last executing test programs: 1m5.101998904s ago: executing program 4 (id=341): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000014000380080001400000000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001007465616d300000000000000000000000140001006970365f767469300000dc45ce160000080007"], 0xf4}}, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000140)={0x30, r3, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000040), 0x2, 0x0) 53.66111077s ago: executing program 4 (id=341): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000014000380080001400000000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001007465616d300000000000000000000000140001006970365f767469300000dc45ce160000080007"], 0xf4}}, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000140)={0x30, r3, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000040), 0x2, 0x0) 43.75373807s ago: executing program 4 (id=341): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000014000380080001400000000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001007465616d300000000000000000000000140001006970365f767469300000dc45ce160000080007"], 0xf4}}, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000140)={0x30, r3, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000040), 0x2, 0x0) 34.239013027s ago: executing program 4 (id=341): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000014000380080001400000000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001007465616d300000000000000000000000140001006970365f767469300000dc45ce160000080007"], 0xf4}}, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000140)={0x30, r3, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000040), 0x2, 0x0) 30.415552128s ago: executing program 1 (id=1250): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xe}]}, &(0x7f0000000080)=0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x80000006, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000180)=0x1, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x82, &(0x7f0000000280)={r4, 0xfbfd, 0xffa3}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e00)=ANY=[@ANYBLOB="980200001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="000004000000000024001280090001007866726d000000001400028008000200020000000800020001000000140003007866726d30"], 0x298}}, 0x0) 29.483450303s ago: executing program 1 (id=1260): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000002c0)={0x80, r3, 0x1, 0x70bd2d, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x3ff}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x41}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_WME={0x4c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xff}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xdd}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x2}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x6}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x40}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x7}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x4}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xb}]}]}, 0x80}}, 0x0) r4 = socket(0xa, 0x3, 0x3a) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) socket(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000006800010000000000000000000a000000000000000c0008800800030000000000060007000200000008000500", @ANYRES32=r7, @ANYBLOB="140006"], 0x48}}, 0x0) ioctl$TUNSETIFINDEX(r5, 0x400454da, &(0x7f0000000400)=r7) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r8}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e21, 0x1000, @dev={0xfe, 0x80, '\x00', 0x33}, 0xfff}, {0xa, 0x6, 0xb58, @mcast1, 0x75}, 0x0, {[0x2776, 0x7ff, 0x10000, 0x8001, 0x9b7, 0x4, 0x3, 0x9]}}, 0x5c) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'bridge_slave_1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'bridge_slave_1\x00'}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=@delsa={0x28, 0x11, 0x1, 0x70bd2d, 0x25dfdbfb, {@in=@empty, 0x4d4, 0x2, 0x33}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) (async) sendmsg$nl_xfrm(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=@delsa={0x28, 0x11, 0x1, 0x70bd2d, 0x25dfdbfb, {@in=@empty, 0x4d4, 0x2, 0x33}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003d00090000000000000000000100000004000000100001800c001080060009000a010100080002"], 0x30}}, 0x0) (async) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003d00090000000000000000000100000004000000100001800c001080060009000a010100080002"], 0x30}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in6=@loopback}, {@in, 0x0, 0x33}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x184}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r12, r13, 0x2, 0x2, 0x0, @void, @value}, 0x10) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r12, r13, 0x2, 0x2, 0x0, @void, @value}, 0x10) r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r14, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000014c0), 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r14, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000014c0), 0x0, 0x0}, 0x40) sendmmsg$unix(r1, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb66514b1c5e45ff1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000000000300010000000100760000", @ANYRES32=r0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYRES32], 0x48}}], 0x2, 0x0) 29.263744279s ago: executing program 1 (id=1263): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000140)="94f9c186642877", 0x7}, {&(0x7f00000001c0)="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", 0xfe}, {&(0x7f00000000c0)="5de9c667e3a999ee71b18502f3d502", 0xf}, {&(0x7f00000004c0)="1741d7d5169990b195520640f7b1595e47f358b89833464b87e1dc85be549292f6365163235850a526d505d054245901d1ce67d259e8b21f3cd648be4559b8ae94455570515fb1124c6b34c851615b5fbf98c0d9ec2e3dfcb0bbcbfbd6cef61eba9d6caef6441ee510b330e27d20a3acbf9976837c44353829f36af64655b7f717a0bc80e49dfec91622cc70f5efa38393a78f4377d65d8e559441f57ce59468d9aa2b246b3d30cbe1f6a8cae05926d3d4c3ece2d2f9c6810c4326116c51eb0cf53ab946484975c3717268e8699059e95332e21484", 0xd5}, {&(0x7f0000000380)="bb9dbc36c478bb803f24f7424972e2572f9f77a0e0ed3a480ca157eb22724d", 0x1f}, {&(0x7f00000003c0)="62cfc8371af63091d7675b088cddc139ad9192369accc1415e7def7aa83f72c93fd623ab", 0x24}], 0x7, &(0x7f00000006c0)=[@ip_retopts={{0x10, 0x0, 0x3}}], 0x10}, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100)=r1, 0x4) 28.990150193s ago: executing program 1 (id=1266): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000000)={0x7, 0x10000, 0x5, 0x9, 0x1, 0x0, [{0x7, 0xffff, 0xffffffffffffffc7, '\x00', 0x3002}]}) r1 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000000c0)=0x40000000) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00'}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x21, 0x9, 0xed5, 0x5, 0x30000, r2, 0x40, '\x00', 0x0, r2, 0x3, 0x2, 0x0, 0x0, @void, @value, @value=r2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x15, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @alu={0x4, 0x1, 0xb, 0xb, 0xb, 0xffffffffffffffe0, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x986763d6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10}]}, &(0x7f0000000200)='GPL\x00', 0x6, 0x4d, &(0x7f0000000240)=""/77, 0x1e00, 0x4c, '\x00', r3, 0x25, r2, 0x8, &(0x7f0000000300)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x0, 0x3}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000480)=[r2, r2, r4, r2, 0xffffffffffffffff, r2, r5, r2, r2, r2], &(0x7f00000004c0)=[{0x2, 0x3, 0xf, 0xa}, {0x5, 0x4, 0x4, 0x4}, {0x1, 0x3, 0x7, 0x8}, {0x3, 0x4, 0xf, 0xc}, {0x5, 0x4, 0xd, 0x3}, {0x3, 0x3, 0x9, 0xc}, {0x3, 0x4, 0x1, 0x7}, {0x1, 0x4, 0x2, 0xa}], 0x10, 0x10000, @void, @value}, 0x94) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000600)={0x0, 0xea60}, 0x10) recvmsg$unix(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000640)=""/239, 0xef}, {&(0x7f0000000740)=""/119, 0x77}, {&(0x7f00000007c0)=""/99, 0x63}, {&(0x7f0000000840)=""/214, 0xd6}, {&(0x7f0000000940)=""/39, 0x27}, {&(0x7f0000000980)=""/183, 0xb7}, {&(0x7f0000000a40)=""/151, 0x97}], 0x7, &(0x7f0000000b80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x140}, 0x10000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d80)={{r6, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)=r11}, 0x20) preadv(r11, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/80, 0x50}, {&(0x7f0000000e40)=""/72, 0x48}, {&(0x7f0000000ec0)=""/24, 0x18}, {&(0x7f0000000f00)=""/158, 0x9e}, {&(0x7f0000000fc0)=""/113, 0x71}], 0x5, 0xffffffff, 0x20611cc1) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r16 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r16, 0x11b, 0x4, &(0x7f00000011c0)={&(0x7f00000010c0)=""/251, 0x247c372d90b5703c, 0x800, 0xedc6, 0x2}, 0x20) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2000000, 0x12, r15, 0x74b94000) sendmsg$IPCTNL_MSG_CT_GET(r10, &(0x7f0000001480)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001440)={&(0x7f0000001240)={0x1e0, 0x1, 0x1, 0x801, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_TUPLE_ORIG={0xdc, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x28}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_REPLY={0xb8, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_NAT_SRC={0x20, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0x0, 0x7, 0x10000, 0x0, 0x81c]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x4800}, 0x4c820) setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85) r17 = socket$phonet_pipe(0x23, 0x5, 0x2) recvmsg(r17, &(0x7f0000001680)={&(0x7f00000014c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000001580)=[{&(0x7f0000001540)=""/41, 0x29}], 0x1, &(0x7f00000015c0)=""/147, 0x93}, 0x0) unshare(0x42000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_freezer_state(r9, &(0x7f00000016c0)='THAWED\x00', 0x7) r18 = socket$nl_generic(0x10, 0x3, 0x10) r19 = syz_genetlink_get_family_id$devlink(&(0x7f0000001740), r12) sendmsg$DEVLINK_CMD_GET(r18, &(0x7f00000018c0)={&(0x7f0000001700), 0xc, &(0x7f0000001880)={&(0x7f0000001780)={0x100, r19, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x40800) sendmsg$nl_route_sched(r13, &(0x7f00000019c0)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)=@deltclass={0x34, 0x29, 0x2, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xfff2, 0xf}, {0x8, 0xe}, {0xb, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x6}}, @TCA_RATE={0x6, 0x5, {0x90, 0x7}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001bc0)={0xf, 0xa, &(0x7f0000001a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffc01, 0x0, 0x0, 0x0, 0x6}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ldst={0x0, 0x3, 0x6, 0x9, 0x9, 0xffffffffffffffff, 0x8}, @map_val={0x18, 0x2, 0x2, 0x0, r13, 0x0, 0x0, 0x0, 0x9}, @ldst={0x3, 0x3, 0x2, 0x0, 0x7, 0x50, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x7, 0x3, 0x3, 0x40, 0xffffffffffffffff}, @exit]}, &(0x7f0000001a80)='syzkaller\x00', 0x2, 0x1e, &(0x7f0000001ac0)=""/30, 0x41100, 0x28, '\x00', r3, @cgroup_device=0x6, r7, 0x8, &(0x7f0000001b00)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000001b40)={0x3, 0xc, 0xc020, 0x5}, 0x10, 0x0, r8, 0x2, 0x0, &(0x7f0000001b80)=[{0x3, 0x4, 0xe, 0x4}, {0x3, 0x2, 0x6, 0x3}], 0x10, 0x5, @void, @value}, 0x94) setsockopt$SO_BINDTODEVICE(r14, 0x1, 0x19, &(0x7f0000001c80)='veth0_macvtap\x00', 0x10) 25.661014111s ago: executing program 4 (id=341): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000014000380080001400000000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001007465616d300000000000000000000000140001006970365f767469300000dc45ce160000080007"], 0xf4}}, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000140)={0x30, r3, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000040), 0x2, 0x0) 21.402917898s ago: executing program 1 (id=1266): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000000)={0x7, 0x10000, 0x5, 0x9, 0x1, 0x0, [{0x7, 0xffff, 0xffffffffffffffc7, '\x00', 0x3002}]}) r1 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000000c0)=0x40000000) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00'}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x21, 0x9, 0xed5, 0x5, 0x30000, r2, 0x40, '\x00', 0x0, r2, 0x3, 0x2, 0x0, 0x0, @void, @value, @value=r2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x15, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @alu={0x4, 0x1, 0xb, 0xb, 0xb, 0xffffffffffffffe0, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x986763d6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10}]}, &(0x7f0000000200)='GPL\x00', 0x6, 0x4d, &(0x7f0000000240)=""/77, 0x1e00, 0x4c, '\x00', r3, 0x25, r2, 0x8, &(0x7f0000000300)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x0, 0x3}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000480)=[r2, r2, r4, r2, 0xffffffffffffffff, r2, r5, r2, r2, r2], &(0x7f00000004c0)=[{0x2, 0x3, 0xf, 0xa}, {0x5, 0x4, 0x4, 0x4}, {0x1, 0x3, 0x7, 0x8}, {0x3, 0x4, 0xf, 0xc}, {0x5, 0x4, 0xd, 0x3}, {0x3, 0x3, 0x9, 0xc}, {0x3, 0x4, 0x1, 0x7}, {0x1, 0x4, 0x2, 0xa}], 0x10, 0x10000, @void, @value}, 0x94) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000600)={0x0, 0xea60}, 0x10) recvmsg$unix(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000640)=""/239, 0xef}, {&(0x7f0000000740)=""/119, 0x77}, {&(0x7f00000007c0)=""/99, 0x63}, {&(0x7f0000000840)=""/214, 0xd6}, {&(0x7f0000000940)=""/39, 0x27}, {&(0x7f0000000980)=""/183, 0xb7}, {&(0x7f0000000a40)=""/151, 0x97}], 0x7, &(0x7f0000000b80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x140}, 0x10000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d80)={{r6, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)=r11}, 0x20) preadv(r11, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/80, 0x50}, {&(0x7f0000000e40)=""/72, 0x48}, {&(0x7f0000000ec0)=""/24, 0x18}, {&(0x7f0000000f00)=""/158, 0x9e}, {&(0x7f0000000fc0)=""/113, 0x71}], 0x5, 0xffffffff, 0x20611cc1) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r16 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r16, 0x11b, 0x4, &(0x7f00000011c0)={&(0x7f00000010c0)=""/251, 0x247c372d90b5703c, 0x800, 0xedc6, 0x2}, 0x20) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2000000, 0x12, r15, 0x74b94000) sendmsg$IPCTNL_MSG_CT_GET(r10, &(0x7f0000001480)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001440)={&(0x7f0000001240)={0x1e0, 0x1, 0x1, 0x801, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_TUPLE_ORIG={0xdc, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x28}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_REPLY={0xb8, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_NAT_SRC={0x20, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0x0, 0x7, 0x10000, 0x0, 0x81c]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x4800}, 0x4c820) setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85) r17 = socket$phonet_pipe(0x23, 0x5, 0x2) recvmsg(r17, &(0x7f0000001680)={&(0x7f00000014c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000001580)=[{&(0x7f0000001540)=""/41, 0x29}], 0x1, &(0x7f00000015c0)=""/147, 0x93}, 0x0) unshare(0x42000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_freezer_state(r9, &(0x7f00000016c0)='THAWED\x00', 0x7) r18 = socket$nl_generic(0x10, 0x3, 0x10) r19 = syz_genetlink_get_family_id$devlink(&(0x7f0000001740), r12) sendmsg$DEVLINK_CMD_GET(r18, &(0x7f00000018c0)={&(0x7f0000001700), 0xc, &(0x7f0000001880)={&(0x7f0000001780)={0x100, r19, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x40800) sendmsg$nl_route_sched(r13, &(0x7f00000019c0)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)=@deltclass={0x34, 0x29, 0x2, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xfff2, 0xf}, {0x8, 0xe}, {0xb, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x6}}, @TCA_RATE={0x6, 0x5, {0x90, 0x7}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001bc0)={0xf, 0xa, &(0x7f0000001a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffc01, 0x0, 0x0, 0x0, 0x6}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ldst={0x0, 0x3, 0x6, 0x9, 0x9, 0xffffffffffffffff, 0x8}, @map_val={0x18, 0x2, 0x2, 0x0, r13, 0x0, 0x0, 0x0, 0x9}, @ldst={0x3, 0x3, 0x2, 0x0, 0x7, 0x50, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x7, 0x3, 0x3, 0x40, 0xffffffffffffffff}, @exit]}, &(0x7f0000001a80)='syzkaller\x00', 0x2, 0x1e, &(0x7f0000001ac0)=""/30, 0x41100, 0x28, '\x00', r3, @cgroup_device=0x6, r7, 0x8, &(0x7f0000001b00)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000001b40)={0x3, 0xc, 0xc020, 0x5}, 0x10, 0x0, r8, 0x2, 0x0, &(0x7f0000001b80)=[{0x3, 0x4, 0xe, 0x4}, {0x3, 0x2, 0x6, 0x3}], 0x10, 0x5, @void, @value}, 0x94) setsockopt$SO_BINDTODEVICE(r14, 0x1, 0x19, &(0x7f0000001c80)='veth0_macvtap\x00', 0x10) 11.961104041s ago: executing program 4 (id=341): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000014000380080001400000000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001007465616d300000000000000000000000140001006970365f767469300000dc45ce160000080007"], 0xf4}}, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000140)={0x30, r3, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000040), 0x2, 0x0) 9.627692328s ago: executing program 1 (id=1266): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000000)={0x7, 0x10000, 0x5, 0x9, 0x1, 0x0, [{0x7, 0xffff, 0xffffffffffffffc7, '\x00', 0x3002}]}) r1 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000000c0)=0x40000000) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00'}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x21, 0x9, 0xed5, 0x5, 0x30000, r2, 0x40, '\x00', 0x0, r2, 0x3, 0x2, 0x0, 0x0, @void, @value, @value=r2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x15, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @alu={0x4, 0x1, 0xb, 0xb, 0xb, 0xffffffffffffffe0, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x986763d6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10}]}, &(0x7f0000000200)='GPL\x00', 0x6, 0x4d, &(0x7f0000000240)=""/77, 0x1e00, 0x4c, '\x00', r3, 0x25, r2, 0x8, &(0x7f0000000300)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x0, 0x3}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000480)=[r2, r2, r4, r2, 0xffffffffffffffff, r2, r5, r2, r2, r2], &(0x7f00000004c0)=[{0x2, 0x3, 0xf, 0xa}, {0x5, 0x4, 0x4, 0x4}, {0x1, 0x3, 0x7, 0x8}, {0x3, 0x4, 0xf, 0xc}, {0x5, 0x4, 0xd, 0x3}, {0x3, 0x3, 0x9, 0xc}, {0x3, 0x4, 0x1, 0x7}, {0x1, 0x4, 0x2, 0xa}], 0x10, 0x10000, @void, @value}, 0x94) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000600)={0x0, 0xea60}, 0x10) recvmsg$unix(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000640)=""/239, 0xef}, {&(0x7f0000000740)=""/119, 0x77}, {&(0x7f00000007c0)=""/99, 0x63}, {&(0x7f0000000840)=""/214, 0xd6}, {&(0x7f0000000940)=""/39, 0x27}, {&(0x7f0000000980)=""/183, 0xb7}, {&(0x7f0000000a40)=""/151, 0x97}], 0x7, &(0x7f0000000b80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x140}, 0x10000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d80)={{r6, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)=r11}, 