last executing test programs: 1m6.072873443s ago: executing program 1 (id=16): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xf, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r2, &(0x7f0000000140)="de3db46cfe13eafc153f31a685d2b9b7f124fdd55e0f651a071e1bffe4fbf457b847ca780558a50decd555e15d358a5f56df91474c25294c210211b779627e99f16150d6fe752d5b49dfa8b62ea89ac5efa20fcc4e4cb91e8571ffcf0f4522bb10c8660c3fe83a5451a4589a372daced2bc6cddbfa293735119175c62d9e885b6fa8568c", &(0x7f00000000c0)=""/52}, 0x20) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r4, @ANYBLOB="0000520006000500010000000800", @ANYRES32=r4], 0x2c}}, 0x0) 54.397898213s ago: executing program 1 (id=16): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xf, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r2, &(0x7f0000000140)="de3db46cfe13eafc153f31a685d2b9b7f124fdd55e0f651a071e1bffe4fbf457b847ca780558a50decd555e15d358a5f56df91474c25294c210211b779627e99f16150d6fe752d5b49dfa8b62ea89ac5efa20fcc4e4cb91e8571ffcf0f4522bb10c8660c3fe83a5451a4589a372daced2bc6cddbfa293735119175c62d9e885b6fa8568c", &(0x7f00000000c0)=""/52}, 0x20) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r4, @ANYBLOB="0000520006000500010000000800", @ANYRES32=r4], 0x2c}}, 0x0) 41.175166622s ago: executing program 1 (id=16): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xf, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r2, &(0x7f0000000140)="de3db46cfe13eafc153f31a685d2b9b7f124fdd55e0f651a071e1bffe4fbf457b847ca780558a50decd555e15d358a5f56df91474c25294c210211b779627e99f16150d6fe752d5b49dfa8b62ea89ac5efa20fcc4e4cb91e8571ffcf0f4522bb10c8660c3fe83a5451a4589a372daced2bc6cddbfa293735119175c62d9e885b6fa8568c", &(0x7f00000000c0)=""/52}, 0x20) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r4, @ANYBLOB="0000520006000500010000000800", @ANYRES32=r4], 0x2c}}, 0x0) 28.668332019s ago: executing program 1 (id=16): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xf, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r2, &(0x7f0000000140)="de3db46cfe13eafc153f31a685d2b9b7f124fdd55e0f651a071e1bffe4fbf457b847ca780558a50decd555e15d358a5f56df91474c25294c210211b779627e99f16150d6fe752d5b49dfa8b62ea89ac5efa20fcc4e4cb91e8571ffcf0f4522bb10c8660c3fe83a5451a4589a372daced2bc6cddbfa293735119175c62d9e885b6fa8568c", &(0x7f00000000c0)=""/52}, 0x20) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r4, @ANYBLOB="0000520006000500010000000800", @ANYRES32=r4], 0x2c}}, 0x0) 18.252465914s ago: executing program 0 (id=701): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000040)=0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000000050000000100000f050200000d0000000400000002000000005f00000061"], &(0x7f0000000200)=""/249, 0x37, 0xf9, 0xa, 0x0, 0x0, @void, @value}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) 18.16554102s ago: executing program 0 (id=704): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x2, 0x0, 0x0, 0xfffff014}, {0x80000006, 0x8, 0x0, 0x20000}]}, 0x10) 18.051031141s ago: executing program 0 (id=706): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/110, 0x14b}, {&(0x7f0000000280)=""/85, 0x53}, {&(0x7f0000000fc0)=""/4096, 0x534}, {&(0x7f0000000400)=""/106, 0x514}, {&(0x7f0000000000)=""/66, 0x6a}, {&(0x7f0000000300)=""/83, 0x63c}, {&(0x7f00000007c0)=""/154, 0x4a}, {&(0x7f0000000100)=""/16, 0x158}], 0x208, &(0x7f0000000600)=""/191, 0x41}}], 0x3fffffffffffc30, 0x0, &(0x7f0000003700)={0x77359400}) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback, 0x2}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffbffaf, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000001600)='\b', 0xfffffffffffffd68, 0x4004095, 0x0, 0xd56888b5705b13c6) recvmsg(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x10001) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), r6) sendmsg$FOU_CMD_GET(r6, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x1c, r7, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x8000) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r5, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}}, 0x3a) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r8, 0x2, 0x2, 0x0, @void, @value}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 17.716114361s ago: executing program 0 (id=708): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0)=0x7, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x0, @rand_addr=0x64010101}], 0x10) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040), 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$inet(r1, &(0x7f0000001b00), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x7c}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000007f00000001000000", @ANYRES32, @ANYBLOB="000000000000000000ffffffff00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24], 0x48) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r5, &(0x7f0000001600), 0x0}, 0x20) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x18, &(0x7f0000000180)=0x7, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x806000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r8, &(0x7f0000000300)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86dd", 0x12}], 0x1) ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x50, r9, 0x77f9e000) write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB], 0xfdef) 17.522548102s ago: executing program 0 (id=710): socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x140a, 0x200, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000814) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x3}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r2, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xc}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) (async) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8040005}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) sendto$ax25(r3, &(0x7f00000003c0)="721358fca1a89cabb54f7f569e1582e7f4c417935908e55a6db095d09a211d55b8b9fafff434759e00785f27b35addc832f6c9270aa6329c7babccf9c594ad2bd3d70d7be4c1803ddde8c14d3c96597bdf8bd07881bb0b4584e08ed1f62bd80e138358e6929b0a85776a1b4c0427192022287b4f03ec2280ce47170c8de4ff42bfecbbe85adefafba04b746ba8c2dea4cc9585cec51508b0116372588b79c91545c7524b76ea967060fdf57d316d61f32101d7b8375192959aa84e29f73814bddd639366ae7b", 0xc6, 0x891, &(0x7f00000004c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) (async) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r1) (async) socketpair(0x1d, 