last executing test programs: 1m6.532219119s ago: executing program 2 (id=135): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="070000000000000000000200000008002500000000000c00990001"], 0x28}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x24}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRES64=r0, @ANYRESOCT=r1, @ANYBLOB="11cc77a1e9df019f5970edf0923ce8fcbd2e2d042c3e16ff256b323304e6d46362ab69b2560b1a02de5fcde5ee"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) socketpair(0x1de1487d7d302557, 0x6, 0x8, &(0x7f0000000080)) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a0b040000380000000000020000003c0004803800018007000100637400002c000280150002400000000708000240000000110800014000000014080001400000000d05000300030000000900010073797a30000000000900020073797a32"], 0x90}}, 0x0) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='io.latency\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f00000001c0)=0x47ef, 0x12) 55.502554757s ago: executing program 2 (id=135): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="070000000000000000000200000008002500000000000c00990001"], 0x28}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x24}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRES64=r0, @ANYRESOCT=r1, @ANYBLOB="11cc77a1e9df019f5970edf0923ce8fcbd2e2d042c3e16ff256b323304e6d46362ab69b2560b1a02de5fcde5ee"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) socketpair(0x1de1487d7d302557, 0x6, 0x8, &(0x7f0000000080)) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a0b040000380000000000020000003c0004803800018007000100637400002c000280150002400000000708000240000000110800014000000014080001400000000d05000300030000000900010073797a30000000000900020073797a32"], 0x90}}, 0x0) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='io.latency\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f00000001c0)=0x47ef, 0x12) 44.274602288s ago: executing program 2 (id=135): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="070000000000000000000200000008002500000000000c00990001"], 0x28}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x24}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRES64=r0, @ANYRESOCT=r1, @ANYBLOB="11cc77a1e9df019f5970edf0923ce8fcbd2e2d042c3e16ff256b323304e6d46362ab69b2560b1a02de5fcde5ee"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) socketpair(0x1de1487d7d302557, 0x6, 0x8, &(0x7f0000000080)) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a0b040000380000000000020000003c0004803800018007000100637400002c000280150002400000000708000240000000110800014000000014080001400000000d05000300030000000900010073797a30000000000900020073797a32"], 0x90}}, 0x0) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='io.latency\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f00000001c0)=0x47ef, 0x12) 32.632915533s ago: executing program 2 (id=135): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="070000000000000000000200000008002500000000000c00990001"], 0x28}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x24}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRES64=r0, @ANYRESOCT=r1, @ANYBLOB="11cc77a1e9df019f5970edf0923ce8fcbd2e2d042c3e16ff256b323304e6d46362ab69b2560b1a02de5fcde5ee"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) socketpair(0x1de1487d7d302557, 0x6, 0x8, &(0x7f0000000080)) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a0b040000380000000000020000003c0004803800018007000100637400002c000280150002400000000708000240000000110800014000000014080001400000000d05000300030000000900010073797a30000000000900020073797a32"], 0x90}}, 0x0) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='io.latency\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f00000001c0)=0x47ef, 0x12) 20.302387983s ago: executing program 2 (id=135): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="070000000000000000000200000008002500000000000c00990001"], 0x28}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x24}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRES64=r0, @ANYRESOCT=r1, @ANYBLOB="11cc77a1e9df019f5970edf0923ce8fcbd2e2d042c3e16ff256b323304e6d46362ab69b2560b1a02de5fcde5ee"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) socketpair(0x1de1487d7d302557, 0x6, 0x8, &(0x7f0000000080)) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a0b040000380000000000020000003c0004803800018007000100637400002c000280150002400000000708000240000000110800014000000014080001400000000d05000300030000000900010073797a30000000000900020073797a32"], 0x90}}, 0x0) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='io.latency\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f00000001c0)=0x47ef, 0x12) 9.483258803s ago: executing program 2 (id=135): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="070000000000000000000200000008002500000000000c00990001"], 0x28}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x24}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRES64=r0, @ANYRESOCT=r1, @ANYBLOB="11cc77a1e9df019f5970edf0923ce8fcbd2e2d042c3e16ff256b323304e6d46362ab69b2560b1a02de5fcde5ee"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) socketpair(0x1de1487d7d302557, 0x6, 0x8, &(0x7f0000000080)) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a0b040000380000000000020000003c0004803800018007000100637400002c000280150002400000000708000240000000110800014000000014080001400000000d05000300030000000900010073797a30000000000900020073797a32"], 0x90}}, 0x0) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='io.latency\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f00000001c0)=0x47ef, 0x12) 2.519956281s ago: executing program 0 (id=1146): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x4003, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) r1 = socket(0x2c, 0x3, 0x5) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r2}, 0x10) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0xb, 0x7}, 0x8) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000001c0)=[{&(0x7f0000000180)="fdc6", 0x2}], 0x1, 0x5) vmsplice(r4, &(0x7f0000000380)=[{&(0x7f0000013580)='\r', 0x1}], 0x1, 0x1) r5 = socket(0x15, 0x5, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x0, 0x1100, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @private}}}}) 2.194867232s ago: executing program 0 (id=1151): unshare(0x2a040000) unshare(0x20040600) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='tegra_dma_complete_cb\x00', r0, 0x0, 0x1e33fb95}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x2d}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 2.194212203s ago: executing program 1 (id=1152): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) (async) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x100, 0x70bd27, 0xfffffffe, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x0, 0x1, {@ip4=@broadcast}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x51dcb31a43476434) 2.085812483s ago: executing program 3 (id=1154): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket(0x1e, 0x805, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x71, 0xffffffffffffffff, 0x46e4c000) connect$tipc(r4, &(0x7f0000000000)=@id, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="1802000005000000000000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="00000000000000003d75fcff736d36554d360000fcffffffbf91000000000000b70200000200000085000000819fd048b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x30, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x980}, {0x8, 0x0, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x30, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x980}, {0x8, 0x0, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) 2.002764054s ago: executing program 1 (id=1155): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000140)=0x3, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x4, r2, 0x0, r0}, 0x10) socket$xdp(0x2c, 0x3, 0x0) (async) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) (async) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000140)=0x3, 0x4) (async) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x4, r2, 0x0, r0}, 0x10) (async) 2.002337029s ago: executing program 0 (id=1156): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r2) socket$kcm(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) recvmsg(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000000900)=""/223, 0xdf}], 0x1}, 0x102) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x48}}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r5}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r3, &(0x7f0000000180)}, 0x20) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831373f00000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@cgroup=r1, 0x2, 0x1, 0x1, &(0x7f0000000380)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)={@fallback=r1, r2, 0x4, 0x8, 0x0, @void, @value=r1, @void, @void, r7}, 0x20) r8 = accept4(r0, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e24, @private=0xa010102}, 0x10) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r8, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x8, 0x30, 0x1, 0xe701}, &(0x7f00000002c0)=0x18) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@ipmr_newroute={0x1c, 0x18, 0x1, 0x70bd2d, 0x25dfdbff, {0x80, 0x14, 0x20, 0x7, 0xfe, 0x1, 0xfe, 0x6, 0x100}}, 0x1c}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000040)=0xf, 0x4) sendmsg$netlink(r10, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="b80000002d000100000008000000000000000000", @ANYRES32, @ANYBLOB="0b000080976b640868603000910001"], 0xb8}], 0x1}, 0x0) 1.957196418s ago: executing program 4 (id=1157): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x50, 0x0, &(0x7f0000000280)) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x9c}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (rerun: 64) 1.871017999s ago: executing program 3 (id=1158): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, &(0x7f00000001c0)) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) (async) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000140)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0xfffffffd, @mcast2, 0x10000000}}}, 0x108) (async) r3 = socket(0x28, 0x1, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r3) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_buf(r2, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x48000009, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_QUANTUM={0x5, 0xf}]}}]}, 0x78}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_DREG={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 1.70663844s ago: executing program 1 (id=1159): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000002380)={0x0, 0x1, 0x6, @broadcast}, 0x10) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@ipmr_getroute={0x1c, 0x1a, 0x100, 0x70bd2d, 0x25dfdbfb, {0x80, 0x47805938626dc967, 0x8a, 0x6, 0x0, 0x3, 0xfd, 0x9, 0x1200}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f00000001c0)=0x800, &(0x7f0000000200)=0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@local}}, &(0x7f0000000000)=0xe8) (async) r5 = socket(0x2, 0x3, 0xff) sendto$inet(r5, &(0x7f0000000040)="b401fcc8070000090000008e052af9c34b7d7494", 0xffffffe1, 0x4085, &(0x7f0000000000)={0x2, 0x4e21, @private=0xa010102}, 0x10) (async, rerun: 64) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x70bd2a, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e, 0x0, r4}, {0x0, 0x800, 0x0, 0x7, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x3}}, [@tmpl={0x144, 0x5, [{{@in=@remote, 0x0, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x8}, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in6=@remote, 0x3502}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3}, {{@in6=@mcast2, 0x4d3, 0x3c}, 0x2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2b}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x4}]}]}, 0x1fc}}, 0x0) (rerun: 64) 1.531413689s ago: executing program 4 (id=1160): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x38, r4, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x38}, 0x4, 0x700000000000000}, 0x8850) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r4, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x17}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x20000001) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6c, 0x0, @empty, @broadcast}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) 1.401218478s ago: executing program 3 (id=1161): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4401e8ff", @ANYRES16=0x0, @ANYBLOB="000229bd7000fbdbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300030000000600040002000000"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4000010) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000011142302000000002800"/24, @ANYRESOCT=r1], 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x4004001) 1.178692547s ago: executing program 1 (id=1162): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5500000018007f03c0fe15b282a380930a50000248a8430b916d0200390009002300ff6c0200000015000500fc01ffdd070b566881b38432009b3100b125ca997b5fdf13090200fb572fbc100800000400240200e2", 0x55}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x6, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000080000000000000000000018110000", @ANYRES32=r1, @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) 1.06842657s ago: executing program 3 (id=1163): r0 = socket$l2tp6(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xb9}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001880)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x158, 0x111, 0x4b4, 0x158, 0xd4feffff, 0x2b0, 0x20a, 0x278, 0x2b0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'vlan1\x00'}, 0x7a, 0x118, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x80000001, 0x80}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@dst={{0x48}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYBLOB='6\x00', @ANYBLOB="addaced30a01a7fe46005a6cdee853229216446b411c8d9e63e3d3"], 0x20) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000005fc0)={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x4, 0x8000, 0x40, 0x0, 0x1000, 0x451a019a}) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xfff3}}}, 0x24}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a640000e70608000000000000000000000200000038000480340001800a0001006c696d69340000002400028008000440000000010c000240000000009c4b670900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a00"/140], 0x8c}}, 0x4) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x2, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) (async, rerun: 32) socket$pppl2tp(0x18, 0x1, 0x1) (rerun: 32) 1.060706908s ago: executing program 4 (id=1164): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {}, [@NDA_DST_MAC={0xa, 0x1, @local}, @NDA_FLAGS_EXT={0x8}]}, 0x30}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @initdev, @dev}, &(0x7f0000000080)=0xc) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xc4, 0x12, 0x4, 0x70bd2a, 0x25dfdbff, {0x1f, 0x9, 0x3, 0x9, {0x4e22, 0x4e24, [0x6, 0x2, 0x9, 0xffffffff], [0xfb, 0x200, 0xe35, 0x2], r1, [0x2, 0xfffffff8]}, 0x7fff, 0x101}, [@INET_DIAG_REQ_BYTECODE={0x75, 0x1, "6edbd8d4248da34782646394762e8224d5362bc46bce003d39dded84e0fbd1da0d8e7c471b74d1f1ddf779a418a13b0dbf9ac7f9b33501663df1dd9530e4219b80f57373371ddb86c8a9e38dcdd38cf13ab82fa2eb895e4834b82e2cc80aaafa3830283a130e78ea613eb2a56b13cd0ff8"}]}, 0xc4}, 0x1, 0x0, 0x0, 0x448c1}, 0x4) 1.005749334s ago: executing program 1 (id=1165): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @remote, 0xb}, 0x1c) syz_emit_ethernet(0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60010100006c1100fe8000000000000000000400000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000180)={0x1d, 0x26, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @generic={0x0, 0x49, "ee3253f19625e3befebc954690b14d18550a844159f786b9ab4ab098db028f8bf1e21ac2ba01b312ffd442a2525c5ba8fd7b14c2a74fbcbbc4d9f52a2faab965917cfd0927853a8adc"}, @generic={0x7, 0xe4, "564bf5e0da44c300aa663ae2873818880faff5a0dda88910c896ae3ee874cfa3938c042a3c4c879067f3f191e3c49da35580c4c715f67414ebf6406b482f1ab6deed7881d4fcaac2013e77b6b9e5aea7c26dd224b4936755e87ea49313fe076aa79304effdd6df070f5c6ce6bfb9c5c8906efeedf2be9c083aa0026546c848530604e423d033d9d38c4a79a1db7a6c9a54de184ae8270a456c5cf44ca5a930077c8923bb54fc7377b2ad0aeb068926bbbb1c0fdd7916809c62c4711047ef0e1685cbca57c114b68cd913528c799b541a2a12d7dae3decd810c3756e66cd66cdc78d8fd35"}]}, 0x140) 922.865027ms ago: executing program 0 (id=1166): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000a5db124a00002000018008000100", @ANYRES32=r2, @ANYBLOB="14000200776731"], 0x34}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r4) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r4) sendmsg$NLBL_CIPSOV4_C_REMOVE(r3, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x1e8, r6, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x10c, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x37}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x131593c3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7fa9d03a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x43}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x31968873}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf3}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xeb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x60c7aeac}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4b2361c2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8bc441}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18871b2f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x247d02df}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xad}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x44}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34b9834b}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x81}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6f334fae}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4a}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcd}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x47bbf9d0}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x61}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1af6e37d}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0x9c, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc0ea}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcf71}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2fd16c80}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9ff6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5721}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaa53}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x75e3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6494}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x732f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7b93}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc369}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5a0b8c5b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x54b7ba10}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf538}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x220e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2b8935ba}]}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x8004}, 