last executing test programs: 1m59.666816091s ago: executing program 1 (id=2973): sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000000903000000000014000000070000000900010073797a3000005cb518000200070001"], 0x38}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'gre0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x7f00, 0x700, 0x34, 0x8000, {{0x11, 0x4, 0x1, 0x7, 0x44, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @remote, {[@rr={0x7, 0x17, 0x71, [@empty, @local, @multicast2, @local, @dev={0xac, 0x14, 0x14, 0x33}]}, @lsrr={0x83, 0x17, 0xd7, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @local, @broadcast]}]}}}}}) r1 = socket$inet6(0xa, 0x3, 0x20) sendmmsg$inet6(r1, &(0x7f0000000940)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="280000000000000029000000020000"], 0x28}}], 0x1, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf2501"], 0x114}], 0x1}, 0x0) 1m57.77100611s ago: executing program 3 (id=2489): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000004340)={&(0x7f0000004100)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000004280)=[{&(0x7f0000004140)="2da1a5", 0x3}], 0x1, &(0x7f00000042c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x50}, 0x4000840) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'geneve1\x00'}}, 0x1e) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40004) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x7, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x3}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000080) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000001500)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xd}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x2000, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "8908981864d689ac43445c1c26e95299e94ccad8794114ae3061e328af342f99", "e4d0ce57abcb41f7f5c8ab8f63dd38a1", {"bb3ce5a4bbb68671a2892fa0317a823c", "be9d98ca816f77013a778b6c40b49ea9"}}}}}}}, 0x0) 1m41.171698575s ago: executing program 1 (id=2973): sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000000903000000000014000000070000000900010073797a3000005cb518000200070001"], 0x38}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'gre0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x7f00, 0x700, 0x34, 0x8000, {{0x11, 0x4, 0x1, 0x7, 0x44, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @remote, {[@rr={0x7, 0x17, 0x71, [@empty, @local, @multicast2, @local, @dev={0xac, 0x14, 0x14, 0x33}]}, @lsrr={0x83, 0x17, 0xd7, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @local, @broadcast]}]}}}}}) r1 = socket$inet6(0xa, 0x3, 0x20) sendmmsg$inet6(r1, &(0x7f0000000940)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="280000000000000029000000020000"], 0x28}}], 0x1, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf2501"], 0x114}], 0x1}, 0x0) 1m40.326825821s ago: executing program 3 (id=2489): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000004340)={&(0x7f0000004100)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000004280)=[{&(0x7f0000004140)="2da1a5", 0x3}], 0x1, &(0x7f00000042c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x50}, 0x4000840) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'geneve1\x00'}}, 0x1e) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40004) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x7, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x3}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000080) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000001500)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xd}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x2000, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "8908981864d689ac43445c1c26e95299e94ccad8794114ae3061e328af342f99", "e4d0ce57abcb41f7f5c8ab8f63dd38a1", {"bb3ce5a4bbb68671a2892fa0317a823c", "be9d98ca816f77013a778b6c40b49ea9"}}}}}}}, 0x0) 1m23.523405588s ago: executing program 1 (id=2973): sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000000903000000000014000000070000000900010073797a3000005cb518000200070001"], 0x38}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'gre0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x7f00, 0x700, 0x34, 0x8000, {{0x11, 0x4, 0x1, 0x7, 0x44, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @remote, {[@rr={0x7, 0x17, 0x71, [@empty, @local, @multicast2, @local, @dev={0xac, 0x14, 0x14, 0x33}]}, @lsrr={0x83, 0x17, 0xd7, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @local, @broadcast]}]}}}}}) r1 = socket$inet6(0xa, 0x3, 0x20) sendmmsg$inet6(r1, &(0x7f0000000940)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="280000000000000029000000020000"], 0x28}}], 0x1, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf2501"], 0x114}], 0x1}, 0x0) 1m22.230940809s ago: executing program 3 (id=2489): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000004340)={&(0x7f0000004100)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000004280)=[{&(0x7f0000004140)="2da1a5", 0x3}], 0x1, &(0x7f00000042c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x50}, 0x4000840) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'geneve1\x00'}}, 0x1e) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40004) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x7, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x3}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000080) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000001500)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xd}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x2000, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "8908981864d689ac43445c1c26e95299e94ccad8794114ae3061e328af342f99", "e4d0ce57abcb41f7f5c8ab8f63dd38a1", {"bb3ce5a4bbb68671a2892fa0317a823c", "be9d98ca816f77013a778b6c40b49ea9"}}}}}}}, 0x0) 1m6.337713498s ago: executing program 1 (id=2973): sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000000903000000000014000000070000000900010073797a3000005cb518000200070001"], 0x38}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'gre0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x7f00, 0x700, 0x34, 0x8000, {{0x11, 0x4, 0x1, 0x7, 0x44, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @remote, {[@rr={0x7, 0x17, 0x71, [@empty, @local, @multicast2, @local, @dev={0xac, 0x14, 0x14, 0x33}]}, @lsrr={0x83, 0x17, 0xd7, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @local, @broadcast]}]}}}}}) r1 = socket$inet6(0xa, 0x3, 0x20) sendmmsg$inet6(r1, &(0x7f0000000940)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="280000000000000029000000020000"], 0x28}}], 0x1, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf2501"], 0x114}], 0x1}, 0x0) 1m4.960413851s ago: executing program 3 (id=2489): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000004340)={&(0x7f0000004100)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000004280)=[{&(0x7f0000004140)="2da1a5", 0x3}], 0x1, &(0x7f00000042c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x50}, 0x4000840) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'geneve1\x00'}}, 0x1e) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40004) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x7, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x3}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000080) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000001500)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xd}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x2000, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "8908981864d689ac43445c1c26e95299e94ccad8794114ae3061e328af342f99", "e4d0ce57abcb41f7f5c8ab8f63dd38a1", {"bb3ce5a4bbb68671a2892fa0317a823c", "be9d98ca816f77013a778b6c40b49ea9"}}}}}}}, 0x0) 53.527563649s ago: executing program 0 (id=3442): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) connect$pptp(r1, &(0x7f00000000c0)={0x18, 0x2, {0x1, @rand_addr=0x64010101}}, 0x1e) read(r0, &(0x7f0000000240)=""/4096, 0x1000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) recvmsg$unix(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000040)=0x5a8, 0x4) 52.608983466s ago: executing program 0 (id=3448): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x2, {}, 0x1}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x0, 0x1, 0x4}}, 0x18) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x20, &(0x7f00000005c0)={&(0x7f0000000480)=""/48, 0x30, 0x0, &(0x7f00000004c0)=""/235, 0xeb}}, 0x10) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x11, 0xe, 0x5, 0x47b, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) read$alg(r9, &(0x7f0000000040)=""/136, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x4, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x717c}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8001}}]}, &(0x7f0000000180)='GPL\x00', 0x4, 0x2e, &(0x7f0000000300)=""/46, 0x41000, 0x0, '\x00', r3, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0x5, 0x9, 0x9c55}, 0x10, r4, 0xffffffffffffffff, 0x4, &(0x7f0000000800)=[r5, r6, r7, r9], &(0x7f0000000840)=[{0x2, 0x3, 0x8, 0x8}, {0x5, 0x5, 0x0, 0x8}, {0x2, 0x3, 0xa, 0x4}, {0x0, 0x2, 0x9, 0x3}], 0x10, 0x3, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001880)=ANY=[@ANYRES32=r1, @ANYRES32=r10, @ANYBLOB="02"], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r11, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) 52.474984388s ago: executing program 0 (id=3449): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) (async) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async, rerun: 32) recvmmsg$unix(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}], 0x1, 0x0, 0x0) (async, rerun: 32) recvmmsg(r0, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002f00)=""/130, 0x82}], 0x1}, 0xfffffffd}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000006c0)=""/118, 0x76}], 0x1}, 0xd335}], 0x2, 0x2120, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x68, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_CIDR={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) 52.198421673s ago: executing program 0 (id=3451): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffc, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x1, 0x6000000, 0x0, {0x7}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x9}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x21}, @IPSET_ATTR_CIDR={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000180)=0x8, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000140)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) bind$xdp(r3, &(0x7f0000000240)={0x2c, 0x1, r5, 0x0, r6}, 0x60) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB, @ANYRES64=0x0], 0x20) 39.273457708s ago: executing program 1 (id=2973): sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000000903000000000014000000070000000900010073797a3000005cb518000200070001"], 0x38}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'gre0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x7f00, 0x700, 0x34, 0x8000, {{0x11, 0x4, 0x1, 0x7, 0x44, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @remote, {[@rr={0x7, 0x17, 0x71, [@empty, @local, @multicast2, @local, @dev={0xac, 0x14, 0x14, 0x33}]}, @lsrr={0x83, 0x17, 0xd7, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @local, @broadcast]}]}}}}}) r1 = socket$inet6(0xa, 0x3, 0x20) sendmmsg$inet6(r1, &(0x7f0000000940)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="280000000000000029000000020000"], 0x28}}], 0x1, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf2501"], 0x114}], 0x1}, 0x0) 38.204652233s ago: executing program 3 (id=2489): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000004340)={&(0x7f0000004100)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000004280)=[{&(0x7f0000004140)="2da1a5", 0x3}], 0x1, &(0x7f00000042c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x50}, 0x4000840) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'geneve1\x00'}}, 0x1e) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40004) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x7, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x3}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000080) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000001500)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xd}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x2000, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "8908981864d689ac43445c1c26e95299e94ccad8794114ae3061e328af342f99", "e4d0ce57abcb41f7f5c8ab8f63dd38a1", {"bb3ce5a4bbb68671a2892fa0317a823c", "be9d98ca816f77013a778b6c40b49ea9"}}}}}}}, 0x0) 29.477062405s ago: executing program 0 (id=3451): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca0200000000000000adcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d070490893616810a121ff4feedd1d176b313b9fc7bf31ddff431a4a50760ce18a76c4b7aa73cec3eec984c76d16f798c436410f3f4a41715e736a132c3cb9421be0b3c2bd40b75896c007fa2d47e3d8392d905d582b8eff689b0f493770c91e8c2e8bd0b08ffa4fd0289b04b0ea024768d196ef721314d68d29988b01871c6ea39f95a0b77744caadd24867acab274e8e4bf3fb44df31e15ffdce52f9f60ffe"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffc, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x1, 0x6000000, 0x0, {0x7}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x9}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x21}, @IPSET_ATTR_CIDR={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000180)=0x8, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000140)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) bind$xdp(r3, &(0x7f0000000240)={0x2c, 0x1, r5, 0x0, r6}, 0x60) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="0700000000803f8811223fd5fab37943f249762f840b13567afe3267dfed52a77e2c1f09d30de4cf3910f7992cd7e8da8bcc87420a0cfdb32b2a714cc7bb4f71b45f8979645398dd519ab25f5debd7b6ec016c10fb735d9f82cb2a1fd1f018f7cdb400153b9dd39538d5ed93124eb66c7a1f0f9e83d24b3c6466c71fe4b1ee7fae8336158c0e93973dd0fc2e7264915ac39f8963e89af08b7bc64009fca41a57a1cebb617006fe697ff9aa8a7eecc224d5973d68ad49a683559dc61a94079c95b0b29f45c6739b58370d68aff6bdba03d21d5e73c7740298c2817a99383d17113bebc5d14973102eb43aef3a5c07000000000000005d6921826c00000000", @ANYRES32=r0, @ANYBLOB, @ANYRES64=0x0], 0x20) 19.616989883s ago: executing program 1 (id=2973): sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000000903000000000014000000070000000900010073797a3000005cb518000200070001"], 0x38}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'gre0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x7f00, 0x700, 0x34, 0x8000, {{0x11, 0x4, 0x1, 0x7, 0x44, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @remote, {[@rr={0x7, 0x17, 0x71, [@empty, @local, @multicast2, @local, @dev={0xac, 0x14, 0x14, 0x33}]}, @lsrr={0x83, 0x17, 0xd7, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @local, @broadcast]}]}}}}}) r1 = socket$inet6(0xa, 0x3, 0x20) sendmmsg$inet6(r1, &(0x7f0000000940)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="280000000000000029000000020000"], 0x28}}], 0x1, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf2501"], 0x114}], 0x1}, 0x0) 18.444365331s ago: executing program 3 (id=2489): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000004340)={&(0x7f0000004100)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000004280)=[{&(0x7f0000004140)="2da1a5", 0x3}], 0x1, &(0x7f00000042c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x50}, 0x4000840) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'geneve1\x00'}}, 0x1e) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40004) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x7, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x3}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000080) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000001500)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xd}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x2000, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "8908981864d689ac43445c1c26e95299e94ccad8794114ae3061e328af342f99", "e4d0ce57abcb41f7f5c8ab8f63dd38a1", {"bb3ce5a4bbb68671a2892fa0317a823c", "be9d98ca816f77013a778b6c40b49ea9"}}}}}}}, 0x0) 8.305576153s ago: executing program 0 (id=3451): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffc, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x1, 0x6000000, 0x0, {0x7}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x9}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x21}, @IPSET_ATTR_CIDR={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000180)=0x8, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000140)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) bind$xdp(r3, &(0x7f0000000240)={0x2c, 0x1, r5, 0x0, r6}, 0x60) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB, @ANYRES64=0x0], 0x20) 2.457996123s ago: executing program 2 (id=3603): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008810}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x21, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_STARTDAEMON(r9, 0x0, 0x48b, &(0x7f0000000040)={0x2, 'pimreg0\x00', 0x3}, 0x18) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0xc3}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}]}, 0x30}, 0x1, 0xffffa888}, 0x8810) 2.213244512s ago: executing program 4 (id=3604): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=@dellink={0x28, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x60000100}, 0x40004) 2.092091314s ago: executing program 4 (id=3605): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x52}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r0 = socket(0x2b, 0x80801, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000010000000000000000000000791200000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x0, "d176"}}, @common=@unspec=@state={{0x28}, {0xfffffffd}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2, [], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x48014}, 0x20004000) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) setsockopt$inet_int(r0, 