0x80000, 0xffffff7f, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQ(r5, 0x5411, &(0x7f00000005c0)) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000640)={0x15c, r2, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x3b}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffff2}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x15c}}, 0x4000) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r6) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x28, r7, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x7c}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x10) (async) r8 = socket$netlink(0x10, 0x3, 0xc) listen(r8, 0x200) sendmsg$nl_route(r5, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)=@ipv6_newroute={0x2c, 0x18, 0x1, 0x70bd2c, 0x25dfdbfc, {0xa, 0x0, 0x14, 0x8, 0xfd, 0x4, 0xfd, 0x3, 0x1200}, [@RTA_MARK={0x8, 0x10, 0x4}, @RTA_MARK={0x8, 0x10, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000845}, 0x44811) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r5) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000c80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b00)={0x11c, r9, 0x20, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x76}, @val={0x8}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "dae2d7c16bff9b22d8b070b46f6d04c1b5d5fa51b96a0bb5"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5f2ba73dadae92b46ece60b0e59306c1cd7daad8bdc72589"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "132d7c634808aa90be907df3b4e9e48b4b044cdb0f014638"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000850}, 0x4008) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d00)={r10}, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000e00)={'syztnl2\x00', &(0x7f0000000d80)={'ip6_vti0\x00', 0x0, 0x4, 0x3, 0xf9, 0xffffffff, 0x6, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000, 0x7800, 0xfffffff9, 0x6}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000ec0)={'sit0\x00', &(0x7f0000000e40)={'tunl0\x00', 0x0, 0x80, 0x8000, 0x5, 0x6, {{0x10, 0x4, 0x0, 0x1f, 0x40, 0x68, 0x0, 0x5, 0x2f, 0x0, @multicast1, @broadcast, {[@noop, @lsrr={0x83, 0x23, 0x78, [@remote, @private=0xa010101, @broadcast, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4}, @noop, @noop]}}}}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000001000)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f00)={0xb0, r4, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7c}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x2000c8c0}, 0x20044014) (async) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r5, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x40, 0x140d, 0x200, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x40}}, 0x4000000) (async) r13 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r13, 0x6, 0x1, &(0x7f0000001140), &(0x7f0000001180)=0x4) (async) clock_gettime(0x0, &(0x7f0000001280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000011c0)={0x9, 0x8000000000000000, 0x2, 0x1, 0xb, 0x0, 0x3, 0x4}, &(0x7f0000001200)={0x0, 0x8, 0x3, 0x8000, 0x4, 0x4, 0x9}, &(0x7f0000001240)={0x7, 0x7, 0x5, 0x8, 0x2, 0xffffffffffffffc0, 0x0, 0xffffffffffff3e94}, &(0x7f00000012c0)={r14, r15+60000000}, &(0x7f0000001340)={&(0x7f0000001300)={[0x4]}, 0x8}) 15.313200789s ago: executing program 1 (id=16): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xf, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r2, &(0x7f0000000140)="de3db46cfe13eafc153f31a685d2b9b7f124fdd55e0f651a071e1bffe4fbf457b847ca780558a50decd555e15d358a5f56df91474c25294c210211b779627e99f16150d6fe752d5b49dfa8b62ea89ac5efa20fcc4e4cb91e8571ffcf0f4522bb10c8660c3fe83a5451a4589a372daced2bc6cddbfa293735119175c62d9e885b6fa8568c", &(0x7f00000000c0)=""/52}, 0x20) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r4, @ANYBLOB="0000520006000500010000000800", @ANYRES32=r4], 0x2c}}, 0x0) 5.699128s ago: executing program 3 (id=769): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x9000, 0x6, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x60}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r1}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0300000000000000000000000000000504000000000000000000000b04000000000000000000000b020000000000000061"], 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r4, &(0x7f0000000140)=0x7, 0x12) write(r4, &(0x7f00000001c0)="9227475c", 0x4) splice(r2, 0x0, r4, 0x0, 0x25a5, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{r0}, &(0x7f0000000940), &(0x7f0000000980)=r3}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x3e, &(0x7f0000000200)=0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.708125293s ago: executing program 3 (id=777): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0xb, [@type_tag={0xa, 0x0, 0x0, 0x12, 0x2}, @enum64={0x9, 0x4, 0x0, 0x13, 0x1, 0x0, [{0x7, 0x6, 0x80000000}, {0xe, 0x7}, {0xc, 0xaa6, 0x2}, {0x4, 0x8, 0x9}]}, @const={0xa, 0x0, 0x0, 0xa, 0x5}, @restrict={0x1, 0x0, 0x0, 0xb, 0x3}, @fwd={0x10}]}, {0x0, [0x2e, 0x0, 0x5f, 0x61, 0x7f, 0x0, 0x2e, 0x5f, 0x61]}}, &(0x7f0000000180)=""/78, 0x8f, 0x4e, 0x0, 0x9, 0x0, @void, @value}, 0x28) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x101}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}]}}}]}, 0x48}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYRES32=r3], 0x448}}, 0x0) sendmmsg$inet(r4, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688f54c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.427666297s ago: executing program 3 (id=779): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000001280), 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001200)="a912", 0x2}], 0x1}, 0x20000801) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40002002) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r2}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) tee(r4, r3, 0x80000001, 0x0) getsockname$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10) 3.470031311s ago: executing program 3 (id=783): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000068000100ffffff9f000000000a000000000000000c0008800800030000000000060007000200000008000500", @ANYRES32=r1, @ANYBLOB="140006"], 0x48}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) 3.380423334s ago: executing program 2 (id=784): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x53}]}, &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@netrom, @rose, @bcast, @default, @remote, @null, @bcast, @rose]}, &(0x7f0000000080)=0x48, 