0x20) preadv(r11, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/80, 0x50}, {&(0x7f0000000e40)=""/72, 0x48}, {&(0x7f0000000ec0)=""/24, 0x18}, {&(0x7f0000000f00)=""/158, 0x9e}, {&(0x7f0000000fc0)=""/113, 0x71}], 0x5, 0xffffffff, 0x20611cc1) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r16 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r16, 0x11b, 0x4, &(0x7f00000011c0)={&(0x7f00000010c0)=""/251, 0x247c372d90b5703c, 0x800, 0xedc6, 0x2}, 0x20) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2000000, 0x12, r15, 0x74b94000) sendmsg$IPCTNL_MSG_CT_GET(r10, &(0x7f0000001480)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001440)={&(0x7f0000001240)={0x1e0, 0x1, 0x1, 0x801, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_TUPLE_ORIG={0xdc, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x28}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_REPLY={0xb8, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_NAT_SRC={0x20, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0x0, 0x7, 0x10000, 0x0, 0x81c]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x4800}, 0x4c820) setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85) r17 = socket$phonet_pipe(0x23, 0x5, 0x2) recvmsg(r17, &(0x7f0000001680)={&(0x7f00000014c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000001580)=[{&(0x7f0000001540)=""/41, 0x29}], 0x1, &(0x7f00000015c0)=""/147, 0x93}, 0x0) unshare(0x42000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_freezer_state(r9, &(0x7f00000016c0)='THAWED\x00', 0x7) r18 = socket$nl_generic(0x10, 0x3, 0x10) r19 = syz_genetlink_get_family_id$devlink(&(0x7f0000001740), r12) sendmsg$DEVLINK_CMD_GET(r18, &(0x7f00000018c0)={&(0x7f0000001700), 0xc, &(0x7f0000001880)={&(0x7f0000001780)={0x100, r19, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x40800) sendmsg$nl_route_sched(r13, &(0x7f00000019c0)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)=@deltclass={0x34, 0x29, 0x2, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xfff2, 0xf}, {0x8, 0xe}, {0xb, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x6}}, @TCA_RATE={0x6, 0x5, {0x90, 0x7}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001bc0)={0xf, 0xa, &(0x7f0000001a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffc01, 0x0, 0x0, 0x0, 0x6}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ldst={0x0, 0x3, 0x6, 0x9, 0x9, 0xffffffffffffffff, 0x8}, @map_val={0x18, 0x2, 0x2, 0x0, r13, 0x0, 0x0, 0x0, 0x9}, @ldst={0x3, 0x3, 0x2, 0x0, 0x7, 0x50, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x7, 0x3, 0x3, 0x40, 0xffffffffffffffff}, @exit]}, &(0x7f0000001a80)='syzkaller\x00', 0x2, 0x1e, &(0x7f0000001ac0)=""/30, 0x41100, 0x28, '\x00', r3, @cgroup_device=0x6, r7, 0x8, &(0x7f0000001b00)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000001b40)={0x3, 0xc, 0xc020, 0x5}, 0x10, 0x0, r8, 0x2, 0x0, &(0x7f0000001b80)=[{0x3, 0x4, 0xe, 0x4}, {0x3, 0x2, 0x6, 0x3}], 0x10, 0x5, @void, @value}, 0x94) setsockopt$SO_BINDTODEVICE(r14, 0x1, 0x19, &(0x7f0000001c80)='veth0_macvtap\x00', 0x10) 2.683147301s ago: executing program 2 (id=1451): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f00000003c0)) r1 = socket(0xa, 0x3, 0x3a) ioctl$SIOCGETSGCNT(r1, 0x89e1, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x25}}) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'dummy0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000000000000141000000180017"], 0x34}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0xfd21, 0xb, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x20008004) syz_emit_ethernet(0x3e9, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r8, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001000000000000000a0080"], 0x38}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB='F\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="25bc2cbd7000fbdbdf252e0000000a0021007770616e300000000c0005000200aaaaaaaaaaaa"], 0x2c}, 0x1, 0x0, 0x0, 0x8840}, 0x4000000) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000440)=@gcm_256={{0x303}, "753ba00c7ede7f3a", "162f2d3bc1c2b24b28f8aac9aea535cc11290368027aea6b6915d69c1b4161fe", "7b329735", "5b85eae749981fc3"}, 0x38) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x4000000, 0x0, 0x300017d) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000240)=0x880000, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000084850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.688037836s ago: executing program 2 (id=1457): r0 = socket(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e4e32dd2b696733552eca3e954943a1870", 0x11}], 0x1, &(0x7f0000000740)=ANY=[@ANYBLOB="300000000000000017e2ffff010000001800000045f43a7ce45002bdb85e47ab3e39597e422ffab456dd963a0000000018000000000000001701000004000000060200000040000018000000000000001701000003000000010000"], 0x60}], 0x1, 0x8001) recvmmsg(r2, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000300)=""/190, 0xbe}], 0x1}, 0xa7f5}], 0x1, 0x140, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f00000000c0)=@framed={{0x46, 0xa, 0x0, 0x0, 0x0, 0x79, 0x10, 0x98}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000004c0)={0x14, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}}, 0x14}}, 0x0) socket(0x10, 0x3, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) (async) accept4(r1, 0x0, 0x0, 0x0) (async) sendmmsg$alg(r2, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e4e32dd2b696733552eca3e954943a1870", 0x11}], 0x1, &(0x7f0000000740)=ANY=[@ANYBLOB="300000000000000017e2ffff010000001800000045f43a7ce45002bdb85e47ab3e39597e422ffab456dd963a0000000018000000000000001701000004000000060200000040000018000000000000001701000003000000010000"], 0x60}], 0x1, 0x8001) (async) recvmmsg(r2, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000300)=""/190, 0xbe}], 0x1}, 0xa7f5}], 0x1, 0x140, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f00000000c0)=@framed={{0x46, 0xa, 0x0, 0x0, 0x0, 0x79, 0x10, 0x98}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000004c0)={0x14, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}}, 0x14}}, 0x0) (async) 1.403613807s ago: executing program 2 (id=1459): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bdb71167ae016a2624000008000300", @ANYRES32=r3, @ANYBLOB="1c002f80"], 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x40800) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0) 1.391738968s ago: executing program 0 (id=1460): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB="0085f69a7b743148c51480cc6f67cb95b0a56bcd44e044dc9c5b1ae8051a5797b726c12984f81928d4d04f25b77124326f2bf067", @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000380)=0x400, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) bind$xdp(r3, &(0x7f0000000240)={0x2c, 0x1, r5, 0x0, r6}, 0x10) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x40, 0x7800, 0x44e2dc7c, 0x400, {{0xb, 0x4, 0x2, 0x29, 0x2c, 0x64, 0x0, 0x4, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, {[@cipso={0x86, 0x17, 0x2, [{0x7, 0x5, "38fd37"}, {0x2, 0xc, "22a966600303d6d4f78b"}]}, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'ip6gre0\x00', r10, 0x29, 0x7, 0x5, 0x8, 0x1, @mcast1, @loopback, 0x7, 0x40, 0x5, 0x100}}) unshare(0x20000400) r11 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r11, 0x103, 0x2, &(0x7f0000000040), 0x4) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@ipv4_newroute={0x4c, 0x18, 0x100, 0x70bd27, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xfd, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x28, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x24, 0x1, {{0x1, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x200}}, [@mcast1]}}}]}, 0x4c}}, 0x0) 1.118737507s ago: executing program 2 (id=1462): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4010) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x1, 0x0, &(0x7f0000000100)) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 899.977765ms ago: executing program 3 (id=1463): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000180)=@ethtool_drvinfo={0x3, "3b296e12d52d00eb82cc420f61e33561ab88669e42bdfb3cec88f302de9e1d73", "9e3fe5ca5f463d0322b78f5a3995fa1e7569d25aed97fbf6eb197b880bef7d55", "31cb053e0c8f3e81062f62e0f874b078cef598cf374e31fb58665661e850abd6", "fd1508ebd0c5b39be0c0a8f4394f9dfb56ceccf9f6f1fdfdc100", "78a85ce08babb5877c9ab49084d318f3ce181dd78515a854b784f51f55030e7f", "510f13cf0000000000010001", 0xfffffffd, 0x4000000, 0x4, 0x1}}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000140)) 899.532052ms ago: executing program 0 (id=1464): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x22, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc", 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="0102", 0x0}, 0x50) recvmsg(r0, &(0x7f0000001cc0)={0x0, 0x0, 0x0}, 0x40000000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x400, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, 0x800}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xfffffffe}]}, 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x22, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc", 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="0102", 0x0}, 0x50) (async) recvmsg(r0, &(0x7f0000001cc0)={0x0, 0x0, 0x0}, 0x40000000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x400, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, 0x800}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xfffffffe}]}, 0x30}}, 0x0) (async) 713.702159ms ago: executing program 2 (id=1465): ioctl$SIOCRSSCAUSE(0xffffffffffffffff, 0x89e1, &(0x7f0000000200)=0x8) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xc7f0}, 0x10) (async) write(r0, &(0x7f0000000280)="240000001a005f997a0339040050517309030000302036f3000000eb0f924bffe608b25cafb2a0c09434f67a5ffd0e34592a69818074975068ff0b8b8591cb3e4b638b1cc8", 0x45) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[], 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (async) r2 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYRES16=r1, @ANYRESDEC=r3, @ANYRESOCT=0x0, @ANYRES32=r3, @ANYRES16=r2], 0x64}}, 0x8801) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002500010324bd7002fddbdf2501"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r5 = socket$kcm(0x10, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00", 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f0000000f40)=ANY=[@ANYRES64=r0], &(0x7f00000000c0)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000)={0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) 713.487253ms ago: executing program 3 (id=1466): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fccbdf250902000005000700020000000800010001000000050008"], 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005800)={0x28, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0xf, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic='c$9']}]}, 0x28}], 0x1}, 0x0) 712.618282ms ago: executing program 0 (id=1467): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="3400fa0100000000000000a5f247bfe805d139a981803e1bf4682b24620000be6b5cef00000000b67fc18d0a83992dc6fd96afbbe88fdc558ef0e3a4", @ANYRES16=r2, @ANYBLOB="01002abd7000000000000f000000"], 0x14}}, 0x24008000) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r3, 0x0) (async) r4 = socket(0x15, 0x5, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (async) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) (async) sendto$inet6(r5, &(0x7f0000000840)="af4fd73a576bcdcdcd0f198f0cdd59e466240370d1c8171d47bb3550ba4c0e849656c3dbc768ce0875fe8715917ec54113dfc60daa2ae720e16b75e338a064e2080836a918b5936d4cd6115dcfc162585bc8e86160c570dac53b972bdd76e5e4143802eb2ae6d9ee84fcf1aaf5264c0c211c34c7f32863b1dda1f564efb32210c95c83e8b3e18dd589b2513f9045fba3e73dff15178ac1ea62d21323f56fac8c2905ee1e5e48d1c0a960898aa4d452f4aaa1f058bdf870e1e3c3324b039b05778c66e693689df8155c7a2991d99d35c419ce37fa5bd2c40772368f1693a60584497a36517f1bf3bc1f1dc4c3aa39fc40c9f77f4071c77b2655a498745a27a826f8b4dc4278586bfdbcfc13a977c4ae78e62803527b07a774ccc79c8252328874721fd76fa65f1fd4a2f41f", 0xfce7708c75029797, 0x840, 0x0, 0xfffffffffffffd76) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000340)=0x20000000, 0x4) (async) pselect6(0x40, &(0x7f0000000100)={0x9, 0x47f, 0x7, 0x7, 0x9, 0x10001, 0x1, 0xf8}, 0x0, 0x0, 0x0, 0x0) recvmsg(r4, &(0x7f0000003780)={0x0, 0x0, 0x0}, 0x0) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000040)=0x38) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="3f9d00000000fedbdf251700000008000300", @ANYRES32=r8, @ANYBLOB="5c00308014"], 0x78}}, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000180)={0x40, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x1}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x7}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20900}, 0x80) (async) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) recvfrom$llc(r9, &(0x7f0000000340)=""/209, 0xd1, 0x40002100, 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000080)={'erspan0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x40, 0xc85d6c0653bfaed4, 0xe4, 0x8, {{0xe, 0x4, 0x2, 0x2d, 0x38, 0x67, 0x0, 0x4, 0x4, 0x0, @loopback, @loopback, {[@ssrr={0x89, 0x23, 0x18, [@broadcast, @dev={0xac, 0x14, 0x14, 0x1f}, @empty, @empty, @multicast1, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}, @noop]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@delqdisc={0x2c, 0x25, 0x8, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xffe0, 0xfff1}, {0xb, 0xd}, {0xb, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x9e}}]}, 0x2c}}, 0x0) 615.654288ms ago: executing program 2 (id=1468): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRES64=r0], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmmsg(r0, &(0x7f00000063c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x20, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000140), &(0x7f0000000180)=0x4) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x2, {0x1, 0x1, 0x3}, 0xff}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000043000900fffffffffddbdf25010000000c0003804e2d373a", @ANYRESOCT], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x44850) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x80, 0x30, 0xb, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_ct={0x68, 0x1, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_MARK={0x8}, @TCA_CT_LABELS={0x14, 0x7, "4614c334e344ae535af2f0a70ddeb37f"}, @TCA_CT_MARK_MASK={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) 527.819481ms ago: executing program 3 (id=1469): syz_emit_ethernet(0x113, &(0x7f0000000480)={@broadcast, @multicast, @val={@val={0x88a8, 0x2, 0x1, 0x3}, {0x8100, 0x1, 0x0, 0x3}}, {@generic={0x6005, "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"}}}, 0x0) (async, rerun: 32) r0 = socket$kcm(0x21, 0x2, 0xa) (rerun: 32) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r2, &(0x7f00000000c0)="de", 0x1, 0x8000, &(0x7f0000000140)={0xa, 0xfffe, 0x0, @private1}, 0x1c) (async) shutdown(r2, 0x1) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xd, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @mcast1}}}}, &(0x7f0000000380)=0xb0) (async, rerun: 32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001d00070f"], 0x1c}}, 0x0) (async) r4 = socket(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x3c, &(0x7f0000000100), 0x4) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x20, 0x40, 0x10001, 0xe6, {{0x27, 0x4, 0x3, 0x6, 0x9c, 0x66, 0x0, 0x0, 0x14, 0x0, @multicast2, @remote, {[@ssrr={0x89, 0x7, 0x4e, [@broadcast]}, @timestamp_addr={0x44, 0x4c, 0x27, 0x1, 0x6, [{@local, 0x100}, {@remote, 0x7fffffff}, {@remote, 0xfffff303}, {@private=0xa010101, 0x800}, {@loopback, 0x1}, {@multicast2, 0xff}, {@empty, 0xa}, {@local, 0x1}, {@dev={0xac, 0x14, 0x14, 0x35}, 0xed0}]}, @timestamp={0x44, 0x8, 0x20, 0x0, 0x2, [0x1]}, @ssrr={0x89, 0x7, 0x7d, [@loopback]}, @lsrr={0x83, 0x7, 0x66, [@rand_addr=0x64010102]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x18, 0x71, 0x0, 0x5, [0x1, 0x6, 0x1, 0x3, 0x29]}]}}}}}) (async, rerun: 32) r7 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async, rerun: 64) r8 = accept4(r7, 0x0, 0x0, 0x0) (rerun: 64) pipe(&(0x7f00000045c0)={0xffffffffffffffff}) (async, rerun: 32) sendmmsg$inet(r8, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="13f69d555457", 0x6}], 0x1}}], 0x1, 0xc014) (rerun: 32) splice(r9, 0x0, r8, 0x0, 0x8000, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000780)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', r6, 0xffffffffffffffff, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) write$bt_hci(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000208"], 0xe) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20010, 0xffffffffffffffff, 0xdb1b4000) (async) r10 = socket$inet6(0xa, 0x3, 0x0) getsockopt$IP6T_SO_GET_INFO(r10, 0x29, 0x40, 0x0, &(0x7f0000003240)) (async, rerun: 32) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000000206052000000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000001900050005000a000000050001000600000012000300686173683a6e6574"], 0x60}}, 0x0) (rerun: 32) 496.414572ms ago: executing program 0 (id=1470): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="300000002c0001000000000000000000040000801c0011802e"], 0x30}], 0x1}, 0x0) 426.11835ms ago: executing program 3 (id=1471): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x20}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x66}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000055}, 0x20000010) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x7, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e0003000f000000028000001294", 0x2e}], 0x1}, 0x0) 251.872833ms ago: executing program 0 (id=1472): sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[], 0x20}}, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x3c, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], "fb36eeca6ead50b375a22a58"}}}}}}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r2 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0xa9fe0000}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='r', 0x1}], 0x1}, 0xe0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xab}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) socket(0x2a, 0x80000, 0x4) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0xd0, 0xd0, 0x428, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6, 0x0, 0x0, 0x4a}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r6, 0x4}, 0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$ax25_int(r7, 0x101, 0x6, 0x0, &(0x7f0000000000)) 245.083769ms ago: executing program 3 (id=1473): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x3843c}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x58}}, 0x80) 44.255923ms ago: executing program 3 (id=1474): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711010000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000040)) socket$inet6(0xa, 0x1, 0x100) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5, 