0x0, 0x16, &(0x7f0000000040)=0x4, 0x4) 1.768888001s ago: executing program 4 (id=3606): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="34010000", @ANYRES16=r2, @ANYBLOB="0100000000003fc14d7a0100000004000480080002000100000008000100000000000400088008010c8054000b800800090000000000080009000000000008000a0000000000080009000000000008000a00000000000800090000000009"], 0x134}}, 0x0) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x18, r3, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x81}, 0x24040001) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240), 0xc30, r7}, 0x38) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r10 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="363ce16f", @ANYRES16=r9, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r10, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x30, r5, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x1, 0x7}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x14001}, 0x9590f6cc3ea35512) r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000280)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r11, @ANYRES64=r0], 0x50}}, 0x0) 831.543564ms ago: executing program 4 (id=3607): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = accept(0xffffffffffffffff, &(0x7f0000000140)=@ax25={{}, [@bcast, @remote, @null, @netrom, @remote, @remote, @bcast, @bcast]}, &(0x7f00000001c0)=0x80) r4 = socket$pptp(0x18, 0x1, 0x2) r5 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000380)={{0x3, @null}, [@null, @netrom, @bcast, @null, @bcast, @netrom, @null, @default]}, &(0x7f0000000400)=0x48, 0x80800) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$qrtr(0x2a, 0x2, 0x0) r9 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000440)='cpuacct.usage\x00', 0x2, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r12 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r13 = socket$isdn(0x22, 0x3, 0x21) r14 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000480)={0x28, 0x0, 0x2711, @local}, 0x10, 0x80000) r15 = accept(0xffffffffffffffff, &(0x7f00000004c0)=@generic, &(0x7f0000000540)=0x80) r16 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000580)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r17 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r19 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000600)=0xffffffffffffffff, 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@private0}}, &(0x7f0000000740)=0xe8) r21 = getgid() r22 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000780)) r23 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) r25 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000800), 0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0}, &(0x7f0000000880)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f00000009c0)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000a00)={0x0, 0x0, 0x0}, &(0x7f0000000a40)=0xc) sendmsg$netlink(r0, &(0x7f0000000b80)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)=[{&(0x7f0000000080)={0x8c, 0x36, 0x4, 0x70bd2a, 0x25dfdbfb, "", [@typed={0x12, 0xb7, 0x0, 0x0, @str='{#!).}.#]{(-}\x00'}, @generic="446ee74a1ce41e584e5c038ef238197719304fd9efd453368a4d768e9fb22252772fcff576c709ec4b5b1f325ddc173f7c08e80c918bab3a50f6ceb019a0407e3356a86aa022a87e6cffe6b90cfbe583c59cd9", @typed={0x8, 0xc8, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x12b, 0x0, 0x0, @fd=r2}, @typed={0x4, 0xdc}]}, 0x8c}, {&(0x7f0000000200)={0x118, 0x38, 0x100, 0x70bd2c, 0x25dfdbfc, "", [@generic="8f73fe3508bacd293fb9aa89a07e997da0a7091cb4b8c14ef536903df2431ca329ef8764bce6de3e49883b3bb2ba928ce84ffbe38cf2a2abfbc0f4630088fc337e206c23742a1e2f61e24e7a5ce65b35239d8d9bac75", @typed={0x8, 0xdd, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x13b, 0x0, 0x0, @fd=r3}, @generic="b2e9930c0c8553daf5d209e8308443d679a3751aa9c50729325b265c823659ef02fee9ad1f7f3734012b791aa56f9edef36ade519f40449791c9098524bd5d5791a967c28161b62b29da1abee71db56cfa2a0230860cd76f4b4d7bcada026aadb8376305459f60bc83db57bc0cddc09fc5603849e6142cbd79021cb8530a76d2d4db39fb76fb7e224b03571682a5cf911bcc6e06c50d9932cc1aa46c2707503704"]}, 0x118}], 0x2, &(0x7f0000000a80)=[@rights={{0x2c, 0x1, 0x1, [r4, 0xffffffffffffffff, r5, r6, r7, r8, r9]}}, @rights={{0x30, 0x1, 0x1, [r10, r11, r12, r13, r14, r15, r16, r17]}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [r18, r19]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r20, r21}}}, @rights={{0x24, 0x1, 0x1, [r22, 0xffffffffffffffff, r23, r24, r25]}}, @cred={{0x1c, 0x1, 0x2, {r26, r27, r28}}}], 0xf0, 0x11}, 0x400c0c4) 703.173595ms ago: executing program 4 (id=3608): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x40004) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000405000300070000000900010073797a30000000000900020073797a32"], 0x84}}, 0x0) 557.972759ms ago: executing program 2 (id=3609): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x20, &(0x7f0000000080)={&(0x7f00000001c0)=""/135, 0x87, 0x0, &(0x7f0000000a40)=""/4096, 0x1000}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES16=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 473.598245ms ago: executing program 4 (id=3610): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001c00010427bd70000000000002000000", @ANYRES32=0x0, @ANYBLOB="00f84aca8fcbf47885d7376d8988da79"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000004a80)=[{{&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/64, 0x40}, {&(0x7f0000000100)=""/159, 0x9f}], 0x2, &(0x7f0000000200)=""/139, 0x8b}, 0x6}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000340)=""/5, 0x5}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/22, 0x16}, {&(0x7f00000013c0)=""/69, 0x45}, {&(0x7f0000001440)=""/232, 0xe8}, {&(0x7f0000001540)=""/209, 0xd1}, {&(0x7f0000001640)=""/224, 0xe0}, {&(0x7f0000001740)=""/223, 0xdf}], 0x8, &(0x7f00000018c0)=""/22, 0x16}, 0xb5}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001900)=""/196, 0xc4}, {&(0x7f0000001a00)=""/175, 0xaf}, {&(0x7f0000001ac0)=""/179, 0xb3}, {&(0x7f0000001b80)=""/222, 0xde}, {&(0x7f0000001c80)=""/138, 0x8a}, {&(0x7f0000001d40)=""/145, 0x91}], 0x6, &(0x7f0000001e80)=""/229, 0xe5}, 0x8}, {{&(0x7f0000001f80)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000002500)=[{&(0x7f0000002000)=""/229, 0xe5}, {&(0x7f0000002100)=""/116, 0x74}, {&(0x7f0000002180)=""/105, 0x69}, {&(0x7f0000002200)=""/227, 0xe3}, {&(0x7f0000002300)=""/229, 0xe5}, {&(0x7f0000002400)=""/211, 0xd3}], 0x6, &(0x7f0000002580)=""/228, 0xe4}, 0x9}, {{&(0x7f0000002680)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000002800)=[{&(0x7f0000002700)=""/250, 0xfa}], 0x1, &(0x7f0000002840)=""/118, 0x76}, 0x8}, {{&(0x7f00000028c0)=@hci, 0x80, &(0x7f0000003a40)=[{&(0x7f0000002940)=""/4096, 0x1000}, {&(0x7f0000003940)=""/215, 0xd7}], 0x2, &(0x7f0000003a80)=""/4096, 0x1000}, 0x4}], 0x6, 0x20, 0x0) (async) recvmmsg(r0, &(0x7f0000004a80)=[{{&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/64, 0x40}, {&(0x7f0000000100)=""/159, 0x9f}], 0x2, &(0x7f0000000200)=""/139, 0x8b}, 0x6}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000340)=""/5, 0x5}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/22, 0x16}, {&(0x7f00000013c0)=""/69, 0x45}, {&(0x7f0000001440)=""/232, 0xe8}, {&(0x7f0000001540)=""/209, 0xd1}, {&(0x7f0000001640)=""/224, 0xe0}, {&(0x7f0000001740)=""/223, 0xdf}], 0x8, &(0x7f00000018c0)=""/22, 0x16}, 0xb5}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001900)=""/196, 0xc4}, {&(0x7f0000001a00)=""/175, 0xaf}, {&(0x7f0000001ac0)=""/179, 0xb3}, {&(0x7f0000001b80)=""/222, 0xde}, {&(0x7f0000001c80)=""/138, 0x8a}, {&(0x7f0000001d40)=""/145, 0x91}], 0x6, &(0x7f0000001e80)=""/229, 0xe5}, 0x8}, {{&(0x7f0000001f80)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000002500)=[{&(0x7f0000002000)=""/229, 0xe5}, {&(0x7f0000002100)=""/116, 0x74}, {&(0x7f0000002180)=""/105, 0x69}, {&(0x7f0000002200)=""/227, 0xe3}, {&(0x7f0000002300)=""/229, 0xe5}, {&(0x7f0000002400)=""/211, 0xd3}], 0x6, &(0x7f0000002580)=""/228, 0xe4}, 0x9}, {{&(0x7f0000002680)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000002800)=[{&(0x7f0000002700)=""/250, 0xfa}], 0x1, &(0x7f0000002840)=""/118, 0x76}, 0x8}, {{&(0x7f00000028c0)=@hci, 0x80, &(0x7f0000003a40)=[{&(0x7f0000002940)=""/4096, 0x1000}, {&(0x7f0000003940)=""/215, 0xd7}], 0x2, &(0x7f0000003a80)=""/4096, 0x1000}, 0x4}], 0x6, 0x20, 0x0) 442.408576ms ago: executing program 2 (id=3611): r0 = socket$inet6(0xa, 0x80002, 0x88) shutdown(r0, 0x1) (async) r1 = socket$pptp(0x18, 0x1, 0x2) accept4(r1, 0x0, 0x0, 0x800) (async, rerun: 32) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x800, @mcast1, 0x8}, 0x1c) (async, rerun: 32) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) (async) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, 0x0, &(0x7f00000002c0)=0x37) (async, rerun: 64) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) (async, rerun: 64) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040)=0x8004, 0x4) (async) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) recvmmsg(r0, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40000122, 0x0) (async) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r4, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) (async) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25ADDFWD(r5, 0x8940, &(0x7f0000000080)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) 305.952788ms ago: executing program 2 (id=3612): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="10208100", 0x4, 0x0, &(0x7f0000000340)={0x11, 0x8100, r1, 0x1, 0x0, 0x6, @remote}, 0x14) clock_gettime(0xfffffffffffffffd, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b9af8ff00000000b5090500000000007baaf0ff00000000bda804000000000007080000f8ffffffbfa000000000000007000000f0ffffffb70200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000006200000076000000bf91000000000000b6080000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r7, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) unshare(0x200) sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa0, r5, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffff0}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}], @key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}], @key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_SEQ={0x5, 0xa, "d5"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}], @NL80211_ATTR_MAC={0xa, 0x6, @random="cf549a90b578"}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x4008081) 195.269469ms ago: executing program 2 (id=3613): bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000100000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket(0x2d, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}}, 0x4000004) close(0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0x0, 0x51792e7248df3904}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}, @IFLA_GENEVE_COLLECT_METADATA={0x4, 0xe}]}}}]}, 0x40}}, 0x0) 0s ago: executing program 2 (id=3614): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) unshare(0x4060200) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_procs(r2, 0x0, 0x2, 0x0) unshare(0x60000000) write$cgroup_pid(r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083911000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}, 0x1, 0x0, 0x0, 0x40000d1}, 0x0) kernel console output (not intermixed with test programs): 585][T16479] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.140950][T16477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.150150][T16477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.205821][T16477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.502651][T16477] hsr_slave_0: entered promiscuous mode [ 374.524475][T16477] hsr_slave_1: entered promiscuous mode [ 374.536376][T16477] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 374.562360][T16477] Cannot create hsr debugfs directory [ 374.701530][T16665] net_ratelimit: 1 callbacks suppressed [ 374.701552][T16665] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 374.792663][T16479] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 374.815052][T16670] Cannot find del_set index 17 as target [ 374.848344][T16670] netlink: 'syz.2.3033': attribute type 3 has an invalid length. [ 374.858447][T16479] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 374.891407][T16670] pim6reg: entered allmulticast mode [ 374.905055][T16479] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 374.943350][T16479] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 375.002208][T16673] ipvlan0: entered promiscuous mode [ 375.296072][T16479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.424570][T16479] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.471456][T13282] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.478728][T13282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.552913][T13282] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.560239][T13282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.787484][T16479] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 375.804466][T16694] Bluetooth: MGMT ver 1.23 [ 375.814511][T16479] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 375.973818][T16477] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 376.015796][T16477] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 376.109839][ T51] Bluetooth: hci4: command tx timeout [ 376.115651][ T51] Bluetooth: hci1: command tx timeout [ 376.164641][T16477] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 376.185503][T16477] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 376.446139][T16722] ip6t_rpfilter: unknown options [ 376.581722][T16479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.648627][T16729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3049'. [ 376.688033][T16729] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3049'. [ 376.713842][T16729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3049'. [ 376.724724][T16729] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3049'. [ 376.803874][T16477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.895307][T16477] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.938167][T16479] veth0_vlan: entered promiscuous mode [ 376.969336][T13267] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.976668][T13267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.002170][T13267] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.009420][T13267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.037575][T16740] netlink: 'syz.2.3051': attribute type 2 has an invalid length. [ 377.074312][T16479] veth1_vlan: entered promiscuous mode [ 377.202176][T16479] veth0_macvtap: entered promiscuous mode [ 377.251481][T16479] veth1_macvtap: entered promiscuous mode [ 377.261188][T16747] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3053'. [ 377.324950][T16479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.377417][T16479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.396959][T16751] ip6t_srh: unknown srh invflags 5F00 [ 377.404861][T16479] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.424398][T16479] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.437158][T16479] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.456765][T16479] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.482097][T16751] pim6reg: left allmulticast mode [ 377.528969][T16752] vxcan1: entered allmulticast mode [ 377.571682][T16755] vxcan1: left allmulticast mode [ 377.847753][T13282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.876798][T13282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.949230][T16477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.966761][T13281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.999182][T13281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.143278][T16477] veth0_vlan: entered promiscuous mode [ 378.198664][T16477] veth1_vlan: entered promiscuous mode [ 378.291767][T16477] veth0_macvtap: entered promiscuous mode [ 378.389240][T16477] veth1_macvtap: entered promiscuous mode [ 378.443404][T16477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.458230][T16477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.478772][T16477] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.488312][T16477] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.497706][T16477] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.518494][T16477] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.542511][T16788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3066'. [ 378.565981][T16788] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.674448][T16788] bridge_slave_1 (unregistering): left allmulticast mode [ 378.683136][T16788] bridge_slave_1 (unregistering): left promiscuous mode [ 378.690696][T16788] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.896518][T13280] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.091587][T13280] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.271562][T13280] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.374575][T13282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.409432][T13282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.518932][T13280] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.768455][T13277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.824746][T13277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.019070][T16817] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3073'. [ 380.088861][T16817] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3073'. [ 380.173320][T16820] netlink: 'syz.4.3073': attribute type 2 has an invalid length. [ 380.207592][T16820] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3073'. [ 380.292123][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 380.303376][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 380.311902][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 380.320811][T13280] bridge_slave_1: left allmulticast mode [ 380.326511][T13280] bridge_slave_1: left promiscuous mode [ 380.336539][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 380.345428][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 380.351480][T13280] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.385793][T16832] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3076'. [ 380.388334][T13280] bridge_slave_0: left allmulticast mode [ 380.412015][T13280] bridge_slave_0: left promiscuous mode [ 380.417888][T13280] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.016801][T13280] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 381.028740][T13280] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.039541][T13280] bond0 (unregistering): Released all slaves [ 382.116031][T13280] hsr_slave_0: left promiscuous mode [ 382.140863][T13280] hsr_slave_1: left promiscuous mode [ 382.157591][T13280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 382.175102][T13280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 382.188950][T13280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.208390][T13280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 382.218356][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 382.228950][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 382.238045][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 382.247403][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 382.255444][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 382.284128][T13280] veth1_macvtap: left promiscuous mode [ 382.289858][T13280] veth0_macvtap: left promiscuous mode [ 382.295590][T13280] veth1_vlan: left promiscuous mode [ 382.301622][T13280] veth0_vlan: left promiscuous mode [ 382.429663][ T51] Bluetooth: hci1: command tx timeout [ 383.001360][T16870] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 383.073044][T13280] team0 (unregistering): Port device team_slave_1 removed [ 383.159824][T13280] team0 (unregistering): Port device team_slave_0 removed [ 384.027471][T16827] chnl_net:caif_netlink_parms(): no params data found [ 384.205752][T16889] __nla_validate_parse: 2 callbacks suppressed [ 384.205772][T16889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3091'. [ 384.270492][ T51] Bluetooth: hci4: command tx timeout [ 384.340401][T16895] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3091'. [ 384.510966][ T51] Bluetooth: hci1: command tx timeout [ 384.541616][T16827] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.580627][T16827] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.588057][T16827] bridge_slave_0: entered allmulticast mode [ 384.627012][T16827] bridge_slave_0: entered promiscuous mode [ 384.700556][T16827] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.709737][T16827] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.717065][T16827] bridge_slave_1: entered allmulticast mode [ 384.732949][T16827] bridge_slave_1: entered promiscuous mode [ 384.782472][T16913] delete_channel: no stack [ 384.799736][ T30] audit: type=1107 audit(1750076584.870:5): pid=16907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='1œæ%=ˆ;Xc#ÛÝ–½Ûûï€ê×÷/¹yèÂÆD/ÉËeRV#y¯ÝÄÌèuC˜²fÚ.8Í©ü[ê§—º"Õ«º-0•Tý#ArÊ1.3ô£ÀlÝ»mh§pk)ØÙhxpÔêŸl»‹ƒïú§¿o'ïpZ™Noei ,“)F3ÆFL„þ=æ°²|' [ 384.887400][T16827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.934487][T16913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3099'. [ 384.954696][T16827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.986099][T16915] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3099'. [ 385.152538][T16827] team0: Port device team_slave_0 added [ 385.164082][T16827] team0: Port device team_slave_1 added [ 385.294539][T13280] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.348099][T16926] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 385.503556][T13280] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.519998][T16935] tipc: Trying to set illegal importance in message [ 385.543292][T16935] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3106'. [ 385.544102][T16827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.599911][T16827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.649118][T16827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.662626][T16827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.669719][T16827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.719793][T16827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.757684][T13280] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.835492][T16943] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 385.883984][T13280] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.970884][T16949] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 386.019259][T16827] hsr_slave_0: entered promiscuous mode [ 386.030063][T16827] hsr_slave_1: entered promiscuous mode [ 386.037302][T16827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 386.057347][T16827] Cannot create hsr debugfs directory [ 386.350932][ T51] Bluetooth: hci4: command tx timeout [ 386.448295][T16860] chnl_net:caif_netlink_parms(): no params data found [ 386.590589][ T51] Bluetooth: hci1: command tx timeout [ 386.677730][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88804f0a6c00: rx timeout, send abort [ 386.751066][T13280] bridge_slave_1: left allmulticast mode [ 386.767045][T13280] bridge_slave_1: left promiscuous mode [ 386.775721][T13280] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.795096][T13280] bridge_slave_0: left allmulticast mode [ 386.803236][T13280] bridge_slave_0: left promiscuous mode [ 386.809078][T13280] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.177892][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88804f0a7000: rx timeout, send abort [ 387.186895][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88804f0a6c00: abort rx timeout. Force session deactivation [ 387.208405][ C0] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff88804f0a7000: connection exists (fe ff). last cmd: 20 [ 387.293730][T13280] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.305118][T13280] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.316047][T13280] bond0 (unregistering): Released all slaves [ 387.458304][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88804f0a7400: rx timeout, send abort [ 387.497618][T16860] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.516596][T16860] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.529104][T16860] bridge_slave_0: entered allmulticast mode [ 387.547628][T16860] bridge_slave_0: entered promiscuous mode [ 387.572260][T16860] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.588640][T16860] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.597091][T16860] bridge_slave_1: entered allmulticast mode [ 387.605869][T16860] bridge_slave_1: entered promiscuous mode [ 387.814174][T16860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.835637][T16860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.967346][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88804f0a7400: abort rx timeout. Force session deactivation [ 388.027303][T16999] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 388.052411][T16999] netlink: 'syz.0.3121': attribute type 7 has an invalid length. [ 388.181085][T16860] team0: Port device team_slave_0 added [ 388.237298][T16860] team0: Port device team_slave_1 added [ 388.398360][T17011] netlink: 'syz.0.3124': attribute type 10 has an invalid length. [ 388.430215][ T51] Bluetooth: hci4: command tx timeout [ 388.451771][T17014] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3124'. [ 388.484959][T17009] virt_wifi0 speed is unknown, defaulting to 1000 [ 388.497704][T17009] virt_wifi0 speed is unknown, defaulting to 1000 [ 388.505571][T17005] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3124'. [ 388.531629][T13280] hsr_slave_0: left promiscuous mode [ 388.539603][T13280] hsr_slave_1: left promiscuous mode [ 388.546807][T13280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.554854][T13280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.566180][T13280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.573830][T13280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.625785][T13280] veth1_macvtap: left promiscuous mode [ 388.632406][T13280] veth0_macvtap: left promiscuous mode [ 388.644683][T13280] veth1_vlan: left promiscuous mode [ 388.651053][T13280] veth0_vlan: left promiscuous mode [ 388.669559][ T51] Bluetooth: hci1: command tx timeout [ 388.881897][T17022] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 389.491273][T13280] team0 (unregistering): Port device team_slave_1 removed [ 389.545040][T13280] team0 (unregistering): Port device team_slave_0 removed [ 390.064713][T16860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.075402][T16860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.102545][T16860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.116847][T17009] virt_wifi0 speed is unknown, defaulting to 1000 [ 390.117025][T16860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.133086][T16860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.159222][T16860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.194712][T17009] infiniband sy{0: RDMA CMA: cma_listen_on_dev, error -98 [ 390.273698][T17009] virt_wifi0 speed is unknown, defaulting to 1000 [ 390.301971][T17009] virt_wifi0 speed is unknown, defaulting to 1000 [ 390.401460][T17009] virt_wifi0 speed is unknown, defaulting to 1000 [ 390.500482][T16860] hsr_slave_0: entered promiscuous mode [ 390.507455][T16860] hsr_slave_1: entered promiscuous mode [ 390.526083][ T51] Bluetooth: hci4: command tx timeout [ 390.532054][T16860] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 390.539763][T16860] Cannot create hsr debugfs directory [ 390.557872][T17009] virt_wifi0 speed is unknown, defaulting to 1000 [ 390.659754][T17009] virt_wifi0 speed is unknown, defaulting to 1000 [ 390.669042][T17009] virt_wifi0 speed is unknown, defaulting to 1000 [ 390.676770][T16827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 390.739321][T16827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 390.765970][T17009] virt_wifi0 speed is unknown, defaulting to 1000 [ 390.775497][T16827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 390.804081][T16827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 391.311698][T17071] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3140'. [ 391.530099][T17080] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 391.548952][T16827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.598726][T17080] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3143'. [ 391.651304][T17085] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 391.677830][T17088] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3144'. [ 391.699319][T16827] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.762644][T13278] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.769929][T13278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.805812][T13277] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.813132][T13277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.964604][T17096] netlink: 'syz.2.3147': attribute type 1 has an invalid length. [ 391.975935][T17098] netlink: 'syz.2.3147': attribute type 1 has an invalid length. [ 392.094121][T17103] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3147'. [ 392.104758][T17103] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3147'. [ 392.124450][T16860] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 392.433253][T16860] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 392.491164][T16860] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 392.533497][T16860] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 392.810760][T16860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.903181][T16860] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.934110][T17137] syzkaller0: entered promiscuous mode [ 392.941966][T17137] syzkaller0: entered allmulticast mode [ 392.993227][T13277] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.000508][T13277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.100753][T13286] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.108097][T13286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.197326][T17145] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3161'. [ 393.217403][T16827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.454970][T16827] veth0_vlan: entered promiscuous mode [ 393.493199][T16827] veth1_vlan: entered promiscuous mode [ 393.647069][T16860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.659740][T17159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3164'. [ 396.024797][T17161] vlan0: entered allmulticast mode [ 396.030251][T17161] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 396.047383][T16827] veth0_macvtap: entered promiscuous mode [ 396.099133][T16827] veth1_macvtap: entered promiscuous mode [ 396.212494][T16827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.248434][T16827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 396.308708][T16827] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.318313][T16827] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.331125][T16827] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.340493][T16827] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.363695][T16860] veth0_vlan: entered promiscuous mode [ 396.377218][T17199] xt_hashlimit: max too large, truncated to 1048576 [ 396.445389][T16860] veth1_vlan: entered promiscuous mode [ 396.567216][T16860] veth0_macvtap: entered promiscuous mode [ 396.593272][T13280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.616323][T13280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.628461][T16860] veth1_macvtap: entered promiscuous mode [ 396.669216][T13277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.687655][T13277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.706905][T16860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.751812][T16860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 396.766348][T16860] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.781745][T16860] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.791418][T16860] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.800739][T16860] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.065957][T13281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.077698][T13281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.274795][T13282] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.342636][T13285] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.352644][T13285] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.399256][T13282] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.582395][T13282] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.961934][T13282] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.427603][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 398.437514][T13282] bridge_slave_1: left allmulticast mode [ 398.444442][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 398.453029][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 398.461134][T13282] bridge_slave_1: left promiscuous mode [ 398.462371][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 398.466991][T13282] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.475175][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 398.516520][T13282] bridge_slave_0: left allmulticast mode [ 398.527000][T13282] bridge_slave_0: left promiscuous mode [ 398.537596][T13282] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.938426][T13282] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 398.950899][T13282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 398.961453][T13282] bond0 (unregistering): Released all slaves [ 399.373505][T17245] virt_wifi0 speed is unknown, defaulting to 1000 [ 399.835352][T17269] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3189'. [ 400.255470][T17284] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3193'. [ 400.262376][T17287] netlink: 'syz.4.3194': attribute type 32 has an invalid length. [ 400.279510][T17287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3194'. [ 400.344866][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 400.351929][T17287] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 400.360819][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 400.371417][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 400.381000][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 400.388937][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 400.505997][T13282] hsr_slave_0: left promiscuous mode [ 400.539976][T13282] hsr_slave_1: left promiscuous mode [ 400.563785][T17300] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3196'. [ 400.567758][T13282] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.599683][ T51] Bluetooth: hci1: command tx timeout [ 400.614711][T13282] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.628222][T13282] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.638071][T17303] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:0 [ 400.663103][T13282] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.735076][T13282] veth1_macvtap: left promiscuous mode [ 400.741156][T13282] veth0_macvtap: left promiscuous mode [ 400.746843][T13282] veth1_vlan: left promiscuous mode [ 400.761906][T13282] veth0_vlan: left promiscuous mode [ 401.354687][T13282] team0 (unregistering): Port device team_slave_1 removed [ 401.417015][T13282] team0 (unregistering): Port device team_slave_0 removed [ 401.941428][T17245] chnl_net:caif_netlink_parms(): no params data found [ 401.965546][T17305] netlink: 'syz.2.3198': attribute type 3 has an invalid length. [ 401.981116][T17305] netlink: 766 bytes leftover after parsing attributes in process `syz.2.3198'. [ 