last executing test programs: 59.601928224s ago: executing program 1 (id=1043): socket$l2tp6(0xa, 0x2, 0x73) syz_emit_ethernet(0x5a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004e00004c0000000000069078ac000000441405030000000000000000fffffffe00000000860600"/74, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_pauseparam={0x12}}) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000000)='g', 0x48, 0x0, &(0x7f00000000c0)={0x11, 0xd, r4, 0x1, 0x0, 0x6, @remote}, 0x14) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000001000000000000000000000000000002000000000"], 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000002010000008001000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, r5, 0x3, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000001840)=ANY=[@ANYRES8=r1], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r7}, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000b00)=ANY=[@ANYBLOB="18080009000000ecd7cc458f00000000ad0018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b706000014000000b7030000000000008500000005000000bc690000000000003509010000000000950000000400000087060000000000007b9af8ff00000000b5090200000000007baaf0ff00000000bfa600000000000007080000f8ffffffbf6400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056040000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet(0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000e000000000000000691", @ANYRES32=r1, @ANYBLOB="000000000000000000000000000000000f0000005aa78103ed29c8d17f4bf80a35794ad67b5b27cc399765a1bdf0ac55b7fcc4226112ee9a5a9604f47a2033cdaf84310fd8194a79273c3a5ef7de4c7b91c699000aea2f2fafe7b6534c1ff8b33d8c68d0761b66e2b659b269493566bd63d34aeba1f1daa003d9201de84e6aee5d3132f488a60359dea9558d9285cf41a55d28f30f5a6b7737afebb72e7bc0123c88883812d0efdbe9eec2d04def97a173fe68dd6f1afb03240493c2b31465ab7a05ce897d499bc5a5934a8c3001d4b91936fb82cac43091dedcc7c4d4b4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0xd) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r9}, @ldst={0x1, 0x0, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1c000000000a050000000000000000000100000240000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000060000000060a010400000000000000000100000008000b400000000038000480240001800b0001007470726f787900001400028008000140000000000800034000000016100001800b000100736f636b657400000900010073797a3000000000140000001100010000000000000000000000000a", @ANYRES64=r0, @ANYRESDEC=r1, @ANYBLOB="e032f65586e8f569d55de1971b195e3d34c650138b1a0e4f4f113c8f3dbafb619dac37770c1d4074e4de163cf8398ae001f512a0f26b2d0c3b318444d6d449d9711f1ce5c298e2a119d659fe28ac554002aa2dfb02ed6d0bd8224b0f42745fade65853dc87093c114f89fb3f3bc60608b029c50bc8783e41fe1183743d87ba2b490c6f7001b6f590abd6c0378040eade14dd2d"], 0xd0}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) accept$phonet_pipe(r1, &(0x7f0000000100), &(0x7f00000003c0)=0x10) r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="8580f83288e1aa18ae27d186bffc36ca28b295d747aaaaaaaa1c09000000000000000000000290780ae40102e0000001118105000030e10bb0f0"], 0x0) connect$netrom(r10, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendto$netrom(r10, 0x0, 0x700, 0x0, &(0x7f0000000000)={{0x6, @rose}, [@bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null]}, 0x48) 52.431460058s ago: executing program 1 (id=1043): socket$l2tp6(0xa, 0x2, 0x73) syz_emit_ethernet(0x5a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004e00004c0000000000069078ac000000441405030000000000000000fffffffe00000000860600"/74, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_pauseparam={0x12}}) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000000)='g', 0x48, 0x0, &(0x7f00000000c0)={0x11, 0xd, r4, 0x1, 0x0, 0x6, @remote}, 0x14) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000001000000000000000000000000000002000000000"], 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000002010000008001000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, r5, 0x3, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000001840)=ANY=[@ANYRES8=r1], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r7}, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000b00)=ANY=[@ANYBLOB="18080009000000ecd7cc458f00000000ad0018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b706000014000000b7030000000000008500000005000000bc690000000000003509010000000000950000000400000087060000000000007b9af8ff00000000b5090200000000007baaf0ff00000000bfa600000000000007080000f8ffffffbf6400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056040000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet(0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000e000000000000000691", @ANYRES32=r1, @ANYBLOB="000000000000000000000000000000000f0000005aa78103ed29c8d17f4bf80a35794ad67b5b27cc399765a1bdf0ac55b7fcc4226112ee9a5a9604f47a2033cdaf84310fd8194a79273c3a5ef7de4c7b91c699000aea2f2fafe7b6534c1ff8b33d8c68d0761b66e2b659b269493566bd63d34aeba1f1daa003d9201de84e6aee5d3132f488a60359dea9558d9285cf41a55d28f30f5a6b7737afebb72e7bc0123c88883812d0efdbe9eec2d04def97a173fe68dd6f1afb03240493c2b31465ab7a05ce897d499bc5a5934a8c3001d4b91936fb82cac43091dedcc7c4d4b4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0xd) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r9}, @ldst={0x1, 0x0, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1c000000000a050000000000000000000100000240000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000060000000060a010400000000000000000100000008000b400000000038000480240001800b0001007470726f787900001400028008000140000000000800034000000016100001800b000100736f636b657400000900010073797a3000000000140000001100010000000000000000000000000a", @ANYRES64=r0, @ANYRESDEC=r1, @ANYBLOB="e032f65586e8f569d55de1971b195e3d34c650138b1a0e4f4f113c8f3dbafb619dac37770c1d4074e4de163cf8398ae001f512a0f26b2d0c3b318444d6d449d9711f1ce5c298e2a119d659fe28ac554002aa2dfb02ed6d0bd8224b0f42745fade65853dc87093c114f89fb3f3bc60608b029c50bc8783e41fe1183743d87ba2b490c6f7001b6f590abd6c0378040eade14dd2d"], 0xd0}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) accept$phonet_pipe(r1, &(0x7f0000000100), &(0x7f00000003c0)=0x10) r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="8580f83288e1aa18ae27d186bffc36ca28b295d747aaaaaaaa1c09000000000000000000000290780ae40102e0000001118105000030e10bb0f0"], 0x0) connect$netrom(r10, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendto$netrom(r10, 0x0, 0x700, 0x0, &(0x7f0000000000)={{0x6, @rose}, [@bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null]}, 0x48) 41.598951183s ago: executing program 1 (id=1043): socket$l2tp6(0xa, 0x2, 0x73) syz_emit_ethernet(0x5a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004e00004c0000000000069078ac000000441405030000000000000000fffffffe00000000860600"/74, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_pauseparam={0x12}}) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000000)='g', 0x48, 0x0, &(0x7f00000000c0)={0x11, 0xd, r4, 0x1, 0x0, 0x6, @remote}, 0x14) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000001000000000000000000000000000002000000000"], 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000002010000008001000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, r5, 0x3, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000001840)=ANY=[@ANYRES8=r1], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r7}, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000b00)=ANY=[@ANYBLOB="18080009000000ecd7cc458f00000000ad0018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b706000014000000b7030000000000008500000005000000bc690000000000003509010000000000950000000400000087060000000000007b9af8ff00000000b5090200000000007baaf0ff00000000bfa600000000000007080000f8ffffffbf6400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056040000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet(0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000e000000000000000691", @ANYRES32=r1, @ANYBLOB="000000000000000000000000000000000f0000005aa78103ed29c8d17f4bf80a35794ad67b5b27cc399765a1bdf0ac55b7fcc4226112ee9a5a9604f47a2033cdaf84310fd8194a79273c3a5ef7de4c7b91c699000aea2f2fafe7b6534c1ff8b33d8c68d0761b66e2b659b269493566bd63d34aeba1f1daa003d9201de84e6aee5d3132f488a60359dea9558d9285cf41a55d28f30f5a6b7737afebb72e7bc0123c88883812d0efdbe9eec2d04def97a173fe68dd6f1afb03240493c2b31465ab7a05ce897d499bc5a5934a8c3001d4b91936fb82cac43091dedcc7c4d4b4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0xd) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r9}, @ldst={0x1, 0x0, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1c000000000a050000000000000000000100000240000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000060000000060a010400000000000000000100000008000b400000000038000480240001800b0001007470726f787900001400028008000140000000000800034000000016100001800b000100736f636b657400000900010073797a3000000000140000001100010000000000000000000000000a", @ANYRES64=r0, @ANYRESDEC=r1, @ANYBLOB="e032f65586e8f569d55de1971b195e3d34c650138b1a0e4f4f113c8f3dbafb619dac37770c1d4074e4de163cf8398ae001f512a0f26b2d0c3b318444d6d449d9711f1ce5c298e2a119d659fe28ac554002aa2dfb02ed6d0bd8224b0f42745fade65853dc87093c114f89fb3f3bc60608b029c50bc8783e41fe1183743d87ba2b490c6f7001b6f590abd6c0378040eade14dd2d"], 0xd0}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) accept$phonet_pipe(r1, &(0x7f0000000100), &(0x7f00000003c0)=0x10) r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="8580f83288e1aa18ae27d186bffc36ca28b295d747aaaaaaaa1c09000000000000000000000290780ae40102e0000001118105000030e10bb0f0"], 0x0) connect$netrom(r10, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendto$netrom(r10, 0x0, 0x700, 0x0, &(0x7f0000000000)={{0x6, @rose}, [@bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null]}, 0x48) 31.939615633s ago: executing program 1 (id=1043): socket$l2tp6(0xa, 0x2, 0x73) syz_emit_ethernet(0x5a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004e00004c0000000000069078ac000000441405030000000000000000fffffffe00000000860600"/74, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_pauseparam={0x12}}) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000000)='g', 0x48, 0x0, &(0x7f00000000c0)={0x11, 0xd, r4, 0x1, 0x0, 0x6, @remote}, 0x14) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000001000000000000000000000000000002000000000"], 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000002010000008001000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, r5, 0x3, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000001840)=ANY=[@ANYRES8=r1], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r7}, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000b00)=ANY=[@ANYBLOB="18080009000000ecd7cc458f00000000ad0018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b706000014000000b7030000000000008500000005000000bc690000000000003509010000000000950000000400000087060000000000007b9af8ff00000000b5090200000000007baaf0ff00000000bfa600000000000007080000f8ffffffbf6400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056040000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet(0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000e000000000000000691", @ANYRES32=r1, @ANYBLOB="000000000000000000000000000000000f0000005aa78103ed29c8d17f4bf80a35794ad67b5b27cc399765a1bdf0ac55b7fcc4226112ee9a5a9604f47a2033cdaf84310fd8194a79273c3a5ef7de4c7b91c699000aea2f2fafe7b6534c1ff8b33d8c68d0761b66e2b659b269493566bd63d34aeba1f1daa003d9201de84e6aee5d3132f488a60359dea9558d9285cf41a55d28f30f5a6b7737afebb72e7bc0123c88883812d0efdbe9eec2d04def97a173fe68dd6f1afb03240493c2b31465ab7a05ce897d499bc5a5934a8c3001d4b91936fb82cac43091dedcc7c4d4b4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0xd) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r9}, @ldst={0x1, 0x0, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1c000000000a050000000000000000000100000240000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000060000000060a010400000000000000000100000008000b400000000038000480240001800b0001007470726f787900001400028008000140000000000800034000000016100001800b000100736f636b657400000900010073797a3000000000140000001100010000000000000000000000000a", @ANYRES64=r0, @ANYRESDEC=r1, @ANYBLOB="e032f65586e8f569d55de1971b195e3d34c650138b1a0e4f4f113c8f3dbafb619dac37770c1d4074e4de163cf8398ae001f512a0f26b2d0c3b318444d6d449d9711f1ce5c298e2a119d659fe28ac554002aa2dfb02ed6d0bd8224b0f42745fade65853dc87093c114f89fb3f3bc60608b029c50bc8783e41fe1183743d87ba2b490c6f7001b6f590abd6c0378040eade14dd2d"], 0xd0}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) accept$phonet_pipe(r1, &(0x7f0000000100), &(0x7f00000003c0)=0x10) r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="8580f83288e1aa18ae27d186bffc36ca28b295d747aaaaaaaa1c09000000000000000000000290780ae40102e0000001118105000030e10bb0f0"], 0x0) connect$netrom(r10, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendto$netrom(r10, 0x0, 0x700, 0x0, &(0x7f0000000000)={{0x6, @rose}, [@bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null]}, 0x48) 20.876607656s ago: executing program 1 (id=1043): socket$l2tp6(0xa, 0x2, 0x73) syz_emit_ethernet(0x5a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004e00004c0000000000069078ac000000441405030000000000000000fffffffe00000000860600"/74, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_pauseparam={0x12}}) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000000)='g', 0x48, 0x0, &(0x7f00000000c0)={0x11, 0xd, r4, 0x1, 0x0, 0x6, @remote}, 0x14) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000001000000000000000000000000000002000000000"], 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000002010000008001000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, r5, 0x3, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000001840)=ANY=[@ANYRES8=r1], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r7}, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000b00)=ANY=[@ANYBLOB="18080009000000ecd7cc458f00000000ad0018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b706000014000000b7030000000000008500000005000000bc690000000000003509010000000000950000000400000087060000000000007b9af8ff00000000b5090200000000007baaf0ff00000000bfa600000000000007080000f8ffffffbf6400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056040000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet(0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000e000000000000000691", @ANYRES32=r1, @ANYBLOB="000000000000000000000000000000000f0000005aa78103ed29c8d17f4bf80a35794ad67b5b27cc399765a1bdf0ac55b7fcc4226112ee9a5a9604f47a2033cdaf84310fd8194a79273c3a5ef7de4c7b91c699000aea2f2fafe7b6534c1ff8b33d8c68d0761b66e2b659b269493566bd63d34aeba1f1daa003d9201de84e6aee5d3132f488a60359dea9558d9285cf41a55d28f30f5a6b7737afebb72e7bc0123c88883812d0efdbe9eec2d04def97a173fe68dd6f1afb03240493c2b31465ab7a05ce897d499bc5a5934a8c3001d4b91936fb82cac43091dedcc7c4d4b4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0xd) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r9}, @ldst={0x1, 0x0, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1c000000000a050000000000000000000100000240000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000060000000060a010400000000000000000100000008000b400000000038000480240001800b0001007470726f787900001400028008000140000000000800034000000016100001800b000100736f636b657400000900010073797a3000000000140000001100010000000000000000000000000a", @ANYRES64=r0, @ANYRESDEC=r1, @ANYBLOB="e032f65586e8f569d55de1971b195e3d34c650138b1a0e4f4f113c8f3dbafb619dac37770c1d4074e4de163cf8398ae001f512a0f26b2d0c3b318444d6d449d9711f1ce5c298e2a119d659fe28ac554002aa2dfb02ed6d0bd8224b0f42745fade65853dc87093c114f89fb3f3bc60608b029c50bc8783e41fe1183743d87ba2b490c6f7001b6f590abd6c0378040eade14dd2d"], 0xd0}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) accept$phonet_pipe(r1, &(0x7f0000000100), &(0x7f00000003c0)=0x10) r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="8580f83288e1aa18ae27d186bffc36ca28b295d747aaaaaaaa1c09000000000000000000000290780ae40102e0000001118105000030e10bb0f0"], 0x0) connect$netrom(r10, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendto$netrom(r10, 0x0, 0x700, 0x0, &(0x7f0000000000)={{0x6, @rose}, [@bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null]}, 0x48) 20.101438734s ago: executing program 2 (id=1376): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0xad3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000004000000000000000000850000008f00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r1, &(0x7f0000000400)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 19.949425882s ago: executing program 2 (id=1379): socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) socket(0x2, 0x3, 0x100000001) (async) r1 = socket(0x2, 0x3, 0x100000001) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000240)="7cc95cf9b9c0263e9655b1e9fe0b00000000000000000000000035dabbdf907dfd876d2d5c7b0cfa561eb51ba1c1e51293785e7e917908a49d8c9cf02aad5966ffb0839b1948920d71d2918fc1b970890297c3eb6e99e1adc710a021f2a4808629d300dec47e1bcdc376e8b0605c4347c8d7518f184d9a9f305671f1380cd6da8305ff27e367792f1029a081818f3c", 0x8f) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000240)="7cc95cf9b9c0263e9655b1e9fe0b00000000000000000000000035dabbdf907dfd876d2d5c7b0cfa561eb51ba1c1e51293785e7e917908a49d8c9cf02aad5966ffb0839b1948920d71d2918fc1b970890297c3eb6e99e1adc710a021f2a4808629d300dec47e1bcdc376e8b0605c4347c8d7518f184d9a9f305671f1380cd6da8305ff27e367792f1029a081818f3c", 0x8f) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r3, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) (async) r4 = openat$cgroup_devices(r3, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x21, 0x0, [{}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x5}]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) write$cgroup_devices(r4, &(0x7f00000001c0)=ANY=[@ANYRES8=r3, @ANYRESDEC], 0xb) (async) write$cgroup_devices(r4, &(0x7f00000001c0)=ANY=[@ANYRES8=r3, @ANYRESDEC], 0xb) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='dctcp-reno\x00', 0xb) setsockopt$inet6_int(r2, 0x29, 0x43, &(0x7f0000000100)=0x100002, 0x4) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) (async) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x101800) (async) accept4(r0, 0x0, 0x0, 0x101800) accept4$alg(r0, 0x0, 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = epoll_create1(0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r8, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r8, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) bind$tipc(r8, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) (async) bind$tipc(r8, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r7, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) (async) bind$tipc(r7, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r7, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40088a01, &(0x7f0000000000)=0x100) 19.673378947s ago: executing program 2 (id=1383): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) socket$inet6(0xa, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x12, r2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r3, r4, 0x2, 0x2, 0x0, @void, @value}, 0x10) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r5, 0x2, 0x0, 0x3ff, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000028000480240001800b0001007470726f78790000140002800800034000e500110800014000000002"], 0x7c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x18, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}]}, 0x18}, 0x1, 0x0, 0x0, 0x9}, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r1, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x6, 0xb, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x0, 0x3, @void, @value, @void, @value}, 0x50) syz_emit_ethernet(0x76, &(0x7f0000000100)={@multicast, @random="6076b5cad4f6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "75e700", 0x40, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "a3579e", 0x0, 0x2b, 0x0, @private2, @remote, [@routing={0x6c, 0x0, 0x1, 0x6}, @routing={0x0, 0x0, 0x2, 0x91}]}}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1e000000090000000b0000000300000001220000", @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000003000000020000000300"/28], 0x50) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$fou(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r10, &(0x7f0000000b80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="72e2baecca45793620098ca00ef525d9ac", @ANYRES16=r11, @ANYBLOB="01000000000000000000010000000500040001000000"], 0x1c}}, 0x0) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x18, r11, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x10) 19.60802222s ago: executing program 2 (id=1384): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x8, 0x0, 0x0, 0x100, {{0x5, 0x4, 0x0, 0x3, 0x14, 0x0, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000080000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 19.413647223s ago: executing program 2 (id=1386): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x40, 0x8}, {0x28, 0x0, 0x8, 