last executing test programs: 22.49830768s ago: executing program 2: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x16, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8}]}], {0x14}}, 0x64}}, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000080)={'ah\x00'}, &(0x7f0000000140)=0x1e) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)={0x58, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "cabee339084eeef16f162471f4"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_MODE={0x5}]}]}, 0x58}}, 0x0) 22.080469691s ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) 21.918302807s ago: executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast1}, 0x10) connect$inet(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) write$binfmt_misc(r0, &(0x7f0000001b40)=ANY=[], 0x3a7) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmmsg$inet(r0, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000940)="4c053425c292a724cee5e7b46297ca7d4dd9c5097c85f9fc9719785f26f00334e5fad57d1c8ae64a8242805a4a2370a9ec422947c030cad8170e303883653e41bbfe71ae3a83c1bc83680a503d59fb2481f399a0952a433a8bb92dff8721b37ce194fea8c022084bbf8e19e008b0013e41f4ba222329d48d0081470c92d2652e74b7b0dbae718f8b789a64619b6486f8c30f365473cf56b6f6b92d040de77ff8cb16220c6b3c3c0c0ebeddbfda2da6a92e9ba05c41f7317cfad58e2e6988fa8e3fe867f204f02392b909aed27efb8266cbb47e69c18296b6b512ad958b551358effc67c2eeb062785f44c12182cacae686b129c239384122eb9a5842337cd3cc061ce3ba7f63fede1c9224bddec74124202d3f1d828e31fb838a6fe4064c8c3b0ceb08a8a05d1f1a232a019106204d20ccfa32f1058a5bca0f946dd1efb0a6305300f1214e0d0fc11d8631b9a0d4732c74d5a3e9f82fd7ddc809181ac711cd0a5e9002000000f669c13d237891fed2842f48dd04865a846fd157a614476a6882f0661ac9bdf9d010a956df9e61254c7eaeaf409c505bc23128c2bc37a8dfa65a9af9be973fb70e4d68235f85cdcb362f52c932e7da7ff2e2df339f90f2ae62c679516c8b3a859ceb52754aa1abecdf51ee7f64b4fcc769a8ab50d45f37a73d4f3eec5057a74060cb792faad971835835b51e422d59fbaf35273c8765180666cd3d52b4b7922eb245602d217a066b708598916296d06bab7ece49abc0e743e06270e108708e25b2a8cfec9b33f6f97a8377c2f2a151a45db18887170924ce84d1991d8b92e3e3019a6b0c5a9f1cc8fbfafff99353ea8505b00cedd237eec69605d398a388d1ac916fa84557f1e0d08e52035b27ff166dbbe76df5221d4d0e1b5d6a7aca1f84e1a5a8e07a43e83d8f2a994cc97e28faf57c354eea12dd0f1060cf406a33a9a7a1991c2d4d44afd04975d19dd48477c43f3f2f01e405f384768b58389e88c100ba87a2e41e75944b15d28c9a0651edd246176f5181e90252879b50e07af7ff185d62ce2ea314e4958c1a0ca6f5e30985ac4e474b71fbc0fc7eef9472c22d010a18d5dddbd06b230675475efeba4d8a46c0983b40ef6d09e1f87060a82a4b6b45a2e9a6dc0a31fce06aa9ac17ee4bcaf225dc67bb7d8226890a52697fdf85e152b41dbcf64aa999d4eeb50a82c2dfc4ca2506ec34c44e8e1bef940216b71f85966a0e756edd1b1279d84e799e5eda5cd5f30aac59cf8e3b36f50b87a70c20b417cb23116e6d5654c8bebf33e20764112583a7d5e0222f71a879c85ce6937e8568b49d2ad833dee1103397837a5049eb45d3747a7d36ef15bb3a6fc17b0cee9bf1ba004f8e0f665494393357ee8d92a19870776a91487b95559a55d1c68c9262064327182ca292841d5a2dc8e8a101459293745136ae5ca2d1e9520fe515522e1cbeefc6d78786f115c5c0ed21c02c829b68e33bb7c57b1ed285797fca00819369979b", 0x427}], 0x1}}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f00000003c0)="bbd6bb6566ca29d951d62c6405f4be50684ccbca15a245c087c6c4c8b7af5360efa41d82212dac0fa12bc11b8594bdacf68e42a8455ecd77a305480c374296de141f922a205669d7da8ebcbe1b2a4cdc02f906526fa6ad89ce61e422091d0cce48ecc87608d2c2e9e68767e545aa94636db0a5a72ab117c63edc93c1b4b573cf5c0f0aa6edb30e8d15b4a1b56ce24a35bf55d54c49cc8322246476662d", 0x9d}, {&(0x7f0000000380)="41b39d1b73b797643bfe3ed9890a7f1b4b39c53917d157fa38e2686a060e4bf3ad5a3cdd1637430c6f5e35cd6d95c649daf95bb42bc7f02a66644cbfa17ed502", 0x40}, {&(0x7f00000004c0)="e03607fdb724abcd9885438b1ac3d3a9a0250a7b43fd42350fb5a2022df3d15cf67b269a26b7aeb85925e4fc27397e0aa69d7ff6d23472747283a7399f21a3cc30380f13adf4c27c0f7a35d1f475198d1afc5a292a8e911afbcf422f4fd32c5cd649e8b101d615cc01c9dfa43c704777796cda22b9a08759d694fbb72fcba8a0aae9e0899ec738831a1b3d3a08a0972311ac31a6fedefd60b84fe28050c3b8646a69ba16feb1c71a24613d9376cba7a19a0726d589500cea8d12bf2fdc0606a76e504eafb750714b74a58a79260dab", 0xcf}, {&(0x7f0000000840)="5ae3febd9f021400564f6fb579a81a6b557f297cf71fd2ebd8b1cbe9374aaf6dd004b7f7a625c80a34ee6fb91c1e9149b9387c7299b85a1ba33f4ce1555a60f5ba23cb9c81125f8c755d1ed3ef92a0bad9aff94caea5c0a46834ba99d170cb8ad6ee0fc0e785febddc598efd7dcde544eaa77fd3da6841479f33aa8bc0085520cb4e52ed32bbe2d92f82ce45477e805ed9f8c299ceaa37c365ebca227850b5a7d4df518ff467b64c3438af36182270a6cb4b716681b54d56cab2936be9348f2d3e8496", 0xc3}], 0x4}}], 0x2, 0x0) 21.854592593s ago: executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_virt_wifi\x00'}) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x50}, {&(0x7f0000000380)="0a906a376d56c61a409aaef2e55a4e2a803d71064aa4f4a5841258e08a0da798cf2baeddbe43ba41ed8d0602c35af039a7dffa629b8928707cc4504e1645e8bc241e8d98385cff108396437b6a1869a2894f569d6a1e022d6699e93a861a1600efbd1bb84eb2a1eea8dca477fdf3709a889bbfaf2349768c1e63ef715486855bcb1854115318bcdc909c598ce9d702e4b7758038c8f0f048b3a8ba1215956600f67a744809956a3a3d688f0f779605cc7bca4c86135cfe4df8c05a9180d5e89aeae6ecc2f89dd4ae44a944e45f9880ca5c669a38eb7b2e5c3f485627bafb94558a14b1", 0xe3}, {&(0x7f0000000680)="4f810e163151800977f2d48bd3e009072e356595392a47801c82364f0cb1b308fdd85b262de06614e2c8c603f76a06d9ec9f5ccb43d9dbab3ef10def9131b23ec3dcd7832d39413eafe9aadbbbbf1872308cac68ec0db52866de0bd309f5bf3b59922855164ebd2223e4621efa8105dd7ef08bcbfaeab64e659529fe4ae0c290f876faa0a264389e0c1184a9844aeac100e26dec3f741487ede710bf6f67e723955633fa6178b2a96358ff66f9fb560968330f46ab48e3e50dbfdfbb46b6b51042b7ea41eaf8b1", 0xc7}, {&(0x7f0000000180)="91449038b49fd87167e2b704cc6de8f9d7b10ee78456837caa80f0aaa0f0bcc24ac688c29871bd14d4dc5c0b21802ea51f832c517a567c1f66a16c", 0x3b}, {&(0x7f0000000fc0)="04e1afb036d0da0348fa5e1e7048f6e3aeb7ed04f50ace4aecc38e74cbef1c8a027ede2ab1669a93b10b380f993483036870d341a2dd1a673189704c2dc11f4c5b04bf3bb2ae4476ad1117299a03d880dceb847b3f5056601d7ac7087624dd49f09f330296f8b53453052e75cd5568d8cbf7be8b3abedf440478e6d39b059585b7357d8852802d72df36db3c3387438ea503ed7074ef03ce05c094c70b210af01093121a834977be9a6588778dfe32575619ebca52c116604c87960f3658b1d4b83da950d37c7112c7", 0xc9}, {&(0x7f0000000ec0)="acfddfeb568e804e0b5ab5f83d07719596603130fae2a2df9af24530264b87db9ed8dcdb544d4eb02d6945e22464e61a9fbbf5426b9f30c821b48296a9f7c81bac60592b333f1f1840454870081575296bf75b53e2fbafae5e868ba33386ae75618ee8b95eb0c3886e96c533147b689faad220fe31c5b01b98ca9816fc871385fd80dae79bdd12d56d032e4eee9fe6a2fd7a0de0ae11511ab46a98d77c9fb0171428d8e546c9fa5a30775fca171ccc326d375c42c46a5489ce13998b83f585d664cdb7d448940d00b58cc26c22c9e0b6f8f29fb5be31af565d82a42b35e3cb68d101e1464aa2bc6831d2069ae27fc7a6710e040fd546a5b6c4", 0xf9}], 0x6, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000240)=""/214, 0xd6}, {&(0x7f0000000a00)=""/242, 0xf2}, {&(0x7f0000001140)=""/4055, 0xfd7}, {&(0x7f00000007c0)=""/191, 0xbf}, {&(0x7f0000000500)=""/217, 0xd9}, {&(0x7f00000000c0)=""/42, 0x2a}, {&(0x7f0000000b00)=""/210, 0xd2}, {&(0x7f0000000600)=""/117, 0x75}, {&(0x7f0000000c00)=""/130, 0x82}, {&(0x7f0000000340)=""/48, 0x30}, {&(0x7f0000000140)=""/59, 0x3b}], 0xb}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r1) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0xb, 0x0, [@broadcast, @broadcast]}, @end]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_RATE_ENABLE={0x8, 0x5, 0xf0ffffff}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0xfffffffc}]}}]}, 0x40}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff05000300000000000500030080ffffff0500030005000000080002"], 0x50}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000006604000008000300", @ANYRES32=r8, @ANYBLOB="0800b70004000000080026009409"], 0x4c}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000980)={0x70, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_FRAME={0x4c, 0x33, @probe_response={{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 5.730331307s ago: executing program 0: connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb0100180000000000000051ffffff0876000005000000005f2e0000cda947777e53b352b0a35e442b84d136bc0a5ef053c90e42ab208e45fdd0d62812a81fd674a0025db64c53bc08e4db0324a4b79ee602c278cbfc8ac9c1ea32639b5dbfbb4e17065a68307c710f125486cf6d8ef948df0000"], 0x0, 0x1d, 0xfffffffffffffd52, 0xfffffffe, 0xffffffff}, 0x20) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x0, &(0x7f0000000200)=0x6) write$binfmt_misc(r2, &(0x7f0000000740)=ANY=[], 0xfffffc8f) splice(r1, 0x0, r4, 0x0, 0x10000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000000c0)='cpuset.mems\x00', 0x2, 0x0) r9 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="020027bd7000fcdbdf251500000008000300", @ANYRES32=r10, @ANYBLOB="0a001a00ffffffffffff00000a001a0008021100000000000a001a00ffffffffffff0000"], 0x40}, 0x1, 0x0, 0x0, 0x20000081}, 0x4000) r11 = socket(0x0, 0x3, 0x0) sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f0000000780)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4204000}, 0xc, &(0x7f0000000580)={&(0x7f0000000700)={0x7c, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010100}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff7}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv_slave_0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x8060) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$NL80211_CMD_GET_KEY(r11, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="58000000c13c89ade7991a38beb7760ae36c64f500ff8984d946e7008a6c9fdd0b540ca4e59e932c0b861e39222e934ff808f854a8ee42feea63e34807dbfc46f4f1b8c18c", @ANYRES16=r6, @ANYBLOB="00082cbd7000fbdbdf25090000000c009900040000005f0000000400280008003700020000000800090005ac0f000500080000000000110007001233ade245336124696d6321fb0000000500080004000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000881}, 0x0) r12 = socket(0xa, 0x3, 0x3a) r13 = accept$ax25(r11, &(0x7f00000003c0)={{0x3, @default}, [@bcast, @default, @null, @bcast, @null, @default, @null, @null]}, &(0x7f0000000440)=0x3b) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000480)=0x0) ioctl$SIOCAX25DELUID(r13, 0x89e2, &(0x7f00000004c0)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, r14}) setsockopt$inet6_int(r12, 0x29, 0xd1, &(0x7f0000000040), 0x4) 5.052317065s ago: executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x829a, 0x4) 4.8998174s ago: executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304, 0x38}, "837ad552eed22b08", "e20000000000000010000000002000", '\x00', "d647cb0002ff00"}, 0x28) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x11a, 0x4, 0x0, 0x0) 4.763339264s ago: executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0xd0, 0x111, 0x4b4, 0xd0, 0xd4feffff, 0x2f8, 0x20a, 0x278, 0x2f8, 0x278, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [], [], 'veth1_to_team\x00', 'team0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28}}, {{@uncond, 0x0, 0xd8, 0x200, 0x0, {}, [@common=@frag={{0x30}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:dhcpd_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) 4.742954742s ago: executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110960000000000040f0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0x3e) 4.609630453s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000feff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x6, 0x101, 0x82, 0x2020}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="00000000130002000018000014000100ee00"/32], 0x38}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x6, 0x4, 0x4001}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) epoll_create1(0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'wlan1\x00', &(0x7f0000000100)=@ethtool_gstrings={0x1b, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010037085e5bd157be59150000000c00018008000100", @ANYRES16=r4], 0x20}}, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x20001400) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000b00)={0x44, r8, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}]}, 0x44}}, 0x0) 2.029435548s ago: executing program 3: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000240)=0x3, 0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0x2a979d) ioctl$SIOCSIFHWADDR(r0, 0x401c5820, &(0x7f0000000080)={'macvlan1\x00', @broadcast}) sendmsg$nl_route_sched(r0, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=@deltaction={0x180, 0x31, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0x14, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x352b04eb}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x20}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0x14, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x88, 