0xb, 0x1}, @IFLA_MACSEC_ES={0x5, 0xa, 0x1}]}}}]}, 0x44}}, 0x0) (async, rerun: 64) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) (async, rerun: 64) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)={@map, 0xffffffffffffffff, 0xa, 0x0, 0x0, @void, @value}, 0x20) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e2a, 0xfffffffb, @local, 0x80009}, 0x1c) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES8=r5, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6], 0x90}}, 0x0) (async, rerun: 32) r7 = socket(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newqdisc={0x5c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2c, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x3}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0xa}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x3}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x7}]}}]}, 0x5c}}, 0x20000094) (async) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000180)=0x68) (async) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000800)={{0x0, 0x9, 0x3, 0x2, 0x8000000000000000, 0x7ff, 0xbc, 0x2, 0x9, 0x2, 0x3, 0x6, 0xc71, 0x2, 0x1}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000080)={{r9, 0x67fc65b7, 0x1000, 0xff, 0xc, 0xc, 0xec4e, 0x9, 0x1, 0xafec, 0x9, 0xc, 0xaca, 0x6, 0x8000000000000000}, 0x8, [0x0]}) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000001300)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x1f0, 0x98, 0x158, 0x98, 0x2e0, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x41}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @TTL={0x28}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'pim6reg1\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev, @private, 0x0, 0x0, 'hsr0\x00', 'ip6tnl0\x00'}, 0x0, 0xc8, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@addrtype={{0x30}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@local, @rand_addr, 0x0, 0x0, 'ip6erspan0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0xc0, 0x10, 0x1, 0x0, 0x4, {}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x0, @local}}]}]}, @IFLA_PORT_SELF={0x70, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "00ff50deebb21c6ae0b49c9968dae8ca"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "e613cdee1eb750d935552084394c76a3"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "f7a839cf7269384683958334f9f91d7b"}, @IFLA_PORT_VF={0x8, 0x1, 0x10}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "a41416f9eeb636a37e5ade79cd31a65e"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "8fac8d4d961ce7272b78a60a82671b4a"}]}]}, 0xc0}}, 0x0) 0s ago: executing program 0 (id=1475): r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000040)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@private=0xa010101, @in=@multicast1}, {@in=@multicast2, 0x4d6, 0x32}, @in=@dev, {0x0, 0x0, 0xfffffffffffffffc}, {}, {}, 0x0, 0x2, 0x2}, [@algo_auth={0x48, 0x1, {{'sha384-avx\x00'}}}]}, 0x138}}, 0x0) kernel console output (not intermixed with test programs): 1 has an invalid length. [ 126.185041][ T8618] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.353498][ T8627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.651'. [ 126.453578][ T8632] netlink: 16 bytes leftover after parsing attributes in process `syz.0.653'. [ 126.537766][ T8638] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 126.636852][ T8632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.653'. [ 126.935205][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 127.007626][ T8206] veth0_vlan: entered promiscuous mode [ 127.008961][ T8664] Unsupported ieee802154 address type: 0 [ 127.047818][ T8206] veth1_vlan: entered promiscuous mode [ 127.065695][ T8666] netlink: 'syz.1.659': attribute type 8 has an invalid length. [ 127.150886][ T8206] veth0_macvtap: entered promiscuous mode [ 127.194380][ T8206] veth1_macvtap: entered promiscuous mode [ 127.257540][ T8206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.291191][ T8206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.325721][ T8206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.344441][ T8206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.365350][ T8206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.383589][ T8206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.426873][ T8206] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.461798][ T8206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.490214][ T8206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.511759][ T8206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.558727][ T8206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.584216][ T8206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.600788][ T8206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.616037][ T8206] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.673481][ T8206] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.684585][ T8206] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.701780][ T8206] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.745164][ T8206] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.857307][ T8710] netlink: 'syz.1.669': attribute type 3 has an invalid length. [ 127.956525][ T8721] netlink: 20 bytes leftover after parsing attributes in process `syz.0.668'. [ 127.975425][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 128.132497][ T5916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.156127][ T5916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.221804][ T5916] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.242797][ T8727] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 128.246339][ T8728] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.255871][ T5916] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.455637][ T8734] netlink: 44 bytes leftover after parsing attributes in process `syz.0.676'. [ 128.491329][ T8743] netlink: 1275 bytes leftover after parsing attributes in process `syz.3.678'. [ 128.503477][ T8734] netlink: 56 bytes leftover after parsing attributes in process `syz.0.676'. [ 128.519376][ T8743] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.532377][ T8734] netlink: 56 bytes leftover after parsing attributes in process `syz.0.676'. [ 129.025263][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 129.083018][ T8741] hsr_slave_0 (unregistering): left promiscuous mode [ 129.314588][ T974] IPVS: starting estimator thread 0... [ 129.417655][ T8790] IPVS: using max 24 ests per chain, 57600 per kthread [ 129.528570][ T3443] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.641184][ T3443] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.901924][ T3443] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.970440][ T3443] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.055214][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 130.183060][ T3443] bridge_slave_1: left allmulticast mode [ 130.197476][ T3443] bridge_slave_1: left promiscuous mode [ 130.213372][ T3443] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.233879][ T3443] bridge_slave_0: left allmulticast mode [ 130.245388][ T3443] bridge_slave_0: left promiscuous mode [ 130.268176][ T3443] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.290624][ T8842] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 130.516935][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 130.526778][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 130.536808][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 130.546586][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 130.556481][ T5841] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 130.567232][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 130.855916][ T3443] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.867940][ T3443] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.889675][ T3443] bond0 (unregistering): Released all slaves [ 131.003540][ T8846] xfrm0 speed is unknown, defaulting to 1000 [ 131.027708][ T8850] __nla_validate_parse: 2 callbacks suppressed [ 131.027724][ T8850] netlink: 32 bytes leftover after parsing attributes in process `syz.1.696'. [ 131.096480][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 131.523864][ T8883] pim6reg: entered allmulticast mode [ 131.677985][ T3443] hsr_slave_0: left promiscuous mode [ 131.714922][ T3443] hsr_slave_1: left promiscuous mode [ 131.730401][ T3443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.769207][ T3443] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.775614][ T8895] netlink: 'syz.3.706': attribute type 15 has an invalid length. [ 131.787757][ T3443] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.810539][ T3443] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.857512][ T3443] veth1_macvtap: left promiscuous mode [ 131.873259][ T3443] veth0_macvtap: left promiscuous mode [ 131.883467][ T3443] veth1_vlan: left promiscuous mode [ 131.894541][ T3443] veth0_vlan: left promiscuous mode [ 132.135180][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 132.429382][ T8919] sctp: [Deprecated]: syz.1.708 (pid 8919) Use of int in maxseg socket option. [ 132.429382][ T8919] Use struct sctp_assoc_value instead [ 132.599034][ C0] vcan0: j1939_tp_rxtimer: 0xffff888022aa5c00: rx timeout, send abort [ 132.608855][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888022aa5c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 132.623835][ C0] vcan0: j1939_tp_rxtimer: 0xffff888022aa5800: rx timeout, send abort [ 132.632866][ T5847] Bluetooth: hci3: command tx timeout [ 132.661832][ T3443] team0 (unregistering): Port device team_slave_1 removed [ 132.703524][ T3443] team0 (unregistering): Port device team_slave_0 removed [ 133.022614][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.029774][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.132097][ C0] vcan0: j1939_tp_rxtimer: 0xffff888022aa5800: abort rx timeout. Force session deactivation [ 133.175340][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 133.213900][ T8846] chnl_net:caif_netlink_parms(): no params data found [ 133.562366][ T8846] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.588465][ T8846] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.596079][ T8846] bridge_slave_0: entered allmulticast mode [ 133.600718][ T8962] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 133.603023][ T8846] bridge_slave_0: entered promiscuous mode [ 133.622028][ T8964] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 133.643008][ T8846] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.651064][ T8963] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 133.684387][ T8846] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.715383][ T8846] bridge_slave_1: entered allmulticast mode [ 133.722383][ T8846] bridge_slave_1: entered promiscuous mode [ 133.854414][ T8977] netlink: 260 bytes leftover after parsing attributes in process `syz.1.718'. [ 133.900515][ T8846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.030471][ T8988] netlink: 28 bytes leftover after parsing attributes in process `syz.1.722'. [ 134.069548][ T8846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.086830][ T8988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.722'. [ 134.197924][ T8846] team0: Port device team_slave_0 added [ 134.220111][ T8846] team0: Port device team_slave_1 added [ 134.225876][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 134.406906][ T8846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.414951][ T9002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.726'. [ 134.415168][ T8846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.452711][ T8846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.501926][ T8846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.509732][ T8846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.537281][ T8846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.562440][ T9009] netlink: 'syz.3.726': attribute type 39 has an invalid length. [ 134.697727][ T5847] Bluetooth: hci3: command tx timeout [ 134.754304][ T8846] hsr_slave_0: entered promiscuous mode [ 134.804462][ T8846] hsr_slave_1: entered promiscuous mode [ 135.131796][ T9040] veth0_to_team: entered promiscuous mode [ 135.145397][ T9040] veth0_to_team: entered allmulticast mode [ 135.233269][ T9046] netlink: 16 bytes leftover after parsing attributes in process `syz.3.736'. [ 135.269583][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 135.314949][ T9040] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.329821][ T9040] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.343547][ T9040] bond0 (unregistering): Released all slaves [ 135.360351][ T9050] netlink: 16 bytes leftover after parsing attributes in process `syz.2.738'. [ 135.542690][ T9062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.741'. [ 135.658997][ T5847] Bluetooth: hci0: command tx timeout [ 135.818172][ T8846] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 135.869962][ T8846] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 135.897643][ T8846] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 135.926548][ T8846] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 136.158247][ T8846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.202150][ T8846] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.244009][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.251175][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.295173][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 136.342702][ T7084] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.349949][ T7084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.487340][ T9111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.750'. [ 136.776276][ T5847] Bluetooth: hci3: command tx timeout [ 136.907621][ T8846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.274343][ T9167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.761'. [ 137.335289][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 137.474341][ T9176] C: renamed from team_slave_0 (while UP) [ 137.496248][ T9178] netlink: 16 bytes leftover after parsing attributes in process `syz.1.765'. [ 137.530573][ T9176] netlink: 'syz.0.764': attribute type 1 has an invalid length. [ 137.552459][ T9176] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 137.598943][ T9187] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.674212][ T9185] bond0: entered promiscuous mode [ 137.679677][ T9185] bond0: entered allmulticast mode [ 137.686202][ T9185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.754372][ T9196] netlink: 28 bytes leftover after parsing attributes in process `syz.1.767'. [ 138.034968][ T9185] bond0 (unregistering): Released all slaves [ 138.092389][ T8846] veth0_vlan: entered promiscuous mode [ 138.134827][ T8846] veth1_vlan: entered promiscuous mode [ 138.264373][ T8846] veth0_macvtap: entered promiscuous mode [ 138.307131][ T8846] veth1_macvtap: entered promiscuous mode [ 138.358658][ T9213] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 138.366466][ T8846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.366487][ T8846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.366498][ T8846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.366511][ T8846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.366522][ T8846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.366552][ T8846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.372487][ T8846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.377357][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 138.465892][ T9216] ax25_connect(): syz.3.772 uses autobind, please contact jreuter@yaina.de [ 138.538200][ T8846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.569196][ T8846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.590091][ T8846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.602652][ T9220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.774'. [ 138.613030][ T9221] netlink: 12 bytes leftover after parsing attributes in process `syz.1.773'. [ 138.613661][ T8846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.633973][ T9222] netlink: 12 bytes leftover after parsing attributes in process `syz.1.773'. [ 138.652790][ T8846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.673903][ T8846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.696132][ T8846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.855482][ T5847] Bluetooth: hci3: command tx timeout [ 138.889055][ T8846] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.949480][ T8846] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.983450][ T9237] netlink: 'syz.0.777': attribute type 1 has an invalid length. [ 138.985379][ T8846] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.021835][ T8846] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.170755][ T9241] tipc: Started in network mode [ 139.176221][ T9241] tipc: Node identity ac1414aa, cluster identity 4711 [ 139.188929][ T9241] tipc: Enabled bearer , priority 10 [ 139.298051][ T9247] netlink: 'syz.1.782': attribute type 11 has an invalid length. [ 139.319858][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.335313][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.415235][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 139.459337][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.484173][ T9254] netlink: 'syz.3.784': attribute type 1 has an invalid length. [ 139.508103][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.530534][ T9254] bond0: entered allmulticast mode [ 140.036239][ T9281] netlink: 640 bytes leftover after parsing attributes in process `syz.0.791'. [ 140.048624][ T9281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.791'. [ 140.126215][ T9286] netlink: 248 bytes leftover after parsing attributes in process `syz.3.792'. [ 140.192856][ T7084] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.307675][ T5884] tipc: Node number set to 2886997162 [ 140.350296][ T7084] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.455342][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 140.556580][ T7084] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.648845][ T7084] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.780249][ T7084] bridge_slave_1: left allmulticast mode [ 140.788206][ T7084] bridge_slave_1: left promiscuous mode [ 140.793935][ T7084] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.803704][ T7084] bridge_slave_0: left allmulticast mode [ 140.810117][ T7084] bridge_slave_0: left promiscuous mode [ 140.816428][ T7084] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.177331][ T9337] IPVS: set_ctl: invalid protocol: 108 172.30.1.1:20000 [ 141.387056][ T9343] netlink: 'syz.2.800': attribute type 9 has an invalid length. [ 141.499921][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 141.507165][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 