402.196746][T17310] IPVS: stopping master sync thread 17313 ... [ 402.204239][T17313] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 402.304936][T17312] veth0: entered promiscuous mode [ 402.442580][ T51] Bluetooth: hci4: command tx timeout [ 402.520704][T17311] veth0: left promiscuous mode [ 402.527178][T17245] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.545335][T17245] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.555557][T17245] bridge_slave_0: entered allmulticast mode [ 402.572089][T17245] bridge_slave_0: entered promiscuous mode [ 402.621123][T17290] virt_wifi0 speed is unknown, defaulting to 1000 [ 402.628927][T17245] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.648380][T17245] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.666174][T17245] bridge_slave_1: entered allmulticast mode [ 402.673673][ T51] Bluetooth: hci1: command tx timeout [ 402.692074][T17245] bridge_slave_1: entered promiscuous mode [ 402.765310][T17325] syzkaller0: entered promiscuous mode [ 402.778954][T17325] syzkaller0: entered allmulticast mode [ 402.981402][T17341] xt_limit: Overflow, try lower: 0/0 [ 403.136830][T17345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3208'. [ 404.511229][ T51] Bluetooth: hci4: command tx timeout [ 404.750359][ T51] Bluetooth: hci1: command tx timeout [ 404.972337][T17245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.046445][T17245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.250322][T17364] netlink: 'syz.2.3214': attribute type 6 has an invalid length. [ 405.282664][T17363] netlink: 212364 bytes leftover after parsing attributes in process `syz.2.3214'. [ 405.308873][T17363] openvswitch: netlink: Message has 5 unknown bytes. [ 405.317356][T17245] team0: Port device team_slave_0 added [ 405.346327][T17245] team0: Port device team_slave_1 added [ 405.506492][T13282] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.645723][T13282] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.686549][T17245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.697966][T17245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.725768][T17245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.738820][T17245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.746196][T17245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.775918][T17245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.780464][T17382] netlink: 'syz.4.3218': attribute type 2 has an invalid length. [ 405.878204][T13282] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.023460][T13282] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.265926][T17397] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 406.277032][T17397] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 406.304588][T17403] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3224'. [ 406.404736][T17245] hsr_slave_0: entered promiscuous mode [ 406.418627][T17245] hsr_slave_1: entered promiscuous mode [ 406.448157][T17245] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 406.463258][T17245] Cannot create hsr debugfs directory [ 406.592470][ T51] Bluetooth: hci4: command tx timeout [ 406.718273][T17290] chnl_net:caif_netlink_parms(): no params data found [ 406.811358][T17418] bond1: entered allmulticast mode [ 406.819023][T17418] 8021q: adding VLAN 0 to HW filter on device bond1 [ 406.830028][ T51] Bluetooth: hci1: command tx timeout [ 406.847938][T17419] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 407.084369][T17435] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3233'. [ 407.088494][T13282] bridge_slave_1: left allmulticast mode [ 407.093618][T17435] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3233'. [ 407.121101][T17436] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 407.158730][T13282] bridge_slave_1: left promiscuous mode [ 407.176718][T13282] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.214724][T13282] bridge_slave_0: left allmulticast mode [ 407.235894][T13282] bridge_slave_0: left promiscuous mode [ 407.244032][T13282] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.400494][T17453] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3236'. [ 407.557648][T17456] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3237'. [ 407.820740][T13282] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 407.833698][T13282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 407.845399][T13282] bond0 (unregistering): Released all slaves [ 408.295909][T17290] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.319958][T17290] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.328867][T17290] bridge_slave_0: entered allmulticast mode [ 408.347839][T17290] bridge_slave_0: entered promiscuous mode [ 408.402369][T17290] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.411965][T17290] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.419297][T17290] bridge_slave_1: entered allmulticast mode [ 408.435352][T17290] bridge_slave_1: entered promiscuous mode [ 408.542970][T17476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3244'. [ 408.670890][ T51] Bluetooth: hci4: command tx timeout [ 408.732707][T17290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.804657][T17290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.056312][T17290] team0: Port device team_slave_0 added [ 409.124260][T13282] hsr_slave_0: left promiscuous mode [ 409.140127][T13282] hsr_slave_1: left promiscuous mode [ 409.150670][T13282] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 409.167823][T13282] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 409.187175][T13282] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 409.195011][T13282] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 409.268403][T13282] veth1_macvtap: left promiscuous mode [ 409.282071][T13282] veth0_macvtap: left promiscuous mode [ 409.300891][T13282] veth1_vlan: left promiscuous mode [ 409.313553][T13282] veth0_vlan: left promiscuous mode [ 409.323318][T17505] netlink: 'syz.2.3249': attribute type 10 has an invalid length. [ 409.341612][T17505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3249'. [ 409.939259][T13282] team0 (unregistering): Port device team_slave_1 removed [ 409.995517][T13282] team0 (unregistering): Port device team_slave_0 removed [ 410.511907][T17290] team0: Port device team_slave_1 added [ 410.550027][T17505] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3249'. [ 410.642672][T17290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.668697][T17290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.718178][T17290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.770666][T17290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.777729][T17290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.811923][T17290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.041915][T17522] netlink: 'syz.4.3254': attribute type 1 has an invalid length. [ 411.143168][T17527] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3255'. [ 411.150489][T17528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3254'. [ 411.226270][T17522] 8021q: adding VLAN 0 to HW filter on device bond13 [ 411.242420][T17290] hsr_slave_0: entered promiscuous mode [ 411.249133][T17290] hsr_slave_1: entered promiscuous mode [ 411.256697][T17290] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 411.264610][T17290] Cannot create hsr debugfs directory [ 411.437406][T17245] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 411.506131][T17245] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 411.525403][T17539] netlink: 265 bytes leftover after parsing attributes in process `syz.0.3259'. [ 411.575761][T17245] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 411.632706][T17245] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 411.641330][T17542] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3260'. [ 411.791202][T17548] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3261'. [ 411.966521][T17559] IPVS: sync thread started: state = MASTER, mcast_ifn = tunl0, syncid = 2, id = 0 [ 412.028717][T17562] batadv2: entered allmulticast mode [ 412.143602][T17245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.165217][T17245] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.196486][T13280] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.203787][T13280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.265252][T13282] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.272524][T13282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.441128][T17570] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3267'. [ 412.473354][T17570] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3267'. [ 412.568026][T17290] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 412.592041][T17576] Cannot find add_set index 0 as target [ 412.617027][T17290] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 412.648271][T17290] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 412.675771][T17290] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 412.833617][T17290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.864910][T17290] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.882161][T13282] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.889473][T13282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.936044][T13286] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.943360][T13286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.112535][T17245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.204970][T17245] veth0_vlan: entered promiscuous mode [ 413.251300][T17245] veth1_vlan: entered promiscuous mode [ 413.303293][T17245] veth0_macvtap: entered promiscuous mode [ 413.323536][T17245] veth1_macvtap: entered promiscuous mode [ 413.366420][T17245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.383914][T17290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.399065][T17245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.423475][T17245] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.433411][T17245] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.444168][T17245] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.455132][T17245] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.643225][T17290] veth0_vlan: entered promiscuous mode [ 413.694060][T17290] veth1_vlan: entered promiscuous mode [ 413.740870][T13267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.748814][T13267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.862684][T13285] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.873220][T13285] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.894558][T17290] veth0_macvtap: entered promiscuous mode [ 413.925249][T17290] veth1_macvtap: entered promiscuous mode [ 413.978523][T17290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.025993][T17290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.046480][T17290] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.056149][T17290] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.067916][T17290] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.079809][T17290] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.736743][T13280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.760318][T13280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.938893][T17621] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3277'. [ 415.000653][T13285] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.110797][T13267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.134506][T13267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.197787][T13285] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.218096][T17615] virt_wifi0 speed is unknown, defaulting to 1000 [ 415.428258][T13285] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.694280][T17624] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 415.771669][T13285] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.916382][T17630] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3281'. [ 416.208591][T13285] bridge_slave_1: left allmulticast mode [ 416.236841][T13285] bridge_slave_1: left promiscuous mode [ 416.268307][T13285] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.355112][T13285] bridge_slave_0: left allmulticast mode [ 416.372955][T13285] bridge_slave_0: left promiscuous mode [ 416.378830][T13285] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.490796][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 416.502363][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 416.512381][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 416.524021][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 416.534009][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 416.988396][T13285] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 417.002004][T13285] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 417.015775][T13285] bond0 (unregistering): Released all slaves [ 417.360522][T17647] virt_wifi0 speed is unknown, defaulting to 1000 [ 417.610971][T17656] netlink: 'syz.2.3285': attribute type 28 has an invalid length. [ 417.619238][T17655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3286'. [ 417.673754][T17656] netlink: 'syz.2.3285': attribute type 3 has an invalid length. [ 417.683355][T13285] hsr_slave_0: left promiscuous mode [ 417.697101][T17656] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3285'. [ 417.720391][T13285] hsr_slave_1: left promiscuous mode [ 417.726440][T13285] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.744775][T13285] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.761259][T13285] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.768759][T13285] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.817886][T13285] veth1_macvtap: left promiscuous mode [ 417.825270][T13285] veth0_macvtap: left promiscuous mode [ 417.837966][T13285] veth1_vlan: left promiscuous mode [ 417.846260][T13285] veth0_vlan: left promiscuous mode [ 418.065001][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 418.074975][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 418.084090][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 418.092699][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 418.113105][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 418.590297][ T51] Bluetooth: hci1: command tx timeout [ 418.598733][T13285] team0 (unregistering): Port device team_slave_1 removed [ 418.652615][T13285] team0 (unregistering): Port device team_slave_0 removed [ 419.321210][T17666] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 419.631809][T17676] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3292'. [ 419.679633][T17674] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3292'. [ 419.813023][T17647] chnl_net:caif_netlink_parms(): no params data found [ 419.935339][T17686] openvswitch: netlink: IPv4 tun info is not correct [ 420.033238][T17660] virt_wifi0 speed is unknown, defaulting to 1000 [ 420.191125][ T51] Bluetooth: hci4: command tx timeout [ 420.253439][T17647] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.261022][T17647] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.268527][T17647] bridge_slave_0: entered allmulticast mode [ 420.278405][T17647] bridge_slave_0: entered promiscuous mode [ 420.296799][T17700] kthread_run failed with err -4 [ 420.311299][T17647] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.346298][T17647] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.365342][T17647] bridge_slave_1: entered allmulticast mode [ 420.378229][T17647] bridge_slave_1: entered promiscuous mode [ 420.567741][T13285] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.622623][T17647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.658257][T17647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.683569][ T51] Bluetooth: hci1: command tx timeout [ 420.721094][T17721] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 420.738235][T17719] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3305'. [ 420.771404][T13285] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.870962][T17647] team0: Port device team_slave_0 added [ 420.911459][T13285] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.953214][T17647] team0: Port device team_slave_1 added [ 421.046657][T17729] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 421.048881][T13285] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.071192][T17730] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3307'. [ 421.127801][T17647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.150701][T17647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.210700][T17647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.353572][T17730] 8021q: adding VLAN 0 to HW filter on device bond2 [ 421.425155][T17647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.451635][T17647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.512769][T17647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.890031][T17750] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3314'. [ 421.974188][T17647] hsr_slave_0: entered promiscuous mode [ 422.013536][T17647] hsr_slave_1: entered promiscuous mode [ 422.020853][T17647] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 422.041381][T17647] Cannot create hsr debugfs directory [ 422.251805][T17660] chnl_net:caif_netlink_parms(): no params data found [ 422.275166][ T51] Bluetooth: hci4: command tx timeout [ 422.356313][T13285] bridge_slave_1: left allmulticast mode [ 422.363236][T13285] bridge_slave_1: left promiscuous mode [ 422.369235][T13285] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.404149][T13285] bridge_slave_0: left allmulticast mode [ 422.413399][T13285] bridge_slave_0: left promiscuous mode [ 422.432102][T13285] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.657885][T17773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3319'. [ 422.750309][ T51] Bluetooth: hci1: command tx timeout [ 423.004977][T17782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3321'. [ 423.137321][T13285] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 423.150015][T13285] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 423.162011][T13285] bond0 (unregistering): Released all slaves [ 423.266076][T17773] vcan1: entered promiscuous mode [ 423.727839][T17660] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.736617][T17660] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.744832][T17660] bridge_slave_0: entered allmulticast mode [ 423.753566][T17660] bridge_slave_0: entered promiscuous mode [ 423.784444][T17660] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.799061][T17660] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.807629][T17660] bridge_slave_1: entered allmulticast mode [ 423.816441][T17660] bridge_slave_1: entered promiscuous mode [ 423.951694][T17799] syzkaller0: entered promiscuous mode [ 423.957359][T17799] syzkaller0: entered allmulticast mode [ 424.350305][ T51] Bluetooth: hci4: command tx timeout [ 424.830819][ T51] Bluetooth: hci1: command tx timeout [ 425.956947][T17660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.978811][T13285] hsr_slave_0: left promiscuous mode [ 425.986266][T13285] hsr_slave_1: left promiscuous mode [ 425.994920][T13285] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 426.008123][T13285] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 426.030633][T13285] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 426.038975][T13285] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.083073][T13285] veth1_macvtap: left promiscuous mode [ 426.088773][T13285] veth0_macvtap: left promiscuous mode [ 426.094614][T13285] veth1_vlan: left promiscuous mode [ 426.100915][T13285] veth0_vlan: left promiscuous mode [ 426.429640][ T51] Bluetooth: hci4: command tx timeout [ 426.684606][T13285] team0 (unregistering): Port device team_slave_1 removed [ 426.733747][T13285] team0 (unregistering): Port device team_slave_0 removed [ 427.277289][T17660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.487240][T17818] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3329'. [ 427.497913][T17660] team0: Port device team_slave_0 added [ 427.516555][T17818] netlink: 'syz.0.3329': attribute type 11 has an invalid length. [ 427.520217][T17660] team0: Port device team_slave_1 added [ 427.529957][T17818] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3329'. [ 427.783792][T17660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.797720][T17660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.847648][T17660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.922116][T17660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.929445][T17660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.945841][T17836] vcan0: tx drop: invalid sa for name 0x0000000000000005 [ 427.957861][T17660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.083545][T17840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3336'. [ 428.117804][T17660] hsr_slave_0: entered promiscuous mode [ 428.124873][T17660] hsr_slave_1: entered promiscuous mode [ 428.134932][T17660] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 428.142683][T17660] Cannot create hsr debugfs directory [ 428.355950][T17647] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 428.378793][T17647] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 428.401487][T17647] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 428.424449][T17647] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 428.584239][T17647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.634196][T17647] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.692526][T13279] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.699775][T13279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.727421][T13279] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.734715][T13279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.062072][T17862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3340'. [ 429.122594][T17862] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.131581][T17862] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.141658][T17862] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.152295][T17862] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.178225][T17862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3340'. [ 429.190257][T17660] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 429.221405][T17660] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 429.251587][T17868] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3342'. [ 429.269298][T17660] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 429.345245][T17660] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 429.377157][T17872] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 429.408507][T17872] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 429.446511][T17873] tipc: Trying to set illegal importance in message [ 429.485637][T17884] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3345'. [ 429.635414][T17647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.686880][T17892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3347'. [ 429.828676][T17647] veth0_vlan: entered promiscuous mode [ 429.853104][T17897] netlink: 'syz.2.3349': attribute type 1 has an invalid length. [ 429.894455][T17660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.926346][T17647] veth1_vlan: entered promiscuous mode [ 430.009193][T17660] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.044597][T13278] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.052252][T13278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.116543][T17647] veth0_macvtap: entered promiscuous mode [ 430.168405][T13278] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.175959][T13278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.250753][T17647] veth1_macvtap: entered promiscuous mode [ 430.483942][T17647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.546169][T17647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.606540][T17647] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.634550][T17921] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3354'. [ 430.652874][T17647] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.681670][T17647] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.699727][T17647] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.094009][T13280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.102740][T13280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.163122][T17939] syzkaller0: entered allmulticast mode [ 431.201613][T17935] syzkaller0 (unregistering): left allmulticast mode [ 431.268726][T17660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.288517][T13285] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.341965][T13285] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.358160][T17660] veth0_vlan: entered promiscuous mode [ 431.389829][ T51] Bluetooth: hci0: command tx timeout [ 431.435604][T17660] veth1_vlan: entered promiscuous mode [ 431.503143][T17947] Unknown options in mask 1f4 [ 431.582610][T17660] veth0_macvtap: entered promiscuous mode [ 431.619673][T17660] veth1_macvtap: entered promiscuous mode [ 431.697754][T17953] syzkaller0: entered promiscuous mode [ 431.704057][T17953] syzkaller0: entered allmulticast mode [ 431.716149][T17953] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 431.744477][T17660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.765339][T17660] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.992820][T17660] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.023660][T17660] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.064313][T17660] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.099399][T17660] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.244427][T13277] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.370445][T13277] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.437671][T13281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.456706][T13281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.497045][T13280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.517787][T13280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.544229][T13277] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.693911][T13277] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.892567][T13277] bridge_slave_1: left allmulticast mode [ 432.898378][T13277] bridge_slave_1: left promiscuous mode [ 432.942183][T13277] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.975696][T13277] bridge_slave_0: left allmulticast mode [ 432.986969][T13277] bridge_slave_0: left promiscuous mode [ 433.008430][T13277] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.068467][T17972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3368'. [ 433.099600][T17972] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3368'. [ 433.164538][T17975] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3370'. [ 433.180822][T17976] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3370'. [ 433.510616][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 433.521656][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 433.535766][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 433.544954][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 433.574596][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 433.855406][T13277] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 433.867942][T13277] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 433.878871][T13277] bond0 (unregistering): Released all slaves [ 434.259283][T17977] virt_wifi0 speed is unknown, defaulting to 1000 [ 434.536568][T13277] hsr_slave_0: left promiscuous mode [ 434.543569][T13277] hsr_slave_1: left promiscuous mode [ 434.549571][T13277] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 434.557026][T13277] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 434.570526][T13277] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 434.578001][T13277] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 434.608298][T13277] veth1_macvtap: left promiscuous mode [ 434.614169][T13277] veth0_macvtap: left promiscuous mode [ 434.620419][T13277] veth1_vlan: left promiscuous mode [ 434.625826][T13277] veth0_vlan: left promiscuous mode [ 434.700632][T17986] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3372'. [ 435.140137][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 435.151582][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 435.162611][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 435.191524][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 435.210864][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 435.564050][T13277] team0 (unregistering): Port device team_slave_1 removed [ 435.620609][T13277] team0 (unregistering): Port device team_slave_0 removed [ 435.640112][ T51] Bluetooth: hci1: command tx timeout [ 436.317159][T17977] chnl_net:caif_netlink_parms(): no params data found [ 436.440308][T18002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3374'. [ 436.724820][T18016] netlink: 'syz.4.3378': attribute type 1 has an invalid length. [ 436.772964][T18016] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3378'. [ 437.041350][T18010] ip6erspan0: entered promiscuous mode [ 437.076046][T17977] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.100165][T17977] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.119676][T17977] bridge_slave_0: entered allmulticast mode [ 437.127834][T17977] bridge_slave_0: entered promiscuous mode [ 437.155064][T17977] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.179554][T17977] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.187012][T17977] bridge_slave_1: entered allmulticast mode [ 437.199953][T17977] bridge_slave_1: entered promiscuous mode [ 437.208520][T17996] virt_wifi0 speed is unknown, defaulting to 1000 [ 437.266973][T18035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3381'. [ 437.310557][ T51] Bluetooth: hci4: command tx timeout [ 437.377952][T17977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.448337][T18048] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3384'. [ 437.465581][T17977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.574701][T18057] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 437.646862][T13277] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.687206][T18061] netlink: 'syz.4.3388': attribute type 29 has an invalid length. [ 437.714204][T18050] netdevsim netdevsim2: Direct firmware load for ..€ failed with error -2 [ 437.719442][ T51] Bluetooth: hci1: command tx timeout [ 437.749500][T18050] netdevsim netdevsim2: Falling back to sysfs fallback for: ..€ [ 437.792121][T17977] team0: Port device team_slave_0 added [ 437.840439][T13277] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.906755][T17977] team0: Port device team_slave_1 added [ 438.014941][T13277] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.039390][T18071] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 438.123112][T17977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.132432][T17977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.159243][T17977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.220961][T13277] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.273708][T18076] ip6gre2: entered allmulticast mode [ 438.282894][T17977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.309404][T17977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.361065][T17977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.761371][T17977] hsr_slave_0: entered promiscuous mode [ 438.790081][T17977] hsr_slave_1: entered promiscuous mode [ 438.828455][T17977] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 438.856124][T17977] Cannot create hsr debugfs directory [ 438.895187][T17996] chnl_net:caif_netlink_parms(): no params data found [ 439.398164][ T51] Bluetooth: hci4: command tx timeout [ 439.449992][T13277] bridge_slave_1: left allmulticast mode [ 439.455879][T13277] bridge_slave_1: left promiscuous mode [ 439.469761][T13277] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.541011][T13277] bridge_slave_0: left allmulticast mode [ 439.546728][T13277] bridge_slave_0: left promiscuous mode [ 439.560373][T13277] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.657979][T18132] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3407'. [ 439.679955][T18132] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3407'. [ 439.803998][ T51] Bluetooth: hci1: command tx timeout [ 440.144106][T13277] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 440.156417][T13277] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 440.168420][T13277] bond0 (unregistering): Released all slaves [ 440.227031][T17996] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.246223][T17996] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.288507][T17996] bridge_slave_0: entered allmulticast mode [ 440.314116][T17996] bridge_slave_0: entered promiscuous mode [ 440.342942][T17996] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.354126][T17996] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.367475][T17996] bridge_slave_1: entered allmulticast mode [ 440.392830][T17996] bridge_slave_1: entered promiscuous mode [ 440.480091][T18143] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3410'. [ 440.723645][T18145] siw: device registration error -23 [ 440.773860][T17996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.805000][T17996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.993613][T18167] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3416'. [ 441.176582][T17996] team0: Port device team_slave_0 added [ 441.329827][T17996] team0: Port device team_slave_1 added [ 441.469965][ T51] Bluetooth: hci4: command tx timeout [ 441.628559][T18186] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3422'. [ 441.666997][T18182] netlink: 'syz.4.3419': attribute type 2 has an invalid length. [ 441.696410][T13277] hsr_slave_0: left promiscuous mode [ 441.711626][T13277] hsr_slave_1: left promiscuous mode [ 441.727833][T13277] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 441.738190][T13277] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 441.749948][T13277] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 441.757562][T13277] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 441.798581][T13277] veth1_macvtap: left promiscuous mode [ 441.804418][T13277] veth0_macvtap: left promiscuous mode [ 441.811114][T13277] veth1_vlan: left promiscuous mode [ 441.818335][T13277] veth0_vlan: left promiscuous mode [ 441.870197][ T51] Bluetooth: hci1: command tx timeout [ 442.282102][T18194] netlink: 'syz.4.3423': attribute type 10 has an invalid length. [ 442.299431][T18194] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3423'. [ 442.535739][T13277] team0 (unregistering): Port device team_slave_1 removed [ 442.588060][T13277] team0 (unregistering): Port device team_slave_0 removed [ 443.136526][T17996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.144418][T17996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.179831][T17996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.202513][T17996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.215365][T17996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.255086][T17996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.274743][T18194] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 443.292650][T18199] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 443.536400][T17996] hsr_slave_0: entered promiscuous mode [ 443.547577][T17996] hsr_slave_1: entered promiscuous mode [ 443.555630][ T51] Bluetooth: hci4: command tx timeout [ 443.571211][T17996] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 