last executing test programs: 2.313569895s ago: executing program 3 (id=2502): unshare(0x68040200) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_icmp(0x2, 0x2, 0x1) 2.292107779s ago: executing program 0 (id=2503): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000004c0)=[{}, {0x1}], 0x10, 0x0, @void, @value}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000e80)={'ip6tnl0\x00', &(0x7f0000000e00)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x81, 0x5c04, 0x4, @remote, @private1, 0x7800, 0x7, 0x9, 0x7}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000ec0)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) r6 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_delneigh={0x24, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r5, 0x0, 0x67}, [@NDA_IFINDEX={0x8, 0x8, r7}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000f00)={'veth0_vlan\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000f40)=0x0, &(0x7f0000000f80)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000fc0)={'team0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000001000)={@multicast1, @broadcast, 0x0}, &(0x7f0000001040)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001c00)={&(0x7f0000000180), 0xc, &(0x7f0000001bc0)={&(0x7f0000001080)={0xb30, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [{{0x8}, {0x4}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc4, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfb7}}, {0x8}}}]}}, {{0x8}, {0x1fc, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x29}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x7, 0x0, 0x99, 0x4}, {0xc900, 0x7, 0x9, 0x8}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1ac, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xa}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100000}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8}, {0x1f8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd3d4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6cd}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0x204, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x1000, 0x1, 0x1}, {0x5, 0x2, 0x31, 0x101}, {0xfff, 0x9, 0x2, 0xb73}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x2, 0x7f, 0xfe, 0x8000}, {0x6, 0x80, 0x80, 0x3}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xae}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0xb30}, 0x1, 0x0, 0x0, 0x10}, 0x8004) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000001100000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000840)=ANY=[@ANYRES32=r14, @ANYRES32=r13, @ANYBLOB="070000070000000000000000cc5a40827ecb699fdb2ea6c19d6a91eec690634ee0bb25e6941fdfeaffe79392fa2e26e7e364e0fae80f9edc60900a637094c6039fe68df86b691a5c2557098c73be7032dd5c5a7614eac3fbda1ef531b4bfa14a087bd9bbebda8ad117e616beaf5befc5ee75a485db4ca1e221a86749cae6e0ce9d1c0817df95dc588cc9c2ef2945b3f039aa64efd0eb69d9155e0d99f9df9a6bdf2da23901c96a0c8f150f906c3f6e5356da7490087aad143363a4f62020185643c308866dc64dae5f56d4374622b370a92df8383b2c0b20290fbe8382e1767042c51d77e8a9c0e5cca35b4bc4779813457da95b", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r14, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r12}, 0x20) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0xc3ff}, 0x1, 0x0, 0x0, 0x40}, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000002340)={'xfrm0\x00', 0x0}) r17 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r17, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000010000110000100000475000000000000", @ANYRES32=r16, @ANYBLOB="da"], 0x20}}, 0x0) sendmsg$nl_route(r17, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000010000104005540000000000000480000", @ANYRES32=r16, @ANYBLOB='\v'], 0x20}}, 0x0) r18 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000090000000c0000000c000000020708000000000000000004000000000000"], &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r18, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x800000}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.047238748s ago: executing program 0 (id=2508): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'lo\x00', 0x0}) r3 = socket$kcm(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_TIMEOUT={0xc}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xd8}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800786a00"/28, @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90224fc60100c034002000600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0xb}, {0x6, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x0, "baa32ad2976d1307d6faf33ee3a49671"}}}]}, 0x48}}, 0x8804) 1.852920905s ago: executing program 0 (id=2511): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async, rerun: 64) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x18, 0x23, 0x713, 0x0, 0x0, {0x11}, [@typed={0x4, 0x13a, 0x0, 0x0, @binary}]}, 0x18}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, &(0x7f00000004c0)='N', 0x0}, 0x50) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$igmp(0x2, 0x3, 0x2) (async, rerun: 32) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x1f4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0xce00}, 0x50) (async, rerun: 64) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0xb001, 0x4, 0x3d0, 0x1f8, 0x1f8, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0x35}}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="3ff825ec284a", @mac=@broadcast, @private=0xa010102, @rand_addr=0x64010101, 0x5, 0x11}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 'pim6reg0\x00', 'netpci0\x00'}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) (async, rerun: 64) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r6}, 0x10) (async, rerun: 64) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8000000000000001, 0x0) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x55}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0xc01, 0x3, 0x480, 0x2e8, 0x5002004a, 0x6, 0x2e8, 0x3, 0x3e8, 0x3c8, 0x3c8, 0x3e8, 0x3c8, 0x7fffffe, 0x0, {[{{@ip={@dev, @broadcast=0xfeffffff, 0x0, 0x0, 'hsr0\x00', 'bridge0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x0, 0x3fa}, [@common=@unspec=@bpf1={{0x230}, @fd}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@inet=@udp={{0x30}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4e0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='vm_unmapped_area\x00', r3, 0x0, 0x4}, 0x18) 1.852236424s ago: executing program 2 (id=2512): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000000001000000000000e0ffffffffffffff180001801400018008000100ac1414bb08000200ac0314bb2400028014000180080001000900000000000000ac1414000c0002"], 0x50}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000003"], 0x24d8}], 0x1, 0x0, 0xffffffffffffffdb, 0x1}, 0x0) 1.666075902s ago: executing program 2 (id=2514): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=@newqdisc={0x24, 0x24, 0x0, 0x2000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff9}}}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x200, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0x1}, {0x8}}}, 0x24}}, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000c, 0x2010, r0, 0x871af000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002b00)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {}, {0x1c, 0xe}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_EMATCHES={0x4}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000018c0)=@nat={'nat\x00', 0x670, 0x5, 0x3f0, 0xa8, 0xa8, 0xfeffffff, 0x1b8, 0x288, 0x358, 0x358, 0xffffffff, 0x358, 0x358, 0x5, 0x0, {[{{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'vlan1\x00'}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x13, @rand_addr, @empty, @port, @icmp_id}}}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@set={{0x40}}, @common=@ttl={{0x28}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @loopback}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'veth1_to_bridge\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'batadv_slave_1\x00', 'veth0_to_bond\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "d2be"}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @multicast2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) 1.563358736s ago: executing program 2 (id=2516): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x800) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000100)=0x80000000, 0x4) (async) socket$netlink(0x10, 0x3, 0xe) sendmsg$nl_route_sched(r0, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_bpf={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) 1.513872455s ago: executing program 1 (id=2517): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) syz_emit_ethernet(0xbe, &(0x7f00000005c0)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @dev, {[@cipso={0x86, 0x3e, 0x0, [{0x0, 0x5, "66d281"}, {0x0, 0x11, "6f03057a91f875ccf5bd5d0a5b319a"}, {0x0, 0x10, "6253659c41d7d6a461f45f9d37fa"}, {0x0, 0x3, "91"}, {0x0, 0x7, "ccb3e82d2e"}, {0x0, 0x8, "a33b7a6b9500"}]}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private}, {@private}, {}, {@remote}, {@private}, {@remote}, {@private}]}]}}}}}}}, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0xe0002003}) epoll_pwait(r3, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETGEN(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14}, 0x14}}, 0x0) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x13, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x812, r0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT(r4, 0x89e1, &(0x7f0000001880)={@remote, @multicast1}) r5 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x13, r5, 0x0) syz_emit_ethernet(0xc6, &(0x7f00000003c0)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb8, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x27, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @dev, {[@cipso={0x86, 0x49, 0x0, [{0x0, 0x5, "66d281"}, {0x0, 0x36, "6f03057a91f875ccf5bd5d0a5b319a"}, {0x0, 0x10, "6253659c41d7cea461f45f9d37fa"}, {0x0, 0x3, "91"}, {0x0, 0x12, "ccb3e82d2ea24a7b56eb3299d0d03ab6"}, {0x0, 0x8, "a33b7a6b9500"}, {0x0, 0x0, "587cb00c5a1f88fd31733c92fa15"}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private}, {@private}, {@rand_addr, 0x8828}, {@remote}, {@private}, {@remote}, {@private}]}]}}}}}}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'veth0_to_hsr\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000000)={r7, 0x1, 0x6}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000000000000002eeed88696", @ANYRES32=r7], 0x20}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x40, 0x10, 0x609, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x0) close(0x4) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="fcdd"], 0x48}}, 0x400400c0) sendmmsg$alg(r10, &(0x7f00000000c0), 0x492492492492627, 0x0) 1.370100806s ago: executing program 0 (id=2518): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0x0) r3 = epoll_create(0x400) pipe(&(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r5, 0x0, 0x0, 0x2000, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000500)) read$alg(r4, &(0x7f0000000040)=""/109, 0x6d) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='\b', @ANYRES16=r7, @ANYBLOB="17090000000000000000010000000500070000000000080009000000000014002000ff06000000000000000000000000000108000a0000000000060002000100000014001f0000000000000000000000ffffffffffff"], 0x5c}}, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r8, 0xb37ad000) 1.357371913s ago: executing program 2 (id=2519): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r4, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x20, r0, 0xa09, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x20}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r7}, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r8}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={&(0x7f0000000880)="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", &(0x7f0000000340)=""/126, &(0x7f0000000440)="4030b4f39b2900b198eedb2810a8933ad7db1d2b50c27852623d0f0b51751e755e151ec8f5f4c1f53dbd4d7ed75556f210cf4bfa37754c9a28da9aec2f4ac9dcdcac4f39e421d5db08cffac039b9be7f1c4cbbb7c640f746aa046e9b7343bb3ebec7efabc0cbf307191329d2184dfe3041797c98bcc0b53a30d2db7cc3be9319230746ddd5d88768c4e05fc45c8eaa7b088751ae3903725f7d461029ed947e309c4c7f6f33dd8530ae2bdac625c707bd9bacfe65f9a5e9a5fa2849655148c52738a90f5cd17877452d1a316dd39e9229799edd84e9e83cef509adfa17fac4351e200deacd5e46f3d8df58c54d4", &(0x7f0000000540)="32197c9e572c3ec9a840f796b0cc6ffb34ef19a29ba3512bc07aec36506e565388ad35a5132c9a4cc66eec4615c17244bf9be9daaa6c83c6affb616f58a094b64f256dd84c1743f6827b45782f5582f974c364e6ddbfc66a6a5948c4a66cbc8cd03f7e6736a26e6ad9537997fb31806b4335023a584106e358446343", 0x3, r6, 0x4}, 0x38) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r9, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@cswp={0x58, 0x114, 0x7, {{}, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7}}], 0x58}, 0x0) 1.22909021s ago: executing program 1 (id=2521): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="380100001000330603000000fdffffffffffffff0000000000000000000000006401010100000000000000000000000000000000000000000200806000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8800000000000000000000000000010000000032000000fc00000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000026bd7000000000000a"], 0x138}}, 0x4000000) r2 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000040)={r5, r6/1000+10000}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x58}}, 0x0) 979.838943ms ago: executing program 3 (id=2522): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r2, &(0x7f0000000180)="0c5a354c978866cddf8d3e2bbd6826da96dcdf66803e3d23838766084f55047e193e0934450915011a17bba76b7913e78f7641e5d9d5e42c757bc33bbe8453ef8929f0585b5965f75a86", &(0x7f00000002c0)=""/163}, 0x20) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x50}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_CLASS={0x6}}}}]}, 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000380)={0x48, r3, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8, 0xa}}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xc, 0x2}}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0xb0}, @NL80211_ATTR_BSSID={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x40000) 890.29933ms ago: executing program 4 (id=2523): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x12, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0xd, 0x4, 0x0, 0xfffffffffffffffc}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0xc3, &(0x7f0000000100)=""/195, 0x41000, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xc, 0xea, 0x401}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r0, r1, r0, r0, r1, r1, r0], 0x0, 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@fallback=r0, 0x1f, 0x1, 0xd, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0], &(0x7f00000004c0)=[0x0], 0x0}, 0x40) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000580)='syz1\x00', 0x200002, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000005c0)={0x4b9c, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={@cgroup=r4, r2, 0x8, 0x2020, 0x0, @void, @void, @value=r5, @void, r3}, 0x20) socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000bf020000000000007b9af8ff00000000b609080089ffffff7baaf0ff00000000bf8700000000000007090000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004600020076004000bf980000000000007e080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 814.230644ms ago: executing program 1 (id=2524): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x4000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x7, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB="04000006", @ANYRES16=r0, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r4, @ANYBLOB="0500030001000000"], 0x28}}, 0x0) 801.142149ms ago: executing program 2 (id=2525): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000100)=@req3, 0x1c) getsockopt$inet_int(r3, 0x0, 0x12, 0x0, &(0x7f0000000700)) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)=ANY=[@ANYBLOB="280000000008010200000000000000000a0000050900010073787a110000000106000240809b0000"], 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRESHEX=r0, @ANYRESHEX=r5, @ANYRES32=r5, @ANYRESOCT=r1], 0x44}}, 0x0) r6 = syz_genetlink_get_family_id$auto(&(0x7f0000000040)='?*\'\x00', r0) sendmsg$autorun(r0, &(0x7f00000002c0)=@policy208={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x54, r6, 0x300, 0x70bd27, 0x25dfdbfe, {0x6}, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x8}, @TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0xffffffff}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x4}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0xcec}, @TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x7}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x1}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x4}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x9480000}]}, 0x54}, 0x1, 0x0, 0x0, 0x8014}, 0x4) 800.375106ms ago: executing program 3 (id=2526): socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4010}, 0x40000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000090) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="341000003b0007010000000000000000017c00000400000014000180080016000000000006000600800a0000080002"], 0x1034}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000004000018007000600666f00000800080000000000060001000200000008000500000000000c0007000000000000000000080009000000000008000b"], 0x54}}, 0x0) socket(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4010}, 0x40000000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000090) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="341000003b0007010000000000000000017c00000400000014000180080016000000000006000600800a0000080002"], 0x1034}}, 0x0) (async) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000004000018007000600666f00000800080000000000060001000200000008000500000000000c0007000000000000000000080009000000000008000b"], 0x54}}, 0x0) (async) 725.091557ms ago: executing program 4 (id=2527): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x23, &(0x7f0000000000)=""/36, &(0x7f0000000040)=0x24) listen(r0, 0x5) 645.514366ms ago: executing program 4 (id=2528): r0 = socket$kcm(0x10, 0x2, 0x4) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (rerun: 32) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x7ff, @any, 0x1}, 0xe) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r3, &(0x7f0000000640), 0xe) (async) listen(r3, 0x0) (async) listen(r2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200059a8b6baccd10000", @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="04001780"], 0x20}}, 0x4008000) (async) close(r0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=r0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000621e88e5fead1f6830887e7dcd38a84aa55741797392fb3998c21e54ef3a1744c34761aa02ca0d5f9476a94e14cbb0117f2bea3dd6d9c3bc83c4d912decd4612d8703c8c08b2f5dfd1fd70f917ea86c42a0b828b8822cccaca2de4722470f04d078f8ae88ea4628f0dac0fd5431ab15d37342da583f56edc05cac6"], 0x48) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) (async) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) (async, rerun: 64) sendmmsg$inet6(r7, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="8252", 0x2}], 0x1}}], 0x1, 0x4000c000) (rerun: 64) sendto$inet6(r7, &(0x7f0000000300), 0x16, 0x0, 0x0, 0xfffffffffffffdfd) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0xa, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async, rerun: 64) r8 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 64) r9 = socket(0x10, 0x2, 