0x44004800) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newnexthop={0x18, 0x48, 0x1}, 0x18}}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r5, 0x1}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000feffffff85000000b200000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 883.75773ms ago: executing program 3 (id=1167): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x400003, 0x80040009, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x28, r1, 0x5, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x8004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000240)={0x38, r4, 0x1, 0x1, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x38}}, 0x0) 839.376866ms ago: executing program 4 (id=1168): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e22, @remote}}, [0xfffffffffffffff8, 0x100000000, 0x0, 0x6, 0x100000001, 0x7, 0x0, 0x9, 0x3, 0x8, 0x3, 0x26, 0x70e, 0x41e, 0x800]}, &(0x7f00000004c0)=0x100) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000001c00c9242bbd7000fbdbdf2507000000", @ANYRES32=r4, @ANYBLOB="800068573805f7d161aa91c5591e0a0a000200aaaaaaaaaa1b0000ac3f3c94aa7493af57da91234ff80d7d676defcc2b02b09b80f5e353dddd3771ee9b6315559c267c5a458ac92f1655df88dbc3ecf86f50614ab92aae3a137e72e791069215e9976d6b1879c2bcffdb1e5f61120be79122489d8e9d1a6d0f13fb3aa1a621bb63e0f6beb207370af5"], 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002fc0)=@newtfilter={0xe84, 0x2c, 0xd27, 0x70bd2a, 0x8000, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000000, 0x7, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x810, 0x4, 0x5}, {0x4a7, 0x1ff, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x97, 0xfffffffd, 0x4}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x10000, 0x5, 0x1, 0x401, 0x2, 0x8}, {0x0, 0x5, 0x1437, 0x1, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x6, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x3, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x1, 0x3, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x2, 0xffffffff, 0xfffffffa}, {0x10000005, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x5, 0x1, 0x1ff, 0x6}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0x0, 0xeaf}, {0x9, 0x2, 0x4, 0x8, 0x113, 0x8d3f}, {0x7, 0xffffffff, 0x8, 0x92a4, 0x9, 0x10}, {0x1a4a13f4, 0x9, 0xe, 0x3, 0xad47, 0xf83b}, {0x1ff, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x4, 0x200, 0x9, 0x1, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0x10001, 0x9, 0x200, 0x9, 0x1}, {0x6, 0x10, 0x9, 0x2, 0x6, 0x3}, {0xf23, 0x3ff, 0x0, 0x9, 0x7}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x8, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x8, 0xffffffff}, {0x4d9, 0xc, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x7, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x4}, {0x3, 0x7, 0x4, 0x4, 0xffff, 0x8}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x2, 0x3, 0x2}, {0x62, 0xf4, 0x6, 0x4, 0x1, 0x67}, {0x5, 0x4, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x6, 0x1000, 0x9, 0x9}, {0xa, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0x2, 0x8, 0xfffffbf7, 0x1, 0x6, 0xa}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f5, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x7, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x80, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0x80ce5a}, {0x2400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0x8, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x3, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x5, 0x5, 0x3, 0x3649}, {0x7, 0x2, 0x2, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc4, 0x7, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x100004, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x18, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffffffff, 0x0, 0xfc, 0x7, 0x6, 0xc}, {0xf, 0x1, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0xd9, 0x6, 0x1, 0x9, 0xfffffff7}, {0x3, 0x3, 0x7, 0x69a0, 0x10, 0x1}, {0x8f000000, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x3}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x9, 0x0, 0x88}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0xfce, 0x80000001, 0x5, 0x4, 0x1ff}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0xc0000, 0x8}, {0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0x80e32}, {0x5, 0x7, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x100, 0x3, 0x4, 0x9, 0xfffffffa}, {0x2, 0x8, 0x3, 0x6, 0x800, 0x3}, {0x0, 0x0, 0x3, 0x8, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0x1, 0x3}, {0x5, 0x7, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x5, 0xf667, 0x5, 0x3, 0x5, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0x400d, 0xfffffffa, 0x1, 0x3, 0xfffffffb, 0x2}, {0x1, 0x4, 0x80000000, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x4, 0x96, 0x85, 0x0, 0x101, 0x7}, {0x4, 0xff, 0x9, 0xff, 0x6d3, 0x29}, {0x6, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b4, 0x1, 0x6}, {0x61, 0x2d, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x7}, {0x6, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6c}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xb, 0x4, 0x800, 0x1}, {0x6, 0x2, 0xfffffffc, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xb, 0x10000, 0x1, 0x1000, 0xfffff830}, {0x2, 0x4, 0x2, 0x1, 0x6, 0x2b4}, {0x3cd2dbce, 0x929a, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x0, 0xe71, 0xc5c3, 0x3}, {0x7, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0x101, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x7, 0x6, 0x10001, 0xce7, 0xec, 0x1004}, {0x3, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0x6}, {0x36, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0xccffbfc290ab3baa}, {0x0, 0x1}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x81}, 0x800) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000c40)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x2000007}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8000, 0x10000000, 0x400, 0x4, 0x5, {0x9, 0x0, 0x1, 0x2, 0x8, 0x3}, {0x7, 0x0, 0x10, 0x0, 0x1, 0xfffffffe}, 0x80, 0x0, 0x9}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x76, &(0x7f0000000540)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x40, 0x3a, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "ec00", 0x0, 0x11, 0x0, @loopback, @empty, [@fragment={0x87, 0x0, 0x5, 0x1, 0x0, 0x3, 0x68}, @hopopts]}}}}}}}, 0x0) r13 = socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000850000009000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) connect$x25(r8, &(0x7f0000000500)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r11, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010800000000000b00000008000300000000", @ANYRES32=r14, @ANYBLOB="30005080110001004abee339084eeef16f162471f400000005000200000000000800030002ac0f000500090001000000"], 0x4c}}, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) ioctl$sock_FIOGETOWN(r13, 0x8903, &(0x7f0000000280)) 782.882699ms ago: executing program 1 (id=1169): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffe83) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r2, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$tipc(r1, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) 770.826054ms ago: executing program 0 (id=1170): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) (async) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) (async) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}, 0x1c) (async) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}, 0x1c) listen(r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x11eac000) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x2000) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @val={@val={0x88a8, 0x4}, {0x8100, 0x4, 0x1, 0x3}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x20}}}}}}, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @val={@val={0x88a8, 0x4}, {0x8100, 0x4, 0x1, 0x3}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x20}}}}}}, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) close(r0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000200)={'nat\x00', 0x0, 0x0, 0x0, [0x4, 0x4af0, 0x1e50, 0x1, 0x7ff, 0x8], 0x4, &(0x7f0000000180)=[{}], 0x0, [{}, {}, {}, {}]}, 0xb8) (async) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000200)={'nat\x00', 0x0, 0x0, 0x0, [0x4, 0x4af0, 0x1e50, 0x1, 0x7ff, 0x8], 0x4, &(0x7f0000000180)=[{}], 0x0, [{}, {}, {}, {}]}, 0xb8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001880)={{r5}, &(0x7f0000001800), &(0x7f0000000000)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000040000000000000000000000b7080000000000007b8af8ff00000000b7080000000001007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018233600", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="61106f000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="61106f000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000800)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@bridge_newvlan={0x34, 0x71, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r9}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x1}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x1}}}]}, 0x34}}, 0x20008000) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f00000002c0)={@private0, r9}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x2f08, 0x10, 0x10, &(0x7f00000006c0)="0000000000000005", &(0x7f0000000700)=""/8, 0x447, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) writev(r4, &(0x7f0000000080)=[{&(0x7f00000001c0)='?', 0x1}], 0x1) 683.965073ms ago: executing program 3 (id=1171): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}]}, &(0x7f0000000180)=0x10) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, @in6={0xa, 0x4e20, 0x0, @private0}]}, &(0x7f0000000180)=0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x4000004) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000780)=[{&(0x7f0000000640)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@newlink={0x128, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0xf8, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xe8, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_INGRESS_QOS={0x0, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING]}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xfffffffffffffdb7}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x128}}, 0x0) 538.714268ms ago: executing program 0 (id=1172): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000001f00)=""/4062, &(0x7f00000001c0)=0xfde) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x38, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfffffffe}]}]}]}, 0x38}}, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) r4 = epoll_create1(0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r6, 0x1, 0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5, 0x0, 0x1f0f}, 0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000100)={0xa000000d}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300002000068000000090a010400000000fcff00000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000212c0011800b00010074617267657400001c0002800400030008000240000000000a0001"], 0xb0}}, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)={0x1008}) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000001900)=0x5, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000001940)=ANY=[@ANYBLOB="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"], 0x28a) socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000001b000000bf0900000000000056090100000000002700000000000002180100002020782500000000002020207b1af8ff00"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x80010, r5, 0x60cfe000) r9 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r9, &(0x7f0000001600)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000001580)=[{&(0x7f0000000080)=""/205, 0xcd}, {&(0x7f0000000180)=""/206, 0xce}, {&(0x7f0000000280)=""/188, 0xbc}, {&(0x7f0000000340)=""/130, 0x82}, {&(0x7f0000000400)=""/116, 0x74}, {&(0x7f0000000480)=""/194, 0xc2}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x7}, 0x10040) 265.938651ms ago: executing program 4 (id=1173): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$igmp6(0xa, 0x3, 0x2) (async) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x8c0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1, @in6=@ipv4={""/10, ""/2, @local}}}, {{@in6=@private2}, 0x0, @in=@multicast2}}, &(0x7f0000000200)=0xe8) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x0, 0x12, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200, 0xfc0c0000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0xcfc}, 0x28) (async) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r5, &(0x7f00000000c0), 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xa, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x2}, @TCA_FQ_QUANTUM={0x8, 0x2}]}}]}, 0x48}}, 0x0) 0s ago: executing program 4 (id=1174): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x2f, 0xd1, 0x2, 0x7, 0x20, @empty, @remote, 0x20, 0x700, 0x1ff, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x6}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', r1, @cgroup_skb, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000010000100000000000000000080dcba2e", @ANYRES32=r3, @ANYBLOB="00000000000000002c0012800c0001006d6163766c616e001c00028008000100040000000800070000000000080003"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x2000c000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44e8fe55a1180015000600142603600e1209", 0x1f}], 0x1}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40804}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r7}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x40}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) ioctl$int_in(r4, 0x5452, &(0x7f0000000100)=0x8f26) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r4, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)}}], 0x1, 0x4000000) setsockopt$sock_int(r4, 0x1, 0x20, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700040005"], 0xfe33) kernel console output (not intermixed with test programs): value instead [ 95.151505][ T6374] netlink: 'syz.1.144': attribute type 29 has an invalid length. [ 95.232097][ T6372] netlink: 'syz.4.143': attribute type 2 has an invalid length. [ 95.256471][ T6376] netlink: 'syz.4.143': attribute type 2 has an invalid length. [ 95.593360][ T6370] chnl_net:caif_netlink_parms(): no params data found [ 95.700335][ T6395] netlink: 'syz.0.151': attribute type 4 has an invalid length. [ 95.846515][ T6370] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.853807][ T6370] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.861878][ T6370] bridge_slave_0: entered allmulticast mode [ 95.869672][ T6370] bridge_slave_0: entered promiscuous mode [ 95.879034][ T6408] netlink: 'syz.1.154': attribute type 4 has an invalid length. [ 95.880629][ T6370] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.896870][ T6370] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.904356][ T6370] bridge_slave_1: entered allmulticast mode [ 95.908069][ T6408] __nla_validate_parse: 6 callbacks suppressed [ 95.908085][ T6408] netlink: 17 bytes leftover after parsing attributes in process `syz.1.154'. [ 95.938135][ T6370] bridge_slave_1: entered promiscuous mode [ 96.032077][ T6414] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.067278][ T6416] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 96.098078][ T6415] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 96.118628][ T6370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.147882][ T6370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.338979][ T6370] team0: Port device team_slave_0 added [ 96.357838][ T6370] team0: Port device team_slave_1 added [ 96.617222][ T6441] netlink: 16 bytes leftover after parsing attributes in process `syz.4.163'. [ 96.649679][ T6440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.161'. [ 96.672972][ T6442] netlink: 16 bytes leftover after parsing attributes in process `syz.4.163'. [ 96.754710][ T6370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.762020][ T6370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.792128][ T6370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.810131][ T6438] sch_fq: defrate 0 ignored. [ 96.815507][ T6441] sch_fq: defrate 0 ignored. [ 96.832870][ T6370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.872559][ T6370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.930056][ T5844] block nbd0: Receive control failed (result -32) [ 96.984228][ T6370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.000804][ T6453] netlink: 28 bytes leftover after parsing attributes in process `syz.0.169'. [ 97.108003][ T6370] hsr_slave_0: entered promiscuous mode [ 97.141072][ T6370] hsr_slave_1: entered promiscuous mode [ 97.166585][ T6370] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.189474][ T6370] Cannot create hsr debugfs directory [ 97.200971][ T5844] Bluetooth: hci0: command tx timeout [ 97.688411][ T6483] netlink: 'syz.4.177': attribute type 4 has an invalid length. [ 97.740825][ T6370] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.822868][ T6370] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.903414][ T6502] unknown channel width for channel at 909000KHz? [ 98.910630][ T6502] unknown channel width for channel at 909000KHz? [ 99.006759][ T6370] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.233306][ T6370] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.275487][ T5844] Bluetooth: hci0: command tx timeout [ 99.703331][ T6547] netlink: 10 bytes leftover after parsing attributes in process `syz.1.194'. [ 99.803603][ T6552] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 99.819682][ T6532] netlink: 8 bytes leftover after parsing attributes in process `syz.4.190'. [ 100.109081][ T6370] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 100.164673][ T6370] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 100.183198][ T6370] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 100.241622][ T6370] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 100.347987][ T6568] netlink: 12 bytes leftover after parsing attributes in process `syz.4.200'. [ 100.358611][ T6566] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 100.514103][ T6574] netlink: 'syz.4.202': attribute type 1 has an invalid length. [ 100.531950][ T6574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.202'. [ 100.558821][ T6370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.621701][ T6370] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.676616][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.684445][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.721305][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.728530][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.784075][ T6586] netlink: 'syz.4.204': attribute type 1 has an invalid length. [ 100.813756][ T6586] netlink: 'syz.4.204': attribute type 2 has an invalid length. [ 101.102869][ T6598] pim6reg: entered allmulticast mode [ 101.126838][ T6600] netlink: 32 bytes leftover after parsing attributes in process `syz.1.209'. [ 101.301742][ T6610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.212'. [ 101.313301][ T6610] netlink: 72 bytes leftover after parsing attributes in process `syz.3.212'. [ 101.333631][ T6370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.355685][ T5844] Bluetooth: hci0: command tx timeout [ 101.430293][ T6370] veth0_vlan: entered promiscuous mode [ 101.452330][ T6370] veth1_vlan: entered promiscuous mode [ 101.527609][ T6370] veth0_macvtap: entered promiscuous mode [ 101.551814][ T6370] veth1_macvtap: entered promiscuous mode [ 101.614368][ T6370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.636282][ T6370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.661990][ T6370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.693698][ T6627] netlink: 36 bytes leftover after parsing attributes in process `syz.0.217'. [ 101.694097][ T6370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.713243][ T6370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.723904][ T6370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.733875][ T6370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.744364][ T6370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.755463][ T6370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.766237][ T6370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.778914][ T6370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.863127][ T6370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.915833][ T6370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.935019][ T6370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.960872][ T6370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.971019][ T6370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.983683][ T6370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.993803][ T6370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.010735][ T6370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.020958][ T6370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.021729][ T6631] netlink: 24 bytes leftover after parsing attributes in process `syz.1.218'. [ 102.054879][ T6370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.091735][ T6370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.120365][ T6637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.221'. [ 102.141616][ T6637] netlink: 24 bytes leftover after parsing attributes in process `syz.4.221'. [ 102.170329][ T6631] netlink: 12 bytes leftover after parsing attributes in process `syz.1.218'. [ 102.216132][ T6370] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.237977][ T6370] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.281620][ T6370] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.323725][ T6370] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.331336][ T6642] netlink: 'syz.0.223': attribute type 2 has an invalid length. [ 102.367242][ T6642] netlink: 244 bytes leftover after parsing attributes in process `syz.0.223'. [ 102.408833][ T6645] tipc: Started in network mode [ 102.413740][ T6645] tipc: Node identity ffffa848, cluster identity 4711 [ 102.426117][ T6642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.223'. [ 102.495938][ T6645] tipc: Node number set to 4294944840 [ 102.706206][ T1311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.714085][ T1311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.873108][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.908749][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.226485][ T6677] lo speed is unknown, defaulting to 1000 [ 103.247898][ T6677] lo speed is unknown, defaulting to 1000 [ 103.260741][ T6677] lo speed is unknown, defaulting to 1000 [ 103.299997][ T6677] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 103.326175][ T6677] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 103.340709][ T6682] netlink: 'syz.3.238': attribute type 11 has an invalid length. [ 103.349022][ T6685] nbd: nbd0 already in use [ 103.353890][ T6681] netlink: 'syz.3.238': attribute type 11 has an invalid length. [ 103.354030][ T6685] nbd: nbd0 already in use [ 103.367481][ T6685] nbd: nbd0 already in use [ 103.372219][ T6685] nbd: nbd0 already in use [ 103.377874][ T6685] nbd: nbd0 already in use [ 103.382601][ T6685] nbd: nbd0 already in use [ 103.387891][ T6685] nbd: nbd0 already in use [ 103.392643][ T6685] nbd: nbd0 already in use [ 103.398199][ T6685] nbd: nbd0 already in use [ 103.402949][ T6685] nbd: nbd0 already in use [ 103.409619][ T6685] nbd: nbd0 already in use [ 103.418824][ T6685] nbd: nbd0 already in use [ 103.423637][ T6685] nbd: nbd0 already in use [ 103.430686][ T6685] nbd: nbd0 already in use [ 103.463542][ T6685] nbd: nbd0 already in use [ 103.473355][ T6685] nbd: nbd0 already in use [ 103.488329][ T6685] nbd: nbd0 already in use [ 103.492082][ T6677] lo speed is unknown, defaulting to 1000 [ 103.493717][ T6685] nbd: nbd0 already in use [ 103.514152][ T6685] nbd: nbd0 already in use [ 103.519412][ T6685] nbd: nbd0 already in use [ 103.524236][ T6685] nbd: nbd0 already in use [ 103.527128][ T6677] lo speed is unknown, defaulting to 1000 [ 103.544207][ T6685] nbd: nbd0 already in use [ 103.555394][ T6685] nbd: nbd0 already in use [ 103.564559][ T6685] nbd: nbd0 already in use [ 103.589428][ T6685] nbd: nbd0 already in use [ 103.629822][ T3601] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.633148][ T6685] nbd: nbd0 already in use [ 103.650643][ T6685] nbd: nbd0 already in use [ 103.660949][ T6685] nbd: nbd0 already in use [ 103.669625][ T6677] lo speed is unknown, defaulting to 1000 [ 103.690131][ T6685] nbd: nbd0 already in use [ 103.693790][ T6677] lo speed is unknown, defaulting to 1000 [ 103.704133][ T6685] nbd: nbd0 already in use [ 103.726769][ T6677] lo speed is unknown, defaulting to 1000 [ 103.731079][ T6685] nbd: nbd0 already in use [ 103.744511][ T6677] lo speed is unknown, defaulting to 1000 [ 103.755565][ T6685] nbd: nbd0 already in use [ 103.764750][ T6685] nbd: nbd0 already in use [ 104.047604][ T6698] trusted_key: syz.3.244 sent an empty control message without MSG_MORE. [ 104.083532][ T3601] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.375652][ T6707] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 104.483027][ T3601] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.518732][ T6717] netlink: 'syz.4.248': attribute type 4 has an invalid length. [ 104.539573][ T6718] netlink: 'syz.3.250': attribute type 1 has an invalid length. [ 104.753994][ T3601] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.788929][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 104.798726][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 104.809159][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 104.818515][ T6705] lo speed is unknown, defaulting to 1000 [ 104.821754][ T6727] netlink: 'syz.1.253': attribute type 2 has an invalid length. [ 104.832555][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 104.843054][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 105.103955][ T6725] lo speed is unknown, defaulting to 1000 [ 105.326868][ T3601] bridge_slave_1: left allmulticast mode [ 105.334447][ T3601] bridge_slave_1: left promiscuous mode [ 105.345421][ T3601] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.378366][ T3601] bridge_slave_0: left allmulticast mode [ 105.384676][ T3601] bridge_slave_0: left promiscuous mode [ 105.393028][ T3601] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.696024][ T3601] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.710794][ T3601] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.721191][ T3601] bond0 (unregistering): Released all slaves [ 106.516294][ T6783] __nla_validate_parse: 38 callbacks suppressed [ 106.516313][ T6783] netlink: 24 bytes leftover after parsing attributes in process `syz.1.266'. [ 106.581550][ T6785] netlink: 28 bytes leftover after parsing attributes in process `syz.1.266'. [ 106.640967][ T6782] netlink: 28 bytes leftover after parsing attributes in process `syz.3.265'. [ 106.644597][ T6725] chnl_net:caif_netlink_parms(): no params data found [ 106.876377][ T5844] Bluetooth: hci0: command tx timeout [ 107.082434][ T3601] hsr_slave_0: left promiscuous mode [ 107.135432][ T3601] hsr_slave_1: left promiscuous mode [ 107.141681][ T3601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.143700][ T6813] x_tables: duplicate underflow at hook 2 [ 107.165637][ T6803] xt_CT: No such helper "netbios-ns" [ 107.195913][ T3601] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.282799][ T6819] netlink: 'syz.1.275': attribute type 1 has an invalid length. [ 107.301670][ T6819] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.275'. [ 107.310054][ T6822] netlink: 'syz.0.277': attribute type 11 has an invalid length. [ 107.317348][ T3601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.327148][ T3601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.368572][ T3601] veth1_macvtap: left promiscuous mode [ 107.396629][ T3601] veth0_macvtap: left promiscuous mode [ 107.404336][ T3601] veth1_vlan: left promiscuous mode [ 107.410497][ T3601] veth0_vlan: left promiscuous mode [ 107.918070][ T3601] team0 (unregistering): Port device team_slave_1 removed [ 107.953804][ T3601] team0 (unregistering): Port device team_slave_0 removed [ 108.616754][ T6725] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.678316][ T6725] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.695134][ T6725] bridge_slave_0: entered allmulticast mode [ 108.723320][ T6725] bridge_slave_0: entered promiscuous mode [ 108.776365][ T6725] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.800307][ T6725] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.837902][ T6725] bridge_slave_1: entered allmulticast mode [ 108.868724][ T6725] bridge_slave_1: entered promiscuous mode [ 108.956505][ T5844] Bluetooth: hci0: command tx timeout [ 109.114287][ T6725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.175710][ T6725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.379896][ T6725] team0: Port device team_slave_0 added [ 109.432228][ T6725] team0: Port device team_slave_1 added [ 109.451491][ T6880] veth0: entered promiscuous mode [ 109.459839][ T6883] veth0: left promiscuous mode [ 109.583949][ T6725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.603746][ T6725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.662295][ T6725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.708350][ T6725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.723974][ T6725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.763744][ T6725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.805616][ T6891] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 109.842474][ T6893] netlink: 'syz.0.295': attribute type 1 has an invalid length. [ 109.881047][ T6893] netlink: 'syz.0.295': attribute type 1 has an invalid length. [ 109.912583][ T6893] netlink: 'syz.0.295': attribute type 1 has an invalid length. [ 109.934167][ T6893] netlink: 'syz.0.295': attribute type 2 has an invalid length. [ 109.945285][ T6893] netlink: 76 bytes leftover after parsing attributes in process `syz.0.295'. [ 109.965241][ T6725] hsr_slave_0: entered promiscuous mode [ 109.972108][ T6725] hsr_slave_1: entered promiscuous mode [ 109.979475][ T6725] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.987270][ T6725] Cannot create hsr debugfs directory [ 110.250618][ T6902] veth3: entered allmulticast mode [ 110.274536][ T6902] netlink: 32 bytes leftover after parsing attributes in process `syz.4.298'. [ 110.458924][ T6906] veth5: entered allmulticast mode [ 110.641316][ T6920] netlink: 48 bytes leftover after parsing attributes in process `syz.4.301'. [ 110.833805][ T6924] netlink: 'syz.3.303': attribute type 1 has an invalid length. [ 110.963971][ T6931] netlink: 'syz.1.302': attribute type 8 has an invalid length. [ 110.992998][ T6931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.302'. [ 111.045189][ T5844] Bluetooth: hci0: command tx timeout [ 111.055433][ T6931] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.064060][ T6931] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.117844][ T6935] netlink: 248 bytes leftover after parsing attributes in process `syz.4.305'. [ 111.143594][ T6931] bridge0: entered allmulticast mode [ 111.253849][ T6935] NCSI netlink: No device for ifindex 0 [ 111.295375][ T6947] x_tables: duplicate underflow at hook 1 [ 111.401889][ T6953] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 111.468237][ T6950] ip6gre2: entered allmulticast mode [ 111.481702][ T6955] netlink: 12 bytes leftover after parsing attributes in process `syz.4.308'. [ 111.829789][ T6725] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 111.843662][ T6725] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 111.878299][ T6970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.312'. [ 111.890794][ T6725] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 111.964773][ T6725] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 112.010491][ T6975] tc_dump_action: action bad kind [ 112.184580][ T6982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.315'. [ 112.222201][ T6982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.315'. [ 112.371612][ T6725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.500443][ T6725] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.572801][ T1311] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.580058][ T1311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.686651][ T3601] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.693891][ T3601] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.741689][ T5842] hid-generic 0005:0458:0009.0001: unknown main item tag 0x0 [ 112.770777][ T5842] hid-generic 0005:0458:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 113.126427][ T5844] Bluetooth: hci0: command tx timeout [ 113.179962][ T7029] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 113.561370][ T7046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.328'. [ 113.582953][ T6725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.665295][ T7051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.329'. [ 113.688499][ T7053] Bluetooth: MGMT ver 1.23 [ 113.710970][ T7048] netlink: 40 bytes leftover after parsing attributes in process `syz.4.329'. [ 113.718557][ T7053] netlink: 192 bytes leftover after parsing attributes in process `syz.1.330'. [ 113.770863][ T6725] veth0_vlan: entered promiscuous mode [ 113.821373][ T6725] veth1_vlan: entered promiscuous mode [ 113.984849][ T6725] veth0_macvtap: entered promiscuous mode [ 114.023804][ T6725] veth1_macvtap: entered promiscuous mode [ 114.053865][ T7066] netlink: 176 bytes leftover after parsing attributes in process `syz.4.334'. [ 114.095586][ T7066] netlink: 32 bytes leftover after parsing attributes in process `syz.4.334'. [ 114.121049][ T6725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.204907][ T6725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.214775][ T6725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.257076][ T6725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.269091][ T6725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.280167][ T6725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.315556][ T6725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.328899][ T6725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.354962][ T6725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.384988][ T6725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.389977][ T7085] netlink: 'syz.4.339': attribute type 1 has an invalid length. [ 114.406760][ T6725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.425048][ T7085] netlink: 'syz.4.339': attribute type 10 has an invalid length. [ 114.432844][ T7085] netlink: 'syz.4.339': attribute type 4 has an invalid length. [ 114.443791][ T6725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.502936][ T6725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.502948][ T7085] netlink: 'syz.4.339': attribute type 1 has an invalid length. [ 114.502965][ T7085] netlink: 192 bytes leftover after parsing attributes in process `syz.4.339'. [ 114.528630][ T6725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.577247][ T6725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.607247][ T6725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.646652][ T6725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.664961][ T6725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.689101][ T6725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.720467][ T6725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.741305][ T6725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.766486][ T6725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.852021][ T6725] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.892439][ T6725] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.911750][ T6725] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.930988][ T6725] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.113325][ T7116] netlink: 'syz.4.342': attribute type 2 has an invalid length. [ 115.310810][ T7120] netlink: 'syz.1.347': attribute type 7 has an invalid length. [ 115.346243][ T7120] netlink: 'syz.1.347': attribute type 8 has an invalid length. [ 115.450932][ T7120] gretap0: entered promiscuous mode [ 115.483424][ T7120] gretap0: left promiscuous mode [ 115.513033][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.539483][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.621152][ T7131] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6 [ 115.711731][ T1311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.730440][ T7134] netlink: 'syz.0.351': attribute type 1 has an invalid length. [ 115.747462][ T1311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.783269][ T7134] netlink: 'syz.0.351': attribute type 1 has an invalid length. [ 116.074152][ T7140] syz.0.351 (7140) used greatest stack depth: 15976 bytes left [ 116.118095][ T7148] batadv1: entered allmulticast mode [ 116.607026][ T7176] xt_CT: You must specify a L4 protocol and not use inversions on it [ 116.673316][ T82] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.927272][ T82] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.089412][ T82] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.100617][ T7191] netlink: 'syz.3.362': attribute type 8 has an invalid length. [ 117.119829][ T7190] block nbd4: not configured, cannot reconfigure [ 117.219740][ T82] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.664611][ T7214] __nla_validate_parse: 6 callbacks suppressed [ 117.664629][ T7214] netlink: 36 bytes leftover after parsing attributes in process `syz.0.368'. [ 117.778738][ T7219] openvswitch: netlink: IP tunnel TTL not specified. [ 117.951452][ T7224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.370'. [ 118.034200][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 118.043140][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 118.055146][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 118.063172][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 118.071119][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 118.145621][ T7221] 8021q: adding VLAN 0 to HW filter on device bond2 [ 118.351663][ T7224] vlan2: entered allmulticast mode [ 118.359530][ T7224] bond2: entered allmulticast mode [ 118.374468][ T82] bridge_slave_1: left allmulticast mode [ 118.391354][ T82] bridge_slave_1: left promiscuous mode [ 118.411009][ T82] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.471995][ T82] bridge_slave_0: left allmulticast mode [ 118.484683][ T82] bridge_slave_0: left promiscuous mode [ 118.518312][ T82] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.836611][ T7269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.378'. [ 119.138936][ T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.150708][ T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.162193][ T82] bond0 (unregistering): Released all slaves [ 119.565153][ T7231] lo speed is unknown, defaulting to 1000 [ 119.901320][ T7310] netlink: 24 bytes leftover after parsing attributes in process `syz.3.388'. [ 119.926016][ T82] hsr_slave_0: left promiscuous mode [ 119.945983][ T82] hsr_slave_1: left promiscuous mode [ 119.960709][ T7313] netlink: 348 bytes leftover after parsing attributes in process `syz.4.389'. [ 119.970186][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.981001][ T82] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.001717][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.009856][ T82] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.062457][ T82] veth1_macvtap: left promiscuous mode [ 120.084120][ T82] veth0_macvtap: left promiscuous mode [ 120.092192][ T82] veth1_vlan: left promiscuous mode [ 120.103683][ T82] veth0_vlan: left promiscuous mode [ 120.107279][ T7323] validate_nla: 1 callbacks suppressed [ 120.107295][ T7323] netlink: 'syz.3.391': attribute type 18 has an invalid length. [ 120.155327][ T5844] Bluetooth: hci0: command tx timeout [ 120.886656][ T82] team0 (unregistering): Port device team_slave_1 removed [ 120.948421][ T82] team0 (unregistering): Port device team_slave_0 removed [ 121.248974][ T7323] netlink: 24 bytes leftover after parsing attributes in process `syz.3.391'. [ 121.726792][ T7373] netlink: 12 bytes leftover after parsing attributes in process `syz.4.403'. [ 121.802863][ T7376] veth0: entered promiscuous mode [ 121.817737][ T7374] netlink: 104 bytes leftover after parsing attributes in process `syz.1.404'. [ 121.893986][ T7231] chnl_net:caif_netlink_parms(): no params data found [ 121.975394][ T7375] veth0: left promiscuous mode [ 122.227995][ T7397] x_tables: duplicate underflow at hook 1 [ 122.235384][ T5844] Bluetooth: hci0: command tx timeout [ 122.250792][ T7392] netlink: 28 bytes leftover after parsing attributes in process `syz.1.409'. [ 122.508524][ T7407] netlink: 80 bytes leftover after parsing attributes in process `syz.3.412'. [ 122.658850][ T7231] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.694957][ T7231] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.702278][ T7231] bridge_slave_0: entered allmulticast mode [ 122.718963][ T7231] bridge_slave_0: entered promiscuous mode [ 122.749898][ T7231] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.796579][ T7231] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.803950][ T7231] bridge_slave_1: entered allmulticast mode [ 122.832956][ T7231] bridge_slave_1: entered promiscuous mode [ 122.902676][ T7427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.418'. [ 122.934935][ T7427] netlink: 24 bytes leftover after parsing attributes in process `syz.0.418'. [ 122.967395][ T7231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.034770][ T7231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.141292][ T7442] xt_HMARK: proto mask must be zero with L3 mode [ 123.307836][ T7452] netlink: 'syz.4.423': attribute type 1 has an invalid length. [ 123.329746][ T7452] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.423'. [ 123.665585][ T7231] team0: Port device team_slave_0 added [ 123.692895][ T7231] team0: Port device team_slave_1 added [ 123.823502][ T7456] lo speed is unknown, defaulting to 1000 [ 123.943364][ T7231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.964924][ T7231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.025497][ T7231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.047021][ T7231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.065840][ T7231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.116278][ T7469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.432'. [ 124.125674][ T7231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.262151][ T7472] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 124.315298][ T5844] Bluetooth: hci0: command tx timeout [ 124.322969][ T7477] nbd: must specify at least one socket [ 124.441381][ T7231] hsr_slave_0: entered promiscuous mode [ 124.497392][ T7231] hsr_slave_1: entered promiscuous mode [ 124.558189][ T7231] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 124.614923][ T7231] Cannot create hsr debugfs directory [ 124.797768][ T7498] netlink: 'syz.4.438': attribute type 8 has an invalid length. [ 124.954645][ T7506] netlink: 'syz.0.440': attribute type 4 has an invalid length. [ 124.999015][ T7509] netlink: 'syz.1.441': attribute type 1 has an invalid length. [ 125.085423][ T7506] netlink: 36 bytes leftover after parsing attributes in process `syz.0.440'. [ 125.098979][ T7513] netlink: 36 bytes leftover after parsing attributes in process `syz.4.442'. [ 125.258715][ T7514] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 125.283858][ T13] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 125.285486][ T7520] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.317812][ T7509] veth3: entered promiscuous mode [ 125.325685][ T7518] netlink: 12 bytes leftover after parsing attributes in process `syz.4.444'. [ 125.338070][ T7509] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 125.427114][ T82] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 125.613020][ T7526] netlink: 9 bytes leftover after parsing attributes in process `syz.1.446'. [ 125.686254][ T7533] sctp: [Deprecated]: syz.1.446 (pid 7533) Use of struct sctp_assoc_value in delayed_ack socket option. [ 125.686254][ T7533] Use struct sctp_sack_info instead [ 125.741062][ T7535] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 125.748549][ T7535] IPv6: NLM_F_CREATE should be set when creating new route [ 125.771454][ T7538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.449'. [ 125.794436][ T7538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.449'. [ 126.304045][ T7566] netlink: 'syz.3.457': attribute type 11 has an invalid length. [ 126.395085][ T5844] Bluetooth: hci0: command tx timeout [ 126.995824][ T7231] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 127.073959][ T7231] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 127.117638][ T7231] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 127.188401][ T7231] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 127.408093][ T7612] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 127.513477][ T7231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.610058][ T7231] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.638538][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.645814][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.707957][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.715226][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.734314][ T7621] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 128.294368][ T7648] __nla_validate_parse: 8 callbacks suppressed [ 128.294386][ T7648] netlink: 9 bytes leftover after parsing attributes in process `syz.1.479'. [ 128.320614][ T7231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.369511][ T7648] ï‰Oܼ: renamed from hsr0 (while UP) [ 128.383485][ T7648] ï‰Oܼ: entered promiscuous mode [ 128.399401][ T7648] A link change request failed with some changes committed already. Interface ï‰Oܼ may have been left with an inconsistent configuration, please check. [ 128.499485][ T7231] veth0_vlan: entered promiscuous mode [ 128.535282][ T7231] veth1_vlan: entered promiscuous mode [ 128.630030][ T7231] veth0_macvtap: entered promiscuous mode [ 128.706548][ T7231] veth1_macvtap: entered promiscuous mode [ 128.837412][ T7231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.864598][ T7231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.904934][ T7231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.941771][ T7231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.963403][ T7231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.986746][ T7231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.010158][ T7231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.033570][ T7231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.047131][ T7231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.068378][ T7231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.093100][ T7231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.143981][ T7231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.183075][ T7231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.226529][ T7231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.237647][ T7231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.247956][ T7231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.258974][ T7231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.274601][ T7231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.288594][ T7231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.328686][ T7231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.351936][ T7231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.364571][ T7231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.430261][ T7231] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.445601][ T7231] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.454413][ T7231] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.464348][ T7231] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.616590][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.642786][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.712983][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.733544][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.979281][ T7704] netlink: 'syz.0.491': attribute type 1 has an invalid length. [ 130.370610][ T7718] mac80211_hwsim hwsim11 ÿ: renamed from wlan1 (while UP) [ 130.418327][ T7718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.496'. [ 130.624574][ T7734] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 130.973968][ T7737] netlink: 20 bytes leftover after parsing attributes in process `syz.0.502'. [ 131.014293][ T7737] netlink: 'syz.0.502': attribute type 1 has an invalid length. [ 131.200071][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.460245][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.669509][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.726789][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.921768][ T52] bridge_slave_1: left allmulticast mode [ 131.935219][ T52] bridge_slave_1: left promiscuous mode [ 131.951144][ T7751] netlink: 40 bytes leftover after parsing attributes in process `syz.1.506'. [ 131.965257][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.049122][ T52] bridge_slave_0: left allmulticast mode [ 132.061822][ T52] bridge_slave_0: left promiscuous mode [ 132.075769][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.380888][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 132.393468][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 132.405431][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 132.421746][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 132.431356][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 132.538705][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.550188][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.561697][ T52] bond0 (unregistering): Released all slaves [ 132.580411][ T7752] netlink: 'syz.3.507': attribute type 3 has an invalid length. [ 132.613016][ T7756] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 132.640814][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.650534][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.761682][ T7764] lo speed is unknown, defaulting to 1000 [ 133.062734][ T7785] Bluetooth: MGMT ver 1.23 [ 133.140640][ T7791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.518'. [ 133.455523][ T52] hsr_slave_0: left promiscuous mode [ 133.467607][ T52] hsr_slave_1: left promiscuous mode [ 133.473489][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.484155][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.492609][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.500165][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.536701][ T52] veth1_macvtap: left promiscuous mode [ 133.542447][ T52] veth0_macvtap: left promiscuous mode [ 133.549295][ T52] veth1_vlan: left promiscuous mode [ 133.557642][ T52] veth0_vlan: left promiscuous mode [ 133.623874][ T1311] tipc: Subscription rejected, illegal request [ 134.232457][ T52] team0 (unregistering): Port device team_slave_1 removed [ 134.272310][ T52] team0 (unregistering): Port device team_slave_0 removed [ 134.379475][ T7841] netlink: 12 bytes leftover after parsing attributes in process `syz.4.528'. [ 134.485000][ T5844] Bluetooth: hci0: command tx timeout [ 135.075989][ T7865] netlink: 8 bytes leftover after parsing attributes in process `syz.4.536'. [ 135.077869][ T7764] chnl_net:caif_netlink_parms(): no params data found [ 135.106375][ T7862] netlink: 24 bytes leftover after parsing attributes in process `syz.1.534'. [ 135.125966][ T7869] netlink: 76 bytes leftover after parsing attributes in process `syz.0.535'. [ 135.148974][ T7862] netlink: 'syz.1.534': attribute type 1 has an invalid length. [ 135.442295][ T7885] netlink: 60 bytes leftover after parsing attributes in process `syz.4.539'. [ 135.459231][ T7878] netlink: 60 bytes leftover after parsing attributes in process `syz.4.539'. [ 135.736471][ T7764] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.758298][ T7764] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.775502][ T7896] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.792254][ T7764] bridge_slave_0: entered allmulticast mode [ 135.797870][ T7897] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.542'. [ 135.809665][ T7764] bridge_slave_0: entered promiscuous mode [ 135.837822][ T7764] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.865078][ T7764] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.885568][ T7764] bridge_slave_1: entered allmulticast mode [ 135.913462][ T7764] bridge_slave_1: entered promiscuous mode [ 136.073875][ T7764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.131378][ T7891] lo speed is unknown, defaulting to 1000 [ 136.173207][ T7764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.274534][ T7892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.541'. [ 136.348437][ T7892] netlink: 72 bytes leftover after parsing attributes in process `syz.3.541'. [ 136.361549][ T7892] netlink: 72 bytes leftover after parsing attributes in process `syz.3.541'. [ 136.403814][ T7764] team0: Port device team_slave_0 added [ 136.441728][ T7764] team0: Port device team_slave_1 added [ 136.555118][ T5844] Bluetooth: hci0: command tx timeout [ 136.796278][ T7764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.814011][ T7764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.840623][ T7764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.858060][ T7764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.867394][ T7764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.894192][ T7764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.178700][ T7764] hsr_slave_0: entered promiscuous mode [ 137.206364][ T7764] hsr_slave_1: entered promiscuous mode [ 137.212661][ T7764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 137.247062][ T7764] Cannot create hsr debugfs directory [ 137.346642][ T7958] netlink: 'syz.4.559': attribute type 29 has an invalid length. [ 137.499001][ T7960] netlink: 'syz.4.559': attribute type 29 has an invalid