0x1, [{0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x14, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x80}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0xc}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@ipv4, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x3c}, 0x2, @in=@multicast1, 0x0, 0x1}}, 0xe8) 1.988853336s ago: executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) r1 = socket$inet_sctp(0x2, 0x403ebb15d7bd672a, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000200)={0x0, 0xbb, "454dce0497aa41dd24c628bc23452535035c672c68283fc2afecd3bb07a12cc20d1a52996a3d61579cb6e9500c7f828a44173c0bce80414f4a480e9b8b2d2f7e28a885caf858af8f85bef7425f516a69aad603836ee397636378f710c05a17191c2dd1d3097b08140f6074c079c60fb0cdae396aafa65ac3afa96c99b1a37c97b1147a537c431f761f82c9a382359d5f6d0f37651964a5146aef627caf7e0702a8eee9891e19adf5aee32922eb076076af8c762aa7eb6ed056b007"}, &(0x7f0000000040)=0xc3) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) r2 = socket(0x11, 0x3, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000140)={{}, 0x0, 0x0, @inherit={0x70, 0x0}, @name="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"}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000011c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e6174001400048008000140000000000800", @ANYRES32=r2], 0xa4}, 0x1, 0x0, 0x0, 0x48090}, 0x8840) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000700), 0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, 0x0, 0x0) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x0) 1.914024629s ago: executing program 4: r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x829a, 0x4) 1.64929533s ago: executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000cc0)={0x2c, r0, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5}]}]}, 0x2c}}, 0x0) 1.507598306s ago: executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0xd0, 0x111, 0x4b4, 0xd0, 0xd4feffff, 0x2f8, 0x20a, 0x278, 0x2f8, 0x278, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [], [], 'veth1_to_team\x00', 'team0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28}}, {{@uncond, 0x0, 0xd8, 0x200, 0x0, {}, [@common=@frag={{0x30}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:dhcpd_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) 1.497098943s ago: executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @local}], 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x76, &(0x7f00000001c0)={r4}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000040)={r4, 0x8}, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_GROUP={0xc, 0x2, [{0x0, 0x0, 0x2}]}]}, 0x24}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xffff57da, 0x0, 0x0, 0x0, 0x115}, 0x9c) 1.409485413s ago: executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000240)=0x3, 0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0x2a979d) ioctl$SIOCSIFHWADDR(r0, 0x401c5820, &(0x7f0000000080)={'macvlan1\x00', @broadcast}) socket$packet(0x11, 0x0, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0xc}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@ipv4, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x3c}, 0x2, @in=@multicast1, 0x0, 0x1}}, 0xe8) 1.024375026s ago: executing program 0: connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb0100180000000000000051ffffff0876000005000000005f2e0000cda947777e53b352b0a35e442b84d136bc0a5ef053c90e42ab208e45fdd0d62812a81fd674a0025db64c53bc08e4db0324a4b79ee602c278cbfc8ac9c1ea32639b5dbfbb4e17065a68307c710f125486cf6d8ef948df0000"], 0x0, 0x1d, 0xfffffffffffffd52, 0xfffffffe, 0xffffffff}, 0x20) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x0, &(0x7f0000000200)=0x6) write$binfmt_misc(r2, &(0x7f0000000740)=ANY=[], 0xfffffc8f) splice(r1, 0x0, r4, 0x0, 0x10000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000000c0)='cpuset.mems\x00', 0x2, 0x0) r9 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="020027bd7000fcdbdf251500000008000300", @ANYRES32=r10, @ANYBLOB="0a001a00ffffffffffff00000a001a0008021100000000000a001a00ffffffffffff0000"], 0x40}, 0x1, 0x0, 0x0, 0x20000081}, 0x4000) r11 = socket(0x0, 0x3, 0x0) sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f0000000780)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4204000}, 0xc, &(0x7f0000000580)={&(0x7f0000000700)={0x7c, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010100}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff7}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv_slave_0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x8060) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$NL80211_CMD_GET_KEY(r11, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="58000000c13c89ade7991a38beb7760ae36c64f500ff8984d946e7008a6c9fdd0b540ca4e59e932c0b861e39222e934ff808f854a8ee42feea63e34807dbfc46f4f1b8c18c", @ANYRES16=r6, @ANYBLOB="00082cbd7000fbdbdf25090000000c009900040000005f0000000400280008003700020000000800090005ac0f000500080000000000110007001233ade245336124696d6321fb0000000500080004000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000881}, 0x0) r12 = socket(0xa, 0x3, 0x3a) r13 = accept$ax25(r11, &(0x7f00000003c0)={{0x3, @default}, [@bcast, @default, @null, @bcast, @null, @default, @null, @null]}, &(0x7f0000000440)=0x3b) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000480)=0x0) ioctl$SIOCAX25DELUID(r13, 0x89e2, &(0x7f00000004c0)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, r14}) setsockopt$inet6_int(r12, 0x29, 0xd1, &(0x7f0000000040), 0x4) 935.008504ms ago: executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110960000000000040f0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x3e) 884.027213ms ago: executing program 4: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000240)=0x3, 0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0x2a979d) sendmsg$nl_route_sched(r0, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=@deltaction={0x180, 0x31, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0x14, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x352b04eb}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x20}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0x14, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x88, 0x1, [{0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x14, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x80}, 0x10) socket$packet(0x11, 0x0, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0xc}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@ipv4, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x3c}, 0x2, @in=@multicast1, 0x0, 0x1}}, 0xe8) 839.609402ms ago: executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x13, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x278, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x230, 0x278, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_batadv\x00', {0x0, 0x7ff, 0x0, 0x0, 0x0, 0x49, 0x1000}}}, @common=@inet=@ipcomp={{0x30}, {[], 0xb}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@inet=@l2tp={{0x30}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) 737.538407ms ago: executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@deltfilter={0x4c, 0x2d, 0x100, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x6, 0xd}, {0x0, 0x7}, {0x9, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x8}}, @TCA_RATE={0x6, 0x5, {0x1f}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_RATE={0x6, 0x5, {0x7e, 0x5}}, @TCA_RATE={0x6, 0x5, {0x3, 0x1f}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001740)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xe}, {0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x10, 0x2, [@TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000005c0)={'vxcan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r5, 0x89a3, &(0x7f0000000000)='bridge0\x00') 717.033139ms ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e21, @broadcast}}, 0x1, 0x0, 0x0, 0x0, 0x32}, 0x9c) (async) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) shutdown(r2, 0x1) 572.333878ms ago: executing program 1: r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x829a, 0x4) 370.743074ms ago: executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x2c}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x84, @private, 0x0, 0x1, 'sh\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x200000001, 'ovf\x00'}, 0x2c) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x18) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000048c0)={0x0, 0x0}, &(0x7f0000006780)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000067c0)={{{@in=@broadcast, @in=@multicast2, 0x4e20, 0x0, 0x4e20, 0x8000, 0x2, 0xa0, 0x0, 0x33, 0x0, r4}, {0x1000, 0x3, 0x7, 0x400, 0x9, 0x7fff, 0x8, 0xffffffffffffff52}, {0x8000000000000000, 0x8000000000000001, 0x4, 0xffffffffffff0001}, 0x8, 0x6e6bb7, 0x1, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d6, 0x33}, 0xa, @in=@multicast1, 0x3504, 0x4, 0x0, 0x0, 0x5c1, 0xfffffff8, 0x401}}, 0xe8) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000300)={0x20, 0x4, 0xff, 0x5, 0x0, 0x2, 0x8, 0x20, 0xfb, 0x81, 0x82, 0x0, 0x94, 0xf7}, 0xe) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000180)={0x3, 0x5, 0x9, 0xda, 0x0, 0x16, 0x20, 0x7e, 0x3f, 0x3, 0x7f, 0x7, 0xa0, 0x6}, 0xe) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x1, 0x5}, &(0x7f0000000040)=0xc) shutdown(r3, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r3}) recvmmsg(r3, &(0x7f0000002300)=[{{&(0x7f0000000140)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000740)=[{&(0x7f00000001c0)=""/35, 0x23}, {0x0}, {&(0x7f0000000240)=""/60, 0x3c}, {&(0x7f0000000280)=""/26, 0x1a}, {&(0x7f00000002c0)=""/221, 0xdd}, {&(0x7f00000003c0)=""/236, 0xec}, {&(0x7f0000000580)=""/196, 0xc4}], 0x7, &(0x7f0000000bc0)=""/179, 0xb3}, 0x7}, {{&(0x7f0000000880)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000002980)=""/170, 0xaa}, 0x9}, {{&(0x7f0000000b40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000002180)=[{&(0x7f0000001dc0)=""/138, 0x8a}, {&(0x7f0000000ac0)=""/65, 0x41}, {&(0x7f0000001ec0)}, {&(0x7f0000001f00)=""/226, 0xe2}, {&(0x7f0000002000)=""/237, 0xed}, {&(0x7f0000000900)=""/23, 0x17}, {&(0x7f0000002140)=""/21, 0x15}], 0x7, &(0x7f0000002a40)=""/215, 0xd7}, 0x2}], 0x5c, 0x10160, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r3, 0x8008f513, &(0x7f0000000040)) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000006b80)={&(0x7f0000006a40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x84, 0x84, 0x5, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3, 0x5}}, @const={0x8, 0x0, 0x0, 0xa, 0x5}, @restrict={0x5, 0x0, 0x0, 0xb, 0x3}, @typedef={0xb, 0x0, 0x0, 0x8, 0x1}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xfffffffd}, {0xb, 0x2}, {0x0, 0x4}]}, @struct={0xb, 0x2, 0x0, 0x4, 0x0, 0x3, [{0xf, 0x3, 0x5}, {0x5, 0x3, 0x4}]}]}, {0x0, [0x5f, 0x0, 0x5f]}}, &(0x7f0000000680)=""/125, 0xa1, 0x7d, 0x1, 0x8000}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000006f00)={0xffffffffffffffff, 0xe0, &(0x7f0000006e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000006c40)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f0000006c80)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000006cc0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8f, &(0x7f0000006d00)=[{}], 0x8, 0x10, &(0x7f0000006d40), &(0x7f0000006d80), 0x8, 0xd, 0x8, 0x8, &(0x7f0000006dc0)}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000006fc0)={{0x1, 0xffffffffffffffff}, &(0x7f0000006f40), &(0x7f0000006f80)}, 0x20) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000007000)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x10df, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000006e40)=@base={0x5, 0x5, 0x2, 0xc2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000012c0)={{r10}, &(0x7f0000000200), &(0x7f0000000240), 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000007140)={0x6bda4d5cccc96e0, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000030000000000000000020000d9b31000100000001865000007000000000000000700000018250000", @ANYRES32=r5, @ANYBLOB="00000000050000450000000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000060000008500000085000000bb00000018120000fc9cad4ce116c4bebb6ab316753b700537e7ce9e8113ac02361fae99368d402cda409d557158459efa6104e893ec2c44148d7c83aab3124be4c5c29c10bbc8fc2ded1699c3ef38ab4c4c14fad8e69fb17ad3820b96afb8cbd50591476a25c0ea1959596626139897f384efd4cabbf6c7b4ee23d5682586675d1820eb39d2a05eb8394ede2862ffeae9bc195698fe5a96c7c42952072d287a342f31f79833afea934348bda99789d1fec57601009f92d4dbbbc6f4140c827680b27ce4925c2bd29fe06dd11a37c758d18e6032754f83b400", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000006980)='syzkaller\x00', 0x7, 0x68, &(0x7f00000069c0)=""/104, 0x41100, 0x44, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000006bc0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000006c00)={0x4, 