0x0) write(r9, &(0x7f00000003c0)="1c0000001a009b8a140000003b9b30e6c9dc7c64d5524a1f009d9503", 0x1c) (async) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4008, 0x3, 0x340, 0x1d0, 0x32, 0x148, 0x1d0, 0x148, 0x2a8, 0x240, 0x240, 0x2a8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @remote, 0x0, 0x0, 'ip6gretap0\x00', 'nr0\x00'}, 0x0, 0x190, 0x1d0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}, @common=@inet=@ecn={{0x28}, {0x2}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@multicast2, @rand_addr, 0x0, 0x0, 'team_slave_1\x00', 'macvlan0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r6}, &(0x7f0000000480), &(0x7f00000004c0), 0x1000000}, 0x20) (async) socket$kcm(0x10, 0x3, 0x10) (async) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x6, &(0x7f0000000200)=0x5, 0x4) (async) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000042006bab9e3fe3d86e17aa31026b876c1d0000007ea60864160af36504001a0038001d007e31a0e69ee517d34460bc24eab556a705251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e4509c5bb5b64f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f005807}, 0x0) 590.238026ms ago: executing program 1 (id=2529): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a000c215000008009f000d000000080026000816"], 0x40}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x98, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "e0212a8c2c748d415f3bfdd56d"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "6dde473db41d28592a8d075d89"}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "206555d40f"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "fc17cd711e02d34f33"}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "4d2bc87adfb21ec0d0271ae4f3cb8f"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20044800) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) 491.480635ms ago: executing program 3 (id=2530): r0 = socket(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e24, 0x9, @loopback}}}, &(0x7f0000000000)=0x84) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x24004080) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000580)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x6}}}]}, 0x3c}}, 0x0) 477.500026ms ago: executing program 2 (id=2531): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@remote, @multicast1, 0x0, 0x0, 'macvlan0\x00', 'syzkaller0\x00'}, 0x6, 0xa8, 0xf0, 0x0, {}, [@common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @dev, 0x0, 0x0, 'veth0_to_team\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) r1 = socket(0x2, 0x3, 0xff) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000280)=@gcm_128={{0x303}, "ef84c85f296f59af", "cf8b0aa6acd5115720843176d1c80fda", "3c29d4d6", "71de29e9accc4afc"}, 0x28) recvmmsg(r2, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x44b, 0x10101, 0x0) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) 417.766837ms ago: executing program 0 (id=2532): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x103, 0x100, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r0}, 0x38) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x3, r0}, 0x38) (async, rerun: 64) socket$kcm(0x21, 0x2, 0x2) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r3) (async) recvmmsg$unix(r2, &(0x7f0000003c00)=[{{&(0x7f0000000240), 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/155, 0x9b}, {&(0x7f0000000380)=""/81, 0x51}, {&(0x7f0000000400)}, {&(0x7f0000000480)=""/156, 0x9c}], 0x4, &(0x7f0000000600)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000680), 0x6e, &(0x7f0000000740)=[{&(0x7f0000000700)=""/38, 0x26}], 0x1, &(0x7f0000000780)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe0}}, {{&(0x7f0000000880)=@abs, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000900)=""/181, 0xb5}, {&(0x7f00000009c0)=""/21, 0x15}, {&(0x7f0000000a00)=""/108, 0x6c}, {&(0x7f0000000a80)=""/168, 0xa8}], 0x4, &(0x7f0000000c00)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x160}}, {{&(0x7f0000000d80), 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000e00)=""/128, 0x80}], 0x1}}, {{&(0x7f0000000e80)=@abs, 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000f00)=""/173, 0xad}], 0x1, &(0x7f0000001000)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f00000010c0)=@abs, 0x6e, &(0x7f00000040c0)=[{&(0x7f0000001140)=""/47, 0x2f}, {&(0x7f0000001180)=""/80, 0x50}, {&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000002200)=""/237, 0xed}, {&(0x7f0000002300)=""/177, 0xb1}, {&(0x7f00000023c0)=""/222, 0xfffffffffffffcae}, {&(0x7f00000024c0)=""/129, 0x81}, {&(0x7f0000002580)=""/116, 0x74}, {&(0x7f0000003e40)=""/245, 0xf5}, {&(0x7f0000003f40)=""/159, 0x9f}, {&(0x7f0000004000)=""/182, 0xb6}], 0xb, &(0x7f0000002680)=[@rights={{0x18}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f0000002780), 0x6e, &(0x7f00000038c0)=[{&(0x7f0000002800)=""/4096, 0x1000}, {&(0x7f0000003800)=""/142, 0x8e}], 0x2, &(0x7f0000003900)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}}, {{&(0x7f00000039c0), 0x6e, &(0x7f0000003ac0)=[{&(0x7f0000003a40)=""/118, 0x76}], 0x1, &(0x7f0000003b00)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}], 0x8, 0x2000, &(0x7f0000003e00)={0x77359400}) r4 = socket$kcm(0x21, 0x2, 0x2) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r5}, 0x10) (async) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r6, 0x0) (async) accept$netrom(r6, 0x0, 0x0) (async, rerun: 64) connect$netrom(r6, 0x0, 0x0) (rerun: 64) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)={0x14, r8, 0x1}, 0x14}}, 0x0) (async) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) (async) close(0x4) 413.023826ms ago: executing program 1 (id=2533): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014004000000035c1f61c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x0, 0x0, 0x103, 0x1}, 0x20) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x0, @remote}, {0x2, 0x4e21, @empty}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000140)={@local, 0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000000040)=0x20) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000580)={'tunl0\x00', &(0x7f00000004c0)={'gretap0\x00', 0x0, 0x10, 0x7, 0x8, 0x2, {{0x21, 0x4, 0x2, 0x3, 0x84, 0x65, 0x0, 0x2, 0x29, 0x0, @broadcast, @loopback, {[@noop, @rr={0x7, 0xb, 0x6f, [@broadcast, @rand_addr=0x64010100]}, @noop, @cipso={0x86, 0x15, 0x0, [{0x2, 0x2}, {0x0, 0x5, "b427c6"}, {0x0, 0x8, "507da236d57e"}]}, @lsrr={0x83, 0xf, 0x48, [@multicast1, @dev={0xac, 0x14, 0x14, 0x2c}, @broadcast]}, @rr={0x7, 0xf, 0xe, [@empty, @private=0xa010100, @private=0xa010101]}, @timestamp_prespec={0x44, 0xc, 0xe5, 0x3, 0x9, [{@local, 0x4}]}, @timestamp_prespec={0x44, 0x24, 0xa, 0x3, 0xb, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@private=0xa010101, 0xff}, {@loopback, 0x8}, {@local, 0x4}]}]}}}}}) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@o_path={&(0x7f0000000680)='./file0\x00', 0x0, 0x4010, r3}, 0x18) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x2, '\x00', 0x0, r1, 0x1, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0x12, &(0x7f0000000400)=@raw=[@map_val={0x18, 0x6, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xc7e}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @map_val={0x18, 0x7, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000300)='syzkaller\x00', 0x4, 0xa, &(0x7f0000000340)=""/10, 0x41100, 0x40, '\x00', r5, 0x0, r1, 0x8, &(0x7f00000005c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000640)={0x3, 0x6, 0x284e, 0x10000}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000780)=[r6, r1, r1, r7, r1], &(0x7f00000008c0)=[{0x0, 0x1, 0xf, 0xb}, {0x1, 0x4, 0x10, 0x8}, {0x0, 0x5, 0x10, 0xa}], 0x10, 0x7, @void, @value}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xfc}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x60}}, 0x0) r9 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000040)) getsockopt$bt_BT_SECURITY(r9, 0x112, 0x4, &(0x7f0000000040), 0x2) r10 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r10, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc1}], 0x1, 0x0) r11 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r10, 0x84, 0x72, &(0x7f00000002c0)={r12}, 0xc) close(r1) r13 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, r1, 0x0, 0x6, &(0x7f0000000180)='-#,.[\x00'}, 0x30) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={@map=r1, r13, 0x24, 0x0, 0xffffffffffffffff, @void, @value=r1}, 0x20) socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(r1, 0x8b0f, &(0x7f0000000000)={'veth0_to_hsr\x00', @local}) 298.943967ms ago: executing program 3 (id=2534): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x27, &(0x7f0000000200)=0xffffffff, 0x4) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) (async) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) (async) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) (async) sendto$inet(r3, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000180)=0x4a9a, 0x4) (async) recvmmsg(r3, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000000)=""/14, 0xe}], 0x1}, 0xfffffffe}], 0x1, 0x2, 0x0) (async) r4 = socket$unix(0x1, 0x5, 0x0) recvfrom$unix(r4, &(0x7f0000000240)=""/189, 0xbd, 0x3, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e) (async) sendmmsg$inet(r3, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001bc0)="5c89eeb1aa86c6f680f09cc1c1d4bc5fc6a067d295afd3aa97af3d777b81db48f9ceb270e506af840503c6fbf20760e4cd8df9c220cd0728585229123d5c61507d00561b8f1a15e64fa2779be424", 0x4e}], 0x1}}], 0x1, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000000000000014100000018001700000000000000007564503a73"], 0x34}}, 0x0) (async) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x2, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x40000) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) 295.792868ms ago: executing program 4 (id=2535): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000080)=0x5, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000031000000760000000000000027000000000004009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x107}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 214.177376ms ago: executing program 1 (id=2536): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r3, 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000340)=0x4) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x0, 0x20000000, 0x2}}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r7) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)={0x14, r8, 0x2}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="38010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x138}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r6, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f0000000000), 0x400000000000235, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0xdc, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x72, 0xe, {{{}, {0x7fff}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @val={0x3, 0x1}, @void, @void, @val={0x5, 0x3}, @void, @val={0x2a, 0x1}, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}, @NL80211_ATTR_FTM_RESPONDER={0x34, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x2c, 0x2, "506bf32eb852528d39c470b33bbe7e3d8f5de025a4c8ef0a394dc55acea37303ae84d860d0398e1a"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xdc}}, 0x0) 126.203142ms ago: executing program 4 (id=2537): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c00000000010000000000000000000000060000180001801400018008000100ac1414bb08000200ac0314bbe2f06781c69f12fd381d163e4200027ee06ae46d46ca84083f9ee3350a49c7b97bca6001fcdef73cefe09231a2eb40446b4e80e8baa3c2538d3a1d07df7480b6fe5264274f7f8e02e9f411ded48f61689f046a166ebbda237d8bde944cb0e366a558481ed9e63c0b8fbbc152c2f83c4baacd72c403aab203165397b86bfd549b17b864beb900"/188], 0x2c}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000009"], 0x24d8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1b, 0xe, &(0x7f0000000200)=ANY=[@ANYRESHEX], &(0x7f0000000000)='GPL\x00', 0x20000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000062010b0000000000950000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 125.274767ms ago: executing program 3 (id=2538): syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) socket$inet(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000005c0)={0x58, r2, 0x3, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params, @NL80211_ATTR_FRAME={0x3b, 0x33, @probe_request={{{}, {}, @broadcast, @device_b}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @void}}]}, 0x58}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r4, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x22f0}, @val={0x2, 0x0, 0x5b29, 0x5, 0x0, 0xb1}, @x25={0x3, 0x3, 0xf1, "b2b24915c19e17cca50bfcc50525401f8b7e34ac9a9414effd15f018486dfb65ce5d0739d2d2e42ee653152785f496602d9c4064573617975de67ff5ffb9e486b66f37b99a351ae047f49c19ed2cf4100a1c71682a7f1aa07902b7418aa39330ad"}}, 0x72) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x4, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000540)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000850000001600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32, @ANYBLOB="1000700005000800edff00ff030007000a0018"], 0x38}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0x1, 0x58, &(0x7f0000000280)}, 0x10) 96.958135ms ago: executing program 0 (id=2539): r0 = socket$netlink(0x10, 0x3, 0x14) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000300008dd00000000010400000500002c"], 0x14}, 0x1, 0x3000000}, 0xdc5e49a554c857ec) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="eeb31e0a04b209da4a03716a831119e2696457cf", @ANYRES16=0x0, @ANYBLOB="01002cbd70100400000005000000"], 0x14}}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00'}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet_mtu(r5, 0x0, 0xa, 0x0, 0x0) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRESOCT=r1, @ANYBLOB="0000240000000000240012bfb51b7d8989aba35d00140001006272696467655f736c61bd30636e701d03070500080005"], 0x3}}, 0x0) r6 = socket$inet(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r8}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r9}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x72bd2b, 0x0, {0x0, 0x0, 0x12, r11, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0xb], 0x0, [0x8, 0x4, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xffb6, 0xffff, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10500, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="380000000314010000070000000000000900020000000000000004000800410073697700140033"], 0x38}}, 0x0) 0s ago: executing program 4 (id=2540): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) r1 = socket(0x2b, 0x80801, 0x1) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast, @loopback}, 0xc) r2 = socket(0x840000000002, 0x3, 0x100) setsockopt$inet_msfilter(r2, 0x0, 0x21, &(0x7f00000000c0)=ANY=[], 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x2}]}]}, 0x28}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x8, &(0x7f0000000400)=0x78, 0x4) socket$kcm(0x10, 0x2, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r8 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x32}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r8, &(0x7f00000000c0), 0x1c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) r11 = accept(r9, &(0x7f0000000080)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000000)=0x80) sendmsg$TIPC_NL_BEARER_ENABLE(r11, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x78, r10, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xbb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5e}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40801}, 0x0) sendmsg$TIPC_NL_LINK_GET(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, r10, 0xd574370038829967, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000200060002000364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) kernel console output (not intermixed with test programs): 72': attribute type 2 has an invalid length. [ 91.686294][ T7128] netlink: 'syz.1.575': attribute type 4 has an invalid length. [ 91.937105][ T7139] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 92.420620][ T7176] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 92.438633][ T7176] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 92.481932][ T7182] netlink: 'syz.3.593': attribute type 7 has an invalid length. [ 92.489624][ T7182] netlink: 'syz.3.593': attribute type 8 has an invalid length. [ 92.536815][ T7182] erspan0: entered promiscuous mode [ 92.589286][ T7182] batadv_slave_1: entered promiscuous mode [ 92.598611][ T7182] gretap0: entered promiscuous mode [ 92.627964][ T7182] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 92.640362][ T7196] netlink: 'syz.1.596': attribute type 1 has an invalid length. [ 93.619954][ T7250] tipc: Failed to obtain node identity [ 93.625761][ T7250] tipc: Enabling of bearer rejected, failed to enable media [ 93.669353][ T7252] validate_nla: 1 callbacks suppressed [ 93.669371][ T7252] netlink: 'syz.0.614': attribute type 13 has an invalid length. [ 93.748790][ T7252] netlink: 'syz.0.614': attribute type 13 has an invalid length. [ 94.010477][ T7263] hsr0: entered promiscuous mode [ 94.079665][ T7266] __nla_validate_parse: 9 callbacks suppressed [ 94.079683][ T7266] netlink: 72 bytes leftover after parsing attributes in process `syz.1.617'. [ 94.101568][ T7266] netlink: 72 bytes leftover after parsing attributes in process `syz.1.617'. [ 94.177977][ T7269] xt_CT: No such helper "pptp" [ 94.397973][ T7300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.627'. [ 94.409911][ T7300] netlink: 12 bytes leftover after parsing attributes in process `syz.0.627'. [ 94.474171][ T7302] netlink: 'syz.3.628': attribute type 2 has an invalid length. [ 94.490081][ T7302] netlink: 'syz.3.628': attribute type 8 has an invalid length. [ 94.498140][ T7302] netlink: 132 bytes leftover after parsing attributes in process `syz.3.628'. [ 94.522799][ T7313] netlink: 48 bytes leftover after parsing attributes in process `syz.2.631'. [ 94.533899][ T7313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.631'. [ 94.534811][ T7308] pimreg: entered allmulticast mode [ 94.551631][ T7309] pimreg: left allmulticast mode [ 94.562337][ T7314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.631'. [ 94.672925][ T7316] netlink: 72 bytes leftover after parsing attributes in process `syz.4.633'. [ 94.838693][ T7328] netlink: 'syz.4.635': attribute type 21 has an invalid length. [ 94.853760][ T7328] netlink: 128 bytes leftover after parsing attributes in process `syz.4.635'. [ 94.864600][ T7328] netlink: 'syz.4.635': attribute type 5 has an invalid length. [ 95.070158][ T7344] tipc: Enabled bearer , priority 10 [ 95.260840][ T7357] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 95.304794][ T7351] netlink: 'syz.2.644': attribute type 7 has an invalid length. [ 95.320036][ T7351] Źü: entered promiscuous mode [ 95.342351][ T7364] Unsupported ieee802154 address type: 0 [ 95.530197][ T7381] veth0_to_bond: entered promiscuous mode [ 95.702686][ T7384] netlink: 'syz.3.654': attribute type 13 has an invalid length. [ 95.905326][ T7377] veth0_to_bond: left promiscuous mode [ 96.093179][ T7413] ip6t_srh: unknown srh invflags A757 [ 96.357852][ T7433] nftables ruleset with unbound chain [ 96.840362][ T7473] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 96.851194][ T7476] Bluetooth: MGMT ver 1.23 [ 97.130624][ T7486] netlink: 'syz.4.687': attribute type 3 has an invalid length. [ 97.429125][ T7507] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.693967][ T7520] netlink: 'syz.0.699': attribute type 2 has an invalid length. [ 97.808703][ T7526] openvswitch: netlink: Actions may