0x800) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, &(0x7f00000000c0)) socket$inet6(0xa, 0x4, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x53}]}, &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@netrom, @rose, @bcast, @default, @remote, @null, @bcast, @rose]}, &(0x7f0000000080)=0x48, 0x800) (async) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, &(0x7f00000000c0)) (async) socket$inet6(0xa, 0x4, 0x9) (async) 3.240143682s ago: executing program 3 (id=786): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000500)="28f4c01d2434c0013132c69289a4666d", 0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000540)={0x0, 0xffff}, &(0x7f0000000580)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000005c0)={r2, @in={{0x2, 0x0, @empty}}, 0x6, 0x6}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x4000, {0x0, 0x0, 0x0, r1, {}, {}, {0x5, 0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket(0x10, 0x803, 0x6) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x9b62, 0x3}, &(0x7f0000000240)=0x90) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000004c0)={r5, 0xb793, 0x20}, 0xc) getsockopt$inet6_buf(r0, 0x29, 0xcc, &(0x7f0000000100)=""/19, &(0x7f0000000180)=0x13) sendto(r4, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) close(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='fdb_delete\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000073011c000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f00000000c0)="240000005f005f03a9f9f4ba0a1f0000000000000000ecffffffffffffff000000000000", 0x24) r8 = accept4(r6, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r8) 3.166679107s ago: executing program 2 (id=788): syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="188bc01dea12000040000000000000ff00080000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r2) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88ad3994}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_BROADCAST={0xa, 0x2, @link_local}]}, 0x50}}, 0x0) 2.916012109s ago: executing program 2 (id=790): socket(0x10, 0x803, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000900)="2600000022004701050007213380e8ff02006d20002b1f00c0e9f7094a51f10101ab1600b088", 0x26) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000000206011e0000000000000000000000000e0003006269746d61703a6970000000050004000a0000000900020073797a300000000020000780050003001c0000000c0001800800014008000000050014002000000005000500020000000500010006"], 0x68}}, 0x0) r7 = socket(0x10, 0x80002, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x13, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001300290a000000000000070000000000", @ANYRESOCT=0x0, @ANYRES8=r5], 0x44}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004dc0)={0x11, 0x5, &(0x7f0000004fc0)=ANY=[@ANYRESOCT=r5, @ANYBLOB="8bf047cd91c52b9f5307412b7a1a49557aec9ecd36a3b1e63b65bc50633124667eddafdb4d8532fc4bd9db9a80da61399042fb523b6792ea7d2fcd31eff259adf8386388ace24276d0ff7bff232315760ef6cc685329df1ef2fe72e4c75e84fe7f9fc4c3ca66dea4c10543654e33165cf9990458e786757cc7b187ce2a9346f71c6ad4bb2dd1ebe4e3fb95636ee6542b574c94e1b0a74027b7244628035745655695fb4c6c14e9c23ec70000", @ANYRESHEX=r4, @ANYRES32=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) unshare(0x20000400) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x61, 0x0, 0x0) r9 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000180)=0x525, 0x4) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000180)=0x525, 0x4) shutdown(r9, 0x0) (async) shutdown(r9, 0x0) recvmmsg(r9, &(0x7f0000004b80)=[{{&(0x7f0000000240)=@xdp, 0x80, &(0x7f0000000800)=[{&(0x7f0000000440)=""/71, 0x47}, {&(0x7f0000000300)=""/61, 0x3d}, {&(0x7f00000004c0)=""/81, 0x51}, {&(0x7f0000000540)=""/194, 0xc2}, {&(0x7f0000000700)=""/188, 0xbc}], 0x5, &(0x7f0000000940)=""/169, 0xa9}, 0xffffa727}, {{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000a00)=""/139, 0x8b}], 0x1}, 0x1}, {{&(0x7f0000000b00)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000b80)=""/198, 0xc6}], 0x1, &(0x7f0000003340)=""/239, 0xef}, 0x5}, {{&(0x7f0000000dc0)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000003200)=[{&(0x7f0000000e40)=""/131, 0x83}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000f00)=""/206, 0xce}, {&(0x7f0000001000)=""/90, 0x5a}, {&(0x7f00000020c0)=""/4096, 0x1000}, {&(0x7f00000030c0)=""/42, 0x2a}, {&(0x7f0000003100)=""/210, 0xd2}], 0x7, &(0x7f0000003280)=""/40, 0x28}, 0x2}, {{&(0x7f00000032c0)=@hci, 0x80, &(0x7f0000004780)=[{&(0x7f00000050c0)=""/4099, 0x1003}, {&(0x7f0000004340)=""/42, 0x2a}, {&(0x7f0000004380)=""/70, 0x46}, {&(0x7f0000004400)=""/97, 0x61}, {&(0x7f0000004480)=""/241, 0xf1}, {&(0x7f0000004580)=""/56, 0x38}, {&(0x7f00000045c0)=""/168, 0xa8}, {&(0x7f0000004680)=""/241, 0xf1}], 0x8, &(0x7f0000004800)=""/2, 0x2}, 0x401}, {{&(0x7f0000004840)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000004b40)=[{&(0x7f00000048c0)=""/245, 0xf5}, {&(0x7f00000049c0)=""/16, 0x10}, {&(0x7f0000004a00)=""/33, 0x21}, {&(0x7f0000004a40)=""/217, 0xd9}], 0x4}, 0x6}], 0x6, 0x0, 0x0) (async) recvmmsg(r9, &(0x7f0000004b80)=[{{&(0x7f0000000240)=@xdp, 0x80, &(0x7f0000000800)=[{&(0x7f0000000440)=""/71, 0x47}, {&(0x7f0000000300)=""/61, 0x3d}, {&(0x7f00000004c0)=""/81, 0x51}, {&(0x7f0000000540)=""/194, 0xc2}, {&(0x7f0000000700)=""/188, 0xbc}], 0x5, &(0x7f0000000940)=""/169, 0xa9}, 0xffffa727}, {{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000a00)=""/139, 0x8b}], 0x1}, 0x1}, {{&(0x7f0000000b00)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000b80)=""/198, 0xc6}], 0x1, &(0x7f0000003340)=""/239, 0xef}, 0x5}, {{&(0x7f0000000dc0)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000003200)=[{&(0x7f0000000e40)=""/131, 0x83}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000f00)=""/206, 0xce}, {&(0x7f0000001000)=""/90, 0x5a}, {&(0x7f00000020c0)=""/4096, 0x1000}, {&(0x7f00000030c0)=""/42, 0x2a}, {&(0x7f0000003100)=""/210, 0xd2}], 0x7, &(0x7f0000003280)=""/40, 0x28}, 0x2}, {{&(0x7f00000032c0)=@hci, 0x80, &(0x7f0000004780)=[{&(0x7f00000050c0)=""/4099, 0x1003}, {&(0x7f0000004340)=""/42, 0x2a}, {&(0x7f0000004380)=""/70, 0x46}, {&(0x7f0000004400)=""/97, 0x61}, {&(0x7f0000004480)=""/241, 0xf1}, {&(0x7f0000004580)=""/56, 0x38}, {&(0x7f00000045c0)=""/168, 0xa8}, {&(0x7f0000004680)=""/241, 0xf1}], 0x8, &(0x7f0000004800)=""/2, 0x2}, 0x401}, {{&(0x7f0000004840)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000004b40)=[{&(0x7f00000048c0)=""/245, 