length. [ 137.600123][ T7961] netlink: 'syz.4.559': attribute type 29 has an invalid length. [ 137.842163][ T7977] netlink: 'syz.0.564': attribute type 2 has an invalid length. [ 138.081177][ T7992] netlink: 'syz.1.567': attribute type 1 has an invalid length. [ 138.472234][ T8011] C: renamed from lo [ 138.549761][ T7764] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 138.580735][ T7764] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 138.598844][ T7764] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 138.640054][ T7764] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 138.647299][ T5844] Bluetooth: hci0: command tx timeout [ 138.929403][ T7764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.007490][ T7764] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.042308][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.049513][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.180399][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.187598][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.609603][ T8066] netlink: 'syz.1.595': attribute type 2 has an invalid length. [ 139.630417][ T8066] netlink: 'syz.1.595': attribute type 2 has an invalid length. [ 139.696140][ T8073] __nla_validate_parse: 8 callbacks suppressed [ 139.696160][ T8073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.594'. [ 139.816173][ T7764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.963708][ T7764] veth0_vlan: entered promiscuous mode [ 140.001787][ T7764] veth1_vlan: entered promiscuous mode [ 140.132133][ T8082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.597'. [ 140.166664][ T7764] veth0_macvtap: entered promiscuous mode [ 140.210301][ T7764] veth1_macvtap: entered promiscuous mode [ 140.282733][ T7764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.325153][ T7764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.343359][ T7764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.364969][ T7764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.412687][ T7764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.443552][ T7764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.464458][ T7764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.482853][ T8097] netlink: 'syz.0.599': attribute type 15 has an invalid length. [ 140.490737][ T8097] netlink: 'syz.0.599': attribute type 1 has an invalid length. [ 140.515217][ T7764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.531516][ T8094] xt_CT: No such helper "pptp" [ 140.531955][ T7764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.552948][ T7764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.564765][ T8100] netlink: 'syz.3.601': attribute type 9 has an invalid length. [ 140.572735][ T8100] netlink: 212260 bytes leftover after parsing attributes in process `syz.3.601'. [ 140.599819][ T7764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.660210][ T7764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.697483][ T7764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.715260][ T5844] Bluetooth: hci0: command tx timeout [ 140.720675][ T7764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.735191][ T7764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.751197][ T7764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.763563][ T7764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.779006][ T7764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.791338][ T7764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.807274][ T7764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.820973][ T7764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.840106][ T7764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.842506][ T8115] netlink: 12 bytes leftover after parsing attributes in process `syz.0.606'. [ 140.900175][ T8109] 8021q: adding VLAN 0 to HW filter on device bond3 [ 140.908091][ T8111] netlink: 52 bytes leftover after parsing attributes in process `syz.1.605'. [ 140.943592][ T8123] netlink: 12 bytes leftover after parsing attributes in process `syz.0.607'. [ 140.951855][ T7764] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.963616][ T8123] netlink: 12 bytes leftover after parsing attributes in process `syz.0.607'. [ 141.010970][ T7764] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.030373][ T7764] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.039641][ T7764] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.050426][ T8125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.608'. [ 141.155564][ T8125] netlink: 'syz.0.608': attribute type 1 has an invalid length. [ 141.163413][ T8125] netlink: 'syz.0.608': attribute type 2 has an invalid length. [ 141.256130][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.287065][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.333881][ T8131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.610'. [ 141.380461][ T8131] veth1_to_team: entered promiscuous mode [ 141.392047][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.410887][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.490973][ T8131] veth1_to_team (unregistering): left promiscuous mode [ 141.508831][ T8142] netlink: 4 bytes leftover after parsing attributes in process `syz.3.613'. [ 141.573990][ T8143] netlink: 'syz.3.613': attribute type 1 has an invalid length. [ 141.589447][ T8131] team0: Port device team_slave_1 removed [ 141.673398][ T8143] 8021q: adding VLAN 0 to HW filter on device bond4 [ 141.710270][ T8142] bond4: (slave ip6gretap1): making interface the new active one [ 141.723292][ T8142] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 141.732081][ T8142] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 141.740350][ T8142] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 141.799613][ T52] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 141.852673][ T24] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 141.914479][ T8164] netlink: 'syz.3.620': attribute type 1 has an invalid length. [ 141.924508][ T8163] xt_cgroup: xt_cgroup: no path or classid specified [ 141.951469][ T8164] bond5: entered promiscuous mode [ 141.957422][ T8164] 8021q: adding VLAN 0 to HW filter on device bond5 [ 141.999772][ T8161] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 142.200161][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.274508][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 142.360602][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.586620][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.657478][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.786690][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 142.877108][ T57] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 142.997417][ T13] bridge_slave_1: left allmulticast mode [ 143.004010][ T13] bridge_slave_1: left promiscuous mode [ 143.036504][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.099171][ T13] bridge_slave_0: left allmulticast mode [ 143.111989][ T13] bridge_slave_0: left promiscuous mode [ 143.125235][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.508169][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 143.523125][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 143.534036][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 143.544169][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 143.558228][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 143.662147][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.672996][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.683423][ T13] bond0 (unregistering): Released all slaves [ 143.699742][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 143.727131][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 143.895615][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 143.942094][ T8201] team0 (unregistering): Port device team_slave_0 removed [ 143.954493][ T8201] team0 (unregistering): Port device team_slave_1 removed [ 143.988455][ T8208] bridge_slave_0: left allmulticast mode [ 143.994143][ T8208] bridge_slave_0: left promiscuous mode [ 144.004341][ T8208] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.019481][ T8208] bridge_slave_1: left allmulticast mode [ 144.026073][ T8208] bridge_slave_1: left promiscuous mode [ 144.031795][ T8208] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.043853][ T8208] bond0: (slave bond_slave_0): Releasing backup interface [ 144.058062][ T8208] bond0: (slave bond_slave_1): Releasing backup interface [ 144.079096][ T8208] team0: Port device team_slave_0 removed [ 144.085772][ T8208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.093214][ T8208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.102583][ T8208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.110372][ T8208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.129592][ T8208] bond1: (slave ip6gretap1): Removing an active aggregator [ 144.138557][ T8208] bond1: (slave ip6gretap1): Releasing backup interface [ 144.148890][ T8208] bond1: (slave ip6gretap1): the permanent HWaddr of slave - 3a:c4:1a:3e:20:38 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 144.174674][ T8208] bond1: (slave veth3): Releasing backup interface [ 144.198432][ T8209] team0: Mode changed to "loadbalance" [ 144.394181][ T8203] C speed is unknown, defaulting to 1000 [ 144.643449][ T8224] vxcan1: entered allmulticast mode [ 144.814813][ T13] hsr_slave_0: left promiscuous mode [ 144.877789][ T13] hsr_slave_1: left promiscuous mode [ 144.898142][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.926676][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.959383][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.998577][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.024234][ T8216] netlink: 'syz.1.631': attribute type 10 has an invalid length. [ 145.066609][ T13] veth1_macvtap: left promiscuous mode [ 145.082885][ T13] veth0_macvtap: left promiscuous mode [ 145.103328][ T13] veth1_vlan: left promiscuous mode [ 145.108936][ T13] veth0_vlan: left promiscuous mode [ 145.243187][ T8256] __nla_validate_parse: 3 callbacks suppressed [ 145.243207][ T8256] netlink: 4 bytes leftover after parsing attributes in process `syz.3.644'. [ 145.595626][ T5847] Bluetooth: hci0: command tx timeout [ 145.688817][ T13] team0 (unregistering): Port device team_slave_1 removed [ 145.723544][ T13] team0 (unregistering): Port device team_slave_0 removed [ 146.026811][ T8216] vlan0: entered allmulticast mode [ 146.032076][ T8216] veth0_vlan: entered allmulticast mode [ 146.049798][ T8216] team0: Port device vlan0 added [ 146.190026][ T8271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.649'. [ 146.438828][ T8286] netlink: 146840 bytes leftover after parsing attributes in process `syz.3.651'. [ 146.504492][ T8288] Bluetooth: MGMT ver 1.23 [ 146.633876][ T8293] C speed is unknown, defaulting to 1000 [ 146.786439][ T8303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.658'. [ 146.831778][ T8303] netlink: 28 bytes leftover after parsing attributes in process `syz.1.658'. [ 146.852892][ T8203] chnl_net:caif_netlink_parms(): no params data found [ 147.168632][ T8321] xt_socket: unknown flags 0x3c [ 147.265184][ T13] ip6_tnl_xmit_ctl: 3 callbacks suppressed [ 147.265202][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 147.316399][ T8203] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.333939][ T8203] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.353174][ T8203] bridge_slave_0: entered allmulticast mode [ 147.368187][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 147.383755][ T8203] bridge_slave_0: entered promiscuous mode [ 147.427663][ T8203] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.445205][ T8203] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.460904][ T8330] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input7 [ 147.465247][ T8203] bridge_slave_1: entered allmulticast mode [ 147.503852][ T8203] bridge_slave_1: entered promiscuous mode [ 147.592657][ T8338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.667'. [ 147.608957][ T8332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.667'. [ 147.670463][ T8203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.685084][ T5847] Bluetooth: hci0: command tx timeout [ 147.720560][ T8203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.914583][ T8203] team0: Port device team_slave_0 added [ 147.953896][ T8203] team0: Port device team_slave_1 added [ 148.060383][ T8361] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 148.088578][ T8203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.114893][ T8203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.142561][ T8203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.173710][ T8358] ip6gre2: entered allmulticast mode [ 148.200779][ T8203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.223255][ T8203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.250094][ T8203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.298544][ T8371] netlink: 272 bytes leftover after parsing attributes in process `syz.0.677'. [ 148.386699][ T82] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 148.430089][ T8203] hsr_slave_0: entered promiscuous mode [ 148.449115][ T8203] hsr_slave_1: entered promiscuous mode [ 148.456889][ T8203] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 148.471762][ T8203] Cannot create hsr debugfs directory [ 148.553340][ T8387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.682'. [ 148.827070][ T8402] netlink: 146840 bytes leftover after parsing attributes in process `syz.0.685'. [ 148.873316][ T8404] bridge0: port 4(vlan3) entered blocking state [ 148.890067][ T8404] bridge0: port 4(vlan3) entered disabled state [ 148.903093][ T8404] vlan3: entered allmulticast mode [ 148.919075][ T8404] bridge0: entered allmulticast mode [ 148.953879][ T8404] vlan3: left allmulticast mode [ 148.976457][ T8404] bridge0: left allmulticast mode [ 149.106201][ T8414] xt_connbytes: Forcing CT accounting to be enabled [ 149.155526][ T8417] IPVS: stopping master sync thread 8422 ... [ 149.161465][ T8422] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 149.176185][ T8423] netlink: 'syz.3.693': attribute type 7 has an invalid length. [ 149.342621][ T8430] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 149.513789][ T8435] netlink: 'syz.0.696': attribute type 2 has an invalid length. [ 149.524439][ T82] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 149.755177][ T5847] Bluetooth: hci0: command tx timeout [ 149.785573][ T8203] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 149.870485][ T8203] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 149.923010][ T8203] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 149.969768][ T8452] netlink: 'syz.0.703': attribute type 5 has an invalid length. [ 149.975240][ T8203] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 150.057396][ T8455] : entered promiscuous mode [ 150.279444][ T8462] netlink: 'syz.3.706': attribute type 1 has an invalid length. [ 150.298854][ T8203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.339969][ T8203] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.378142][ T8466] __nla_validate_parse: 9 callbacks suppressed [ 150.378161][ T8466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.705'. [ 150.410346][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.417530][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.499343][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.506591][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.550741][ T8470] wg2: entered promiscuous mode [ 150.577756][ T8470] wg2: entered allmulticast mode [ 150.695945][ T52] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 150.732905][ T8480] netlink: 24 bytes leftover after parsing attributes in process `syz.3.711'. [ 150.930324][ T8484] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.957140][ T8494] netlink: 96 bytes leftover after parsing attributes in process `syz.3.715'. [ 150.982681][ T8490] netlink: 'syz.4.714': attribute type 4 has an invalid length. [ 151.087588][ T8496] netlink: 'syz.1.713': attribute type 1 has an invalid length. [ 151.122331][ T8496] netlink: 224 bytes leftover after parsing attributes in process `syz.1.713'. [ 151.141263][ T8501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.716'. [ 151.236746][ T8510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.718'. [ 151.247212][ T8510] netlink: 72 bytes leftover after parsing attributes in process `syz.0.718'. [ 151.264887][ T8510] 8021q: VLANs not supported on sit0 [ 151.284167][ T8501] netlink: 256 bytes leftover after parsing attributes in process `syz.3.716'. [ 151.361544][ T8203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.526384][ T8203] veth0_vlan: entered promiscuous mode [ 151.573396][ T8203] veth1_vlan: entered promiscuous mode [ 151.708031][ T8527] netlink: 'syz.4.722': attribute type 1 has an invalid length. [ 151.719314][ T8203] veth0_macvtap: entered promiscuous mode [ 151.749221][ T8203] veth1_macvtap: entered promiscuous mode [ 151.768007][ T8527] netlink: 220 bytes leftover after parsing attributes in process `syz.4.722'. [ 151.813292][ T8527] netlink: 'syz.4.722': attribute type 1 has an invalid length. [ 151.835463][ T5847] Bluetooth: hci0: command tx timeout [ 151.839690][ T8203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.853721][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 151.869259][ T8203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.904492][ T8203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.918006][ T8203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.931953][ T8203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.943571][ T8203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.955480][ T8203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.979897][ T8203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.000534][ T8203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.020969][ T8538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.725'. [ 152.049674][ T8203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.106221][ T8203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.131725][ T8203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.157942][ T8203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.169304][ T8203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.183095][ T8203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.197970][ T8203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.222244][ T8203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.234438][ T8203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.253596][ T8550] vlan3: entered allmulticast mode [ 152.262192][ T8550] erspan0: entered allmulticast mode [ 152.270339][ T8548] netlink: 'syz.0.730': attribute type 1 has an invalid length. [ 152.318797][ T8203] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.343064][ T8203] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.359413][ T8203] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.377754][ T8203] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.594064][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.603521][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.700186][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.745425][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.752330][ T8577] netlink: 'syz.1.737': attribute type 3 has an invalid length. [ 152.986524][ T3508] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 153.106907][ T57] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 153.145053][ T3397] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 153.377401][ T8599] nbd: couldn't find a device at index 16056320 [ 153.464591][ T3508] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.679293][ T3508] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.808764][ T3508] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.089422][ T3508] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.106460][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 154.206501][ T3508] bridge_slave_1: left allmulticast mode [ 154.212194][ T3508] bridge_slave_1: left promiscuous mode [ 154.219293][ T3508] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.229061][ T3508] bridge_slave_0: left allmulticast mode [ 154.234696][ T3508] bridge_slave_0: left promiscuous mode [ 154.240719][ T3508] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.654698][ T3508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.677727][ T3508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.707246][ T3508] bond0 (unregistering): Released all slaves [ 154.826007][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 154.839430][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 154.847847][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 154.856399][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 154.864026][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 154.925729][ T8626] C speed is unknown, defaulting to 1000 [ 155.045012][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 155.100547][ T8630] sch_tbf: burst 0 is lower than device team_slave_0 mtu (1514) ! [ 155.209878][ T82] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 155.276516][ T8635] validate_nla: 1 callbacks suppressed [ 155.279415][ T8635] netlink: 'syz.3.752': attribute type 4 has an invalid length. [ 155.387917][ T8653] set match dimension is over the limit! [ 155.442258][ T8655] netlink: 'syz.1.756': attribute type 1 has an invalid length. [ 155.454375][ T8655] __nla_validate_parse: 68 callbacks suppressed [ 155.454394][ T8655] netlink: 224 bytes leftover after parsing attributes in process `syz.1.756'. [ 155.580378][ T8660] netlink: 'syz.1.758': attribute type 2 has an invalid length. [ 155.604120][ T3508] hsr_slave_0: left promiscuous mode [ 155.637613][ T3508] hsr_slave_1: left promiscuous mode [ 155.643707][ T3508] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.669521][ T3508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.697090][ T3508] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.704565][ T3508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.801577][ T3508] veth1_macvtap: left promiscuous mode [ 155.819481][ T3508] veth0_macvtap: left promiscuous mode [ 155.832347][ T3508] veth1_vlan: left promiscuous mode [ 155.839426][ T3508] veth0_vlan: left promiscuous mode [ 156.173002][ T8690] Driver unsupported XDP return value 0 on prog (id 247) dev N/A, expect packet loss! [ 156.356454][ T3508] team0 (unregistering): Port device team_slave_1 removed [ 156.365954][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 156.393855][ T3508] team0 (unregistering): Port device team_slave_0 removed [ 156.956060][ T5844] Bluetooth: hci0: command tx timeout [ 156.985862][ T8696] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 157.007051][ T8696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.769'. [ 157.122042][ T8712] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 157.138537][ T8712] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 157.146569][ T8712] x_tables: duplicate underflow at hook 2 [ 157.298924][ T8626] chnl_net:caif_netlink_parms(): no params data found [ 157.480958][ T3477] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 157.613461][ T8731] openvswitch: netlink: Key type 16144 is out of range max 32 [ 157.625884][ T8730] netlink: 'syz.1.778': attribute type 1 has an invalid length. [ 157.641704][ T8626] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.669382][ T8626] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.676892][ T8626] bridge_slave_0: entered allmulticast mode [ 157.687194][ T8626] bridge_slave_0: entered promiscuous mode [ 157.797295][ T8626] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.823691][ T8626] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.833846][ T8626] bridge_slave_1: entered allmulticast mode [ 157.842167][ T8626] bridge_slave_1: entered promiscuous mode [ 157.875598][ T8738] tipc: Started in network mode [ 157.880512][ T8738] tipc: Node identity 66ed92a4418a, cluster identity 4711 [ 157.897201][ T8738] tipc: Enabled bearer , priority 0 [ 157.930522][ T8736] netlink: 'syz.1.781': attribute type 142 has an invalid length. [ 157.980973][ T8744] netlink: 9 bytes leftover after parsing attributes in process `syz.3.784'. [ 158.053732][ T8738] syzkaller0: entered promiscuous mode [ 158.063123][ T8738] syzkaller0: entered allmulticast mode [ 158.070392][ T8738] tipc: Resetting bearer [ 158.156261][ T8744] 0·: renamed from hsr_slave_1 (while UP) [ 158.179558][ T8744] 0·: entered allmulticast mode [ 158.195495][ T8744] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 158.243855][ T8626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.266389][ T8749] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 158.280617][ T8737] tipc: Resetting bearer [ 158.657944][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 159.006678][ T10] tipc: Node number set to 661099172 [ 159.036355][ T5844] Bluetooth: hci0: command tx timeout [ 159.444780][ T8737] tipc: Disabling bearer [ 159.460162][ T8626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.561480][ T8626] team0: Port device team_slave_0 added [ 159.673791][ T8626] team0: Port device team_slave_1 added [ 159.704342][ T8778] netlink: 40 bytes leftover after parsing attributes in process `syz.4.790'. [ 159.797651][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 159.799395][ T8626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.818530][ T8626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.852998][ T8626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.872714][ T8626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.881775][ T8626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.947370][ T8626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.068056][ T8626] hsr_slave_0: entered promiscuous mode [ 160.075095][ T8626] hsr_slave_1: entered promiscuous mode [ 160.081399][ T8626] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 160.091041][ T8626] Cannot create hsr debugfs directory [ 160.418172][ T8808] netlink: 'syz.3.800': attribute type 1 has an invalid length. [ 160.437849][ T8808] netlink: 144 bytes leftover after parsing attributes in process `syz.3.800'. [ 160.464466][ T8808] netlink: 'syz.3.800': attribute type 1 has an invalid length. [ 160.472364][ T8808] netlink: 'syz.3.800': attribute type 2 has an invalid length. [ 160.484531][ T8808] netlink: 64 bytes leftover after parsing attributes in process `syz.3.800'. [ 160.563144][ T8812] Bluetooth: MGMT ver 1.23 [ 160.823370][ T8820] ip6gre1: entered allmulticast mode [ 160.931224][ T3477] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 161.118119][ T5844] Bluetooth: hci0: command tx timeout [ 161.226324][ T8846] tc_dump_action: action bad kind [ 161.241087][ T8626] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 161.284487][ T8626] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 161.300691][ T8851] netlink: 24 bytes leftover after parsing attributes in process `syz.0.811'. [ 161.334778][ T8848] delete_channel: no stack [ 161.336382][ T8626] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 161.396191][ T8626] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 161.585555][ T8864] netlink: 16 bytes leftover after parsing attributes in process `syz.4.817'. [ 161.592299][ T8866] netlink: 5 bytes leftover after parsing attributes in process `syz.1.818'. [ 161.594486][ T8864] netlink: 16 bytes leftover after parsing attributes in process `syz.4.817'. [ 161.634771][ T8864] netlink: 16 bytes leftover after parsing attributes in process `syz.4.817'. [ 161.643883][ T8864] netlink: 16 bytes leftover after parsing attributes in process `syz.4.817'. [ 161.653138][ T8864] netlink: 16 bytes leftover after parsing attributes in process `syz.4.817'. [ 161.667954][ T8864] netlink: 16 bytes leftover after parsing attributes in process `syz.4.817'. [ 161.681439][ T8864] netlink: 16 bytes leftover after parsing attributes in process `syz.4.817'. [ 161.707520][ T8866] 0ªÃøÂFNð¡: renamed from bond_slave_0 [ 161.721334][ T8866] 0ªÃøÂFNð¡: entered allmulticast mode [ 161.838440][ T8626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.872756][ T8626] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.922275][ T3477] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.929507][ T3477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.978053][ T3477] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.985371][ T3477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.119217][ T52] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 162.661218][ T8918] Unsupported ieee802154 address type: 0 [ 162.777921][ T8926] netlink: 'syz.4.835': attribute type 4 has an invalid length. [ 162.799124][ T8626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.855626][ T8926] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 162.925966][ T8933] openvswitch: netlink: Tunnel attr 303 out of range max 16 [ 163.069342][ T8626] veth0_vlan: entered promiscuous mode [ 163.122904][ T8626] veth1_vlan: entered promiscuous mode [ 163.190944][ T8931] team0: Device vti0 is of different type [ 163.199864][ T5844] Bluetooth: hci0: command tx timeout [ 163.277011][ T8945] siw: device registration error -23 [ 163.296759][ T82] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 163.325387][ T8626] veth0_macvtap: entered promiscuous mode [ 163.365634][ T8626] veth1_macvtap: entered promiscuous mode [ 163.450135][ T8626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.470755][ T8626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.505556][ T8626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.545100][ T8626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.555501][ T8626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.578399][ T8626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.590366][ T8626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.601306][ T8626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.613983][ T8626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.793541][ T8626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.810830][ T8626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.822772][ T8626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.834311][ T8965] netlink: 'syz.0.845': attribute type 39 has an invalid length. [ 163.847905][ T8626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.877506][ T8626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.896996][ T8626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.911073][ T8626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.927930][ T8626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.956560][ T8626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.019592][ T8626] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.032266][ T8626] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.044731][ T8977] xt_l2tp: wrong L2TP version: 0 [ 164.051327][ T8626] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.063881][ T8626] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.350157][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.375512][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.458456][ T3477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.469275][ T82] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 164.485051][ T3477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.529728][ T8992] x_tables: ip_tables: osf match: only valid for protocol 6 [ 164.574112][ T8998] netlink: 'syz.3.854': attribute type 1 has an invalid length. [ 164.814766][ T9008] netlink: 'syz.3.859': attribute type 20 has an invalid length. [ 164.904024][ T9004] syzkaller0: entered promiscuous mode [ 164.913843][ T9004] syzkaller0: entered allmulticast mode [ 165.002602][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.665298][ T1138] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 166.071101][ T9026] can: request_module (can-proto-5) failed. [ 166.104626][ T9029] __nla_validate_parse: 58 callbacks suppressed [ 166.104644][ T9029] netlink: 60 bytes leftover after parsing attributes in process `syz.4.862'. [ 166.390157][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 166.401700][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 166.416343][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 166.428212][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 166.437984][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 166.639698][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.798191][ T82] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 166.856946][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.907470][ T9034] C speed is unknown, defaulting to 1000 [ 167.064333][ T9057] x_tables: duplicate underflow at hook 3 [ 167.144195][ T9034] chnl_net:caif_netlink_parms(): no params data found [ 167.238563][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.368070][ T9034] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.378338][ T9034] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.387904][ T9034] bridge_slave_0: entered allmulticast mode [ 167.399076][ T9034] bridge_slave_0: entered promiscuous mode [ 167.410909][ T9034] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.418204][ T9034] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.425516][ T9034] bridge_slave_1: entered allmulticast mode [ 167.433255][ T9034] bridge_slave_1: entered promiscuous mode [ 167.544651][ T9034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.560832][ T9034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.677800][ T9074] Bluetooth: MGMT ver 1.23 [ 167.717616][ T9034] team0: Port device team_slave_0 added [ 167.747361][ T9034] team0: Port device team_slave_1 added [ 167.757250][ T12] bridge_slave_1: left allmulticast mode [ 167.762944][ T12] bridge_slave_1: left promiscuous mode [ 167.771315][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.783116][ T12] bridge_slave_0: left allmulticast mode [ 167.789202][ T12] bridge_slave_0: left promiscuous mode [ 167.795469][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.869444][ T9082] netlink: 'syz.1.877': attribute type 1 has an invalid length. [ 167.884978][ T9082] netlink: 17 bytes leftover after parsing attributes in process `syz.1.877'. [ 167.936265][ T52] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 168.085622][ T9086] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 168.150726][ T9088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.879'. [ 168.257813][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.270086][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.280752][ T12] bond0 (unregistering): Released all slaves [ 168.322875][ T9088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.472880][ T9088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.480563][ T5844] Bluetooth: hci0: command tx timeout [ 168.650780][ T9034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.658948][ T9034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.701642][ T9034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.849922][ T9112] netlink: 16 bytes leftover after parsing attributes in process `syz.1.887'. [ 168.966349][ T9034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.984694][ T9123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.889'. [ 168.989260][ T9034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.027787][ T9034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.086870][ T52] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 169.108382][ T9123] vlan2: entered allmulticast mode [ 169.113960][ T9123] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 169.121287][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 169.201867][ T12] hsr_slave_0: left promiscuous mode [ 169.210738][ T12] hsr_slave_1: left promiscuous mode [ 169.224434][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.243271][ T9132] ip6t_srh: unknown srh invflags 4449 [ 169.253072][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.284615][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.300303][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.332957][ T12] veth1_macvtap: left promiscuous mode [ 169.343724][ T12] veth0_macvtap: left promiscuous mode [ 169.352970][ T12] veth1_vlan: left promiscuous mode [ 169.361057][ T12] veth0_vlan: left promiscuous mode [ 169.833217][ T12] team0 (unregistering): Port device team_slave_1 removed [ 169.871969][ T12] team0 (unregistering): Port device team_slave_0 removed [ 170.206066][ T52] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 170.284482][ T9034] hsr_slave_0: entered promiscuous mode [ 170.309335][ T9034] hsr_slave_1: entered promiscuous mode [ 170.320000][ T9034] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.328901][ T9034] Cannot create hsr debugfs directory [ 170.462064][ T9144] netlink: 'syz.0.894': attribute type 3 has an invalid length. [ 170.483102][ T9151] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.484213][ T9144] netlink: 32 bytes leftover after parsing attributes in process `syz.0.894'. [ 170.546281][ T9146] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.558469][ T5844] Bluetooth: hci0: command tx timeout [ 170.691805][ T9158] netlink: 12 bytes leftover after parsing attributes in process `syz.4.899'. [ 170.721062][ T9159] netlink: 4 bytes leftover after parsing attributes in process `syz.4.899'. [ 170.774253][ T9163] netlink: 104 bytes leftover after parsing attributes in process `syz.1.900'. [ 170.796213][ T9163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.915274][ T9166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.901'. [ 171.081171][ T9168] netlink: 'syz.4.902': attribute type 3 has an invalid length. [ 171.228777][ T9175] netlink: 'syz.4.907': attribute type 4 has an invalid length. [ 171.298627][ T9180] __nla_validate_parse: 1 callbacks suppressed [ 171.298647][ T9180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.906'. [ 171.334932][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 171.359127][ T9180] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 171.382206][ T9034] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 171.432725][ T9034] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 171.448922][ T9034] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 171.463874][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.479305][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.487450][ T9034] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 171.683084][ T9193] netlink: 32 bytes leftover after parsing attributes in process `syz.3.912'. [ 171.731146][ T9199] netlink: 4 bytes leftover after parsing attributes in process `syz.4.914'. [ 171.761440][ T9199] bridge_slave_1: left allmulticast mode [ 171.770297][ T9199] bridge_slave_1: left promiscuous mode [ 171.810139][ T9199] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.901805][ T9199] bridge_slave_0: left allmulticast mode [ 171.924270][ T9199] bridge_slave_0: left promiscuous mode [ 171.930832][ T9209] netlink: 176 bytes leftover after parsing attributes in process `syz.3.916'. [ 171.940358][ T9209] netlink: 32 bytes leftover after parsing attributes in process `syz.3.916'. [ 171.947895][ T9199] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.954255][ T9209] netlink: 'syz.3.916': attribute type 4 has an invalid length. [ 172.150328][ T9034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.222741][ T9034] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.269065][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.276392][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.317611][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.324837][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.370584][ T9226] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 172.445675][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 172.542066][ T9034] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 172.635435][ T5844] Bluetooth: hci0: command tx timeout [ 172.660427][ T9236] syzkaller0: entered promiscuous mode [ 172.666403][ T9236] syzkaller0: entered allmulticast mode [ 173.585387][ T82] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 174.039315][ T9235] batadv_slave_1: entered promiscuous mode [ 174.047186][ T9244] batadv_slave_1: left promiscuous mode [ 174.055034][ T9255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.927'. [ 174.274366][ T9034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.367324][ T9260] C speed is unknown, defaulting to 1000 [ 174.425989][ T9034] veth0_vlan: entered promiscuous mode [ 174.569668][ T9274] netlink: 32 bytes leftover after parsing attributes in process `syz.0.933'. [ 174.659406][ T9034] veth1_vlan: entered promiscuous mode [ 174.715195][ T5844] Bluetooth: hci0: command tx timeout [ 174.744597][ T52] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 174.796025][ T9281] netlink: 108 bytes leftover after parsing attributes in process `syz.0.936'. [ 174.815103][ T9281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.936'. [ 174.941733][ T9034] veth0_macvtap: entered promiscuous mode [ 174.981633][ T9286] IPVS: set_ctl: invalid protocol: 115 224.0.0.2:0 [ 174.999478][ T9034] veth1_macvtap: entered promiscuous mode [ 175.107798][ T9288] xfrm1: entered allmulticast mode [ 175.121149][ T9288] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 175.222035][ T9034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.272747][ T9034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.291458][ T9034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.312469][ T9034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.375095][ T9034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.406332][ T9034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.449032][ T9034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.521086][ T9299] netlink: 4 bytes leftover after parsing attributes in process `syz.3.941'. [ 175.659725][ T9034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.672972][ T9034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.698992][ T9034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.710466][ T9034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.720928][ T9034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.732656][ T9034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.743093][ T9034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.754228][ T9034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.781208][ T9034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.876962][ T3477] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 175.942901][ T9034] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.956867][ T9034] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.968673][ T9034] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.979890][ T9034] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.994093][ T9317] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 176.029928][ T9317] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.053527][ T9317] vxcan1: tx address claim with dlc 0 [ 176.231356][ T9296] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 176.282708][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.302507][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.427102][ T9331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.952'. [ 176.438479][ T9331] openvswitch: netlink: nsh attr 0 has unexpected len 32764 expected 0 [ 176.447099][ T9331] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.616314][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.644771][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.779988][ T9341] xt_hashlimit: invalid rate [ 176.872368][ T9342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.957'. [ 177.086610][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 177.233518][ T9358] netlink: 'syz.3.964': attribute type 1 has an invalid length. [ 177.298053][ T9361] netlink: 68 bytes leftover after parsing attributes in process `syz.4.962'. [ 177.384127][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.581248][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.677558][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.770954][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.904076][ T52] bridge_slave_1: left allmulticast mode [ 177.909812][ T52] bridge_slave_1: left promiscuous mode [ 177.916197][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.926303][ T52] bridge_slave_0: left allmulticast mode [ 177.931946][ T52] bridge_slave_0: left promiscuous mode [ 177.937871][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.194591][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.207499][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.217694][ T52] bond0 (unregistering): Released all slaves [ 178.236006][ T3508] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 178.427729][ T52] hsr_slave_0: left promiscuous mode [ 178.434065][ T52] hsr_slave_1: left promiscuous mode [ 178.440716][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.448199][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.457162][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.466197][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.486748][ T52] veth1_macvtap: left promiscuous mode [ 178.493033][ T52] veth0_macvtap: left promiscuous mode [ 178.498887][ T52] veth1_vlan: left promiscuous mode [ 178.504194][ T52] veth0_vlan: left promiscuous mode [ 178.985473][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 178.994022][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 179.006505][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 179.017172][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 179.030808][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 179.146108][ T52] team0 (unregistering): Port device team_slave_1 removed [ 179.185307][ T52] team0 (unregistering): Port device team_slave_0 removed [ 179.336640][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 179.514678][ T9383] netlink: 'syz.0.966': attribute type 1 has an invalid length. [ 179.609910][ T9391] C speed is unknown, defaulting to 1000 [ 179.792365][ T10] IPVS: starting estimator thread 0... [ 179.802025][ T9404] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 179.925231][ T9405] IPVS: using max 29 ests per chain, 69600 per kthread [ 180.309591][ T9423] netlink: 20 bytes leftover after parsing attributes in process `syz.0.977'. [ 180.345238][ T9423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.977'. [ 180.361738][ T9391] chnl_net:caif_netlink_parms(): no params data found [ 180.421511][ T9427] netlink: 'syz.1.978': attribute type 9 has an invalid length. [ 180.467936][ T52] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 180.740484][ T9441] netlink: 'syz.4.980': attribute type 4 has an invalid length. [ 180.777912][ T9444] netlink: 'syz.3.982': attribute type 1 has an invalid length. [ 180.980316][ T9391] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.989061][ T9391] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.996514][ T9391] bridge_slave_0: entered allmulticast mode [ 181.005148][ T9391] bridge_slave_0: entered promiscuous mode [ 181.032507][ T9438] bond6: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 181.049799][ T9447] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 181.060044][ T9448] 8021q: adding VLAN 0 to HW filter on device bond6 [ 181.062759][ T3508] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 181.102739][ T9444] veth3: entered promiscuous mode [ 181.117340][ T5844] Bluetooth: hci0: command tx timeout [ 181.118173][ T9444] bond6: (slave veth3): Enslaving as a backup interface with a down link [ 181.140485][ T9391] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.147957][ T9391] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.158152][ T9391] bridge_slave_1: entered allmulticast mode [ 181.176189][ T9391] bridge_slave_1: entered promiscuous mode [ 181.204963][ T3508] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 181.224105][ T9464] netlink: 20 bytes leftover after parsing attributes in process `syz.4.986'. [ 181.296869][ T9464] gre0: entered allmulticast mode [ 181.316041][ T9468] netlink: 'syz.0.987': attribute type 4 has an invalid length. [ 181.401880][ T9391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.429162][ T9473] netlink: 14 bytes leftover after parsing attributes in process `syz.3.989'. [ 181.447639][ T9391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.597002][ T3508] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 181.832872][ T9473] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.857428][ T9473] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.874269][ T9473] bond0 (unregistering): Released all slaves [ 181.953231][ T9391] team0: Port device team_slave_0 added [ 182.000779][ T9391] team0: Port device team_slave_1 added [ 182.122577][ T9502] netlink: 156 bytes leftover after parsing attributes in process `syz.1.996'. [ 182.150344][ T9501] netlink: 44 bytes leftover after parsing attributes in process `syz.0.998'. [ 182.161181][ T9499] netdevsim netdevsim4: Firmware load for './file0/../file0' refused, path contains '..' component [ 182.162900][ T9391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.199566][ T9501] netlink: 43 bytes leftover after parsing attributes in process `syz.0.998'. [ 182.201945][ T9391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.244767][ T9501] netlink: 'syz.0.998': attribute type 6 has an invalid length. [ 182.250936][ T9391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.284416][ T9501] netlink: 'syz.0.998': attribute type 5 has an invalid length. [ 182.287695][ T9391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.306845][ T9511] xt_hashlimit: size too large, truncated to 1048576 [ 182.313863][ T9501] netlink: 43 bytes leftover after parsing attributes in process `syz.0.998'. [ 182.331495][ T9391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.347914][ T9513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1002'. [ 182.375793][ T9391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.634759][ T9522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1001'. [ 182.645923][ T9391] hsr_slave_0: entered promiscuous mode [ 182.679093][ T9391] hsr_slave_1: entered promiscuous mode [ 182.689513][ T9391] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 182.705260][ T9391] Cannot create hsr debugfs directory [ 182.738828][ T52] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 182.813827][ T9529] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1004'. [ 182.937964][ T9532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1007'. [ 183.196532][ T5844] Bluetooth: hci0: command tx timeout [ 183.678003][ T9557] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1016'. [ 183.855993][ T52] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 183.902000][ T9565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1018'. [ 183.944609][ T9570] Bluetooth: MGMT ver 1.23 [ 184.112203][ T9577] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 184.348516][ T9391] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 184.390307][ T9391] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 184.435966][ T9391] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 184.491711][ T9391] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 184.873581][ T9391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.977901][ T9391] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.985714][ T1138] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 185.051690][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.058912][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.100971][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.108245][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.188678][ T9626] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 185.274954][ T5844] Bluetooth: hci0: command tx timeout [ 185.281524][ T9391] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 185.382247][ T9634] 8021q: adding VLAN 0 to HW filter on device bond1 [ 185.602924][ T9634] bond1 (unregistering): Released all slaves [ 185.931664][ T9667] netlink: 'syz.1.1049': attribute type 1 has an invalid length. [ 185.941968][ T9667] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 185.963230][ T9667] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 185.976303][ T9391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.083455][ T9391] veth0_vlan: entered promiscuous mode [ 186.143995][ T9391] veth1_vlan: entered promiscuous mode [ 186.158234][ T1138] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 186.228236][ T9391] veth0_macvtap: entered promiscuous mode [ 186.249708][ T9676] netlink: 'syz.3.1051': attribute type 4 has an invalid length. [ 186.269360][ T9391] veth1_macvtap: entered promiscuous mode [ 186.279370][ T9680] netlink: 'syz.3.1051': attribute type 4 has an invalid length. [ 186.321188][ T9391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.332378][ T9391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.342974][ T9391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.354456][ T9391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.389308][ T9391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.412775][ T9391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.424729][ T9391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.478708][ T9391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.497090][ T9391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.528637][ T9687] openvswitch: netlink: Key type 784 is out of range max 32 [ 186.545133][ T9391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.581293][ T9391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.614783][ T9391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.639405][ T9391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.650183][ T9391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.678650][ T9391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.691619][ T9391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.713978][ T9391] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.742732][ T9391] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.764973][ T9391] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.785026][ T9391] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.977211][ T9704] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 187.094691][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.128769][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.167770][ T9714] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.246839][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.269709][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.295066][ T3508] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 187.334256][ T9720] __nla_validate_parse: 14 callbacks suppressed [ 187.334274][ T9720] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1067'. [ 187.355404][ T5844] Bluetooth: hci0: command tx timeout [ 187.384555][ T9721] syzkaller0: entered promiscuous mode [ 187.390427][ T9721] syzkaller0: entered allmulticast mode [ 187.421510][ T9718] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1067'. [ 187.444699][ T9723] netlink: 'syz.1.1069': attribute type 4 has an invalid length. [ 187.507581][ T9725] netlink: 'syz.1.1069': attribute type 4 has an invalid length. [ 187.567759][ T9729] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1071'. [ 187.729547][ T9738] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.738675][ T9738] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.747497][ T9738] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.756508][ T9738] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.788695][ T9739] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1073'. [ 188.022151][ T9757] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 188.211132][ T3508] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.391494][ T3508] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.449615][ T52] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 188.557466][ T3508] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.687414][ T3508] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.881922][ T3508] bridge_slave_1: left allmulticast mode [ 188.892451][ T3508] bridge_slave_1: left promiscuous mode [ 188.899659][ T3508] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.913168][ T3508] bridge_slave_0: left allmulticast mode [ 188.919901][ T3508] bridge_slave_0: left promiscuous mode [ 188.926805][ T3508] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.273847][ T3508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.289657][ T3508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.299623][ T3508] bond0 (unregistering): Released all slaves [ 189.617811][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 189.700103][ T9793] bond7: entered promiscuous mode [ 189.721105][ T9793] bond7: entered allmulticast mode [ 189.752665][ T9793] 8021q: adding VLAN 0 to HW filter on device bond7 [ 189.913376][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 189.936234][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 189.944085][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 189.952370][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 189.977546][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 190.019075][ T9793] bond7 (unregistering): Released all slaves [ 190.049604][ T3508] hsr_slave_0: left promiscuous mode [ 190.056368][ T3508] hsr_slave_1: left promiscuous mode [ 190.062317][ T3508] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.070007][ T3508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.092425][ T3508] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.103330][ T3508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.147694][ T3508] veth1_macvtap: left promiscuous mode [ 190.153290][ T3508] veth0_macvtap: left promiscuous mode [ 190.167043][ T3508] veth1_vlan: left promiscuous mode [ 190.172434][ T3508] veth0_vlan: left promiscuous mode [ 190.708326][ T3508] team0 (unregistering): Port device team_slave_1 removed [ 190.746855][ T3508] team0 (unregistering): Port device team_slave_0 removed [ 190.765154][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 191.209596][ T9805] C speed is unknown, defaulting to 1000 [ 191.310321][ T9824] delete_channel: no stack [ 191.659775][ T9837] pim6reg1: entered promiscuous mode [ 191.696535][ T9837] pim6reg1: entered allmulticast mode [ 191.880112][ T3477] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 191.896698][ T9846] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1101'. [ 191.968033][ T9850] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1100'. [ 192.073357][ T9805] chnl_net:caif_netlink_parms(): no params data found [ 192.080628][ T5844] Bluetooth: hci0: command tx timeout [ 192.275959][ T9869] netlink: 'syz.3.1105': attribute type 2 has an invalid length. [ 192.346058][ T9869] netlink: 'syz.3.1105': attribute type 2 has an invalid length. [ 192.367088][ T9872] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1108'. [ 192.490537][ T9805] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.516295][ T9805] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.534666][ T9805] bridge_slave_0: entered allmulticast mode [ 192.554559][ T9805] bridge_slave_0: entered promiscuous mode [ 192.582176][ T9883] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1111'. [ 192.586187][ T9805] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.640543][ T9805] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.666911][ T9805] bridge_slave_1: entered allmulticast mode [ 192.688104][ T9805] bridge_slave_1: entered promiscuous mode [ 192.837705][ T9805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.890813][ T9805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.994016][ T9904] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 193.032354][ T9805] team0: Port device team_slave_0 added [ 193.051489][ T9805] team0: Port device team_slave_1 added [ 193.075335][ T3477] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 193.238529][ T9805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.257738][ T9805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.289379][ T9805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.302017][ T9910] veth0_to_hsr: mtu less than device minimum [ 193.345715][ T9805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.416198][ T9805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.460315][ T9805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.583257][ T9924] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1122'. [ 193.610345][ T9922] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1121'. [ 193.641086][ T9805] hsr_slave_0: entered promiscuous mode [ 193.654542][ T9805] hsr_slave_1: entered promiscuous mode [ 193.688903][ T9805] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 193.704951][ T9805] Cannot create hsr debugfs directory [ 194.021427][ T9949] xt_bpf: check failed: parse error [ 194.079745][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.134192][ T9953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1130'. [ 194.153626][ T9960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1131'. [ 194.162861][ T5844] Bluetooth: hci0: command tx timeout [ 194.276107][ T9957] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 194.323747][ T9963] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1133'. [ 194.423465][ T9964] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1133'. [ 194.656182][ T9984] tipc: Enabled bearer , priority 0 [ 194.663363][ T9986] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1137'. [ 194.752860][ T9993] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1140'. [ 194.774679][ T9981] tipc: Disabling bearer [ 195.141331][ T9805] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 195.196672][ T9805] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 195.220554][ T9805] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 195.244756][ T9805] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 195.425758][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 195.519153][ T9805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.600203][ T9805] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.643580][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.650864][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.709710][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.716932][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.763538][T10035] netlink: 'syz.0.1156': attribute type 39 has an invalid length. [ 195.917540][T10035] veth0_macvtap: left promiscuous mode [ 196.070960][T10038] sch_fq: defrate 0 ignored. [ 196.236553][ T5844] Bluetooth: hci0: command tx timeout [ 196.569122][ T9805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.583440][ T1138] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 196.621464][T10066] xt_limit: Overflow, try lower: 2147483649/128 [ 196.772715][ T9805] veth0_vlan: entered promiscuous mode [ 196.828609][ T9805] veth1_vlan: entered promiscuous mode [ 196.952959][ T9805] veth0_macvtap: entered promiscuous mode [ 196.968481][ T9805] veth1_macvtap: entered promiscuous mode [ 197.020261][ T9805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.043778][ T9805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.064606][ T9805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.080725][ T9805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.093045][ T9805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.109926][ T9805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.126575][ T9805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.160098][ T9805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.171366][ T9805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.182559][ T9805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.193702][ T9805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.207352][ T9805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.218081][ T9805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.230584][ T9805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.241723][ T9805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.253814][ T9805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.270487][ T9805] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.294375][ T9805] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.304264][ T9805] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.315573][ T9805] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.397038][T10091] netlink: 'syz.4.1173': attribute type 4 has an invalid length. [ 197.444161][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.475839][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.510229][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.521474][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.601790][ T9805] ------------[ cut here ]------------ [ 197.608055][ T9805] refcount_t: underflow; use-after-free. [ 197.615852][ T9805] WARNING: CPU: 0 PID: 9805 at lib/refcount.c:28 refcount_warn_saturate+0x11a/0x1d0 [ 197.626641][ T9805] Modules linked in: [ 197.631014][ T9805] CPU: 0 UID: 0 PID: 9805 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller-00213-g3c44b2d615e6 #0 PREEMPT(full) [ 197.643255][ T9805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 197.655007][ T9805] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0 [ 197.661247][ T9805] Code: 60 82 c1 8b e8 07 c6 cb fc 90 0f 0b 90 90 eb d7 e8 ab 69 07 fd c6 05 48 77 b0 0a 01 90 48 c7 c7 c0 82 c1 8b e8 e7 c5 cb fc 90 <0f> 0b 90 90 eb b7 e8 8b 69 07 fd c6 05 25 77 b0 0a 01 90 48 c7 c7 [ 197.681637][ T9805] RSP: 0018:ffffc90003d2f7d8 EFLAGS: 00010246 [ 197.688722][ T9805] RAX: 6df8893ab7ea6000 RBX: 0000000000000003 RCX: ffff888031a43c00 [ 197.697325][ T9805] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 197.705704][ T9805] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 197.714179][ T9805] R10: dffffc0000000000 R11: fffffbfff1bba4b4 R12: ffff8880298a6000 [ 197.723704][ T9805] R13: ffff88802f947460 R14: ffff88802f947478 R15: dffffc0000000000 [ 197.733567][ T9805] FS: 0000000000000000(0000) GS:ffff8881260ce000(0000) knlGS:0000000000000000 [ 197.739273][ T3601] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 197.742952][ T9805] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 197.757762][ T9805] CR2: 00007ffc72f86c50 CR3: 000000002df62000 CR4: 00000000003526f0 [ 197.766157][ T9805] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 197.774179][ T9805] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 197.782569][ T9805] Call Trace: [ 197.786299][ T9805] [ 197.789274][ T9805] klist_dec_and_del+0x3c7/0x3d0 [ 197.794264][ T9805] klist_remove+0x1bd/0x340 [ 197.799183][ T9805] ? __pfx_klist_children_put+0x10/0x10 [ 197.805289][ T9805] ? __pfx_klist_remove+0x10/0x10 [ 197.810363][ T9805] ? __pfx_kobject_move+0x10/0x10 [ 197.815980][ T9805] ? get_device_parent+0x366/0x3a0 [ 197.822635][ T9805] device_move+0x193/0x700 [ 197.828452][ T9805] hci_conn_del_sysfs+0xb8/0x170 [ 197.833546][ T9805] hci_conn_del+0x8f5/0xca0 [ 197.838531][ T9805] hci_conn_hash_flush+0x191/0x230 [ 197.843785][ T9805] hci_dev_close_sync+0xaef/0x1330 [ 197.849039][ T9805] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 197.854648][ T9805] ? up_write+0x1c4/0x420 [ 197.859109][ T9805] hci_unregister_dev+0x206/0x500 [ 197.864203][ T9805] vhci_release+0x80/0xd0 [ 197.868617][ T9805] ? __pfx_vhci_release+0x10/0x10 [ 197.873688][ T9805] __fput+0x449/0xa70 [ 197.877814][ T9805] task_work_run+0x1d1/0x260 [ 197.882460][ T9805] ? __pfx_task_work_run+0x10/0x10 [ 197.887707][ T9805] ? kmem_cache_free+0x192/0x3f0 [ 197.892712][ T9805] do_exit+0x8d6/0x2550 [ 197.896979][ T9805] ? sched_clock_cpu+0x74/0x430 [ 197.901893][ T9805] ? __pfx_do_exit+0x10/0x10 [ 197.906632][ T9805] ? _raw_spin_unlock_irq+0x23/0x50 [ 197.911869][ T9805] ? lockdep_hardirqs_on+0x9c/0x150 [ 197.918822][ T9805] do_group_exit+0x21c/0x2d0 [ 197.925026][ T9805] __x64_sys_exit_group+0x3f/0x40 [ 197.930131][ T9805] x64_sys_call+0x21ba/0x21c0 [ 197.936114][ T9805] do_syscall_64+0xf6/0x210 [ 197.940664][ T9805] ? asm_sysvec_call_function_single+0x1a/0x20 [ 197.946928][ T9805] ? clear_bhb_loop+0x45/0xa0 [ 197.951638][ T9805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.957608][ T9805] RIP: 0033:0x7fdf7418e969 [ 197.962073][ T9805] Code: Unable to access opcode bytes at 0x7fdf7418e93f. [ 197.969162][ T9805] RSP: 002b:00007ffc72f88e28 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 197.977754][ T9805] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdf7418e969 [ 197.985884][ T9805] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 197.993905][ T9805] RBP: 00007fdf741ee8f0 R08: 00007ffc72f86bc7 R09: 0000000000000003 [ 198.002196][ T9805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.010249][ T9805] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007ffc72f88fe0 [ 198.018330][ T9805] [ 198.021388][ T9805] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 198.028698][ T9805] CPU: 0 UID: 0 PID: 9805 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller-00213-g3c44b2d615e6 #0 PREEMPT(full) [ 198.040947][ T9805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 198.051031][ T9805] Call Trace: [ 198.054318][ T9805] [ 198.057262][ T9805] dump_stack_lvl+0x99/0x250 [ 198.061879][ T9805] ? __asan_memcpy+0x40/0x70 [ 198.066479][ T9805] ? __pfx_dump_stack_lvl+0x10/0x10 [ 198.071693][ T9805] ? __pfx__printk+0x10/0x10 [ 198.076306][ T9805] panic+0x2db/0x790 [ 198.080220][ T9805] ? __pfx_panic+0x10/0x10 [ 198.084665][ T9805] __warn+0x31b/0x4b0 [ 198.088695][ T9805] ? refcount_warn_saturate+0x11a/0x1d0 [ 198.094259][ T9805] ? refcount_warn_saturate+0x11a/0x1d0 [ 198.099816][ T9805] report_bug+0x2be/0x4f0 [ 198.104152][ T9805] ? refcount_warn_saturate+0x11a/0x1d0 [ 198.109712][ T9805] ? refcount_warn_saturate+0x11a/0x1d0 [ 198.115270][ T9805] ? refcount_warn_saturate+0x11c/0x1d0 [ 198.120822][ T9805] handle_bug+0x84/0x160 [ 198.125077][ T9805] exc_invalid_op+0x1a/0x50 [ 198.129598][ T9805] asm_exc_invalid_op+0x1a/0x20 [ 198.134454][ T9805] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0 [ 198.140621][ T9805] Code: 60 82 c1 8b e8 07 c6 cb fc 90 0f 0b 90 90 eb d7 e8 ab 69 07 fd c6 05 48 77 b0 0a 01 90 48 c7 c7 c0 82 c1 8b e8 e7 c5 cb fc 90 <0f> 0b 90 90 eb b7 e8 8b 69 07 fd c6 05 25 77 b0 0a 01 90 48 c7 c7 [ 198.160238][ T9805] RSP: 0018:ffffc90003d2f7d8 EFLAGS: 00010246 [ 198.166314][ T9805] RAX: 6df8893ab7ea6000 RBX: 0000000000000003 RCX: ffff888031a43c00 [ 198.174288][ T9805] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 198.182263][ T9805] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 198.190243][ T9805] R10: dffffc0000000000 R11: fffffbfff1bba4b4 R12: ffff8880298a6000 [ 198.198235][ T9805] R13: ffff88802f947460 R14: ffff88802f947478 R15: dffffc0000000000 [ 198.206244][ T9805] ? refcount_warn_saturate+0x119/0x1d0 [ 198.211812][ T9805] klist_dec_and_del+0x3c7/0x3d0 [ 198.216765][ T9805] klist_remove+0x1bd/0x340 [ 198.221276][ T9805] ? __pfx_klist_children_put+0x10/0x10 [ 198.226836][ T9805] ? __pfx_klist_remove+0x10/0x10 [ 198.231873][ T9805] ? __pfx_kobject_move+0x10/0x10 [ 198.236924][ T9805] ? get_device_parent+0x366/0x3a0 [ 198.242050][ T9805] device_move+0x193/0x700 [ 198.246483][ T9805] hci_conn_del_sysfs+0xb8/0x170 [ 198.251430][ T9805] hci_conn_del+0x8f5/0xca0 [ 198.255952][ T9805] hci_conn_hash_flush+0x191/0x230 [ 198.261073][ T9805] hci_dev_close_sync+0xaef/0x1330 [ 198.266209][ T9805] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 198.271768][ T9805] ? up_write+0x1c4/0x420 [ 198.276110][ T9805] hci_unregister_dev+0x206/0x500 [ 198.281174][ T9805] vhci_release+0x80/0xd0 [ 198.285523][ T9805] ? __pfx_vhci_release+0x10/0x10 [ 198.290550][ T9805] __fput+0x449/0xa70 [ 198.294577][ T9805] task_work_run+0x1d1/0x260 [ 198.299182][ T9805] ? __pfx_task_work_run+0x10/0x10 [ 198.304304][ T9805] ? kmem_cache_free+0x192/0x3f0 [ 198.309255][ T9805] do_exit+0x8d6/0x2550 [ 198.313427][ T9805] ? sched_clock_cpu+0x74/0x430 [ 198.318297][ T9805] ? __pfx_do_exit+0x10/0x10 [ 198.322911][ T9805] ? _raw_spin_unlock_irq+0x23/0x50 [ 198.328113][ T9805] ? lockdep_hardirqs_on+0x9c/0x150 [ 198.333321][ T9805] do_group_exit+0x21c/0x2d0 [ 198.337930][ T9805] __x64_sys_exit_group+0x3f/0x40 [ 198.342994][ T9805] x64_sys_call+0x21ba/0x21c0 [ 198.347700][ T9805] do_syscall_64+0xf6/0x210 [ 198.352234][ T9805] ? asm_sysvec_call_function_single+0x1a/0x20 [ 198.358402][ T9805] ? clear_bhb_loop+0x45/0xa0 [ 198.363088][ T9805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.368987][ T9805] RIP: 0033:0x7fdf7418e969 [ 198.373409][ T9805] Code: Unable to access opcode bytes at 0x7fdf7418e93f. [ 198.380450][ T9805] RSP: 002b:00007ffc72f88e28 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 198.388870][ T9805] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdf7418e969 [ 198.396846][ T9805] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 198.404824][ T9805] RBP: 00007fdf741ee8f0 R08: 00007ffc72f86bc7 R09: 0000000000000003 [ 198.412803][ T9805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.420778][ T9805] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007ffc72f88fe0 [ 198.428771][ T9805] [ 198.432084][ T9805] Kernel Offset: disabled [ 198.436416][ T9805] Rebooting in 86400 seconds..