not be safe on all matching packets [ 97.947237][ T7532] syzkaller1: entered promiscuous mode [ 97.953997][ T7532] syzkaller1: entered allmulticast mode [ 97.964066][ T7531] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 98.144052][ T7536] team0: left allmulticast mode [ 98.156249][ T7536] team_slave_0: left allmulticast mode [ 98.174987][ T7536] team_slave_1: left allmulticast mode [ 98.180833][ T7536] team0: left promiscuous mode [ 98.187121][ T7536] team_slave_0: left promiscuous mode [ 98.193016][ T7536] team_slave_1: left promiscuous mode [ 98.200720][ T7536] bridge0: port 3(team0) entered disabled state [ 98.215983][ T7536] bridge_slave_1: left allmulticast mode [ 98.222086][ T7536] bridge_slave_1: left promiscuous mode [ 98.227964][ T7536] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.244468][ T7536] bridge_slave_0: left allmulticast mode [ 98.250321][ T7536] bridge_slave_0: left promiscuous mode [ 98.259705][ T7536] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.332615][ T7545] x_tables: duplicate underflow at hook 2 [ 98.686591][ T7567] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 98.757092][ T7572] xt_hashlimit: size too large, truncated to 1048576 [ 98.853122][ T7572] xt_hashlimit: overflow, rate too high: 0 [ 99.185021][ T7587] validate_nla: 2 callbacks suppressed [ 99.185041][ T7587] netlink: 'syz.1.720': attribute type 3 has an invalid length. [ 99.273179][ T7587] __nla_validate_parse: 29 callbacks suppressed [ 99.273198][ T7587] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.720'. [ 99.429296][ T7595] sctp: [Deprecated]: syz.4.722 (pid 7595) Use of int in max_burst socket option deprecated. [ 99.429296][ T7595] Use struct sctp_assoc_value instead [ 100.145887][ T7631] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 100.181768][ T7631] openvswitch: netlink: Actions may not be safe on all matching packets [ 100.905604][ T7661] xt_CT: You must specify a L4 protocol and not use inversions on it [ 101.241139][ T7674] netlink: 5300 bytes leftover after parsing attributes in process `syz.3.744'. [ 101.271147][ T7676] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 101.294624][ T7674] openvswitch: netlink: IP tunnel dst address not specified [ 101.317263][ T7674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.744'. [ 101.344821][ T7674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.744'. [ 101.361924][ T7675] netlink: 76 bytes leftover after parsing attributes in process `syz.0.745'. [ 101.396274][ T7675] Źü¯: entered promiscuous mode [ 101.403182][ T7674] netlink: 32 bytes leftover after parsing attributes in process `syz.3.744'. [ 101.498265][ T4625] block nbd0: Receive control failed (result -107) [ 101.698533][ T7695] netlink: 'syz.0.747': attribute type 1 has an invalid length. [ 101.727355][ T7695] netlink: 9344 bytes leftover after parsing attributes in process `syz.0.747'. [ 101.761794][ T7695] netlink: 'syz.0.747': attribute type 1 has an invalid length. [ 101.800330][ T7695] netlink: 20 bytes leftover after parsing attributes in process `syz.0.747'. [ 102.032692][ T7705] sctp: [Deprecated]: syz.0.753 (pid 7705) Use of int in max_burst socket option deprecated. [ 102.032692][ T7705] Use struct sctp_assoc_value instead [ 102.462858][ T937] IPVS: starting estimator thread 0... [ 102.476364][ T7716] netlink: 'syz.2.756': attribute type 12 has an invalid length. [ 102.500993][ T7716] netlink: 197276 bytes leftover after parsing attributes in process `syz.2.756'. [ 102.608040][ T7718] IPVS: using max 17 ests per chain, 40800 per kthread [ 102.653192][ T7734] netlink: 12 bytes leftover after parsing attributes in process `syz.1.760'. [ 102.816952][ T7747] @˙˙˙: renamed from veth0_vlan (while UP) [ 103.229664][ T7771] delete_channel: no stack [ 103.673639][ T7807] netlink: 'syz.4.783': attribute type 1 has an invalid length. [ 103.704853][ T7812] netlink: 'syz.4.783': attribute type 1 has an invalid length. [ 103.792977][ T7817] netlink: 'syz.3.785': attribute type 8 has an invalid length. [ 103.851733][ T7824] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 104.210197][ T7844] netlink: 'syz.1.794': attribute type 5 has an invalid length. [ 104.504078][ T7864] __nla_validate_parse: 7 callbacks suppressed [ 104.504095][ T7864] netlink: 4 bytes leftover after parsing attributes in process `syz.4.801'. [ 104.599006][ T7864] bond1: entered promiscuous mode [ 104.604410][ T7864] bond1: entered allmulticast mode [ 104.629271][ T7864] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.694198][ T7885] netlink: 104 bytes leftover after parsing attributes in process `syz.4.806'. [ 104.705966][ T7885] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 105.057067][ T7907] netlink: 28 bytes leftover after parsing attributes in process `syz.1.813'. [ 105.184937][ T7914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.816'. [ 105.211147][ T7914] netlink: 12 bytes leftover after parsing attributes in process `syz.4.816'. [ 105.297779][ T7920] veth0_to_hsr: entered promiscuous mode [ 105.310915][ T7917] veth0_to_hsr: left promiscuous mode [ 105.407834][ T7928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.821'. [ 105.420150][ T7928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.432131][ T7928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.442922][ T7928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.454030][ T7928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.466564][ T7928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.480117][ T7931] netlink: 12 bytes leftover after parsing attributes in process `syz.0.823'. [ 105.489739][ T7928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.500302][ T7928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.511463][ T7928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.527121][ T7930] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.823'. [ 105.527981][ T7933] netlink: 52 bytes leftover after parsing attributes in process `syz.4.824'. [ 105.545486][ T7930] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 105.560987][ T7933] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.824'. [ 105.595006][ T7933] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 105.736438][ T7941] netlink: 'syz.4.827': attribute type 11 has an invalid length. [ 105.952565][ T7956] netlink: 'syz.0.831': attribute type 1 has an invalid length. [ 106.089701][ T7967] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 106.288968][ T7977] xt_bpf: check failed: parse error [ 107.367903][ T8063] sctp: [Deprecated]: syz.4.858 (pid 8063) Use of int in maxseg socket option. [ 107.367903][ T8063] Use struct sctp_assoc_value instead [ 107.397688][ T8062] sctp: [Deprecated]: syz.4.858 (pid 8062) Use of int in maxseg socket option. [ 107.397688][ T8062] Use struct sctp_assoc_value instead [ 107.450133][ T8067] netlink: 'syz.1.860': attribute type 15 has an invalid length. [ 107.671137][ T8074] netlink: 'syz.2.862': attribute type 1 has an invalid length. [ 107.695157][ T8074] netlink: 'syz.2.862': attribute type 2 has an invalid length. [ 107.717822][ T8091] netlink: ct family unspecified [ 107.723196][ T8091] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.079997][ T8111] netlink: 'syz.3.873': attribute type 1 has an invalid length. [ 108.095017][ T8111] netlink: 'syz.3.873': attribute type 10 has an invalid length. [ 108.111111][ T8111] veth1_macvtap: left promiscuous mode [ 108.517135][ T8140] netlink: 'syz.4.881': attribute type 3 has an invalid length. [ 108.674497][ T8147] netlink: 'syz.4.884': attribute type 1 has an invalid length. [ 108.841111][ T8158] team0: Port device vlan4 added [ 108.913533][ T8160] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 109.116336][ T8173] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 109.122593][ T8172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.128272][ T8173] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 109.271069][ T937] IPVS: starting estimator thread 0... [ 109.371580][ T8182] IPVS: using max 19 ests per chain, 45600 per kthread [ 109.392724][ T8191] validate_nla: 2 callbacks suppressed [ 109.392739][ T8191] netlink: 'syz.1.900': attribute type 1 has an invalid length. [ 109.451508][ T8191] netlink: 'syz.1.900': attribute type 1 has an invalid length. [ 109.471594][ T8195] netlink: 'syz.1.900': attribute type 1 has an invalid length. [ 109.513061][ T8195] __nla_validate_parse: 25 callbacks suppressed [ 109.513078][ T8195] netlink: 9372 bytes leftover after parsing attributes in process `syz.1.900'. [ 109.532854][ T8195] netlink: 'syz.1.900': attribute type 1 has an invalid length. [ 109.619419][ T8204] netlink: 'syz.1.904': attribute type 10 has an invalid length. [ 109.644906][ T8204] hsr0: entered promiscuous mode [ 109.668740][ T8204] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 109.671723][ T8202] netlink: 12 bytes leftover after parsing attributes in process `syz.3.903'. [ 109.688869][ T8204] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 109.717649][ T8204] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 109.730411][ T8204] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 109.738591][ T8213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.749157][ T8207] netlink: 'syz.0.906': attribute type 63 has an invalid length. [ 109.783914][ T8215] netlink: 668 bytes leftover after parsing attributes in process `syz.3.903'. [ 109.814255][ T8215] netlink: 668 bytes leftover after parsing attributes in process `syz.3.903'. [ 109.829401][ T8207] netlink: 'syz.0.906': attribute type 63 has an invalid length. [ 109.950909][ T8223] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.910'. [ 110.125238][ T8235] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 110.432671][ T8260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.921'. [ 110.599438][ T8270] netlink: 24 bytes leftover after parsing attributes in process `syz.2.922'. [ 110.694789][ T8272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.924'. [ 110.711851][ T8272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.924'. [ 110.732741][ T8272] netlink: 32 bytes leftover after parsing attributes in process `syz.4.924'. [ 110.887694][ T8287] ax25_connect(): syz.0.929 uses autobind, please contact jreuter@yaina.de [ 110.924404][ T8287] ax25_connect(): syz.0.929 uses autobind, please contact jreuter@yaina.de [ 110.995636][ T8295] netlink: 'syz.4.932': attribute type 7 has an invalid length. [ 111.026655][ T8297] netlink: 'syz.4.932': attribute type 7 has an invalid length. [ 111.215257][ T8312] : renamed from bond0 (while UP) [ 111.693176][ T8345] netlink: 'syz.2.946': attribute type 10 has an invalid length. [ 111.822851][ T8345] batman_adv: batadv0: Adding interface: team0 [ 111.848748][ T8345] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.915248][ T8345] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 112.194292][ T8382] sctp: [Deprecated]: syz.1.952 (pid 8382) Use of int in maxseg socket option. [ 112.194292][ T8382] Use struct sctp_assoc_value instead [ 112.222548][ T8379] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 112.378675][ T8394] openvswitch: netlink: Key type 7937 is out of range max 32 [ 112.508235][ T8408] openvswitch: netlink: Message has 8 unknown bytes. [ 112.960828][ T8437] modprobe (8437) used greatest stack depth: 18296 bytes left [ 113.693447][ T8487] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 114.143192][ T8535] Bluetooth: MGMT ver 1.23 [ 114.562251][ T8557] openvswitch: netlink: Missing valid actions attribute. [ 114.581439][ T8557] openvswitch: netlink: Actions may not be safe on all matching packets [ 114.767771][ T8566] __nla_validate_parse: 19 callbacks suppressed [ 114.767792][ T8566] netlink: 32 bytes leftover after parsing attributes in process `syz.0.995'. [ 115.255312][ T8603] x_tables: duplicate underflow at hook 2 [ 116.534026][ T8600] FAULT_INJECTION: forcing a failure. [ 116.534026][ T8600] name failslab, interval 1, probability 0, space 0, times 1 [ 116.547696][ T8600] CPU: 0 UID: 0 PID: 8600 Comm: syz.3.1003 Not tainted 6.12.0-rc3-syzkaller-00152-g3b05b9c36ddd #0 [ 116.558419][ T8600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 116.568501][ T8600] Call Trace: [ 116.571809][ T8600] [ 116.574794][ T8600] dump_stack_lvl+0x241/0x360 [ 116.579511][ T8600] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.584739][ T8600] ? __pfx__printk+0x10/0x10 [ 116.589363][ T8600] ? kmem_cache_alloc_lru_noprof+0x49/0x2b0 [ 116.595301][ T8600] ? __pfx___might_resched+0x10/0x10 [ 116.600617][ T8600] ? validate_chain+0x11e/0x5920 [ 116.605622][ T8600] should_fail_ex+0x3b0/0x4e0 [ 116.610328][ T8600] ? __d_alloc+0x31/0x700 [ 116.614673][ T8600] should_failslab+0xac/0x100 [ 116.619362][ T8600] ? __d_alloc+0x31/0x700 [ 116.623701][ T8600] kmem_cache_alloc_lru_noprof+0x71/0x2b0 [ 116.629433][ T8600] __d_alloc+0x31/0x700 [ 116.633611][ T8600] d_alloc_parallel+0xdf/0x1600 [ 116.638468][ T8600] ? __asan_memset+0x23/0x50 [ 116.643063][ T8600] ? __asan_memset+0x23/0x50 [ 116.647656][ T8600] ? lockdep_init_map_type+0xa1/0x910 [ 116.653035][ T8600] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 116.658846][ T8600] ? __pfx_d_alloc_parallel+0x10/0x10 [ 116.664355][ T8600] ? __init_waitqueue_head+0xae/0x150 [ 116.669753][ T8600] __lookup_slow+0x117/0x3f0 [ 116.674350][ T8600] ? __pfx___lookup_slow+0x10/0x10 [ 116.679463][ T8600] ? __d_lookup+0x64/0x7b0 [ 116.683909][ T8600] lookup_one_len+0x18b/0x2d0 [ 116.688599][ T8600] ? __pfx_lookup_one_len+0x10/0x10 [ 116.693806][ T8600] start_creating+0x187/0x310 [ 116.698488][ T8600] debugfs_create_dir+0x25/0x430 [ 116.703431][ T8600] ieee80211_debugfs_recreate_netdev+0x1b6/0x1400 [ 116.709854][ T8600] ? __pfx_ieee80211_debugfs_recreate_netdev+0x10/0x10 [ 116.716702][ T8600] ? ieee80211_setup_sdata+0x8e6/0xb70 [ 116.722175][ T8600] ieee80211_if_change_type+0x648/0xad0 [ 116.727775][ T8600] ieee80211_change_iface+0xd2/0x4f0 [ 116.733060][ T8600] ? cfg80211_mlme_purge_registrations+0x1fa/0x230 [ 116.739575][ T8600] cfg80211_change_iface+0x782/0xf30 [ 116.744865][ T8600] nl80211_set_interface+0x5b5/0x830 [ 116.750159][ T8600] ? __pfx_nl80211_set_interface+0x10/0x10 [ 116.755979][ T8600] genl_rcv_msg+0xb14/0xec0 [ 116.760484][ T8600] ? mark_lock+0x9a/0x360 [ 116.764819][ T8600] ? __pfx_genl_rcv_msg+0x10/0x10 [ 116.769860][ T8600] ? __pfx_lock_acquire+0x10/0x10 [ 116.774885][ T8600] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 116.780257][ T8600] ? __pfx_nl80211_set_interface+0x10/0x10 [ 116.786060][ T8600] ? __pfx_nl80211_post_doit+0x10/0x10 [ 116.791521][ T8600] ? __pfx___might_resched+0x10/0x10 [ 116.796820][ T8600] netlink_rcv_skb+0x1e3/0x430 [ 116.801589][ T8600] ? __pfx_genl_rcv_msg+0x10/0x10 [ 116.806626][ T8600] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 116.811927][ T8600] ? __netlink_deliver_tap+0x77e/0x7c0 [ 116.817395][ T8600] genl_rcv+0x28/0x40 [ 116.821400][ T8600] netlink_unicast+0x7f6/0x990 [ 116.826196][ T8600] ? __pfx_netlink_unicast+0x10/0x10 [ 116.831498][ T8600] ? __virt_addr_valid+0x183/0x530 [ 116.836630][ T8600] ? __check_object_size+0x48e/0x900 [ 116.841921][ T8600] netlink_sendmsg+0x8e4/0xcb0 [ 116.846694][ T8600] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.851980][ T8600] ? aa_sock_msg_perm+0x91/0x160 [ 116.856950][ T8600] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.862255][ T8600] __sock_sendmsg+0x221/0x270 [ 116.866964][ T8600] ____sys_sendmsg+0x52a/0x7e0 [ 116.871750][ T8600] ? __pfx_____sys_sendmsg+0x10/0x10 [ 116.877046][ T8600] __sys_sendmsg+0x292/0x380 [ 116.881642][ T8600] ? __pfx___sys_sendmsg+0x10/0x10 [ 116.886765][ T8600] ? __pfx___might_resched+0x10/0x10 [ 116.892059][ T8600] ? lockdep_hardirqs_on+0x99/0x150 [ 116.897264][ T8600] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 116.903597][ T8600] ? do_syscall_64+0x100/0x230 [ 116.908363][ T8600] ? do_syscall_64+0xb6/0x230 [ 116.913039][ T8600] do_syscall_64+0xf3/0x230 [ 116.917541][ T8600] ? clear_bhb_loop+0x35/0x90 [ 116.922217][ T8600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.928134][ T8600] RIP: 0033:0x7f006017dff9 [ 116.932563][ T8600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.952176][ T8600] RSP: 002b:00007f0060eb1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.960606][ T8600] RAX: ffffffffffffffda RBX: 00007f0060336130 RCX: 00007f006017dff9 [ 116.968633][ T8600] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 116.976628][ T8600] RBP: 00007f0060eb1090 R08: 0000000000000000 R09: 0000000000000000 [ 116.984611][ T8600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.992591][ T8600] R13: 0000000000000000 R14: 00007f0060336130 R15: 00007fff4d50a768 [ 117.000587][ T8600] [ 117.066919][ T8604] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1005'. [ 117.146601][ T8608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1007'. [ 117.272992][ T8620] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1012'. [ 117.303189][ T8620] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1012'. [ 117.325408][ T8620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1012'. [ 117.456051][ T8637] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1015'. [ 117.500586][ T8637] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1015'. [ 117.630473][ T8649] tipc: Enabling of bearer rejected, failed to enable media [ 117.715520][ T8652] syzkaller0: entered promiscuous mode [ 117.721059][ T8652] syzkaller0: entered allmulticast mode [ 117.854623][ T8669] xt_addrtype: ipv6 does not support BROADCAST matching [ 119.639878][ T8685] validate_nla: 6 callbacks suppressed [ 119.639899][ T8685] netlink: 'syz.2.1026': attribute type 29 has an invalid length. [ 119.660866][ T8685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1026'. [ 119.699036][ T8705] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 120.055602][ T8715] batman_adv: batadv0: Removing interface: team0 [ 120.096281][ T8715] team0 (unregistering): Port device team_slave_0 removed [ 120.112907][ T8715] team0 (unregistering): Port device team_slave_1 removed [ 120.145679][ T8713] netlink: 'syz.3.1035': attribute type 4 has an invalid length. [ 120.163612][ T8503] lo speed is unknown, defaulting to 1000 [ 120.345919][ T8743] veth0_to_hsr: entered promiscuous mode [ 120.454737][ T8754] veth0_to_hsr: left promiscuous mode [ 120.459319][ T8761] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1047'. [ 120.470638][ T8761] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 120.549934][ T8767] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1050'. [ 120.824718][ T8789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1056'. [ 120.848106][ T8792] IPVS: Error connecting to the multicast addr [ 121.206973][ T8814] xt_ecn: cannot match TCP bits for non-tcp packets [ 121.235026][ T8819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1065'. [ 121.345725][ T8823] netlink: 'syz.3.1067': attribute type 1 has an invalid length. [ 121.462878][ T8833] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1070'. [ 121.474775][ T8833] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.483164][ T8833] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.492301][ T8833] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.499926][ T8833] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.694323][ T8844] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 121.824107][ T8850] netlink: 'syz.4.1073': attribute type 4 has an invalid length. [ 121.855172][ T8850] x_tables: duplicate underflow at hook 1 [ 121.899561][ T8856] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1074'. [ 121.938584][ T8860] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1075'. [ 