0xf5}, {&(0x7f00000049c0)=""/16, 0x10}, {&(0x7f0000004a00)=""/33, 0x21}, {&(0x7f0000004a40)=""/217, 0xd9}], 0x4}, 0x6}], 0x6, 0x0, 0x0) r10 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_int(r10, 0x1, 0x28, &(0x7f00000002c0)=0x400, 0x4) (async) setsockopt$sock_int(r10, 0x1, 0x28, &(0x7f00000002c0)=0x400, 0x4) recvmmsg(r6, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0x80000000}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) write(r2, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000050009000d000000", 0x24) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0xfff, 0x3a, 0x1000, 0x39, 0xb, 0x100000ff, 0x80000000}, 0x1c) getsockopt$inet6_tcp_int(r1, 0x6, 0x24, 0x0, &(0x7f0000000100)) (async) getsockopt$inet6_tcp_int(r1, 0x6, 0x24, 0x0, &(0x7f0000000100)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000aa0000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r5, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000aa0000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r5, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.727482978s ago: executing program 4 (id=791): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) sendmmsg(0xffffffffffffffff, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000240)="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", 0x1a6}], 0x1}}], 0x1, 0x20000811) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000240)="74bf3a98923e5ec107bbbeb9d31fdbd712a0b99df702e8ebdd5d242f7afa99d61ad4d1d1ada0935578b9731691277d203c456ec06c3182aa7cf3e5efc11ecdc3b4f0920602d4b8ff74fa9dd8dd57e56f985ae241ab3ca39227af7756f718848223d584b4fbb7fde6a0c79f2adc44c393f29bcfb981c4f3352b06baca6bb72fb78c6f2eb82504ea61d23196c216ec73e82d42fa7b4cb7ea2198fac8c1be7deacdb478eda28103e84f3a732e0ad54a34f6cd44ca4e8b68a9e959cfcedc313108cc46aa545f6de611e42e56813aa9b0605a90043f5f60aa2e6308fe3ced1898e4718cae11424c927fceb53797265e1d3460473cc974d3fb2eebdc04ebcc000b76138ee2127522e8993605830f3e702cb3afbf9b0df7d859ba29762e45169963b5fa748af3c9c238401544d3590f75765febfd5ddafc9f7d7ba25d252c653a53eb1fa6d887cd51723b83ee5e4c940baa1d41eaf3189608e61140c1f2f8b0448999d51043d620797fd21f20ff9099c8ba565502418d8560f92a340033e59824f64455df1dfa608103e9ca07fe9044e8a343ce628d2e532211f6168a4b58631c983d425ec834763c1c", 0x1a6}], 0x1}}], 0x1, 0x20000811) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000a80)={0x4, &(0x7f0000000000)=[{0x61}, {}, {}, {0x6}]}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000500)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x28, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1b}]}, 0x28}, 0x1, 0x0, 0x0, 0x22000000}, 0x8040) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="010000000000000000008900000008000300", @ANYRES32=r5, @ANYBLOB="10001d80040000800400008004000080"], 0x2c}}, 0x20000080) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="010000000000000000008900000008000300", @ANYRES32=r5, @ANYBLOB="10001d80040000800400008004000080"], 0x2c}}, 0x20000080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000400000000000000090000003c000380140002007663616e3000000000000000000000000800030000000000080001000200000014000600fe880000800000000000000000000101"], 0x50}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000ac0)={0x34, r4, 0x100, 0x70bd2b, 0x25dfd3fd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x6, 0x79}}}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008885}, 0x4010) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00403000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000d13b00000000000000000000000000009880cb7c3825dc38222b2756dace54240000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000051586c49498b00"/109], 0xb8}}, 0x8004) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) r10 = socket$alg(0x26, 0x5, 0x0) accept4(r10, 0x0, 0x0, 0x0) (async) r11 = accept4(r10, 0x0, 0x0, 0x0) sendmsg$kcm(r11, 0x0, 0x1) sendmsg$nl_xfrm(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000003ce5693117569a50f60000000000000000ac1e000100000000000000000000000000000000000000928e47e6f726467bd9341ac6672415103556b4cadac68b21f68248ba64bbfbd28d5239c351aeba764d5ec31dc7614df716a78e8e2a7cc13b169656af7a9e6e7b368c4b98239d020433212ee0a06fff3ee2f4df71123abc03ae34e87f8275f63f26b78163efb05cdcef", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB='\x00'/112], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b00)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fedbdf2531000000080001003c0000000c009900030000001000000008005200", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r12, @ANYBLOB="bb8cf93eab1e6f0d774174888fd5aa63f65cb0a5d89c8f1f5e7cc61065a9bbbfeb8747b95d225596be378782e41294b3d1d439ddbea15e84c3da2d9c2f8ff13a58b2a6b1b6547de59e3e1b7fce094bbc71e4aac205619e1822e301fed87101d422839a228fe12013293b8f3a23b6"], 0x38}, 0x1, 0x0, 0x0, 0x8091}, 0x4004) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b00)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fedbdf2531000000080001003c0000000c009900030000001000000008005200", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r12, @ANYBLOB="bb8cf93eab1e6f0d774174888fd5aa63f65cb0a5d89c8f1f5e7cc61065a9bbbfeb8747b95d225596be378782e41294b3d1d439ddbea15e84c3da2d9c2f8ff13a58b2a6b1b6547de59e3e1b7fce094bbc71e4aac205619e1822e301fed87101d422839a228fe12013293b8f3a23b6"], 0x38}, 0x1, 0x0, 0x0, 0x8091}, 0x4004) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfc, 0x800000}, 0xc, &(0x7f0000000400)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x2d0}], 0x1, 0xffffffffffffffff, 0x0, 0x84}, 0x8000) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfc, 0x800000}, 0xc, &(0x7f0000000400)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x2d0}], 0x1, 0xffffffffffffffff, 0x0, 0x84}, 0x8000) sendmsg$DEVLINK_CMD_RELOAD(r11, &(0x7f0000000a40)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a00)={&(0x7f0000000c40)=ANY=[@ANYBLOB="16fbe55d364a54", @ANYRES16=0x0, @ANYBLOB="200029bd7000fedbdf2525000000080001007063690011000200303030303a30303a31302e300000000008008b00", @ANYRES32=0x0, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c0004000000"], 0x60}, 0x1, 0x0, 0x0, 0x54}, 0x4004801) (async) sendmsg$DEVLINK_CMD_RELOAD(r11, &(0x7f0000000a40)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a00)={&(0x7f0000000c40)=ANY=[@ANYBLOB="16fbe55d364a54", @ANYRES16=0x0, @ANYBLOB="200029bd7000fedbdf2525000000080001007063690011000200303030303a30303a31302e300000000008008b00", @ANYRES32=0x0, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c0004000000"], 