443.578845][T17996] Cannot create hsr debugfs directory [ 444.028300][T18222] netlink: 18 bytes leftover after parsing attributes in process `syz.2.3433'. [ 444.045187][T17977] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 444.119830][T17977] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 444.163326][T17977] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 444.205482][T17977] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 444.272062][T18242] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 444.575891][T17977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.655093][T17977] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.695548][T13278] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.702901][T13278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.714491][T18256] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3440'. [ 444.762101][T18256] netlink: 'syz.2.3440': attribute type 32 has an invalid length. [ 444.771204][T18256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3440'. [ 444.816589][T18256] (unnamed net_device) (uninitialized): option coupled_control: invalid value (128) [ 444.839927][T18260] bridge_slave_0: left allmulticast mode [ 444.845924][T18260] bridge_slave_0: left promiscuous mode [ 444.862611][T18260] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.898196][T18260] team0: Port device team_slave_0 removed [ 444.918217][T18260] team0: Port device team_slave_1 removed [ 444.938284][T18260] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.952691][T18260] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.963866][T18260] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.973292][T18260] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.983435][T18260] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.993542][T18260] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.017124][T18260] team0: Port device geneve0 removed [ 445.026360][T18260] bond6: (slave gretap0): Releasing active interface [ 445.106439][T13277] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.113724][T13277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.189209][T17996] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 445.231957][T17996] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 445.308207][T17996] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 445.351883][T17996] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 445.567925][T18287] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3446'. [ 445.779106][T17996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.350147][ T51] Bluetooth: hci0: command tx timeout [ 446.984533][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 447.006619][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 447.015550][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 447.027159][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 447.049886][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 448.514056][T17996] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.556241][T17977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.638941][T13277] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.677230][T13278] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.684541][T13278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.696010][T18316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3454'. [ 448.736933][T13286] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.744468][T13286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.776454][T18319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3455'. [ 448.786353][T18319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3455'. [ 448.833914][T13277] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.845856][T18319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3455'. [ 448.950661][T13277] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.149645][ T5840] Bluetooth: hci2: command tx timeout [ 449.180467][T13277] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.208940][T18310] virt_wifi0 speed is unknown, defaulting to 1000 [ 449.295997][T17977] veth0_vlan: entered promiscuous mode [ 449.339127][T18324] netlink: 'syz.2.3457': attribute type 1 has an invalid length. [ 449.396654][T18327] netlink: 'syz.2.3457': attribute type 83 has an invalid length. [ 449.438260][T18324] 8021q: adding VLAN 0 to HW filter on device bond3 [ 449.485508][T17977] veth1_vlan: entered promiscuous mode [ 451.234812][ T5840] Bluetooth: hci2: command tx timeout [ 451.711568][T18341] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3459'. [ 451.758111][T17977] veth0_macvtap: entered promiscuous mode [ 451.787743][T18343] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3460'. [ 452.742950][T13277] bond1 (unregistering): Released all slaves [ 452.761941][T13277] bond2 (unregistering): Released all slaves [ 452.779273][T13277] bond3 (unregistering): Released all slaves [ 452.925495][T13277] bond4 (unregistering): Released all slaves [ 453.067442][T13277] bond0 (unregistering): Released all slaves [ 453.086200][T13277] bond5 (unregistering): Released all slaves [ 453.216962][T13277] bond6 (unregistering): Released all slaves [ 453.244089][T17977] veth1_macvtap: entered promiscuous mode [ 453.282368][T18353] tc_dump_action: action bad kind [ 453.316116][ T5840] Bluetooth: hci2: command tx timeout [ 453.383450][T17996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 453.437139][T18310] chnl_net:caif_netlink_parms(): no params data found [ 453.453693][T18357] netlink: 'syz.2.3464': attribute type 1 has an invalid length. [ 453.513614][T17977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 453.530400][T13277] : left promiscuous mode [ 453.643624][T18357] 8021q: adding VLAN 0 to HW filter on device bond4 [ 453.693695][T18361] 8021q: adding VLAN 0 to HW filter on device bond4 [ 453.701880][T18361] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 453.713658][T18361] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 453.746078][T17977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 453.773144][T18363] veth5: entered promiscuous mode [ 453.783263][T18363] bond4: (slave veth5): Enslaving as an active interface with a down link [ 453.810264][T13277] tipc: Disabling bearer [ 453.819693][T13277] tipc: Left network mode [ 453.866544][T18367] vlan2: entered allmulticast mode [ 453.887797][T18367] bond4: entered allmulticast mode [ 453.902045][T13277] IPVS: stopping backup sync thread 9187 ... [ 453.991745][T17977] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.002669][T17977] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.011664][T17977] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.020788][T17977] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.988027][T18382] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3468'. [ 455.390930][ T5840] Bluetooth: hci2: command tx timeout [ 456.036972][T18378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3467'. [ 456.048351][T18381] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3468'. [ 456.164126][T18310] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.172963][T18310] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.180376][T18310] bridge_slave_0: entered allmulticast mode [ 456.188400][T18310] bridge_slave_0: entered promiscuous mode [ 456.230226][T18310] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.237826][T18310] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.246233][T18310] bridge_slave_1: entered allmulticast mode [ 456.255500][T18310] bridge_slave_1: entered promiscuous mode [ 456.400104][T18392] ip6t_srh: unknown srh invflags 5F00 [ 456.408330][T18393] ip6t_srh: unknown srh invflags 5F00 [ 456.618291][T17996] veth0_vlan: entered promiscuous mode [ 456.664715][T13277] hsr_slave_0: left promiscuous mode [ 456.681127][T13277] hsr_slave_1: left promiscuous mode [ 457.549281][T18310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.623525][T18310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 457.707825][T17996] veth1_vlan: entered promiscuous mode [ 457.726357][T18408] xt_cgroup: invalid path, errno=-2 [ 457.788331][T18310] team0: Port device team_slave_0 added [ 457.858907][T18310] team0: Port device team_slave_1 added [ 458.018770][T18310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.050044][T18310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.114816][T18310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.132562][T18310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.140559][T18310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.167029][T18310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.201833][T17996] veth0_macvtap: entered promiscuous mode [ 458.280940][T13286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.298388][T13286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.316588][T18310] hsr_slave_0: entered promiscuous mode [ 458.324288][T18310] hsr_slave_1: entered promiscuous mode [ 458.331339][T18310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 458.339086][T18310] Cannot create hsr debugfs directory [ 458.360108][T17996] veth1_macvtap: entered promiscuous mode [ 458.395204][T13277] IPVS: stop unused estimator thread 0... [ 458.475674][T13279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.485961][T13279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.526549][T17996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 458.600092][T17996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 458.662486][T17996] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.703576][T17996] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.725207][T17996] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.737500][T17996] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.975764][T18438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3483'. [ 459.102936][T13279] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.253648][T13279] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.403170][T13279] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.446685][T13282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.466311][T13282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.518011][T13281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.526593][T13281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.563364][T13279] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.796822][T13279] bridge_slave_1: left allmulticast mode [ 459.803190][T13279] bridge_slave_1: left promiscuous mode [ 459.809015][T13279] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.837173][T13279] bridge_slave_0: left allmulticast mode [ 459.850066][T13279] bridge_slave_0: left promiscuous mode [ 459.855927][T13279] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.479090][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 460.488819][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 460.498266][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 460.509250][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 460.547243][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 460.662292][T13279] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 460.677784][T13279] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 460.689009][T13279] bond0 (unregistering): Released all slaves [ 460.728288][T18310] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 460.740478][T18310] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 460.780390][T18310] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 460.804078][T18310] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 461.139170][T18310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.188090][T18310] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.212459][T13278] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.219743][T13278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.229142][T18448] virt_wifi0 speed is unknown, defaulting to 1000 [ 461.241208][T13278] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.248510][T13278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.833795][T13279] hsr_slave_0: left promiscuous mode [ 461.858586][T13279] hsr_slave_1: left promiscuous mode [ 461.872557][T13279] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 461.899146][T13279] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 461.915940][T13279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 461.926760][T13279] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 461.972265][T13279] veth1_macvtap: left promiscuous mode [ 461.978106][T13279] veth0_macvtap: left promiscuous mode [ 461.989990][T13279] veth1_vlan: left promiscuous mode [ 461.995572][T13279] veth0_vlan: left promiscuous mode [ 462.031631][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 462.044310][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 462.053053][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 462.062151][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 462.073267][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 462.590389][ T5840] Bluetooth: hci1: command tx timeout [ 462.605250][T13279] team0 (unregistering): Port device team_slave_1 removed [ 462.655996][T13279] team0 (unregistering): Port device team_slave_0 removed [ 463.527015][T18485] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3493'. [ 463.552363][T18486] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 463.653278][T18310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.677909][T18488] syz.2.3494 uses old SIOCAX25GETINFO [ 463.761936][T18476] virt_wifi0 speed is unknown, defaulting to 1000 [ 463.802145][T18493] netlink: 172 bytes leftover after parsing attributes in process `syz.4.3495'. [ 463.846758][T18493] openvswitch: netlink: Flow actions attr not present in new flow. [ 463.887891][T18448] chnl_net:caif_netlink_parms(): no params data found [ 464.111012][ T5840] Bluetooth: hci4: command tx timeout [ 464.258688][T18511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3497'. [ 464.306433][T18310] veth0_vlan: entered promiscuous mode [ 464.392549][T18515] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 464.408488][T18515] team0: Device ipvlan2 is already an upper device of the team interface [ 464.495491][T18310] veth1_vlan: entered promiscuous mode [ 464.512084][T18448] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.519291][T18448] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.529945][T18448] bridge_slave_0: entered allmulticast mode [ 464.538258][T18448] bridge_slave_0: entered promiscuous mode [ 464.561404][T18448] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.568617][T18448] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.591607][T18448] bridge_slave_1: entered allmulticast mode [ 464.599811][T18448] bridge_slave_1: entered promiscuous mode [ 464.677717][ T5840] Bluetooth: hci1: command tx timeout [ 464.853277][T18448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.883242][T18448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.101752][T13279] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.128850][T18531] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3501'. [ 465.202935][T18517] virt_wifi0 speed is unknown, defaulting to 1000 [ 465.295119][T13279] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.301038][T18537] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3502'. [ 465.358997][T18448] team0: Port device team_slave_0 added [ 465.416919][T18310] veth0_macvtap: entered promiscuous mode [ 465.454503][T13279] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.474534][T18448] team0: Port device team_slave_1 added [ 465.487161][T18541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3503'. [ 465.603639][T13279] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.616760][T18543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3504'. [ 465.641311][T18476] chnl_net:caif_netlink_parms(): no params data found [ 465.676841][T18544] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3504'. [ 465.724370][T18448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.735445][T18448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.764947][T18448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.787965][T18310] veth1_macvtap: entered promiscuous mode [ 465.835308][T18448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.870139][T18448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.907928][T18448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.190127][ T5840] Bluetooth: hci4: command tx timeout [ 466.229057][T18448] hsr_slave_0: entered promiscuous mode [ 466.237024][T18448] hsr_slave_1: entered promiscuous mode [ 466.245296][T18448] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 466.253258][T18448] Cannot create hsr debugfs directory [ 466.302973][T18550] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 466.336289][T18310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 466.462442][T18557] xt_CT: No such helper "snmp" [ 466.476391][T18557] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3507'. [ 466.496948][T18310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 466.527382][T18476] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.539911][T18476] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.547592][T18476] bridge_slave_0: entered allmulticast mode [ 466.556188][T18476] bridge_slave_0: entered promiscuous mode [ 466.565280][T18476] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.585709][T18476] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.598805][T18476] bridge_slave_1: entered allmulticast mode [ 466.608040][T18476] bridge_slave_1: entered promiscuous mode [ 466.682343][T18476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.717775][T18476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.735153][T18310] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.744807][T18310] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.750969][ T5840] Bluetooth: hci1: command tx timeout [ 466.769409][T18310] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.778343][T18310] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.846104][T13279] bridge_slave_1: left allmulticast mode [ 466.852485][T13279] bridge_slave_1: left promiscuous mode [ 466.858450][T13279] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.870970][T13279] bridge_slave_0: left allmulticast mode [ 466.876797][T13279] bridge_slave_0: left promiscuous mode [ 466.883067][T13279] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.264385][T13279] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 467.276756][T13279] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 467.287544][T13279] bond0 (unregistering): Released all slaves [ 467.438099][T18476] team0: Port device team_slave_0 added [ 467.448199][T18476] team0: Port device team_slave_1 added [ 467.526411][T18567] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3510'. [ 467.545073][T18567] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3510'. [ 467.785797][T18476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.796373][T18476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.823979][T18576] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3513'. [ 467.835917][T18476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.850843][T18476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.857842][T18476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.895274][T18476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.171753][T13267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.181123][T13267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.196016][T18476] hsr_slave_0: entered promiscuous mode [ 468.204153][T18476] hsr_slave_1: entered promiscuous mode [ 468.212024][T18476] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 468.220783][T18476] Cannot create hsr debugfs directory [ 468.270046][ T5840] Bluetooth: hci4: command tx timeout [ 468.384594][T13281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.419696][T13281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.732814][T18571] virt_wifi0 speed is unknown, defaulting to 1000 [ 468.830612][ T5840] Bluetooth: hci1: command tx timeout [ 469.040588][T13279] hsr_slave_0: left promiscuous mode [ 469.046768][T13279] hsr_slave_1: left promiscuous mode [ 469.062402][T13279] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 469.075431][T13279] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 469.087217][T13279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 469.095821][T13279] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 469.125038][T13279] veth1_macvtap: left promiscuous mode [ 469.131392][T13279] veth0_macvtap: left promiscuous mode [ 469.137121][T13279] veth1_vlan: left promiscuous mode [ 469.143024][T13279] veth0_vlan: left promiscuous mode [ 469.695994][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 469.716060][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 469.732675][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 469.751679][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 469.776473][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 470.014991][T13279] team0 (unregistering): Port device team_slave_1 removed [ 470.067557][T13279] team0 (unregistering): Port device team_slave_0 removed [ 470.351887][ T51] Bluetooth: hci4: command tx timeout [ 470.649594][T18448] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 470.668192][T18448] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 470.706787][T18448] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 470.727879][T18448] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 471.187686][T18589] virt_wifi0 speed is unknown, defaulting to 1000 [ 471.295441][T18603] netlink: 'syz.2.3519': attribute type 12 has an invalid length. [ 471.476355][T18604] netlink: 'syz.2.3519': attribute type 12 has an invalid length. [ 471.626940][T13279] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.674347][T18448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.776662][T13279] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.859814][T18613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3521'. [ 471.871188][ T51] Bluetooth: hci2: command tx timeout [ 471.881204][T18613] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3521'. [ 471.895196][T18448] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.931052][T18476] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 471.986344][T13279] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.042272][T18476] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 472.075989][T18476] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 472.177748][T13279] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.239401][T18476] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 472.276678][T13280] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.283982][T13280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.305729][T13280] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.313011][T13280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.380202][T18589] chnl_net:caif_netlink_parms(): no params data found [ 472.443857][T18631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3525'. [ 472.541520][T18631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3525'. [ 472.820391][T18589] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.843751][T18589] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.860087][T18589] bridge_slave_0: entered allmulticast mode [ 472.868157][T18589] bridge_slave_0: entered promiscuous mode [ 472.918800][T18589] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.926888][T18589] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.935012][T18589] bridge_slave_1: entered allmulticast mode [ 472.944637][T18589] bridge_slave_1: entered promiscuous mode [ 472.946511][T18646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3528'. [ 473.028845][T18649] netlink: 'syz.2.3529': attribute type 11 has an invalid length. [ 473.038990][T13279] bridge_slave_1: left allmulticast mode [ 473.047250][T13279] bridge_slave_1: left promiscuous mode [ 473.053600][T13279] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.064723][T13279] bridge_slave_0: left allmulticast mode [ 473.071546][T13279] bridge_slave_0: left promiscuous mode [ 473.077439][T13279] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.509266][T13279] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 473.525555][T13279] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 473.537380][T13279] bond0 (unregistering): Released all slaves [ 473.586148][T18589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.611740][T18652] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3528'. [ 473.632160][T18652] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 473.691817][T18655] pim6reg: entered allmulticast mode [ 473.745277][T18589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 473.813433][T18448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.918024][T18589] team0: Port device team_slave_0 added [ 473.949895][ T51] Bluetooth: hci2: command tx timeout [ 474.044389][T18589] team0: Port device team_slave_1 added [ 474.207245][T18589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.222225][T18589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.268143][T18589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.324905][T18589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.341016][T18589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.406207][T18589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.691270][T18476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.707709][T18589] hsr_slave_0: entered promiscuous mode [ 474.715259][T18589] hsr_slave_1: entered promiscuous mode [ 474.722311][T18589] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 474.730594][T18589] Cannot create hsr debugfs directory [ 474.741992][T18675] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3536'. [ 474.776887][T13279] hsr_slave_0: left promiscuous mode [ 474.783601][T13279] hsr_slave_1: left promiscuous mode [ 474.796198][T13279] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 474.819479][T13279] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 474.830844][T13279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 474.838338][T13279] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 474.888185][T13279] veth1_macvtap: left promiscuous mode [ 474.901443][T13279] veth0_macvtap: left promiscuous mode [ 474.907265][T13279] veth1_vlan: left promiscuous mode [ 474.914299][T13279] veth0_vlan: left promiscuous mode [ 475.464196][T18689] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.3539'. [ 475.654868][T13279] team0 (unregistering): Port device team_slave_1 removed [ 475.709299][T13279] team0 (unregistering): Port device team_slave_0 removed [ 476.037054][ T5840] Bluetooth: hci2: command tx timeout [ 476.368568][T18476] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.515586][T18448] veth0_vlan: entered promiscuous mode [ 476.548489][T13280] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.555845][T13280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.684526][T13282] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.691772][T13282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.708763][T18695] syzkaller0: entered allmulticast mode [ 476.755106][T18701] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3543'. [ 476.811156][T18448] veth1_vlan: entered promiscuous mode [ 476.920208][T18705] xt_hashlimit: size too large, truncated to 1048576 [ 477.045991][T18448] veth0_macvtap: entered promiscuous mode [ 477.124342][T18448] veth1_macvtap: entered promiscuous mode [ 477.272817][T18448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.312623][T18448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.344902][T18448] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.378510][T18448] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.409847][T18448] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.424399][T18448] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.761761][T18476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.859052][T13278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.884454][T13278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.951695][ T5840] Bluetooth: hci3: command 0x0406 tx timeout [ 478.078588][T18476] veth0_vlan: entered promiscuous mode [ 478.097337][T13279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.110269][ T51] Bluetooth: hci2: command tx timeout [ 478.120471][T18476] veth1_vlan: entered promiscuous mode [ 478.155493][T13279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.204656][T18589] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 478.292094][T18742] netlink: 'syz.2.3552': attribute type 1 has an invalid length. [ 478.306119][T18589] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 478.316442][T18742] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3552'. [ 478.335173][T18589] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 478.453528][T18748] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3552'. [ 478.485456][T18476] veth0_macvtap: entered promiscuous mode [ 478.498426][T18589] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 478.530549][T18476] veth1_macvtap: entered promiscuous mode [ 478.586722][T18476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.725294][T13285] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.754348][T18476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.793907][T18476] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.824764][T18476] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.846444][T18476] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.865526][T18476] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.977655][T13285] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.015411][T18760] tipc: Started in network mode [ 479.021542][T18760] tipc: Node identity ac14140f, cluster identity 4711 [ 479.032018][T18760] tipc: New replicast peer: 255.255.255.255 [ 479.038688][T18760] tipc: Enabled bearer , priority 10 [ 479.144852][T13285] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.227904][T13285] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.282762][T13279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.297941][T13279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.354549][T13278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.366744][T13278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.438736][T18589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.480417][T18589] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.534787][T13279] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.542038][T13279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.574206][T13279] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.581399][T13279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.767729][T13285] bridge_slave_1: left allmulticast mode [ 479.788572][T13285] bridge_slave_1: left promiscuous mode [ 479.803619][T13285] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.840908][T13285] bridge_slave_0: left allmulticast mode [ 479.872705][T13285] bridge_slave_0: left promiscuous mode [ 479.878602][T13285] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.150706][ T5891] tipc: Node number set to 2886997007 [ 480.442932][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 480.457594][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 480.477178][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 480.487441][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 480.498229][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 480.703508][T13285] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 480.719685][T13285] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 480.736733][T13285] bond0 (unregistering): Released all slaves [ 481.087579][T18589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.215033][T18776] virt_wifi0 speed is unknown, defaulting to 1000 [ 481.350195][T18589] veth0_vlan: entered promiscuous mode [ 481.508125][T18589] veth1_vlan: entered promiscuous mode [ 481.639798][T13285] hsr_slave_0: left promiscuous mode [ 481.653648][T13285] hsr_slave_1: left promiscuous mode [ 481.680670][T13285] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 481.688163][T13285] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 481.720840][T13285] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 481.735835][T13285] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 481.745479][T18795] netlink: 'syz.2.3561': attribute type 1 has an invalid length. [ 481.754811][T18795] netlink: 'syz.2.3561': attribute type 10 has an invalid length. [ 481.769843][T18795] netlink: 236 bytes leftover after parsing attributes in process `syz.2.3561'. [ 481.789453][T18796] netlink: 'syz.2.3561': attribute type 1 has an invalid length. [ 481.797249][T18796] netlink: 'syz.2.3561': attribute type 10 has an invalid length. [ 481.811812][T13285] veth1_macvtap: left promiscuous mode [ 481.817517][T13285] veth0_macvtap: left promiscuous mode [ 481.823460][T18796] netlink: 236 bytes leftover after parsing attributes in process `syz.2.3561'. [ 481.833252][T13285] veth1_vlan: left promiscuous mode [ 481.838782][T13285] veth0_vlan: left promiscuous mode [ 481.856975][T18794] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 482.181989][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 482.192810][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 482.206426][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 482.215744][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 482.227576][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 482.600219][ T5840] Bluetooth: hci1: command tx timeout [ 482.921964][T13285] team0 (unregistering): Port device team_slave_1 removed [ 482.975704][T13285] team0 (unregistering): Port device team_slave_0 removed [ 484.276817][ T5840] Bluetooth: hci4: command tx timeout [ 484.670329][ T5840] Bluetooth: hci1: command tx timeout [ 485.748568][T18808] virt_wifi0 speed is unknown, defaulting to 1000 [ 485.875064][T18589] veth0_macvtap: entered promiscuous mode [ 485.924332][T18589] veth1_macvtap: entered promiscuous mode [ 485.934327][T18776] chnl_net:caif_netlink_parms(): no params data found [ 486.130745][T18589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 486.154707][T18589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 486.290809][T18589] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.314629][T18589] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.323883][T18589] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.333054][T18589] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.349557][ T5840] Bluetooth: hci4: command tx timeout [ 486.452294][T18868] sch_tbf: burst 0 is lower than device lo mtu (39799) ! [ 486.470717][T18862] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3572'. [ 486.546175][T18776] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.554326][T18776] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.567930][T18776] bridge_slave_0: entered allmulticast mode [ 486.610341][T18776] bridge_slave_0: entered promiscuous mode [ 486.705313][T13277] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.728245][T18776] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.736054][T18776] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.743597][T18776] bridge_slave_1: entered allmulticast mode [ 486.750838][ T5840] Bluetooth: hci1: command tx timeout [ 486.758703][T18776] bridge_slave_1: entered promiscuous mode [ 486.772770][T18808] chnl_net:caif_netlink_parms(): no