141.524143][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 141.529216][ T9349] __nla_validate_parse: 2 callbacks suppressed [ 141.529230][ T9349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.801'. [ 141.538334][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 141.556354][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 141.568148][ T5841] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 141.575949][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 141.670537][ T7084] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.681000][ T7084] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.691240][ T7084] bond0 (unregistering): Released all slaves [ 141.752298][ T9346] xfrm0 speed is unknown, defaulting to 1000 [ 141.930478][ T9358] netlink: 'syz.0.806': attribute type 1 has an invalid length. [ 142.114620][ T9371] netlink: 100 bytes leftover after parsing attributes in process `syz.3.803'. [ 142.328501][ T9382] netlink: 76 bytes leftover after parsing attributes in process `syz.0.808'. [ 142.357366][ T9384] netlink: 76 bytes leftover after parsing attributes in process `syz.0.808'. [ 142.535186][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 142.552112][ T7084] hsr_slave_0: left promiscuous mode [ 142.558844][ T7084] hsr_slave_1: left promiscuous mode [ 142.572767][ T7084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.591553][ T7084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.614273][ T7084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.632678][ T7084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.666182][ T7084] veth1_macvtap: left promiscuous mode [ 142.680362][ T7084] veth0_macvtap: left promiscuous mode [ 142.688753][ T7084] veth1_vlan: left promiscuous mode [ 142.694188][ T7084] veth0_vlan: left promiscuous mode [ 143.122232][ T7084] team0 (unregistering): Port device team_slave_1 removed [ 143.159210][ T7084] team0 (unregistering): Port device team_slave_0 removed [ 143.514819][ T9402] syz.1.812 (9402) used greatest stack depth: 17968 bytes left [ 143.576458][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 143.589654][ T9346] chnl_net:caif_netlink_parms(): no params data found [ 143.659243][ T5841] Bluetooth: hci3: command tx timeout [ 143.661189][ T9420] netlink: 32 bytes leftover after parsing attributes in process `syz.3.816'. [ 143.833346][ T9429] openvswitch: netlink: IP tunnel dst address not specified [ 143.917812][ T9441] netlink: 8 bytes leftover after parsing attributes in process `syz.3.820'. [ 143.934676][ T9442] xt_TPROXY: Can be used only with -p tcp or -p udp [ 143.954852][ T9346] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.965706][ T9346] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.976167][ T9346] bridge_slave_0: entered allmulticast mode [ 143.982819][ T9346] bridge_slave_0: entered promiscuous mode [ 144.079841][ T9346] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.095578][ T9346] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.102804][ T9346] bridge_slave_1: entered allmulticast mode [ 144.138176][ T9346] bridge_slave_1: entered promiscuous mode [ 144.148623][ T9444] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 144.240852][ T9451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.822'. [ 144.250039][ T9451] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 144.260904][ T9447] ieee802154 phy0 wpan0: encryption failed: -22 [ 144.325828][ T9455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.824'. [ 144.352721][ T9449] team0: Port device team_slave_0 removed [ 144.397776][ T9346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.457367][ T9346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.567771][ T9461] syzkaller1: entered promiscuous mode [ 144.573351][ T9461] syzkaller1: entered allmulticast mode [ 144.615198][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 144.712239][ T9346] team0: Port device team_slave_0 added [ 144.752865][ T9473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.826'. [ 144.791465][ T9346] team0: Port device team_slave_1 added [ 144.808459][ T9473] xt_l2tp: unknown flags: 18 [ 144.897252][ T9346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.909860][ T9346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.962709][ T9346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.989632][ T9346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.999724][ T9346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.062929][ T9346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.212295][ T9346] hsr_slave_0: entered promiscuous mode [ 145.220816][ T9346] hsr_slave_1: entered promiscuous mode [ 145.655250][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 145.735188][ T5841] Bluetooth: hci3: command tx timeout [ 145.811602][ T9531] batadv_slave_1: entered allmulticast mode [ 145.822177][ T9529] ipt_REJECT: ECHOREPLY no longer supported. [ 146.137321][ T9346] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 146.215693][ T9346] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 146.279885][ T9554] dvmrp0: entered allmulticast mode [ 146.287773][ T9564] netlink: 20 bytes leftover after parsing attributes in process `syz.1.847'. [ 146.301433][ T9346] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 146.376078][ T9346] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 146.672268][ T9346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.695177][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 146.733267][ T9346] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.752809][ T7084] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.759973][ T7084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.786928][ T5901] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.794064][ T5901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.888848][ T9604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.856'. [ 147.291504][ T9346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.684232][ T9637] netlink: 20 bytes leftover after parsing attributes in process `syz.0.860'. [ 147.735259][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 147.821425][ T5841] Bluetooth: hci3: command tx timeout [ 147.943428][ T9346] veth0_vlan: entered promiscuous mode [ 148.025841][ T9346] veth1_vlan: entered promiscuous mode [ 148.097162][ T9346] veth0_macvtap: entered promiscuous mode [ 148.142952][ T9346] veth1_macvtap: entered promiscuous mode [ 148.160401][ T9653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.866'. [ 148.170568][ T9654] netlink: 'syz.0.865': attribute type 1 has an invalid length. [ 148.195990][ T9658] netlink: 36 bytes leftover after parsing attributes in process `syz.2.868'. [ 148.199459][ T9346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.220414][ T9346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.232053][ T9346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.246945][ T9346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.249549][ T9660] ip6t_srh: unknown srh match flags 536B [ 148.258125][ T9346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.273499][ T9346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.286676][ T9346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.304983][ T9654] netlink: 'syz.0.865': attribute type 1 has an invalid length. [ 148.322183][ T9346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.327547][ T9658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.868'. [ 148.333362][ T9346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.358929][ T9346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.370331][ T9346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.381083][ T9346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.391882][ T9346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.401879][ T29] audit: type=1107 audit(1738804715.295:2): pid=9665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 148.404373][ T9346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.514819][ T9660] geneve2: entered allmulticast mode [ 148.561199][ T9346] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.581821][ T9346] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.609284][ T9346] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.642990][ T9346] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.775173][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 148.796086][ T9685] netlink: 24 bytes leftover after parsing attributes in process `syz.0.872'. [ 148.814735][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.844891][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.881054][ T7084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.933130][ T7084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.341878][ T9710] netlink: 'syz.2.878': attribute type 2 has an invalid length. [ 149.666223][ T9733] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.815205][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 150.000510][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.220694][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.431600][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.513898][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.670000][ T12] bridge_slave_1: left allmulticast mode [ 150.678465][ T12] bridge_slave_1: left promiscuous mode [ 150.684735][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.698711][ T12] bridge_slave_0: left allmulticast mode [ 150.704377][ T12] bridge_slave_0: left promiscuous mode [ 150.710983][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.855129][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 151.335818][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.348113][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.359703][ T12] bond0 (unregistering): Released all slaves [ 151.382253][ T9791] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 151.496327][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 151.518544][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 151.532202][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 151.543414][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 151.555737][ T5847] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 151.568376][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 151.718316][ T9834] netlink: 32 bytes leftover after parsing attributes in process `syz.2.900'. [ 151.748906][ T9822] xfrm0 speed is unknown, defaulting to 1000 [ 151.895134][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 151.932390][ T9847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.902'. [ 152.008904][ T12] hsr_slave_0: left promiscuous mode [ 152.029737][ T12] hsr_slave_1: left promiscuous mode [ 152.045905][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.067438][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.081319][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.099194][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.140844][ T12] veth1_macvtap: left promiscuous mode [ 152.150284][ T12] veth0_macvtap: left promiscuous mode [ 152.156516][ T12] veth1_vlan: left promiscuous mode [ 152.168498][ T12] veth0_vlan: left promiscuous mode [ 152.724865][ T12] team0 (unregistering): Port device team_slave_1 removed [ 152.769817][ T12] team0 (unregistering): Port device team_slave_0 removed [ 152.945172][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 153.100433][ T9848] netlink: 830 bytes leftover after parsing attributes in process `syz.2.903'. [ 153.195638][ T9885] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 153.661149][ T5847] Bluetooth: hci3: command tx timeout [ 153.685356][ T9904] xfrm0 speed is unknown, defaulting to 1000 [ 153.804213][ T5916] syzkaller0: tun_net_xmit 76 [ 153.809898][ T5916] syzkaller0: tun_net_xmit 48 [ 153.825318][ T5842] syzkaller0: tun_net_xmit 76 [ 153.960325][ T9930] netlink: 14 bytes leftover after parsing attributes in process `syz.0.918'. [ 153.975195][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 155.025177][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 155.398895][ T9822] chnl_net:caif_netlink_parms(): no params data found [ 155.595989][ T9822] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.603135][ T9822] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.613398][ T9946] netlink: 20 bytes leftover after parsing attributes in process `syz.3.919'. [ 155.623774][ T9822] bridge_slave_0: entered allmulticast mode [ 155.629750][ T9946] netlink: 28 bytes leftover after parsing attributes in process `syz.3.919'. [ 155.670581][ T9822] bridge_slave_0: entered promiscuous mode [ 155.675613][ T9950] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 155.691020][ T9822] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.699425][ T9822] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.712745][ T9822] bridge_slave_1: entered allmulticast mode [ 155.720847][ T9822] bridge_slave_1: entered promiscuous mode [ 155.735558][ T5847] Bluetooth: hci3: command tx timeout [ 155.746837][ T9946] erspan0: entered promiscuous mode [ 155.753100][ T9946] batadv_slave_1: entered promiscuous mode [ 155.868404][ T9822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.895952][ T9822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.915659][ T9960] macvlan0: entered allmulticast mode [ 155.925348][ T9960] veth1_vlan: entered allmulticast mode [ 156.041848][ T9822] team0: Port device team_slave_0 added [ 156.055428][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 156.069228][ T9822] team0: Port device team_slave_1 added [ 156.198579][ T9822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.218503][ T9822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.260483][ T9822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.296851][ T9822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.304215][ T9822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.344730][ T9822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.488588][ T9822] hsr_slave_0: entered promiscuous mode [ 156.495831][ T9822] hsr_slave_1: entered promiscuous mode [ 156.549453][ T9994] Unsupported ieee802154 address type: 0 [ 156.967905][T10018] openvswitch: netlink: IP tunnel dst address not specified [ 157.095273][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 157.215664][T10029] netlink: 'syz.1.938': attribute type 3 has an invalid length. [ 157.223502][T10029] netlink: 224 bytes leftover after parsing attributes in process `syz.1.938'. [ 157.259218][T10031] netlink: 'syz.2.937': attribute type 10 has an invalid length. [ 157.274660][T10031] geneve0: entered promiscuous mode [ 157.333658][ T9822] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 157.385994][T10039] netlink: 24 bytes leftover after parsing attributes in process `syz.1.940'. [ 157.468857][ T9822] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 157.483929][T10045] openvswitch: netlink: Key 32 has unexpected len 8 expected 2 [ 157.508536][ T9822] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 157.512277][T10043] Cannot find add_set index 0 as target [ 157.558463][T10043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.941'. [ 157.581617][ T9822] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 157.620941][T10049] lo: entered allmulticast mode [ 157.739540][T10048] lo: left allmulticast mode [ 157.761175][T10061] netlink: 'syz.3.947': attribute type 29 has an invalid length. [ 157.815438][ T5841] Bluetooth: hci3: command tx timeout [ 157.847826][T10061] netlink: 'syz.3.947': attribute type 29 has an invalid length. [ 157.900433][ T9822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.924761][T10072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.944579][T10074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.949399][T10075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.950'. [ 157.962683][ T9822] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.994934][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.002089][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.024767][T10075] openvswitch: netlink: Unexpected mask (mask=8000040, allowed=10048) [ 158.062595][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.069736][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.135186][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 158.266701][ T9822] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 158.291826][T10092] netlink: 'syz.2.954': attribute type 5 has an invalid length. [ 158.405495][T10103] netlink: 44 bytes leftover after parsing attributes in process `syz.1.955'. [ 158.444176][T10103] netlink: 44 bytes leftover after parsing attributes in process `syz.1.955'. [ 158.475527][T10103] netlink: 44 bytes leftover after parsing attributes in process `syz.1.955'. [ 158.506519][T10103] netlink: 44 bytes leftover after parsing attributes in process `syz.1.955'. [ 158.533520][T10103] netlink: 44 bytes leftover after parsing attributes in process `syz.1.955'. [ 158.569836][T10103] netlink: 44 bytes leftover after parsing attributes in process `syz.1.955'. [ 158.742173][ T9822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.037318][T10149] bridge_slave_1: left allmulticast mode [ 159.049423][T10149] bridge_slave_1: left promiscuous mode [ 159.077051][T10149] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.140521][T10149] bridge_slave_0: left allmulticast mode [ 159.175230][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 159.206425][T10149] bridge_slave_0: left promiscuous mode [ 159.212163][T10149] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.302377][T10149] bond0: (slave bridge0): Releasing backup interface [ 159.678728][ T9822] veth0_vlan: entered promiscuous mode [ 159.712808][ T9822] veth1_vlan: entered promiscuous mode [ 159.793520][ T9822] veth0_macvtap: entered promiscuous mode [ 159.823015][ T9822] veth1_macvtap: entered promiscuous mode [ 159.845412][T10201] .: renamed from bond0 (while UP) [ 159.862770][ T9822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.896066][ T5841] Bluetooth: hci3: command 0x0419 tx timeout [ 159.904786][ T9822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.927651][ T9822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.957570][ T9822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.979655][ T9822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.005200][ T9822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.040798][ T9822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.128228][ T9822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.176911][ T9822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.187383][T10222] openvswitch: netlink: nsh attribute has 65524 unknown bytes. [ 160.201220][T10223] openvswitch: netlink: nsh attribute has 65524 unknown bytes. [ 160.205424][ T9822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.209054][T10222] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.219402][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 