0xeffff034}, {0x6}]}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000001780), 0xffffffffffffffff) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x1c, "f42a97b96d025891dd3f75fdda624457ad3d5c36389c308570204262"}}) 12.061203973s ago: executing program 3 (id=1425): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000340)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="4d7e00000000000000002a00000008002f000000000005003600000000000c0005000000000200000000050037001000000008000200", @ANYRES32=r4, @ANYBLOB="06000600fe000000060004"], 0x50}, 0x4, 0x700000000000000, 0x0, 0x20040000}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000004000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) bpf$ENABLE_STATS(0x20, &(0x7f0000000380), 0x4) sendmmsg(r0, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x6c, 0x3, 0x8, 0x801, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x801a}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2e}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x30}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6003}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8808}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000811) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffff7a89, 0x0, 0x10000}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x10, 0x4, 0x808, 0x8, 0x0, r5, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xd, &(0x7f00000007c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r7}, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x1, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) 11.969041628s ago: executing program 3 (id=1427): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async, rerun: 32) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (rerun: 32) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x480, 0x4) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async, rerun: 32) syz_emit_ethernet(0x10c6, &(0x7f0000002a00)=ANY=[], 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[], 0x1c}}, 0x0) (async) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340)) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 32) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f0000000000)={0x6c, @local, 0x4e24, 0x4, 'rr\x00', 0x2, 0x8, 0x10}, 0x2c) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmmsg$inet(r0, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000200)="27fe6da9b9cebbb18bafd9ccd79f0efca7a903c7a6fb41ecbd409f1a3db49cc612de34d4e9a8af95005aee32dbf7b63362533b67d254", 0x36}, {0x0}], 0x2}}], 0x1, 0x4008095) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000042a82f723eb51959c30ffe549294400b9c92a60876cdae50fe4c13409d703c44c9ebe7fcc8c1ba2d69e1b5495531c3102c97a7391a63ece1777", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x10, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a3312779a", 0x0, 0x0, 0xe8030000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 11.765447711s ago: executing program 3 (id=1429): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x82, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x80, r3, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x30}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0x10, 0xcd, [0x7, 0xffff, 0x1c6, 0x8a9, 0x6, 0x5]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0xc50, 0x6, 0x2, 0xda3, 0x1]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x79}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x80}, 0x1, 0x0, 0x0, 0x20008040}, 0x90) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x27}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40051}, 0x4094) 11.572732709s ago: executing program 3 (id=1433): socketpair(0x10, 0x4, 0x464, &(0x7f0000000340)={0xffffffffffffffff}) sendto$inet6(r0, &(0x7f0000000380)="cabe", 0x2, 0x20000810, &(0x7f00000003c0)={0xa, 0x4e21, 0x2, @mcast2, 0x2}, 0x1c) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x70bd29, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x0, 0x4}, [@IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x38}}, 0x40) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r5) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x48, r6, 0x852dd6c070cd7e4d, 0x0, 0x4, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x200000000000000}}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}]}, 0x48}, 0x4, 0x700000000000000}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xc, [@volatile={0x808}, @volatile={0xc, 0x0, 0x0, 0x9, 0x5}]}, {0x0, [0x30, 0x5f, 0x61, 0x5f, 0x61, 0x0, 0x0, 0x30, 0x30, 0x5f]}}, &(0x7f0000000200)=""/84, 0x3c, 0x78, 0x4, 0x0, 0x0, @void, @value}, 0x28) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = gettid() sendmmsg$unix(r9, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c, 0x1, 0x2, {r10}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}}], 0x1, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)={0x14, r12, 0x1, 0x0, 0x0, {0x10}}, 0x14}}, 0x0) (async, rerun: 64) syz_open_procfs$namespace(r10, &(0x7f0000000140)='ns/mnt\x00') (async, rerun: 64) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_type(r13, &(0x7f0000000040), 0x9) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r13, 0x0) (async) openat$cgroup_procs(r13, &(0x7f0000000280)='tasks\x00', 0x2, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r3, 0x7d243a6ea807936d, 0x0, 0xfffffffe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x0) (async) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="05fcffffff1484badf254400000008000300", @ANYRES32=r15, @ANYBLOB="0a001800030303030303000010007000040003000500020000000000"], 0x38}}, 0x4000080) 11.457283844s ago: executing program 3 (id=1434): r0 = socket$kcm(0x10, 0x2, 0x0) unshare(0x400) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r1, 0x0, 0x11, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffffffffd21, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x24084040) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x1c, 0x52, 0x1, 0x0, 0x4, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @binary='\vo[9'}]}, 0x1c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xa, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4}, &(0x7f0000000180), &(0x7f0000000100)=r3}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r4, &(0x7f0000000300), 0x0}, 0x20) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000040), 0x8) 11.350425692s ago: executing program 3 (id=1435): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000009c0)={'vcan0\x00', 0x0}) read(r0, &(0x7f00000002c0)=""/17, 0x11) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) (async, rerun: 64) r3 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r4}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) (async, rerun: 64) r5 = socket(0x2a, 0x2, 0x0) (rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000017c0)=@newtfilter={0x120, 0x2c, 0xd27, 0x4, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xf0, 0x2, [@TCA_CGROUP_EMATCHES={0x4}, @TCA_CGROUP_ACT={0x4}, @TCA_CGROUP_ACT={0xe4, 0x1, [@m_mirred={0x50, 0x1a, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x6, 0x3, 0x6}, 0x1, r6}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_gact={0x34, 0x19, 0x0, 0x0, {{0x9}, {0x4}, {0x8, 0x6, "bf63bcce"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x120}}, 0x0) (async, rerun: 64) r7 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000500"/28], 0x48) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xd, &(0x7f00000003c0)=@framed={{0x18, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bind$inet6(r8, &(0x7f00000001c0)={0xa, 0x4e20, 0xfffffffd, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2}, 0x1c) (async, rerun: 32) r11 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) 9.027365831s ago: executing program 2 (id=1386): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x40, 0x8}, {0x28, 0x0, 0x8, 0xeffff034}, {0x6}]}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000001780), 0xffffffffffffffff) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x1c, "f42a97b96d025891dd3f75fdda624457ad3d5c36389c308570204262"}}) 8.090630356s ago: executing program 1 (id=1043): socket$l2tp6(0xa, 0x2, 0x73) syz_emit_ethernet(0x5a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004e00004c0000000000069078ac000000441405030000000000000000fffffffe00000000860600"/74, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_pauseparam={0x12}}) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000000)='g', 0x48, 0x0, &(0x7f00000000c0)={0x11, 0xd, r4, 0x1, 0x0, 0x6, @remote}, 0x14) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000001000000000000000000000000000002000000000"], 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000002010000008001000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, r5, 0x3, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000001840)=ANY=[@ANYRES8=r1], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r7}, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000b00)=ANY=[@ANYBLOB="18080009000000ecd7cc458f00000000ad0018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b706000014000000b7030000000000008500000005000000bc690000000000003509010000000000950000000400000087060000000000007b9af8ff00000000b5090200000000007baaf0ff00000000bfa600000000000007080000f8ffffffbf6400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056040000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet(0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000e000000000000000691", @ANYRES32=r1, @ANYBLOB="000000000000000000000000000000000f0000005aa78103ed29c8d17f4bf80a35794ad67b5b27cc399765a1bdf0ac55b7fcc4226112ee9a5a9604f47a2033cdaf84310fd8194a79273c3a5ef7de4c7b91c699000aea2f2fafe7b6534c1ff8b33d8c68d0761b66e2b659b269493566bd63d34aeba1f1daa003d9201de84e6aee5d3132f488a60359dea9558d9285cf41a55d28f30f5a6b7737afebb72e7bc0123c88883812d0efdbe9eec2d04def97a173fe68dd6f1afb03240493c2b31465ab7a05ce897d499bc5a5934a8c3001d4b91936fb82cac43091dedcc7c4d4b4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0xd) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r9}, @ldst={0x1, 0x0, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1c000000000a050000000000000000000100000240000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000060000000060a010400000000000000000100000008000b400000000038000480240001800b0001007470726f787900001400028008000140000000000800034000000016100001800b000100736f636b657400000900010073797a3000000000140000001100010000000000000000000000000a", @ANYRES64=r0, @ANYRESDEC=r1, @ANYBLOB="e032f65586e8f569d55de1971b195e3d34c650138b1a0e4f4f113c8f3dbafb619dac37770c1d4074e4de163cf8398ae001f512a0f26b2d0c3b318444d6d449d9711f1ce5c298e2a119d659fe28ac554002aa2dfb02ed6d0bd8224b0f42745fade65853dc87093c114f89fb3f3bc60608b029c50bc8783e41fe1183743d87ba2b490c6f7001b6f590abd6c0378040eade14dd2d"], 0xd0}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) accept$phonet_pipe(r1, &(0x7f0000000100), &(0x7f00000003c0)=0x10) r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="8580f83288e1aa18ae27d186bffc36ca28b295d747aaaaaaaa1c09000000000000000000000290780ae40102e0000001118105000030e10bb0f0"], 0x0) connect$netrom(r10, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendto$netrom(r10, 0x0, 0x700, 0x0, &(0x7f0000000000)={{0x6, @rose}, [@bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null]}, 0x48) 3.162708669s ago: executing program 4 (id=1484): r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000000040)=""/105, 0x69}], 0x2, 0xffffe9c7, 0x5) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x0, r0}, 0x18) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000180)={'gretap0\x00', 0x0, 0x10, 0x700, 0x2, 0x0, {{0x34, 0x4, 0x2, 0x3, 0xd0, 0x65, 0x0, 0xb, 0x4, 0x0, @multicast1, @remote, {[@end, @timestamp={0x44, 0x14, 0x8e, 0x0, 0x9, [0x9, 0xffffee46, 0x3, 0x9]}, @cipso={0x86, 0x62, 0x0, [{0x6, 0x4, "69f9"}, {0x7, 0xd, "b148adb35af7013188e057"}, {0x5, 0x7, "896355d588"}, {0x1, 0x11, "df75fc46ebc95036078269d027bf77"}, {0x7, 0x6, "9e61fee3"}, {0x0, 0xb, "9be268e703eeb1accc"}, {0x2, 0x3, 'A'}, {0x6, 0x9, "45873803b72f02"}, {0x7, 0x12, "334cd3cdfacd0ed10fa89364b1b89b11"}, {0x1, 0x4, "e47a"}]}, @lsrr={0x83, 0xf, 0xb2, [@dev={0xac, 0x14, 0x14, 0x21}, @remote, @broadcast]}, @rr={0x7, 0xb, 0xc4, [@rand_addr=0x64010101, @multicast2]}, @timestamp={0x44, 0x28, 0xae, 0x0, 0x6, [0x80000001, 0x7, 0x0, 0x8, 0x8, 0x8, 0x7fffffff, 0xd9, 0x2]}]}}}}}) (rerun: 64) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x3ff, '\x00', r2, 0xffffffffffffffff, 0x4, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000340)={0x100, 0x10001, 0x9, 0x0, 0x2, [{0xa5f2a2b, 0x3, 0x1, '\x00', 0x1000}, {0x3, 0x91, 0x6}]}) (async, rerun: 64) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x802, 0x0) (async, rerun: 64) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xf8, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x8841}, 0x20000010) syz_80211_inject_frame(&(0x7f0000000600)=@broadcast, &(0x7f0000000640)=@ctrl_frame=@cf_end={{}, {0xaf0}, @device_b, @from_mac}, 0x10) (async) r4 = socket$can_raw(0x1d, 0x3, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000680)={'wlan1\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_SET_PMKSA(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x101}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0xe}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x7ff}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8091}, 0x8000) (async) unshare(0x10000000) (async, rerun: 32) unshare(0x4000000) (async, rerun: 32) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000780), 0x4) (rerun: 64) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xac5e, '\x00', 0x0, r8, 0x3, 0x1, 0x4, 0x0, @void, @value, @void, @value}, 0x50) socketpair$tipc(0x1e, 0x2, 0x0, 0xffffffffffffffff) (async, rerun: 64) r9 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000840)={{0x3, @rose}, [@null, @bcast, @rose, @remote, @bcast, @rose, @rose]}, &(0x7f00000008c0)=0x48, 0x80000) (rerun: 64) ioctl$sock_netrom_SIOCADDRT(r9, 0x890b, &(0x7f0000000900)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x3, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) (async) unshare(0x0) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000009c0)={{{@in6=@mcast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000ac0)=0xe8) sendmsg$nl_netfilter(r7, &(0x7f0000000c40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b00)={0xe0, 0x8, 0x5, 0x201, 0x70bd2d, 0x25dfdbfe, {0xa, 0x0, 0x3}, [@typed={0x5, 0xe9, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0xcf, 0x0, 0x0, @ipv6=@mcast2}, @generic, @generic, @typed={0x8, 0x102, 0x0, 0x0, @u32=0x4000}, @typed={0x8, 0x13e, 0x0, 0x0, @uid=r10}, @nested={0x9e, 0x9d, 0x0, 0x1, [@generic="3d73dda3060cf69b2588775c2ec238ef6c50b77f756fbca79656c35f734c915647642a08713cb47ba60e123951d4ff00e06a5dbdd7ef0e17944cef287bfddf7b88e172684cb23a347920a8b9f9cd77bc20e86d5d2c0c56fda1a8f3a0f0870e91d15cc2a4c34f4780f30139b40f0436aaf42259f846fe1efba848a5851c86f84c263bc044a34dd4e24b74d45b233538ff3985d13b936c4b025595"]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x20040001) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000c80)={'batadv_slave_0\x00'}) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000cc0)={0x7}, 0x8) (async) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001080)={0x6, 0x23, &(0x7f0000000d40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x3}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x8}, @generic={0xf9, 0x0, 0x1, 0x9, 0xfffffff0}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000e80)='syzkaller\x00', 0x5307, 0xe1, &(0x7f0000000ec0)=""/225, 0x41100, 0x1, '\x00', r2, 0x25, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000fc0)={0x5, 0xb, 0x3, 0x1}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001000)=[r3], &(0x7f0000001040)=[{0x2, 0x2, 0x3}, {0x2, 0x5, 0x4, 0x4}], 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001180)={{r1}, &(0x7f0000000d00), &(0x7f0000001140)=r11}, 0x20) (async) r12 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r12, 0x29, 0xd4, &(0x7f00000011c0)=0xc, 0x4) 2.538676059s ago: executing program 4 (id=1488): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a2dbba", 0x8, 0x11, 0x0, @remote, @mcast2, {[], {0x0, 0x0, 0x2}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x20) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYRES64=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = accept4(r2, 0x0, 0x0, 0x0) unshare(0x8040480) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$unix(r4, 0x0, 0x0) syz_emit_ethernet(0x119, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0xe3, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x17, "9595f429ae08a565c9a41d413a70a44d2e6f790a3872d50bb14d25344dc5b3a281f175f5ee04aab21301b94d966c72c15a143c69205625466855101cf44d89d9f6ee47d77c0d4e53e34b67c542fc6f6f6c60139c43b78286f5bb8f4f11d164af24e2633a45bf4ed944b0ef6a7b7167f73cf54e78686ac09402659c29eb0ce380654c1bb0f61d255b1556b7a311096b7aab867396997ffab76abca01185b08d1e29ee14d8fe61245487104b1c5205c6adc794ba413b92d2d208"}]}}}}}}, 0x0) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000940)="d744784ca67c0398246d848e6df22054de2bd8ca3da64dfdea7d8eb74ffe057d7469066c6ca034a2677ce0c1c25e2b2a825d677e0fbac312a7da165cd5db94fa38cdf3a3f3f93b912a7515e0b1e441a3be644a296bcc765e7adc9ddb4d14376a69cbfcd2ddd156ba432349e96debeda26ee8914c28f4", 0x7ffff000}, {&(0x7f00000009c0)="d86e5c29ab2c0dce2b79f95d543a0d6b45dec9dab7afbc0d6d678feb7a652e67638c3ee007937917fad76308e99818f8f112b73a3c3e3c5ed80c49fab6e0593e95008b4a47aebdde3e28cea1cec26385f3d03b872970dfb69a63a6384a9be5b9419ff8ea6d9c2a730307894adb589d11a1ec59255d10acb1fbef", 0x7a}], 0x2}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r6, 0x8990, &(0x7f0000000080)={'sit0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x4}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2000000072009fb300000000ffdbdf", @ANYRES32=0x0, @ANYBLOB="050001"], 0x20}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) socket$inet6(0xa, 0x6, 0x4) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x2c00, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x25000000) 2.447475441s ago: executing program 0 (id=1489): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x3, {0x2}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}, 0x1, 0xba01, 0x0, 0x8830}, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0xa0, r4, 0x1, 0x71bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x2c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x4c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x4}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x10}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x4, 0x3, 0x9}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4c804}, 0x4000000) 2.244698146s ago: executing program 0 (id=1490): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xfffffffe}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x191f0dc5a5ac8daa}}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0xffffffa6, 0x1, {0x1, 0x0, 0x0, 0x6, 0x0, {0x0, 0x0, 0x1}, {0x10, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xfffffffd}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) 2.013491933s ago: executing program 0 (id=1491): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipmr_delroute={0x28, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, 0x5}, [@RTA_MULTIPATH={0xc, 0x9, {0xe, 0x24, 0x83}}]}, 0x28}}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f917240685", 0x14}], 0x1}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000040)={0x3, 'veth0\x00', {0x4}, 0xa3}) 1.655407086s ago: executing program 0 (id=1492): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52", 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000001140)={r2, 0x8000000000000000, 0x8, 0x6}) r3 = socket(0x40000000015, 0x5, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x80000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r6}, &(0x7f0000000a00), &(0x7f0000000a40)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r6}, 0x0, &(0x7f00000008c0)=r5}, 0x20) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000400)}], 0x1, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2060, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000003a000b000000000000000000020000"], 0x2c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x44040}, 0x20000000) socket$inet_udplite(0x2, 0x2, 0x88) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_freezer_state(r8, &(0x7f00000000c0), 0x2, 0x0) r10 = openat$cgroup_procs(r8, &(0x7f0000000540)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000000180), 0x12) write$cgroup_freezer_state(r9, &(0x7f0000000200)='THAWED\x00', 0x7) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbff, 0x40}, 0xc) sendto$netrom(0xffffffffffffffff, &(0x7f00000000c0)="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", 0x1000, 0x8000044, &(0x7f00000010c0)={{0x3, @null, 0x2}, [@default, @default, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) 1.553848643s ago: executing program 4 (id=1493): r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c, 