121.995304][ T8863] netlink: 'syz.1.1078': attribute type 6 has an invalid length. [ 122.153923][ T8878] tipc: Resetting bearer [ 122.174451][ T8878] tipc: Resetting bearer [ 122.249482][ T8878] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.260073][ T8878] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.292415][ T8881] bridge0: port 3(ipvlan2) entered blocking state [ 122.299084][ T8881] bridge0: port 3(ipvlan2) entered disabled state [ 122.312999][ T8881] ipvlan2: entered allmulticast mode [ 122.313943][ T8890] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1083'. [ 122.318411][ T8881] bridge0: entered allmulticast mode [ 122.337299][ T8881] ipvlan2: left allmulticast mode [ 122.343299][ T8881] bridge0: left allmulticast mode [ 122.613040][ T8906] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1089'. [ 122.626199][ T8906] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1089'. [ 122.846335][ T8920] openvswitch: netlink: Actions may not be safe on all matching packets [ 123.197994][ T8936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.258675][ T8939] netlink: 'syz.4.1099': attribute type 2 has an invalid length. [ 123.389542][ T8903] syz.1.1089 (8903) used greatest stack depth: 18160 bytes left [ 123.438473][ T8946] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 123.579170][ T8948] openvswitch: netlink: Unknown nsh attribute 0 [ 123.683451][ T8959] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 124.022287][ T29] audit: type=1107 audit(1729480416.274:2): pid=8970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 124.057074][ T8979] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20002 [ 124.351797][ T8996] xt_recent: Unsupported userspace flags (00000042) [ 124.639911][ T9016] netlink: 'syz.0.1127': attribute type 1 has an invalid length. [ 124.658071][ T9013] netlink: 'syz.3.1128': attribute type 4 has an invalid length. [ 124.681657][ T9013] netlink: 'syz.3.1128': attribute type 20 has an invalid length. [ 124.919979][ T9032] x_tables: duplicate entry at hook 3 [ 125.042914][ T9035] lo speed is unknown, defaulting to 1000 [ 125.678615][ T9067] __nla_validate_parse: 24 callbacks suppressed [ 125.678635][ T9067] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1143'. [ 125.697781][ T9065] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1144'. [ 125.860456][ T9073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1145'. [ 125.932979][ T9077] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1146'. [ 126.167439][ T9097] netlink: 'syz.3.1151': attribute type 9 has an invalid length. [ 126.178166][ T9097] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1151'. [ 126.293718][ T9103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1156'. [ 126.301212][ T9097] netlink: 182140 bytes leftover after parsing attributes in process `syz.3.1151'. [ 126.313078][ T9097] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 126.336426][ T9097] netlink: 182140 bytes leftover after parsing attributes in process `syz.3.1151'. [ 126.362070][ T9097] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 126.488147][ T9113] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 126.530275][ T9120] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1158'. [ 126.817355][ T9135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1165'. [ 126.931412][ T4625] Bluetooth: hci4: command tx timeout [ 126.999930][ T9146] netlink: 'syz.2.1169': attribute type 10 has an invalid length. [ 127.018749][ T9146] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.025961][ T9146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.033564][ T9146] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.040679][ T9146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.083896][ T9146] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 127.249299][ T9161] bridge0: port 3(vlan2) entered blocking state [ 127.256504][ T9161] bridge0: port 3(vlan2) entered disabled state [ 127.263774][ T9161] vlan2: entered allmulticast mode [ 127.270908][ T9161] vlan2: left allmulticast mode [ 127.833549][ T9196] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 128.471300][ T4625] Bluetooth: hci1: command 0x0401 tx timeout [ 128.532387][ T9248] netlink: 'syz.3.1200': attribute type 9 has an invalid length. [ 128.691855][ T9255] bond2: entered promiscuous mode [ 129.148345][ T9297] netlink: 'syz.2.1216': attribute type 1 has an invalid length. [ 133.142091][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 142.457603][ T5248] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 142.467522][ T5248] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 142.474510][ T55] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 142.476015][ T55] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 142.490922][ T5248] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 142.498317][ T55] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 142.530141][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 142.598368][ T5230] bond0: (slave syz_tun): Releasing backup interface [ 142.613593][ T5238] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 142.614188][ T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 142.624499][ T5237] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 142.633883][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 142.636756][ T5237] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 142.654142][ T5237] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 142.662512][ T5238] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 142.666245][ T5237] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 142.685989][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 142.689226][ T5237] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 142.699802][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 142.711565][ T5237] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 142.712249][ T5238] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 142.727391][ T4625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 142.730625][ T5238] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 142.750237][ T9371] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 142.759921][ T5237] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 142.760418][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 142.771840][ T5237] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 142.781822][ T9371] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 142.789213][ T5238] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 142.794652][ T5248] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 142.814195][ T5238] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 142.899039][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.939116][ T9363] lo speed is unknown, defaulting to 1000 [ 142.973027][ T9366] lo speed is unknown, defaulting to 1000 [ 143.022229][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.036484][ T9368] lo speed is unknown, defaulting to 1000 [ 143.051025][ T9365] lo speed is unknown, defaulting to 1000 [ 143.087621][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.101967][ T9361] lo speed is unknown, defaulting to 1000 [ 143.156367][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.350705][ T9363] chnl_net:caif_netlink_parms(): no params data found [ 143.429739][ T9366] chnl_net:caif_netlink_parms(): no params data found [ 143.506658][ T35] gretap0: left allmulticast mode [ 143.512319][ T35] gretap0: left promiscuous mode [ 143.519493][ T35] bridge0: port 3(gretap0) entered disabled state [ 143.528654][ T35] bridge_slave_1: left allmulticast mode [ 143.534793][ T35] bridge_slave_1: left promiscuous mode [ 143.540495][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.550025][ T35] bridge_slave_0: left allmulticast mode [ 143.556255][ T35] bridge_slave_0: left promiscuous mode [ 143.562847][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.750101][ T35] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 143.947632][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.959341][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.973361][ T35] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 143.983610][ T35] batadv0: left promiscuous mode [ 143.990151][ T35] bond0 (unregistering): Released all slaves [ 144.000541][ T35] bond1 (unregistering): Released all slaves [ 144.089275][ T9361] chnl_net:caif_netlink_parms(): no params data found [ 144.107683][ T35] : left promiscuous mode [ 144.163030][ T35] Źü: left promiscuous mode [ 144.190239][ T9368] chnl_net:caif_netlink_parms(): no params data found [ 144.200616][ T9366] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.208117][ T9366] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.216785][ T9366] bridge_slave_0: entered allmulticast mode [ 144.224066][ T9366] bridge_slave_0: entered promiscuous mode [ 144.233092][ T9366] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.240245][ T9366] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.247936][ T9366] bridge_slave_1: entered allmulticast mode [ 144.255126][ T9366] bridge_slave_1: entered promiscuous mode [ 144.284763][ T9363] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.292048][ T9363] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.299229][ T9363] bridge_slave_0: entered allmulticast mode [ 144.306597][ T9363] bridge_slave_0: entered promiscuous mode [ 144.356377][ T9363] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.364318][ T9363] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.372076][ T9363] bridge_slave_1: entered allmulticast mode [ 144.379367][ T9363] bridge_slave_1: entered promiscuous mode [ 144.408019][ T9366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.417333][ T9365] chnl_net:caif_netlink_parms(): no params data found [ 144.464321][ T9366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.515510][ T9363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.540845][ T9366] team0: Port device team_slave_0 added [ 144.567293][ T9363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.601768][ T9366] team0: Port device team_slave_1 added [ 144.621169][ T9361] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.628433][ T9361] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.636034][ T9361] bridge_slave_0: entered allmulticast mode [ 144.643210][ T9361] bridge_slave_0: entered promiscuous mode [ 144.680666][ T9361] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.694189][ T9361] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.702162][ T9361] bridge_slave_1: entered allmulticast mode [ 144.709122][ T9361] bridge_slave_1: entered promiscuous mode [ 144.732764][ T9368] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.739899][ T9368] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.747285][ T9368] bridge_slave_0: entered allmulticast mode [ 144.754835][ T9368] bridge_slave_0: entered promiscuous mode [ 144.776151][ T55] Bluetooth: hci5: command tx timeout [ 144.776202][ T5238] Bluetooth: hci0: command tx timeout [ 144.851622][ T5238] Bluetooth: hci4: command tx timeout [ 144.852589][ T55] Bluetooth: hci2: command tx timeout [ 144.857282][ T5244] Bluetooth: hci1: command tx timeout [ 144.864112][ T9363] team0: Port device team_slave_0 added [ 144.878408][ T9368] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.888913][ T9368] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.897225][ T9368] bridge_slave_1: entered allmulticast mode [ 144.905669][ T9368] bridge_slave_1: entered promiscuous mode [ 144.920418][ T9366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.931052][ T9366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.957432][ T9366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.979644][ T9361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.990552][ T9363] team0: Port device team_slave_1 added [ 145.017345][ T35] hsr_slave_0: left promiscuous mode [ 145.024318][ T35] hsr_slave_1: left promiscuous mode [ 145.030824][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.038452][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.047134][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.055130][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.070233][ T35] veth1_macvtap: left promiscuous mode [ 145.076571][ T35] veth0_macvtap: left promiscuous mode [ 145.082356][ T35] veth1_vlan: left promiscuous mode [ 145.088152][ T35] veth0_vlan: left promiscuous mode [ 145.806131][ T9368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.823386][ T9366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.830403][ T9366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.857107][ T9366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.872709][ T9365] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.879852][ T9365] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.888932][ T9365] bridge_slave_0: entered allmulticast mode [ 145.896218][ T9365] bridge_slave_0: entered promiscuous mode [ 145.907228][ T9361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.938203][ T9368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.969577][ T9365] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.986938][ T9365] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.994396][ T9365] bridge_slave_1: entered allmulticast mode [ 146.001634][ T9365] bridge_slave_1: entered promiscuous mode [ 146.060021][ T9368] team0: Port device team_slave_0 added [ 146.087927][ T9366] hsr_slave_0: entered promiscuous mode [ 146.101004][ T9366] hsr_slave_1: entered promiscuous mode [ 146.109910][ T9366] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.118789][ T9366] Cannot create hsr debugfs directory [ 146.138504][ T9361] team0: Port device team_slave_0 added [ 146.145325][ T9363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.153313][ T9363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.179732][ T9363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.193100][ T9368] team0: Port device team_slave_1 added [ 146.200462][ T9363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.207688][ T9363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.234368][ T9363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.250583][ T9365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.263031][ T9365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.274842][ T9361] team0: Port device team_slave_1 added [ 146.338994][ T9368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.347876][ T9368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.375657][ T9368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.389314][ T9368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.396634][ T9368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.423127][ T9368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.460211][ T9365] team0: Port device team_slave_0 added [ 146.478278][ T9361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.486157][ T9361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.512615][ T9361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.544910][ T9365] team0: Port device team_slave_1 added [ 146.569795][ T9361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.577853][ T9361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.604655][ T9361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.622516][ T9363] hsr_slave_0: entered promiscuous mode [ 146.628777][ T9363] hsr_slave_1: entered promiscuous mode [ 146.636628][ T9363] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.644432][ T9363] Cannot create hsr debugfs directory [ 146.673208][ T9368] hsr_slave_0: entered promiscuous mode [ 146.679632][ T9368] hsr_slave_1: entered promiscuous mode [ 146.686627][ T9368] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.694570][ T9368] Cannot create hsr debugfs directory [ 146.729227][ T9365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.739366][ T35] IPVS: stop unused estimator thread 0... [ 146.740466][ T9365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.772167][ T9365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.813741][ T9365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.820763][ T9365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.847454][ T9365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.859393][ T5244] Bluetooth: hci0: command tx timeout [ 146.865430][ T5238] Bluetooth: hci5: command tx timeout [ 146.884915][ T9361] hsr_slave_0: entered promiscuous mode [ 146.892225][ T9361] hsr_slave_1: entered promiscuous mode [ 146.899069][ T9361] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.907066][ T9361] Cannot create hsr debugfs directory [ 146.931816][ T5244] Bluetooth: hci1: command tx timeout [ 146.931882][ T55] Bluetooth: hci2: command tx timeout [ 146.944029][ T5238] Bluetooth: hci4: command tx timeout [ 146.972555][ T9365] hsr_slave_0: entered promiscuous mode [ 146.978839][ T9365] hsr_slave_1: entered promiscuous mode [ 146.985212][ T9365] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.993108][ T9365] Cannot create hsr debugfs directory [ 147.135857][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.247876][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.358352][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.428593][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.926811][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.938076][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.950925][ T35] bond0 (unregistering): Released all slaves [ 148.014373][ T9363] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.044714][ T35] Źü¯: left promiscuous mode [ 148.086904][ T9363] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.191583][ T9363] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.275234][ T9363] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.342864][ T35] hsr_slave_0: left promiscuous mode [ 148.348724][ T35] hsr_slave_1: left promiscuous mode [ 148.354672][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.364384][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.379909][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.387519][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.403329][ T35] veth1_macvtap: left promiscuous mode [ 148.408891][ T35] veth0_macvtap: left promiscuous mode [ 148.414555][ T35] veth1_vlan: left promiscuous mode [ 148.419779][ T35] veth0_vlan: left promiscuous mode [ 148.934889][ T55] Bluetooth: hci5: command tx timeout [ 148.934994][ T5238] Bluetooth: hci0: command tx timeout [ 149.011360][ T55] Bluetooth: hci1: command tx timeout [ 149.011435][ T5238] Bluetooth: hci4: command tx timeout [ 149.016796][ T55] Bluetooth: hci2: command tx timeout [ 149.044931][ T35] team0 (unregistering): Port device team_slave_1 removed [ 149.086630][ T35] team0 (unregistering): Port device team_slave_0 removed [ 149.449935][ T9363] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 149.505108][ T9368] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.522531][ T9363] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 149.533982][ T9363] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 149.544510][ T9363] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 149.590697][ T9368] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.661075][ T9368] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.693208][ T9363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.711730][ T9363] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.730963][ T1043] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.738144][ T1043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.763611][ T1043] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.770682][ T1043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.961076][ T9363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.014455][ T9363] veth0_vlan: entered promiscuous mode [ 150.030780][ T9363] veth1_vlan: entered promiscuous mode [ 150.066623][ T9363] veth0_macvtap: entered promiscuous mode [ 150.076431][ T9363] veth1_macvtap: entered promiscuous mode [ 150.092622][ T9363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.108177][ T9363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.118194][ T9363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.129501][ T9363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.140763][ T9363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.151639][ T9363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.162541][ T9363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.172547][ T9363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.183101][ T9363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.194531][ T9363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.241150][ T9365] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.268068][ T9363] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.277621][ T9363] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.286724][ T9363] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.296219][ T9363] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.332024][ T9365] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.394978][ T9365] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.418918][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.431142][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.449248][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.459661][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.478317][ T9365] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.600140][ T9366] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 150.621380][ T9366] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 150.630886][ T9366] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 150.644173][ T9366] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 150.715404][ T9368] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 150.757839][ T9368] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 150.780427][ T9368] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 150.830457][ T9368] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 150.853877][ T9361] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 150.864659][ T9361] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 150.893665][ T9361] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 150.920468][ T9361] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 151.000624][ T9366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.012941][ T55] Bluetooth: hci5: command tx timeout [ 151.018395][ T55] Bluetooth: hci0: command tx timeout [ 151.090500][ T9365] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 151.092048][ T55] Bluetooth: hci2: command tx timeout [ 151.104239][ T5244] Bluetooth: hci4: command tx timeout [ 151.109021][ T5238] Bluetooth: hci1: command tx timeout [ 151.124624][ T9366] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.184174][ T9365] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 151.205807][ T9365] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 151.219964][ T9365] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 151.262756][ T9368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.279775][ T9368] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.324331][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.331490][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.345282][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.352459][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.407046][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.414254][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.430450][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.437620][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.643867][ T9361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.677640][ T9435] __nla_validate_parse: 10 callbacks suppressed [ 151.677660][ T9435] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1240'. [ 151.704333][ T9365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.729843][ T9361] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.805049][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.812226][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.853491][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.860629][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.897521][ T9365] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.928459][ T1043] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.935630][ T1043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.005338][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.012527][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.077002][ T9366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.185646][ T9449] netlink: 'syz.1.1242': attribute type 11 has an invalid length. [ 152.288035][ T9368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.318461][ T9366] veth0_vlan: entered promiscuous mode [ 152.347556][ T9366] veth1_vlan: entered promiscuous mode [ 152.462795][ T9366] veth0_macvtap: entered promiscuous mode [ 152.521079][ T9366] veth1_macvtap: entered promiscuous mode [ 152.598028][ T9365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.629882][ T9361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.696553][ T9366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.709662][ T9366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.719959][ T9366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.731595][ T9366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.741673][ T9366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.753075][ T9366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.765151][ T9366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.767093][ T9473] openvswitch: netlink: nsh attr 1 has unexpected len 0 expected 8 [ 152.810798][ T9366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.831656][ T9366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.849680][ T9366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.866645][ T9366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.880663][ T9366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.893947][ T9366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.905298][ T9366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.926899][ T9366] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.938197][ T9366] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.947024][ T9366] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.956226][ T9366] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.972344][ T9361] veth0_vlan: entered promiscuous mode [ 153.064024][ T9361] veth1_vlan: entered promiscuous mode [ 153.072960][ T9365] veth0_vlan: entered promiscuous mode [ 153.134832][ T9365] veth1_vlan: entered promiscuous mode [ 153.149524][ T9368] veth0_vlan: entered promiscuous mode [ 153.193647][ T9368] veth1_vlan: entered promiscuous mode [ 153.297660][ T9489] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1249'. [ 153.303379][ T3017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.319512][ T3017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.320457][ T9361] veth0_macvtap: entered promiscuous mode [ 153.335166][ T9490] bridge_slave_1: left allmulticast mode [ 153.340855][ T9490] bridge_slave_1: left promiscuous mode [ 153.346946][ T9490] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.371780][ T9361] veth1_macvtap: entered promiscuous mode [ 153.411042][ T9365] veth0_macvtap: entered promiscuous mode [ 153.418140][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.438544][ T9365] veth1_macvtap: entered promiscuous mode [ 153.446213][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.466246][ T9361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.478064][ T9361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.491040][ T9361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.503508][ T9361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.513900][ T9361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.524868][ T9361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.534963][ T9361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.545888][ T9361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.558273][ T9361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.600681][ T9361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.621489][ T9361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.631488][ T9361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.642051][ T9361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.652048][ T9361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.662990][ T9361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.673201][ T9361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.684055][ T9361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.695786][ T9361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.716036][ T9368] veth0_macvtap: entered promiscuous mode [ 153.733573][ T9365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.757772][ T9365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.770702][ T9365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.793858][ T9365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.809308][ T9365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.820802][ T9365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.830931][ T9365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.842201][ T9365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.852270][ T9365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.862824][ T9365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.874467][ T9365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.898521][ T9365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.909605][ T9365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.919672][ T9365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.931909][ T9365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.942433][ T9365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.953490][ T9365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.964549][ T9365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.975557][ T9365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.985696][ T9365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.997833][ T9365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.010168][ T9365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.023676][ T9361] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.036434][ T9361] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.045422][ T9361] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.061790][ T9361] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.080470][ T9368] veth1_macvtap: entered promiscuous mode [ 154.096889][ T9365] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.106119][ T9365] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.149540][ T9365] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.161358][ T9365] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.216949][ T9511] netlink: 'syz.1.1256': attribute type 1 has an invalid length. [ 154.232416][ T9511] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1256'. [ 154.246371][ T9513] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1257'. [ 154.269049][ T9368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.291302][ T9368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.301849][ T9368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.313924][ T9368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.324349][ T9368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.334906][ T9368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.344913][ T9368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.358467][ T9368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.369287][ T9368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.382688][ T9368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.392684][ T9368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.403757][ T9368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.414945][ T9368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.452386][ T9516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1258'. [ 154.479363][ T9516] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1258'. [ 154.504404][ T9368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.541320][ T9368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.551188][ T9368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.565352][ T9368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.575755][ T9368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.591498][ T9368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.601633][ T9368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.612792][ T9368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.622787][ T9368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.633729][ T9368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.646431][ T9368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.671286][ T9368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.683741][ T9368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.715917][ T9524] veth1_macvtap: left promiscuous mode [ 154.725464][ T9524] macsec0: entered promiscuous mode [ 154.726713][ T9529] xt_connbytes: Forcing CT accounting to be enabled [ 154.730713][ T9524] macsec0: entered allmulticast mode [ 154.760010][ T9525] veth1_macvtap: entered promiscuous mode [ 154.770880][ T9525] veth1_macvtap: entered allmulticast mode [ 154.778699][ T9525] macsec0: left promiscuous mode [ 154.783955][ T9525] macsec0: left allmulticast mode [ 154.789032][ T9525] veth1_macvtap: left allmulticast mode [ 154.844092][ T9534] netlink: 'syz.2.1263': attribute type 21 has an invalid length. [ 154.853728][ T9534] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1263'. [ 154.872210][ T9368] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.891530][ T9368] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.900278][ T9368] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.909192][ T9368] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.993819][ T9535] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 155.005749][ T9535] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 155.014361][ T9535] gretap1: entered promiscuous mode [ 155.020082][ T9535] gretap1: entered allmulticast mode [ 155.044537][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.056087][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.156416][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.170933][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.211086][ T1074] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.219695][ T1074] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.245144][ T9539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1264'. [ 155.306071][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.350951][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.443790][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.457780][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.468614][ T9553] openvswitch: netlink: Message has 15 unknown bytes. [ 155.492393][ T9553] ip6t_rpfilter: unknown options [ 155.523247][ T1133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.552333][ T1133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.878785][ T9583] netlink: 'syz.2.1272': attribute type 10 has an invalid length. [ 155.911791][ T9583] macvlan0: entered promiscuous mode [ 155.917148][ T9583] macvlan0: entered allmulticast mode [ 155.962287][ T9583] veth1_vlan: entered allmulticast mode [ 155.988963][ T9583] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 156.051883][ T9590] veth0_vlan: left promiscuous mode [ 156.058341][ T9590] veth0_vlan: entered promiscuous mode [ 156.106274][ T9595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1276'. [ 156.362656][ T9611] openvswitch: netlink: Actions may not be safe on all matching packets [ 156.390480][ T9609] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1280'. [ 156.403893][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 156.472623][ T9620] : renamed from bond0 (while UP) [ 156.718269][ T9632] __nla_validate_parse: 2 callbacks suppressed [ 156.718289][ T9632] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1289'. [ 157.103759][ T9654] netlink: 'syz.3.1297': attribute type 30 has an invalid length. [ 157.206981][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 157.387367][ T9669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1302'. [ 157.471081][ T9671] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1303'. [ 157.544190][ T9675] pimreg: entered allmulticast mode [ 157.555433][ T9675] pimreg: left allmulticast mode [ 157.615686][ T9677] netlink: 4272 bytes leftover after parsing attributes in process `syz.2.1306'. [ 157.618405][ T9680] openvswitch: netlink: Actions may not be safe on all matching packets [ 157.636376][ T9679] netlink: 'syz.3.1304': attribute type 1 has an invalid length. [ 157.645001][ T9677] netlink: 'syz.2.1306': attribute type 3 has an invalid length. [ 157.660251][ T9677] netlink: 105 bytes leftover after parsing attributes in process `syz.2.1306'. [ 157.661939][ T9679] netlink: 'syz.3.1304': attribute type 1 has an invalid length. [ 158.065030][ T9697] netlink: 'syz.2.1312': attribute type 10 has an invalid length. [ 158.081785][ T9697] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1312'. [ 158.112717][ T9697] bridge0: port 3(dummy0) entered blocking state [ 158.136350][ T9697] bridge0: port 3(dummy0) entered disabled state [ 158.162244][ T9697] dummy0: entered allmulticast mode [ 158.168145][ T9697] dummy0: entered promiscuous mode [ 158.180479][ T9697] bridge0: port 3(dummy0) entered blocking state [ 158.186984][ T9697] bridge0: port 3(dummy0) entered forwarding state [ 158.216408][ T9717] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1318'. [ 158.232309][ T9717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1318'. [ 158.394689][ T9730] netlink: 'syz.2.1322': attribute type 4 has an invalid length. [ 158.422429][ T9728] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1324'. [ 158.437746][ T9728] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1324'. [ 158.478171][ T9733] veth1: entered promiscuous mode [ 158.486649][ T9733] veth1: left promiscuous mode [ 158.967887][ T9762] veth0_vlan: left promiscuous mode [ 159.008023][ T9762] veth0_vlan: entered promiscuous mode [ 159.344288][ T9789] tipc: Started in network mode [ 159.361643][ T9789] tipc: Node identity 7f000001, cluster identity 4711 [ 159.385352][ T9789] tipc: Enabled bearer , priority 10 [ 159.619228][ T9803] netlink: 'syz.3.1348': attribute type 10 has an invalid length. [ 159.760171][ T9804] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.769358][ T9804] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.778326][ T9804] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.787077][ T9804] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.796063][ T9804] vxlan0: entered promiscuous mode [ 159.807778][ T9804] vxlan0: entered allmulticast mode [ 159.831156][ T9804] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.840455][ T9804] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.849559][ T9804] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.858571][ T9804] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.993299][ T9815] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 160.004010][ T9815] bridge_slave_1: left allmulticast mode [ 160.009675][ T9815] bridge_slave_1: left promiscuous mode [ 160.029733][ T9815] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.049050][ T9815] bridge_slave_0: left allmulticast mode [ 160.055227][ T9815] bridge_slave_0: left promiscuous mode [ 160.064950][ T9815] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.185299][ T9820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.200710][ T9820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.210968][ T9820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.223368][ T9825] netlink: 'syz.0.1354': attribute type 9 has an invalid length. [ 160.231919][ T9825] openvswitch: netlink: Key 2 has unexpected len 20 expected 4 [ 160.246995][ T9820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.267690][ T9820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.280551][ T9820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.302900][ T9820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.321424][ T9820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.337728][ T9820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.349495][ T9820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.364257][ T9820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.378623][ T9820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.512038][ T9] tipc: Node number set to 2130706433 [ 160.538875][ T9836] bridge0: port 3(dummy0) entered disabled state [ 160.550887][ T9836] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.560803][ T9836] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.728914][ T9836] bridge0: port 4(ipvlan2) entered blocking state [ 160.743205][ T9836] bridge0: port 4(ipvlan2) entered disabled state [ 160.749905][ T9836] ipvlan2: entered allmulticast mode [ 160.760220][ T9836] bridge0: entered allmulticast mode [ 160.767088][ T9836] ipvlan2: left allmulticast mode [ 160.773160][ T9836] bridge0: left allmulticast mode [ 160.876667][ T9855] netlink: 'syz.3.1366': attribute type 2 has an invalid length. [ 161.598694][ T9915] netlink: 'syz.0.1376': attribute type 1 has an invalid length. [ 161.608470][ T9911] nbd: device at index 1 is going down [ 161.614944][ T9911] nbd: device at index 1 is going down [ 161.642202][ T9918] tunl0: entered promiscuous mode [ 161.654083][ T9918] netlink: 'syz.2.1377': attribute type 3 has an invalid length. [ 162.160683][ T9953] __nla_validate_parse: 78 callbacks suppressed [ 162.160705][ T9953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1383'. [ 162.266459][ T9953] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1383'. [ 162.300984][ T9953] netlink: 552 bytes leftover after parsing attributes in process `syz.1.1383'. [ 162.585060][ T9985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1388'. [ 162.594954][ T9985] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1388'. [ 162.598960][ T9925] dccp_close: ABORT with 67 bytes unread [ 162.860209][ T9994] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1392'. [ 162.944735][T10005] tap0: tun_chr_ioctl cmd 1074025675 [ 162.957056][T10005] tap0: persist disabled [ 162.962262][T10004] tipc: Trying to set illegal importance in message [ 162.967148][T10008] netlink: 'syz.2.1396': attribute type 10 has an invalid length. [ 163.027351][T10013] netlink: 'syz.3.1395': attribute type 11 has an invalid length. [ 163.052877][T10008] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 163.081762][T10011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1396'. [ 163.098464][T10011] dummy0: left allmulticast mode [ 163.108056][T10011] dummy0: left promiscuous mode [ 163.120232][T10011] bridge0: port 3(dummy0) entered disabled state [ 163.130442][T10011] bridge_slave_1: left allmulticast mode [ 163.144451][T10011] bridge_slave_1: left promiscuous mode [ 163.154611][T10023] netlink: 'syz.0.1398': attribute type 28 has an invalid length. [ 163.156765][T10011] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.174784][T10023] netlink: 'syz.0.1398': attribute type 3 has an invalid length. [ 163.186734][T10011] bridge_slave_0: left allmulticast mode [ 163.192467][T10023] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1398'. [ 163.212504][T10011] bridge_slave_0: left promiscuous mode [ 163.218356][T10011] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.250498][T10011] bond0: (slave bridge0): Releasing backup interface [ 163.298866][T10015] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1397'. [ 163.308901][T10015] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1397'. [ 163.543450][T10039] openvswitch: netlink: Message has 4 unknown bytes. [ 163.702462][T10049] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 163.710448][T10047] IPVS: Unknown mcast interface: nicvf0 [ 163.883758][T10063] vlan2: entered allmulticast mode [ 163.889819][T10063] : entered allmulticast mode [ 163.898389][T10063] bond_slave_0: entered allmulticast mode [ 163.904387][T10063] bond_slave_1: entered allmulticast mode [ 163.919483][T10063] : left allmulticast mode [ 163.924306][T10063] bond_slave_0: left allmulticast mode [ 163.930930][T10063] bond_slave_1: left allmulticast mode [ 163.967537][T10065] trusted_key: syz.0.1410 sent an empty control message without MSG_MORE. [ 163.978033][T10060] ip_vti0: entered allmulticast mode [ 164.108205][T10071] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 164.145333][T10060] netlink: 'syz.1.1409': attribute type 2 has an invalid length. [ 164.268991][T10084] lo speed is unknown, defaulting to 1000 [ 164.282043][T10071] netlink: 'syz.2.1411': attribute type 1 has an invalid length. [ 164.289914][T10071] netlink: 'syz.2.1411': attribute type 1 has an invalid length. [ 164.487933][T10093] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 166.580446][T10086] veth0_vlan: left promiscuous mode [ 166.590045][T10086] veth0_vlan: entered promiscuous mode [ 166.621939][T10098] vlan2: entered allmulticast mode [ 166.627111][T10098] erspan0: entered allmulticast mode [ 166.822998][T10110] team0: Port device team_slave_1 removed [ 166.979396][T10120] vlan2: entered allmulticast mode [ 166.988185][T10120] : entered allmulticast mode [ 167.001621][T10120] bond_slave_0: entered allmulticast mode [ 167.020604][T10120] bond_slave_1: entered allmulticast mode [ 167.045227][T10120] : left allmulticast mode [ 167.049803][T10120] bond_slave_0: left allmulticast mode [ 167.082842][T10120] bond_slave_1: left allmulticast mode [ 167.115181][T10128] netlink: 'syz.1.1429': attribute type 1 has an invalid length. [ 167.504604][T10150] netlink: 'syz.2.1435': attribute type 10 has an invalid length. [ 168.396483][T10208] x_tables: arp_tables: MARK.2 target: invalid size 8 (kernel) != (user) 0 [ 168.604721][T10225] netlink: 'syz.4.1461': attribute type 10 has an invalid length. [ 168.735270][T10230] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.948049][T10241] __nla_validate_parse: 12 callbacks suppressed [ 168.948069][T10241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1467'. [ 168.958625][T10242] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 169.010567][T10243] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1465'. [ 169.252526][ T5238] Bluetooth: hci4: command tx timeout [ 169.502549][T10277] ieee802154 phy1 wpan1: encryption failed: -22 [ 169.544118][T10281] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 169.564697][T10281] xt_CT: You must specify a L4 protocol and not use inversions on it [ 169.617696][T10283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1483'. [ 169.759206][T10294] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1486'. [ 169.792160][T10288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1485'. [ 169.832891][T10288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.882525][T10288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.958805][T10308] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1492'. [ 169.987982][T10308] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1492'. [ 170.114112][T10326] netlink: 'syz.2.1497': attribute type 16 has an invalid length. [ 170.158676][T10331] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1498'. [ 170.175730][T10330] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1498'. [ 170.192818][T10333] veth0_to_team: mtu less than device minimum [ 170.260156][T10335] syzkaller0: entered allmulticast mode [ 170.420583][T10345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1503'. [ 170.433731][T10345] netlink: 'syz.2.1503': attribute type 20 has an invalid length. [ 170.816299][T10373] openvswitch: netlink: Actions may not be safe on all matching packets [ 170.952386][T10381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.004367][T10381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.023322][T10381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.036677][T10381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.047990][T10381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.059169][T10381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.070162][T10381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.080872][T10381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.092205][T10381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.104622][T10381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.114644][T10381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.126059][T10381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.135870][T10395] Bluetooth: MGMT ver 1.23 [ 171.140354][T10381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.150972][T10381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.510265][T10418] netlink: 'syz.1.1530': attribute type 21 has an invalid length. [ 171.578324][T10419] netlink: 'syz.3.1531': attribute type 18 has an invalid length. [ 171.592088][T10419] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.600968][T10419] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.610177][T10419] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.619270][T10419] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.752248][T10434] batman_adv: batadv1: Adding interface: netdevsim0 [ 171.765809][T10434] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.793706][T10434] batman_adv: batadv1: Interface activated: netdevsim0 [ 171.802501][T10435] xt_ecn: cannot match TCP bits for non-tcp packets [ 171.997062][T10447] netlink: 'syz.2.1539': attribute type 2 has an invalid length. [ 172.849492][T10498] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 173.113279][T10525] netlink: 'syz.2.1565': attribute type 9 has an invalid length. [ 173.131397][T10525] openvswitch: netlink: Message has 8 unknown bytes. [ 173.210345][T10531] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 173.467175][T10548] xt_CT: You must specify a L4 protocol and not use inversions on it [ 173.537435][T10551] openvswitch: netlink: ct_state flags 00004000 unsupported [ 173.638887][T10560] raw_sendmsg: syz.1.1579 forgot to set AF_INET. Fix it! [ 173.878718][T10576] netlink: 'syz.1.1586': attribute type 4 has an invalid length. [ 173.950137][T10581] netlink: 'syz.1.1588': attribute type 3 has an invalid length. [ 173.958329][T10581] __nla_validate_parse: 16 callbacks suppressed [ 173.958347][T10581] netlink: 766 bytes leftover after parsing attributes in process `syz.1.1588'. [ 174.097198][T10591] netlink: 'syz.4.1592': attribute type 9 has an invalid length. [ 174.105479][T10591] netlink: 134688 bytes leftover after parsing attributes in process `syz.4.1592'. [ 174.143183][ T937] IPVS: starting estimator thread 0... [ 174.252090][T10595] IPVS: using max 18 ests per chain, 43200 per kthread [ 174.623113][T10632] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1604'. [ 174.946420][T10657] xt_CT: You must specify a L4 protocol and not use inversions on it [ 175.163829][T10667] sch_tbf: burst 53766 is lower than device lo mtu (65550) ! [ 175.647483][T10705] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 175.973443][T10728] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 176.012280][T10728] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 176.020352][T10728] gretap1: entered promiscuous mode [ 176.036060][T10728] gretap1: entered allmulticast mode [ 176.211604][T10746] ieee802154 phy1 wpan1: encryption failed: -22 [ 176.342677][T10751] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1643'. [ 176.435668][T10758] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 176.438159][T10762] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1644'. [ 176.708925][T10785] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 176.894367][T10796] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1656'. [ 176.983183][T10804] netlink: 'syz.1.1658': attribute type 21 has an invalid length. [ 176.991193][T10804] IPv6: NLM_F_CREATE should be specified when creating new route [ 177.066013][T10810] netlink: 'syz.1.1659': attribute type 1 has an invalid length. [ 177.075863][T10810] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1659'. [ 177.099880][ T5238] Bluetooth: hci4: command tx timeout [ 177.372291][T10832] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20001 [ 177.438772][T10823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.600027][T10849] x_tables: duplicate underflow at hook 3 [ 177.722397][T10854] netlink: 'syz.0.1671': attribute type 10 has an invalid length. [ 177.733087][T10854] netlink: 212848 bytes leftover after parsing attributes in process `syz.0.1671'. [ 177.744099][T10855] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1672'. [ 177.754855][T10854] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1671'. [ 178.132767][T10884] tc_dump_action: action bad kind [ 178.166286][T10886] unsupported nlmsg_type 40 [ 178.207039][T10839] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 178.359662][T10888] syzkaller0: entered promiscuous mode [ 178.366789][T10888] syzkaller0: entered allmulticast mode [ 178.420637][T10908] ax25_connect(): syz.3.1687 uses autobind, please contact jreuter@yaina.de [ 179.492453][ T5238] Bluetooth: hci0: command 0x0401 tx timeout [ 180.237861][T10908] __nla_validate_parse: 3 callbacks suppressed [ 180.237876][T10908] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1687'. [ 180.261857][T10917] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1691'. [ 180.331925][T10923] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 180.438365][T10931] IPVS: length: 74 != 8 [ 180.683254][T10948] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1704'. [ 180.760137][T10954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1698'. [ 180.784471][T10954] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1698'. [ 180.992124][ T52] IPVS: starting estimator thread 0... [ 181.012695][T10973] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1709'. [ 181.032328][T10973] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1709'. [ 181.074080][T10973] gretap2: entered promiscuous mode [ 181.079350][T10973] gretap2: entered allmulticast mode [ 181.095100][T10975] IPVS: using max 20 ests per chain, 48000 per kthread [ 181.105401][T10980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1709'. [ 181.295009][T10990] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1715'. [ 181.464553][T10998] syzkaller0: entered promiscuous mode [ 181.490560][T10998] syzkaller0: entered allmulticast mode [ 181.606144][T11009] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 181.751766][T11023] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 181.774149][T11023] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 181.825569][T11032] netlink: 'syz.1.1723': attribute type 13 has an invalid length. [ 181.839575][T11032] netlink: 'syz.1.1723': attribute type 58 has an invalid length. [ 181.866547][T11032] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1723'. [ 181.890973][ T52] IPVS: starting estimator thread 0... [ 181.981532][T11040] IPVS: using max 19 ests per chain, 45600 per kthread [ 182.295506][ T937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.397753][ T66] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.407334][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.750421][T11079] netlink: 'syz.0.1736': attribute type 1 has an invalid length. [ 183.337424][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.176515][T11092] openvswitch: netlink: Actions may not be safe on all matching packets [ 184.371505][ T5285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.414254][T11118] ax25_connect(): syz.2.1748 uses autobind, please contact jreuter@yaina.de [ 184.529579][T11125] netlink: 'syz.4.1752': attribute type 5 has an invalid length. [ 184.933704][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.942132][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.023493][T11160] ipt_ECN: cannot use operation on non-tcp rule [ 185.375493][T11193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.731404][T11150] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 185.833874][T11218] __nla_validate_parse: 11 callbacks suppressed [ 185.833894][T11218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1779'. [ 185.866583][T11229] netlink: 'syz.3.1778': attribute type 1 has an invalid length. [ 185.891554][T11229] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 185.898873][T11229] IPv6: NLM_F_CREATE should be set when creating new route [ 185.906217][T11229] IPv6: NLM_F_CREATE should be set when creating new route [ 186.019054][T11239] ip6gre0: entered promiscuous mode [ 186.027700][T11239] vlan2: entered promiscuous mode [ 186.055366][T11239] ip6gre0: left promiscuous mode [ 186.247560][T11247] netlink: 'syz.4.1788': attribute type 4 has an invalid length. [ 186.290021][T11248] IPv6: sit1: Disabled Multicast RS [ 186.387544][T11252] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1790'. [ 186.602305][T11255] netlink: 'syz.3.1791': attribute type 29 has an invalid length. [ 186.611750][T11255] netlink: 'syz.3.1791': attribute type 29 has an invalid length. [ 186.620944][T11255] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1791'. [ 186.632489][T11255] unsupported nla_type 40 [ 186.754488][T11264] –eth0_vlan: renamed from bridge_slave_1 (while UP) [ 186.767169][T11264] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 186.788094][T11264] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 187.099149][T11289] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1801'. [ 187.499591][T11308] netlink: 'syz.3.1808': attribute type 11 has an invalid length. [ 187.521813][T11311] team0: No ports can be present during mode change [ 187.635363][T11317] netlink: 'syz.0.1811': attribute type 21 has an invalid length. [ 187.658187][T11316] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1812'. [ 187.706065][T11316] netlink: 'syz.3.1812': attribute type 10 has an invalid length. [ 187.739157][T11316] syz_tun: entered promiscuous mode [ 187.777234][T11316] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 187.924432][T11303] lo speed is unknown, defaulting to 1000 [ 188.718208][T11365] Bluetooth: MGMT ver 1.23 [ 188.839006][T11375] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1827'. [ 188.966397][T11376] bond0: (slave syz_tun): Releasing backup