160.225176][ T9822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.233774][T10223] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.245139][ T9822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.245164][ T9822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.246219][ T9822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.369066][ T9822] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.413991][ T9822] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.438563][ T9822] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.462374][ T9822] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.676771][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.684602][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.763493][ T3443] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.804017][ T3443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.842612][T10252] xfrm0 speed is unknown, defaulting to 1000 [ 161.255122][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 161.401198][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.504161][T10242] delete_channel: no stack [ 161.573844][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.712220][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.827969][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.982686][ T12] bridge_slave_1: left allmulticast mode [ 161.990918][ T12] bridge_slave_1: left promiscuous mode [ 162.001048][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.012094][ T12] bridge_slave_0: left allmulticast mode [ 162.022772][ T12] bridge_slave_0: left promiscuous mode [ 162.029683][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.295135][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 162.527781][T10316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.764453][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.793859][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.804773][ T12] bond0 (unregistering): Released all slaves [ 162.830450][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 162.841727][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 162.851073][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 162.868980][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 162.882403][ T5841] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 162.901316][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 163.064030][T10356] netlink: 'syz.2.998': attribute type 1 has an invalid length. [ 163.125005][T10342] xfrm0 speed is unknown, defaulting to 1000 [ 163.132549][T10356] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 163.169848][T10366] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 163.335124][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 163.609968][ T12] hsr_slave_0: left promiscuous mode [ 163.653491][ T12] hsr_slave_1: left promiscuous mode [ 163.706011][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.729136][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.752091][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.772336][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.803326][ T12] veth1_macvtap: left promiscuous mode [ 163.811878][ T12] veth0_macvtap: left promiscuous mode [ 163.817685][ T12] veth1_vlan: left promiscuous mode [ 163.823176][ T12] veth0_vlan: left promiscuous mode [ 163.867227][T10410] __nla_validate_parse: 63 callbacks suppressed [ 163.867246][T10410] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1007'. [ 164.214339][ T12] team0 (unregistering): Port device team_slave_1 removed [ 164.250009][ T12] team0 (unregistering): Port device team_slave_0 removed [ 164.375232][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 164.500227][T10418] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1012'. [ 164.788634][T10342] chnl_net:caif_netlink_parms(): no params data found [ 164.935991][ T5847] Bluetooth: hci3: command tx timeout [ 164.948621][T10433] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1017'. [ 165.022913][T10342] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.040448][T10342] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.056273][T10342] bridge_slave_0: entered allmulticast mode [ 165.121860][T10342] bridge_slave_0: entered promiscuous mode [ 165.168351][T10342] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.186784][T10342] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.193167][T10448] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1019'. [ 165.196359][T10342] bridge_slave_1: entered allmulticast mode [ 165.222762][T10448] openvswitch: netlink: Flow key attr not present in new flow. [ 165.230261][T10342] bridge_slave_1: entered promiscuous mode [ 165.255983][T10450] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.282760][T10450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1020'. [ 165.328845][T10342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.367468][T10342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.415128][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 165.425528][T10457] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1022'. [ 165.459383][T10461] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1024'. [ 165.462306][T10464] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1025'. [ 165.505225][T10457] netlink: 'syz.3.1022': attribute type 5 has an invalid length. [ 165.512609][T10342] team0: Port device team_slave_0 added [ 165.530603][T10342] team0: Port device team_slave_1 added [ 165.571983][T10457] : entered promiscuous mode [ 165.691521][T10465] bond3: entered promiscuous mode [ 165.697060][T10465] bond3: entered allmulticast mode [ 165.702531][T10465] 8021q: adding VLAN 0 to HW filter on device bond3 [ 165.727993][T10342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.735002][T10342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.761728][T10342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.774478][T10477] IPv6: Can't replace route, no match found [ 165.793034][T10342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.805243][T10342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.863906][T10342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.877726][T10484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1031'. [ 166.047445][T10484] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.103845][T10496] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1033'. [ 166.199267][T10484] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.306454][T10484] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.358265][T10342] hsr_slave_0: entered promiscuous mode [ 166.373734][T10342] hsr_slave_1: entered promiscuous mode [ 166.410566][T10484] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.455121][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 166.606480][T10484] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.656781][T10484] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.696057][T10484] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.763416][T10484] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.029421][ T5847] Bluetooth: hci3: command tx timeout [ 167.090058][T10557] xt_bpf: check failed: parse error [ 167.286610][T10557] netlink: 'syz.2.1053': attribute type 2 has an invalid length. [ 167.468700][T10579] xt_CT: No such helper "pptp" [ 167.495188][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 167.511374][T10342] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 167.548992][T10342] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 167.570907][T10342] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 167.595652][T10587] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) ! [ 167.609873][T10342] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 167.635906][T10588] tap0: tun_chr_ioctl cmd 1074025676 [ 167.641228][T10588] tap0: owner set to 0 [ 167.677901][T10588] netlink: 'syz.0.1060': attribute type 8 has an invalid length. [ 167.721144][T10588] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 167.828400][T10595] bridge_slave_1: left allmulticast mode [ 167.844259][T10595] bridge_slave_1: left promiscuous mode [ 167.855265][T10595] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.906948][T10595] bridge_slave_0: left allmulticast mode [ 167.912640][T10595] bridge_slave_0: left promiscuous mode [ 167.963663][T10595] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.049865][T10614] Bluetooth: MGMT ver 1.23 [ 168.136924][T10595] bridge0 (unregistering): left allmulticast mode [ 168.203318][T10605] macvlan0: entered promiscuous mode [ 168.320167][T10342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.341376][T10342] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.392887][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.400064][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.453321][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.460490][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.535186][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 168.562210][T10342] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 168.853980][T10342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.103556][ T5847] Bluetooth: hci3: command tx timeout [ 169.302263][T10342] veth0_vlan: entered promiscuous mode [ 169.353227][T10342] veth1_vlan: entered promiscuous mode [ 169.422741][T10342] veth0_macvtap: entered promiscuous mode [ 169.471839][T10342] veth1_macvtap: entered promiscuous mode [ 169.525997][T10342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.533376][T10697] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 169.543306][T10342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.564766][T10342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.585186][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 169.585456][T10342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.610062][T10342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.622120][T10342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.633759][T10342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.674038][T10342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.694865][T10342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.711597][T10342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.754116][T10342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.771388][T10342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.782011][T10342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.794101][T10342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.853279][T10342] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.879250][T10342] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.907527][T10342] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.926195][T10342] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.936288][T10726] netlink: 'syz.0.1093': attribute type 1 has an invalid length. [ 169.944042][T10726] netlink: 'syz.0.1093': attribute type 1 has an invalid length. [ 170.002865][T10726] __nla_validate_parse: 4 callbacks suppressed [ 170.002883][T10726] netlink: 134712 bytes leftover after parsing attributes in process `syz.0.1093'. [ 170.148916][T10732] netlink: 'syz.2.1095': attribute type 15 has an invalid length. [ 170.176603][T10732] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1095'. [ 170.223437][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.272501][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.392462][ T7084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.435517][ T7084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.450069][T10755] veth7: entered allmulticast mode [ 170.470348][T10755] IPVS: set_ctl: invalid protocol: 33 172.30.1.2:20002 [ 170.500788][T10758] nbd: device at index 0 is going down [ 170.615185][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 170.768325][T10777] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1100'. [ 171.157407][T10811] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1103'. [ 171.318831][ T53] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.352872][T10819] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1105'. [ 171.368577][T10816] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1105'. [ 171.630346][ T53] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.655151][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 171.882621][ T53] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.938614][ T53] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.026410][ T53] bridge_slave_1: left allmulticast mode [ 172.032075][ T53] bridge_slave_1: left promiscuous mode [ 172.038031][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.047532][ T53] bridge_slave_0: left allmulticast mode [ 172.053200][ T53] bridge_slave_0: left promiscuous mode [ 172.062107][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.397889][T10836] xt_hashlimit: overflow, rate too high: 0 [ 172.429566][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.448335][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.470052][ T53] bond0 (unregistering): Released all slaves [ 172.695185][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 172.713492][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 172.728540][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 172.745524][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 172.753951][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 172.789401][ T5841] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 172.798411][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 172.827519][T10854] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 172.897761][T10858] netlink: 'syz.3.1115': attribute type 30 has an invalid length. [ 172.979028][ T53] hsr_slave_0: left promiscuous mode [ 172.989720][ T53] hsr_slave_1: left promiscuous mode [ 172.995974][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.003839][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.014883][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.022854][T10869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1116'. [ 173.022902][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.063694][ T53] veth1_macvtap: left promiscuous mode [ 173.069525][ T53] veth0_macvtap: left promiscuous mode [ 173.075440][ T53] veth1_vlan: left promiscuous mode [ 173.080820][ T53] veth0_vlan: left promiscuous mode [ 173.463412][ T53] team0 (unregistering): Port device team_slave_1 removed [ 173.501031][ T53] team0 (unregistering): Port device team_slave_0 removed [ 173.735132][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 173.912643][T10849] xfrm0 speed is unknown, defaulting to 1000 [ 174.012251][T10882] xt_l2tp: missing protocol rule (udp|l2tpip) [ 174.240414][T10849] chnl_net:caif_netlink_parms(): no params data found [ 174.283078][T10889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1122'. [ 174.384455][T10904] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1125'. [ 174.695880][T10849] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.703073][T10849] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.715979][T10849] bridge_slave_0: entered allmulticast mode [ 174.723067][T10849] bridge_slave_0: entered promiscuous mode [ 174.739059][T10927] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ¯HcUØîÑË•‚Ž¹+ÕuµŽê!Þ÷œ8¦ [ 174.771245][T10849] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.775138][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 174.778529][T10849] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.805329][T10849] bridge_slave_1: entered allmulticast mode [ 174.830691][T10849] bridge_slave_1: entered promiscuous mode [ 174.855710][ T5847] Bluetooth: hci3: command tx timeout [ 174.963851][T10849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.988365][T10849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.036708][T10946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1133'. [ 175.066098][T10937] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.075022][T10937] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.093335][T10941] netlink: 'syz.1.1133': attribute type 1 has an invalid length. [ 175.109911][T10941] xfrm0 speed is unknown, defaulting to 1000 [ 175.124139][T10937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.141505][T10937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.151766][T10937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.167258][T10937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.182343][T10937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.198020][T10937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.201358][T10954] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1135'. [ 175.251004][T10849] team0: Port device team_slave_0 added [ 175.261623][T10849] team0: Port device team_slave_1 added [ 175.423853][T10849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.450531][T10849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.522346][T10849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.564265][T10968] tipc: Enabling of bearer rejected, failed to enable media [ 175.578958][T10849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.600876][T10849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.623185][T10980] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 175.640909][T10849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.798431][T10849] hsr_slave_0: entered promiscuous mode [ 175.815136][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 175.828022][T10849] hsr_slave_1: entered promiscuous mode [ 175.916971][T10999] tipc: Enabling of bearer rejected, failed to enable media [ 175.955906][T10999] netlink: 'syz.1.1147': attribute type 9 has an invalid length. [ 176.138611][T11009] ip6gre1: entered allmulticast mode [ 176.311202][T11016] syzkaller1: entered promiscuous mode [ 176.326102][T11016] syzkaller1: entered allmulticast mode [ 176.795489][T11049] sctp: [Deprecated]: syz.2.1159 (pid 11049) Use of int in maxseg socket option. [ 176.795489][T11049] Use struct sctp_assoc_value instead [ 176.817121][T11049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1159'. [ 176.855201][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 176.883940][T10849] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 176.907176][T10849] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 176.935317][ T5847] Bluetooth: hci3: command tx timeout [ 176.947955][T10849] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 176.978719][T10849] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 