params data found [ 486.951570][T18776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.003458][T18885] netlink: 'syz.4.3577': attribute type 10 has an invalid length. [ 487.013862][T13277] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.177635][T18776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 487.258556][T18776] team0: Port device team_slave_0 added [ 487.285993][T13277] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.355431][T18776] team0: Port device team_slave_1 added [ 487.452048][T18808] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.461131][T18808] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.468446][T18808] bridge_slave_0: entered allmulticast mode [ 487.480493][T18808] bridge_slave_0: entered promiscuous mode [ 487.533004][T13277] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.543692][T18900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3578'. [ 487.543718][T18900] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3578'. [ 487.637733][T18776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 487.655642][T18776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.689669][T18776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 487.731521][T18808] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.739006][T18808] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.760628][T18808] bridge_slave_1: entered allmulticast mode [ 487.768734][T18808] bridge_slave_1: entered promiscuous mode [ 487.887856][T18776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 487.914686][T18776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.943143][T18776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.983725][T18808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 488.062543][T18808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 488.162497][T13286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.176778][T13286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.200471][T18776] hsr_slave_0: entered promiscuous mode [ 488.206969][T18776] hsr_slave_1: entered promiscuous mode [ 488.227715][T18776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 488.235640][T18776] Cannot create hsr debugfs directory [ 488.252230][T18808] team0: Port device team_slave_0 added [ 488.347234][T18808] team0: Port device team_slave_1 added [ 488.442666][ T5840] Bluetooth: hci4: command tx timeout [ 488.560213][T18808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 488.567242][T18808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 488.596254][T18808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 488.696795][T18808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 488.713259][T18808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 488.781989][T18808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 488.796524][T13277] bridge_slave_1: left allmulticast mode [ 488.803637][T13286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.813877][T13286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.825022][T13277] bridge_slave_1: left promiscuous mode [ 488.831303][ T5840] Bluetooth: hci1: command tx timeout [ 488.837581][T13277] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.863892][T13277] bridge_slave_0: left allmulticast mode [ 488.874943][T13277] bridge_slave_0: left promiscuous mode [ 488.881500][T13277] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.436076][T13277] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 489.448329][T13277] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 489.460525][T13277] bond0 (unregistering): Released all slaves [ 489.738933][T18808] hsr_slave_0: entered promiscuous mode [ 489.756587][T18808] hsr_slave_1: entered promiscuous mode [ 489.770019][T18808] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 489.778342][T18808] Cannot create hsr debugfs directory [ 489.898748][T18944] x_tables: duplicate underflow at hook 3 [ 490.510161][ T5840] Bluetooth: hci4: command tx timeout [ 490.658580][T13277] hsr_slave_0: left promiscuous mode [ 490.668876][T13277] hsr_slave_1: left promiscuous mode [ 490.679619][T13277] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 490.687114][T13277] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 490.718396][T13277] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 490.733580][T13277] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 490.780572][T13277] veth1_macvtap: left promiscuous mode [ 490.786339][T13277] veth0_macvtap: left promiscuous mode [ 490.792497][T13277] veth1_vlan: left promiscuous mode [ 490.798040][T13277] veth0_vlan: left promiscuous mode [ 490.987159][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 490.998035][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 491.007085][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 491.030029][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 491.038934][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 491.428972][T13277] team0 (unregistering): Port device team_slave_1 removed [ 491.492897][T13277] team0 (unregistering): Port device team_slave_0 removed [ 492.540736][T18948] virt_wifi0 speed is unknown, defaulting to 1000 [ 492.777520][T13277] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.047834][T18957] virt_wifi0 speed is unknown, defaulting to 1000 [ 493.096490][T13277] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.151265][ T51] Bluetooth: hci2: command tx timeout [ 493.332781][T13277] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.467194][T13277] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.760593][T18957] chnl_net:caif_netlink_parms(): no params data found [ 493.888802][T18776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 493.901790][T18776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 493.947673][T18776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 493.969817][T18988] netlink: 216 bytes leftover after parsing attributes in process `syz.4.3595'. [ 493.981731][T18988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3595'. [ 494.074959][T18776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 494.145116][T13277] bridge_slave_1: left allmulticast mode [ 494.161347][T13277] bridge_slave_1: left promiscuous mode [ 494.172935][T13277] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.177844][T18996] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3596'. [ 494.193270][T13277] bridge_slave_0: left allmulticast mode [ 494.199062][T13277] bridge_slave_0: left promiscuous mode [ 494.206584][T13277] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.448637][T18999] netlink: 'syz.4.3596': attribute type 7 has an invalid length. [ 494.636238][T13277] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 494.653150][T13277] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 494.664372][T13277] bond0 (unregistering): Released all slaves [ 494.930009][T18957] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.946756][T18957] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.954661][T18957] bridge_slave_0: entered allmulticast mode [ 494.964082][T18957] bridge_slave_0: entered promiscuous mode [ 494.978865][T18957] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.001250][T18957] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.008570][T18957] bridge_slave_1: entered allmulticast mode [ 495.026288][T18957] bridge_slave_1: entered promiscuous mode [ 495.036795][T19010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3598'. [ 495.061922][T19011] ªªªªªª†³?ÂHº: renamed from lo (while UP) [ 495.124063][T19008] netdevsim netdevsim2: Direct firmware load for /.€ failed with error -2 [ 495.139503][T19008] netdevsim netdevsim2: Falling back to sysfs fallback for: /.€ [ 495.231271][ T51] Bluetooth: hci2: command tx timeout [ 495.254380][T18808] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 495.272537][T18808] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 495.307553][T18808] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 495.322660][T18957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.350642][T18808] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 495.404223][T18957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.497748][T19023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3601'. [ 495.525149][T19023] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3601'. [ 495.655105][T13277] hsr_slave_0: left promiscuous mode [ 495.662681][T13277] hsr_slave_1: left promiscuous mode [ 495.668959][T13277] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 495.678587][T13277] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 495.692323][T13277] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 495.700089][T13277] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 495.747849][T13277] veth1_macvtap: left promiscuous mode [ 495.779940][T13277] veth0_macvtap: left promiscuous mode [ 495.785698][T13277] veth1_vlan: left promiscuous mode [ 495.799848][T13277] veth0_vlan: left promiscuous mode [ 495.890048][T19034] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 496.371025][T19051] xt_CT: No such helper "snmp" [ 496.497423][T19057] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3606'. [ 496.507194][T19057] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3606'. [ 496.765134][T13277] team0 (unregistering): Port device team_slave_1 removed [ 496.814778][T13277] team0 (unregistering): Port device team_slave_0 removed [ 497.308721][T18957] team0: Port device team_slave_0 added [ 497.321571][ T51] Bluetooth: hci2: command tx timeout [ 497.355232][T19040] IPVS: Unknown mcast interface: pimreg0 [ 497.381302][T19054] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 497.423617][T18957] team0: Port device team_slave_1 added [ 497.565734][T18957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 497.579447][T18957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 497.633216][T18957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 497.655679][T19062] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3608'. [ 497.683384][T18957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 497.692112][T18957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 497.721061][T18957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 497.919185][T19067] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3610'. [ 497.945501][T18957] hsr_slave_0: entered promiscuous mode [ 497.954128][T18957] hsr_slave_1: entered promiscuous mode [ 497.963959][T19075] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 497.974195][T18957] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 497.982283][T18957] Cannot create hsr debugfs directory [ 498.022820][T18776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 498.137908][T18776] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.167195][T13280] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.174376][T13280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.301319][T13285] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.308555][T13285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 498.420751][T19080] netlink: 'syz.2.3614': attribute type 33 has an invalid length. [ 498.474543][T19080] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffc1ac: 0000 [#1] SMP KASAN PTI [ 498.486520][T19080] KASAN: probably user-memory-access in range [0x00000000fffe0d60-0x00000000fffe0d67] [ 498.496117][T19080] CPU: 1 UID: 0 PID: 19080 Comm: syz.2.3614 Not tainted 6.16.0-rc1-syzkaller-00102-g5466491c9e33 #0 PREEMPT(full) [ 498.508225][T19080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 498.518340][T19080] RIP: 0010:__ip_mc_dec_group+0x2fd/0x690 [ 498.524119][T19080] Code: f9 ad d0 f7 c6 05 b3 34 9b 05 01 48 c7 c7 40 95 9c 8c be 97 05 00 00 48 c7 c2 c0 95 9c 8c e8 9a ae ae f7 4c 89 e3 48 c1 eb 03 <42> 80 3c 2b 00 74 08 4c 89 e7 e8 34 25 34 f8 4d 8b 2c 24 4d 39 f5 [ 498.543766][T19080] RSP: 0018:ffffc90003dced38 EFLAGS: 00010206 [ 498.549858][T19080] RAX: ffffffff89efb0be RBX: 000000001fffc1ac RCX: 0000000000080000 [ 498.557842][T19080] RDX: ffffc9000da00000 RSI: 0000000000000ede RDI: 0000000000000edf [ 498.565854][T19080] RBP: ffff88805addb820 R08: ffffffff8f50f927 R09: 1ffffffff1ea1f24 [ 498.573854][T19080] R10: dffffc0000000000 R11: fffffbfff1ea1f25 R12: 00000000fffe0d60 [ 498.581849][T19080] R13: dffffc0000000000 R14: ffff8880213bb600 R15: 1ffff1100b5bb704 [ 498.589840][T19080] FS: 00007f56c19b06c0(0000) GS:ffff888125d52000(0000) knlGS:0000000000000000 [ 498.598792][T19080] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 498.605390][T19080] CR2: 000000110c33b178 CR3: 00000000788ca000 CR4: 00000000003526f0 [ 498.613379][T19080] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 498.621369][T19080] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 498.629358][T19080] Call Trace: [ 498.632650][T19080] [ 498.635594][T19080] inetdev_event+0x2a7/0x15b0 [ 498.640317][T19080] ? __pfx_inetdev_event+0x10/0x10 [ 498.645460][T19080] notifier_call_chain+0x1b3/0x3e0 [ 498.650608][T19080] dev_close_many+0x29c/0x410 [ 498.655367][T19080] ? __pfx_dev_close_many+0x10/0x10 [ 498.660595][T19080] ? osq_unlock+0x92/0x260 [ 498.665044][T19080] unregister_netdevice_many_notify+0x619/0x2320 [ 498.671411][T19080] ? __mutex_lock+0x330/0xe80 [ 498.676136][T19080] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 498.682938][T19080] ? rtnl_dellink+0x331/0x710 [ 498.687651][T19080] ? kasan_save_track+0x4f/0x80 [ 498.692536][T19080] ? unregister_netdevice_queue+0x1b3/0x380 [ 498.698493][T19080] ? __nla_parse+0x40/0x60 [ 498.702938][T19080] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 498.709215][T19080] rtnl_dellink+0x488/0x710 [ 498.713739][T19080] ? __pfx_rtnl_dellink+0x10/0x10 [ 498.718786][T19080] ? kasan_quarantine_put+0xdd/0x220 [ 498.724097][T19080] ? lockdep_hardirqs_on+0x9c/0x150 [ 498.729361][T19080] ? __pfx_rtnl_dellink+0x10/0x10 [ 498.734401][T19080] rtnetlink_rcv_msg+0x7cc/0xb70 [ 498.739359][T19080] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 498.744481][T19080] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 498.749954][T19080] ? ref_tracker_free+0x63a/0x7d0 [ 498.755000][T19080] ? __copy_skb_header+0xa7/0x550 [ 498.760133][T19080] ? __pfx_ref_tracker_free+0x10/0x10 [ 498.765525][T19080] netlink_rcv_skb+0x208/0x470 [ 498.770312][T19080] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 498.775790][T19080] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 498.781114][T19080] ? netlink_deliver_tap+0x2e/0x1b0 [ 498.786338][T19080] ? netlink_deliver_tap+0x2e/0x1b0 [ 498.791563][T19080] netlink_unicast+0x75b/0x8d0 [ 498.796362][T19080] netlink_sendmsg+0x805/0xb30 [ 498.801155][T19080] ? __pfx_netlink_sendmsg+0x10/0x10 [ 498.806465][T19080] ? aa_sock_msg_perm+0x94/0x160 [ 498.811430][T19080] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 498.816736][T19080] ? __pfx_netlink_sendmsg+0x10/0x10 [ 498.822039][T19080] __sock_sendmsg+0x219/0x270 [ 498.826739][T19080] ____sys_sendmsg+0x505/0x830 [ 498.831529][T19080] ? __pfx_____sys_sendmsg+0x10/0x10 [ 498.836838][T19080] ? import_iovec+0x74/0xa0 [ 498.841379][T19080] ___sys_sendmsg+0x21f/0x2a0 [ 498.846108][T19080] ? __pfx____sys_sendmsg+0x10/0x10 [ 498.851361][T19080] ? __fget_files+0x2a/0x420 [ 498.855977][T19080] ? __fget_files+0x3a0/0x420 [ 498.860675][T19080] __x64_sys_sendmsg+0x19b/0x260 [ 498.865641][T19080] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 498.871267][T19080] ? rcu_is_watching+0x15/0xb0 [ 498.876069][T19080] ? do_syscall_64+0xbe/0x3b0 [ 498.880768][T19080] do_syscall_64+0xfa/0x3b0 [ 498.885320][T19080] ? lockdep_hardirqs_on+0x9c/0x150 [ 498.890546][T19080] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.896628][T19080] ? clear_bhb_loop+0x60/0xb0 [ 498.901323][T19080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.907228][T19080] RIP: 0033:0x7f56c0b8e929 [ 498.911660][T19080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 498.931295][T19080] RSP: 002b:00007f56c19b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 498.939754][T19080] RAX: ffffffffffffffda RBX: 00007f56c0db6080 RCX: 00007f56c0b8e929 [ 498.947827][T19080] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000006 [ 498.955811][T19080] RBP: 00007f56c0c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 498.963800][T19080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 498.971789][T19080] R13: 0000000000000000 R14: 00007f56c0db6080 R15: 00007ffdf02ad878 [ 498.979782][T19080] [ 498.982818][T19080] Modules linked in: [ 498.988880][T19080] ---[ end trace 0000000000000000 ]--- [ 499.008665][T19080] RIP: 0010:__ip_mc_dec_group+0x2fd/0x690 [ 499.021881][T19080] Code: f9 ad d0 f7 c6 05 b3 34 9b 05 01 48 c7 c7 40 95 9c 8c be 97 05 00 00 48 c7 c2 c0 95 9c 8c e8 9a ae ae f7 4c 89 e3 48 c1 eb 03 <42> 80 3c 2b 00 74 08 4c 89 e7 e8 34 25 34 f8 4d 8b 2c 24 4d 39 f5 [ 499.139640][T19080] RSP: 0018:ffffc90003dced38 EFLAGS: 00010206 [ 499.152393][T19080] RAX: ffffffff89efb0be RBX: 000000001fffc1ac RCX: 0000000000080000 [ 499.176124][T19080] RDX: ffffc9000da00000 RSI: 0000000000000ede RDI: 0000000000000edf [ 499.184297][T19080] RBP: ffff88805addb820 R08: ffffffff8f50f927 R09: 1ffffffff1ea1f24 [ 499.192728][T19080] R10: dffffc0000000000 R11: fffffbfff1ea1f25 R12: 00000000fffe0d60 [ 499.201079][T19080] R13: dffffc0000000000 R14: ffff8880213bb600 R15: 1ffff1100b5bb704 [ 499.209097][T19080] FS: 00007f56c19b06c0(0000) GS:ffff888125d52000(0000) knlGS:0000000000000000 [ 499.218944][T19080] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 499.238506][T19080] CR2: 000000110c3aaa21 CR3: 00000000788ca000 CR4: 00000000003526f0 [ 499.248489][T19080] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 499.260944][T19080] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 499.268980][T19080] Kernel panic - not syncing: Fatal exception [ 499.275400][T19080] Kernel Offset: disabled [ 499.279734][T19080] Rebooting in 86400 seconds..