0xc0800) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000080)=""/74, &(0x7f0000000100)=0x4a) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000140), 0x4) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r1) setsockopt$packet_buf(r1, 0x107, 0x1a, &(0x7f0000000200)="ad240bd3e8d90bb4a3cbdce6cf2e451eb0555721146143db77ed42f8d5965f", 0x1f) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000240)={r0}) bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58) recvmmsg(r1, &(0x7f0000000c00)=[{{&(0x7f0000000300)=@nfc, 0x80, &(0x7f0000000580)=[{&(0x7f0000000380)=""/34, 0x22}, {&(0x7f00000003c0)=""/242, 0xf2}, {&(0x7f00000004c0)=""/166, 0xa6}], 0x3, &(0x7f00000005c0)=""/197, 0xc5}, 0xd}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000006c0)=""/219, 0xdb}], 0x1, &(0x7f0000000800)=""/51, 0x33}, 0x3}, {{&(0x7f0000000840)=@nfc, 0x80, &(0x7f00000009c0)=[{&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/71, 0x47}], 0x2, &(0x7f0000000a00)=""/146, 0x92}, 0x40}, {{&(0x7f0000000ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}}}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000b40)=""/36, 0x24}], 0x1, &(0x7f0000000bc0)=""/57, 0x39}, 0x5}], 0x4, 0x40000001, &(0x7f0000000d00)={0x0, 0x3938700}) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) recvmsg(r4, &(0x7f00000010c0)={&(0x7f0000000d40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}}}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000dc0)=""/106, 0x6a}, {&(0x7f0000000e40)=""/205, 0xcd}, {&(0x7f0000000f40)=""/47, 0x2f}], 0x3, &(0x7f0000000fc0)=""/211, 0xd3}, 0x40002050) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000023c0)={r1, 0x20, &(0x7f0000002380)={&(0x7f0000002280)=""/173, 0xad, 0x0, &(0x7f0000002340)=""/44, 0x2c}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000002480)={0x17, 0x17, &(0x7f0000001100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfff}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_val={0x18, 0x6, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xfffffff8}, @exit, @generic={0xd, 0xd, 0x4, 0x9, 0x1}, @generic={0x6, 0x6, 0xc, 0x6, 0x4}, @jmp={0x5, 0x0, 0xb, 0x9, 0x2, 0x50, 0x362c884f8eff749f}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000011c0)='GPL\x00', 0x2, 0x1000, &(0x7f0000001200)=""/4096, 0x41100, 0x18, '\x00', 0x0, @fallback=0x2b, r1, 0x8, &(0x7f0000002200)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000002240)={0x3, 0xc, 0x8, 0xffffffff}, 0x10, r6, 0xffffffffffffffff, 0x0, &(0x7f0000002400)=[r1, r1, r1, r1, r1, r1, r1, r1, r1], &(0x7f0000002440), 0x10, 0x3, @void, @value}, 0x94) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000002540)=@generic={0x2, 0x8, 0xfff}) bpf$LINK_DETACH(0x22, &(0x7f0000002580)=r1, 0x4) socket$rds(0x15, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002600)=0x14) sendfile(r4, r5, &(0x7f0000002640)=0x7, 0xb7e) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000002680)={0x9, 0x100, 0x3, 0x1}, 0x10) r8 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000026c0)={0x0, @in6={{0xa, 0x4e20, 0x800, @local, 0x1}}, 0x6, 0x800, 0x4, 0x0, 0x1}, &(0x7f0000002780)=0x98) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r8, 0x84, 0x73, &(0x7f00000027c0)={r9, 0x8, 0x20, 0x7, 0x371e}, &(0x7f0000002800)=0x18) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002880), r3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000028c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000029c0)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002980)={&(0x7f0000002900)={0x54, r10, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x525}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x225}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x372}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}]}, 0x54}}, 0x0) recvmsg(r4, &(0x7f0000002e80)={&(0x7f0000002a00)=@ax25={{0x3, @rose}, [@rose, @rose, @default, @null, @default, @netrom, @netrom, @bcast]}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002a80)=""/177, 0xb1}, {&(0x7f0000002b40)=""/199, 0xc7}, {&(0x7f0000002c40)=""/245, 0xf5}, {&(0x7f0000002d40)=""/146, 0x92}], 0x4, &(0x7f0000002e40)=""/31, 0x1f}, 0x40000063) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002f00), r3) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000002fc0)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002f80)={&(0x7f0000002f40)={0x3c, r12, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0xc}, @void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44001}, 0x8010) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r7, 0x660c) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f0000003000), &(0x7f0000003040)=0x4) 413.095531ms ago: executing program 4 (id=1494): pipe(&(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)='%pS \x00'}, 0x20) 402.898107ms ago: executing program 4 (id=1495): r0 = socket(0xa, 0x3, 0x87) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000002010300000000000000000002000000240002800c000280050001000000000014000180080001"], 0x38}}, 0x0) (async) sendmmsg$unix(r0, &(0x7f0000001b80)=[{{&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000000c0)}}], 0x1, 0x0) 326.080513ms ago: executing program 0 (id=1496): r0 = socket(0x1, 0x803, 0x0) getpeername$llc(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) close(r1) r3 = socket$tipc(0x1e, 0x5, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r4, &(0x7f00000001c0)={0x2c, 0x20}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x400000000000004) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="a8060000", @ANYRES16=0x0, @ANYBLOB="0008af78b01ffbcbdf258100000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x6a8}, 0x1, 0x0, 0x0, 0x41}, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f00000001c0)=0x100000, 0x4) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000040), 0x4) bind$tipc(r3, 0x0, 0x0) 237.355195ms ago: executing program 4 (id=1497): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x2c}}, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010000000200020000000c0000000000000500"/58], &(0x7f0000000480)=""/135, 0x1a, 0x5, 0x1, 0x0, 0x0, @void, @value}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bind$unix(r8, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r9, 0x89ef, &(0x7f0000000080)=0x6) connect$unix(r8, &(0x7f0000001900)=@file={0x1, './file0\x00'}, 0x6e) r10 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000001000410400"/20, @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00ffffffffff"], 0x6c}}, 0x2404c844) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100030000009500000000000000bf71000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0xf7, &(0x7f0000001e40)=""/4093, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21) syz_emit_ethernet(0x56, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x20, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @private0, [{}, {}, {0xe, 0x1, "24fcaa8fc05a"}]}}}}}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000001c0)={'xfrm0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @remote}, 0x14) socket(0x10, 0x803, 0x0) 0s ago: executing program 0 (id=1498): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000010c0)=@security={'security\x00', 0x64, 0x4, 0x528, 0x100000c, 0xc8, 0x0, 0x198, 0xffffffff, 0xffffffff, 0x490, 0x490, 0x490, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @rand_addr, 0x0, 0x0, 'veth0_vlan\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x0, 0x1d}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x1]}}}}, {{@uncond, 0x0, 0x2d0, 0x2f8, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x7}, {0x0, 0x0, 0x4, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {}, {}, {}, {0x0, 0x20}]}}, @common=@ah={{0x30}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x588) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f00000002c0)=@buf={0x2a, &(0x7f0000000280)="b70c1246a6a790560cd238704f786b18ce67cdc843c75d2aef4923fc530efc22d15664fd33c1b16a3359"}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) kernel console output (not intermixed with test programs): 2] batman_adv: batadv0: Adding interface: ip6gretap1 [ 70.539801][ T6372] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.618192][ T6372] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 70.742577][ T6379] netlink: 36 bytes leftover after parsing attributes in process `syz.2.119'. [ 70.992257][ T47] IPVS: starting estimator thread 0... [ 71.024974][ T6397] netlink: 'syz.1.125': attribute type 10 has an invalid length. [ 71.026329][ T6403] netlink: 40 bytes leftover after parsing attributes in process `syz.2.127'. [ 71.066933][ T6404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.125'. [ 71.103177][ T6400] IPVS: using max 18 ests per chain, 43200 per kthread [ 71.154085][ T6405] netlink: 'syz.0.126': attribute type 4 has an invalid length. [ 71.189558][ T6409] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.197014][ T6410] netlink: 'syz.0.126': attribute type 4 has an invalid length. [ 71.266441][ T6409] netlink: 'syz.3.129': attribute type 5 has an invalid length. [ 71.653875][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.660454][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.771896][ T6427] netlink: 'syz.1.135': attribute type 9 has an invalid length. [ 71.793034][ T6427] __nla_validate_parse: 2 callbacks suppressed [ 71.793053][ T6427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.135'. [ 71.932175][ T6447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.139'. [ 71.938379][ T6448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.139'. [ 71.960026][ T6450] netlink: 48 bytes leftover after parsing attributes in process `syz.0.140'. [ 71.972638][ T6450] netlink: 20 bytes leftover after parsing attributes in process `syz.0.140'. [ 72.098661][ T6454] netlink: 12 bytes leftover after parsing attributes in process `syz.0.142'. [ 72.151948][ T6454] netlink: 12 bytes leftover after parsing attributes in process `syz.0.142'. [ 72.160151][ T6457] ipvlan2: entered promiscuous mode [ 72.171856][ T6457] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 72.181464][ T6457] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 72.547316][ T6480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.151'. [ 72.577160][ T6484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.149'. [ 72.667900][ T6484] Driver unsupported XDP return value 0 on prog (id 52) dev N/A, expect packet loss! [ 72.694456][ T6488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.152'. [ 73.013836][ T6502] syzkaller0: entered promiscuous mode [ 73.019361][ T6502] syzkaller0: entered allmulticast mode [ 73.053985][ T6494] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 73.427720][ T6531] IPVS: set_ctl: invalid protocol: 255 224.0.0.2:20002 [ 75.133323][ T6506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.152029][ T6506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.176810][ T6506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.188305][ T6506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.201394][ T6506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.212132][ T6506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.222363][ T6506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.235488][ T6506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.275452][ T6559] veth0: entered promiscuous mode [ 75.280543][ T6559] veth0: entered allmulticast mode [ 75.366846][ T6559] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check. [ 75.530916][ T6567] IPv6: NLM_F_REPLACE set, but no existing node found! [ 75.542814][ T6572] IPv6: NLM_F_REPLACE set, but no existing node found! [ 75.731490][ T6569] ebtables: ebtables: counters copy to user failed while replacing table [ 76.775313][ T1214] cfg80211: failed to load regulatory.db [ 76.919153][ T6661] netlink: 'syz.1.199': attribute type 29 has an invalid length. [ 76.987876][ T6664] __nla_validate_parse: 5 callbacks suppressed [ 76.987923][ T6664] netlink: 12 bytes leftover after parsing attributes in process `syz.3.200'. [ 77.193836][ T6676] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 77.208819][ T6675] x_tables: duplicate underflow at hook 3 [ 77.252087][ T6676] x_tables: ip_tables: osf match: only valid for protocol 6 [ 77.327159][ T6681] netlink: 'syz.3.204': attribute type 27 has an invalid length. [ 77.840176][ T6719] netlink: 'syz.3.213': attribute type 13 has an invalid length. [ 77.852579][ T6719] macvtap0: entered promiscuous mode [ 77.860832][ T6719] macvtap0: refused to change device tx_queue_len [ 78.086636][ T6739] netlink: 36 bytes leftover after parsing attributes in process `syz.3.218'. [ 78.254469][ T6756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.223'. [ 78.283952][ T6756] netlink: 24 bytes leftover after parsing attributes in process `syz.3.223'. [ 78.469647][ T6769] netlink: 'syz.3.226': attribute type 5 has an invalid length. [ 78.474267][ T6770] netlink: 12 bytes leftover after parsing attributes in process `syz.4.227'. [ 78.494073][ T6765] tipc: Started in network mode [ 78.509645][ T6770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.227'. [ 78.525806][ T6765] tipc: Node identity 1, cluster identity 4711 [ 78.546956][ T6765] tipc: Node number set to 1 [ 78.631034][ T6779] netlink: 16 bytes leftover after parsing attributes in process `syz.2.231'. [ 78.679760][ T6782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.233'. [ 78.689714][ T6783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.233'. [ 78.706139][ T6782] IPv6: sit1: Disabled Multicast RS [ 79.015533][ T6799] xt_cluster: you have exceeded the maximum number of cluster nodes (600 > 32) [ 79.198175][ T6820] netlink: 'syz.2.243': attribute type 1 has an invalid length. [ 79.206096][ T6820] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.243'. [ 79.640039][ T6861] netlink: 'syz.4.253': attribute type 5 has an invalid length. [ 79.870404][ T6870] netlink: 'syz.0.254': attribute type 153 has an invalid length. [ 79.955191][ T6870] lo speed is unknown, defaulting to 1000 [ 80.104403][ T6882] bond0: option miimon: invalid value (18446744072568963076) [ 80.117567][ T6882] bond0: option miimon: allowed values 0 - 2147483647 [ 80.302755][ T6886] syzkaller0: entered allmulticast mode [ 81.023932][ T6913] veth1_to_bridge: entered allmulticast mode [ 81.147521][ T197] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.171916][ T6919] unknown channel width for channel at 909000KHz? [ 81.195878][ T6919] unknown channel width for channel at 909000KHz? [ 81.202818][ T6919] unknown channel width for channel at 909000KHz? [ 81.720006][ T6963] netlink: 'syz.0.281': attribute type 6 has an invalid length. [ 82.039076][ T6987] __nla_validate_parse: 7 callbacks suppressed [ 82.039095][ T6987] netlink: 16 bytes leftover after parsing attributes in process `syz.0.289'. [ 82.122152][ T6992] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 82.298001][ T7008] xt_l2tp: v2 doesn't support IP mode [ 82.510319][ T7027] netlink: 28 bytes leftover after parsing attributes in process `syz.2.299'. [ 83.229258][ T7043] netlink: 'syz.4.303': attribute type 1 has an invalid length. [ 83.242984][ T7043] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.303'. [ 83.263600][ T7043] netlink: 3068 bytes leftover after parsing attributes in process `syz.4.303'. [ 84.811350][ T7051] netlink: 16 bytes leftover after parsing attributes in process `syz.1.306'. [ 85.141809][ T7056] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 85.644055][ T7066] netlink: 25 bytes leftover after parsing attributes in process `syz.1.311'. [ 85.686626][ T7066] netlink: 'syz.1.311': attribute type 4 has an invalid length. [ 85.952725][ T7080] netlink: 256 bytes leftover after parsing attributes in process `syz.2.312'. [ 86.063087][ T7083] netlink: 48 bytes leftover after parsing attributes in process `syz.1.316'. [ 86.975828][ T7120] netlink: 16 bytes leftover after parsing attributes in process `syz.0.324'. [ 87.673550][ T7156] netlink: 12 bytes leftover after parsing attributes in process `syz.2.340'. [ 87.696887][ T7156] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.706011][ T7156] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.729666][ T7156] bridge0: entered allmulticast mode [ 87.818241][ T7160] netlink: 48 bytes leftover after parsing attributes in process `syz.0.342'. [ 88.227659][ T7171] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003 [ 88.285509][ T7173] netlink: 12 bytes leftover after parsing attributes in process `syz.1.347'. [ 88.408483][ T7171] lo speed is unknown, defaulting to 1000 [ 88.471052][ T7181] netlink: 44 bytes leftover after parsing attributes in process `syz.3.350'. [ 88.987742][ T7216] netlink: 56 bytes leftover after parsing attributes in process `syz.0.359'. [ 89.312443][ T7231] netlink: 'syz.1.361': attribute type 10 has an invalid length. [ 89.345488][ T7231] team0: Port device netdevsim0 added [ 89.357908][ T7235] netlink: 'syz.3.367': attribute type 6 has an invalid length. [ 89.368060][ T7236] netlink: 'syz.3.367': attribute type 6 has an invalid length. [ 89.385028][ T7244] netlink: 24 bytes leftover after parsing attributes in process `syz.4.368'. [ 89.420793][ T7244] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 89.435630][ T7244] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 89.447387][ T7244] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 89.459790][ T7244] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 89.480062][ T7249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.369'. [ 89.500402][ T7249] netlink: 12 bytes leftover after parsing attributes in process `syz.3.369'. [ 89.623493][ T7254] lo speed is unknown, defaulting to 1000 [ 89.827613][ T7264] netlink: 24 bytes leftover after parsing attributes in process `syz.4.373'. [ 89.979453][ T7270] netlink: 116 bytes leftover after parsing attributes in process `syz.1.375'. [ 90.135764][ T7271] lo speed is unknown, defaulting to 1000 [ 90.646253][ T7292] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 90.966867][ T7303] wg2: entered promiscuous mode [ 90.976379][ T7303] team0: Device wg2 is of different type [ 91.108359][ T7317] syzkaller0: entered allmulticast mode [ 91.139671][ T7316] syzkaller0: left allmulticast mode [ 91.399732][ T7335] netlink: 'syz.3.391': attribute type 5 has an invalid length. [ 91.790176][ T7358] netlink: 'syz.2.396': attribute type 1 has an invalid length. [ 91.835247][ T7358] 8021q: adding VLAN 0 to HW filter on device bond2 [ 91.896731][ T7369] netlink: 'syz.3.401': attribute type 3 has an invalid length. [ 91.910497][ T7369] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.919965][ T7369] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.929107][ T7369] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.938170][ T7369] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.009040][ T7375] netlink: 'syz.1.402': attribute type 10 has an invalid length. [ 92.111510][ T7380] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 92.250507][ T7387] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 92.283234][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.291123][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.442146][ T7398] nbd: must specify at least one socket [ 92.545933][ T7408] netlink: 'syz.0.416': attribute type 10 has an invalid length. [ 92.628923][ T7408] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.647516][ T7408] bond0: (slave team0): Enslaving as an active interface with an up link [ 92.745663][ T5154] Bluetooth: hci4: command 0x0405 tx timeout [ 92.861447][ T7429] __nla_validate_parse: 8 callbacks suppressed [ 92.861467][ T7429] netlink: 44 bytes leftover after parsing attributes in process `syz.2.425'. [ 93.216548][ T7451] ipt_REJECT: TCP_RESET invalid for non-tcp [ 93.235032][ T7457] netlink: 52 bytes leftover after parsing attributes in process `syz.0.434'. [ 93.423524][ T7471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.438'. [ 93.450932][ T7471] netlink: 'syz.3.438': attribute type 22 has an invalid length. [ 93.464547][ T7471] netlink: 12 bytes leftover after parsing attributes in process `syz.3.438'. [ 93.551091][ T7481] netlink: 264 bytes leftover after parsing attributes in process `syz.1.441'. [ 93.821412][ T7498] netlink: 'syz.4.446': attribute type 10 has an invalid length. [ 93.848069][ T7498] team0: Device veth0_macvtap failed to register rx_handler [ 93.887975][ T7503] vlan2: entered promiscuous mode [ 93.949425][ T7507] netlink: 55 bytes leftover after parsing attributes in process `syz.0.450'. [ 94.014813][ T7508] batadv1: entered promiscuous mode [ 94.049540][ T7508] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 94.170388][ T7517] lo speed is unknown, defaulting to 1000 [ 94.335107][ T7525] tipc: Enabling of bearer rejected, failed to enable media [ 94.533604][ T7537] dvmrp0: entered allmulticast mode [ 94.634190][ T7543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.462'. [ 94.675899][ T7543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.462'. [ 