177.086094][T10849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.117006][T10849] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.131756][T10800] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.138937][T10800] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.178676][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.185874][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.437175][T10849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.895288][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 177.970423][T10849] veth0_vlan: entered promiscuous mode [ 178.002782][T10849] veth1_vlan: entered promiscuous mode [ 178.074143][T10849] veth0_macvtap: entered promiscuous mode [ 178.109745][T10849] veth1_macvtap: entered promiscuous mode [ 178.148022][T10849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.159770][T10849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.171570][T11136] netlink: 'syz.0.1175': attribute type 3 has an invalid length. [ 178.190028][T10849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.220929][T10849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.233364][T10849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.244377][T10849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.274007][T10849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.287906][T11136] netlink: 'syz.0.1175': attribute type 3 has an invalid length. [ 178.306982][T10849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.337381][T11149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1176'. [ 178.345213][T10849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.365238][T10849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.395274][T10849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.403211][T11154] nftables ruleset with unbound set [ 178.418614][T10849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.430606][T10849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.449954][T10849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.498043][T10849] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.517534][T10849] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.527549][T10849] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.555195][T10849] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.700351][T10800] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.728203][T10800] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.852765][ T5916] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.886159][ T5916] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.935170][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 179.016001][ T5847] Bluetooth: hci3: command tx timeout [ 179.323505][T11198] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1195'. [ 179.424784][T11207] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1199'. [ 179.753517][T11197] dccp_close: ABORT with 16 bytes unread [ 179.773006][T11224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.822071][T11224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.942506][T11232] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1208'. [ 179.975167][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 180.732640][T11280] raw_sendmsg: syz.3.1223 forgot to set AF_INET. Fix it! [ 180.769375][T10802] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.015303][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 181.200551][T10802] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.248299][T10802] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.312425][T10802] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.395793][T10802] bridge_slave_1: left allmulticast mode [ 181.401488][T10802] bridge_slave_1: left promiscuous mode [ 181.408413][T10802] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.416472][ T5841] Bluetooth: hci2: command 0x0405 tx timeout [ 181.430590][T10802] bridge_slave_0: left allmulticast mode [ 181.436427][T10802] bridge_slave_0: left promiscuous mode [ 181.442302][T10802] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.732023][T10802] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.744809][T10802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.755197][T10802] bond0 (unregistering): Released all slaves [ 181.924276][T11292] netlink: 'syz.0.1225': attribute type 11 has an invalid length. [ 181.934212][T11292] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1225'. [ 182.055290][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 182.145321][T11306] netlink: 'syz.0.1231': attribute type 28 has an invalid length. [ 182.173165][T11306] netlink: 'syz.0.1231': attribute type 3 has an invalid length. [ 182.200915][T11296] xfrm0 speed is unknown, defaulting to 1000 [ 182.201502][T11306] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1231'. [ 182.371450][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 182.391937][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 182.400380][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 182.410656][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 182.420518][ T5841] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 182.424854][T11315] ieee802154 phy0 wpan0: encryption failed: -22 [ 182.437849][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 182.518793][T10802] hsr_slave_0: left promiscuous mode [ 182.531380][T11318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 182.556055][T10802] hsr_slave_1: left promiscuous mode [ 182.561764][T10802] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.591807][T10802] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.600971][T10802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.623632][T10802] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.674343][T10802] veth1_macvtap: left promiscuous mode [ 182.696320][T10802] veth0_macvtap: left promiscuous mode [ 182.702021][T10802] veth1_vlan: left promiscuous mode [ 182.712401][T10802] veth0_vlan: left promiscuous mode [ 183.084767][T10802] team0 (unregistering): Port device team_slave_1 removed [ 183.095283][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 183.128129][T10802] team0 (unregistering): Port device team_slave_0 removed [ 183.536515][T11312] xfrm0 speed is unknown, defaulting to 1000 [ 183.778753][T11342] netlink: 'syz.0.1240': attribute type 10 has an invalid length. [ 183.797798][T11312] chnl_net:caif_netlink_parms(): no params data found [ 183.847141][T11342] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.903141][T11342] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.910320][T11342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.923914][T11342] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 183.958708][T11337] netlink: 'syz.2.1239': attribute type 1 has an invalid length. [ 183.975330][T11337] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1239'. [ 184.112249][T11312] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.129433][T11312] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.135133][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 184.149679][T11312] bridge_slave_0: entered allmulticast mode [ 184.175486][T11312] bridge_slave_0: entered promiscuous mode [ 184.190539][T11312] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.211327][T11312] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.244451][T11312] bridge_slave_1: entered allmulticast mode [ 184.245382][T11359] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 184.253285][T11312] bridge_slave_1: entered promiscuous mode [ 184.302067][T11359] netlink: 'syz.2.1244': attribute type 4 has an invalid length. [ 184.359453][T11312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.398121][T11312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.471785][T11370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1246'. [ 184.535577][ T5845] Bluetooth: hci3: command tx timeout [ 184.543088][T11312] team0: Port device team_slave_0 added [ 184.561367][T11312] team0: Port device team_slave_1 added [ 184.572366][T11377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1249'. [ 184.614865][T11377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1249'. [ 184.629230][T11312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.640929][T11312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.667952][T11312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.694124][T11312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.702141][T11312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.728819][T11312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.773095][T11312] hsr_slave_0: entered promiscuous mode [ 184.779761][T11312] hsr_slave_1: entered promiscuous mode [ 184.910909][T11392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1253'. [ 185.054025][T11401] netlink: 'syz.0.1256': attribute type 1 has an invalid length. [ 185.062187][T11401] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1256'. [ 185.130190][T11312] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 185.153233][T11312] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 185.163629][T11312] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 185.175133][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 185.184632][T11312] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 185.296680][T11312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.330351][T11312] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.350277][T10800] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.357428][T10800] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.380414][T11409] sctp: [Deprecated]: syz.0.1258 (pid 11409) Use of struct sctp_assoc_value in delayed_ack socket option. [ 185.380414][T11409] Use struct sctp_sack_info instead [ 185.381814][ T5916] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.403935][ T5916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.479519][T11413] macvlan0: entered allmulticast mode [ 185.526760][T11414] openvswitch: netlink: IP tunnel dst address not specified [ 185.534255][T11413] openvswitch: netlink: IP tunnel dst address not specified [ 185.656530][T11421] tipc: Enabling of bearer rejected, already enabled [ 185.814214][T11312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.158586][T11312] veth0_vlan: entered promiscuous mode [ 186.174331][T11312] veth1_vlan: entered promiscuous mode [ 186.215268][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 186.220362][T11312] veth0_macvtap: entered promiscuous mode [ 186.237780][T11312] veth1_macvtap: entered promiscuous mode [ 186.276965][T11312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.298305][ T5845] Bluetooth: hci4: command 0x0406 tx timeout [ 186.298335][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 186.321947][T11312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.332155][T11312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.343608][T11312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.363622][T11312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.385848][T11312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.406053][T11312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.466029][T11312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.472054][T11448] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1270'. [ 186.490285][T11312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.494632][T11448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1270'. [ 186.510477][T11312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.532597][T11312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.553829][T11312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.585182][T11312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.598831][T11312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.615482][ T5841] Bluetooth: hci3: command tx timeout [ 186.682744][T11312] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.705186][T11312] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.714513][T11312] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.742205][T11312] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.746000][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 186.762170][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 186.779155][T11457] xfrm0 speed is unknown, defaulting to 1000 [ 186.791506][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 186.801211][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 186.813422][ T5847] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 186.821733][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 186.876744][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.884577][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.970430][T11462] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 187.014081][T11459] xfrm0 speed is unknown, defaulting to 1000 [ 187.096063][T10800] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.125760][T10800] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.255166][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 187.505801][T11459] chnl_net:caif_netlink_parms(): no params data found [ 187.601339][T11459] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.608734][T11459] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.616281][T11459] bridge_slave_0: entered allmulticast mode [ 187.624580][T11459] bridge_slave_0: entered promiscuous mode [ 187.633748][T11459] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.642224][T11459] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.649644][T11459] bridge_slave_1: entered allmulticast mode [ 187.657808][T11459] bridge_slave_1: entered promiscuous mode [ 187.732780][T11459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.756823][T11459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.813389][T11459] team0: Port device team_slave_0 added [ 187.828386][T11459] team0: Port device team_slave_1 added [ 187.868410][T11459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.876421][T11459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.904780][T11459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.918752][T11459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.928957][T11459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.955863][T11459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.989833][T11494] geneve2: entered promiscuous mode [ 187.995131][T11494] geneve2: entered allmulticast mode [ 188.027508][T11459] hsr_slave_0: entered promiscuous mode [ 188.033717][T11459] hsr_slave_1: entered promiscuous mode [ 188.054327][T11459] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.063826][T11459] Cannot create hsr debugfs directory [ 188.155390][T11497] __nla_validate_parse: 1 callbacks suppressed [ 188.155418][T11497] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1280'. [ 188.190108][T11497] netlink: 272 bytes leftover after parsing attributes in process `syz.2.1280'. [ 188.205549][T11497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1280'. [ 188.216345][T11502] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 188.224480][T11502] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 188.243901][T11498] netlink: 'syz.2.1280': attribute type 4 has an invalid length. [ 188.251937][T11498] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1280'. [ 188.295177][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 188.433787][T11512] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1285'. [ 188.480807][T11459] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.502525][T11513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1285'. [ 188.513465][T11513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1285'. [ 188.524509][T11512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1285'. [ 188.550756][T11512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1285'. [ 188.646339][T11522] netlink: 'syz.3.1289': attribute type 9 has an invalid length. [ 188.666027][T11459] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.686959][T11522] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1289'. [ 188.713756][T11520] xfrm0 speed is unknown, defaulting to 1000 [ 188.807769][T11459] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.855585][ T5841] Bluetooth: hci2: command tx timeout [ 189.014984][T11459] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.338763][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 189.408195][ T7084] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.493476][T11459] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 189.517575][T11459] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 189.532671][T11459] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 189.542523][T11459] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 189.610158][T11459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.626494][T11459] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.636861][ T5916] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.643916][ T5916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.660214][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.667382][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.693014][ T7084] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.753115][ T7084] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.826332][ T7084] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.886120][T11459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.952331][ T7084] bridge_slave_1: left allmulticast mode [ 189.959206][ T7084] bridge_slave_1: left promiscuous mode [ 189.966406][ T7084] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.975570][ T7084] bridge_slave_0: left allmulticast mode [ 189.981263][ T7084] bridge_slave_0: left promiscuous mode [ 189.988488][ T7084] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.264991][ T7084] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.275953][ T7084] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.286827][ T7084] bond0 (unregistering): Released all slaves [ 190.300797][T11459] veth0_vlan: entered promiscuous mode [ 190.314054][T11459] veth1_vlan: entered promiscuous mode [ 190.359893][T11459] veth0_macvtap: entered promiscuous mode [ 190.375171][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 190.402044][T11459] veth1_macvtap: entered promiscuous mode [ 190.416856][T11459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.430840][T11459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.440744][T11459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.451527][T11459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.461589][T11459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.472071][T11459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.482133][T11459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.492576][T11459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.503802][T11459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.519958][T11459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.532840][T11459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.543965][T11459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.555553][T11459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.565531][T11459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.585285][T11459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.604332][T11459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.644809][T11459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.670174][T11459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.819235][T11575] netlink: 