0x10, 0x12f83ec1, 0x8000}, 0x10, r7, r3, 0x5, &(0x7f0000007080)=[r8, r9, r8, r5, r10, r5], &(0x7f00000070c0)=[{0x5, 0x2, 0x6, 0xa}, {0x3, 0x5, 0x6, 0x6}, {0x2, 0x1, 0x4, 0x6}, {0x5, 0x3, 0x7, 0x2}, {0x5, 0x3, 0x3, 0xc}], 0x10, 0x6}, 0x90) 346.772544ms ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) getsockopt$netrom_NETROM_IDLE(r3, 0x103, 0x7, &(0x7f0000000000)=0x2, &(0x7f0000000040)=0x4) socket$packet(0x11, 0x3, 0x300) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bond_slave_1\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r5, @ANYRES16], 0x1c}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$TUNSETIFINDEX(r7, 0x400454da, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300713ced22ed7c2fd602b8ded7712809de41d0e063efdb9e8c10cb817f9136f1487f670238f1bc0c4f5d1a4818a1f305a2d70782531b2fc12266a1c0b1906ce129772463eb251ed33aa4ca437467b6", @ANYRES32=r2, @ANYBLOB="28000e0080000000ffffffffffff0802110000000802110000000000000000000000000064000100080026006c09000008000c006400000008000d00000000000a0034000202020202020000080035000000000004000501"], 0x74}}, 0x0) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r3) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x24, r8, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0xc004}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) getsockopt$netrom_NETROM_IDLE(r3, 0x103, 0x7, &(0x7f0000000000)=0x2, &(0x7f0000000040)=0x4) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bond_slave_1\x00'}) (async) socket(0x10, 0x80002, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r5, @ANYRES16], 0x1c}}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) ioctl$TUNSETIFINDEX(r7, 0x400454da, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300713ced22ed7c2fd602b8ded7712809de41d0e063efdb9e8c10cb817f9136f1487f670238f1bc0c4f5d1a4818a1f305a2d70782531b2fc12266a1c0b1906ce129772463eb251ed33aa4ca437467b6", @ANYRES32=r2, @ANYBLOB="28000e0080000000ffffffffffff0802110000000802110000000000000000000000000064000100080026006c09000008000c006400000008000d00000000000a0034000202020202020000080035000000000004000501"], 0x74}}, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r3) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x24, r8, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0xc004}, 0x0) (async) 197.223892ms ago: executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0xd0, 0x111, 0x4b4, 0xd0, 0xd4feffff, 0x2f8, 0x20a, 0x278, 0x2f8, 0x278, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [], [], 'veth1_to_team\x00', 'team0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28}}, {{@uncond, 0x0, 0xd8, 0x200, 0x0, {}, [@common=@frag={{0x30}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:dhcpd_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) 111.726644ms ago: executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x2, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) 46.495807ms ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x11, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000013c0)={{r1}, &(0x7f0000001340), &(0x7f0000001380), 0x8}, 0x20) r2 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x0) recvmmsg(r4, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001d80)=""/4106, 0x100a}, {&(0x7f0000001280)=""/212, 0xd4}, {&(0x7f00000003c0)=""/41, 0x29}, {&(0x7f0000000700)=""/186, 0xba}, {&(0x7f0000001900)=""/230, 0xe6}, {&(0x7f0000000400)=""/43, 0x2b}, {&(0x7f0000001c00)=""/126, 0x7e}], 0x7}}], 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="470d00000000000000000a0000002800018008000300000000000800030002000000140002"], 0x3c}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000800000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r6, 0x0) recvmmsg(r6, &(0x7f00000055c0), 0x400023c, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000080)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00', 0x48, 0x2f, 0x0, @dev, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "c5e4"}, {0x8, 0x88be, 0x0, {{}, 0x1, {0x2}}}}}}}}}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=ANY=[@ANYBLOB=',\v\x00\x00', @ANYRES16, @ANYBLOB="8b3300000000000000001500000008000300af712e50ac89f014f0e36818972924ea826d17691202f916bf9ab90bde5f62c83697768cd3", @ANYRES32=0x0, @ANYBLOB="0c009900fcffffff0000000084031d80300000800c0003000100000000000000040004000400040005000c0001000000040004000c0002004000000000000000180000800400040005000a00000000000500090001000000280000800c000300fd00000000000000060005003900000005000b000100000005000a00010000000c0000800500060001000000e4010080a8010d80200002800600010006120000140003000500cf00e4000800850907000500feff4000038005000600010000002200020001531f292904282d4d3a2f3c0d2b2c2a213c35022735081315313f0142520000050006000100000005000700020000003400038014000500dd020200960f0700030007000100ff0114000300b300018002000200b20100080900030005000700000000006000038018000200291036100227504f35233d38425609260e455512140003000000e1370900cd0a38007fff080003000500040002000000050004000000000020000100601b0c060130306012021b010c1616090b04020c012406480b6c0b124800018014000500020007000800200002000000010009000b0001001812046c056c09000500060002000000140003000500ff03380e000001005af4e1ff0500050006000100000068000080060002004100000005000400010000004c0002004f122b003c13271429140f4e17432908414838014136522f240a3855242128050433372b4635440f5038063029353d1222240d3e3e360f02501d23502757193753192019513c2b3005000700000000000c000300050000000000000005000800e800000005000b0001000000060005003c00000006000500fc0000000c000200ff010000000000005400008005000800aa000000050007007800000005000b000000000006000500660000000c000300070000000000000005000800dd0000000c0003000000000000000001050009000000000006000500e9000000200000800400040006000500ac00000005000b000100000006000500620000001c00008005000a00000000000c000300f8ffffffffffffff040004009000008004000400050006000100000005000800af00000005000a000100000006000500d900000068000d80540003801700020005411d1a0711030c00503315041c17131d3e39000500060001000000140003000400030009008000060005000000040014000300020001000800000000400300ff7f000205000600000000000c00008005000400010000000400028020021d80a80000809c000d8098000080270002000850450d3941484c0a23130c09132b0d22373b1e1c2718372e010c41494a083d13304f000e0001000c360518600436601b0500001c0001000b05000b2016166c30306c2403600430120900090e09484823000100040c42600609161b0c040b0401366c0c04300b020116050604020b03122436001400030006000000050081003a00050080026805050007000100000005000900010000002400008006000500e2000000060005007b0000000500090001000000060005000b000000340000800400040005000800010000000c000300040000000000000005000700c700000005000800e9000000050007004e000000100000800c0002000000000000000000f400008006000500db00000024000d8014000080050002002b00000005000600000000000c0001800500060002000000040004000500090000000000b8000d802c0001801400050081000104ff7f0600800003004607010014000300000002009c000100320009007f000500640003801900010002240b066c240b6c3002023603010309043a0248120000000c000100300b24680c0404032400010000026c1203160405008648161b1603060216010216301605046c0501186c0c24140005000200ff03400008000000ff000200fe4c240000801b000100164824093602010b080b026c24601b360306050012020100040001001800008005000800b200000004000400050007007f00000090031d807001008005000600000000000c00030000000000008000000c000200e20000000000000005000c000100000020010d809800038050000200283d29194628413053390502081d22180757192204014e2a080046534e2c18311a38022851082a094f08530f013320143b5611371f35521b473e0f033332050809121d3928313e00403b24020a000200141f45483c54000014000500faff0800fffe06000000ffff05008000210001006c006c6c02121b481603360b00126c1b0c123002306c300416090112240000000c00008005000600020000004000038034000200410c3840120f21000f3816362e433d2a3d051747414f41243f54220518522e033d2f25281f4b0c473942304c4b44510b05000600010000003800028005000400000000002100010016030b0416303301181812051230126c0160480636041600d609243048000000050006000200000005000c000100000004000400060005009c00000005000a000100000005000a00010000003401008005000c000200000005000b000100000018010d803400038014000500ff0f1f00fdff070003000e007f000600140005000200fcff03000002050008006e0060f00500060001000000400002801400030074010001b901c1008100080020000800270002002d004b112a03180d2b0a5045162d4c540132464b1f060f1e303130510a3548104e3f3d00a000008005000600020000000500040001000000050007000000000014000300001002000500001003007300ff0107004600020010292023315220184a451a1ded0a123f020d044a20282d371f30540d061f44183a03461f4d37233f10003e412518493b46215443061936033d511f0e390844004b25000014000500040001000600ff0f2000a6090000d39f14000300ff014000070001000400050006000200050008002d0000001c00008005000c0001000000050009000000000006000500370000003800008005000c000200000005000c0002000000050006000000000005000c000000000005000700c90000000400040005000b0001000000040000801c00008005000c000200000005000700a9000000060005006c000000200000800c000200080000000000000005000b0000000000050007005000000054000080060005007700000005000a00010000000500090001000000050007007d00000005000700ca0000000c00030009000000000000000c0003002f0000000000000005000a000100000005000700e2000000d0011d80340000800c000300f7ffffffffffffff0c00020003000000000000000c00020000040000000000000c00020067010000000000000c000080050009000000000054010080060005007f000000050007002400000005000c000100000038010d805c0001802c000200270209504029104c4a034a50253d3f1a0e2f0f08381a2f101329495030051453281c1b2b0c52531e050004000100000014000300018004000600b5397d040800d900bc0405000400000000000500070001000000d800018037000200441c573143373f533946234f0448103000262f311a55530b003916410b3d1409392618262e501f57083a27281231290542034c0014000300ff004907a503d51b060008000300cc001200020002271121012124103f1e5546223a00001400030007000600b200a40a030081000001030005000400000000001400030008008100ff070800010404000900070005000600000000001500010016027b03187624690002031b0336090336000000210001000236010030240b6c121648051202300501036c0c0448013c0b0448063600000038000080060005004b0400000500090000000000060005006a00000005000600000000000c0002001f000000000000000500060000000000"], 0xb2c}}, 0x0) 0s ago: executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @local}], 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x76, &(0x7f00000001c0)={r4}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000040)={r4, 0x8}, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_GROUP={0xc, 0x2, [{0x0, 0x0, 0x2}]}]}, 0x24}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xffff57da, 0x0, 0x0, 0x0, 0x115}, 0x9c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.142' (ED25519) to the list of known hosts. 2024/05/31 18:03:15 fuzzer started 2024/05/31 18:03:15 dialing manager at 10.128.0.169:30018 [ 73.141028][ T5092] cgroup: Unknown subsys name 'net' [ 73.365052][ T5092] cgroup: Unknown subsys name 'rlimit' 2024/05/31 18:03:17 starting 5 executor processes [ 74.898659][ T5096] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.929104][ T5117] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.945412][ T5119] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.953940][ T5119] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.966727][ T5122] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.975038][ T5123] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.975313][ T5122] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.983592][ T5123] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.991411][ T5122] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.005174][ T5122] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.006026][ T5123] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.014037][ T5122] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.020544][ T5123] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.028956][ T5122] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.041954][ T5122] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.049096][ T5125] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.051068][ T5125] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.057415][ T5122] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.063871][ T5125] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.079267][ T5125] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.080351][ T4489] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.096353][ T4489] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.100186][ T5128] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.104289][ T4489] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.111710][ T5128] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.125557][ T4489] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.127801][ T5128] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.133565][ T4489] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.160603][ T5128] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.174212][ T4489] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 76.188008][ T5128] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.683861][ T5114] chnl_net:caif_netlink_parms(): no params data found [ 76.944238][ T5120] chnl_net:caif_netlink_parms(): no params data found [ 76.962616][ T5113] chnl_net:caif_netlink_parms(): no params data found [ 76.985926][ T5114] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.993328][ T5114] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.000732][ T5114] bridge_slave_0: entered allmulticast mode [ 77.008865][ T5114] bridge_slave_0: entered promiscuous mode [ 77.048863][ T5115] chnl_net:caif_netlink_parms(): no params data found [ 77.068163][ T5114] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.075471][ T5114] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.082641][ T5114] bridge_slave_1: entered allmulticast mode [ 77.090030][ T5114] bridge_slave_1: entered promiscuous mode [ 77.258481][ T5114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.301629][ T5120] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.310386][ T5120] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.318495][ T5120] bridge_slave_0: entered allmulticast mode [ 77.325812][ T5120] bridge_slave_0: entered promiscuous mode [ 77.336837][ T5114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.374543][ T5120] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.381788][ T5120] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.389282][ T5120] bridge_slave_1: entered allmulticast mode [ 77.396667][ T5120] bridge_slave_1: entered promiscuous mode [ 77.444485][ T5113] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.451676][ T5113] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.459124][ T5113] bridge_slave_0: entered allmulticast mode [ 77.466326][ T5113] bridge_slave_0: entered promiscuous mode [ 77.490576][ T5115] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.498280][ T5115] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.505608][ T5115] bridge_slave_0: entered allmulticast mode [ 77.513828][ T5115] bridge_slave_0: entered promiscuous mode [ 77.546610][ T5126] chnl_net:caif_netlink_parms(): no params data found [ 77.562549][ T5114] team0: Port device team_slave_0 added [ 77.568971][ T5113] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.579777][ T5113] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.587247][ T5113] bridge_slave_1: entered allmulticast mode [ 77.595156][ T5113] bridge_slave_1: entered promiscuous mode [ 77.616007][ T5115] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.623360][ T5115] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.630568][ T5115] bridge_slave_1: entered allmulticast mode [ 77.638302][ T5115] bridge_slave_1: entered promiscuous mode [ 77.647914][ T5120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.659668][ T5114] team0: Port device team_slave_1 added [ 77.714978][ T5120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.767402][ T5113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.826345][ T5113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.855194][ T5115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.869401][ T5120] team0: Port device team_slave_0 added [ 77.881123][ T5120] team0: Port device team_slave_1 added [ 77.888872][ T5114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.896197][ T5114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.922475][ T5114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.959933][ T5113] team0: Port device team_slave_0 added [ 77.969151][ T5115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.017893][ T5114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.025328][ T5114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.052099][ T5114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.077682][ T5113] team0: Port device team_slave_1 added [ 78.094638][ T5122] Bluetooth: hci0: command tx timeout [ 78.104521][ T5120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.111515][ T5120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.137610][ T5120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.151548][ T5120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.158678][ T5120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.178089][ T5122] Bluetooth: hci1: command tx timeout [ 78.184757][ T5128] Bluetooth: hci2: command tx timeout [ 78.191660][ T5120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.237670][ T5115] team0: Port device team_slave_0 added [ 78.247831][ T5115] team0: Port device team_slave_1 added [ 78.253629][ T5128] Bluetooth: hci4: command tx timeout [ 78.259321][ T5128] Bluetooth: hci3: command tx timeout [ 78.339194][ T5126] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.347407][ T5126] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.354964][ T5126] bridge_slave_0: entered allmulticast mode [ 78.362039][ T5126] bridge_slave_0: entered promiscuous mode [ 78.372818][ T5126] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.379936][ T5126] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.387375][ T5126] bridge_slave_1: entered allmulticast mode [ 78.394584][ T5126] bridge_slave_1: entered promiscuous mode [ 78.402355][ T5113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.409710][ T5113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.435866][ T5113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.449635][ T5113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.456747][ T5113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.482834][ T5113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.508020][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.515223][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.541302][ T5115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.560115][ T5114] hsr_slave_0: entered promiscuous mode [ 78.567165][ T5114] hsr_slave_1: entered promiscuous mode [ 78.637535][ T5126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.647602][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.654823][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.680850][ T5115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.713267][ T5120] hsr_slave_0: entered promiscuous mode [ 78.720146][ T5120] hsr_slave_1: entered promiscuous mode [ 78.727043][ T5120] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.735751][ T5120] Cannot create hsr debugfs directory [ 78.746402][ T5126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.841538][ T5126] team0: Port device team_slave_0 added [ 78.917295][ T5113] hsr_slave_0: entered promiscuous mode [ 78.926765][ T5113] hsr_slave_1: entered promiscuous mode [ 78.934112][ T5113] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.941684][ T5113] Cannot create hsr debugfs directory [ 78.950622][ T5126] team0: Port device team_slave_1 added [ 79.054502][ T5126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.061478][ T5126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.088229][ T5126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.112152][ T5115] hsr_slave_0: entered promiscuous mode [ 79.119518][ T5115] hsr_slave_1: entered promiscuous mode [ 79.127423][ T5115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.135239][ T5115] Cannot create hsr debugfs directory [ 79.167691][ T5126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.174838][ T5126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.200849][ T5126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.317454][ T5126] hsr_slave_0: entered promiscuous mode [ 79.326193][ T5126] hsr_slave_1: entered promiscuous mode [ 79.332591][ T5126] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.340385][ T5126] Cannot create hsr debugfs directory [ 79.724416][ T5120] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.755427][ T5120] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.767250][ T5120] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.802029][ T5120] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.873132][ T5114] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.883652][ T5114] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.899638][ T5114] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.910045][ T5114] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.054235][ T5115] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.065477][ T5115] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.079272][ T5115] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.121066][ T5115] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.174134][ T5128] Bluetooth: hci0: command tx timeout [ 80.225934][ T5113] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.236436][ T5113] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.252323][ T5113] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.259563][ T5128] Bluetooth: hci2: command tx timeout [ 80.263196][ T5122] Bluetooth: hci1: command tx timeout [ 80.292375][ T5120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.310126][ T5113] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.333846][ T5122] Bluetooth: hci4: command tx timeout [ 80.333967][ T5128] Bluetooth: hci3: command tx timeout [ 80.406371][ T5126] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.438555][ T5126] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.459289][ T5120] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.470086][ T5126] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.495788][ T5126] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.540230][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.547712][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.560394][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.567701][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.595851][ T5114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.727418][ T5115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.746713][ T5114] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.762029][ T5120] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.829591][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.836823][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.876977][ T5115] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.895463][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.902727][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.966850][ T5165] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.974107][ T5165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.009274][ T5113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.026555][ T5166] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.033807][ T5166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.131390][ T5114] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.174266][ T5113] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.206638][ T5126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.230138][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.237414][ T5166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.277247][ T5115] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 81.294577][ T5115] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.350522][ T5120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.393661][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.400925][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.440450][ T5126] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.490008][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.497204][ T5166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.591054][ T5114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.602385][ T5167] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.609806][ T5167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.708132][ T5115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.786031][ T5120] veth0_vlan: entered promiscuous mode [ 81.890808][ T5120] veth1_vlan: entered promiscuous mode [ 81.944460][ T5114] veth0_vlan: entered promiscuous mode [ 81.981286][ T5114] veth1_vlan: entered promiscuous mode [ 82.088528][ T5120] veth0_macvtap: entered promiscuous mode [ 82.137283][ T5120] veth1_macvtap: entered promiscuous mode [ 82.190701][ T5114] veth0_macvtap: entered promiscuous mode [ 82.231843][ T5114] veth1_macvtap: entered promiscuous mode [ 82.255761][ T5128] Bluetooth: hci0: command tx timeout [ 82.334293][ T5128] Bluetooth: hci2: command tx timeout [ 82.335460][ T5122] Bluetooth: hci1: command tx timeout [ 82.351042][ T5120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.371402][ T5113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.401038][ T5120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.411856][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.425966][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.426102][ T5122] Bluetooth: hci3: command tx timeout [ 82.437491][ T5128] Bluetooth: hci4: command tx timeout [ 82.455329][ T5114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.485235][ T5120] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.497183][ T5120] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.506467][ T5120] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.515701][ T5120] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.529892][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.540651][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.554072][ T5114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.584905][ T5115] veth0_vlan: entered promiscuous mode [ 82.609704][ T5114] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.618762][ T5114] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.628821][ T5114] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.638658][ T5114] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.666476][ T5126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.792361][ T5115] veth1_vlan: entered promiscuous mode [ 82.833567][ T5113] veth0_vlan: entered promiscuous mode [ 82.858020][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.879176][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.920356][ T5113] veth1_vlan: entered promiscuous mode [ 82.989352][ T5115] veth0_macvtap: entered promiscuous mode [ 82.998653][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.014888][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.067267][ T5126] veth0_vlan: entered promiscuous mode [ 83.084092][ T5115] veth1_macvtap: entered promiscuous mode [ 83.107581][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.118371][ T5126] veth1_vlan: entered promiscuous mode [ 83.125349][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.193657][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.210877][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.233597][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.247260][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.260106][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.268464][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.271656][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.288342][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.289967][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.307378][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.317941][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.329322][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.342043][ T5115] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.352166][ T5115] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.361260][ T5115] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.371948][ T5115] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.468830][ T5113] veth0_macvtap: entered promiscuous mode [ 83.533791][ T5113] veth1_macvtap: entered promiscuous mode [ 83.607273][ T5126] veth0_macvtap: entered promiscuous mode [ 83.650808][ T5203] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 83.755910][ T5126] veth1_macvtap: entered promiscuous mode [ 83.809582][ T784] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.830418][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.864674][ T784] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.882776][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.904210][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.923769][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.935999][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.947265][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.962179][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.019826][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.052910][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.083590][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.097755][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.107955][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.128716][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.160305][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.216841][ T5113] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.242725][ T5113] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.258347][ T5113] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.282731][ T5113] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.327490][ T5167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.327755][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.343971][ T5167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.352476][ T5128] Bluetooth: hci0: command tx timeout [ 84.376763][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.387111][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.402733][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.412604][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.424224][ T5128] Bluetooth: hci2: command tx timeout [ 84.431685][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.441704][ T5128] Bluetooth: hci1: command tx timeout [ 84.481281][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.493867][ T5128] Bluetooth: hci4: command tx timeout [ 84.495836][ T5122] Bluetooth: hci3: command tx timeout [ 84.508474][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.520910][ T5126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.537096][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.547754][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.557842][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.571425][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.591534][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.602272][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.612362][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.632392][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.652278][ T5126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.674009][ T5227] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 84.690110][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.704994][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.715007][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.725489][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.740875][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.751432][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.761503][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.772095][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.782039][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.794796][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.809186][ T5227] vlan2: entered promiscuous mode [ 84.816483][ T5227] batadv_slave_0: entered promiscuous mode [ 84.852023][ T5126] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.869658][ T5126] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.884995][ T5126] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.907323][ T5126] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.939829][ T5230] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 85.159259][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.179540][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.287861][ T307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.319995][ T307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.402980][ T25] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.436928][ T25] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.491798][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.517504][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.581300][ T5240] syz-executor.4 (5240) used greatest stack depth: 18736 bytes left [ 85.783249][ T5246] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.978111][ T5248] sctp: failed to load transform for md5: -2 [ 86.531371][ T5281] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.637014][ T5278] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 86.691827][ T5278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.720413][ T5278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.771057][ T5278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.804041][ T5278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.819584][ T5278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.830520][ T5278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.847517][ T5278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.871875][ T5278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.906774][ T5278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.928860][ T5278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.962562][ T5278] vlan2: entered promiscuous mode [ 87.000088][ T5278] batadv_slave_0: entered promiscuous mode [ 87.046780][ T5282] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 87.641756][ T5321] warning: `syz-executor.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 89.186507][ T5356] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 89.376736][ T5359] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 89.548830][ T5380] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 89.569800][ T5381] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 90.908295][ T5415] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 91.664512][ T5435] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 91.759194][ T5438] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 92.236483][ T5451] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 92.281844][ T5453] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 92.370020][ T5458] syz-executor.2 uses old SIOCAX25GETINFO [ 92.436783][ T1166] cfg80211: failed to load regulatory.db [ 92.960904][ T5480] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 93.144886][ T5485] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 93.164459][ T5486] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 93.354144][ T5494] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 94.233201][ T5519] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 94.366952][ T5527] Zero length message leads to an empty skb [ 94.567084][ T5518] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 95.255561][ T5557] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 95.368798][ T5562] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 95.542084][ T5571] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 95.663579][ T5575] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 96.115983][ T5593] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 96.269248][ T5601] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 96.515625][ T5611] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 96.706224][ T5618] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 97.346532][ T5632] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 97.385603][ T5634] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 97.711497][ T5642] xt_NFQUEUE: number of queues (1611) out of range (got 67144) [ 98.064220][ T5660] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 98.307030][ T5667] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 98.653492][ T5122] Bluetooth: hci0: command 0x0c1a tx timeout [ 99.231479][ T5705] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 99.324119][ T5707] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 99.552784][ T5716] team0: Port device vlan3 added [ 99.701151][ T5720] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 100.042353][ T5732] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 100.169233][ T5739] xt_ecn: cannot match TCP bits for non-tcp packets [ 100.660192][ T5754] team0: Port device vlan3 added [ 100.683566][ T5757] netlink: 'syz-executor.1': attribute type 39 has an invalid length. [ 101.007275][ T5767] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 101.124352][ T5775] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 101.151570][ T5776] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 101.240285][ T5780] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET) [ 101.268577][ T5780] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.450459][ T5784] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 101.484540][ T5784] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 101.709793][ T5788] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 101.897777][ T5799] team0: Port device vlan3 added [ 102.245417][ T5813] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.314938][ T5817] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 102.523890][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 102.606143][ T5824] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.774937][ T5831] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 103.475193][ T5848] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 103.555272][ T5855] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 103.690911][ T5858] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 103.802236][ T5856] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 104.569270][ T5888] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 104.749930][ T5891] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 104.784233][ T5891] ipvlan2: entered promiscuous mode [ 104.789556][ T5891] ipvlan2: entered allmulticast mode [ 104.827988][ T5891] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 104.981921][ T5895] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 105.084904][ T5899] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 105.373611][ T5905] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 105.577961][ T5918] ip6t_rpfilter: unknown options [ 105.593583][ T5915] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 105.627173][ T5918] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 105.681546][ T5918] Bluetooth: MGMT ver 1.22 [ 106.132246][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 106.171594][ T5940] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 106.190209][ T5940] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 106.381840][ T5951] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 106.803211][ T5964] xt_NFQUEUE: number of total queues is 0 [ 106.845262][ T5968] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 107.106086][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 107.258688][ T5977] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 107.443862][ T5994] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 107.565806][ T5999] __nla_validate_parse: 4 callbacks suppressed [ 107.565828][ T5999] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 107.942395][ T6007] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 108.204197][ T6015] xt_NFQUEUE: number of total queues is 0 [ 108.438235][ T6026] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 108.528234][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 108.595340][ T6030] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 108.627784][ T6030] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 108.887214][ T6046] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 111.230914][ T6059] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 111.700117][ T6121] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 112.812176][ T6159] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 114.483951][ T6164] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 114.852007][ T6194] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 114.869694][ T6194] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 115.684815][ T6195] dccp_close: ABORT with 32 bytes unread [ 115.996149][ T6222] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 116.194603][ T6233] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 116.236461][ T6233] netlink: 101600 bytes leftover after parsing attributes in process `syz-executor.0'. [ 118.412908][ T5128] Bluetooth: hci4: command 0x0405 tx timeout [ 118.431351][ T6222] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 118.789039][ T6268] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 118.910579][ T6277] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 119.660689][ T6299] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 119.702442][ T6299] netlink: 101600 bytes leftover after parsing attributes in process `syz-executor.1'. [ 120.493596][ T5128] Bluetooth: hci4: command 0x0405 tx timeout [ 122.051319][ T6340] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 122.114332][ T6340] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 122.254080][ T6351] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 122.305629][ T6354] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 122.337402][ T6354] netlink: 101600 bytes leftover after parsing attributes in process `syz-executor.4'. [ 122.583088][ T5128] Bluetooth: hci4: command 0x0405 tx timeout [ 123.146163][ T4545] udevd[4545]: worker [5164] terminated by signal 33 (Unknown signal 33) [ 124.185277][ T6392] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 124.196803][ T6392] netlink: 101600 bytes leftover after parsing attributes in process `syz-executor.3'. [ 124.587024][ T6377] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 124.597210][ T6380] netlink: 576 bytes leftover after parsing attributes in process `syz-executor.2'. [ 124.847026][ T6406] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 124.869426][ T6406] netlink: 101600 bytes leftover after parsing attributes in process `syz-executor.2'. [ 124.916720][ T6408] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 125.189628][ T6422] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 125.303810][ T6420] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 125.327324][ T6428] Illegal XDP return value 4294967262 on prog (id 128) dev N/A, expect packet loss! [ 125.345979][ T6428] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 127.266250][ T6437] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 127.305980][ T6450] ipvlan2: entered promiscuous mode [ 127.318757][ T6450] ipvlan2: entered allmulticast mode [ 127.335922][ T6450] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 127.460774][ T6457] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.2'. [ 127.484374][ T6462] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 127.517775][ T6462] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 130.344898][ T6541] __nla_validate_parse: 1 callbacks suppressed [ 130.344925][ T6541] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 130.409068][ T6544] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 130.596938][ T6554] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. [ 130.621636][ T6554] openvswitch: netlink: Message has 2 unknown bytes. [ 130.962187][ T6570] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 131.450218][ T6588] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 131.610717][ T6596] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. [ 131.652565][ T6596] openvswitch: netlink: Message has 2 unknown bytes. [ 133.379456][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.386397][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.698880][ T29] audit: type=1800 audit(1717178656.471:2): pid=6625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1949 res=0 errno=0 [ 133.741517][ T6624] netlink: 210616 bytes leftover after parsing attributes in process `syz-executor.3'. [ 133.758563][ T29] audit: type=1804 audit(1717178656.481:3): pid=6625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir614291541/syzkaller.tC2rKj/81/memory.events" dev="sda1" ino=1949 res=1 errno=0 [ 133.811473][ T6624] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.3'. [ 133.881636][ T6639] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'. [ 133.941103][ T6639] openvswitch: netlink: Message has 2 unknown bytes. [ 134.120028][ T6645] vlan0: entered allmulticast mode [ 134.370814][ T6650] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 134.436083][ T6650] Κό: entered promiscuous mode [ 134.778549][ T6670] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 135.859854][ T6685] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'. [ 135.885905][ T6685] openvswitch: netlink: Message has 2 unknown bytes. [ 136.009163][ T29] audit: type=1800 audit(1717178658.781:4): pid=6688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1966 res=0 errno=0 [ 136.046676][ T29] audit: type=1804 audit(1717178658.811:5): pid=6688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir614291541/syzkaller.tC2rKj/88/memory.events" dev="sda1" ino=1966 res=1 errno=0 [ 136.385883][ T6693] xt_socket: unknown flags 0x8 [ 136.456704][ T6695] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 136.883401][ T6695] Κό: entered promiscuous mode [ 137.319785][ T6726] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 137.388143][ T6729] xt_socket: unknown flags 0x8 [ 137.658353][ T6740] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 137.704986][ T6740] openvswitch: Κό: Dropping previously announced user features [ 138.031934][ T6756] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 138.212421][ T6763] xt_socket: unknown flags 0x8 [ 138.556682][ T6778] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 138.601247][ T6778] Κό: entered promiscuous mode [ 138.774890][ T6786] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 138.794415][ T6786] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 138.821603][ T6788] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 138.840904][ T6786] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 138.863581][ T6786] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 139.005716][ T6795] xt_socket: unknown flags 0x8 [ 139.244341][ T6807] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. [ 139.337023][ T6807] bond0: (slave bond_slave_0): Releasing backup interface [ 139.365094][ T6815] bond0: (slave bond_slave_0): Releasing backup interface [ 139.674194][ T6829] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 139.690513][ T6829] Κό: entered promiscuous mode [ 139.976231][ T6836] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 140.446169][ T29] audit: type=1804 audit(1717178663.221:6): pid=6853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir4018577627/syzkaller.8N5AUb/99/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 [ 140.502834][ T6863] raw_sendmsg: syz-executor.0 forgot to set AF_INET. Fix it! [ 140.650027][ T6870] bond0: Unable to set down delay as MII monitoring is disabled [ 141.414201][ T6903] __nla_validate_parse: 5 callbacks suppressed [ 141.414224][ T6903] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 141.442836][ T6902] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 141.540915][ T6908] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 141.643174][ T6910] xt_TCPMSS: Only works on TCP SYN packets [ 141.666666][ T6910] Bluetooth: MGMT ver 1.22 [ 142.350675][ T6936] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 142.437779][ T6940] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 142.821688][ T6959] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 143.437467][ T6990] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 144.036569][ T7010] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 144.135687][ T7012] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 144.378298][ T7022] vxcan1: tx drop: invalid sa for name 0x0000000000000002 [ 144.459355][ T7024] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 144.533713][ T7026] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 144.985548][ T7045] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 145.011832][ T7035] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 146.201401][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.505873][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.646619][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.798203][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.083976][ T7120] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 147.200668][ T36] bridge_slave_1: left allmulticast mode [ 147.208450][ T36] bridge_slave_1: left promiscuous mode [ 147.218747][ T5122] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 147.225145][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.235743][ T5122] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 147.249943][ T5122] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 147.259301][ T5122] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 147.269844][ T5122] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 147.279867][ T5122] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 147.316943][ T36] bridge_slave_0: left allmulticast mode [ 147.336291][ T36] bridge_slave_0: left promiscuous mode [ 147.347135][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.745529][ T36] team0: Port device vlan3 removed [ 148.024998][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.042501][ T36] bond0 (unregistering): Released all slaves [ 148.077546][ T7129] team_slave_0: entered promiscuous mode [ 148.083663][ T7129] team_slave_1: entered promiscuous mode [ 148.104137][ T7129] macsec1: entered promiscuous mode [ 148.113211][ T7129] team0: entered promiscuous mode [ 148.136105][ T7129] macsec1: entered allmulticast mode [ 148.148773][ T7129] team0: entered allmulticast mode [ 148.155967][ T7129] team_slave_0: entered allmulticast mode [ 148.161967][ T7129] team_slave_1: entered allmulticast mode [ 148.178783][ T7129] team0: Device macsec1 is already an upper device of the team interface [ 148.194681][ T7129] team0: left allmulticast mode [ 148.199767][ T7129] team_slave_0: left allmulticast mode [ 148.205641][ T7129] team_slave_1: left allmulticast mode [ 148.211310][ T7129] team0: left promiscuous mode [ 148.225177][ T7129] team_slave_0: left promiscuous mode [ 148.230759][ T7129] team_slave_1: left promiscuous mode [ 148.300775][ T7134] __nla_validate_parse: 1 callbacks suppressed [ 148.300800][ T7134] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 148.334243][ T36] Κό: left promiscuous mode [ 149.293006][ T5122] Bluetooth: hci1: command tx timeout [ 149.453900][ T36] hsr_slave_0: left promiscuous mode [ 149.483888][ T36] hsr_slave_1: left promiscuous mode [ 149.490664][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.522967][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.552977][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.560986][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.699665][ T36] batadv_slave_0: left promiscuous mode [ 149.718489][ T36] veth1_macvtap: left promiscuous mode [ 149.725695][ T36] veth0_macvtap: left promiscuous mode [ 149.731727][ T36] veth1_vlan: left promiscuous mode [ 149.748100][ T36] veth0_vlan: left promiscuous mode [ 150.574215][ T36] team0 (unregistering): Port device team_slave_1 removed [ 150.647088][ T36] team0 (unregistering): Port device team_slave_0 removed [ 151.171598][ T7178] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 151.181468][ T7178] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 151.207965][ T7178] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.217420][ T7178] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.226236][ T7178] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.236441][ T7178] vxlan0: entered promiscuous mode [ 151.250022][ T7180] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 151.264120][ T7191] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 151.383343][ T5122] Bluetooth: hci1: command tx timeout [ 151.398526][ T7121] chnl_net:caif_netlink_parms(): no params data found [ 151.508748][ T7201] team_slave_0: entered promiscuous mode [ 151.514653][ T7201] team_slave_1: entered promiscuous mode [ 151.535273][ T7201] macsec1: entered promiscuous mode [ 151.541631][ T7201] team0: entered promiscuous mode [ 151.562939][ T7201] macsec1: entered allmulticast mode [ 151.568303][ T7201] team0: entered allmulticast mode [ 151.592030][ T7201] team_slave_0: entered allmulticast mode [ 151.601417][ T7201] team_slave_1: entered allmulticast mode [ 151.619850][ T7201] team0: Device macsec1 is already an upper device of the team interface [ 151.631332][ T7201] team0: left allmulticast mode [ 151.637626][ T7201] team_slave_0: left allmulticast mode [ 151.643703][ T7201] team_slave_1: left allmulticast mode [ 151.650672][ T7201] team0: left promiscuous mode [ 151.656433][ T7201] team_slave_0: left promiscuous mode [ 151.661977][ T7201] team_slave_1: left promiscuous mode [ 151.850851][ T7210] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 151.917464][ T7213] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 153.100368][ T7238] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 153.462883][ T5122] Bluetooth: hci1: command tx timeout [ 153.889707][ T7121] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.906621][ T7121] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.939436][ T7121] bridge_slave_0: entered allmulticast mode [ 153.954429][ T7121] bridge_slave_0: entered promiscuous mode [ 153.973327][ T7252] syz-executor.3[7252] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 153.973504][ T7252] syz-executor.3[7252] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 153.982827][ T7121] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.017205][ T7121] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.030829][ T7121] bridge_slave_1: entered allmulticast mode [ 154.039267][ T7121] bridge_slave_1: entered promiscuous mode [ 154.044403][ T7252] atomic_op ffff88802a529998 conn xmit_atomic 0000000000000000 [ 154.156296][ T7121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.180585][ T7121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.293775][ T7121] team0: Port device team_slave_0 added [ 154.304836][ T7121] team0: Port device team_slave_1 added [ 154.400202][ T7121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.421226][ T7121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.454771][ T7121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.477411][ T7121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.490228][ T7121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.520382][ T7121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.606588][ T7121] hsr_slave_0: entered promiscuous mode [ 154.617189][ T7121] hsr_slave_1: entered promiscuous mode [ 154.634335][ T7121] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.642938][ T7121] Cannot create hsr debugfs directory [ 154.662101][ T7265] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 154.711722][ T7266] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 155.546312][ T5122] Bluetooth: hci1: command tx timeout [ 156.888846][ T7290] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 157.289184][ T7319] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 157.351687][ T7121] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 157.382338][ T7121] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 157.416605][ T7121] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 157.446058][ T7121] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 157.580794][ T7337] netem: change failed [ 157.800311][ T7121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.835745][ T7344] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 157.916927][ T7349] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 159.825572][ T7121] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.863101][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.870383][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.914789][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.922009][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.992428][ T7377] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 160.156736][ T7121] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 160.188843][ T7121] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 160.592106][ T7402] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 160.611824][ T7402] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 160.639277][ T7407] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 160.667673][ T7121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.703662][ T7402] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 160.761665][ T7402] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 160.883277][ T7414] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 161.536026][ T5128] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 161.558402][ T5128] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 161.580409][ T5128] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 161.600142][ T5128] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 161.608570][ T5128] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 161.623699][ T5128] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 163.067038][ T5120] syz-executor.2 (5120) used greatest stack depth: 18672 bytes left [ 163.185306][ T7060] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.392123][ T7060] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.476584][ T7121] veth0_vlan: entered promiscuous mode [ 163.539082][ T7060] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.619838][ T7121] veth1_vlan: entered promiscuous mode [ 163.703562][ T5122] Bluetooth: hci3: command tx timeout [ 163.898936][ T7471] vlan4: entered promiscuous mode [ 163.904237][ T7471] gretap0: entered promiscuous mode [ 163.909682][ T7471] vlan4: entered allmulticast mode [ 163.916255][ T7471] gretap0: entered allmulticast mode [ 163.933990][ T7471] gretap0: left allmulticast mode [ 163.939093][ T7471] gretap0: left promiscuous mode [ 165.479760][ T7121] veth0_macvtap: entered promiscuous mode [ 165.539379][ T7121] veth1_macvtap: entered promiscuous mode [ 165.669512][ T7423] chnl_net:caif_netlink_parms(): no params data found [ 165.711260][ T7121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.737395][ T7121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.761290][ T7484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.774153][ T5122] Bluetooth: hci3: command tx timeout [ 165.781098][ T7121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.800956][ T7484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.803815][ T7121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.829910][ T7121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.840799][ T7121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.858285][ T7121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.886463][ T7121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.898106][ T7491] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 165.916022][ T7121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.045622][ T7121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.066576][ T7121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.079457][ T7121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.105788][ T7121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.117277][ T7121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.135552][ T7121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.148764][ T7121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.160165][ T7501] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 166.170665][ T7121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.183109][ T7121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.190717][ T7060] bridge_slave_1: left allmulticast mode [ 166.196752][ T7060] bridge_slave_1: left promiscuous mode [ 166.202561][ T7060] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.216567][ T7060] bridge_slave_0: left allmulticast mode [ 166.222279][ T7060] bridge_slave_0: left promiscuous mode [ 166.228604][ T7060] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.688512][ T7060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.700191][ T7060] bond0 (unregistering): Released all slaves [ 166.759597][ T7501] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 166.785958][ T7121] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.800084][ T7121] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.810249][ T7121] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.820345][ T7121] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.859005][ T7060] Κό: left promiscuous mode [ 166.898985][ T7503] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 166.919122][ T7423] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.926717][ T7423] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.934962][ T7423] bridge_slave_0: entered allmulticast mode [ 166.944228][ T7423] bridge_slave_0: entered promiscuous mode [ 166.953975][ T7511] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 166.972471][ T7423] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.981129][ T7423] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.988705][ T7423] bridge_slave_1: entered allmulticast mode [ 166.997361][ T7060] IPVS: stopping master sync thread 7266 ... [ 166.999903][ T7423] bridge_slave_1: entered promiscuous mode [ 167.852921][ T5122] Bluetooth: hci3: command tx timeout [ 168.841694][ T7423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.863950][ T7530] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 168.880519][ T7530] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 168.890667][ T7530] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 168.926283][ T7423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.055636][ T7539] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 169.105413][ T7423] team0: Port device team_slave_0 added [ 169.123572][ T7546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.156658][ T7423] team0: Port device team_slave_1 added [ 169.164859][ T7542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.318210][ T7423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.333187][ T7550] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 169.333737][ T7423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.367568][ T7423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.387111][ T7062] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.387671][ T7550] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 169.398564][ T7062] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.420344][ T7060] hsr_slave_0: left promiscuous mode [ 169.428660][ T7060] hsr_slave_1: left promiscuous mode [ 169.436426][ T7060] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.445002][ T7060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.453264][ T7060] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.460838][ T7060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.483256][ T7060] batadv_slave_0: left promiscuous mode [ 169.489295][ T7060] veth1_macvtap: left promiscuous mode [ 169.495094][ T7060] veth0_macvtap: left promiscuous mode [ 169.501034][ T7060] veth1_vlan: left promiscuous mode [ 169.507328][ T7060] veth0_vlan: left promiscuous mode [ 169.933023][ T5122] Bluetooth: hci3: command tx timeout [ 170.251171][ T7060] team0 (unregistering): Port device team_slave_1 removed [ 170.329865][ T7060] team0 (unregistering): Port device team_slave_0 removed [ 170.860443][ T7423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.867937][ T7423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.894366][ T7423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.928153][ T7551] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 171.037464][ T5235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.060831][ T5235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.740888][ T7423] hsr_slave_0: entered promiscuous mode [ 172.758068][ T7423] hsr_slave_1: entered promiscuous mode [ 172.772883][ T7423] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 172.780502][ T7423] Cannot create hsr debugfs directory [ 172.933544][ T7588] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 172.978630][ T7584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.038646][ T7584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.548139][ T7604] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 173.561892][ T7604] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 173.586102][ T7603] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 173.689855][ T7604] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 173.733271][ T7604] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 173.785309][ T7604] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 173.940678][ T7614] netlink: 2832 bytes leftover after parsing attributes in process `syz-executor.1'. [ 175.277388][ T7627] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 176.320621][ T7632] geneve2: entered promiscuous mode [ 176.327494][ T7632] geneve2: entered allmulticast mode [ 176.416964][ T7423] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 176.456956][ T7423] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 176.477128][ T7423] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 176.527242][ T7423] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 176.861845][ T7423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.922005][ T7423] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.951619][ T5235] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.959037][ T5235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.993735][ T5235] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.001182][ T5235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.478371][ T7423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.632541][ T7423] veth0_vlan: entered promiscuous mode [ 177.667189][ T7423] veth1_vlan: entered promiscuous mode [ 177.816279][ T7668] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 178.014356][ T7423] veth0_macvtap: entered promiscuous mode [ 180.244598][ T7423] veth1_macvtap: entered promiscuous mode [ 180.265600][ T7677] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 180.379925][ T7677] bond1: entered promiscuous mode [ 180.403873][ T7678] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 180.455227][ T7678] bond1 (unregistering): Released all slaves [ 180.521798][ T7423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.556521][ T7423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.582488][ T7423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.605177][ T7423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.627147][ T7423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.650549][ T7423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.692214][ T7423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.722803][ T7423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.743462][ T7423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.791577][ T7423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.803921][ T7423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.831324][ T7423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.858660][ T7423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.872481][ T7423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.903669][ T7423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.924185][ T7423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.939250][ T7423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.954590][ T7423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.968316][ T7423] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.977428][ T7423] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.986385][ T7423] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.996296][ T7423] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.198742][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.221933][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.328784][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.362018][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.032847][ T46] IPVS: starting estimator thread 0... [ 182.156041][ T7739] IPVS: using max 16 ests per chain, 38400 per kthread [ 182.598161][ C0] ------------[ cut here ]------------ [ 182.603806][ C0] kernel BUG at net/core/gro.c:424! [ 182.609077][ C0] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 182.616053][ C0] CPU: 0 PID: 7758 Comm: syz-executor.0 Not tainted 6.9.0-syzkaller-12171-gccf23c916ca3 #0 [ 182.626136][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 182.636286][ C0] RIP: 0010:dev_gro_receive+0x242f/0x24b0 [ 182.642055][ C0] Code: ff d3 66 90 e9 ea fa ff ff 44 89 f1 80 e1 07 38 c1 0f 8c f1 f9 ff ff 4c 89 f7 e8 ec b3 92 f8 e9 e4 f9 ff ff e8 32 07 2d f8 90 <0f> 0b 89 d9 80 e1 07 fe c1 38 c1 0f 8c 19 fa ff ff 48 89 df e8 f8 [ 182.662285][ C0] RSP: 0018:ffffc90000007b08 EFLAGS: 00010246 [ 182.668391][ C0] RAX: ffffffff89690d4e RBX: 00000000000000be RCX: ffff8880789cda00 [ 182.676453][ C0] RDX: 0000000080000101 RSI: 0000000000000008 RDI: 0000000000000002 [ 182.684461][ C0] RBP: 0000000000000002 R08: ffffffff8968ffbb R09: 1ffffffff1f5a6bd [ 182.692469][ C0] R10: dffffc0000000000 R11: fffffbfff1f5a6be R12: 1ffff11005b70d26 [ 182.700645][ C0] R13: 0000000000000008 R14: ffff88802db86934 R15: 1ffff11005b70d31 [ 182.708637][ C0] FS: 00007fd8b5e446c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 182.717669][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 182.724258][ C0] CR2: 0000000020010030 CR3: 000000007e1ac000 CR4: 00000000003506f0 [ 182.732241][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 182.740289][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 182.748270][ C0] Call Trace: [ 182.751563][ C0] [ 182.754413][ C0] ? __die_body+0x88/0xe0 [ 182.758757][ C0] ? die+0xcf/0x110 [ 182.762689][ C0] ? do_trap+0x15a/0x3a0 [ 182.766968][ C0] ? dev_gro_receive+0x242f/0x24b0 [ 182.772105][ C0] ? do_error_trap+0x1dc/0x2c0 [ 182.776895][ C0] ? dev_gro_receive+0x242f/0x24b0 [ 182.782027][ C0] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 182.788114][ C0] ? __pfx_do_error_trap+0x10/0x10 [ 182.793386][ C0] ? handle_invalid_op+0x34/0x40 [ 182.798444][ C0] ? dev_gro_receive+0x242f/0x24b0 [ 182.803589][ C0] ? exc_invalid_op+0x38/0x50 [ 182.808375][ C0] ? asm_exc_invalid_op+0x1a/0x20 [ 182.813466][ C0] ? dev_gro_receive+0x169b/0x24b0 [ 182.818788][ C0] ? dev_gro_receive+0x242e/0x24b0 [ 182.823981][ C0] ? dev_gro_receive+0x242f/0x24b0 [ 182.829135][ C0] ? dev_gro_receive+0x242e/0x24b0 [ 182.834291][ C0] napi_gro_receive+0x3c3/0xc90 [ 182.839169][ C0] gro_cell_poll+0x13c/0x1c0 [ 182.843772][ C0] __napi_poll+0xcb/0x490 [ 182.848110][ C0] net_rx_action+0x7bb/0x10a0 [ 182.852846][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 182.857966][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 182.864002][ C0] handle_softirqs+0x2c4/0x970 [ 182.868798][ C0] ? do_softirq+0x11b/0x1e0 [ 182.873310][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 182.878714][ C0] ? rcu_is_watching+0x15/0xb0 [ 182.883501][ C0] do_softirq+0x11b/0x1e0 [ 182.887844][ C0] [ 182.890791][ C0] [ 182.893810][ C0] ? __pfx_do_softirq+0x10/0x10 [ 182.898906][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 182.904655][ C0] ? rcu_is_watching+0x15/0xb0 [ 182.909462][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 182.914695][ C0] ? __pfx_netif_receive_skb+0x10/0x10 [ 182.920162][ C0] ? tun_rx_batched+0x160/0x8f0 [ 182.925052][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 182.930906][ C0] ? tun_rx_batched+0x160/0x8f0 [ 182.935785][ C0] tun_rx_batched+0x732/0x8f0 [ 182.940560][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 182.946909][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 182.952032][ C0] ? __pfx_tun_rx_batched+0x10/0x10 [ 182.957419][ C0] tun_get_user+0x2f35/0x4560 [ 182.962194][ C0] ? tun_get_user+0x2a2f/0x4560 [ 182.967060][ C0] ? __pfx_tun_get_user+0x10/0x10 [ 182.972097][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 182.977560][ C0] ? tun_get+0x1e/0x2f0 [ 182.981727][ C0] ? tun_get+0x1e/0x2f0 [ 182.985882][ C0] ? tun_get+0x27d/0x2f0 [ 182.990156][ C0] tun_chr_write_iter+0x113/0x1f0 [ 182.995225][ C0] vfs_write+0xa72/0xc90 [ 182.999579][ C0] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 183.005152][ C0] ? __pfx_vfs_write+0x10/0x10 [ 183.010014][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 183.016014][ C0] ksys_write+0x1a0/0x2c0 [ 183.020363][ C0] ? __pfx_ksys_write+0x10/0x10 [ 183.025248][ C0] ? do_syscall_64+0x100/0x230 [ 183.030023][ C0] ? do_syscall_64+0xb6/0x230 [ 183.034711][ C0] do_syscall_64+0xf3/0x230 [ 183.039242][ C0] ? clear_bhb_loop+0x35/0x90 [ 183.043960][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.049948][ C0] RIP: 0033:0x7fd8b507bc2f [ 183.054384][ C0] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 183.074006][ C0] RSP: 002b:00007fd8b5e44090 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 183.082467][ C0] RAX: ffffffffffffffda RBX: 00007fd8b51b4210 RCX: 00007fd8b507bc2f [ 183.090962][ C0] RDX: 000000000000007e RSI: 0000000020000080 RDI: 00000000000000c8 [ 183.098937][ C0] RBP: 00007fd8b50c947f R08: 0000000000000000 R09: 0000000000000000 [ 183.106927][ C0] R10: 000000000000007e R11: 0000000000000293 R12: 0000000000000000 [ 183.114903][ C0] R13: 000000000000006e R14: 00007fd8b51b4210 R15: 00007fffc35b6e28 [ 183.122893][ C0] [ 183.125998][ C0] Modules linked in: [ 183.130236][ C0] ---[ end trace 0000000000000000 ]--- [ 183.135811][ C0] RIP: 0010:dev_gro_receive+0x242f/0x24b0 [ 183.141783][ C0] Code: ff d3 66 90 e9 ea fa ff ff 44 89 f1 80 e1 07 38 c1 0f 8c f1 f9 ff ff 4c 89 f7 e8 ec b3 92 f8 e9 e4 f9 ff ff e8 32 07 2d f8 90 <0f> 0b 89 d9 80 e1 07 fe c1 38 c1 0f 8c 19 fa ff ff 48 89 df e8 f8 [ 183.162352][ C0] RSP: 0018:ffffc90000007b08 EFLAGS: 00010246 [ 183.168484][ C0] RAX: ffffffff89690d4e RBX: 00000000000000be RCX: ffff8880789cda00 [ 183.176605][ C0] RDX: 0000000080000101 RSI: 0000000000000008 RDI: 0000000000000002 [ 183.184631][ C0] RBP: 0000000000000002 R08: ffffffff8968ffbb R09: 1ffffffff1f5a6bd [ 183.192754][ C0] R10: dffffc0000000000 R11: fffffbfff1f5a6be R12: 1ffff11005b70d26 [ 183.200928][ C0] R13: 0000000000000008 R14: ffff88802db86934 R15: 1ffff11005b70d31 [ 183.208961][ C0] FS: 00007fd8b5e446c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 183.218042][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 183.225117][ C0] CR2: 0000000020010030 CR3: 000000007e1ac000 CR4: 00000000003506f0 [ 183.233167][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 183.241694][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 183.249750][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 183.257914][ C0] Kernel Offset: disabled [ 183.262971][ C0] Rebooting in 86400 seconds..