94.823291][ T5154] Bluetooth: hci4: command 0x0405 tx timeout [ 95.396181][ T7590] lo speed is unknown, defaulting to 1000 [ 95.494965][ T7602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.476'. [ 95.517281][ T7592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.471'. [ 95.536676][ T7600] validate_nla: 1 callbacks suppressed [ 95.536694][ T7600] netlink: 'syz.2.476': attribute type 1 has an invalid length. [ 95.576889][ T7592] netlink: 'syz.1.471': attribute type 1 has an invalid length. [ 95.711090][ T7613] netlink: 'syz.3.475': attribute type 4 has an invalid length. [ 95.774950][ T7604] netlink: 'syz.3.475': attribute type 4 has an invalid length. [ 95.824720][ T7623] bond0: entered promiscuous mode [ 95.833228][ T7623] bond_slave_0: entered promiscuous mode [ 95.846046][ T7623] bond_slave_1: entered promiscuous mode [ 96.401999][ T7655] netlink: 'syz.3.485': attribute type 11 has an invalid length. [ 96.460938][ T7652] raw_sendmsg: syz.2.486 forgot to set AF_INET. Fix it! [ 96.478017][ T7657] gretap1: entered promiscuous mode [ 96.497782][ T7657] gretap1: entered allmulticast mode [ 96.679009][ T7665] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 1, id = 0 [ 96.697763][ T7663] syzkaller0: refused to change device tx_queue_len [ 96.759332][ T7667] syzkaller1: entered promiscuous mode [ 96.767222][ T7667] syzkaller1: entered allmulticast mode [ 97.016269][ T7682] syzkaller0: entered promiscuous mode [ 97.031930][ T7682] syzkaller0: entered allmulticast mode [ 97.057713][ T7684] netlink: 'syz.4.495': attribute type 10 has an invalid length. [ 97.101426][ T7684] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.137809][ T7684] team0: entered promiscuous mode [ 97.143380][ T7684] team_slave_0: entered promiscuous mode [ 97.149417][ T7684] team_slave_1: entered promiscuous mode [ 97.168695][ T7684] bond0: (slave team0): Enslaving as an active interface with an up link [ 97.217383][ T7689] lo speed is unknown, defaulting to 1000 [ 97.708325][ T7721] netlink: 'syz.3.505': attribute type 22 has an invalid length. [ 97.895653][ T7737] netlink: 'syz.3.509': attribute type 10 has an invalid length. [ 97.903758][ T7737] __nla_validate_parse: 10 callbacks suppressed [ 97.903773][ T7737] netlink: 55 bytes leftover after parsing attributes in process `syz.3.509'. [ 98.073935][ T7746] netlink: 'syz.3.512': attribute type 11 has an invalid length. [ 98.088963][ T7746] netlink: 24 bytes leftover after parsing attributes in process `syz.3.512'. [ 98.312822][ T7754] IPv4: Oversized IP packet from 172.20.20.24 [ 98.320827][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 98.327478][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 98.403195][ T7749] netlink: 'syz.3.512': attribute type 32 has an invalid length. [ 98.479798][ T7768] netlink: 36 bytes leftover after parsing attributes in process `syz.4.513'. [ 98.506776][ T5154] Bluetooth: hci0: command 0x0c1a tx timeout [ 98.513676][ T5857] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 98.725184][ T7778] netlink: 48 bytes leftover after parsing attributes in process `syz.3.520'. [ 98.864398][ T7784] netlink: 32 bytes leftover after parsing attributes in process `syz.0.522'. [ 98.930113][ T7776] delete_channel: no stack [ 99.161312][ T7819] netlink: 12 bytes leftover after parsing attributes in process `syz.0.533'. [ 99.271102][ T7830] netlink: 332 bytes leftover after parsing attributes in process `syz.4.535'. [ 99.417730][ T7843] netlink: 4 bytes leftover after parsing attributes in process `syz.4.537'. [ 99.429102][ T7843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.537'. [ 99.438556][ T7843] netlink: 16 bytes leftover after parsing attributes in process `syz.4.537'. [ 101.383005][ T5154] Bluetooth: hci4: command 0x0405 tx timeout [ 111.062606][ T7893] __nla_validate_parse: 1 callbacks suppressed [ 111.062626][ T7893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.548'. [ 111.099213][ T7890] netlink: 32 bytes leftover after parsing attributes in process `syz.0.547'. [ 111.116375][ T7892] delete_channel: no stack [ 111.519014][ T7923] netlink: 'syz.0.558': attribute type 11 has an invalid length. [ 111.568496][ T7927] syzkaller1: entered promiscuous mode [ 111.579671][ T7927] syzkaller1: entered allmulticast mode [ 111.628414][ T7926] lo speed is unknown, defaulting to 1000 [ 111.631438][ T7929] netlink: 36 bytes leftover after parsing attributes in process `syz.0.561'. [ 111.653086][ T7929] netlink: 16 bytes leftover after parsing attributes in process `syz.0.561'. [ 111.668268][ T7929] netlink: 36 bytes leftover after parsing attributes in process `syz.0.561'. [ 111.697684][ T7929] netlink: 36 bytes leftover after parsing attributes in process `syz.0.561'. [ 111.859322][ T7938] IPVS: length: 4096 != 8 [ 111.899908][ T7938] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 111.904592][ T7942] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 112.207190][ T7963] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 112.236468][ T7966] netlink: 'syz.0.571': attribute type 1 has an invalid length. [ 112.245767][ T7963] hsr0: entered promiscuous mode [ 112.389531][ T7926] netlink: 112 bytes leftover after parsing attributes in process `syz.1.559'. [ 112.479125][ T47] IPVS: starting estimator thread 0... [ 112.560444][ T7995] netlink: 24 bytes leftover after parsing attributes in process `syz.2.577'. [ 112.584223][ T7985] IPVS: using max 16 ests per chain, 38400 per kthread [ 112.808583][ T8000] lo speed is unknown, defaulting to 1000 [ 112.809936][ T8008] tipc: Started in network mode [ 112.832814][ T8008] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 112.866467][ T8008] tipc: Enabling of bearer rejected, failed to enable media [ 112.916223][ T8013] netlink: 12 bytes leftover after parsing attributes in process `syz.3.580'. [ 113.254552][ T29] audit: type=1107 audit(1730689296.474:2): pid=8027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='4RiÀ &jØc´[ïcxBrÃt’µÐ=Ы_@4ïÃH q´ktA[¬l‰x‡ÕÆH¨Ðÿ,@@å`€‰³¡×¢ø[·ea´XP' [ 113.254584][ T8028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.587'. [ 113.507763][ T8035] lo speed is unknown, defaulting to 1000 [ 113.646900][ T8044] netlink: 'syz.0.591': attribute type 2 has an invalid length. [ 114.253981][ T8054] netlink: 'syz.4.594': attribute type 4 has an invalid length. [ 114.428939][ T8058] set match dimension is over the limit! [ 114.731125][ T8073] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 114.978342][ T8084] netlink: 'syz.2.605': attribute type 1 has an invalid length. [ 116.289301][ T8128] lo speed is unknown, defaulting to 1000 [ 116.639189][ T8146] __nla_validate_parse: 8 callbacks suppressed [ 116.639208][ T8146] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.622'. [ 116.652718][ T8144] bridge_slave_0: left allmulticast mode [ 116.695693][ T8144] bridge_slave_0: left promiscuous mode [ 116.701388][ T8144] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.781979][ T8144] bridge_slave_1: left allmulticast mode [ 116.806690][ T8144] bridge_slave_1: left promiscuous mode [ 116.830445][ T8144] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.869025][ T8144] bond0: (slave bond_slave_0): Releasing backup interface [ 116.900237][ T8144] bond0: (slave bond_slave_1): Releasing backup interface [ 116.964759][ T8144] team0: Port device team_slave_0 removed [ 116.989073][ T8144] team0: Port device team_slave_1 removed [ 117.013662][ T8144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.021100][ T8144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.041874][ T8144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.051011][ T8144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.065305][ T8144] batman_adv: batadv0: Removing interface: ip6gretap1 [ 117.080403][ T8149] netlink: 'syz.3.621': attribute type 10 has an invalid length. [ 117.089955][ T8149] netlink: 2 bytes leftover after parsing attributes in process `syz.3.621'. [ 117.110309][ T8149] team0: entered promiscuous mode [ 117.118627][ T8149] bridge0: port 1(team0) entered blocking state [ 117.130309][ T8149] bridge0: port 1(team0) entered disabled state [ 117.140716][ T8149] team0: entered allmulticast mode [ 117.150532][ T8149] bridge0: port 1(team0) entered blocking state [ 117.157160][ T8149] bridge0: port 1(team0) entered forwarding state [ 117.167673][ T8146] netlink: 'syz.1.622': attribute type 3 has an invalid length. [ 117.186097][ T8163] macvlan2: entered promiscuous mode [ 117.209860][ T53] bridge0: port 1(team0) entered disabled state [ 117.357168][ T8170] veth0_to_team: entered promiscuous mode [ 117.505083][ T8167] delete_channel: no stack [ 117.951572][ T8197] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.076416][ T8209] infiniband syz0: set active [ 118.137899][ T8209] bond0: (slave team0): Releasing backup interface [ 118.179802][ T8209] team0: left promiscuous mode [ 118.185972][ T8209] team_slave_0: left promiscuous mode [ 118.195238][ T8209] team_slave_1: left promiscuous mode [ 118.211532][ T8209] bridge_slave_0: left allmulticast mode [ 118.217467][ T8209] bridge_slave_0: left promiscuous mode [ 118.223651][ T8209] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.236141][ T8209] bridge_slave_1: left allmulticast mode [ 118.241809][ T8209] bridge_slave_1: left promiscuous mode [ 118.255293][ T8209] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.298618][ T8209] bond0: (slave bond_slave_0): Releasing backup interface [ 118.332758][ T8209] bond_slave_0: left promiscuous mode [ 118.348301][ T8222] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.640'. [ 118.381011][ T8209] bond0: (slave bond_slave_1): Releasing backup interface [ 118.395964][ T8209] bond_slave_1: left promiscuous mode [ 118.430617][ T8209] team0: Port device team_slave_0 removed [ 118.450356][ T8209] team0: Port device team_slave_1 removed [ 118.458161][ T8209] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.472058][ T8209] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.507110][ T8209] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.533449][ T8209] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.602448][ T5899] lo speed is unknown, defaulting to 1000 [ 118.603423][ T8221] netlink: 20 bytes leftover after parsing attributes in process `syz.4.639'. [ 118.646456][ T8218] wg2: entered promiscuous mode [ 118.705283][ T8218] team0: Port device wg2 added [ 118.773646][ T8227] netlink: 28 bytes leftover after parsing attributes in process `syz.0.641'. [ 118.803290][ T8227] netlink: 28 bytes leftover after parsing attributes in process `syz.0.641'. [ 118.807063][ T8232] netlink: 20 bytes leftover after parsing attributes in process `syz.2.642'. [ 118.832537][ T8227] netlink: 92 bytes leftover after parsing attributes in process `syz.0.641'. [ 118.850096][ T8232] netlink: 20 bytes leftover after parsing attributes in process `syz.2.642'. [ 118.878754][ T8223] lo speed is unknown, defaulting to 1000 [ 118.901612][ T8232] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.923557][ T8234] netlink: 332 bytes leftover after parsing attributes in process `syz.3.643'. [ 119.039336][ T8232] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.087108][ T8246] sctp: [Deprecated]: syz.1.645 (pid 8246) Use of int in maxseg socket option. [ 119.087108][ T8246] Use struct sctp_assoc_value instead [ 119.140021][ T8235] netlink: 'syz.2.642': attribute type 22 has an invalid length. [ 119.165667][ T8239] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 119.533300][ T8272] veth1_vlan: left promiscuous mode [ 119.561958][ T8272] veth1_vlan: entered promiscuous mode [ 119.612661][ T8272] team0: Port device macvlan1 added [ 119.884521][ T8284] IPVS: set_ctl: invalid protocol: 92 224.0.0.2:20003 [ 120.590402][ T8319] netlink: 'syz.2.667': attribute type 3 has an invalid length. [ 121.288246][ T8366] netlink: 'syz.0.679': attribute type 39 has an invalid length. [ 121.651328][ T8388] lo speed is unknown, defaulting to 1000 [ 122.075989][ T8411] __nla_validate_parse: 11 callbacks suppressed [ 122.076008][ T8411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.693'. [ 122.362286][ T8418] netlink: 16 bytes leftover after parsing attributes in process `syz.2.695'. [ 122.569903][ T8421] RDS: rds_bind could not find a transport for 1400::, load rds_tcp or rds_rdma? [ 122.605554][ T8421] dccp_invalid_packet: P.Data Offset(105) too large [ 122.672326][ T8429] netlink: 'syz.4.699': attribute type 1 has an invalid length. [ 122.682925][ T8429] netlink: 'syz.4.699': attribute type 4 has an invalid length. [ 122.709008][ T8429] netlink: 15334 bytes leftover after parsing attributes in process `syz.4.699'. [ 122.752816][ T8433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.700'. [ 122.835712][ T8429] netlink: 'syz.4.699': attribute type 58 has an invalid length. [ 122.853461][ T8429] netlink: 20 bytes leftover after parsing attributes in process `syz.4.699'. [ 123.165007][ T8457] netlink: 20 bytes leftover after parsing attributes in process `syz.0.707'. [ 123.201660][ T8457] vlan0: entered promiscuous mode [ 123.205588][ T8463] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 123.600004][ T8472] lo speed is unknown, defaulting to 1000 [ 123.624577][ T8481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.715'. [ 123.728053][ T8481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.715'. [ 123.880563][ T8492] netlink: 'syz.1.719': attribute type 1 has an invalid length. [ 123.894104][ T8492] netlink: 'syz.1.719': attribute type 3 has an invalid length. [ 123.905238][ T8492] netlink: 216 bytes leftover after parsing attributes in process `syz.1.719'. [ 123.919905][ T8492] NCSI netlink: No device for ifindex 813332851 [ 123.982647][ T8494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.720'. [ 124.677619][ T8541] vlan2: entered promiscuous mode [ 124.693022][ T8541] vlan2: entered allmulticast mode [ 124.721300][ T8541] xfrm0: entered allmulticast mode [ 124.743875][ T8541] xfrm0: entered promiscuous mode [ 124.793384][ T8541] team0: Port device vlan2 added [ 124.813870][ T62] bridge0: port 1(team0) entered blocking state [ 124.820250][ T62] bridge0: port 1(team0) entered forwarding state [ 124.936965][ T8555] can: request_module (can-proto-3) failed. [ 125.015300][ T8563] x_tables: duplicate underflow at hook 3 [ 125.365613][ T8585] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 125.759575][ T8604] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 125.960368][ T8612] netlink: 'syz.0.750': attribute type 4 has an invalid length. [ 126.097224][ T8626] syz.3.755 uses old SIOCAX25GETINFO [ 126.208088][ T8631] sctp: [Deprecated]: syz.2.757 (pid 8631) Use of int in maxseg socket option. [ 126.208088][ T8631] Use struct sctp_assoc_value instead [ 127.138480][ T8687] xt_CONNSECMARK: invalid mode: 3 [ 127.510139][ T8707] vlan2: entered promiscuous mode [ 127.515689][ T8707] xfrm0: entered promiscuous mode [ 127.520969][ T8707] vlan2: entered allmulticast mode [ 127.526333][ T8707] xfrm0: entered allmulticast mode [ 127.542766][ T8707] team0: Device vlan2 is of different type [ 127.570294][ T8707] xfrm0: left allmulticast mode [ 127.579288][ T8707] xfrm0: left promiscuous mode [ 127.623773][ T8712] veth0_vlan: left promiscuous mode [ 127.697516][ T8723] lo speed is unknown, defaulting to 1000 [ 127.718986][ T8705] delete_channel: no stack [ 127.915214][ T8730] syzkaller0: tun_chr_ioctl cmd 35108 [ 128.035910][ T8739] __nla_validate_parse: 7 callbacks suppressed [ 128.035928][ T8739] netlink: 6 bytes leftover after parsing attributes in process `syz.3.786'. [ 128.051815][ T8739] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.786'. [ 128.342204][ T8751] 8021q: adding VLAN 0 to HW filter on device bond1 [ 128.377315][ T8760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.447442][ T8762] netlink: 16 bytes leftover after parsing attributes in process `syz.0.792'. [ 128.568665][ T8775] netlink: 12 bytes leftover after parsing attributes in process `syz.4.796'. [ 128.591799][ T8775] bridge0: entered allmulticast mode [ 128.886415][ T8791] veth1_macvtap: left promiscuous mode [ 128.898334][ T8791] macsec0: entered allmulticast mode [ 128.915407][ T8790] netlink: 'syz.0.800': attribute type 12 has an invalid length. [ 128.937594][ T8791] veth1_macvtap: entered promiscuous mode [ 128.949452][ T8791] veth1_macvtap: entered allmulticast mode [ 128.974787][ T8791] macsec0: left allmulticast mode [ 128.998258][ T8791] veth1_macvtap: left allmulticast mode [ 129.290506][ T8805] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 129.404851][ T8807] netlink: 24 bytes leftover after parsing attributes in process `syz.3.805'. [ 129.683585][ T8819] set match dimension is over the limit! [ 129.715642][ T8821] set match dimension is over the limit! [ 129.795423][ T8821] pim6reg: entered allmulticast mode [ 129.823266][ T8819] pim6reg: left allmulticast mode [ 129.913648][ T8835] IPVS: set_ctl: invalid protocol: 37 172.20.20.36:20002 [ 130.070608][ T8845] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 130.362448][ T8867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.824'. [ 130.439205][ T8871] netlink: 132 bytes leftover after parsing attributes in process `syz.1.825'. [ 130.505283][ T8874] netlink: 'syz.2.826': attribute type 2 has an invalid length. [ 130.521871][ T8876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.536580][ T8874] netlink: 208 bytes leftover after parsing attributes in process `syz.2.826'. [ 130.558352][ T8874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.826'. [ 130.581548][ T8878] SET target dimension over the limit! [ 130.598923][ T8879] netlink: 'syz.3.828': attribute type 32 has an invalid length. [ 130.611184][ T8874] syzkaller0: left promiscuous mode [ 130.627703][ T8874] syzkaller0: left allmulticast mode [ 130.645233][ T8879] netlink: 'syz.3.828': attribute type 32 has an invalid length. [ 130.658377][ T8886] netlink: 12 bytes leftover after parsing attributes in process `syz.1.830'. [ 130.744267][ T8887] netlink: 'syz.3.828': attribute type 10 has an invalid length. [ 130.800078][ T8887] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 130.898490][ T8895] netlink: 'syz.2.833': attribute type 1 has an invalid length. [ 130.943311][ T8890] lo speed is unknown, defaulting to 1000 [ 131.137332][ T8907] IPVS: set_ctl: invalid protocol: 8 127.0.0.1:20003 [ 132.063629][ T8938] xt_CT: You must specify a L4 protocol and not use inversions on it [ 132.731930][ T8969] dummy0: entered promiscuous mode [ 132.756653][ T8969] vlan2: entered promiscuous mode [ 132.807541][ T8969] dummy0: left promiscuous mode [ 132.907680][ T8974] gretap2: entered promiscuous mode [ 133.069639][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.147983][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 133.616213][ T9035] __nla_validate_parse: 4 callbacks suppressed [ 133.616231][ T9035] netlink: 40 bytes leftover after parsing attributes in process `syz.2.862'. [ 133.772816][ T9041] netlink: 'syz.3.861': attribute type 3 has an invalid length. [ 133.800982][ T9041] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.861'. [ 134.115765][ T9067] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 134.121458][ T9069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.872'. [ 134.271134][ T9079] netlink: 'syz.1.877': attribute type 13 has an invalid length. [ 134.334289][ T9082] netlink: set zone limit has 4 unknown bytes [ 134.442069][ T9089] netlink: 'syz.1.881': attribute type 6 has an invalid length. [ 134.474977][ T9089] netlink: 'syz.1.881': attribute type 7 has an invalid length. [ 134.499870][ T9089] netlink: 'syz.1.881': attribute type 8 has an invalid length. [ 134.762056][ T9103] lo speed is unknown, defaulting to 1000 [ 135.470716][ T9146] delete_channel: no stack [ 135.726865][ T9153] lo speed is unknown, defaulting to 1000 [ 136.961382][ T9195] netlink: 'syz.3.911': attribute type 3 has an invalid length. [ 137.269177][ T9207] netlink: 104 bytes leftover after parsing attributes in process `syz.4.915'. [ 137.324860][ T9207] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:20004 [ 137.349481][ T9207] SET target dimension over the limit! [ 137.551983][ T9233] netlink: 12 bytes leftover after parsing attributes in process `syz.0.924'. [ 138.136129][ T9242] No such timeout policy "syz0" [ 138.369663][ T9246] netlink: 'syz.0.926': attribute type 6 has an invalid length. [ 138.377606][ T9246] netlink: 20 bytes leftover after parsing attributes in process `syz.0.926'. [ 138.707383][ T9259] netlink: 104 bytes leftover after parsing attributes in process `syz.3.927'. [ 138.890951][ T9278] bridge2: entered promiscuous mode [ 138.901319][ T9278] bridge2: entered allmulticast mode [ 139.050251][ T9286] bridge0: port 2(vlan3) entered blocking state [ 139.057286][ T9286] bridge0: port 2(vlan3) entered disabled state [ 139.064344][ T9286] vlan3: entered allmulticast mode [ 139.071336][ T9286] vlan3: left allmulticast mode [ 139.091645][ T9291] netlink: 80 bytes leftover