0x60}, 0x1, 0x0, 0x0, 0x54}, 0x4004801) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 2.470661985s ago: executing program 4 (id=792): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x1, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x21}, {0x8, 0x18}]}}]}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x1, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x21}, {0x8, 0x18}]}}]}]}, 0x3c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)='1', 0x1}], 0x1}, 0x1) (async) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)='1', 0x1}], 0x1}, 0x1) setsockopt$sock_attach_bpf(r2, 0x1, 0xa, &(0x7f0000000180), 0x4) recvmsg(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) socket(0x80000000000000a, 0x2, 0x0) (async) r4 = socket(0x80000000000000a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r5) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r4, @ANYRES64=r4], 0x3c}, 0x1, 0x0, 0x0, 0x24000880}, 0x8040) sendmsg$kcm(r4, &(0x7f0000000180)={&(0x7f0000000400)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000480)="553354ed6ddae2561ec582e412d02c1e0ffd3bdfdf23ef7398945a260f8e7464a354baf667847b7cb46fbe5b7f05a1b442f5b0e97489e6f24812cf512ef4a38b9dddc1b9a97f94eaa7f9c8c1b9f0fcf85db1d094610262df82a3ec09e194a694f3e51189c173e61460c5d70567d12788079d7f68e738a6a50eab6cc95ce647b5ce1a41571af6550a51bd3df9040ef16f96", 0x91}, {&(0x7f0000000840)="cba66ba2ba7cf8b6d7ad166172e316cd5b00d50cdf03dc97531fd1401ff5eebffd1803759801239b316277b547fedabc3162190331e1936bf520615389eba1078d37f54d841bb350b59c9e304c0c63a2160281b8fae6bedf2c5cd454ab2ce0398e75cffb13d636a4d5ec69d8652076a0b93475b278e2ece33354c832130c41ecdc7a4d054f00bfae04251f5626945151808529d71e", 0x95}, {&(0x7f0000000900)="d71dc4d5bfc43e3495d344f4f3de06b9ca08f57e982b1dfb3b0153ac155cc6d5ddd2a9b854038a3bb1ffee543dab9f7128b2afa45e771989c85d6a9577ad3805a50d70d27b8957c9b89041bebbc5504e9d0f2fc16d7a82c0e393c30c4a05b3005717d390eebf30faf26e21107294a2cd93c314da05b5ab2b3e2e4285814f5dc0193c5869441eab8f9e531a62183212b935d68f", 0x93}, {&(0x7f00000009c0)="752815993c76de3294439d265f805bd8789945d3a14a993775e80d3432cd5565ad3283721d124bc09ee8c1a0fb5f0efb385b47c787ad9f53abb96c5b193eb66174f3f22922dfd9e588a59f06f98eb5a871e4fd12f9523dee05fa5393f66a12a6760dd8b575ace5266ec21104afd5d845830e1cb425ebd3aca65a5cc2b1a6fbcc4f51c5d91e7192b7a112754219dea3351cde307bd065ec1d", 0x98}, {&(0x7f0000000a80)="7a63ffeca9f1f81594560c19c08fb14255d1bea19956f9adb8d0022ad2d34894197114263580be4e330df62e7920d0533fc472b61d64f649ca860b1f1957e2f4faa3716db079d9798658c80a3b565cbe8fbb728cd54a0c2da00dc4286d583e54c0d14c4e56a86d0384677b27f0377a8b5c5f97e299005d61bb3f4a224afbf129e4db2e9b9c3093909adef208d7307af6fea4c9e6c1fb79d9ef14d78f43767696d8026d4224c9945c1dd367b07ceaffd93e9b3833a421720bf59ebbe1fc81b90717bb418c8f64a34717162a34d059fa1ab5e77f55b3ae0445cd02fac79877245eb035fbe23ce799109e6d1fd1918cd3b731165cd2dc06dd", 0xf7}, {&(0x7f0000000b80)="3248c85b76ffdf1b7fff19d6d612a52e4847d901f715bfad770c2d96cd736399a60cd96e93d661acf853f3ead77fd690efe47666ab6559ee31d8656a1592922701d53433ead949bd5d9dd3189ff89c769c67e5ef34b59eb3f874f8eb2ad868db9573a9ad7f0f6d341ae9a65f136a983585726173fd4bc5934cd5a52060fd45422340783ed589bb1ecc11645ae3f124c88950d64b5308fd75c9edcb972201b1ab5187aba4c43d0bd9aa7f92ec39a71c759626ec0390b2ef41468ceeb467e77780ec99c23620d56882b5d0a9cd370b486c7dee7540", 0xd4}, {&(0x7f00000005c0)="9716190529aa77e961b061a9b8672f4d823de502e6327662e04dba668138c55a0f43f71b972f60974b0c737d4bf92ed070ccbe46cff807e974ad17d06dfb7cf96dd02771fed3e80bf86b374dd3558a0b29bf1d833b6e82e80f7fcc7b9c80988537843dd601078c", 0x67}, {&(0x7f0000000740)="9c8ad0c26d17ffe9fe28b62feeb104bab87647a92cf3276092bab2491ac80262b92ba6e6af199e9fa165f001bf2e74f455035befd4e12cd6b3409f0ccb3b9b5f5745a90816bddab98256646e940b3b719d614991144e2dd4ea755aa3ae772fe7a2a8b8", 0x63}, {&(0x7f0000001100)="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", 0x1000}], 0x9, &(0x7f00000024c0)=ANY=[@ANYBLOB="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"], 0x398}, 0x20048000) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)) r7 = socket(0x2, 0x80805, 0x0) socket$inet(0x2, 0x80001, 0x84) (async) r8 = socket$inet(0x2, 0x80001, 0x84) sendmsg$IPSET_CMD_DEL(r7, &(0x7f0000000340)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, 0xa, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x6}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x8b5}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7fffffff}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}}, 0x10) (async) sendmsg$IPSET_CMD_DEL(r7, &(0x7f0000000340)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, 0xa, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x6}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x8b5}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7fffffff}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000180)={0x101, 0x4, 0x1f4bf1ba, 0x0, r9}, 0x10) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000080)={r9, 0x5}, &(0x7f0000000100)=0x8) 2.268322301s ago: executing program 4 (id=793): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000001280), 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001200)="a912", 0x2}], 0x1}, 0x20000801) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40002002) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r2}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) tee(r4, r3, 0x80000001, 0x0) getsockname$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10) 2.266752732s ago: executing program 0 (id=710): socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x140a, 0x200, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000814) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x3}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r2, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xc}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) (async) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8040005}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) sendto$ax25(r3, &(0x7f00000003c0)="721358fca1a89cabb54f7f569e1582e7f4c417935908e55a6db095d09a211d55b8b9fafff434759e00785f27b35addc832f6c9270aa6329c7babccf9c594ad2bd3d70d7be4c1803ddde8c14d3c96597bdf8bd07881bb0b4584e08ed1f62bd80e138358e6929b0a85776a1b4c0427192022287b4f03ec2280ce47170c8de4ff42bfecbbe85adefafba04b746ba8c2dea4cc9585cec51508b0116372588b79c91545c7524b76ea967060fdf57d316d61f32101d7b8375192959aa84e29f73814bddd639366ae7b", 