'syz.2.1303': attribute type 1 has an invalid length. [ 190.867219][T11459] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.883803][T11459] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.893250][T11459] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.910020][T11459] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.937445][ T5841] Bluetooth: hci2: command tx timeout [ 191.029758][ T7084] hsr_slave_0: left promiscuous mode [ 191.053034][ T7084] hsr_slave_1: left promiscuous mode [ 191.062725][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 191.072550][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 191.080911][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 191.089462][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 191.098261][ T7084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.106053][ T5847] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 191.113596][ T7084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.121289][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 191.129181][ T7084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.140198][ T7084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.167737][ T7084] veth1_macvtap: left promiscuous mode [ 191.173361][ T7084] veth0_macvtap: left promiscuous mode [ 191.179460][ T7084] veth1_vlan: left promiscuous mode [ 191.184930][ T7084] veth0_vlan: left promiscuous mode [ 191.415255][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 191.574944][ T7084] team0 (unregistering): Port device team_slave_1 removed [ 191.610808][ T7084] team0 (unregistering): Port device team_slave_0 removed [ 192.020811][T11567] +: renamed from syzkaller0 [ 192.170214][T11583] xfrm0 speed is unknown, defaulting to 1000 [ 192.284490][T11606] openvswitch: netlink: IP tunnel dst address not specified [ 192.325421][T10800] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.336777][T11606] netlink: 'syz.0.1311': attribute type 1 has an invalid length. [ 192.355603][T10800] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.382720][T11604] xfrm0 speed is unknown, defaulting to 1000 [ 192.441135][T11611] 8021q: adding VLAN 0 to HW filter on device bond2 [ 192.455148][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 192.530422][ T5916] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.555166][ T5916] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.567124][T11606] veth5: entered promiscuous mode [ 192.576735][T11606] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 192.842395][T11583] chnl_net:caif_netlink_parms(): no params data found [ 192.886172][T11629] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (254) [ 193.178082][ T5841] Bluetooth: hci3: command tx timeout [ 193.283252][T11583] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.313110][T11583] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.343203][T11583] bridge_slave_0: entered allmulticast mode [ 193.364261][T11583] bridge_slave_0: entered promiscuous mode [ 193.373731][T11583] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.397621][T11583] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.404856][T11583] bridge_slave_1: entered allmulticast mode [ 193.416973][T11583] bridge_slave_1: entered promiscuous mode [ 193.438368][T11658] __nla_validate_parse: 5 callbacks suppressed [ 193.438385][T11658] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1322'. [ 193.495180][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 193.550877][T11664] netlink: 'syz.3.1324': attribute type 21 has an invalid length. [ 193.564517][T11664] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1324'. [ 193.588401][T11583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.621288][T11583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.672584][T11667] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1324'. [ 193.742238][ T7084] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.783159][T11671] netlink: 'syz.2.1325': attribute type 12 has an invalid length. [ 193.823529][T11671] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1325'. [ 193.842530][T11583] team0: Port device team_slave_0 added [ 193.852855][T11583] team0: Port device team_slave_1 added [ 193.949746][T11583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.957132][T11583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.985888][T11583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.998756][T11583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.006924][T11583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.033797][T11583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.087472][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 194.101919][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 194.109868][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 194.121192][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 194.125732][T11583] hsr_slave_0: entered promiscuous mode [ 194.134665][T11583] hsr_slave_1: entered promiscuous mode [ 194.140764][ T5847] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 194.152316][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 194.179259][ T7084] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.234688][T11678] xfrm0 speed is unknown, defaulting to 1000 [ 194.301281][ T7084] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.412788][ T7084] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.472971][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.479469][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.535168][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 194.628558][T11694] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.653078][T11694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1333'. [ 194.796921][T11698] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1334'. [ 194.821592][T11698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1334'. [ 194.846759][ T7084] bridge_slave_1: left allmulticast mode [ 194.852487][ T7084] bridge_slave_1: left promiscuous mode [ 194.853482][T11703] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1334'. [ 194.865325][ T7084] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.874732][T11703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1334'. [ 194.895833][ T7084] bridge_slave_0: left allmulticast mode [ 194.908102][ T7084] bridge_slave_0: left promiscuous mode [ 194.921146][ T7084] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.259192][ T5847] Bluetooth: hci3: command tx timeout [ 195.431005][ T7084] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.444382][ T7084] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.456241][ T7084] bond0 (unregistering): Released all slaves [ 195.473684][T11678] chnl_net:caif_netlink_parms(): no params data found [ 195.568741][T11717] syzkaller0: entered promiscuous mode [ 195.575463][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 195.575696][T11717] syzkaller0: entered allmulticast mode [ 195.930500][T11678] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.949294][T11678] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.957820][T11678] bridge_slave_0: entered allmulticast mode [ 195.966730][T11678] bridge_slave_0: entered promiscuous mode [ 195.990214][ T7084] hsr_slave_0: left promiscuous mode [ 195.996815][ T7084] hsr_slave_1: left promiscuous mode [ 196.002506][ T7084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.010634][ T7084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.019607][ T7084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.027880][ T7084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.047487][ T7084] veth1_macvtap: left promiscuous mode [ 196.052990][ T7084] veth0_macvtap: left promiscuous mode [ 196.058775][ T7084] veth1_vlan: left promiscuous mode [ 196.064041][ T7084] veth0_vlan: left promiscuous mode [ 196.219255][ T5847] Bluetooth: hci2: command tx timeout [ 196.437236][ T7084] team0 (unregistering): Port device team_slave_1 removed [ 196.474285][ T7084] team0 (unregistering): Port device team_slave_0 removed [ 196.615264][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 196.854776][T11678] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.870861][T11678] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.878189][T11678] bridge_slave_1: entered allmulticast mode [ 196.884778][T11678] bridge_slave_1: entered promiscuous mode [ 196.892293][T11747] IPv6: Can't replace route, no match found [ 196.902096][T11583] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 196.966655][T11583] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 196.992046][T11749] netlink: 'syz.0.1346': attribute type 29 has an invalid length. [ 197.006712][T11678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.021480][T11583] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 197.037953][T11583] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 197.053768][T11678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.151863][T11754] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1348'. [ 197.164028][T11678] team0: Port device team_slave_0 added [ 197.182292][T11678] team0: Port device team_slave_1 added [ 197.269972][T11678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.278137][T11678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.305433][T11678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.318574][T11678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.326582][T11678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.353428][ T5847] Bluetooth: hci3: command tx timeout [ 197.359044][T11678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.382784][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.393047][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.483576][T11678] hsr_slave_0: entered promiscuous mode [ 197.503090][T11678] hsr_slave_1: entered promiscuous mode [ 197.512965][T11678] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.521719][T11678] Cannot create hsr debugfs directory [ 197.655183][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 197.701953][T11583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.763917][T11583] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.813585][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.820744][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.850495][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.857646][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.114459][T11789] netlink: 'syz.0.1358': attribute type 3 has an invalid length. [ 198.308739][ T5847] Bluetooth: hci2: command tx timeout [ 198.695249][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 199.419395][ T5847] Bluetooth: hci3: command tx timeout [ 199.735154][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 199.853948][T11583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.916953][T11678] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 199.949427][T11678] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 199.980525][T11814] mac80211_hwsim hwsim7 ÿ: renamed from wlan1 (while UP) [ 200.030903][T11678] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 200.063799][T11816] smc: adding net device pim6reg0 with user defined pnetid SYZ1 [ 200.104124][T11678] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 200.156003][T11824] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 200.192070][T11822] openvswitch: netlink: IP tunnel dst address not specified [ 200.356482][T11828] __nla_validate_parse: 1 callbacks suppressed [ 200.356500][T11828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1367'. [ 200.375897][ T5847] Bluetooth: hci2: command tx timeout [ 200.394294][T11678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.415434][T11828] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1367'. [ 200.432948][T11678] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.441265][T11832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1368'. [ 200.477690][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.484785][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.569256][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.576426][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.690190][T11583] veth0_vlan: entered promiscuous mode [ 200.722674][T11583] veth1_vlan: entered promiscuous mode [ 200.753712][T11843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1373'. [ 200.769310][T11843] bridge_slave_1: left allmulticast mode [ 200.775184][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 200.782743][T11843] bridge_slave_1: left promiscuous mode [ 200.789104][T11843] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.835862][T11843] bridge_slave_0: left allmulticast mode [ 200.852723][T11843] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.927386][T11843] bond0: (slave bridge0): Releasing backup interface [ 201.011125][T11849] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 201.018435][T11849] IPv6: NLM_F_CREATE should be set when creating new route [ 201.025741][T11849] IPv6: NLM_F_CREATE should be set when creating new route [ 201.071505][T11583] veth0_macvtap: entered promiscuous mode [ 201.132113][T11583] veth1_macvtap: entered promiscuous mode [ 201.204566][T11583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.231501][T11583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.261116][T11583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.275014][T11583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.285424][T11583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.296247][T11583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.309534][T11583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.322649][T11872] tipc: Enabling of bearer rejected, failed to enable media [ 201.342589][T11869] xfrm0 speed is unknown, defaulting to 1000 [ 201.356211][T11872] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1380'. [ 201.383634][T11583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.400061][T11583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.410125][T11583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.428170][T11583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.440554][T11583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.451241][T11583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.463204][T11583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.495846][ T5847] Bluetooth: hci3: command tx timeout [ 201.524133][T11678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.567012][T11583] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.590902][T11583] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.603822][T11583] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.612952][T11583] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.800175][T11678] veth0_vlan: entered promiscuous mode [ 201.815228][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 201.843414][T10800] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.866085][T10800] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.993019][T11678] veth1_vlan: entered promiscuous mode [ 202.037433][T11678] veth0_macvtap: entered promiscuous mode [ 202.053170][T11678] veth1_macvtap: entered promiscuous mode [ 202.072886][T11678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.094970][T11678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.106647][T11678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.119874][T11678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.130131][T11678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.141005][T11678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.151122][T11678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.161607][T11678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.173232][T11678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.200379][T11869] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1379'. [ 202.205205][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.251669][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.263944][T11678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.281138][T11678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.292282][T11678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.317671][T11678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.330022][T11678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.344078][T11678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.356369][T11678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.371548][T11678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.386553][T11896] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1384'. [ 202.413032][T11678] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.437307][T11896] x_tables: duplicate underflow at hook 1 [ 202.439048][T11678] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.454979][T11678] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.463771][ T5847] Bluetooth: hci2: command tx timeout [ 202.471791][T11678] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.480728][T11678] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.784911][T11906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1387'. [ 202.855161][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 202.910369][ T3443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.955143][ T3443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.010177][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.037081][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.143186][ T7084] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.253305][T11920] syzkaller0: entered promiscuous mode [ 203.259970][T11920] syzkaller0: entered allmulticast mode [ 203.307315][ T7084] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.896838][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 204.752804][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 204.770334][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 204.783965][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 204.793744][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 204.801820][ T5841] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 204.809487][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 204.935151][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 205.103948][ T7084] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.119376][T11933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1394'. [ 