after parsing attributes in process `syz.1.938'. [ 139.532399][ T9306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.942'. [ 139.583087][ T9306] netlink: 'syz.1.942': attribute type 3 has an invalid length. [ 139.873039][ T9314] netlink: 20 bytes leftover after parsing attributes in process `syz.0.946'. [ 140.143332][ T9327] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 140.162776][ T9331] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.953'. [ 140.190263][ T9327] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 140.404674][ T9348] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.413606][ T9348] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.422325][ T9348] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.432348][ T9348] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.491278][ T9353] netlink: 'syz.3.956': attribute type 29 has an invalid length. [ 140.503230][ T9353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.956'. [ 140.667540][ T9369] netlink: 36 bytes leftover after parsing attributes in process `syz.0.960'. [ 140.883589][ T9386] netlink: 'syz.4.966': attribute type 5 has an invalid length. [ 141.613066][ T9413] x_tables: ip_tables: tcpmss match: only valid for protocol 6 [ 141.615490][ T9411] netlink: 'syz.4.978': attribute type 1 has an invalid length. [ 141.643048][ T9411] netlink: 224 bytes leftover after parsing attributes in process `syz.4.978'. [ 141.680605][ T9411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.978'. [ 141.859010][ T9420] netlink: 'syz.2.979': attribute type 10 has an invalid length. [ 141.887071][ T9422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.981'. [ 142.924273][ T9451] lo speed is unknown, defaulting to 1000 [ 144.088504][ T9494] netlink: 'syz.2.1001': attribute type 39 has an invalid length. [ 144.573219][ T9511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.584717][ T9511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.594934][ T9511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.607017][ T9511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.630545][ T9510] __nla_validate_parse: 2 callbacks suppressed [ 144.630563][ T9510] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1006'. [ 144.721742][ T9514] sit0: entered promiscuous mode [ 144.749859][ T9514] netlink: 'syz.3.1005': attribute type 1 has an invalid length. [ 144.774587][ T9514] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1005'. [ 144.799778][ T9520] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1005'. [ 144.863450][ T9523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1010'. [ 145.239880][ T9536] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.353656][ T9544] tipc: Enabled bearer , priority 0 [ 145.482222][ T9555] netlink: 'syz.4.1021': attribute type 1 has an invalid length. [ 145.565303][ T9561] 8021q: adding VLAN 0 to HW filter on device bond3 [ 145.575620][ T9561] bond2: (slave bond3): making interface the new active one [ 145.590202][ T9561] bond2: (slave bond3): Enslaving as an active interface with an up link [ 145.599014][ T9564] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1025'. [ 145.677105][ T9555] bond2 (unregistering): (slave bond3): Releasing backup interface [ 145.771964][ T9555] bond2 (unregistering): Released all slaves [ 145.979215][ T9578] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1029'. [ 145.989807][ T9578] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1029'. [ 146.120864][ T9583] lo speed is unknown, defaulting to 1000 [ 146.324907][ T9597] netlink: 'syz.2.1035': attribute type 13 has an invalid length. [ 146.474885][ T5938] tipc: Node number set to 1 [ 146.491893][ T9588] lo speed is unknown, defaulting to 1000 [ 146.902408][ T9619] netlink: 'syz.0.1044': attribute type 3 has an invalid length. [ 147.295870][ T9625] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1045'. [ 147.488381][ T9626] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1046'. [ 147.507987][ T9629] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 147.579429][ T9629] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1047'. [ 147.818873][ T5154] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 147.835251][ T5154] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 147.875275][ T5154] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 147.889578][ T5154] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 147.898953][ T5154] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 147.906401][ T5154] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 148.037860][ T9637] lo speed is unknown, defaulting to 1000 [ 148.249890][ T9637] chnl_net:caif_netlink_parms(): no params data found [ 148.390903][ T9637] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.398391][ T9637] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.405833][ T9637] bridge_slave_0: entered allmulticast mode [ 148.419076][ T9637] bridge_slave_0: entered promiscuous mode [ 148.435191][ T9637] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.450768][ T9637] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.458254][ T9637] bridge_slave_1: entered allmulticast mode [ 148.474555][ T9637] bridge_slave_1: entered promiscuous mode [ 148.569505][ T9637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.620497][ T9637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.683264][ T9677] €Â: renamed from pim6reg1 [ 148.711185][ T9637] team0: Port device team_slave_0 added [ 148.722218][ T9637] team0: Port device team_slave_1 added [ 148.781123][ T9682] syz.4.1060[9682] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.781239][ T9682] syz.4.1060[9682] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.802583][ T9682] syz.4.1060[9682] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.818959][ T9637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.838571][ T9637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.865972][ T9637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.877417][ T9682] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 148.880556][ T9637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.896177][ T9637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.924601][ T9637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.012098][ T9637] hsr_slave_0: entered promiscuous mode [ 149.027616][ T9637] hsr_slave_1: entered promiscuous mode [ 149.131997][ T9698] netlink: 'syz.4.1064': attribute type 21 has an invalid length. [ 149.356548][ T9637] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.482238][ T9713] netlink: 'syz.3.1069': attribute type 15 has an invalid length. [ 149.508418][ T9637] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.521421][ T9714] netlink: 'syz.3.1069': attribute type 15 has an invalid length. [ 149.699322][ T9637] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.755225][ T9728] __nla_validate_parse: 7 callbacks suppressed [ 149.755243][ T9728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1073'. [ 149.892256][ T9637] team0: Port device netdevsim0 removed [ 149.903379][ T9731] Bluetooth: MGMT ver 1.23 [ 149.918790][ T9637] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.969867][ T9735] bridge3: entered allmulticast mode [ 149.983181][ T9739] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 149.986541][ T9735] netlink: 'syz.2.1075': attribute type 4 has an invalid length. [ 150.106603][ T5857] Bluetooth: hci1: command tx timeout [ 150.175292][ T9637] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 150.225091][ T9637] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 150.259296][ T9637] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 150.290119][ T9748] dvmrp8: entered allmulticast mode [ 150.307598][ T9637] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 150.325383][ T9748] dvmrp8: left allmulticast mode [ 150.534193][ T9637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.589257][ T9637] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.618548][ T9761] netlink: 'syz.3.1083': attribute type 25 has an invalid length. [ 150.630873][ T197] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.638050][ T197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.688804][ T3465] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.695969][ T3465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.738476][ T9766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1085'. [ 150.754983][ T9763] syzkaller0: entered allmulticast mode [ 150.775246][ T9766] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 150.854296][ T9763] syzkaller0 (unregistering): left allmulticast mode [ 151.018952][ T9774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1086'. [ 151.075554][ T9777] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 151.315274][ T9637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.419686][ T9793] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1093'. [ 151.431564][ T9637] veth0_vlan: entered promiscuous mode [ 151.445119][ T9792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1092'. [ 151.474872][ T9792] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1092'. [ 151.492932][ T9792] netlink: 'syz.3.1092': attribute type 25 has an invalid length. [ 151.549262][ T9795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1094'. [ 151.664989][ T9795] team0 (unregistering): Port device team_slave_0 removed [ 151.688805][ T9795] team0 (unregistering): Port device team_slave_1 removed [ 151.718721][ T9637] veth1_vlan: entered promiscuous mode [ 151.812035][ T9637] veth0_macvtap: entered promiscuous mode [ 151.858363][ T9637] veth1_macvtap: entered promiscuous mode [ 151.872770][ T9809] tipc: Enabled bearer , priority 10 [ 151.880928][ T9808] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1098'. [ 151.899224][ T9637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.912667][ T9808] unsupported nlmsg_type 40 [ 151.922142][ T9637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.936291][ T9637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.963164][ T9637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.976154][ T9637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.005582][ T9637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.036983][ T9637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.065585][ T9637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.085152][ T9818] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1102'. [ 152.103263][ T9637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.119443][ T9637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.121274][ T9819] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 152.138901][ T9637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.157392][ T9820] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 152.175308][ T9637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.183767][ T5857] Bluetooth: hci1: command 0x041b tx timeout [ 152.187544][ T9637] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.199634][ T9637] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.208745][ T9637] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.229085][ T9637] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.355096][ T9832] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1107'. [ 152.529689][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.543707][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.613361][ T3547] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.640589][ T3547] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.569499][ T9881] can: request_module (can-proto-0) failed. [ 154.338547][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.441824][ T9906] netlink: 'syz.2.1125': attribute type 39 has an invalid length. [ 154.497504][ T5857] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 154.514758][ T5857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 154.525309][ T5857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 154.533110][ T9909] xt_TCPMSS: Only works on TCP SYN packets [ 154.554494][ T5857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 154.563298][ T5857] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 154.570705][ T5857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 154.683605][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.769432][ T9916] netlink: 'syz.4.1127': attribute type 1 has an invalid length. [ 154.915992][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.969538][ T9907] lo speed is unknown, defaulting to 1000 [ 154.999498][ T9923] x_tables: duplicate underflow at hook 2 [ 155.056267][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.200713][ T9927] __nla_validate_parse: 4 callbacks suppressed [ 155.200732][ T9927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1131'. [ 155.241176][ T9927] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1131'. [ 155.267400][ T9930] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20003 [ 155.331587][ T35] bridge_slave_1: left allmulticast mode [ 155.363969][ T35] bridge_slave_1: left promiscuous mode [ 155.372490][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.397305][ T35] bridge_slave_0: left allmulticast mode [ 155.410074][ T35] bridge_slave_0: left promiscuous mode [ 155.417230][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.417925][ T9937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1134'. [ 155.907267][ T9856] TCP: TCP_TX_DELAY enabled [ 156.027311][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.040426][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.052374][ T35] bond0 (unregistering): Released all slaves [ 156.071219][ T9935] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 156.081792][ T9935] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 156.222957][ T9944] netlink: 'syz.0.1136': attribute type 5 has an invalid length. [ 156.264349][ T9951] netlink: 'syz.2.1137': attribute type 11 has an invalid length. [ 156.426739][ T9965] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1141'. [ 156.678439][ T5154] Bluetooth: hci1: command tx timeout [ 157.304261][ T9988] netlink: 'syz.2.1146': attribute type 1 has an invalid length. [ 157.333495][ T9989] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 157.414904][ T35] hsr_slave_0: left promiscuous mode [ 157.422077][ T35] hsr_slave_1: left promiscuous mode [ 157.437511][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.453022][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.472751][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.493554][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.531904][ T35] veth1_macvtap: left promiscuous mode [ 157.543073][ T35] veth0_macvtap: left promiscuous mode [ 157.549440][ T35] veth1_vlan: left promiscuous mode [ 157.555816][ T35] veth0_vlan: left promiscuous mode [ 157.957553][T10005] can: request_module (can-proto-0) failed. [ 158.319086][ T35] team0 (unregistering): Port device team_slave_1 removed [ 158.369689][ T35] team0 (unregistering): Port device team_slave_0 removed [ 158.747989][ T5154] Bluetooth: hci1: command tx timeout [ 158.933270][ T9907] chnl_net:caif_netlink_parms(): no params data found [ 159.162800][T10024] netlink: 'syz.2.1152': attribute type 10 has an invalid length. [ 159.437077][T10049] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1158'. [ 159.483992][T10049] geneve1: entered allmulticast mode [ 159.541075][T10057] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1159'. [ 159.631759][ T9907] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.652445][ T9907] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.674662][ T9907] bridge_slave_0: entered allmulticast mode [ 159.681694][ T9907] bridge_slave_0: entered promiscuous mode [ 159.733712][ T9907] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.760354][ T9907] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.784418][ T9907] bridge_slave_1: entered allmulticast mode [ 159.812095][ T9907] bridge_slave_1: entered promiscuous mode [ 159.827277][T10079] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1163'. [ 159.913728][T10078] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1164'. [ 160.005537][ T9907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.060305][ T9907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.158059][ T9907] team0: Port device team_slave_0 added [ 160.178763][ T9907] team0: Port device team_slave_1 added [ 160.233925][ T9907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.260522][ T9907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.285129][T10101] x_tables: duplicate underflow at hook 2 [ 160.303637][T10101] x_tables: duplicate underflow at hook 2 [ 160.307904][ T9907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.320151][T10101] x_tables: duplicate underflow at hook 2 [ 160.320230][T10101] x_tables: duplicate underflow at hook 2 [ 160.356961][ T9907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.364249][T10101] x_tables: duplicate underflow at hook 2 [ 160.379655][ T9907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.407095][T10101] x_tables: duplicate underflow at hook 2 [ 160.422795][T10101] x_tables: duplicate underflow at hook 2 [ 160.429997][ T9907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.453313][T10101] x_tables: duplicate underflow at hook 2 [ 160.459278][T10101] x_tables: duplicate underflow at hook 2 [ 160.503112][T10101] x_tables: duplicate underflow at hook 2 [ 160.583925][ T9907] hsr_slave_0: entered promiscuous mode [ 160.604961][ T9907] hsr_slave_1: entered promiscuous mode [ 160.833194][ T5154] Bluetooth: hci1: command tx timeout [ 161.109226][T10127] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1175'. [ 161.130158][T10130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1173'. [ 161.374388][T10138] dccp_invalid_packet: P.Data Offset(4) too small [ 161.569610][ T9907] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 161.596239][ T9907] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 161.611360][ T9907] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 161.622732][ T9907] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 161.705042][T10149] netlink: 'syz.2.1181': attribute type 3 has an invalid length. [ 161.745262][ T9907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.774612][ T9907] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.801669][ T3465] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.808996][ T3465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.823660][ T3465] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.830865][ T3465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.880741][T10151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1182'. [ 161.894870][T10151] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1182'. [ 161.957533][ T9907] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 162.274697][ T9907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.386678][ T9907] veth0_vlan: entered promiscuous mode [ 162.416994][ T9907] veth1_vlan: entered promiscuous mode [ 162.485252][ T9907] veth0_macvtap: entered promiscuous mode [ 162.494463][ T9907] veth1_macvtap: entered promiscuous mode [ 162.509581][ T9907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.520571][ T9907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.533589][ T9907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.544190][ T9907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.559024][ T9907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.605683][ T9907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.623465][ T9907] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.633962][ T9907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.644684][ T9907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.660325][ T9907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.671476][ T9907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.686646][ T9907] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.701318][T10167] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1187'. [ 162.717882][T10167] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1187'. [ 162.728248][T10167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1187'. [ 162.733178][ T9907] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.767895][ T9907] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.811942][ T9907] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.831221][ T9907] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.854764][T10167] netlink: 'syz.2.1187': attribute type 1 has an invalid length. [ 162.905319][T10174] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1187'. [ 162.913691][ T5154] Bluetooth: hci1: command tx timeout [ 162.934306][T10180] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1190'. [ 162.956510][T10178] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 163.074213][ T3518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.111923][ T3518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.218495][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.239985][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.348188][T10200] netlink: 'syz.4.1197': attribute type 2 has an invalid length. [ 163.415112][T10200] : entered promiscuous mode [ 163.549063][T10200] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.560208][T10200] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 163.579392][T10205] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1198'. [ 163.762695][T10200] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.805765][T10200] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 163.980873][T10200] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.999620][T10200] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 164.115761][T10200] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.134168][T10200] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 164.329599][T10225] netlink: 'syz.2.1203': attribute type 1 has an invalid length. [ 164.332016][T10227] netlink: 'syz.0.1204': attribute type 23 has an invalid length. [ 164.365485][T10227] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.374072][T10227] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.869211][ T3547] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.890123][T10259] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 165.162268][ T5857] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 165.172657][ T5857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 165.180735][ T5857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 165.189940][ T5857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 165.198342][ T5857] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 165.205989][ T5857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 165.266454][T10267] lo speed is unknown, defaulting to 1000 [ 165.450599][T10274] lo speed is unknown, defaulting to 1000 [ 165.507570][T10277] FAULT_INJECTION: forcing a failure. [ 165.507570][T10277] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 165.597465][T10277] CPU: 0 UID: 0 PID: 10277 Comm: syz.0.1218 Not tainted 6.12.0-rc5-syzkaller-01056-gf07a6e6ceb05 #0 [ 165.608285][T10277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 165.618386][T10277] Call Trace: [ 165.621681][T10277] [ 165.624615][T10277] dump_stack_lvl+0x241/0x360 [ 165.629330][T10277] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.634532][T10277] ? __pfx__printk+0x10/0x10 [ 165.639130][T10277] ? snprintf+0xda/0x120 [ 165.643373][T10277] should_fail_ex+0x3b0/0x4e0 [ 165.648053][T10277] _copy_to_user+0x31/0xb0 [ 165.652473][T10277] simple_read_from_buffer+0xca/0x150 [ 165.657851][T10277] proc_fail_nth_read+0x1e9/0x250 [ 165.662887][T10277] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 165.668440][T10277] ? rw_verify_area+0x55e/0x6f0 [ 165.673291][T10277] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 165.678849][T10277] vfs_read+0x1fc/0xb70 [ 165.683019][T10277] ? fdget_pos+0x24e/0x320 [ 165.687443][T10277] ? __pfx_vfs_read+0x10/0x10 [ 165.692124][T10277] ? __fget_files+0x3f3/0x470 [ 165.696804][T10277] ? fdget_pos+0x24e/0x320 [ 165.701221][T10277] ksys_read+0x183/0x2b0 [ 165.705460][T10277] ? __pfx_ksys_read+0x10/0x10 [ 165.710239][T10277] ? do_syscall_64+0x100/0x230 [ 165.715041][T10277] ? do_syscall_64+0xb6/0x230 [ 165.719770][T10277] do_syscall_64+0xf3/0x230 [ 165.724283][T10277] ? clear_bhb_loop+0x35/0x90 [ 165.728965][T10277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.734878][T10277] RIP: 0033:0x7f2d7697d15c [ 165.739302][T10277] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 165.758908][T10277] RSP: 002b:00007f2d7781e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 165.767332][T10277] RAX: ffffffffffffffda RBX: 00007f2d76b35f80 RCX: 00007f2d7697d15c [ 165.775303][T10277] RDX: 000000000000000f RSI: 00007f2d7781e0a0 RDI: 0000000000000005 [ 165.783366][T10277] RBP: 00007f2d7781e090 R08: 0000000000000000 R09: 0000000000000000 [ 165.791334][T10277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.799301][T10277] R13: 0000000000000000 R14: 00007f2d76b35f80 R15: 00007ffe77610c78 [ 165.807283][T10277] [ 165.990638][T10267] chnl_net:caif_netlink_parms(): no params data found [ 166.022331][T10282] netlink: 'syz.0.1219': attribute type 3 has an invalid length. [ 166.183169][T10289] __nla_validate_parse: 2 callbacks suppressed [ 166.183188][T10289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1220'. [ 166.256744][ T3547] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.290499][T10267] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.305003][T10298] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1222'. [ 166.334116][T10267] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.341383][T10267] bridge_slave_0: entered allmulticast mode [ 166.435233][T10267] bridge_slave_0: entered promiscuous mode [ 166.490054][ T3547] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.544747][T10267] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.551959][T10267] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.567895][T10267] bridge_slave_1: entered allmulticast mode [ 166.575335][T10267] bridge_slave_1: entered promiscuous mode [ 166.613234][ T3547] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.666632][T10267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.681948][T10267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.727360][T10310] veth0_vlan: left promiscuous mode [ 166.764620][T10267] team0: Port device team_slave_0 added [ 166.785862][T10267] team0: Port device team_slave_1 added [ 166.845718][T10307] delete_channel: no stack [ 166.879830][T10312] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 166.954953][T10267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.962118][T10267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.988765][T10267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.001293][T10267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.011541][T10267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.048268][T10267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.153429][ T3547] bridge_slave_1: left allmulticast mode [ 167.159126][ T3547] bridge_slave_1: left promiscuous mode [ 167.178082][ T3547] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.196360][ T3547] bridge_slave_0: left allmulticast mode [ 167.202052][ T3547] bridge_slave_0: left promiscuous mode [ 167.210152][ T3547] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.303427][ T5154] Bluetooth: hci1: command tx timeout [ 167.852489][ T3547] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.883323][ T3547] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.907810][ T3547] bond0 (unregistering): Released all slaves [ 167.949401][T10267] hsr_slave_0: entered promiscuous mode [ 167.966376][T10267] hsr_slave_1: entered promiscuous mode [ 167.983658][T10267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 167.993797][T10267] Cannot create hsr debugfs directory [ 168.087385][T10328] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1231'. [ 168.113841][T10328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1231'. [ 168.667912][ T3547] hsr_slave_0: left promiscuous mode [ 168.723516][ T3547] hsr_slave_1: left promiscuous mode [ 168.729717][ T3547] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.737335][ T3547] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.775126][ T3547] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.792251][ T3547] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.861815][ T3547] veth1_macvtap: left promiscuous mode [ 168.879901][ T3547] veth0_macvtap: left promiscuous mode [ 168.904076][ T3547] veth1_vlan: left promiscuous mode [ 168.915373][ T3547] veth0_vlan: left promiscuous mode [ 169.383325][ T5154] Bluetooth: hci1: command tx timeout [ 169.898543][ T3547] team0 (unregistering): Port device team_slave_1 removed [ 169.975681][ T3547] team0 (unregistering): Port device team_slave_0 removed [ 171.295943][T10267] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 171.330021][T10267] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 171.370783][T10267] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 171.398233][T10267] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 171.416031][T10395] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1250'. [ 171.465107][ T5154] Bluetooth: hci1: command tx timeout [ 171.473034][T10398] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1250'. [ 171.553850][T10394] gretap2: entered promiscuous mode [ 171.688349][T10267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.705647][T10267] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.738026][T10267] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 171.748478][T10267] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 171.781021][ T3547] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.788204][ T3547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.797901][ T3547] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.805054][ T3547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.048932][T10267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.081049][T10267] veth0_vlan: entered promiscuous mode [ 172.093737][T10267] veth1_vlan: entered promiscuous mode [ 172.148334][T10417] lo speed is unknown, defaulting to 1000 [ 172.171181][T10267] veth0_macvtap: entered promiscuous mode [ 172.196432][T10267] veth1_macvtap: entered promiscuous mode [ 172.210781][T10267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.221339][T10267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.231577][T10267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.242273][T10267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.252129][T10267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.262918][T10267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.274156][T10267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.315088][T10267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.326193][T10267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.336675][T10267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.357547][T10267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.384323][T10267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.415713][T10267] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.445567][T10267] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.463052][T10267] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.471786][T10267] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.624631][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.636992][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.860027][ T197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.868903][ T197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.930267][T10433] smc: net device ip6_vti0 applied user defined pnetid SYZ0 [ 173.066976][T10439] netlink: 604 bytes leftover after parsing attributes in process `syz.4.1258'. [ 173.082710][T10439] netlink: 'syz.4.1258': attribute type 10 has an invalid length. [ 173.603978][T10456] pimreg: entered allmulticast mode [ 173.618237][T10456] pimreg: left allmulticast mode [ 173.687225][ T5154] Bluetooth: hci4: link tx timeout [ 173.695462][ T5154] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 173.705399][ T5154] Bluetooth: hci4: link tx timeout [ 173.710751][ T5154] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 173.719461][ T5154] Bluetooth: hci4: link tx timeout [ 173.726005][ T5154] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 173.734332][ T5154] Bluetooth: hci4: link tx timeout [ 173.740220][ T5154] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 173.748115][ T5154] Bluetooth: hci4: link tx timeout [ 173.753497][ T5154] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 173.761151][ T5154] Bluetooth: hci4: link tx timeout [ 173.766897][ T5154] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 173.897458][T10473] netlink: 288 bytes leftover after parsing attributes in process `syz.0.1272'. [ 173.951945][T10478] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1271'. [ 174.108656][T10485] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1275'. [ 174.177103][T10487] syzkaller1: entered promiscuous mode [ 174.182738][T10487] syzkaller1: entered allmulticast mode [ 174.290877][T10489] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1277'. [ 174.306302][T10489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1277'. [ 174.588270][ T197] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.073709][T10506] lo: entered allmulticast mode [ 175.079434][T10506] lo: left allmulticast mode [ 175.292648][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 175.305661][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 175.313889][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 175.322457][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 175.331101][ T5850] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 175.345446][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 175.402123][T10518] lo speed is unknown, defaulting to 1000 [ 175.717434][T10518] chnl_net:caif_netlink_parms(): no params data found [ 175.793539][ T5154] Bluetooth: hci4: command 0x0405 tx timeout [ 175.841620][T10518] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.849509][T10518] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.857102][T10518] bridge_slave_0: entered allmulticast mode [ 175.869050][T10518] bridge_slave_0: entered promiscuous mode [ 175.878966][T10546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1292'. [ 175.888242][T10518] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.896214][T10518] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.903688][T10518] bridge_slave_1: entered allmulticast mode [ 175.931932][T10518] bridge_slave_1: entered promiscuous mode [ 175.996241][T10548] bridge3: entered promiscuous mode [ 176.023301][T10548] bridge3: entered allmulticast mode [ 176.044073][T10548] team0: Device bridge3 is of different type [ 176.176504][T10518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.235216][T10518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.312029][T10518] team0: Port device team_slave_0 added [ 176.318785][T10568] IPVS: set_ctl: invalid protocol: 47 100.1.1.1:20002 [ 176.343622][T10518] team0: Port device team_slave_1 added [ 176.349624][T10567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1299'. [ 176.439979][T10518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.467590][T10518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.501347][T10518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.551445][ T197] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.567371][T10518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.575724][T10518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.604984][T10518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.699254][ T197] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.774854][T10575] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1301'. [ 176.828476][T10585] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1303'. [ 176.847887][T10585] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1303'. [ 176.859768][ T197] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.880938][T10518] hsr_slave_0: entered promiscuous mode [ 176.901060][T10518] hsr_slave_1: entered promiscuous mode [ 177.057541][T10590] batadv0: entered promiscuous mode [ 177.139790][T10592] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 177.383856][ T5154] Bluetooth: hci1: command tx timeout [ 177.866509][ T5154] Bluetooth: hci4: command 0x0405 tx timeout [ 178.859120][T10594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.004298][T10617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1311'. [ 179.085873][T10620] netlink: 'syz.2.1310': attribute type 13 has an invalid length. [ 179.118628][T10620] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1310'. [ 179.131845][T10620] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6) [ 179.141746][ T197] bridge_slave_1: left allmulticast mode [ 179.158126][ T197] bridge_slave_1: left promiscuous mode [ 179.193266][ T197] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.259818][ T197] bridge_slave_0: left allmulticast mode [ 179.273555][ T197] bridge_slave_0: left promiscuous mode [ 179.279501][ T197] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.324270][T10639] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1317'. [ 179.339564][T10639] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1317'. [ 179.470177][ T5850] Bluetooth: hci1: command tx timeout [ 179.797324][ T197] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.809747][ T197] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.821009][ T197] bond0 (unregistering): Released all slaves [ 179.861151][T10650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1321'. [ 180.071292][T10656] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1324'. [ 180.093671][T10658] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1325'. [ 180.317362][T10669] netlink: 'syz.4.1329': attribute type 10 has an invalid length. [ 180.330350][T10669] batman_adv: batadv0: Adding interface: vlan1 [ 180.340226][T10669] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.367395][T10669] batman_adv: batadv0: Interface activated: vlan1 [ 180.441285][T10665] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.453032][T10665] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.593751][T10665] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.620829][T10665] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.717566][ T197] hsr_slave_0: left promiscuous mode [ 180.745023][ T197] hsr_slave_1: left promiscuous mode [ 180.753212][ T197] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.761036][ T197] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.770253][ T197] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.779191][ T197] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.828177][ T197] veth1_macvtap: left promiscuous mode [ 180.857814][ T197] veth0_macvtap: left promiscuous mode [ 180.870864][ T197] veth1_vlan: left promiscuous mode [ 180.891481][ T197] veth0_vlan: left promiscuous mode [ 181.233339][ T5858] Bluetooth: hci3: command 0x0406 tx timeout [ 181.239459][ T5850] Bluetooth: hci2: command 0x0406 tx timeout [ 181.415858][ T197] team0 (unregistering): Port device team_slave_1 removed [ 181.459053][ T197] team0 (unregistering): Port device team_slave_0 removed [ 181.553054][ T5857] Bluetooth: hci1: command tx timeout [ 181.882429][T10665] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.902959][T10665] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.917355][T10683] IPVS: Error connecting to the multicast addr [ 181.929617][T10684] __nla_validate_parse: 2 callbacks suppressed [ 181.929634][T10684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1333'. [ 182.059839][T10665] bond0: (slave netdevsim0): Releasing backup interface [ 182.075447][T10665] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.089139][T10665] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.115229][T10697] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 182.172062][T10518] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 182.235231][T10518] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 182.262439][T10518] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 182.289127][T10518] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 182.380850][T10665] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.390059][T10665] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.428243][T10665] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.437719][T10665] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.471337][T10665] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.481206][T10665] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.502541][T10665] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.511742][T10665] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.615784][T10518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.668555][T10518] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.693673][ T197] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.700809][ T197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.752257][ T3547] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.759467][ T3547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.190290][T10518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.294983][T10518] veth0_vlan: entered promiscuous mode [ 183.324234][T10518] veth1_vlan: entered promiscuous mode [ 183.387216][T10518] veth0_macvtap: entered promiscuous mode [ 183.409976][T10518] veth1_macvtap: entered promiscuous mode [ 