interface [ 189.005961][T11376] bridge_slave_0: left allmulticast mode [ 189.027354][T11376] bridge_slave_0: left promiscuous mode [ 189.071712][T11376] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.091168][T11376] –eth0_vlan: left allmulticast mode [ 189.096832][T11376] –eth0_vlan: left promiscuous mode [ 189.103835][T11376] bridge0: port 2(–eth0_vlan) entered disabled state [ 189.115600][T11376] bond0: (slave bond_slave_0): Releasing backup interface [ 189.130024][T11376] bond0: (slave bond_slave_1): Releasing backup interface [ 189.154591][T11376] team0: Port device team_slave_0 removed [ 189.164855][T11376] team0: Port device team_slave_1 removed [ 189.171118][T11376] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.180148][T11376] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.189251][T11376] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.197948][T11376] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.334645][T11398] netlink: 'syz.3.1831': attribute type 10 has an invalid length. [ 189.357631][T11398] batman_adv: batadv0: Adding interface: team0 [ 189.369178][T11398] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.404782][T11398] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 189.405395][T11402] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1831'. [ 189.599754][T11404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1833'. [ 189.741583][T11418] veth0_to_hsr: entered promiscuous mode [ 190.220933][T11443] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1848'. [ 190.238512][T11443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1848'. [ 190.564190][T11418] veth0_to_hsr: left promiscuous mode [ 190.812737][T11474] x_tables: duplicate entry at hook 1 [ 191.049711][T11491] net_ratelimit: 18 callbacks suppressed [ 191.049730][T11491] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 191.226871][T11508] xt_hashlimit: invalid interval [ 191.236439][T11505] __nla_validate_parse: 9 callbacks suppressed [ 191.236457][T11505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1870'. [ 191.570525][T11524] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.1877'. [ 191.603394][T11524] netlink: 'syz.2.1877': attribute type 2 has an invalid length. [ 191.611191][T11524] tipc: Started in network mode [ 191.645662][T11524] tipc: Node identity a, cluster identity 4711 [ 191.664878][T11524] tipc: Node number set to 10 [ 191.801098][T11543] tipc: Can't bind to reserved service type 2 [ 191.855285][T11554] syzkaller1: entered promiscuous mode [ 191.926442][T11556] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1886'. [ 192.048842][T11566] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1889'. [ 192.668486][T11586] netlink: 'syz.0.1896': attribute type 4 has an invalid length. [ 192.686421][T11586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1896'. [ 192.707597][T11593] netlink: 'syz.4.1899': attribute type 1 has an invalid length. [ 192.738895][T11597] netlink: 'syz.0.1900': attribute type 1 has an invalid length. [ 192.739717][T11593] netlink: 616 bytes leftover after parsing attributes in process `syz.4.1899'. [ 192.746796][T11597] netlink: 'syz.0.1900': attribute type 2 has an invalid length. [ 192.786396][T11600] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1901'. [ 192.787931][T11593] netlink: 'syz.4.1899': attribute type 1 has an invalid length. [ 192.804328][T11593] netlink: 616 bytes leftover after parsing attributes in process `syz.4.1899'. [ 192.821597][T11600] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 192.870317][T11593] netlink: 'syz.4.1899': attribute type 1 has an invalid length. [ 192.881702][T11593] netlink: 616 bytes leftover after parsing attributes in process `syz.4.1899'. [ 192.990462][T11619] ieee802154 phy1 wpan1: encryption failed: -90 [ 193.192246][T11630] netlink: 'syz.1.1908': attribute type 24 has an invalid length. [ 193.556554][T11650] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1914'. [ 193.849465][T11662] pim6reg: entered allmulticast mode [ 194.034138][T11667] dvmrp0: entered allmulticast mode [ 194.116947][T11670] sctp: [Deprecated]: syz.2.1922 (pid 11670) Use of struct sctp_assoc_value in delayed_ack socket option. [ 194.116947][T11670] Use struct sctp_sack_info instead [ 194.143176][T11670] netlink: 'syz.2.1922': attribute type 1 has an invalid length. [ 194.486288][T11677] (unnamed net_device) (uninitialized): option ad_select: invalid value (253) [ 194.562762][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.768529][T11695] openvswitch: netlink: Actions may not be safe on all matching packets [ 195.044964][T11703] delete_channel: no stack [ 195.334653][T11731] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 195.656045][T11758] netlink: 'syz.4.1951': attribute type 12 has an invalid length. [ 195.858041][T11771] 0·: renamed from hsr0 (while UP) [ 195.884055][T11771] 0·: entered promiscuous mode [ 195.889172][T11771] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 195.925767][T11775] xt_NFQUEUE: number of total queues is 0 [ 195.945396][T11775] vcan0 speed is unknown, defaulting to 1000 [ 195.966177][T11775] vcan0 speed is unknown, defaulting to 1000 [ 195.985766][T11775] vcan0 speed is unknown, defaulting to 1000 [ 196.247532][T11775] infiniband syz1: set active [ 196.254226][ T5285] vcan0 speed is unknown, defaulting to 1000 [ 196.270668][T11775] infiniband syz1: added vcan0 [ 196.320174][T11775] RDS/IB: syz1: added [ 196.325488][T11775] smc: adding ib device syz1 with port count 1 [ 196.332258][T11775] smc: ib device syz1 port 1 has pnetid [ 196.343144][ T5285] vcan0 speed is unknown, defaulting to 1000 [ 196.354070][T11775] vcan0 speed is unknown, defaulting to 1000 [ 196.495260][T11796] netlink: 'syz.4.1965': attribute type 9 has an invalid length. [ 196.512019][T11796] __nla_validate_parse: 13 callbacks suppressed [ 196.512039][T11796] netlink: 134660 bytes leftover after parsing attributes in process `syz.4.1965'. [ 196.530527][T11796] openvswitch: netlink: Message has 225 unknown bytes. [ 196.537968][T11796] openvswitch: netlink: Actions may not be safe on all matching packets [ 196.549331][T11775] vcan0 speed is unknown, defaulting to 1000 [ 196.778578][T11775] vcan0 speed is unknown, defaulting to 1000 [ 196.957433][T11815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1972'. [ 196.967862][T11775] vcan0 speed is unknown, defaulting to 1000 [ 197.188142][T11775] vcan0 speed is unknown, defaulting to 1000 [ 197.263381][T11833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1978'. [ 197.508766][T11775] vcan0 speed is unknown, defaulting to 1000 [ 197.689448][T11775] vcan0 speed is unknown, defaulting to 1000 [ 197.730659][T11859] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 197.854755][T11861] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1986'. [ 197.882204][T11863] validate_nla: 1 callbacks suppressed [ 197.882220][T11863] netlink: 'syz.4.1987': attribute type 3 has an invalid length. [ 197.895801][T11861] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1986'. [ 197.908695][T11775] vcan0 speed is unknown, defaulting to 1000 [ 197.914813][T11861] netlink: 'syz.3.1986': attribute type 6 has an invalid length. [ 197.931576][T11863] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.1987'. [ 197.941452][T11861] netlink: 'syz.3.1986': attribute type 5 has an invalid length. [ 197.980084][T11861] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1986'. [ 198.199878][T11873] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1990'. [ 198.230514][T11877] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1992'. [ 198.992344][T11914] ebt_among: src integrity fail: 300 [ 199.179386][T11932] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2009'. [ 199.498969][T11950] netlink: 'syz.4.2014': attribute type 1 has an invalid length. [ 200.172790][T11993] netlink: 'syz.1.2030': attribute type 3 has an invalid length. [ 200.492925][T12014] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 200.501086][T12016] netdevsim netdevsim0 netdevsim1: Unsupported IPsec algorithm [ 200.685103][T12023] mac80211_hwsim hwsim22 syzkaller0: entered promiscuous mode [ 200.713180][T12023] mac80211_hwsim hwsim22 syzkaller0: entered allmulticast mode [ 200.777036][T12025] pim6reg: entered allmulticast mode [ 201.636432][T12085] __nla_validate_parse: 10 callbacks suppressed [ 201.636446][T12085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2063'. [ 201.670502][T12087] dccp_invalid_packet: pskb_may_pull failed [ 201.833808][T12096] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2066'. [ 201.860177][T12096] netlink: 4072 bytes leftover after parsing attributes in process `syz.4.2066'. [ 201.895425][T12090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2065'. [ 201.904828][T12096] openvswitch: netlink: Actions may not be safe on all matching packets [ 202.159152][T12107] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2069'. [ 202.266414][T12112] lo speed is unknown, defaulting to 1000 [ 202.316536][T12112] vcan0 speed is unknown, defaulting to 1000 [ 203.089444][T12134] team0: Port device bridge0 added [ 203.320061][T12112] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2071'. [ 203.426141][T12157] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2084'. [ 203.436474][T12151] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2081'. [ 204.100106][T12173] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2087'. [ 204.282396][T12185] netlink: 'syz.3.2090': attribute type 9 has an invalid length. [ 204.290591][T12185] netlink: 134660 bytes leftover after parsing attributes in process `syz.3.2090'. [ 204.854086][T12209] netlink: 'syz.0.2099': attribute type 75 has an invalid length. [ 204.962338][T12202] netlink: 'syz.4.2096': attribute type 15 has an invalid length. [ 204.983589][T12210] sit0: entered promiscuous mode [ 205.010507][T12210] netlink: 'syz.0.2099': attribute type 1 has an invalid length. [ 205.289936][T12235] netlink: 'syz.2.2108': attribute type 1 has an invalid length. [ 205.490218][T12247] openvswitch: netlink: Tunnel attr 0 has unexpected len 2127 expected 8 [ 205.543594][T12249] IPVS: set_ctl: invalid protocol: 94 224.0.0.2:20002 [ 205.651383][ T55] Bluetooth: hci4: command 0x0405 tx timeout [ 205.792790][T12271] bond0: entered promiscuous mode [ 206.000362][T12285] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 206.014226][T12285] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 206.256616][T12299] netlink: 'syz.4.2131': attribute type 1 has an invalid length. [ 206.755452][T12327] __nla_validate_parse: 15 callbacks suppressed [ 206.755472][T12327] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2139'. [ 206.825364][T12333] openvswitch: netlink: Flow key attr not present in new flow. [ 206.851898][T12336] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2138'. [ 207.413694][T12356] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2148'. [ 207.478455][T12358] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2149'. [ 207.942355][T12383] netlink: 64985 bytes leftover after parsing attributes in process `syz.3.2157'. [ 208.021995][T12383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.149060][T12394] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.2161'. [ 208.159019][T12394] openvswitch: netlink: Missing key (keys=400040, expected=2000) [ 208.564266][T12414] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.2167'. [ 208.707014][T12429] x_tables: duplicate underflow at hook 1 [ 208.857556][T12435] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2175'. [ 208.907337][T12443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2179'. [ 208.918534][T12443] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2179'. [ 209.172431][T12455] netlink: 'syz.3.2181': attribute type 5 has an invalid length. [ 209.418973][T12476] openvswitch: netlink: Message has 5 unknown bytes. [ 209.868621][T12507] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 209.876035][T12507] IPv6: NLM_F_CREATE should be set when creating new route [ 209.883285][T12507] IPv6: NLM_F_CREATE should be set when creating new route [ 209.932777][T12509] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 209.975183][T12507] netlink: 'syz.0.2200': attribute type 32 has an invalid length. [ 210.003326][T12507] (unnamed net_device) (uninitialized): option coupled_control: invalid value (11) [ 210.108883][T12518] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 210.149631][T12518] netdevsim netdevsim3: Direct firmware load for . [ 210.149631][T12518] failed with error -2 [ 210.181633][T12518] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 210.181633][T12518] [ 210.256905][T12523] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 210.437384][T12536] netlink: 'syz.4.2212': attribute type 2 has an invalid length. [ 210.493195][T12540] netlink: 'syz.1.2213': attribute type 10 has an invalid length. [ 210.515680][T12540] veth1_macvtap: left promiscuous mode [ 210.761486][T12555] netlink: 'syz.4.2218': attribute type 3 has an invalid length. [ 211.095996][T12578] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 211.787054][T12636] netlink: 'syz.0.2243': attribute type 3 has an invalid length. [ 211.802072][T12636] netlink: 'syz.0.2243': attribute type 1 has an invalid length. [ 211.809855][T12636] __nla_validate_parse: 20 callbacks suppressed [ 211.809871][T12636] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.2243'. [ 211.916692][T12642] lo speed is unknown, defaulting to 1000 [ 211.924538][T12642] vcan0 speed is unknown, defaulting to 1000 [ 211.963657][T12647] Cannot find add_set index 0 as target [ 212.070929][T12654] netlink: 'syz.3.2246': attribute type 4 has an invalid length. [ 212.108432][T12657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2251'. [ 212.109374][T12654] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2246'. [ 212.174326][T12662] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2246'. [ 212.189073][T12654] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 212.227302][T12660] netlink: 'syz.0.2252': attribute type 8 has an invalid length. [ 212.269813][T12671] netlink: 'syz.1.2254': attribute type 16 has an invalid length. [ 212.302103][T12671] netlink: 'syz.1.2254': attribute type 3 has an invalid length. [ 212.310939][T12671] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2254'. [ 212.775783][T12700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2263'. [ 212.836000][T12700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2263'. [ 212.870893][T12700] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2263'. [ 213.187312][T12722] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2271'. [ 213.214049][T12725] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2272'. [ 213.343747][T12730] lo speed is unknown, defaulting to 1000 [ 213.364047][T12730] vcan0 speed is unknown, defaulting to 1000 [ 213.611591][T12747] IPVS: Scheduler module ip_vs_sip not found [ 213.684380][T12755] gtp0: entered promiscuous mode [ 213.689394][T12755] gtp0: entered allmulticast mode [ 213.787565][T12754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.244053][T12786] tc_dump_action: action bad kind [ 214.261832][T12786] tc_dump_action: action bad kind [ 214.287913][T12790] IPVS: Error joining to the multicast group [ 214.903229][T12835] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 214.918270][T12835] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 215.260488][T12858] validate_nla: 4 callbacks suppressed [ 215.260508][T12858] netlink: 'syz.4.2316': attribute type 1 has an invalid length. [ 216.260037][T12900] rdma_rxe: rxe_newlink: failed to add vcan0 [ 216.578921][T12916] netlink: 'syz.0.2335': attribute type 4 has an invalid length. [ 216.861761][T12934] __nla_validate_parse: 10 callbacks suppressed [ 216.861780][T12934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2342'. [ 216.889082][T12940] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2343'. [ 216.907245][T12940] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2343'. [ 216.928109][T12939] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2343'. [ 216.959838][T12939] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2343'. [ 217.022263][T12934] netlink: 'syz.4.2342': attribute type 29 has an invalid length. [ 217.083501][T12934] netlink: 'syz.4.2342': attribute type 29 has an invalid length. [ 217.098347][T12934] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2342'. [ 217.315892][T12964] tipc: Started in network mode [ 217.332329][T12964] tipc: Node identity , cluster identity 4711 [ 217.332679][T12965] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 217.338422][T12964] tipc: Failed to set node id, please configure manually [ 217.338460][T12964] tipc: Enabling of bearer rejected, failed to enable media [ 217.521770][T12982] netlink: 'syz.3.2353': attribute type 1 has an invalid length. [ 217.542806][T12982] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2353'. [ 217.928437][T13014] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.937423][T13014] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.946250][T13014] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.955083][T13014] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.974504][T13016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2365'. [ 218.014717][T13019] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2366'. [ 218.110149][T13022] netlink: 'syz.4.2369': attribute type 3 has an invalid length. [ 218.112415][T13023] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2367'. [ 218.131014][T13023] Źü¯: entered promiscuous mode [ 218.147386][T13022] netlink: 'syz.4.2369': attribute type 1 has an invalid length. [ 218.362204][T13038] netlink: 'syz.0.2374': attribute type 2 has an invalid length. [ 218.536377][T13055] netlink: 'syz.1.2380': attribute type 3 has an invalid length. [ 218.548858][T13050] netlink: 'syz.2.2378': attribute type 4 has an invalid length. [ 218.928939][T13084] IPVS: set_ctl: invalid protocol: 46 0.0.0.0:20003 [ 219.042111][T13088] Unsupported ieee802154 address type: 0 [ 219.377583][T13125] openvswitch: netlink: Message has 8 unknown bytes. [ 219.510932][T13135] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 219.575960][T13135] IPv6: sit3: Disabled Multicast RS [ 219.595992][T13134] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 219.633170][T13134] tipc: Enabled bearer , priority 10 [ 219.732335][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 219.896806][T13153] bond0: entered promiscuous mode [ 219.904470][T13153] bond_slave_0: entered promiscuous mode [ 219.926036][T13153] bond_slave_1: entered promiscuous mode [ 220.002009][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 220.069725][T13164] netem: change failed [ 220.295911][T13182] validate_nla: 6 callbacks suppressed [ 220.295934][T13182] netlink: 'syz.2.2418': attribute type 10 has an invalid length. [ 220.322912][T13182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.341200][T13182] team0: Port device batadv0 added [ 220.461033][T13191] netlink: 'syz.3.2421': attribute type 7 has an invalid length. [ 220.470882][T13192] netlink: 'syz.2.2422': attribute type 11 has an invalid length. [ 220.499800][T13195] ebt_among: wrong size: 1048 against expected 1006634004, rounded to 1006634008 [ 220.531664][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 220.696803][T13209] netlink: 'syz.1.2426': attribute type 9 has an invalid length. [ 220.752736][T13211] netlink: 'syz.3.2428': attribute type 1 has an invalid length. [ 220.806104][T13211] 8021q: adding VLAN 0 to HW filter on device bond2 [ 