0xc6, 0x891, &(0x7f00000004c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) (async) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r1) (async) socketpair(0x1d, 0x80000, 0xffffff7f, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQ(r5, 0x5411, &(0x7f00000005c0)) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000640)={0x15c, r2, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x3b}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffff2}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x15c}}, 0x4000) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r6) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x28, r7, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x7c}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x10) (async) r8 = socket$netlink(0x10, 0x3, 0xc) listen(r8, 0x200) sendmsg$nl_route(r5, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)=@ipv6_newroute={0x2c, 0x18, 0x1, 0x70bd2c, 0x25dfdbfc, {0xa, 0x0, 0x14, 0x8, 0xfd, 0x4, 0xfd, 0x3, 0x1200}, [@RTA_MARK={0x8, 0x10, 0x4}, @RTA_MARK={0x8, 0x10, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000845}, 0x44811) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r5) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000c80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b00)={0x11c, r9, 0x20, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x76}, @val={0x8}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "dae2d7c16bff9b22d8b070b46f6d04c1b5d5fa51b96a0bb5"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5f2ba73dadae92b46ece60b0e59306c1cd7daad8bdc72589"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "132d7c634808aa90be907df3b4e9e48b4b044cdb0f014638"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000850}, 0x4008) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d00)={r10}, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000e00)={'syztnl2\x00', &(0x7f0000000d80)={'ip6_vti0\x00', 0x0, 0x4, 0x3, 0xf9, 0xffffffff, 0x6, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000, 0x7800, 0xfffffff9, 0x6}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000ec0)={'sit0\x00', &(0x7f0000000e40)={'tunl0\x00', 0x0, 0x80, 0x8000, 0x5, 0x6, {{0x10, 0x4, 0x0, 0x1f, 0x40, 0x68, 0x0, 0x5, 0x2f, 0x0, @multicast1, @broadcast, {[@noop, @lsrr={0x83, 0x23, 0x78, [@remote, @private=0xa010101, @broadcast, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4}, @noop, @noop]}}}}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000001000)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f00)={0xb0, r4, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7c}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x2000c8c0}, 0x20044014) (async) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r5, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x40, 0x140d, 0x200, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x40}}, 0x4000000) (async) r13 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r13, 0x6, 0x1, &(0x7f0000001140), &(0x7f0000001180)=0x4) (async) clock_gettime(0x0, &(0x7f0000001280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000011c0)={0x9, 0x8000000000000000, 0x2, 0x1, 0xb, 0x0, 0x3, 0x4}, &(0x7f0000001200)={0x0, 0x8, 0x3, 0x8000, 0x4, 0x4, 0x9}, &(0x7f0000001240)={0x7, 0x7, 0x5, 0x8, 0x2, 0xffffffffffffffc0, 0x0, 0xffffffffffff3e94}, &(0x7f00000012c0)={r14, r15+60000000}, &(0x7f0000001340)={&(0x7f0000001300)={[0x4]}, 0x8}) 1.884103478s ago: executing program 1 (id=16): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xf, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r2, &(0x7f0000000140)="de3db46cfe13eafc153f31a685d2b9b7f124fdd55e0f651a071e1bffe4fbf457b847ca780558a50decd555e15d358a5f56df91474c25294c210211b779627e99f16150d6fe752d5b49dfa8b62ea89ac5efa20fcc4e4cb91e8571ffcf0f4522bb10c8660c3fe83a5451a4589a372daced2bc6cddbfa293735119175c62d9e885b6fa8568c", &(0x7f00000000c0)=""/52}, 0x20) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r4, @ANYBLOB="0000520006000500010000000800", @ANYRES32=r4], 0x2c}}, 0x0) 697.214683ms ago: executing program 2 (id=794): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='memory.swap.current\x00', 0x275a, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x10, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8804}, 0x800) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r1, @ANYRES64=r2, @ANYRES8=r0], 0xa7) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000e9ffff3f00000094fffff600"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) (async) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000000)="3f0000000100f4", 0x7) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) nanosleep(&(0x7f0000000000), 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3d, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 64) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r5, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r6 = socket(0x10, 0x3, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x840c0) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x22040000) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r8, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) recvmmsg(r8, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000011c0)=""/70, 0x46}, {&(0x7f00000000c0)=""/43, 0x2b}, {&(0x7f0000002a00)=""/4106, 0x100a}], 0x3}, 0x1801}], 0x1, 0x0, 0x0) (async, rerun: 32) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000300)=ANY=[@ANYBLOB="32000084060000b90c000000"], 0x8) (rerun: 32) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r6) r9 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, 0x0) 688.022262ms ago: executing program 3 (id=795): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket(0x2, 0x3, 0xff) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000300)={0x9, 0xffffffff, 0x9}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="180200000000000000000000000000008500000022000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000017"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0x6, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r2], 0x2c}, 0x1, 0x0, 0x0, 0x20008804}, 0x40043) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000003000000040122000b00000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESOCT=r2, @ANYBLOB='\x00'/28], 