183.450560][T10518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.470410][T10518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.493000][T10518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.504691][T10518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.514874][T10518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.543468][T10518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.557124][T10518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.590464][T10518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.613439][T10518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.627623][ T5857] Bluetooth: hci1: command tx timeout [ 183.642099][T10518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.652751][T10518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.664392][T10518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.697926][T10518] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.708240][T10518] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.717305][T10518] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.733357][T10518] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.834232][T10766] netlink: 'syz.0.1355': attribute type 10 has an invalid length. [ 183.842096][T10766] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1355'. [ 183.889714][T10766] ipvlan1: entered promiscuous mode [ 183.907686][T10766] ipvlan1: entered allmulticast mode [ 183.922561][T10766] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 183.974191][T10778] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1359'. [ 184.023921][T10770] macvlan2: entered allmulticast mode [ 184.038837][T10770] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 184.053478][T10770] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 184.085033][T10770] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 184.112205][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.132213][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.208810][ T197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.239069][ T197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.288676][T10785] netlink: 'syz.4.1361': attribute type 39 has an invalid length. [ 184.406171][T10793] IPVS: wrr: SCTP 172.20.20.187:0 - no destination available [ 185.111795][T10804] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1368'. [ 185.483074][T10821] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_batadv, syncid = 0, id = 0 [ 185.499690][T10818] dvmrp5: entered allmulticast mode [ 185.509401][T10822] dvmrp5: left allmulticast mode [ 185.602322][T10828] syz.0.1375[10828] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 185.602439][T10828] syz.0.1375[10828] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 185.622419][T10828] syz.0.1375[10828] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 185.637833][T10828] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 185.711756][ T3547] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.742512][T10828] netlink: 'syz.0.1375': attribute type 1 has an invalid length. [ 185.780017][T10828] xt_check_table_hooks: 23 callbacks suppressed [ 185.780041][T10828] x_tables: duplicate underflow at hook 3 [ 185.798027][T10828] netlink: 'syz.0.1375': attribute type 10 has an invalid length. [ 185.815051][T10828] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1375'. [ 185.830694][T10828] bridge0: port 3(macvlan1) entered blocking state [ 185.838802][T10828] bridge0: port 3(macvlan1) entered disabled state [ 185.852532][T10828] macvlan1: entered allmulticast mode [ 185.859717][T10828] veth1_vlan: entered allmulticast mode [ 185.888952][T10828] macvlan1: entered promiscuous mode [ 186.371719][T10836] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 186.378576][T10837] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1377'. [ 186.432963][T10835] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 186.524066][T10843] xt_bpf: check failed: parse error [ 186.615208][ T3547] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.667575][T10847] netlink: 'syz.0.1380': attribute type 4 has an invalid length. [ 186.676439][ T5154] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 186.693210][ T5154] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 186.701875][ T5154] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 186.713398][ T5154] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 186.722338][ T5154] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 186.730888][ T5154] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 186.758871][ T3547] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.797144][T10857] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1382'. [ 186.844893][ T3547] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.887318][T10851] lo speed is unknown, defaulting to 1000 [ 186.925422][T10862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1385'. [ 187.043856][ T3547] bridge_slave_1: left allmulticast mode [ 187.049558][ T3547] bridge_slave_1: left promiscuous mode [ 187.062257][ T3547] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.190239][ T3547] bridge_slave_0: left allmulticast mode [ 187.201309][ T3547] bridge_slave_0: left promiscuous mode [ 187.250352][ T3547] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.394260][ T5154] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 187.407319][ T5154] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 187.425392][ T5154] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 187.436923][ T5154] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 187.461423][ T5154] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 187.482198][ T5154] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 187.848307][ T3547] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.859883][ T3547] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.872994][ T3547] bond0 (unregistering): Released all slaves [ 187.882450][T10868] netlink: 'syz.0.1387': attribute type 58 has an invalid length. [ 187.890591][T10868] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1387'. [ 188.050594][T10869] lo speed is unknown, defaulting to 1000 [ 188.140950][ T5898] hid-generic 0005:0C45:1010.0001: item fetching failed at offset 0/1 [ 188.168872][ T5898] hid-generic 0005:0C45:1010.0001: probe with driver hid-generic failed with error -22 [ 188.324384][T10897] netlink: 'syz.0.1393': attribute type 4 has an invalid length. [ 188.374561][T10900] netlink: 'syz.3.1395': attribute type 11 has an invalid length. [ 188.496242][T10897] lo speed is unknown, defaulting to 1000 [ 188.547530][ T3547] hsr_slave_0: left promiscuous mode [ 188.554038][ T3547] hsr_slave_1: left promiscuous mode [ 188.560348][ T3547] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.568174][ T3547] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.576560][ T3547] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.584743][ T3547] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.613599][ T3547] veth1_macvtap: left promiscuous mode [ 188.619433][ T3547] veth0_macvtap: left promiscuous mode [ 188.625368][ T3547] veth1_vlan: left promiscuous mode [ 188.630878][ T3547] veth0_vlan: left promiscuous mode [ 188.826646][ T5154] Bluetooth: hci1: command tx timeout [ 189.158411][T10910] sctp: [Deprecated]: syz.4.1398 (pid 10910) Use of int in maxseg socket option. [ 189.158411][T10910] Use struct sctp_assoc_value instead [ 189.164422][ T3547] team0 (unregistering): Port device team_slave_1 removed [ 189.220634][ T3547] team0 (unregistering): Port device team_slave_0 removed [ 189.545337][ T5154] Bluetooth: hci3: command tx timeout [ 189.663525][T10851] chnl_net:caif_netlink_parms(): no params data found [ 189.943280][T10869] chnl_net:caif_netlink_parms(): no params data found [ 190.084783][T10851] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.091919][T10851] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.114448][T10851] bridge_slave_0: entered allmulticast mode [ 190.122326][T10851] bridge_slave_0: entered promiscuous mode [ 190.172186][T10851] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.190023][T10851] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.200947][T10851] bridge_slave_1: entered allmulticast mode [ 190.211558][T10851] bridge_slave_1: entered promiscuous mode [ 190.238217][T10931] netlink: 'syz.4.1402': attribute type 1 has an invalid length. [ 190.307051][T10851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.381901][T10851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.401898][T10944] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 190.407012][T10869] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.420090][T10869] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.427622][T10869] bridge_slave_0: entered allmulticast mode [ 190.435129][T10869] bridge_slave_0: entered promiscuous mode [ 190.473214][T10869] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.480349][T10869] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.491013][T10869] bridge_slave_1: entered allmulticast mode [ 190.502645][T10869] bridge_slave_1: entered promiscuous mode [ 190.599647][T10851] team0: Port device team_slave_0 added [ 190.607742][T10851] team0: Port device team_slave_1 added [ 190.614762][T10949] infiniband syz0: set active [ 190.628266][T10949] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 190.654071][T10869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.673470][ T5898] lo speed is unknown, defaulting to 1000 [ 190.681313][T10869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.767933][ T197] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.778974][ T197] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.821678][T10851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.829128][T10851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.855501][T10851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.897497][ T197] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.908913][ T5154] Bluetooth: hci1: command tx timeout [ 190.914692][ T197] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.929938][T10851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.937413][T10851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.964024][T10851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.980964][T10869] team0: Port device team_slave_0 added [ 191.008481][ T197] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.018880][ T197] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.035972][T10869] team0: Port device team_slave_1 added [ 191.059837][T10869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.067778][T10869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.098675][T10869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.159391][ T197] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.170273][ T197] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.190068][T10869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.197384][T10869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.223829][T10869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.258904][T10851] hsr_slave_0: entered promiscuous mode [ 191.270352][T10851] hsr_slave_1: entered promiscuous mode [ 191.300614][T10869] hsr_slave_0: entered promiscuous mode [ 191.314010][T10869] hsr_slave_1: entered promiscuous mode [ 191.330014][T10869] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 191.337881][T10869] Cannot create hsr debugfs directory [ 191.398026][T10959] bridge0: port 2(gretap0) entered blocking state [ 191.406176][T10959] bridge0: port 2(gretap0) entered disabled state [ 191.413625][T10959] gretap0: entered allmulticast mode [ 191.419990][T10959] gretap0: entered promiscuous mode [ 191.426849][T10959] bridge0: port 2(gretap0) entered blocking state [ 191.433807][T10959] bridge0: port 2(gretap0) entered forwarding state [ 191.557398][ T197] bridge_slave_1: left allmulticast mode [ 191.564543][ T197] bridge_slave_1: left promiscuous mode [ 191.571322][ T197] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.582788][ T197] bridge_slave_0: left allmulticast mode [ 191.588727][ T197] bridge_slave_0: left promiscuous mode [ 191.594823][ T197] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.623343][ T5154] Bluetooth: hci3: command tx timeout [ 191.735725][T10971] netlink: 'syz.3.1411': attribute type 1 has an invalid length. [ 191.874928][ T197] dvmrp0 (unregistering): left allmulticast mode [ 192.329967][ T197] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.341358][ T197] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.369819][ T197] bond0 (unregistering): Released all slaves [ 192.384131][ T197] bond1 (unregistering): Released all slaves [ 192.546116][ T197] bond2 (unregistering): Released all slaves [ 192.559176][ T197] bond3 (unregistering): Released all slaves [ 192.569614][ T197] bond4 (unregistering): Released all slaves [ 192.580923][ T197] bond5 (unregistering): Released all slaves [ 192.970565][T10992] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1417'. [ 192.979927][T10992] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1417'. [ 192.989057][ T5154] Bluetooth: hci1: command tx timeout [ 193.240673][ T197] hsr_slave_0: left promiscuous mode [ 193.249772][ T197] hsr_slave_1: left promiscuous mode [ 193.263297][ T197] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.279996][ T197] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.301342][ T197] veth1_macvtap: left promiscuous mode [ 193.323361][ T197] veth0_macvtap: left promiscuous mode [ 193.332467][ T197] veth1_vlan: left promiscuous mode [ 193.339380][ T197] veth0_vlan: left promiscuous mode [ 193.703376][ T5154] Bluetooth: hci3: command tx timeout [ 194.162991][T11014] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1421'. [ 194.509375][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.742170][T11044] tipc: Enabled bearer , priority 10 [ 194.771679][T10869] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 194.795517][T10869] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 194.810907][T10869] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 194.835781][T10869] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 194.946420][T10851] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 194.981797][T10851] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 194.996262][T10851] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 195.011951][T11061] netlink: 'syz.3.1434': attribute type 10 has an invalid length. [ 195.021224][T10851] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 195.063537][ T5154] Bluetooth: hci1: command tx timeout [ 195.198576][T10869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.219415][T11065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1435'. [ 195.314454][T10869] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.359114][ T3547] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.366317][ T3547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.377930][ T3547] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.385094][ T3547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.458106][T10851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.506077][T10851] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.528412][T11073] xt_connbytes: Forcing CT accounting to be enabled [ 195.546715][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.553924][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.590700][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.597907][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.796314][ T5154] Bluetooth: hci3: command tx timeout [ 195.842102][T10869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.902127][T10869] veth0_vlan: entered promiscuous mode [ 195.936522][T10869] veth1_vlan: entered promiscuous mode [ 195.994706][T10851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.011263][T10869] veth0_macvtap: entered promiscuous mode [ 196.046619][T10869] veth1_macvtap: entered promiscuous mode [ 196.082578][T10869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.097726][T10869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.108909][T10869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.119732][T10869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.131267][T10869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.156865][T11090] Unknown status report in ack skb [ 196.157809][T10851] veth0_vlan: entered promiscuous mode [ 196.181623][T10869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.202436][T10869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.212689][T10869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.223532][T10869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.238640][T10869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.259600][T10851] veth1_vlan: entered promiscuous mode [ 196.281701][T10869] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.291187][T10869] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.300453][T10869] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.312001][T10869] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.336737][T11101] tipc: Can't bind to reserved service type 0 [ 196.385183][T10851] veth0_macvtap: entered promiscuous mode [ 196.434620][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.452970][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.474425][T10851] veth1_macvtap: entered promiscuous mode [ 196.519383][ T3547] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.539466][T10851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.551237][ T3547] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.553324][T10851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.570018][T10851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.581760][T10851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.595893][T10851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.607588][T10851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.619361][T10851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.652167][T10851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.666260][T10851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.676694][T10851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.688144][T10851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.701042][T10851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.712162][T10851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.734726][T10851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.753828][T10851] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.762622][T10851] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.772592][T10851] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.781379][T10851] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.895803][T11113] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1446'. [ 196.953253][T11115] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1447'. [ 196.963820][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.964765][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.971646][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.000452][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.005960][T11115] bond0: left promiscuous mode [ 197.166479][T11123] netlink: 'syz.4.1450': attribute type 298 has an invalid length. [ 197.207995][T11126] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1451'. [ 197.228021][T11126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1451'. [ 197.239715][T11126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1451'. [ 197.456668][ T197] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.739777][ T5857] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 197.750573][ T5857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 197.759428][ T5857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 197.769010][ T5857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 197.787617][ T5857] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 197.795268][ T5857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 197.836442][T11142] lo speed is unknown, defaulting to 1000 [ 198.129845][ T197] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.206788][T11142] chnl_net:caif_netlink_parms(): no params data found [ 198.257372][T11158] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1459'. [ 198.282079][T11158] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1459'. [ 198.367572][T11142] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.380916][T11142] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.390633][T11142] bridge_slave_0: entered allmulticast mode [ 198.403650][T11142] bridge_slave_0: entered promiscuous mode [ 198.431276][T11142] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.438646][T11142] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.446707][T11142] bridge_slave_1: entered allmulticast mode [ 198.454003][T11142] bridge_slave_1: entered promiscuous mode [ 198.486931][T11142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.498257][T11142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.528471][T11142] team0: Port device team_slave_0 added [ 198.538489][T11142] team0: Port device team_slave_1 added [ 198.573904][T11142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.580887][T11142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.607226][T11142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.619970][T11142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.627256][T11142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.654301][T11142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.690168][T11142] hsr_slave_0: entered promiscuous mode [ 198.696568][T11142] hsr_slave_1: entered promiscuous mode [ 198.702609][T11142] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.710404][T11142] Cannot create hsr debugfs directory [ 198.789195][ T197] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.862023][ T197] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.952512][ T197] bridge_slave_1: left allmulticast mode [ 198.963286][ T197] bridge_slave_1: left promiscuous mode [ 198.968981][ T197] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.978913][ T197] bridge_slave_0: left allmulticast mode [ 198.985693][ T197] bridge_slave_0: left promiscuous mode [ 198.991396][ T197] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.242294][T11168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1462'. [ 199.265106][ T5857] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 199.275211][ T5857] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 199.284643][ T5857] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 199.305147][ T5857] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 199.320382][ T5857] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 199.333642][ T5857] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 199.410273][T11176] netlink: 'syz.0.1462': attribute type 11 has an invalid length. [ 199.618595][ T197] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.661306][ T197] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.681786][ T197] bond0 (unregistering): Released all slaves [ 199.729115][T11173] bridge: RTM_NEWNEIGH with invalid ether address [ 199.864828][ T5154] Bluetooth: hci1: command tx timeout [ 199.883276][T11169] lo speed is unknown, defaulting to 1000 [ 200.631880][ T197] hsr_slave_0: left promiscuous mode [ 200.656412][ T197] hsr_slave_1: left promiscuous mode [ 200.662605][ T197] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.682632][ T197] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.689907][T11191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1466'. [ 200.689930][T11191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1466'. [ 200.715016][ T197] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.722441][ T197] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.746906][ T197] veth1_macvtap: left promiscuous mode [ 200.752471][ T197] veth0_macvtap: left promiscuous mode [ 200.758370][ T197] veth1_vlan: left promiscuous mode [ 200.763882][ T197] veth0_vlan: left promiscuous mode [ 201.201836][ T197] team0 (unregistering): Port device team_slave_1 removed [ 201.244995][ T197] team0 (unregistering): Port device team_slave_0 removed [ 201.383697][ T5154] Bluetooth: hci3: command tx timeout [ 201.727646][T11142] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 201.752499][T11142] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 201.793710][T11195] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1467'. [ 201.801434][T11142] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 201.821232][T11169] chnl_net:caif_netlink_parms(): no params data found [ 201.848268][T11142] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 201.944084][ T5154] Bluetooth: hci1: command tx timeout [ 202.040866][T11205] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1470'. [ 202.070425][T11169] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.082422][T11169] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.090054][T11169] bridge_slave_0: entered allmulticast mode [ 202.097623][T11169] bridge_slave_0: entered promiscuous mode [ 202.114221][T11169] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.122436][T11169] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.131766][T11169] bridge_slave_1: entered allmulticast mode [ 202.140352][T11169] bridge_slave_1: entered promiscuous mode [ 202.218056][T11169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.255297][T11169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.357814][T11169] team0: Port device team_slave_0 added [ 202.408604][ T197] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.428783][T11169] team0: Port device team_slave_1 added [ 202.448532][T11217] batman_adv: batadv0: Adding interface: dummy0 [ 202.455362][T11217] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.482642][T11217] batman_adv: batadv0: Interface activated: dummy0 [ 202.551476][ T197] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.577451][T11225] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1478'. [ 202.614748][T11169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.621736][T11169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.649161][T11169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.662288][T11169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.669826][T11169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.698423][T11169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.768716][ T197] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.847586][T11142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.898746][ T5898] IPVS: starting estimator thread 0... [ 202.907459][ T197] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.921751][T11232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1479'. [ 202.935622][T11234] tipc: Enabling of bearer rejected, already enabled [ 202.963248][T11235] tipc: Enabling of bearer rejected, already enabled [ 202.977343][T11169] hsr_slave_0: entered promiscuous mode [ 202.984850][T11169] hsr_slave_1: entered promiscuous mode [ 202.991671][T11169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.000367][T11169] Cannot create hsr debugfs directory [ 203.003266][T11236] IPVS: using max 19 ests per chain, 45600 per kthread [ 203.017030][T11142] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.054018][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.061189][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.112850][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.119972][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.294138][ T197] bridge_slave_1: left allmulticast mode [ 203.299845][ T197] bridge_slave_1: left promiscuous mode [ 203.315173][ T197] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.332620][ T197] bridge_slave_0: left allmulticast mode [ 203.346793][ T197] bridge_slave_0: left promiscuous mode [ 203.352562][ T197] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.361607][T11253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1485'. [ 203.382671][T11253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1485'. [ 203.474047][ T5154] Bluetooth: hci3: command tx timeout [ 203.756564][ T197] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.768794][ T197] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.780289][ T197] bond0 (unregistering): Released all slaves [ 204.039163][ T5154] Bluetooth: hci1: command tx timeout [ 204.078721][T11265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1489'. [ 204.157890][T11142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.305254][T11142] veth0_vlan: entered promiscuous mode [ 204.317237][T11142] veth1_vlan: entered promiscuous mode [ 204.338923][T11142] veth0_macvtap: entered promiscuous mode [ 204.352998][T11142] veth1_macvtap: entered promiscuous mode [ 204.420688][T11142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.444567][T11142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.454888][T11142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.478572][T11142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.503855][T11142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.521851][T11142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.557097][T11142] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.608062][T11274] infiniband syz0: set active [ 204.619840][T11274] batman_adv: batadv0: Interface deactivated: dummy0 [ 204.636350][T11274] batman_adv: batadv0: Removing interface: dummy0 [ 204.657703][T11274] team0: Port device wg2 removed [ 204.677165][T11274] batman_adv: batadv0: Interface deactivated: vlan1 [ 204.684087][T11274] batman_adv: batadv0: Removing interface: vlan1 [ 204.701453][T11277] netlink: 'syz.4.1488': attribute type 10 has an invalid length. [ 204.710327][T11277] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1488'. [ 204.719638][T11277] team0: entered promiscuous mode [ 204.725196][T11277] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.758415][ T197] hsr_slave_0: left promiscuous mode [ 204.779676][ T197] hsr_slave_1: left promiscuous mode [ 204.794309][ T197] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.801764][ T197] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.817804][ T197] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.827308][ T197] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.854420][ T197] veth1_macvtap: left promiscuous mode [ 204.859980][ T197] veth0_macvtap: left promiscuous mode [ 204.866368][ T197] veth1_vlan: left promiscuous mode [ 204.871972][ T197] veth0_vlan: left promiscuous mode [ 204.967152][T11285] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1492'. [ 205.368662][ T197] team0 (unregistering): Port device team_slave_1 removed [ 205.412523][ T197] team0 (unregistering): Port device team_slave_0 removed [ 205.549550][ T5154] Bluetooth: hci3: command tx timeout [ 205.850560][ T5938] lo speed is unknown, defaulting to 1000 [ 205.853890][T11142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.867674][T11142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.877774][T11142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.888996][T11142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.900329][T11142] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.953888][T11142] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.963913][T11142] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.972650][T11142] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.981742][T11142] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.075920][T11293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1495'. [ 206.106468][T11169] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 206.120312][ T5154] Bluetooth: hci1: command tx timeout [ 206.128172][T11169] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 206.192429][T11169] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 206.210252][T11169] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 206.428568][T11298] bond0 (unregistering): Error: No native XDP support for the current bonding mode [ 206.438943][T11298] ------------[ cut here ]------------ [ 206.444961][T11298] WARNING: CPU: 1 PID: 11298 at net/core/dev.c:9530 unregister_netdevice_many_notify+0x18c8/0x1da0 [ 206.455866][T11298] Modules linked in: [ 206.457903][T11304] xt_CONNSECMARK: invalid mode: 3 [ 206.459775][T11298] CPU: 1 UID: 0 PID: 11298 Comm: syz.4.1497 Not tainted 6.12.0-rc5-syzkaller-01056-gf07a6e6ceb05 #0 [ 206.459803][T11298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 206.486046][T11298] RIP: 0010:unregister_netdevice_many_notify+0x18c8/0x1da0 [ 206.493442][T11298] Code: fe f7 90 0f 0b 90 e9 4f ff ff ff e8 e2 ca fe f7 90 0f 0b 90 eb 9d e8 d7 ca fe f7 90 0f 0b 90 e9 e8 f1 ff ff e8 c9 ca fe f7 90 <0f> 0b 90 e9 5a f3 ff ff e8 bb ca fe f7 90 0f 0b 90 e9 cd f4 ff ff [ 206.513694][T11298] RSP: 0018:ffffc9000347efc0 EFLAGS: 00010287 [ 206.519810][T11298] RAX: ffffffff89960f57 RBX: 00000000ffffffa1 RCX: 0000000000040000 [ 206.527912][T11298] RDX: ffffc9000b5a1000 RSI: 0000000000004039 RDI: 000000000000403a [ 206.536108][T11298] RBP: ffffc9000347f1b0 R08: ffffffff899602ad R09: fffffbfff1cf9fd0 [ 206.544217][T11298] R10: dffffc0000000000 R11: fffffbfff1cf9fd0 R12: ffffc9000a81d000 [ 206.552214][T11298] R13: 1ffff1100cc84185 R14: ffff888066420c28 R15: ffff888066420c20 [ 206.560283][T11298] FS: 00007fe439a926c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 206.569290][T11298] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 206.576003][T11298] CR2: 00007f514a9f3c28 CR3: 000000006c748000 CR4: 00000000003526f0 [ 206.584132][T11298] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 206.592122][T11298] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 206.600274][T11298] Call Trace: [ 206.603691][T11298] [ 206.606649][T11298] ? __warn+0x168/0x4e0 [ 206.610834][T11298] ? unregister_netdevice_many_notify+0x18c8/0x1da0 [ 206.617530][T11298] ? report_bug+0x2b3/0x500 [ 206.622057][T11298] ? unregister_netdevice_many_notify+0x18c8/0x1da0 [ 206.628753][T11298] ? handle_bug+0x60/0x90 [ 206.633294][T11298] ? exc_invalid_op+0x1a/0x50 [ 206.638109][T11298] ? asm_exc_invalid_op+0x1a/0x20 [ 206.643234][T11298] ? unregister_netdevice_many_notify+0xc1d/0x1da0 [ 206.649741][T11298] ? unregister_netdevice_many_notify+0x18c7/0x1da0 [ 206.656414][T11298] ? unregister_netdevice_many_notify+0x18c8/0x1da0 [ 206.663476][T11298] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 206.669518][T11298] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 206.676475][T11298] ? unregister_netdevice_queue+0x26b/0x370 [ 206.682393][T11298] ? __nla_parse+0x40/0x60 [ 206.686923][T11298] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 206.693305][T11298] rtnl_dellink+0x51d/0x8c0 [ 206.697838][T11298] ? mark_lock+0x9a/0x360 [ 206.702188][T11298] ? __pfx_rtnl_dellink+0x10/0x10 [ 206.707325][T11298] ? __pfx___mutex_lock+0x10/0x10 [ 206.712355][T11298] ? __pfx_rtnl_dellink+0x10/0x10 [ 206.717468][T11298] rtnetlink_rcv_msg+0x73f/0xcf0 [ 206.722422][T11298] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 206.727726][T11298] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 206.733326][T11298] ? ref_tracker_free+0x643/0x7e0 [ 206.738360][T11298] netlink_rcv_skb+0x1e3/0x430 [ 206.743493][T11298] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 206.749001][T11298] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 206.754441][T11298] ? netlink_deliver_tap+0x2e/0x1b0 [ 206.759676][T11298] netlink_unicast+0x7f6/0x990 [ 206.764554][T11298] ? __pfx_netlink_unicast+0x10/0x10 [ 206.769865][T11298] ? __virt_addr_valid+0x183/0x530 [ 206.775089][T11298] ? __check_object_size+0x48e/0x900 [ 206.780381][T11298] netlink_sendmsg+0x8e4/0xcb0 [ 206.785260][T11298] ? __pfx_netlink_sendmsg+0x10/0x10 [ 206.790577][T11298] ? aa_sock_msg_perm+0x91/0x160 [ 206.795655][T11298] ? __pfx_netlink_sendmsg+0x10/0x10 [ 206.800974][T11298] __sock_sendmsg+0x221/0x270 [ 206.805760][T11298] ____sys_sendmsg+0x52a/0x7e0 [ 206.810551][T11298] ? __pfx_____sys_sendmsg+0x10/0x10 [ 206.816030][T11298] __sys_sendmsg+0x292/0x380 [ 206.820666][T11298] ? __pfx___sys_sendmsg+0x10/0x10 [ 206.826202][T11298] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 206.832566][T11298] ? do_syscall_64+0x100/0x230 [ 206.837479][T11298] ? do_syscall_64+0xb6/0x230 [ 206.842251][T11298] do_syscall_64+0xf3/0x230 [ 206.846907][T11298] ? clear_bhb_loop+0x35/0x90 [ 206.851597][T11298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.857567][T11298] RIP: 0033:0x7fe438d7e719 [ 206.861994][T11298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.881710][T11298] RSP: 002b:00007fe439a92038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 206.890252][T11298] RAX: ffffffffffffffda RBX: 00007fe438f35f80 RCX: 00007fe438d7e719 [ 206.898367][T11298] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000008 [ 206.906557][T11298] RBP: 00007fe438df132e R08: 0000000000000000 R09: 0000000000000000 [ 206.914686][T11298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.922701][T11298] R13: 0000000000000000 R14: 00007fe438f35f80 R15: 00007fffaea1a378 [ 206.930821][T11298] [ 206.933969][T11298] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 206.941260][T11298] CPU: 1 UID: 0 PID: 11298 Comm: syz.4.1497 Not tainted 6.12.0-rc5-syzkaller-01056-gf07a6e6ceb05 #0 [ 206.952032][T11298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 206.962088][T11298] Call Trace: [ 206.965368][T11298] [ 206.968296][T11298] dump_stack_lvl+0x241/0x360 [ 206.972983][T11298] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.978204][T11298] ? __pfx__printk+0x10/0x10 [ 206.982800][T11298] ? vscnprintf+0x5d/0x90 [ 206.987132][T11298] panic+0x349/0x880 [ 206.991031][T11298] ? __warn+0x177/0x4e0 [ 206.995190][T11298] ? __pfx_panic+0x10/0x10 [ 206.999628][T11298] __warn+0x34b/0x4e0 [ 207.003611][T11298] ? unregister_netdevice_many_notify+0x18c8/0x1da0 [ 207.010211][T11298] report_bug+0x2b3/0x500 [ 207.014542][T11298] ? unregister_netdevice_many_notify+0x18c8/0x1da0 [ 207.021137][T11298] handle_bug+0x60/0x90 [ 207.025292][T11298] exc_invalid_op+0x1a/0x50 [ 207.029789][T11298] asm_exc_invalid_op+0x1a/0x20 [ 207.034648][T11298] RIP: 0010:unregister_netdevice_many_notify+0x18c8/0x1da0 [ 207.041845][T11298] Code: fe f7 90 0f 0b 90 e9 4f ff ff ff e8 e2 ca fe f7 90 0f 0b 90 eb 9d e8 d7 ca fe f7 90 0f 0b 90 e9 e8 f1 ff ff e8 c9 ca fe f7 90 <0f> 0b 90 e9 5a f3 ff ff e8 bb ca fe f7 90 0f 0b 90 e9 cd f4 ff ff [ 207.061474][T11298] RSP: 0018:ffffc9000347efc0 EFLAGS: 00010287 [ 207.067555][T11298] RAX: ffffffff89960f57 RBX: 00000000ffffffa1 RCX: 0000000000040000 [ 207.075526][T11298] RDX: ffffc9000b5a1000 RSI: 0000000000004039 RDI: 000000000000403a [ 207.083497][T11298] RBP: ffffc9000347f1b0 R08: ffffffff899602ad R09: fffffbfff1cf9fd0 [ 207.091465][T11298] R10: dffffc0000000000 R11: fffffbfff1cf9fd0 R12: ffffc9000a81d000 [ 207.099437][T11298] R13: 1ffff1100cc84185 R14: ffff888066420c28 R15: ffff888066420c20 [ 207.107418][T11298] ? unregister_netdevice_many_notify+0xc1d/0x1da0 [ 207.113926][T11298] ? unregister_netdevice_many_notify+0x18c7/0x1da0 [ 207.120531][T11298] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 207.126516][T11298] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 207.133284][T11298] ? unregister_netdevice_queue+0x26b/0x370 [ 207.139185][T11298] ? __nla_parse+0x40/0x60 [ 207.143608][T11298] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 207.149881][T11298] rtnl_dellink+0x51d/0x8c0 [ 207.154388][T11298] ? mark_lock+0x9a/0x360 [ 207.158720][T11298] ? __pfx_rtnl_dellink+0x10/0x10 [ 207.163787][T11298] ? __pfx___mutex_lock+0x10/0x10 [ 207.168812][T11298] ? __pfx_rtnl_dellink+0x10/0x10 [ 207.173835][T11298] rtnetlink_rcv_msg+0x73f/0xcf0 [ 207.178773][T11298] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 207.183887][T11298] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 207.189352][T11298] ? ref_tracker_free+0x643/0x7e0 [ 207.194378][T11298] netlink_rcv_skb+0x1e3/0x430 [ 207.199145][T11298] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 207.204606][T11298] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 207.209908][T11298] ? netlink_deliver_tap+0x2e/0x1b0 [ 207.215109][T11298] netlink_unicast+0x7f6/0x990 [ 207.219878][T11298] ? __pfx_netlink_unicast+0x10/0x10 [ 207.225161][T11298] ? __virt_addr_valid+0x183/0x530 [ 207.230272][T11298] ? __check_object_size+0x48e/0x900 [ 207.235560][T11298] netlink_sendmsg+0x8e4/0xcb0 [ 207.240329][T11298] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.245619][T11298] ? aa_sock_msg_perm+0x91/0x160 [ 207.250565][T11298] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.255852][T11298] __sock_sendmsg+0x221/0x270 [ 207.260538][T11298] ____sys_sendmsg+0x52a/0x7e0 [ 207.265307][T11298] ? __pfx_____sys_sendmsg+0x10/0x10 [ 207.270602][T11298] __sys_sendmsg+0x292/0x380 [ 207.275213][T11298] ? __pfx___sys_sendmsg+0x10/0x10 [ 207.280354][T11298] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 207.286685][T11298] ? do_syscall_64+0x100/0x230 [ 207.291449][T11298] ? do_syscall_64+0xb6/0x230 [ 207.296128][T11298] do_syscall_64+0xf3/0x230 [ 207.300637][T11298] ? clear_bhb_loop+0x35/0x90 [ 207.305316][T11298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.311213][T11298] RIP: 0033:0x7fe438d7e719 [ 207.315629][T11298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.335232][T11298] RSP: 002b:00007fe439a92038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.343655][T11298] RAX: ffffffffffffffda RBX: 00007fe438f35f80 RCX: 00007fe438d7e719 [ 207.351799][T11298] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000008 [ 207.359770][T11298] RBP: 00007fe438df132e R08: 0000000000000000 R09: 0000000000000000 [ 207.367741][T11298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.375708][T11298] R13: 0000000000000000 R14: 00007fe438f35f80 R15: 00007fffaea1a378 [ 207.383691][T11298] [ 207.386964][T11298] Kernel Offset: disabled [ 207.391281][T11298] Rebooting in 86400 seconds..