205.218742][T11937] xfrm0 speed is unknown, defaulting to 1000 [ 205.253560][ T7084] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.495463][ T7084] bridge_slave_1: left allmulticast mode [ 205.501158][ T7084] bridge_slave_1: left promiscuous mode [ 205.528670][ T7084] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.542533][ T7084] bridge_slave_0: left allmulticast mode [ 205.552709][ T7084] bridge_slave_0: left promiscuous mode [ 205.564224][ T7084] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.876865][T11974] openvswitch: netlink: Missing valid actions attribute. [ 205.890247][T11974] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.943885][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 205.955510][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 205.966673][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 205.976192][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 205.998327][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 206.013901][ T5847] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 206.023982][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 206.246283][ T7084] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.256844][ T7084] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.269975][ T7084] bond0 (unregistering): Released all slaves [ 206.488867][T11937] chnl_net:caif_netlink_parms(): no params data found [ 206.507383][T11975] xfrm0 speed is unknown, defaulting to 1000 [ 206.600491][T11986] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1407'. [ 206.727133][T11937] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.739458][T11937] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.746943][T11937] bridge_slave_0: entered allmulticast mode [ 206.753521][T11937] bridge_slave_0: entered promiscuous mode [ 206.771205][T11937] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.779831][T11937] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.787319][T11937] bridge_slave_1: entered allmulticast mode [ 206.794562][T11937] bridge_slave_1: entered promiscuous mode [ 206.855799][ T5841] Bluetooth: hci2: command tx timeout [ 206.969409][T11937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.000712][T11937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.015176][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 207.134278][T11937] team0: Port device team_slave_0 added [ 207.186936][T11937] team0: Port device team_slave_1 added [ 207.346028][ T7084] hsr_slave_0: left promiscuous mode [ 207.352032][ T7084] hsr_slave_1: left promiscuous mode [ 207.358724][ T7084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.366281][ T7084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.374229][ T7084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.381929][ T7084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.407415][ T7084] veth1_macvtap: left promiscuous mode [ 207.413079][ T7084] veth0_macvtap: left promiscuous mode [ 207.419122][ T7084] veth1_vlan: left promiscuous mode [ 207.424552][ T7084] veth0_vlan: left promiscuous mode [ 207.734580][T12028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1417'. [ 207.801930][T12030] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1417'. [ 207.881859][T12028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1417'. [ 207.894954][T12028] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1417'. [ 208.055146][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 208.102739][ T7084] team0 (unregistering): Port device team_slave_1 removed [ 208.141878][ T5841] Bluetooth: hci3: command tx timeout [ 208.185466][ T7084] team0 (unregistering): Port device team_slave_0 removed [ 208.936804][ T5841] Bluetooth: hci2: command tx timeout [ 209.006668][T11937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.013847][T11937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.051621][T11937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.065461][T11937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.072532][T11937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.095146][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 209.113336][T11937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.150494][T12032] wg2: entered promiscuous mode [ 209.155838][T12032] wg2: entered allmulticast mode [ 209.304922][T11937] hsr_slave_0: entered promiscuous mode [ 209.321765][T11937] hsr_slave_1: entered promiscuous mode [ 209.350693][T11975] chnl_net:caif_netlink_parms(): no params data found [ 209.807031][T12005] Set syz1 is full, maxelem 65536 reached [ 209.838169][T11975] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.865433][T11975] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.887188][T11975] bridge_slave_0: entered allmulticast mode [ 209.909382][T11975] bridge_slave_0: entered promiscuous mode [ 209.944098][T11975] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.968169][T11975] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.977041][T11975] bridge_slave_1: entered allmulticast mode [ 209.983732][T11975] bridge_slave_1: entered promiscuous mode [ 210.071921][ T7084] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.135224][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 210.144096][T12063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1424'. [ 210.168957][T11975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.171280][T12068] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1427'. [ 210.188150][T11975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.215618][ T5841] Bluetooth: hci3: command tx timeout [ 210.267586][ T7084] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.353999][T11975] team0: Port device team_slave_0 added [ 210.454206][ T7084] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.488510][T11975] team0: Port device team_slave_1 added [ 210.618743][T11975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.635141][T11975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.670399][T11975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.717947][ T7084] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.758598][T11975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.785378][T11975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.866582][T11975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.015665][ T5841] Bluetooth: hci2: command tx timeout [ 211.030037][T11975] hsr_slave_0: entered promiscuous mode [ 211.036685][T11975] hsr_slave_1: entered promiscuous mode [ 211.042862][T11975] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 211.050758][T11975] Cannot create hsr debugfs directory [ 211.131287][T12113] can: request_module (can-proto-0) failed. [ 211.132587][ T7084] bridge_slave_1: left allmulticast mode [ 211.144804][ T7084] bridge_slave_1: left promiscuous mode [ 211.153722][ T7084] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.162686][ T7084] bridge_slave_0: left allmulticast mode [ 211.171764][ T7084] bridge_slave_0: left promiscuous mode [ 211.177368][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 211.189693][ T7084] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.479595][ T7084] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.491316][ T7084] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.502799][ T7084] bond0 (unregistering): Released all slaves [ 211.512559][T11937] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 211.583873][T11937] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 211.626887][T11937] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 211.700201][T12122] netlink: 'syz.2.1442': attribute type 11 has an invalid length. [ 211.720265][T11937] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 211.776683][T12128] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1443'. [ 212.065629][ T7084] hsr_slave_0: left promiscuous mode [ 212.085652][ T7084] hsr_slave_1: left promiscuous mode [ 212.091475][ T7084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.115398][ T7084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.132176][ T7084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.146970][ T7084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.215372][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 212.237173][ T7084] veth1_macvtap: left promiscuous mode [ 212.242731][ T7084] veth0_macvtap: left promiscuous mode [ 212.256135][ T7084] veth1_vlan: left promiscuous mode [ 212.261531][ T7084] veth0_vlan: left promiscuous mode [ 212.295368][ T5841] Bluetooth: hci3: command tx timeout [ 212.374745][T12165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1451'. [ 212.681899][ T7084] team0 (unregistering): Port device team_slave_1 removed [ 212.724179][ T7084] team0 (unregistering): Port device team_slave_0 removed [ 213.095478][ T5841] Bluetooth: hci2: command tx timeout [ 213.111872][T12167] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1451'. [ 213.255174][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 213.318866][T11937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.450889][T11937] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.513943][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.521096][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.564136][T12195] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1460'. [ 213.581152][T12194] netlink: 'syz.2.1459': attribute type 32 has an invalid length. [ 213.590085][T12194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1459'. [ 213.610182][ T5916] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.617362][ T5916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.660454][T12195] vlan1: entered promiscuous mode [ 213.680886][T12194] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 213.763432][T11937] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 213.777041][T11937] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 213.955932][T11937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.014171][T11975] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 214.059303][T11975] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 214.114673][T11975] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 214.137815][T11975] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 214.217409][T12223] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1465'. [ 214.254064][T12230] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1466'. [ 214.295245][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 214.317787][T12231] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1467'. [ 214.375293][ T5841] Bluetooth: hci3: command tx timeout [ 214.386543][T11975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.451790][T11975] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.502520][ T3443] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.509682][ T3443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.548537][T10802] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.555648][T10802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.566635][T12248] netdevsim netdevsim3 : renamed from netdevsim0 [ 214.588801][T12248] netdevsim netdevsim3 : left promiscuous mode [ 214.604076][T11937] veth0_vlan: entered promiscuous mode [ 214.667007][T11937] veth1_vlan: entered promiscuous mode [ 214.712108][T11937] veth0_macvtap: entered promiscuous mode [ 214.756541][T11937] veth1_macvtap: entered promiscuous mode [ 214.797003][T12250] sctp: [Deprecated]: syz.0.1472 (pid 12250) Use of struct sctp_assoc_value in delayed_ack socket option. [ 214.797003][T12250] Use struct sctp_sack_info instead [ 214.807475][T11937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.833713][T11937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.843828][T11937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.870795][T11937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.881077][T11937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.895235][T11937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.909469][T11937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.930676][T12263] Oops: general protection fault, probably for non-canonical address 0xdffffc00000a2403: 0000 [#1] PREEMPT SMP KASAN PTI [ 214.943275][T12263] KASAN: probably user-memory-access in range [0x0000000000512018-0x000000000051201f] [ 214.952811][T12263] CPU: 1 UID: 0 PID: 12263 Comm: syz.3.1474 Not tainted 6.13.0-syzkaller-09710-ga1300691aed9 #0 [ 214.963206][T12263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 214.973251][T12263] RIP: 0010:smc_diag_dump_proto+0x6d9/0x3270 [ 214.979237][T12263] Code: 80 3c 2c 00 74 08 48 89 df e8 c3 c5 85 f6 48 89 5c 24 30 48 8b 1b 48 85 db 0f 84 2d 02 00 00 48 83 c3 18 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 98 c5 85 f6 48 8b 44 24 28 4c 8d [ 214.998833][T12263] RSP: 0018:ffffc9000438ee80 EFLAGS: 00010206 [ 215.004899][T12263] RAX: 00000000000a2403 RBX: 0000000000512018 RCX: ffff88801f763c00 [ 215.012857][T12263] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 [ 215.020813][T12263] RBP: ffffc9000438f310 R08: ffffffff89cd1d32 R09: 1ffff1100f5fd00b [ 215.028772][T12263] R10: dffffc0000000000 R11: ffffed100f5fd00c R12: 1ffff1100f5fd0ab [ 215.036740][T12263] R13: dffffc0000000000 R14: ffff88807afe8000 R15: ffff888058fa8010 [ 215.044696][T12263] FS: 00007fe366b036c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 215.053608][T12263] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 215.060179][T12263] CR2: 000020000000e000 CR3: 000000003266c000 CR4: 00000000003526f0 [ 215.068141][T12263] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 215.076096][T12263] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 215.084052][T12263] Call Trace: [ 215.087322][T12263] [ 215.090241][T12263] ? __die_body+0x5f/0xb0 [ 215.094560][T12263] ? die_addr+0xb0/0xe0 [ 215.098704][T12263] ? exc_general_protection+0x3dd/0x5d0 [ 215.104247][T12263] ? asm_exc_general_protection+0x26/0x30 [ 215.109958][T12263] ? sock_diag_save_cookie+0x42/0xd0 [ 215.115235][T12263] ? smc_diag_dump_proto+0x6d9/0x3270 [ 215.120598][T12263] ? __lock_acquire+0x1397/0x2100 [ 215.125979][T12263] ? __pfx_smc_diag_dump_proto+0x10/0x10 [ 215.131598][T12263] ? __lruvec_stat_mod_folio+0x7d/0x300 [ 215.137135][T12263] ? __lruvec_stat_mod_folio+0x7d/0x300 [ 215.142664][T12263] ? __phys_addr+0xba/0x170 [ 215.147154][T12263] ? __kasan_kmalloc_large+0x8a/0xa0 [ 215.152426][T12263] ? rcu_is_watching+0x15/0xb0 [ 215.157175][T12263] ? rcu_is_watching+0x15/0xb0 [ 215.161936][T12263] ? trace_kmalloc+0x1f/0xd0 [ 215.166511][T12263] ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0 [ 215.173083][T12263] ? __build_skb_around+0x245/0x3d0 [ 215.178272][T12263] ? __alloc_skb+0x28f/0x440 [ 215.182848][T12263] ? __pfx___alloc_skb+0x10/0x10 [ 215.187776][T12263] smc_diag_dump+0x59/0xa0 [ 215.192175][T12263] netlink_dump+0x64d/0xe10 [ 215.196674][T12263] ? __pfx_netlink_dump+0x10/0x10 [ 215.201694][T12263] __netlink_dump_start+0x5a2/0x790 [ 215.206885][T12263] smc_diag_handler_dump+0x1ab/0x250 [ 215.212155][T12263] ? __pfx_smc_diag_handler_dump+0x10/0x10 [ 215.217943][T12263] ? __pfx_smc_diag_dump+0x10/0x10 [ 215.223041][T12263] ? sock_diag_lock_handler+0x19/0x280 [ 215.228493][T12263] ? __pfx_smc_diag_handler_dump+0x10/0x10 [ 215.234286][T12263] sock_diag_rcv_msg+0x3dc/0x5f0 [ 215.239208][T12263] netlink_rcv_skb+0x1e3/0x430 [ 215.243960][T12263] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 215.249404][T12263] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 215.254683][T12263] ? netlink_deliver_tap+0x2e/0x1b0 [ 215.259870][T12263] netlink_unicast+0x7f6/0x990 [ 215.264631][T12263] ? __pfx_netlink_unicast+0x10/0x10 [ 215.269902][T12263] ? __virt_addr_valid+0x45f/0x530 [ 215.275001][T12263] ? __phys_addr_symbol+0x2f/0x70 [ 215.280013][T12263] ? __check_object_size+0x47a/0x730 [ 215.285291][T12263] netlink_sendmsg+0x8e4/0xcb0 [ 215.290052][T12263] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.295324][T12263] ? aa_sock_msg_perm+0x91/0x160 [ 215.300251][T12263] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.305524][T12263] __sock_sendmsg+0x221/0x270 [ 215.310190][T12263] ____sys_sendmsg+0x52a/0x7e0 [ 215.314943][T12263] ? __pfx_____sys_sendmsg+0x10/0x10 [ 215.320217][T12263] ? __fget_files+0x2a/0x410 [ 215.325138][T12263] ? __fget_files+0x2a/0x410 [ 215.329713][T12263] __sys_sendmsg+0x269/0x350 [ 215.334294][T12263] ? __pfx___sys_sendmsg+0x10/0x10 [ 215.339405][T12263] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 215.345719][T12263] ? do_syscall_64+0x100/0x230 [ 215.350473][T12263] ? do_syscall_64+0xb6/0x230 [ 215.355139][T12263] do_syscall_64+0xf3/0x230 [ 215.359630][T12263] ? clear_bhb_loop+0x35/0x90 [ 215.364299][T12263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.370180][T12263] RIP: 0033:0x7fe365d8cde9 [ 215.374588][T12263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.394207][T12263] RSP: 002b:00007fe366b03038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 215.402605][T12263] RAX: ffffffffffffffda RBX: 00007fe365fa6080 RCX: 00007fe365d8cde9 [ 215.410567][T12263] RDX: 0000000000000600 RSI: 0000200000000540 RDI: 000000000000002b [ 215.418521][T12263] RBP: 00007fe365e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 215.426478][T12263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 215.434431][T12263] R13: 0000000000000000 R14: 00007fe365fa6080 R15: 00007fff2c7bef18 [ 215.442425][T12263] [ 215.445431][T12263] Modules linked in: [ 215.450761][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 215.458668][T12263] ---[ end trace 0000000000000000 ]--- [ 215.464145][T12263] RIP: 0010:smc_diag_dump_proto+0x6d9/0x3270 [ 215.472636][T12263] Code: 80 3c 2c 00 74 08 48 89 df e8 c3 c5 85 f6 48 89 5c 24 30 48 8b 1b 48 85 db 0f 84 2d 02 00 00 48 83 c3 18 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 98 c5 85 f6 48 8b 44 24 28 4c 8d [ 215.492750][T12263] RSP: 0018:ffffc9000438ee80 EFLAGS: 00010206 [ 215.499147][T12263] RAX: 00000000000a2403 RBX: 0000000000512018 RCX: ffff88801f763c00 [ 215.507275][T12263] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 [ 215.515544][T12263] RBP: ffffc9000438f310 R08: ffffffff89cd1d32 R09: 1ffff1100f5fd00b [ 215.523652][T12263] R10: dffffc0000000000 R11: ffffed100f5fd00c R12: 1ffff1100f5fd0ab [ 215.531736][T12263] R13: dffffc0000000000 R14: ffff88807afe8000 R15: ffff888058fa8010 [ 215.539711][T12263] FS: 00007fe366b036c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 215.548835][T12263] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 215.555424][T12263] CR2: 000020000000e000 CR3: 000000003266c000 CR4: 00000000003526f0 [ 215.563381][T12263] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 215.571370][T12263] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 215.579869][T12263] Kernel panic - not syncing: Fatal exception [ 215.586225][T12263] Kernel Offset: disabled [ 215.590532][T12263] Rebooting in 86400 seconds..