1, 0xc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000380012800b00010069703667726500002800028006000f0000000000"], 0x58}}, 0x0) 183.603009ms ago: executing program 3 (id=1299): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, 0x0, 0x82) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x100, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="8e"], 0x1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x4620, @broadcast}}, 0x0, 0x2, 0x35, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}, 0xd8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="20f02000", @ANYRES16=r4, @ANYBLOB="01000000000000000000140000000c0007800800020006000000"], 0x20}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000600)={0x2, 0x0, 0x0, @dev}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) syz_80211_inject_frame(&(0x7f0000000240)=@broadcast, &(0x7f00000003c0)=ANY=[@ANYBLOB="066d391466ac7a5eb35322100c3e9f102542c81e9b946e9ddaef787e9e481f0ac2d62091bc87e301ce1cc48546ea2a2498770eddc74c3fede020c46deee8a595d978efe1527f72a4bf5c8e82d98882513e234960c3dfbe1c00c418fe7d2fa3f5d7b86cd535c2e3b0f56656aae385c8b986670d583c417b60c710b3bb577169cb8b13b33f385b45017fe5a8a8ae18f54147043c8405ef7dafb68947abad86fb668eb90fdf3e1c4b6e4a06f8910be83fe88c6345c439340c6feed784c2499f32bf80a696166e"], 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) socket(0x2, 0x5, 0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x48) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10002}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r6, @ANYBLOB="24002d800800020003000000050001"], 0x40}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 181.788652ms ago: executing program 2 (id=1300): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xd8}}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0xa, 0xffffffffffffffe5}]}, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r5, 0x1, 0x31, 0x0, 0x0) (async) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, r4, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40091}, 0x0) 24.736401ms ago: executing program 4 (id=1301): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x67b}]}, 0x10) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100), 0x8) socket$unix(0x1, 0x2, 0x0) (async) r2 = socket$unix(0x1, 0x2, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0), 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000080)={0x2, [0x3, 0x3]}, 0x8) (async) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000080)={0x2, [0x3, 0x3]}, 0x8) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000ad00e8872f2acf47da70639dd7c78cf883d6ac7e0e2f98733b7dfaeb84a79de3dc89c5f75d61cf6c77a1b6e3a429f6e62030b4dfa5d800330f2d912fc4ab9b137fc27f2ac0d73168c15e95b9ff745adaeb662c26e865955b3c35bedd03644af58d3b0495805cbb59c537103ce5b601860271d6eba30a0ab89db6fbc47608f335bf7289bab4d3963e27c142bec01d69efc7239f73f40c591a5f0122b2596f3b26b244a760305b4737f8322c42ed6c79"], 0xb5) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$igmp(0x2, 0x3, 0x2) (async) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f00000029c0)={@empty, @local, 0x0, "d30f388c52647612d91de4353d68b0fa00"}, 0x3c) (async) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f00000029c0)={@empty, @local, 0x0, "d30f388c52647612d91de4353d68b0fa00"}, 0x3c) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, "7ea9aa0000000000005a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x800000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ac38f5bd6e0630e369c7b35d21ff1f4d7ed79c31e2b0f1da"}, 0x3c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r5, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010100, @multicast2, 0x0, "941621a61c5815f4678d8fd4a8e14b0447113c694d1fd55708018620fd419884"}, 0x3c) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000140)=0x7, 0x4) r6 = socket(0x10, 0x1, 0x0) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000040)={0x0, @rand_addr, @empty}, &(0x7f0000000100)=0xc) (async) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000040)={0x0, @rand_addr, @empty}, &(0x7f0000000100)=0xc) accept4$nfc_llcp(r6, &(0x7f0000002940), &(0x7f0000000380)=0x60, 0x6552968cf371ba45) (async) accept4$nfc_llcp(r6, &(0x7f0000002940), &(0x7f0000000380)=0x60, 0x6552968cf371ba45) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[], 0x44}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[], 0x44}}, 0x0) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r2) (async) close(r2) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 2 (id=1302): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8}, @TCA_CAKE_MPU={0x8}]}}]}, 0x44}}, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r2, 0x80080400) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6}]}}}]}, 0x48}}, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r4, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004885}, 0x40001) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r5, 0x29, 0x4d, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x8) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) recvmsg(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x5aa) sendto$inet6(r6, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) getsockopt$inet_int(r3, 0x10d, 0xae, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r7, 0x0, 0x4ffe6, 0x0) kernel console output (not intermixed with test programs): ndle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.773836][ T5096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.788033][ T5096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.795175][ T5096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.821717][ T5096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.835609][ T5107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.899153][ T5107] team0: Port device team_slave_0 added [ 58.905214][ T4498] Bluetooth: hci0: command tx timeout [ 58.917976][ T5109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.925236][ T5109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.951674][ T5109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.982714][ T4498] Bluetooth: hci1: command tx timeout [ 58.990655][ T5106] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.998495][ T5106] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.006140][ T5106] bridge_slave_0: entered allmulticast mode [ 59.013884][ T5106] bridge_slave_0: entered promiscuous mode [ 59.027174][ T5107] team0: Port device team_slave_1 added [ 59.046622][ T5109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.053773][ T5109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.079901][ T5109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.096629][ T5106] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.104395][ T5106] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.111851][ T5106] bridge_slave_1: entered allmulticast mode [ 59.118942][ T5106] bridge_slave_1: entered promiscuous mode [ 59.200035][ T5107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.207473][ T5107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.233926][ T5107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.244826][ T4498] Bluetooth: hci2: command tx timeout [ 59.261462][ T5096] hsr_slave_0: entered promiscuous mode [ 59.268122][ T5096] hsr_slave_1: entered promiscuous mode [ 59.274587][ T5096] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.282661][ T5096] Cannot create hsr debugfs directory [ 59.290512][ T5106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.303034][ T4498] Bluetooth: hci4: command tx timeout [ 59.306370][ T5107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.308706][ T54] Bluetooth: hci3: command tx timeout [ 59.315839][ T5107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.347152][ T5107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.381473][ T5106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.440958][ T5109] hsr_slave_0: entered promiscuous mode [ 59.447772][ T5109] hsr_slave_1: entered promiscuous mode [ 59.454507][ T5109] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.462643][ T5109] Cannot create hsr debugfs directory [ 59.511823][ T5107] hsr_slave_0: entered promiscuous mode [ 59.519102][ T5107] hsr_slave_1: entered promiscuous mode [ 59.526056][ T5107] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.534231][ T5107] Cannot create hsr debugfs directory [ 59.545189][ T5106] team0: Port device team_slave_0 added [ 59.554153][ T5106] team0: Port device team_slave_1 added [ 59.646477][ T5106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.653687][ T5106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.680885][ T5106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.695237][ T5106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.703146][ T5106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.729694][ T5106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.848546][ T5100] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.882900][ T5100] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.897394][ T5106] hsr_slave_0: entered promiscuous mode [ 59.904855][ T5106] hsr_slave_1: entered promiscuous mode [ 59.911687][ T5106] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.919630][ T5106] Cannot create hsr debugfs directory [ 59.950146][ T5100] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.960161][ T5100] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.217855][ T5096] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.240293][ T5096] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.268210][ T5096] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.298398][ T5096] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.333714][ T5107] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.350663][ T5107] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.362481][ T5107] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.381735][ T5107] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.475116][ T5109] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.487133][ T5109] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.499046][ T5109] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.523999][ T5109] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.581436][ T5100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.615327][ T5106] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.626434][ T5106] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.648565][ T5106] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.662421][ T5106] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.718812][ T5100] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.769927][ T5146] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.777217][ T5146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.798099][ T5146] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.805294][ T5146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.850442][ T5096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.943670][ T5096] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.983374][ T54] Bluetooth: hci0: command tx timeout [ 60.991601][ T5109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.003359][ T5146] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.010472][ T5146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.038886][ T5146] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.046644][ T5146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.068835][ T5106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.072265][ T54] Bluetooth: hci1: command tx timeout [ 61.085568][ T5107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.140542][ T5109] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.170818][ T5149] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.178303][ T5149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.207768][ T5107] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.219840][ T5106] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.237713][ T5149] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.244958][ T5149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.290352][ T5149] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.297612][ T5149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.313247][ T54] Bluetooth: hci2: command tx timeout [ 61.322475][ T5149] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.329622][ T5149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.362435][ T5149] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.369739][ T5149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.382991][ T54] Bluetooth: hci3: command tx timeout [ 61.383535][ T4498] Bluetooth: hci4: command tx timeout [ 61.425749][ T5151] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.432958][ T5151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.498435][ T5100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.731160][ T5100] veth0_vlan: entered promiscuous mode [ 61.767493][ T5100] veth1_vlan: entered promiscuous mode [ 61.899244][ T5100] veth0_macvtap: entered promiscuous mode [ 61.934172][ T5096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.978273][ T5100] veth1_macvtap: entered promiscuous mode [ 62.017932][ T5109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.093951][ T5106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.127906][ T5100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.157873][ T5107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.181474][ T5100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.226115][ T5100] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.239687][ T5100] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.250764][ T5100] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.260493][ T5100] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.422073][ T5096] veth0_vlan: entered promiscuous mode [ 62.435651][ T5109] veth0_vlan: entered promiscuous mode [ 62.467796][ T5106] veth0_vlan: entered promiscuous mode [ 62.488998][ T5107] veth0_vlan: entered promiscuous mode [ 62.497950][ T2813] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.510729][ T2813] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.517357][ T5096] veth1_vlan: entered promiscuous mode [ 62.531895][ T5106] veth1_vlan: entered promiscuous mode [ 62.544962][ T5109] veth1_vlan: entered promiscuous mode [ 62.608676][ T2813] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.618917][ T5107] veth1_vlan: entered promiscuous mode [ 62.624946][ T2813] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.655901][ T5096] veth0_macvtap: entered promiscuous mode [ 62.701917][ T5096] veth1_macvtap: entered promiscuous mode [ 62.719838][ T5109] veth0_macvtap: entered promiscuous mode [ 62.736670][ T5109] veth1_macvtap: entered promiscuous mode [ 62.773475][ T5106] veth0_macvtap: entered promiscuous mode [ 62.795684][ T5106] veth1_macvtap: entered promiscuous mode [ 62.844190][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.855726][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.872808][ T5096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.886517][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.916005][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.926488][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.937425][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.950850][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.969510][ T5181] warning: `syz.0.6' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 62.984011][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.004660][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.017081][ T5096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.039745][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.051159][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.062501][ T4498] Bluetooth: hci0: command tx timeout [ 63.078690][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.093576][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.105099][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.124890][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.139490][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.150803][ T4498] Bluetooth: hci1: command tx timeout [ 63.156681][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.167715][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.180496][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.191608][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.204517][ T5106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.214168][ T5107] veth0_macvtap: entered promiscuous mode [ 63.258683][ T5109] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.267929][ T5109] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.277926][ T5109] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.286757][ T5109] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.298830][ T5096] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.308964][ T5096] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.318079][ T5096] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.327518][ T5096] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.346680][ T5107] veth1_macvtap: entered promiscuous mode [ 63.383675][ T4498] Bluetooth: hci2: command tx timeout [ 63.463134][ T54] Bluetooth: hci4: command tx timeout [ 63.468874][ T4498] Bluetooth: hci3: command tx timeout [ 64.091069][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.101728][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.112619][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.123153][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.133115][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.145433][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.157441][ T5106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.229022][ T5106] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.239544][ T5106] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.254588][ T5106] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.269405][ T5106] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.324014][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.334942][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.345283][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.356025][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.366469][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.376949][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.387186][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.398022][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.410810][ T5107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.421485][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.432801][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.446324][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.462908][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.473599][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.484724][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.498884][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.509631][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.521185][ T5107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.560176][ T5107] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.580307][ T5107] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.608948][ T5107] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.632147][ T5107] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.841932][ T2847] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.856702][ T2847] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.006694][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.034870][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.062916][ T1034] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.082799][ T1034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.141751][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.149786][ T4498] Bluetooth: hci0: command tx timeout [ 65.190018][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.223379][ T4498] Bluetooth: hci1: command tx timeout [ 65.279447][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.301237][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.425703][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.438267][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.462514][ T4498] Bluetooth: hci2: command tx timeout [ 65.542204][ T54] Bluetooth: hci4: command tx timeout [ 65.544867][ T1034] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.547753][ T4498] Bluetooth: hci3: command tx timeout [ 65.593048][ T5206] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.625548][ T1034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.661494][ T1034] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.661874][ T5203] Zero length message leads to an empty skb [ 65.674864][ T1034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.885226][ T5198] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 66.106801][ T5224] team0: Port device team_slave_1 removed [ 66.157999][ T5224] syz.3.11 (5224) used greatest stack depth: 19632 bytes left [ 66.335753][ T5242] netlink: 84 bytes leftover after parsing attributes in process `syz.3.15'. [ 66.754595][ T5244] netlink: 44 bytes leftover after parsing attributes in process `syz.3.15'. [ 66.810209][ T5263] netlink: 'syz.4.18': attribute type 1 has an invalid length. [ 66.837546][ T5263] netlink: 9388 bytes leftover after parsing attributes in process `syz.4.18'. [ 68.017914][ T5278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25'. [ 68.031334][ T5278] IPv6: NLM_F_CREATE should be specified when creating new route [ 68.316617][ T5297] x_tables: duplicate underflow at hook 1 [ 68.401031][ T5298] Illegal XDP return value 4294967274 on prog (id 17) dev N/A, expect packet loss! [ 68.581092][ T5286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 68.720753][ T5314] team0: Port device team_slave_1 removed [ 68.746934][ T5316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.37'. [ 68.838782][ T5318] netlink: 12 bytes leftover after parsing attributes in process `syz.4.36'. [ 68.885239][ T5318] xfrm1: entered promiscuous mode [ 68.891988][ T5318] xfrm1: entered allmulticast mode [ 69.073429][ T5329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.42'. [ 69.266671][ T5337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.47'. [ 69.354608][ T5346] netlink: 'syz.2.46': attribute type 11 has an invalid length. [ 69.667219][ T5360] netlink: 164 bytes leftover after parsing attributes in process `syz.2.53'. [ 69.906744][ T5372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.57'. [ 69.933257][ T5372] IPv6: NLM_F_CREATE should be specified when creating new route [ 70.044598][ T5378] Cannot find add_set index 0 as target [ 70.203597][ T5382] syzkaller1: entered promiscuous mode [ 70.218546][ T5382] syzkaller1: entered allmulticast mode [ 70.343100][ T5397] tap0: tun_chr_ioctl cmd 1074025677 [ 70.348628][ T5397] tap0: linktype set to 776 [ 70.379275][ T5399] syz.0.65 uses obsolete (PF_INET,SOCK_PACKET) [ 70.723452][ T5420] sctp: [Deprecated]: syz.3.71 (pid 5420) Use of int in max_burst socket option. [ 70.723452][ T5420] Use struct sctp_assoc_value instead [ 70.967272][ T5432] IPVS: set_ctl: invalid protocol: 0 100.1.1.2:20000 [ 71.232751][ T5445] nbd: device at index 0 is going down [ 71.396064][ T5451] team0: Port device team_slave_1 removed [ 71.597685][ T5460] openvswitch: netlink: IP tunnel dst address not specified [ 71.867199][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.880923][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.923072][ T5477] __nla_validate_parse: 2 callbacks suppressed [ 71.923099][ T5477] netlink: 24 bytes leftover after parsing attributes in process `syz.0.92'. [ 72.071790][ T5472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 72.296662][ T5501] dccp_v4_rcv: dropped packet with invalid checksum [ 72.501897][ T5514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.100'. [ 72.532862][ T5514] netlink: 40 bytes leftover after parsing attributes in process `syz.2.100'. [ 72.589476][ T5514] netlink: 'syz.2.100': attribute type 5 has an invalid length. [ 72.840779][ T5528] FAULT_INJECTION: forcing a failure. [ 72.840779][ T5528] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 72.912605][ T5528] CPU: 1 PID: 5528 Comm: syz.2.106 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 72.922302][ T5528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 72.932393][ T5528] Call Trace: [ 72.935688][ T5528] [ 72.938628][ T5528] dump_stack_lvl+0x241/0x360 [ 72.943347][ T5528] ? __pfx_dump_stack_lvl+0x10/0x10 [ 72.948653][ T5528] ? __pfx__printk+0x10/0x10 [ 72.953270][ T5528] ? __pfx_lock_release+0x10/0x10 [ 72.958361][ T5528] should_fail_ex+0x3b0/0x4e0 [ 72.963162][ T5528] _copy_from_user+0x2f/0xe0 [ 72.967786][ T5528] do_tcp_setsockopt+0x29e/0x2540 [ 72.972854][ T5528] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 72.978359][ T5528] ? __pfx_aa_sk_perm+0x10/0x10 [ 72.983245][ T5528] ? __pfx_lock_acquire+0x10/0x10 [ 72.988390][ T5528] ? aa_sock_opt_perm+0x79/0x120 [ 72.993363][ T5528] ? tcp_setsockopt+0x3e/0xf0 [ 72.998078][ T5528] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 73.004003][ T5528] do_sock_setsockopt+0x3af/0x720 [ 73.009069][ T5528] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 73.014647][ T5528] ? __fget_files+0x29/0x470 [ 73.019357][ T5528] ? __fget_files+0x3f6/0x470 [ 73.024076][ T5528] __sys_setsockopt+0x1ae/0x250 [ 73.028970][ T5528] __x64_sys_setsockopt+0xb5/0xd0 [ 73.034037][ T5528] do_syscall_64+0xf3/0x230 [ 73.038575][ T5528] ? clear_bhb_loop+0x35/0x90 [ 73.043281][ T5528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.049213][ T5528] RIP: 0033:0x7fae76b75b59 [ 73.053662][ T5528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.073383][ T5528] RSP: 002b:00007fae7787c048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 73.081821][ T5528] RAX: ffffffffffffffda RBX: 00007fae76d05f60 RCX: 00007fae76b75b59 [ 73.089915][ T5528] RDX: 0000000000000013 RSI: 0000000000000006 RDI: 0000000000000003 [ 73.097900][ T5528] RBP: 00007fae7787c0a0 R08: 0000000000000004 R09: 0000000000000000 [ 73.105868][ T5528] R10: 0000000020000140 R11: 0000000000000246 R12: 0000000000000001 [ 73.114093][ T5528] R13: 000000000000000b R14: 00007fae76d05f60 R15: 00007ffeeaafbac8 [ 73.122068][ T5528] [ 73.222642][ T5538] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 73.273806][ T5539] netlink: 28 bytes leftover after parsing attributes in process `syz.4.110'. [ 73.455333][ T5548] netlink: 28 bytes leftover after parsing attributes in process `syz.2.112'. [ 73.508744][ T5551] netlink: 224 bytes leftover after parsing attributes in process `syz.4.115'. [ 73.727719][ T5569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.118'. [ 73.833189][ T5567] vxcan1: entered allmulticast mode [ 73.856160][ T5565] netlink: 12 bytes leftover after parsing attributes in process `syz.1.121'. [ 73.872487][ T5565] xfrm1: entered promiscuous mode [ 73.904123][ T5565] xfrm1: entered allmulticast mode [ 73.926979][ T5567] netlink: 'syz.4.120': attribute type 39 has an invalid length. [ 73.940721][ T5580] dccp_v4_rcv: dropped packet with invalid checksum [ 73.948391][ T5567] vxcan1: left allmulticast mode [ 74.116091][ T5589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 74.229503][ T5589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 74.718851][ T5648] netlink: 132 bytes leftover after parsing attributes in process `syz.2.131'. [ 74.975449][ T5662] netlink: 16 bytes leftover after parsing attributes in process `syz.0.132'. [ 75.104297][ T5664] netlink: 'syz.3.134': attribute type 4 has an invalid length. [ 75.556071][ T5692] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 55257 - 0 [ 75.595013][ T5692] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 55257 - 0 [ 75.629016][ T5692] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 55257 - 0 [ 75.664996][ T5692] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 55257 - 0 [ 75.684933][ T5692] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 45777 - 0 [ 75.712557][ T5692] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 45777 - 0 [ 75.721578][ T5692] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 45777 - 0 [ 75.753168][ T5692] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 45777 - 0 [ 75.849969][ T2475] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.934438][ T5697] gretap0: entered promiscuous mode [ 75.955753][ T5697] gretap0: left promiscuous mode [ 76.081680][ T2475] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.171107][ T5704] netlink: 'syz.4.147': attribute type 5 has an invalid length. [ 76.254842][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.265850][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.308017][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.312864][ T2475] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.337770][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.361317][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.370172][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.385606][ T5717] netlink: 'syz.3.151': attribute type 1 has an invalid length. [ 76.410750][ T2475] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.413329][ T5717] netlink: 'syz.3.151': attribute type 1 has an invalid length. [ 76.479768][ T5717] xt_CONNSECMARK: invalid mode: 0 [ 76.544060][ T5717] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 76.558778][ T5717] x_tables: ip6_tables: DNPT target: used from hooks FORWARD, but only usable from PREROUTING/OUTPUT [ 76.747331][ T2475] bridge_slave_1: left allmulticast mode [ 76.770929][ T2475] bridge_slave_1: left promiscuous mode [ 76.810227][ T2475] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.853314][ T2475] bridge_slave_0: left allmulticast mode [ 76.865707][ T2475] bridge_slave_0: left promiscuous mode [ 76.872380][ T2475] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.165604][ T5741] IPVS: length: 214 != 24 [ 77.576923][ T2475] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.596009][ T2475] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.613612][ T2475] bond0 (unregistering): Released all slaves [ 77.767982][ T5746] gretap0: entered promiscuous mode [ 77.800512][ T5746] gretap0: left promiscuous mode [ 78.034830][ T5754] __nla_validate_parse: 5 callbacks suppressed [ 78.034853][ T5754] netlink: 96 bytes leftover after parsing attributes in process `syz.4.164'. [ 78.093046][ T5757] netlink: 132 bytes leftover after parsing attributes in process `syz.0.165'. [ 78.282567][ T5762] netlink: 72 bytes leftover after parsing attributes in process `syz.4.167'. [ 78.395685][ T5766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.169'. [ 78.409805][ T5766] IPv6: NLM_F_CREATE should be specified when creating new route [ 78.422389][ T54] Bluetooth: hci3: command tx timeout [ 78.427532][ T5768] netlink: 104 bytes leftover after parsing attributes in process `syz.0.170'. [ 78.446669][ T5710] chnl_net:caif_netlink_parms(): no params data found [ 78.477900][ T5771] netlink: 256 bytes leftover after parsing attributes in process `syz.2.171'. [ 78.549422][ T2475] hsr_slave_0: left promiscuous mode [ 78.576136][ T2475] hsr_slave_1: left promiscuous mode [ 78.605962][ T2475] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.614105][ T2475] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.649617][ T2475] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.658166][ T2475] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.700971][ T5787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.176'. [ 78.719212][ T2475] veth1_macvtap: left promiscuous mode [ 78.732218][ T2475] veth0_macvtap: left promiscuous mode [ 78.738340][ T2475] veth1_vlan: left promiscuous mode [ 78.745514][ T2475] veth0_vlan: left promiscuous mode [ 79.298977][ T2475] team0 (unregistering): Port device team_slave_1 removed [ 79.337681][ T2475] team0 (unregistering): Port device team_slave_0 removed [ 79.750249][ T5798] €Â: renamed from pim6reg1 [ 80.167229][ T5817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.184'. [ 80.193337][ T5817] IPv6: NLM_F_CREATE should be specified when creating new route [ 80.288297][ T5710] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.321833][ T5710] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.349924][ T5710] bridge_slave_0: entered allmulticast mode [ 80.379847][ T5710] bridge_slave_0: entered promiscuous mode [ 80.418373][ T5841] netlink: 24 bytes leftover after parsing attributes in process `syz.0.188'. [ 80.459420][ T5710] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.474064][ T5850] openvswitch: netlink: IP tunnel dst address not specified [ 80.487533][ T5710] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.508960][ T54] Bluetooth: hci3: command tx timeout [ 80.512571][ T5710] bridge_slave_1: entered allmulticast mode [ 80.551108][ T5710] bridge_slave_1: entered promiscuous mode [ 80.737108][ T5710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.798127][ T5710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.918621][ T5710] team0: Port device team_slave_0 added [ 80.960083][ T5710] team0: Port device team_slave_1 added [ 81.026892][ T5877] netlink: 60 bytes leftover after parsing attributes in process `syz.3.198'. [ 81.144336][ T5710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.151423][ T5710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.281470][ T5710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.341536][ T5710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.394620][ T5710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.481831][ T5710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.765837][ T5710] hsr_slave_0: entered promiscuous mode [ 81.811223][ T5710] hsr_slave_1: entered promiscuous mode [ 81.857442][ T5710] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.876419][ T5710] Cannot create hsr debugfs directory [ 82.117597][ T928] cfg80211: failed to load regulatory.db [ 82.219781][ T5937] Bluetooth: MGMT ver 1.23 [ 82.236859][ T5944] tipc: Enabling of bearer rejected, failed to enable media [ 82.251709][ T5945] openvswitch: netlink: IP tunnel dst address not specified [ 82.496888][ T5961] netlink: 'syz.3.220': attribute type 1 has an invalid length. [ 82.582873][ T54] Bluetooth: hci3: command tx timeout [ 83.231893][ T5986] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 53752 - 0 [ 83.271056][ T5986] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 53752 - 0 [ 83.291238][ T5986] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 53752 - 0 [ 83.316191][ T6007] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 83.327447][ T5986] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 53752 - 0 [ 83.349446][ T5986] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 44191 - 0 [ 83.386650][ T5986] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 44191 - 0 [ 83.409414][ T5986] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 44191 - 0 [ 83.419958][ T5986] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 44191 - 0 [ 83.566133][ T6019] __nla_validate_parse: 4 callbacks suppressed [ 83.566153][ T6019] netlink: 28 bytes leftover after parsing attributes in process `syz.3.232'. [ 83.867286][ T6032] netlink: 96 bytes leftover after parsing attributes in process `syz.4.236'. [ 83.880772][ T6029] netlink: 12 bytes leftover after parsing attributes in process `syz.0.234'. [ 83.910348][ T6029] xfrm1: entered promiscuous mode [ 83.931564][ T6029] xfrm1: entered allmulticast mode [ 83.949207][ T6037] netlink: 'syz.3.237': attribute type 4 has an invalid length. [ 84.051801][ T5710] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.129770][ T5710] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.164174][ T5710] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.230809][ T5710] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.243610][ T6061] dccp_v4_rcv: dropped packet with invalid checksum [ 84.321483][ T6056] netlink: 5 bytes leftover after parsing attributes in process `syz.4.238'. [ 84.360436][ T6056] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 84.682858][ T54] Bluetooth: hci3: command tx timeout [ 84.769149][ T6083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.249'. [ 84.779271][ T6083] netlink: 40 bytes leftover after parsing attributes in process `syz.3.249'. [ 85.017193][ T6086] netlink: 'syz.3.249': attribute type 5 has an invalid length. [ 85.054291][ T6094] veth0_vlan: entered allmulticast mode [ 85.131394][ T6097] openvswitch: netlink: Message has 4 unknown bytes. [ 85.212687][ T6093] netlink: 12 bytes leftover after parsing attributes in process `syz.0.251'. [ 85.311110][ T5710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.427824][ T6108] netlink: 104 bytes leftover after parsing attributes in process `syz.4.255'. [ 85.438268][ T6101] netlink: 4 bytes leftover after parsing attributes in process `syz.3.254'. [ 85.535266][ T6109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.256'. [ 85.612932][ T5710] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.660490][ T6116] batadv0: entered promiscuous mode [ 85.697885][ T6116] vlan2: entered promiscuous mode [ 85.741483][ T6116] batadv0: left promiscuous mode [ 85.792683][ T6111] sctp: [Deprecated]: syz.2.257 (pid 6111) Use of struct sctp_assoc_value in delayed_ack socket option. [ 85.792683][ T6111] Use struct sctp_sack_info instead [ 85.870566][ T6111] netlink: 'syz.2.257': attribute type 15 has an invalid length. [ 85.970716][ T5146] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.977961][ T5146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.049137][ T6111] syz.2.257 (6111) used greatest stack depth: 18272 bytes left [ 86.055487][ T5146] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.063936][ T5146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.134246][ T6139] dccp_v4_rcv: dropped packet with invalid checksum [ 86.742244][ T54] Bluetooth: hci3: command tx timeout [ 86.834152][ T5710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.903926][ T6183] netem: change failed [ 86.947711][ T6176] netem: change failed [ 87.179351][ T5710] veth0_vlan: entered promiscuous mode [ 87.246119][ T5710] veth1_vlan: entered promiscuous mode [ 87.253456][ T6191] sctp: [Deprecated]: syz.0.276 (pid 6191) Use of struct sctp_assoc_value in delayed_ack socket option. [ 87.253456][ T6191] Use struct sctp_sack_info instead [ 87.328857][ T6191] netlink: 'syz.0.276': attribute type 15 has an invalid length. [ 87.439744][ T5710] veth0_macvtap: entered promiscuous mode [ 87.487647][ T5710] veth1_macvtap: entered promiscuous mode [ 87.574467][ T5710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.632240][ T5710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.650314][ T5710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.661373][ T5710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.678824][ T5710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.690418][ T5710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.729660][ T5710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.759643][ T5710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.795205][ T5710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.889570][ T5710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.950926][ T5710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.987401][ T5710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.033504][ T5710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.055444][ T5710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.091371][ T5710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.120427][ T5710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.125272][ T6247] raw_sendmsg: syz.2.290 forgot to set AF_INET. Fix it! [ 88.160314][ T5710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.220439][ T5710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.326374][ T5710] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.367947][ T5710] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.386491][ T5710] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.410154][ T5710] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.777760][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.798272][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.923779][ T5644] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.965014][ T5644] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.101954][ C1] eth0: bad gso: type: 1, size: 1408 [ 89.249447][ T6308] __nla_validate_parse: 7 callbacks suppressed [ 89.249466][ T6308] netlink: 28 bytes leftover after parsing attributes in process `syz.1.144'. [ 89.267739][ T6311] xt_HMARK: spi-set and port-set can't be combined [ 89.319540][ T6311] netlink: 'syz.0.306': attribute type 2 has an invalid length. [ 89.335107][ T6305] netlink: 20 bytes leftover after parsing attributes in process `syz.4.304'. [ 89.374888][ T6305] vlan2: entered promiscuous mode [ 89.381135][ T6305] veth0: entered promiscuous mode [ 89.395054][ T6305] vlan2: entered allmulticast mode [ 89.404641][ C1] eth0: bad gso: type: 1, size: 1408 [ 89.410890][ T6305] veth0: entered allmulticast mode [ 89.441340][ T6305] veth0: left allmulticast mode [ 89.455745][ T6305] veth0: left promiscuous mode [ 89.493961][ T6323] netlink: 72 bytes leftover after parsing attributes in process `syz.0.306'. [ 89.647024][ T6311] bridge: RTM_DELNEIGH with unconfigured vlan 2 on bridge_slave_0 [ 90.373983][ T6353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.313'. [ 90.821453][ T6388] netlink: 24 bytes leftover after parsing attributes in process `syz.4.319'. [ 90.839071][ T6381] netlink: 12 bytes leftover after parsing attributes in process `syz.0.317'. [ 90.945971][ T6402] netlink: 28 bytes leftover after parsing attributes in process `syz.2.322'. [ 91.139263][ T6415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.325'. [ 91.204756][ T6415] netlink: 32 bytes leftover after parsing attributes in process `syz.2.325'. [ 91.236088][ T6426] syz.3.327 uses old SIOCAX25GETINFO [ 91.396114][ T6434] dccp_v4_rcv: dropped packet with invalid checksum [ 91.503123][ T6437] netlink: 96 bytes leftover after parsing attributes in process `syz.2.332'. [ 91.925757][ T6460] IPv6: NLM_F_CREATE should be specified when creating new route [ 91.982865][ T6463] netlink: 'syz.4.341': attribute type 5 has an invalid length. [ 92.404487][ T6482] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 92.432201][ T6482] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 93.360049][ T5141] IPVS: starting estimator thread 0... [ 93.484331][ T6527] IPVS: using max 21 ests per chain, 50400 per kthread [ 93.553275][ T6546] Bluetooth: MGMT ver 1.23 [ 93.707167][ T6549] openvswitch: netlink: IP tunnel dst address not specified [ 93.909492][ T6558] tun0: tun_chr_ioctl cmd 1074812117 [ 93.938852][ T6558] pim6reg: entered allmulticast mode [ 94.040399][ T6558] pim6reg: left allmulticast mode [ 94.140261][ C1] eth0: bad gso: type: 1, size: 1408 [ 94.449185][ T6594] __nla_validate_parse: 10 callbacks suppressed [ 94.458865][ T6594] netlink: 72 bytes leftover after parsing attributes in process `syz.2.385'. [ 94.543982][ T6600] openvswitch: netlink: IP tunnel dst address not specified [ 94.883841][ T6621] netlink: 32 bytes leftover after parsing attributes in process `syz.4.391'. [ 94.941680][ T6626] netlink: 28 bytes leftover after parsing attributes in process `syz.2.392'. [ 95.226542][ T6636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.396'. [ 95.365425][ T6641] netlink: 72 bytes leftover after parsing attributes in process `syz.0.397'. [ 95.766419][ T6661] team0: Port device team_slave_1 removed [ 95.946601][ T6677] (unnamed net_device) (uninitialized): option mode: invalid value (254) [ 96.064297][ T6681] sock: sock_timestamping_bind_phc: sock not bind to device [ 96.149323][ T6688] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 96.191199][ T6688] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 96.285926][ T6692] netlink: 132 bytes leftover after parsing attributes in process `syz.0.410'. [ 96.359190][ T6699] netlink: 28 bytes leftover after parsing attributes in process `syz.3.412'. [ 96.615516][ T6709] netlink: 28 bytes leftover after parsing attributes in process `syz.0.415'. [ 96.817930][ T6720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.285056][ T6754] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 38347 - 0 [ 97.323258][ T6754] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 38347 - 0 [ 97.377397][ T6754] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 38347 - 0 [ 97.412176][ T6754] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 38347 - 0 [ 97.421549][ T6754] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 58427 - 0 [ 97.441721][ T6754] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 58427 - 0 [ 97.459702][ T6754] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 58427 - 0 [ 97.476958][ T6754] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 58427 - 0 [ 97.497187][ T6760] syz_tun: entered allmulticast mode [ 97.805634][ T6784] netlink: 12 bytes leftover after parsing attributes in process `syz.2.435'. [ 97.838990][ T6784] xfrm1: entered promiscuous mode [ 97.865018][ T6784] xfrm1: entered allmulticast mode [ 97.985816][ T6777] netlink: 20 bytes leftover after parsing attributes in process `syz.1.434'. [ 98.027723][ T6777] geneve2: entered promiscuous mode [ 98.051923][ T6777] geneve2: entered allmulticast mode [ 98.290844][ T6809] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 98.958667][ T6844] netlink: 'syz.0.453': attribute type 4 has an invalid length. [ 99.044664][ T6847] netlink: 'syz.0.453': attribute type 4 has an invalid length. [ 99.132344][ T6852] netlink: 'syz.2.456': attribute type 1 has an invalid length. [ 99.340116][ T6864] team0: Port device team_slave_1 removed [ 99.373150][ T6865] vlan2: entered promiscuous mode [ 99.387703][ T6865] vlan2: entered allmulticast mode [ 99.414849][ T6873] netlink: 'syz.3.461': attribute type 11 has an invalid length. [ 99.560252][ T6875] __nla_validate_parse: 6 callbacks suppressed [ 99.560272][ T6875] netlink: 12 bytes leftover after parsing attributes in process `syz.1.462'. [ 99.579399][ T6877] netlink: 132 bytes leftover after parsing attributes in process `syz.4.463'. [ 99.608905][ T6881] netlink: 16 bytes leftover after parsing attributes in process `syz.2.465'. [ 99.861598][ T5146] IPVS: starting estimator thread 0... [ 99.871400][ T6893] netlink: 60 bytes leftover after parsing attributes in process `syz.1.467'. [ 99.900892][ T6898] IPVS: wrr: SCTP 172.20.20.187:0 - no destination available [ 99.985624][ T6897] IPVS: using max 19 ests per chain, 45600 per kthread [ 100.239634][ T6919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.475'. [ 100.304714][ T6919] gtp0: entered promiscuous mode [ 100.309734][ T6919] gtp0: entered allmulticast mode [ 100.421958][ T6930] netlink: 'syz.4.477': attribute type 11 has an invalid length. [ 100.647379][ T6942] netlink: 84 bytes leftover after parsing attributes in process `syz.4.481'. [ 101.223625][ T6967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.274339][ T6935] ip6t_srh: unknown srh invflags 4811 [ 101.330682][ T6967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.405650][ T6965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.456331][ T6980] openvswitch: netlink: IP tunnel dst address not specified [ 101.694440][ T6970] netlink: 6 bytes leftover after parsing attributes in process `syz.0.492'. [ 101.936948][ T7008] netlink: 28 bytes leftover after parsing attributes in process `syz.2.500'. [ 102.087489][ T7005] netlink: 'syz.1.499': attribute type 4 has an invalid length. [ 102.221180][ T7019] netlink: 72 bytes leftover after parsing attributes in process `syz.4.503'. [ 102.335403][ T7026] openvswitch: netlink: IP tunnel dst address not specified [ 102.499517][ T7037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.507'. [ 102.993387][ T7057] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 103.957586][ T7115] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 52982 - 0 [ 103.981012][ T7115] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 52982 - 0 [ 103.994813][ T7119] openvswitch: netlink: IP tunnel dst address not specified [ 104.009674][ T7115] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 52982 - 0 [ 104.029584][ T7115] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 52982 - 0 [ 104.039507][ T7115] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 47968 - 0 [ 104.071844][ T7115] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 47968 - 0 [ 104.090523][ T7115] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 47968 - 0 [ 104.107398][ T7115] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 47968 - 0 [ 104.133171][ T7115] geneve2: entered promiscuous mode [ 104.586655][ T7144] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 104.747508][ T7155] __nla_validate_parse: 12 callbacks suppressed [ 104.747529][ T7155] netlink: 96 bytes leftover after parsing attributes in process `syz.3.547'. [ 104.972463][ T7168] x_tables: duplicate underflow at hook 2 [ 105.011219][ T7168] netlink: 5312 bytes leftover after parsing attributes in process `syz.3.551'. [ 105.045910][ T7168] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 105.114153][ T7168] xt_l2tp: missing protocol rule (udp|l2tpip) [ 105.182687][ T7182] netlink: 'syz.1.555': attribute type 29 has an invalid length. [ 105.212003][ T7182] netlink: 'syz.1.555': attribute type 29 has an invalid length. [ 105.243547][ T7182] netlink: 'syz.1.555': attribute type 29 has an invalid length. [ 105.288383][ T7183] netlink: 'syz.1.555': attribute type 29 has an invalid length. [ 105.306184][ T7189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.556'. [ 105.316418][ T7189] netlink: 40 bytes leftover after parsing attributes in process `syz.3.556'. [ 105.328364][ T7190] netlink: 'syz.1.555': attribute type 29 has an invalid length. [ 105.339669][ T7182] netlink: 'syz.1.555': attribute type 29 has an invalid length. [ 105.370952][ T7189] netlink: 'syz.3.556': attribute type 5 has an invalid length. [ 105.388347][ T7188] netlink: 12 bytes leftover after parsing attributes in process `syz.4.557'. [ 105.408823][ T7188] netlink: 12 bytes leftover after parsing attributes in process `syz.4.557'. [ 105.538146][ T7198] netlink: 'syz.1.559': attribute type 7 has an invalid length. [ 105.561419][ T7198] netlink: 224 bytes leftover after parsing attributes in process `syz.1.559'. [ 105.920642][ T7221] netlink: 16 bytes leftover after parsing attributes in process `syz.4.566'. [ 105.948900][ T7224] netlink: 28 bytes leftover after parsing attributes in process `syz.2.567'. [ 105.963762][ T7221] netlink: 96 bytes leftover after parsing attributes in process `syz.4.566'. [ 106.289159][ T7241] --map-set only usable from mangle table [ 106.789999][ T7273] netlink: 'syz.1.582': attribute type 3 has an invalid length. [ 107.114909][ C1] eth0: bad gso: type: 1, size: 1408 [ 107.348059][ T7316] netlink: 'syz.0.594': attribute type 11 has an invalid length. [ 108.041865][ T7349] Êü: entered promiscuous mode [ 108.328445][ T7374] openvswitch: netlink: IP tunnel dst address not specified [ 108.471461][ T7380] netlink: 'syz.0.615': attribute type 1 has an invalid length. [ 108.760532][ T7399] openvswitch: netlink: IP tunnel dst address not specified [ 109.850648][ T7453] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 60053 - 0 [ 109.882193][ T7453] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 60053 - 0 [ 109.899939][ T7453] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 60053 - 0 [ 109.924735][ T7453] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 60053 - 0 [ 109.959849][ T7453] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 41825 - 0 [ 109.990394][ T7453] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 41825 - 0 [ 110.002918][ T7453] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 41825 - 0 [ 110.032619][ T7453] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 41825 - 0 [ 110.058529][ T7455] __nla_validate_parse: 19 callbacks suppressed [ 110.058548][ T7455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.638'. [ 110.097073][ T7457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.638'. [ 110.135471][ T7456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.638'. [ 110.193180][ C1] eth0: bad gso: type: 1, size: 1408 [ 110.342507][ T7472] Cannot find add_set index 0 as target [ 110.385604][ T7483] openvswitch: netlink: IP tunnel dst address not specified [ 110.513269][ T7489] Cannot find set identified by id 0 to match [ 110.586000][ T7493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.649'. [ 110.588286][ T7498] netlink: 72 bytes leftover after parsing attributes in process `syz.4.652'. [ 110.620779][ T7493] netlink: 40 bytes leftover after parsing attributes in process `syz.3.649'. [ 110.712306][ T7493] validate_nla: 4 callbacks suppressed [ 110.712326][ T7493] netlink: 'syz.3.649': attribute type 5 has an invalid length. [ 111.039187][ T7508] netlink: 76 bytes leftover after parsing attributes in process `syz.2.654'. [ 111.107712][ T7528] netlink: 892 bytes leftover after parsing attributes in process `syz.3.661'. [ 111.174857][ T7508] Êü: entered promiscuous mode [ 111.311460][ T7536] netlink: 96 bytes leftover after parsing attributes in process `syz.1.664'. [ 111.356536][ T7542] netlink: 72 bytes leftover after parsing attributes in process `syz.0.666'. [ 111.600692][ T7550] netlink: 'syz.3.667': attribute type 5 has an invalid length. [ 111.801290][ T7568] netlink: 'syz.4.674': attribute type 6 has an invalid length. [ 112.148491][ T7592] ipt_REJECT: ECHOREPLY no longer supported. [ 112.665283][ C1] eth0: bad gso: type: 1, size: 1408 [ 112.671289][ C1] eth0: bad gso: type: 1, size: 1408 [ 113.039303][ T7641] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 113.080862][ T7641] No such timeout policy "syz0" [ 113.118591][ T7641] netlink: 'syz.0.696': attribute type 32 has an invalid length. [ 113.440285][ T7656] netlink: 'syz.2.701': attribute type 5 has an invalid length. [ 113.734865][ T7674] netlink: 'syz.4.705': attribute type 11 has an invalid length. [ 114.583498][ T7727] netlink: 'syz.2.723': attribute type 11 has an invalid length. [ 114.922478][ T7742] can: request_module (can-proto-0) failed. [ 115.097461][ T7752] __nla_validate_parse: 22 callbacks suppressed [ 115.097481][ T7752] netlink: 28 bytes leftover after parsing attributes in process `syz.0.732'. [ 115.213132][ T7760] openvswitch: netlink: IP tunnel dst address not specified [ 115.213886][ T7761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.736'. [ 115.296175][ T7761] netlink: 40 bytes leftover after parsing attributes in process `syz.1.736'. [ 115.377638][ T7771] netlink: 'syz.0.739': attribute type 11 has an invalid length. [ 115.473500][ T7767] netlink: 'syz.1.736': attribute type 5 has an invalid length. [ 115.571945][ T7774] netlink: 24 bytes leftover after parsing attributes in process `syz.4.740'. [ 115.592369][ T7774] veth1_vlan: entered allmulticast mode [ 115.727679][ T7780] netlink: 44 bytes leftover after parsing attributes in process `syz.1.744'. [ 116.146879][ T7792] netlink: 'syz.2.747': attribute type 10 has an invalid length. [ 116.237365][ T7792] batman_adv: batadv0: Adding interface: team0 [ 116.255310][ C1] eth0: bad gso: type: 1, size: 1408 [ 116.282297][ T7792] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.332313][ T7792] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 116.373259][ T7809] netlink: 'syz.4.753': attribute type 11 has an invalid length. [ 116.434826][ T7811] openvswitch: netlink: IP tunnel dst address not specified [ 116.531571][ T7816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.756'. [ 116.730376][ T7823] netlink: 12 bytes leftover after parsing attributes in process `syz.4.758'. [ 117.045194][ T5710] syz_tun (unregistering): left allmulticast mode [ 117.185033][ T7857] openvswitch: netlink: IP tunnel dst address not specified [ 117.260324][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802d9bf800: rx timeout, send abort [ 117.317791][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802e311000: rx timeout, send abort [ 117.358768][ T2475] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.382634][ T2475] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 52982 - 0 [ 117.394045][ T2475] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 47968 - 0 [ 117.444833][ T7863] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 117.474688][ T7863] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 117.562425][ T2475] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.582980][ T2475] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 52982 - 0 [ 117.603891][ T2475] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 47968 - 0 [ 117.769781][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802d9bf800: abort rx timeout. Force session deactivation [ 117.826240][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802e311000: abort rx timeout. Force session deactivation [ 117.857688][ T2475] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.884262][ T2475] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 52982 - 0 [ 117.895667][ T2475] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 47968 - 0 [ 117.939660][ T7880] netlink: 96 bytes leftover after parsing attributes in process `syz.0.775'. [ 117.991906][ T4498] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 118.009624][ T4498] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 118.036516][ T2475] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.048190][ T2475] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 52982 - 0 [ 118.058853][ T4498] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 118.066321][ T2475] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 47968 - 0 [ 118.080599][ T4498] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 118.088674][ T4498] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 118.097204][ T4498] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 118.184852][ T7895] openvswitch: netlink: IP tunnel dst address not specified [ 118.514883][ T2475] bridge_slave_1: left allmulticast mode [ 118.521589][ T2475] bridge_slave_1: left promiscuous mode [ 118.532440][ T2475] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.552885][ T2475] bridge_slave_0: left allmulticast mode [ 118.558602][ T2475] bridge_slave_0: left promiscuous mode [ 118.571311][ T2475] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.057108][ T2475] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.077530][ T2475] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.098363][ T2475] bond0 (unregistering): Released all slaves [ 119.294309][ T7916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.786'. [ 119.313514][ T7916] netlink: 40 bytes leftover after parsing attributes in process `syz.4.786'. [ 119.482502][ T7943] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 119.528132][ T7920] netlink: 'syz.4.786': attribute type 5 has an invalid length. [ 120.184401][ T54] Bluetooth: hci3: command tx timeout [ 121.273774][ T7975] netlink: 4 bytes leftover after parsing attributes in process `syz.4.797'. [ 121.580723][ T2475] hsr_slave_0: left promiscuous mode [ 121.598281][ T2475] hsr_slave_1: left promiscuous mode [ 121.607300][ T2475] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.621563][ T2475] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.634243][ T2475] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.641718][ T2475] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.719496][ T2475] veth1_macvtap: left promiscuous mode [ 121.733377][ T2475] veth0_macvtap: left promiscuous mode [ 121.752470][ T2475] veth1_vlan: left promiscuous mode [ 121.757844][ T2475] veth0_vlan: left promiscuous mode [ 122.262717][ T54] Bluetooth: hci3: command tx timeout [ 122.548613][ T2475] team0 (unregistering): Port device team_slave_0 removed [ 122.915744][ T7991] netlink: 12 bytes leftover after parsing attributes in process `syz.2.801'. [ 123.103210][ T8029] netlink: 96 bytes leftover after parsing attributes in process `syz.0.807'. [ 123.121039][ T8028] netlink: 72 bytes leftover after parsing attributes in process `syz.2.806'. [ 123.219841][ T7882] chnl_net:caif_netlink_parms(): no params data found [ 123.576559][ T8055] netlink: 'syz.2.812': attribute type 11 has an invalid length. [ 123.732482][ T7882] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.750063][ T7882] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.751122][ T8065] xt_policy: output policy not valid in PREROUTING and INPUT [ 123.758303][ T7882] bridge_slave_0: entered allmulticast mode [ 123.783777][ T7882] bridge_slave_0: entered promiscuous mode [ 123.809998][ T7882] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.822614][ T7882] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.830349][ T7882] bridge_slave_1: entered allmulticast mode [ 123.839305][ T7882] bridge_slave_1: entered promiscuous mode [ 123.993799][ T7882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.050577][ T8073] netlink: 132 bytes leftover after parsing attributes in process `syz.4.816'. [ 124.092981][ T7882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.308682][ T7882] team0: Port device team_slave_0 added [ 124.342981][ T54] Bluetooth: hci3: command tx timeout [ 124.370072][ T7882] team0: Port device team_slave_1 added [ 124.416003][ T8089] netlink: 96 bytes leftover after parsing attributes in process `syz.4.820'. [ 124.515082][ T7882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.545296][ T7882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.621166][ T8094] netlink: 28 bytes leftover after parsing attributes in process `syz.4.822'. [ 124.621425][ T7882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.632397][ T8092] openvswitch: netlink: IP tunnel dst address not specified [ 124.695581][ T7882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.729467][ T7882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.824049][ T8102] netlink: 72 bytes leftover after parsing attributes in process `syz.3.827'. [ 124.833162][ T7882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.010683][ T7882] hsr_slave_0: entered promiscuous mode [ 125.038968][ T7882] hsr_slave_1: entered promiscuous mode [ 125.051702][ T7882] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.068933][ T8116] netlink: 96 bytes leftover after parsing attributes in process `syz.0.832'. [ 125.078359][ T7882] Cannot create hsr debugfs directory [ 125.133248][ T8112] vlan1: entered promiscuous mode [ 125.294273][ T8121] netlink: 28 bytes leftover after parsing attributes in process `syz.2.829'. [ 125.320282][ T8130] team_slave_1: entered allmulticast mode [ 125.364697][ T8110] vlan1: left promiscuous mode [ 125.656249][ T8147] lo: entered allmulticast mode [ 125.709193][ T8160] xt_l2tp: invalid flags combination: c [ 125.894762][ T8167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.967348][ T8167] sctp: [Deprecated]: syz.3.842 (pid 8167) Use of int in maxseg socket option. [ 125.967348][ T8167] Use struct sctp_assoc_value instead [ 126.422879][ T54] Bluetooth: hci3: command tx timeout [ 126.476675][ T8191] team_slave_1: entered promiscuous mode [ 126.522384][ T8191] team_slave_1: entered allmulticast mode [ 126.555684][ T8196] __nla_validate_parse: 4 callbacks suppressed [ 126.555701][ T8196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.847'. [ 126.739717][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 126.746510][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 126.753204][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 126.759746][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 126.766468][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 126.773048][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 126.779692][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 126.787676][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 126.795786][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 126.803868][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 126.811931][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 126.819918][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 126.827999][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 126.836007][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 126.844090][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 126.852064][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 126.860106][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 126.868161][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 126.876246][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 126.884223][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 126.892298][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 126.900227][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 126.985680][ T8206] netlink: 132 bytes leftover after parsing attributes in process `syz.3.851'. [ 127.158829][ T8214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.855'. [ 127.179625][ T8214] netlink: 40 bytes leftover after parsing attributes in process `syz.4.855'. [ 127.191982][ T8215] netlink: 96 bytes leftover after parsing attributes in process `syz.3.853'. [ 127.244794][ T7882] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 127.263914][ T7882] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 127.299024][ T8214] netlink: 'syz.4.855': attribute type 5 has an invalid length. [ 127.323220][ T7882] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 127.335892][ T7882] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 127.468457][ T8224] x_tables: duplicate underflow at hook 2 [ 127.716952][ T8235] team_slave_1: entered promiscuous mode [ 127.756950][ T7882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.815482][ T8243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.863'. [ 127.828041][ T8244] netlink: 12 bytes leftover after parsing attributes in process `syz.0.862'. [ 127.900191][ T8248] netlink: 9412 bytes leftover after parsing attributes in process `syz.2.865'. [ 127.912287][ T8243] vlan2: entered promiscuous mode [ 127.957724][ T8252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.864'. [ 127.995639][ T8252] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.004878][ T8252] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.013844][ T8252] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.022760][ T8252] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.047821][ T8252] vxlan0: entered promiscuous mode [ 128.079387][ T8253] netlink: 64 bytes leftover after parsing attributes in process `syz.2.865'. [ 128.116960][ T7882] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.167970][ T5151] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.175230][ T5151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.232463][ T8264] xt_nfacct: accounting object `syz1' does not exists [ 128.239804][ T5151] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.247039][ T5151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.556570][ T8280] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 128.564346][ T8280] IPv6: NLM_F_CREATE should be set when creating new route [ 128.758497][ T7882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.942570][ T8300] team_slave_1: left promiscuous mode [ 128.948101][ T8300] team_slave_1: entered allmulticast mode [ 128.981924][ T7882] veth0_vlan: entered promiscuous mode [ 129.047189][ T7882] veth1_vlan: entered promiscuous mode [ 129.079411][ T8305] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 129.133750][ T8305] syz.4.877[8305] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 129.134083][ T8305] syz.4.877[8305] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 129.161635][ T7882] veth0_macvtap: entered promiscuous mode [ 129.187499][ T8312] netlink: 'syz.3.879': attribute type 6 has an invalid length. [ 129.283268][ T7882] veth1_macvtap: entered promiscuous mode [ 129.375000][ T7882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.433170][ T7882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.483911][ T7882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.507331][ T7882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.557322][ T7882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.582428][ T7882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.623099][ T7882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.653003][ T7882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.674132][ T7882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.784978][ T7882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.806381][ T7882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.829175][ T7882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.846795][ T7882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.869521][ T7882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.896540][ T7882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.939908][ T7882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.966233][ T7882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.996468][ T7882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.161069][ T7882] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.177525][ T7882] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.199628][ T7882] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.209798][ T7882] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.622236][ T2847] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.659882][ T2847] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.761265][ T2847] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.789325][ T2847] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.185927][ T8403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.271048][ T8419] openvswitch: netlink: IP tunnel dst address not specified [ 131.711028][ T8448] __nla_validate_parse: 8 callbacks suppressed [ 131.711048][ T8448] netlink: 72 bytes leftover after parsing attributes in process `syz.0.909'. [ 131.859682][ T8456] netlink: 12 bytes leftover after parsing attributes in process `syz.4.911'. [ 132.046862][ T8480] netlink: 60 bytes leftover after parsing attributes in process `syz.4.916'. [ 132.051659][ T8475] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 132.077014][ T8475] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 132.119225][ T8475] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 132.470163][ T2847] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.515820][ T8496] netlink: 132 bytes leftover after parsing attributes in process `syz.2.920'. [ 132.625505][ T8505] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 132.690338][ T8515] netlink: 72 bytes leftover after parsing attributes in process `syz.4.923'. [ 132.725409][ T8514] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 132.906435][ T8523] sctp: [Deprecated]: syz.3.925 (pid 8523) Use of struct sctp_assoc_value in delayed_ack socket option. [ 132.906435][ T8523] Use struct sctp_sack_info instead [ 132.987443][ T8523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.925'. [ 133.217338][ T4498] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 133.229586][ T2847] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.241133][ T4498] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 133.251913][ T4498] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 133.282377][ T4498] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 133.291887][ T4498] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 133.299496][ T4498] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 133.322396][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.328717][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.449718][ T8553] netlink: 6 bytes leftover after parsing attributes in process `syz.0.931'. [ 133.593985][ T2847] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.651832][ T8555] netlink: 72 bytes leftover after parsing attributes in process `syz.4.930'. [ 133.838444][ T2847] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.902773][ T8585] Bluetooth: MGMT ver 1.23 [ 133.907286][ T8585] Bluetooth: hci3: invalid length 0, exp 2 for type 30 [ 134.047313][ T8581] netlink: 36 bytes leftover after parsing attributes in process `syz.3.935'. [ 134.245272][ T2847] bridge_slave_1: left allmulticast mode [ 134.267901][ T2847] bridge_slave_1: left promiscuous mode [ 134.277595][ T2847] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.311421][ T2847] bridge_slave_0: left allmulticast mode [ 134.318520][ T2847] bridge_slave_0: left promiscuous mode [ 134.347908][ T2847] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.868979][ T2847] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.881637][ T2847] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.892998][ T2847] bond0 (unregistering): Released all slaves [ 134.953076][ T8544] chnl_net:caif_netlink_parms(): no params data found [ 135.033639][ T8637] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.110951][ T8640] openvswitch: netlink: IP tunnel dst address not specified [ 135.119401][ T8642] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.950'. [ 135.384781][ T5098] Bluetooth: hci3: command tx timeout [ 135.637513][ T8544] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.676348][ T8544] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.710613][ T8544] bridge_slave_0: entered allmulticast mode [ 135.728997][ T8544] bridge_slave_0: entered promiscuous mode [ 135.863447][ T8544] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.881541][ T8544] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.902862][ T8544] bridge_slave_1: entered allmulticast mode [ 135.923651][ T8544] bridge_slave_1: entered promiscuous mode [ 136.045190][ T2847] hsr_slave_0: left promiscuous mode [ 136.087972][ T2847] hsr_slave_1: left promiscuous mode [ 136.120809][ T2847] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.142516][ T2847] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.161544][ T2847] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.180686][ T2847] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.201589][ T8705] openvswitch: netlink: IP tunnel dst address not specified [ 136.240613][ T2847] veth1_macvtap: left promiscuous mode [ 136.256982][ T2847] veth0_macvtap: left promiscuous mode [ 136.275988][ T2847] veth1_vlan: left promiscuous mode [ 136.281445][ T2847] veth0_vlan: left promiscuous mode [ 136.845240][ T2847] team0 (unregistering): Port device team_slave_1 removed [ 136.878341][ T2847] team0 (unregistering): Port device team_slave_0 removed [ 137.218299][ T8680] netlink: 'syz.3.948': attribute type 4 has an invalid length. [ 137.226241][ T8690] netlink: 'syz.3.948': attribute type 4 has an invalid length. [ 137.257930][ T8544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.305639][ T8544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.317349][ T8722] netlink: 12 bytes leftover after parsing attributes in process `syz.4.965'. [ 137.421067][ C1] eth0: bad gso: type: 1, size: 1408 [ 137.462455][ T5098] Bluetooth: hci3: command tx timeout [ 137.535444][ T8544] team0: Port device team_slave_0 added [ 137.579072][ T8544] team0: Port device team_slave_1 added [ 137.611053][ T8724] netlink: 232 bytes leftover after parsing attributes in process `syz.2.966'. [ 137.637958][ T8736] netlink: 60 bytes leftover after parsing attributes in process `syz.4.970'. [ 137.663609][ T8738] netlink: 'syz.0.971': attribute type 10 has an invalid length. [ 137.718598][ T8738] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 137.741102][ T8544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.752511][ T8544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.786277][ T8544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.804395][ T8544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.817274][ T8544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.857781][ T8544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.979180][ T8544] hsr_slave_0: entered promiscuous mode [ 137.996144][ T8544] hsr_slave_1: entered promiscuous mode [ 138.020825][ T8544] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 138.030521][ T8544] Cannot create hsr debugfs directory [ 138.040928][ T8761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.978'. [ 138.051024][ T8765] netlink: 4 bytes leftover after parsing attributes in process `syz.0.978'. [ 138.192915][ T8772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.975'. [ 138.295855][ T8776] netlink: 72 bytes leftover after parsing attributes in process `syz.2.981'. [ 138.321418][ T8769] syzkaller1: entered promiscuous mode [ 138.332206][ T8769] syzkaller1: entered allmulticast mode [ 138.432669][ T8780] netlink: 28 bytes leftover after parsing attributes in process `syz.3.980'. [ 138.669813][ T8795] netlink: 60 bytes leftover after parsing attributes in process `syz.2.985'. [ 138.811411][ T8804] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 139.228852][ T8828] netlink: 28 bytes leftover after parsing attributes in process `syz.4.995'. [ 139.282509][ T8544] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 139.295335][ T8544] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 139.320544][ T8544] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 139.363518][ T8544] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 139.542473][ T5098] Bluetooth: hci3: command tx timeout [ 139.548145][ T8841] tun0: tun_chr_ioctl cmd 35108 [ 139.761985][ T8544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.957964][ T8544] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.977907][ T8861] macvlan0: entered promiscuous mode [ 139.991754][ T8861] batadv_slave_0: entered promiscuous mode [ 140.046887][ T5141] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.054161][ T5141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.086844][ T5150] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.094069][ T5150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.182826][ T8874] bridge0: port 3(macvlan0) entered blocking state [ 140.189850][ T8874] bridge0: port 3(macvlan0) entered disabled state [ 140.212876][ T8874] macvlan0: entered allmulticast mode [ 140.227802][ T8874] veth1_vlan: entered allmulticast mode [ 140.263683][ T8874] macvlan0: left allmulticast mode [ 140.274663][ T8874] veth1_vlan: left allmulticast mode [ 140.579357][ T8544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.620417][ T8890] macvtap0: entered promiscuous mode [ 140.630606][ T8890] macvtap0: entered allmulticast mode [ 140.648750][ T8890] veth0_macvtap: entered allmulticast mode [ 140.773557][ T8895] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 140.807315][ T8544] veth0_vlan: entered promiscuous mode [ 140.834387][ T8544] veth1_vlan: entered promiscuous mode [ 140.936379][ T8544] veth0_macvtap: entered promiscuous mode [ 140.961619][ T8544] veth1_macvtap: entered promiscuous mode [ 141.034309][ T8544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.059749][ T8544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.077472][ T8544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.094299][ T8544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.107972][ T8544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.122945][ T8544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.146884][ T8544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.164180][ T8544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.181053][ T8544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.235487][ T8544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.267968][ T8544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.278627][ T8544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.290495][ T8544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.300765][ T8544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.311789][ T8544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.321748][ T8544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.333085][ T8544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.356109][ T8544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.369209][ T8544] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.383496][ T8544] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.393450][ T8544] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.407778][ T8544] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.439794][ T8913] netlink: 'syz.4.1019': attribute type 1 has an invalid length. [ 141.570028][ T8922] openvswitch: netlink: IP tunnel dst address not specified [ 141.623084][ T5098] Bluetooth: hci3: command tx timeout [ 141.670895][ T5649] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.685015][ T5636] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.696943][ T5636] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.719442][ T5649] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.156081][ T8959] openvswitch: netlink: IP tunnel dst address not specified [ 142.347248][ T8974] __nla_validate_parse: 12 callbacks suppressed [ 142.347269][ T8974] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1040'. [ 142.441180][ T8983] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1043'. [ 142.441419][ T8981] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1041'. [ 142.475237][ T8981] netlink: 'syz.3.1041': attribute type 1 has an invalid length. [ 142.541780][ T8983] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1043'. [ 142.597135][ T8989] netlink: 'syz.0.1045': attribute type 10 has an invalid length. [ 142.627983][ T8989] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.645119][ T8989] bond0: (slave team0): Enslaving as an active interface with an up link [ 142.654214][ T8983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1043'. [ 142.664194][ T8983] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1043'. [ 142.678395][ T8983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1043'. [ 142.710946][ C1] eth0: bad gso: type: 1, size: 1408 [ 142.880621][ T9005] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1051'. [ 143.187424][ T9024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1057'. [ 143.222334][ T9024] nbd: couldn't find a device at index 0 [ 143.325587][ T9035] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1062'. [ 143.524308][ T9051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.798706][ T5649] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.064420][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 144.077854][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 144.086380][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 144.108527][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 144.126596][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 144.135390][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 144.212606][ T9081] netlink: 'syz.0.1077': attribute type 1 has an invalid length. [ 144.235614][ T9081] netlink: 'syz.0.1077': attribute type 1 has an invalid length. [ 144.260982][ T9081] netlink: 'syz.0.1077': attribute type 1 has an invalid length. [ 144.421285][ T9096] netlink: 'syz.2.1080': attribute type 11 has an invalid length. [ 144.576496][ T9075] chnl_net:caif_netlink_parms(): no params data found [ 144.753953][ T9075] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.768715][ T9075] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.792948][ T9075] bridge_slave_0: entered allmulticast mode [ 144.831822][ T9075] bridge_slave_0: entered promiscuous mode [ 144.858120][ T9111] bridge1: entered promiscuous mode [ 144.891678][ T9111] bridge1: entered allmulticast mode [ 144.973183][ T9075] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.980368][ T9075] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.007350][ T9075] bridge_slave_1: entered allmulticast mode [ 145.025259][ T9075] bridge_slave_1: entered promiscuous mode [ 145.220806][ T9075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.316608][ T4498] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 145.339174][ T4498] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 145.348732][ T4498] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 145.371224][ T9075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.394013][ T4498] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 145.403059][ T4498] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 145.410435][ T4498] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 145.483778][ T5649] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.531037][ C1] eth0: bad gso: type: 1, size: 1408 [ 145.539657][ T9136] openvswitch: netlink: IP tunnel dst address not specified [ 145.565649][ C1] eth0: bad gso: type: 1, size: 1408 [ 145.588492][ T9075] team0: Port device team_slave_0 added [ 145.655718][ T5649] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.721645][ T9075] team0: Port device team_slave_1 added [ 145.802619][ T5649] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.982829][ T9075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.010383][ T9075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.061461][ T9075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.083535][ T9075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.090512][ T9075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.110225][ T9159] Unsupported ieee802154 address type: 0 [ 146.125582][ T9075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.145393][ T9159] openvswitch: netlink: Duplicate key (type 0). [ 146.182645][ T4498] Bluetooth: hci3: command tx timeout [ 146.351850][ T9075] hsr_slave_0: entered promiscuous mode [ 146.379243][ T9075] hsr_slave_1: entered promiscuous mode [ 146.412584][ T9075] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.420194][ T9075] Cannot create hsr debugfs directory [ 146.457741][ T9170] netlink: 'syz.4.1103': attribute type 4 has an invalid length. [ 146.496625][ T9171] sctp: [Deprecated]: syz.0.1102 (pid 9171) Use of struct sctp_assoc_value in delayed_ack socket option. [ 146.496625][ T9171] Use struct sctp_sack_info instead [ 146.573490][ T5649] bridge_slave_1: left allmulticast mode [ 146.581322][ T5649] bridge_slave_1: left promiscuous mode [ 146.591842][ T5649] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.607112][ T5649] bridge_slave_0: left allmulticast mode [ 146.615839][ T5649] bridge_slave_0: left promiscuous mode [ 146.621889][ T5649] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.951319][ T5649] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.966849][ T5649] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.978251][ T5649] bond0 (unregistering): Released all slaves [ 147.309576][ T9123] chnl_net:caif_netlink_parms(): no params data found [ 147.340126][ T9186] netlink: 'syz.0.1107': attribute type 10 has an invalid length. [ 147.379786][ T9186] team0: Device veth1_vlan failed to register rx_handler [ 147.456043][ T9192] dccp_v4_rcv: dropped packet with invalid checksum [ 147.472323][ T4498] Bluetooth: hci4: command tx timeout [ 147.530823][ T5649] hsr_slave_0: left promiscuous mode [ 147.550709][ T5649] hsr_slave_1: left promiscuous mode [ 147.558714][ T5649] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.566585][ T5649] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.574996][ T5649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.582813][ T5649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.617019][ T5649] veth1_macvtap: left promiscuous mode [ 147.623286][ T5649] veth0_macvtap: left promiscuous mode [ 147.628982][ T5649] veth1_vlan: left promiscuous mode [ 147.634593][ T5649] veth0_vlan: left promiscuous mode [ 147.775602][ T9202] __nla_validate_parse: 12 callbacks suppressed [ 147.775620][ T9202] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1111'. [ 148.114157][ T5649] team0 (unregistering): Port device team_slave_1 removed [ 148.163474][ T5649] team0 (unregistering): Port device team_slave_0 removed [ 148.272427][ T4498] Bluetooth: hci3: command tx timeout [ 148.274689][ T9205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.372387][ T9206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.612143][ T9189] netlink: 'syz.2.1109': attribute type 10 has an invalid length. [ 148.665742][ T9123] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.686587][ T9123] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.703462][ T9123] bridge_slave_0: entered allmulticast mode [ 148.718764][ T9123] bridge_slave_0: entered promiscuous mode [ 148.760170][ T9123] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.768966][ T9123] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.778156][ T9216] netlink: 'syz.2.1115': attribute type 4 has an invalid length. [ 148.785683][ T9123] bridge_slave_1: entered allmulticast mode [ 148.803764][ T9123] bridge_slave_1: entered promiscuous mode [ 148.806790][ T9216] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1115'. [ 148.959692][ T9123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.991533][ T9123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.201800][ T9123] team0: Port device team_slave_0 added [ 149.251430][ T9123] team0: Port device team_slave_1 added [ 149.272713][ T9241] xt_policy: output policy not valid in PREROUTING and INPUT [ 149.311198][ T9075] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 149.331538][ T9123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.340708][ T9123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.369817][ T9123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.386305][ T9075] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 149.398383][ T9075] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 149.413746][ T9123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.420736][ T9123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.451106][ T9123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.495490][ T9075] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 149.555407][ T4498] Bluetooth: hci4: command tx timeout [ 149.579157][ T9123] hsr_slave_0: entered promiscuous mode [ 149.588734][ T9123] hsr_slave_1: entered promiscuous mode [ 149.599662][ T9123] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 149.607893][ T9123] Cannot create hsr debugfs directory [ 149.651236][ T9257] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1125'. [ 149.809353][ T9259] tipc: Started in network mode [ 149.826538][ T9259] tipc: Node identity ac1414aa, cluster identity 4711 [ 149.844719][ T9259] tipc: Enabled bearer , priority 10 [ 150.191219][ T9123] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.209811][ T9123] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.220714][ T9123] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 60053 - 0 [ 150.232547][ T9123] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 41825 - 0 [ 150.255850][ T9274] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1129'. [ 150.327331][ T9075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.347415][ T4498] Bluetooth: hci3: command tx timeout [ 150.397700][ T9123] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.408615][ T9123] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.419185][ T9123] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 60053 - 0 [ 150.431011][ T9123] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 41825 - 0 [ 150.521053][ T9075] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.607286][ T9123] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.630592][ T9123] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.643327][ T9123] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 60053 - 0 [ 150.669956][ T9123] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 41825 - 0 [ 150.720571][ T5150] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.727856][ T5150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.766263][ T5150] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.773513][ T5150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.828423][ T9312] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 150.829268][ T9123] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.854092][ T25] tipc: Node number set to 2886997162 [ 150.859069][ T9123] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.870388][ T9123] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 60053 - 0 [ 150.898877][ T9123] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 41825 - 0 [ 150.931924][ T9315] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1140'. [ 150.948463][ T9313] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 151.127901][ T9075] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 151.247800][ T9123] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 151.289974][ T9324] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1143'. [ 151.313516][ T9123] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 151.325441][ T9328] dccp_v4_rcv: dropped packet with invalid checksum [ 151.347125][ T9123] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 151.369420][ T9123] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 151.503346][ T9334] netlink: 'syz.0.1145': attribute type 21 has an invalid length. [ 151.619444][ T9075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.622365][ T4498] Bluetooth: hci4: command tx timeout [ 151.685826][ T9338] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1147'. [ 151.701005][ T9338] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1147'. [ 151.712244][ T9338] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1147'. [ 151.721391][ T9345] netlink: 'syz.0.1148': attribute type 11 has an invalid length. [ 151.755214][ T9123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.769909][ T9339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.836991][ T9123] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.885953][ T928] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.893185][ T928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.909404][ T9075] veth0_vlan: entered promiscuous mode [ 151.927631][ T5151] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.934830][ T5151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.984234][ T9355] No such timeout policy "syz0" [ 151.998495][ T9354] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1150'. [ 152.064490][ T9355] Bluetooth: MGMT ver 1.23 [ 152.072977][ T9075] veth1_vlan: entered promiscuous mode [ 152.110051][ T9123] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 152.210811][ T9075] veth0_macvtap: entered promiscuous mode [ 152.246509][ T9075] veth1_macvtap: entered promiscuous mode [ 152.296812][ T9366] dccp_v4_rcv: dropped packet with invalid checksum [ 152.408122][ T9075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.422949][ T4498] Bluetooth: hci3: command tx timeout [ 152.442210][ T9075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.491633][ T9075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.502922][ T9075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.512973][ T9075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.528171][ T9075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.538714][ T9075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.552239][ T9075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.564368][ T9075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.595060][ T9075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.611264][ T9075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.625768][ T9075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.641267][ T9075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.656104][ T9075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.667891][ T9075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.682074][ T9075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.694371][ T9075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.708728][ T9075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.749803][ T9075] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.773750][ T9075] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.792496][ T9075] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.801527][ T9075] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.891906][ T9123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.989062][ T9404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1166'. [ 152.999668][ T9404] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1166'. [ 153.098674][ T9123] veth0_vlan: entered promiscuous mode [ 153.124960][ T9404] netlink: 'syz.0.1166': attribute type 5 has an invalid length. [ 153.161862][ T5644] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.180156][ T5644] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.220412][ T9123] veth1_vlan: entered promiscuous mode [ 153.301963][ T9415] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1170'. [ 153.336614][ T9413] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1169'. [ 153.357078][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.376276][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.431017][ T9123] veth0_macvtap: entered promiscuous mode [ 153.445426][ T9123] veth1_macvtap: entered promiscuous mode [ 153.445600][ T9418] sctp: [Deprecated]: syz.2.1171 (pid 9418) Use of struct sctp_assoc_value in delayed_ack socket option. [ 153.445600][ T9418] Use struct sctp_sack_info instead [ 153.502758][ T9123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.521783][ T9123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.537086][ T9123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.548535][ T9123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.559223][ T9123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.569919][ T9123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.580879][ T9123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.591971][ T9123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.604450][ T9123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.615043][ T9123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.631468][ T9123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.642984][ T9422] netlink: 'syz.4.1173': attribute type 11 has an invalid length. [ 153.656541][ T9422] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1173'. [ 153.709726][ T4498] Bluetooth: hci4: command tx timeout [ 153.741291][ T9123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.759474][ T9123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.778415][ T9429] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1175'. [ 153.779063][ T9123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.810537][ T9123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.820617][ T9123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.833800][ T9123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.843911][ T9123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.854580][ T9123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.868751][ T9123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.880425][ T9123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.898357][ T9435] netlink: 'syz.4.1175': attribute type 1 has an invalid length. [ 153.907137][ T9435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1175'. [ 153.908468][ T9123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.056094][ T9441] tipc: Enabling of bearer rejected, failed to enable media [ 154.069035][ T9443] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1178'. [ 154.083700][ T9429] netlink: 'syz.4.1175': attribute type 2 has an invalid length. [ 154.091758][ T9429] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1175'. [ 154.098740][ T9123] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.114497][ T9123] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.124979][ T9123] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.135427][ T9123] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.251107][ T9448] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1181'. [ 154.288854][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.332812][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.430515][ T5649] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.442585][ T5649] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.456786][ T9474] netlink: 'syz.0.1186': attribute type 11 has an invalid length. [ 154.771459][ T9492] dummy0: entered promiscuous mode [ 154.794722][ T9492] dummy0: left promiscuous mode [ 155.119883][ T5649] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.188183][ T9507] @ÿ: renamed from veth0_vlan (while UP) [ 155.724375][ T9522] netlink: 'syz.4.1200': attribute type 11 has an invalid length. [ 155.875797][ T5649] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.059651][ T5649] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.099156][ T5098] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 156.121261][ T5098] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 156.135677][ T5098] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 156.158422][ T5098] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 156.169219][ T5098] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 156.177792][ T5098] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 156.231285][ T5649] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.654001][ T5649] bridge_slave_1: left allmulticast mode [ 156.663711][ T9574] netlink: 'syz.3.1213': attribute type 3 has an invalid length. [ 156.673143][ T5649] bridge_slave_1: left promiscuous mode [ 156.682381][ T5649] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.697526][ T5649] bridge_slave_0: left allmulticast mode [ 156.703839][ T5649] bridge_slave_0: left promiscuous mode [ 156.710846][ T5649] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.158487][ T5649] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.170027][ T5649] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.180905][ T5649] bond0 (unregistering): Released all slaves [ 157.219689][ T9575] bridge_slave_1: left allmulticast mode [ 157.231056][ T9573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.252196][ T9575] bridge_slave_1: left promiscuous mode [ 157.261846][ T9575] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.299315][ T9575] netlink: 'syz.2.1212': attribute type 2 has an invalid length. [ 157.316570][ T9575] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 157.339913][ T9586] netlink: 'syz.4.1215': attribute type 5 has an invalid length. [ 157.785054][ T5649] hsr_slave_0: left promiscuous mode [ 157.811132][ T5649] hsr_slave_1: left promiscuous mode [ 157.836111][ T5649] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.848171][ T5649] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.874607][ T5649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.894374][ T5649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.937359][ T9617] dccp_v4_rcv: dropped packet with invalid checksum [ 157.951460][ T5649] veth1_macvtap: left promiscuous mode [ 157.961919][ T5649] veth0_macvtap: left promiscuous mode [ 157.968618][ T5649] veth1_vlan: left promiscuous mode [ 157.986601][ T5649] veth0_vlan: left promiscuous mode [ 158.169223][ T9629] ieee802154 phy0 wpan0: encryption failed: -90 [ 158.224632][ T9630] __nla_validate_parse: 9 callbacks suppressed [ 158.224650][ T9630] netlink: 596 bytes leftover after parsing attributes in process `syz.3.1230'. [ 158.264178][ T4498] Bluetooth: hci3: command tx timeout [ 158.769597][ T9656] netlink: 'syz.3.1236': attribute type 3 has an invalid length. [ 158.778104][ T9656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1236'. [ 158.885520][ T5649] team0 (unregistering): Port device team_slave_1 removed [ 158.951485][ T5649] team0 (unregistering): Port device team_slave_0 removed [ 159.381302][ T9608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1223'. [ 159.404651][ T9615] netlink: 'syz.4.1227': attribute type 21 has an invalid length. [ 159.604378][ T9539] chnl_net:caif_netlink_parms(): no params data found [ 159.605216][ T9655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.819348][ T9539] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.826790][ T9539] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.835118][ T9539] bridge_slave_0: entered allmulticast mode [ 159.846289][ T9678] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1241'. [ 159.855334][ T9539] bridge_slave_0: entered promiscuous mode [ 159.858031][ T9539] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.870007][ T9539] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.877931][ T9539] bridge_slave_1: entered allmulticast mode [ 159.885413][ T9539] bridge_slave_1: entered promiscuous mode [ 159.975855][ T9539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.007726][ T9539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.076510][ T9539] team0: Port device team_slave_0 added [ 160.095257][ T9539] team0: Port device team_slave_1 added [ 160.142630][ T9686] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1245'. [ 160.153725][ T9539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.160707][ T9539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.189542][ T9539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.213698][ T9539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.220667][ T9539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.252532][ T9539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.278147][ T9688] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1246'. [ 160.287353][ T9688] netlink: 'syz.2.1246': attribute type 1 has an invalid length. [ 160.301687][ T9688] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1246'. [ 160.343997][ T4498] Bluetooth: hci3: command tx timeout [ 160.386328][ T9539] hsr_slave_0: entered promiscuous mode [ 160.417478][ T9539] hsr_slave_1: entered promiscuous mode [ 160.433344][ T9539] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 160.445615][ T9539] Cannot create hsr debugfs directory [ 160.553438][ T9672] syz.0.1241 (9672) used greatest stack depth: 17520 bytes left [ 160.812141][ T9712] netlink: 'syz.0.1254': attribute type 1 has an invalid length. [ 160.823882][ T9712] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1254'. [ 160.841592][ T9712] NCSI netlink: No device for ifindex 0 [ 160.990703][ T9723] netlink: 'syz.0.1257': attribute type 3 has an invalid length. [ 161.005076][ T9723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1257'. [ 161.337559][ T9539] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 161.362714][ T9539] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 161.402844][ T9539] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 161.440865][ T9539] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 161.515705][ T9747] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 161.679818][ T9720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.740426][ T9759] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1269'. [ 161.765584][ T9760] netlink: 'syz.2.1268': attribute type 4 has an invalid length. [ 161.955290][ T9539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.005366][ T9539] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.022299][ T9768] netlink: 'syz.3.1272': attribute type 5 has an invalid length. [ 162.076430][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.083666][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.099252][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.106586][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.301915][ T9539] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 162.375064][ C1] eth0: bad gso: type: 1, size: 1408 [ 162.422866][ T4498] Bluetooth: hci3: command tx timeout [ 162.653398][ T9799] netlink: 'syz.0.1281': attribute type 11 has an invalid length. [ 162.760288][ T9539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.935110][ T9539] veth0_vlan: entered promiscuous mode [ 162.961360][ T9539] veth1_vlan: entered promiscuous mode [ 163.064831][ T9539] veth0_macvtap: entered promiscuous mode [ 163.100130][ T9539] veth1_macvtap: entered promiscuous mode [ 163.167787][ T9539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.191561][ T9539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.203614][ T9539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.215643][ T9539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.226290][ T9539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.239473][ T9539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.249707][ T9539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.259108][ T9833] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 163.260404][ T9539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.280903][ T9539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.291653][ T9539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.303942][ T9539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.359652][ T9539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.396033][ T9539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.421107][ T9539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.436995][ T9539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.447007][ T9539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.461525][ T9539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.471892][ T9539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.482988][ T9539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.493547][ T9539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.504040][ T9539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.516257][ T9539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.531264][ T9836] __nla_validate_parse: 7 callbacks suppressed [ 163.531286][ T9836] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1296'. [ 163.558760][ T9836] netlink: 'syz.0.1296': attribute type 19 has an invalid length. [ 163.601913][ T9539] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.621601][ T9539] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.646883][ T9539] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.662864][ T9539] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.701770][ T9846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.721547][ T9851] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1298'. [ 163.784316][ C0] ------------[ cut here ]------------ [ 163.790284][ C0] WARNING: CPU: 0 PID: 5149 at net/ipv4/route.c:1241 ip_rt_bug+0x2c/0x110 [ 163.798905][ C0] Modules linked in: [ 163.802919][ C0] CPU: 0 PID: 5149 Comm: kworker/0:5 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 163.812826][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 163.822965][ C0] Workqueue: wg-kex-wg1 wg_packet_handshake_receive_worker [ 163.830226][ C0] RIP: 0010:ip_rt_bug+0x2c/0x110 [ 163.835264][ C0] Code: 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 1b 26 aa f7 66 90 e8 14 26 aa f7 31 ff 48 89 de ba 02 00 00 00 e8 45 ad 6b ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc f3 0f 1e [ 163.854973][ C0] RSP: 0000:ffffc90000007720 EFLAGS: 00010286 [ 163.861085][ C0] RAX: 0c27340c25fdbb00 RBX: ffff88801e7e4b40 RCX: ffffffff816fef2a [ 163.869136][ C0] RDX: dffffc0000000000 RSI: ffffffff8bcac920 RDI: ffffffff8c206900 [ 163.877272][ C0] RBP: 0000000000000001 R08: ffffffff92ff069f R09: 1ffffffff25fe0d3 [ 163.885347][ C0] R10: dffffc0000000000 R11: fffffbfff25fe0d4 R12: dffffc0000000000 [ 163.893408][ C0] R13: dffffc0000000000 R14: ffff8880663d9dc0 R15: ffff888016331a00 [ 163.901415][ C0] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 163.910811][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 163.917485][ C0] CR2: 00007f931c7cd270 CR3: 000000001e422000 CR4: 00000000003506f0 [ 163.925553][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 163.933605][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 163.941613][ C0] Call Trace: [ 163.944979][ C0] [ 163.947869][ C0] ? __warn+0x163/0x4e0 [ 163.952112][ C0] ? ip_rt_bug+0x2c/0x110 [ 163.956579][ C0] ? report_bug+0x2b3/0x500 [ 163.961139][ C0] ? ip_rt_bug+0x2c/0x110 [ 163.965563][ C0] ? handle_bug+0x3e/0x70 [ 163.969941][ C0] ? exc_invalid_op+0x1a/0x50 [ 163.974705][ C0] ? asm_exc_invalid_op+0x1a/0x20 [ 163.979783][ C0] ? mark_lock+0x9a/0x350 [ 163.984197][ C0] ? ip_rt_bug+0x2c/0x110 [ 163.988910][ C0] ip_push_pending_frames+0xbf/0x150 [ 163.994274][ C0] __icmp_send+0xf89/0x14e0 [ 163.998823][ C0] ? __icmp_send+0x59c/0x14e0 [ 164.003550][ C0] ? __pfx___icmp_send+0x10/0x10 [ 164.008499][ C0] ? mark_lock+0x9a/0x350 [ 164.012912][ C0] ? look_up_lock_class+0x77/0x160 [ 164.018055][ C0] ? mark_lock+0x9a/0x350 [ 164.022458][ C0] ipv4_link_failure+0x62f/0xa10 [ 164.027401][ C0] ? __pfx_ipv4_link_failure+0x10/0x10 [ 164.032936][ C0] ? do_raw_write_lock+0x148/0x4f0 [ 164.038163][ C0] ? __pfx_ipv4_link_failure+0x10/0x10 [ 164.043813][ C0] arp_error_report+0x114/0x160 [ 164.048777][ C0] neigh_invalidate+0x244/0x470 [ 164.053695][ C0] neigh_timer_handler+0x8a5/0xfd0 [ 164.058820][ C0] call_timer_fn+0x18e/0x650 [ 164.063452][ C0] ? call_timer_fn+0xc0/0x650 [ 164.068130][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 164.074026][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 164.079186][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 164.084874][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 164.090519][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 164.096556][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 164.101973][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 164.107249][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 164.112943][ C0] __run_timer_base+0x66a/0x8e0 [ 164.117822][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 164.123297][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 164.129723][ C0] run_timer_softirq+0xb7/0x170 [ 164.134687][ C0] handle_softirqs+0x2c4/0x970 [ 164.139566][ C0] ? do_softirq+0x11b/0x1e0 [ 164.144582][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 164.149932][ C0] do_softirq+0x11b/0x1e0 [ 164.154497][ C0] [ 164.157440][ C0] [ 164.160724][ C0] ? __pfx_do_softirq+0x10/0x10 [ 164.165733][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 164.171579][ C0] ? mod_peer_timer+0x21/0x260 [ 164.176522][ C0] ? rcu_is_watching+0x15/0xb0 [ 164.181311][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 164.186628][ C0] ? wg_noise_handshake_begin_session+0x84e/0xb80 [ 164.193226][ C0] ? mod_peer_timer+0x21/0x260 [ 164.198025][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 164.203835][ C0] ? mod_peer_timer+0x21/0x260 [ 164.208684][ C0] ? mod_peer_timer+0x212/0x260 [ 164.213581][ C0] wg_packet_handshake_receive_worker+0x643/0xf50 [ 164.220026][ C0] ? __pfx_wg_packet_handshake_receive_worker+0x10/0x10 [ 164.227038][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 164.232146][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 164.238235][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 164.244688][ C0] ? process_scheduled_works+0x945/0x1830 [ 164.250409][ C0] process_scheduled_works+0xa2c/0x1830 [ 164.256004][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 164.262056][ C0] ? assign_work+0x364/0x3d0 [ 164.266702][ C0] worker_thread+0x86d/0xd40 [ 164.271358][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 164.277324][ C0] ? __kthread_parkme+0x169/0x1d0 [ 164.282388][ C0] ? __pfx_worker_thread+0x10/0x10 [ 164.287538][ C0] kthread+0x2f0/0x390 [ 164.291623][ C0] ? __pfx_worker_thread+0x10/0x10 [ 164.296841][ C0] ? __pfx_kthread+0x10/0x10 [ 164.301458][ C0] ret_from_fork+0x4b/0x80 [ 164.306084][ C0] ? __pfx_kthread+0x10/0x10 [ 164.310676][ C0] ret_from_fork_asm+0x1a/0x30 [ 164.315512][ C0] [ 164.318563][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 164.325854][ C0] CPU: 0 PID: 5149 Comm: kworker/0:5 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 164.335648][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 164.345720][ C0] Workqueue: wg-kex-wg1 wg_packet_handshake_receive_worker [ 164.352979][ C0] Call Trace: [ 164.356257][ C0] [ 164.359102][ C0] dump_stack_lvl+0x241/0x360 [ 164.363808][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.369007][ C0] ? __pfx__printk+0x10/0x10 [ 164.373615][ C0] ? vscnprintf+0x5d/0x90 [ 164.377989][ C0] panic+0x349/0x860 [ 164.381908][ C0] ? __warn+0x172/0x4e0 [ 164.386087][ C0] ? __pfx_panic+0x10/0x10 [ 164.390523][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 164.395462][ C0] __warn+0x346/0x4e0 [ 164.399439][ C0] ? ip_rt_bug+0x2c/0x110 [ 164.403767][ C0] report_bug+0x2b3/0x500 [ 164.408107][ C0] ? ip_rt_bug+0x2c/0x110 [ 164.412455][ C0] handle_bug+0x3e/0x70 [ 164.416641][ C0] exc_invalid_op+0x1a/0x50 [ 164.421141][ C0] asm_exc_invalid_op+0x1a/0x20 [ 164.426004][ C0] RIP: 0010:ip_rt_bug+0x2c/0x110 [ 164.430976][ C0] Code: 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 1b 26 aa f7 66 90 e8 14 26 aa f7 31 ff 48 89 de ba 02 00 00 00 e8 45 ad 6b ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc f3 0f 1e [ 164.450686][ C0] RSP: 0000:ffffc90000007720 EFLAGS: 00010286 [ 164.456758][ C0] RAX: 0c27340c25fdbb00 RBX: ffff88801e7e4b40 RCX: ffffffff816fef2a [ 164.464749][ C0] RDX: dffffc0000000000 RSI: ffffffff8bcac920 RDI: ffffffff8c206900 [ 164.472734][ C0] RBP: 0000000000000001 R08: ffffffff92ff069f R09: 1ffffffff25fe0d3 [ 164.480809][ C0] R10: dffffc0000000000 R11: fffffbfff25fe0d4 R12: dffffc0000000000 [ 164.488776][ C0] R13: dffffc0000000000 R14: ffff8880663d9dc0 R15: ffff888016331a00 [ 164.496752][ C0] ? mark_lock+0x9a/0x350 [ 164.501091][ C0] ip_push_pending_frames+0xbf/0x150 [ 164.506376][ C0] __icmp_send+0xf89/0x14e0 [ 164.510887][ C0] ? __icmp_send+0x59c/0x14e0 [ 164.515564][ C0] ? __pfx___icmp_send+0x10/0x10 [ 164.520557][ C0] ? mark_lock+0x9a/0x350 [ 164.524929][ C0] ? look_up_lock_class+0x77/0x160 [ 164.530072][ C0] ? mark_lock+0x9a/0x350 [ 164.534440][ C0] ipv4_link_failure+0x62f/0xa10 [ 164.539387][ C0] ? __pfx_ipv4_link_failure+0x10/0x10 [ 164.544937][ C0] ? do_raw_write_lock+0x148/0x4f0 [ 164.550043][ C0] ? __pfx_ipv4_link_failure+0x10/0x10 [ 164.555504][ C0] arp_error_report+0x114/0x160 [ 164.560352][ C0] neigh_invalidate+0x244/0x470 [ 164.565206][ C0] neigh_timer_handler+0x8a5/0xfd0 [ 164.570316][ C0] call_timer_fn+0x18e/0x650 [ 164.574917][ C0] ? call_timer_fn+0xc0/0x650 [ 164.579609][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 164.585320][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 164.590424][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 164.596049][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 164.601706][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 164.607351][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 164.612571][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 164.617766][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 164.623407][ C0] __run_timer_base+0x66a/0x8e0 [ 164.628278][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 164.633663][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 164.640099][ C0] run_timer_softirq+0xb7/0x170 [ 164.644958][ C0] handle_softirqs+0x2c4/0x970 [ 164.649897][ C0] ? do_softirq+0x11b/0x1e0 [ 164.654401][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 164.659705][ C0] do_softirq+0x11b/0x1e0 [ 164.664032][ C0] [ 164.666954][ C0] [ 164.669881][ C0] ? __pfx_do_softirq+0x10/0x10 [ 164.674737][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 164.680407][ C0] ? mod_peer_timer+0x21/0x260 [ 164.685294][ C0] ? rcu_is_watching+0x15/0xb0 [ 164.690078][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 164.695278][ C0] ? wg_noise_handshake_begin_session+0x84e/0xb80 [ 164.701698][ C0] ? mod_peer_timer+0x21/0x260 [ 164.706485][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 164.712209][ C0] ? mod_peer_timer+0x21/0x260 [ 164.716979][ C0] ? mod_peer_timer+0x212/0x260 [ 164.721831][ C0] wg_packet_handshake_receive_worker+0x643/0xf50 [ 164.728283][ C0] ? __pfx_wg_packet_handshake_receive_worker+0x10/0x10 [ 164.735259][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 164.740313][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 164.746394][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 164.752732][ C0] ? process_scheduled_works+0x945/0x1830 [ 164.758463][ C0] process_scheduled_works+0xa2c/0x1830 [ 164.764032][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 164.770155][ C0] ? assign_work+0x364/0x3d0 [ 164.774860][ C0] worker_thread+0x86d/0xd40 [ 164.779484][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 164.785397][ C0] ? __kthread_parkme+0x169/0x1d0 [ 164.790431][ C0] ? __pfx_worker_thread+0x10/0x10 [ 164.795533][ C0] kthread+0x2f0/0x390 [ 164.799592][ C0] ? __pfx_worker_thread+0x10/0x10 [ 164.804692][ C0] ? __pfx_kthread+0x10/0x10 [ 164.809271][ C0] ret_from_fork+0x4b/0x80 [ 164.813682][ C0] ? __pfx_kthread+0x10/0x10 [ 164.818266][ C0] ret_from_fork_asm+0x1a/0x30 [ 164.823050][ C0] [ 164.826325][ C0] Kernel Offset: disabled [ 164.830742][ C0] Rebooting in 86400 seconds..