221.295071][T13251] vlan2: entered allmulticast mode [ 221.312092][T13251] bond0: entered allmulticast mode [ 221.317497][T13251] bond_slave_0: entered allmulticast mode [ 221.324510][T13251] bond_slave_1: entered allmulticast mode [ 221.352290][T13251] bond0: left allmulticast mode [ 221.368648][T13251] bond_slave_0: left allmulticast mode [ 221.385127][T13251] bond_slave_1: left allmulticast mode [ 221.571338][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 221.601974][T13264] netlink: 'syz.2.2445': attribute type 21 has an invalid length. [ 222.132160][T13282] __nla_validate_parse: 26 callbacks suppressed [ 222.132183][T13282] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2450'. [ 222.201161][T13282] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2450'. [ 222.403337][T13287] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 222.480574][T13291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2454'. [ 222.611339][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 223.161195][T13309] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 223.204170][T13310] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 223.272366][T13309] netlink: 'syz.4.2461': attribute type 11 has an invalid length. [ 223.588005][T13331] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2468'. [ 223.617886][T13327] pim6reg1: entered promiscuous mode [ 223.649453][T13327] pim6reg1: entered allmulticast mode [ 223.665711][T13331] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2468'. [ 223.691006][T13340] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 223.842166][T13350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2473'. [ 223.928187][T13354] netlink: 'syz.1.2475': attribute type 1 has an invalid length. [ 223.969310][T13360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2477'. [ 224.032987][T13363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2478'. [ 224.438818][T13395] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2488'. [ 224.596332][T13403] netlink: 201400 bytes leftover after parsing attributes in process `syz.1.2490'. [ 224.692309][ C0] net_ratelimit: 2 callbacks suppressed [ 224.692332][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 224.761062][T13406] Unknown options in mask 1f4 [ 224.847985][T13418] netlink: 'syz.3.2496': attribute type 10 has an invalid length. [ 224.912675][T13418] team0: Port device bridge0 removed [ 224.932849][T13418] bridge0: entered promiscuous mode [ 224.955591][T13418] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 225.040325][T13430] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 225.167640][T13435] lo speed is unknown, defaulting to 1000 [ 225.177247][T13435] vcan0 speed is unknown, defaulting to 1000 [ 225.434347][T13460] netlink: 'syz.0.2508': attribute type 3 has an invalid length. [ 225.455354][T13460] netlink: 'syz.0.2508': attribute type 1 has an invalid length. [ 225.657871][T13466] netlink: 'syz.4.2509': attribute type 1 has an invalid length. [ 225.731322][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 225.739419][T13474] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 225.752071][T13474] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 225.782713][T13474] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 226.125808][T13503] netlink: 'syz.2.2519': attribute type 11 has an invalid length. [ 226.132169][T13505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.157081][T13505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.167665][T13505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.179052][T13505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.190463][T13505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.201050][T13505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.211054][T13505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.222583][T13505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.232466][T13505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.246949][T13505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.257364][T13505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.268872][T13505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.313098][T13510] atomic_op ffff88807addf198 conn xmit_atomic 0000000000000000 [ 226.342915][T13508] ip6_vti0: entered promiscuous mode [ 226.359887][T13508] vlan2: entered promiscuous mode [ 226.381884][T13508] ip6_vti0: left promiscuous mode [ 226.695090][T13521] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 226.771388][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 226.814780][T13526] IPVS: persistence engine module ip_vs_pe_| not found [ 227.051483][T13543] netlink: 'syz.1.2533': attribute type 21 has an invalid length. [ 227.179110][T13555] tipc: Enabling of bearer rejected, media not registered [ 227.272290][T13561] __nla_validate_parse: 14 callbacks suppressed [ 227.272312][T13561] netlink: 9412 bytes leftover after parsing attributes in process `syz.4.2537'. [ 227.322016][T13560] netlink: 'syz.1.2536': attribute type 2 has an invalid length. [ 227.344563][T13560] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2536'. [ 227.413543][ C1] ------------[ cut here ]------------ [ 227.419497][ C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 227.430276][ C1] WARNING: CPU: 1 PID: 13558 at net/mac80211/rate.c:385 __rate_control_send_low+0x659/0x890 [ 227.440438][ C1] Modules linked in: [ 227.444399][ C1] CPU: 1 UID: 0 PID: 13558 Comm: syz.1.2536 Not tainted 6.12.0-rc3-syzkaller-00152-g3b05b9c36ddd #0 [ 227.455221][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 227.465344][ C1] RIP: 0010:__rate_control_send_low+0x659/0x890 [ 227.471658][ C1] Code: 8b 14 24 0f 85 de 01 00 00 8b 0a 48 c7 c7 00 6a 2a 8d 48 8b 74 24 10 44 89 f2 44 8b 44 24 1c 44 8b 4c 24 0c e8 c8 41 1f f6 90 <0f> 0b 90 90 e9 71 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c db [ 227.491335][ C1] RSP: 0018:ffffc90000a18520 EFLAGS: 00010246 [ 227.497443][ C1] RAX: 5fd855926cad7e00 RBX: 000000000000000c RCX: ffff8880292bda00 [ 227.505484][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 227.513532][ C1] RBP: ffff8880286112a8 R08: ffffffff8155e402 R09: fffffbfff1cf9fd8 [ 227.521582][ C1] R10: dffffc0000000000 R11: fffffbfff1cf9fd8 R12: 0000000000000800 [ 227.529618][ C1] R13: 000000000000000c R14: 00000000ffffffff R15: dffffc0000000000 [ 227.537651][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 227.546650][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 227.553396][ C1] CR2: 00007f3307c656c0 CR3: 000000007e5f0000 CR4: 00000000003526f0 [ 227.561443][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 227.569433][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 227.577457][ C1] Call Trace: [ 227.580752][ C1] [ 227.583667][ C1] ? __warn+0x168/0x4e0 [ 227.587861][ C1] ? __rate_control_send_low+0x659/0x890 [ 227.593585][ C1] ? report_bug+0x2b3/0x500 [ 227.598129][ C1] ? __rate_control_send_low+0x659/0x890 [ 227.603819][ C1] ? handle_bug+0x60/0x90 [ 227.608177][ C1] ? exc_invalid_op+0x1a/0x50 [ 227.612912][ C1] ? asm_exc_invalid_op+0x1a/0x20 [ 227.617984][ C1] ? __warn_printk+0x292/0x360 [ 227.622839][ C1] ? __rate_control_send_low+0x659/0x890 [ 227.628508][ C1] rate_control_send_low+0x1a8/0x770 [ 227.633854][ C1] rate_control_get_rate+0x20e/0x5e0 [ 227.639171][ C1] ieee80211_beacon_get_finish+0x49e/0x870 [ 227.645060][ C1] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 227.651478][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 227.657251][ C1] ieee80211_beacon_get_ap+0x14e8/0x1990 [ 227.662989][ C1] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 227.669021][ C1] __ieee80211_beacon_get+0x109e/0x15c0 [ 227.674623][ C1] ? __ieee80211_beacon_get+0x36/0x15c0 [ 227.680201][ C1] ieee80211_beacon_get_tim+0xb4/0x320 [ 227.685738][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 227.691874][ C1] mac80211_hwsim_beacon_tx+0x39d/0x850 [ 227.697485][ C1] __iterate_interfaces+0x222/0x510 [ 227.702762][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 227.708873][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 227.715012][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x170 [ 227.722277][ C1] ieee80211_iterate_active_interfaces_atomic+0xd8/0x170 [ 227.729363][ C1] mac80211_hwsim_beacon+0xd4/0x1f0 [ 227.734638][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 227.740487][ C1] __hrtimer_run_queues+0x59b/0xd50 [ 227.745758][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 227.751830][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 227.757588][ C1] ? ktime_get_update_offsets_now+0x22d/0x250 [ 227.763750][ C1] hrtimer_run_softirq+0x19a/0x2c0 [ 227.768905][ C1] handle_softirqs+0x2c5/0x980 [ 227.773753][ C1] ? __irq_exit_rcu+0xf4/0x1c0 [ 227.778563][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 227.783931][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 227.789174][ C1] __irq_exit_rcu+0xf4/0x1c0 [ 227.793857][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 227.799086][ C1] irq_exit_rcu+0x9/0x30 [ 227.803371][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 227.809037][ C1] [ 227.811561][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 227.811984][ C1] [ 227.821793][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 227.827816][ C1] RIP: 0010:lock_acquire+0x264/0x550 [ 227.833186][ C1] Code: 2b 00 74 08 4c 89 f7 e8 fa 42 8e 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 227.852869][ C1] RSP: 0018:ffffc900124273a0 EFLAGS: 00000206 [ 227.859003][ C1] RAX: 0000000000000001 RBX: 1ffff92002484e80 RCX: 5fd855926cad7e00 [ 227.867050][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0adc40 RDI: ffffffff8c610120 [ 227.875081][ C1] RBP: ffffc900124274f0 R08: ffffffff942c9807 R09: 1ffffffff2859300 [ 227.883106][ C1] R10: dffffc0000000000 R11: fffffbfff2859301 R12: 1ffff92002484e7c [ 227.891108][ C1] R13: dffffc0000000000 R14: ffffc90012427400 R15: 0000000000000246 [ 227.899137][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 227.904233][ C1] ? page_ext_put+0x97/0xc0 [ 227.908761][ C1] ? __pte_offset_map_lock+0x273/0x300 [ 227.914270][ C1] ? __pfx_lock_release+0x10/0x10 [ 227.919328][ C1] ? pfn_valid+0xf6/0x450 [ 227.923707][ C1] pfn_valid+0x113/0x450 [ 227.928008][ C1] ? pfn_valid+0xf6/0x450 [ 227.932413][ C1] page_table_check_clear+0x1e/0x550 [ 227.937738][ C1] unmap_page_range+0x2a13/0x40e0 [ 227.942855][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 227.948273][ C1] ? mas_next_slot+0xdc6/0xea0 [ 227.953116][ C1] ? uprobe_munmap+0x183/0x460 [ 227.957923][ C1] ? unmap_single_vma+0x1bd/0x2b0 [ 227.963007][ C1] unmap_vmas+0x3cc/0x5f0 [ 227.967378][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 227.972306][ C1] ? tlb_gather_mmu_fullmm+0x160/0x210 [ 227.977802][ C1] exit_mmap+0x275/0xc40 [ 227.982207][ C1] ? __mutex_lock+0x2ef/0xd70 [ 227.986921][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 227.991766][ C1] ? __pfx_exit_aio+0x10/0x10 [ 227.996573][ C1] ? uprobe_clear_state+0x271/0x290 [ 228.001820][ C1] ? mm_update_next_owner+0xa4/0x810 [ 228.007139][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 228.012406][ C1] __mmput+0x115/0x390 [ 228.016503][ C1] exit_mm+0x220/0x310 [ 228.020590][ C1] ? __pfx_exit_mm+0x10/0x10 [ 228.025243][ C1] ? taskstats_exit+0x326/0xa60 [ 228.030136][ C1] do_exit+0x9b2/0x28e0 [ 228.034362][ C1] ? preempt_schedule_common+0x84/0xd0 [ 228.039851][ C1] ? __pfx_do_exit+0x10/0x10 [ 228.044484][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 228.050494][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 228.056854][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 228.062296][ C1] do_group_exit+0x207/0x2c0 [ 228.066929][ C1] __x64_sys_exit_group+0x3f/0x40 [ 228.072019][ C1] x64_sys_call+0x2634/0x2640 [ 228.076720][ C1] do_syscall_64+0xf3/0x230 [ 228.081283][ C1] ? clear_bhb_loop+0x35/0x90 [ 228.086006][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.091981][ C1] RIP: 0033:0x7f26ae17dff9 [ 228.096429][ C1] Code: Unable to access opcode bytes at 0x7f26ae17dfcf. [ 228.103507][ C1] RSP: 002b:00007ffeaa7c0cc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 228.111996][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f26ae17dff9 [ 228.120005][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 228.128058][ C1] RBP: 00007ffeaa7c0d1c R08: 00007ffeaa7c0daf R09: 00000000000376f7 [ 228.136109][ C1] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000032 [ 228.144155][ C1] R13: 00000000000376f7 R14: 0000000000037695 R15: 00007ffeaa7c0d70 [ 228.152232][ C1] [ 228.155300][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 228.162612][ C1] CPU: 1 UID: 0 PID: 13558 Comm: syz.1.2536 Not tainted 6.12.0-rc3-syzkaller-00152-g3b05b9c36ddd #0 [ 228.173406][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 228.183492][ C1] Call Trace: [ 228.186790][ C1] [ 228.189651][ C1] dump_stack_lvl+0x241/0x360 [ 228.194340][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.199552][ C1] ? __pfx__printk+0x10/0x10 [ 228.204163][ C1] ? vscnprintf+0x5d/0x90 [ 228.208510][ C1] panic+0x349/0x880 [ 228.212412][ C1] ? __warn+0x177/0x4e0 [ 228.216584][ C1] ? __pfx_panic+0x10/0x10 [ 228.220999][ C1] __warn+0x34b/0x4e0 [ 228.224985][ C1] ? __rate_control_send_low+0x659/0x890 [ 228.230635][ C1] report_bug+0x2b3/0x500 [ 228.234979][ C1] ? __rate_control_send_low+0x659/0x890 [ 228.240632][ C1] handle_bug+0x60/0x90 [ 228.244814][ C1] exc_invalid_op+0x1a/0x50 [ 228.249353][ C1] asm_exc_invalid_op+0x1a/0x20 [ 228.254210][ C1] RIP: 0010:__rate_control_send_low+0x659/0x890 [ 228.260469][ C1] Code: 8b 14 24 0f 85 de 01 00 00 8b 0a 48 c7 c7 00 6a 2a 8d 48 8b 74 24 10 44 89 f2 44 8b 44 24 1c 44 8b 4c 24 0c e8 c8 41 1f f6 90 <0f> 0b 90 90 e9 71 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c db [ 228.280078][ C1] RSP: 0018:ffffc90000a18520 EFLAGS: 00010246 [ 228.286159][ C1] RAX: 5fd855926cad7e00 RBX: 000000000000000c RCX: ffff8880292bda00 [ 228.294164][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 228.302174][ C1] RBP: ffff8880286112a8 R08: ffffffff8155e402 R09: fffffbfff1cf9fd8 [ 228.310161][ C1] R10: dffffc0000000000 R11: fffffbfff1cf9fd8 R12: 0000000000000800 [ 228.318134][ C1] R13: 000000000000000c R14: 00000000ffffffff R15: dffffc0000000000 [ 228.326130][ C1] ? __warn_printk+0x292/0x360 [ 228.330930][ C1] rate_control_send_low+0x1a8/0x770 [ 228.336235][ C1] rate_control_get_rate+0x20e/0x5e0 [ 228.341558][ C1] ieee80211_beacon_get_finish+0x49e/0x870 [ 228.347402][ C1] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 228.353771][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 228.359613][ C1] ieee80211_beacon_get_ap+0x14e8/0x1990 [ 228.365299][ C1] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 228.371337][ C1] __ieee80211_beacon_get+0x109e/0x15c0 [ 228.376924][ C1] ? __ieee80211_beacon_get+0x36/0x15c0 [ 228.382514][ C1] ieee80211_beacon_get_tim+0xb4/0x320 [ 228.387991][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 228.394077][ C1] mac80211_hwsim_beacon_tx+0x39d/0x850 [ 228.399650][ C1] __iterate_interfaces+0x222/0x510 [ 228.404858][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 228.410945][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 228.417008][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x170 [ 228.424208][ C1] ieee80211_iterate_active_interfaces_atomic+0xd8/0x170 [ 228.431261][ C1] mac80211_hwsim_beacon+0xd4/0x1f0 [ 228.436468][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 228.442282][ C1] __hrtimer_run_queues+0x59b/0xd50 [ 228.447494][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 228.453512][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 228.459247][ C1] ? ktime_get_update_offsets_now+0x22d/0x250 [ 228.465330][ C1] hrtimer_run_softirq+0x19a/0x2c0 [ 228.470461][ C1] handle_softirqs+0x2c5/0x980 [ 228.475222][ C1] ? __irq_exit_rcu+0xf4/0x1c0 [ 228.479981][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 228.485283][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 228.490503][ C1] __irq_exit_rcu+0xf4/0x1c0 [ 228.495090][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 228.500289][ C1] irq_exit_rcu+0x9/0x30 [ 228.504550][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 228.510207][ C1] [ 228.513141][ C1] [ 228.516079][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 228.522058][ C1] RIP: 0010:lock_acquire+0x264/0x550 [ 228.527367][ C1] Code: 2b 00 74 08 4c 89 f7 e8 fa 42 8e 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 228.547003][ C1] RSP: 0018:ffffc900124273a0 EFLAGS: 00000206 [ 228.553106][ C1] RAX: 0000000000000001 RBX: 1ffff92002484e80 RCX: 5fd855926cad7e00 [ 228.561104][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0adc40 RDI: ffffffff8c610120 [ 228.569088][ C1] RBP: ffffc900124274f0 R08: ffffffff942c9807 R09: 1ffffffff2859300 [ 228.577060][ C1] R10: dffffc0000000000 R11: fffffbfff2859301 R12: 1ffff92002484e7c [ 228.585038][ C1] R13: dffffc0000000000 R14: ffffc90012427400 R15: 0000000000000246 [ 228.593063][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 228.598118][ C1] ? page_ext_put+0x97/0xc0 [ 228.602630][ C1] ? __pte_offset_map_lock+0x273/0x300 [ 228.608112][ C1] ? __pfx_lock_release+0x10/0x10 [ 228.613149][ C1] ? pfn_valid+0xf6/0x450 [ 228.617493][ C1] pfn_valid+0x113/0x450 [ 228.621743][ C1] ? pfn_valid+0xf6/0x450 [ 228.626100][ C1] page_table_check_clear+0x1e/0x550 [ 228.631413][ C1] unmap_page_range+0x2a13/0x40e0 [ 228.636471][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 228.641854][ C1] ? mas_next_slot+0xdc6/0xea0 [ 228.646656][ C1] ? uprobe_munmap+0x183/0x460 [ 228.651450][ C1] ? unmap_single_vma+0x1bd/0x2b0 [ 228.656492][ C1] unmap_vmas+0x3cc/0x5f0 [ 228.660821][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 228.665693][ C1] ? tlb_gather_mmu_fullmm+0x160/0x210 [ 228.671168][ C1] exit_mmap+0x275/0xc40 [ 228.675405][ C1] ? __mutex_lock+0x2ef/0xd70 [ 228.680085][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 228.684885][ C1] ? __pfx_exit_aio+0x10/0x10 [ 228.689584][ C1] ? uprobe_clear_state+0x271/0x290 [ 228.694794][ C1] ? mm_update_next_owner+0xa4/0x810 [ 228.700095][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 228.705301][ C1] __mmput+0x115/0x390 [ 228.709387][ C1] exit_mm+0x220/0x310 [ 228.713463][ C1] ? __pfx_exit_mm+0x10/0x10 [ 228.718060][ C1] ? taskstats_exit+0x326/0xa60 [ 228.722931][ C1] do_exit+0x9b2/0x28e0 [ 228.727118][ C1] ? preempt_schedule_common+0x84/0xd0 [ 228.732625][ C1] ? __pfx_do_exit+0x10/0x10 [ 228.737232][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 228.743224][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 228.749595][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 228.754968][ C1] do_group_exit+0x207/0x2c0 [ 228.759559][ C1] __x64_sys_exit_group+0x3f/0x40 [ 228.764592][ C1] x64_sys_call+0x2634/0x2640 [ 228.769291][ C1] do_syscall_64+0xf3/0x230 [ 228.773807][ C1] ? clear_bhb_loop+0x35/0x90 [ 228.778497][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.784404][ C1] RIP: 0033:0x7f26ae17dff9 [ 228.788829][ C1] Code: Unable to access opcode bytes at 0x7f26ae17dfcf. [ 228.796014][ C1] RSP: 002b:00007ffeaa7c0cc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 228.804440][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f26ae17dff9 [ 228.812440][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 228.820426][ C1] RBP: 00007ffeaa7c0d1c R08: 00007ffeaa7c0daf R09: 00000000000376f7 [ 228.828399][ C1] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000032 [ 228.836400][ C1] R13: 00000000000376f7 R14: 0000000000037695 R15: 00007ffeaa7c0d70 [ 228.844397][ C1] [ 228.847593][ C1] Kernel Offset: disabled [ 228.851966][ C1] Rebooting in 86400 seconds..