0x48) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x2}, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r4, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={0xffffffffffffffff, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r6, 0x0, &(0x7f0000000140)=""/75}, 0x20) unshare(0x20000400) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000030c0), 0x82200, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000003100)=0x3) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 686.66398ms ago: executing program 4 (id=796): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x7, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0xfffffffffffffd93, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}], 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) recvmmsg(r1, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES8=r1, @ANYRES8=0x0], 0xfc}}, 0x48000) 524.417156ms ago: executing program 4 (id=797): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000068000100000080fe000000000a000000000000000c0008800800030000000000060007000200000008000500", @ANYRES32=r1, @ANYBLOB="140006"], 0x48}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) 508.128622ms ago: executing program 2 (id=798): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff0204000000000100000000000000000000000000000205", 0x18) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000500)={0x1f}, 0x8) sendmmsg$inet6(r1, &(0x7f0000003400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008230000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000060ff850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff, @void, @value}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x0, 0xfd, 0xfffffffb, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffe, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map, 0x5, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 320.912248ms ago: executing program 2 (id=799): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000080)={0x0, 'rose0\x00', {0x2}, 0x4}) 0s ago: executing program 4 (id=800): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x3, 0x0, 0x0, 0x8, 0x1}]}}, 0x0, 0x26, 0x0, 0x1, 0x5, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000050000000600000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/15], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@dellink={0x28, 0x11, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x4430, 0x2000}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4048080) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x2c}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xb682, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)={0x28, r6, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x2040094) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r4, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd7000ffdbdf251200000008000300", @ANYRES32=r7, @ANYBLOB="0c0006000200000002000000080003001fcd49b52b7a13ce3def4e31e34aee3060", @ANYRES32=r8, @ANYBLOB="0c0006000300000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4004) kernel console output (not intermixed with test programs): 6546] bond0: (slave team0): Enslaving as an active interface with an up link [ 96.540671][ T6551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.127'. [ 97.395994][ T5839] Bluetooth: hci4: command 0x041b tx timeout [ 97.564565][ T6561] netlink: 12 bytes leftover after parsing attributes in process `syz.4.129'. [ 97.951956][ T6539] netlink: 184 bytes leftover after parsing attributes in process `syz.0.123'. [ 98.067933][ T6561] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.077052][ T6561] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.112581][ T6561] bridge0: entered allmulticast mode [ 98.204369][ T6569] Cannot find set identified by id 0 to match [ 98.225695][ T6569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.132'. [ 98.327728][ T6569] pim6reg: entered allmulticast mode [ 98.434008][ T11] hsr_slave_0: left promiscuous mode [ 98.445963][ T11] hsr_slave_1: left promiscuous mode [ 98.457732][ T6578] xt_TCPMSS: Only works on TCP SYN packets [ 98.461312][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.474989][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.489765][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.491594][ T6579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.133'. [ 98.508416][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.543455][ T6578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.133'. [ 98.549573][ T11] veth1_macvtap: left promiscuous mode [ 98.558854][ T11] veth0_macvtap: left promiscuous mode [ 98.564483][ T11] veth1_vlan: left promiscuous mode [ 98.574240][ T11] veth0_vlan: left promiscuous mode [ 99.101627][ T11] team0 (unregistering): Port device team_slave_1 removed [ 99.140405][ T11] team0 (unregistering): Port device team_slave_0 removed [ 99.467888][ T5839] Bluetooth: hci4: command 0x041b tx timeout [ 99.570814][ T6569] pim6reg: left allmulticast mode [ 99.682608][ T6461] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.706950][ T6461] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.736116][ T6461] bridge_slave_0: entered allmulticast mode [ 99.743251][ T6461] bridge_slave_0: entered promiscuous mode [ 99.751131][ T6461] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.763176][ T6461] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.771090][ T6461] bridge_slave_1: entered allmulticast mode [ 99.778771][ T6461] bridge_slave_1: entered promiscuous mode [ 99.923495][ T6600] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.138'. [ 99.945891][ T6461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.056417][ T6461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.117502][ T6604] netlink: 92 bytes leftover after parsing attributes in process `syz.4.139'. [ 100.304572][ T6461] team0: Port device team_slave_0 added [ 100.332227][ T6609] openvswitch: netlink: Duplicate key (type 32). [ 100.439283][ T6461] team0: Port device team_slave_1 added [ 100.557196][ C0] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 100.575691][ T6617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.142'. [ 100.698733][ T6461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.729638][ T6461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.845484][ T6461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.000355][ T6461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.024078][ T6461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.111224][ T6461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.381126][ T6461] hsr_slave_0: entered promiscuous mode [ 101.411661][ T6461] hsr_slave_1: entered promiscuous mode [ 101.479898][ T6461] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.512165][ T6640] netlink: 64 bytes leftover after parsing attributes in process `syz.2.144'. [ 101.545794][ T5839] Bluetooth: hci4: command 0x041b tx timeout [ 101.555514][ T6461] Cannot create hsr debugfs directory [ 101.666990][ T6648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.144'. [ 101.691523][ T6648] netlink: 28 bytes leftover after parsing attributes in process `syz.2.144'. [ 102.159493][ T6660] sctp: [Deprecated]: syz.4.145 (pid 6660) Use of int in max_burst socket option. [ 102.159493][ T6660] Use struct sctp_assoc_value instead [ 102.331740][ T6667] netlink: 'syz.2.146': attribute type 1 has an invalid length. [ 102.339676][ T6667] netlink: 'syz.2.146': attribute type 3 has an invalid length. [ 102.348579][ T6667] netlink: 224 bytes leftover after parsing attributes in process `syz.2.146'. [ 102.409183][ T6670] pim6reg: entered allmulticast mode [ 102.436842][ T6666] pim6reg: left allmulticast mode [ 102.673165][ T6677] netlink: 28 bytes leftover after parsing attributes in process `syz.4.150'. [ 102.914641][ T6683] sctp: [Deprecated]: syz.0.151 (pid 6683) Use of int in max_burst socket option. [ 102.914641][ T6683] Use struct sctp_assoc_value instead [ 102.987573][ T6680] sctp: [Deprecated]: syz.0.151 (pid 6680) Use of int in max_burst socket option. [ 102.987573][ T6680] Use struct sctp_assoc_value instead [ 103.090298][ T6691] netlink: 'syz.3.152': attribute type 29 has an invalid length. [ 103.161294][ T6691] netlink: 'syz.3.152': attribute type 29 has an invalid length. [ 103.213067][ T6691] netlink: 516 bytes leftover after parsing attributes in process `syz.3.152'. [ 103.222207][ T6461] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 103.281787][ T6461] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 103.282935][ T6691] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 103.317375][ T6461] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 103.425844][ T6461] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 103.437095][ T6700] netlink: 'syz.2.154': attribute type 3 has an invalid length. [ 103.625685][ T5839] Bluetooth: hci4: command 0x041b tx timeout [ 103.774450][ T6461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.790922][ T6461] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.812922][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.820143][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.853895][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.861133][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.057638][ T6461] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 104.447913][ T6749] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 104.774278][ T6461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.001653][ T6461] veth0_vlan: entered promiscuous mode [ 105.050273][ T6461] veth1_vlan: entered promiscuous mode [ 105.212951][ T6461] veth0_macvtap: entered promiscuous mode [ 105.221298][ T6772] netlink: 16 bytes leftover after parsing attributes in process `syz.2.167'. [ 105.257074][ T6461] veth1_macvtap: entered promiscuous mode [ 105.405715][ T6772] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 105.415816][ T6461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.461547][ T6461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.473396][ T6461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.496670][ T6461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.514931][ T6783] netlink: 68 bytes leftover after parsing attributes in process `syz.2.167'. [ 105.525785][ T6461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.555570][ T6461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.594887][ T6461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.612317][ T6461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.631564][ T6461] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.661076][ T6788] netlink: 'syz.3.170': attribute type 6 has an invalid length. [ 105.687506][ T6788] netlink: 'syz.3.170': attribute type 7 has an invalid length. [ 105.705731][ T6788] netlink: 'syz.3.170': attribute type 8 has an invalid length. [ 105.754243][ T6461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.795856][ T6461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.825249][ T6461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.859339][ T6461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.869787][ T6461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.904733][ T6461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.914617][ T6461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.936420][ T6461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.948557][ T6461] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.958365][ T6742] lo speed is unknown, defaulting to 1000 [ 105.959939][ T6461] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.972876][ T6461] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.981744][ T6461] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.990525][ T6461] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.012564][ T6804] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 106.040567][ T6742] lo speed is unknown, defaulting to 1000 [ 106.078880][ T6742] lo speed is unknown, defaulting to 1000 [ 106.196965][ T6816] FAULT_INJECTION: forcing a failure. [ 106.196965][ T6816] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 106.210300][ T6816] CPU: 1 UID: 0 PID: 6816 Comm: syz.2.174 Not tainted 6.13.0-rc5-syzkaller-00872-g7bf1659bad4e #0 [ 106.212435][ T6742] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 106.220903][ T6816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 106.220933][ T6816] Call Trace: [ 106.220942][ T6816] [ 106.220950][ T6816] dump_stack_lvl+0x241/0x360 [ 106.220994][ T6816] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.221016][ T6816] ? __pfx__printk+0x10/0x10 [ 106.221038][ T6816] ? __pfx_lock_release+0x10/0x10 [ 106.221068][ T6816] should_fail_ex+0x3b0/0x4e0 [ 106.221101][ T6816] _copy_from_user+0x2f/0xc0 [ 106.221125][ T6816] copy_msghdr_from_user+0xae/0x680 [ 106.221154][ T6816] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 106.221175][ T6816] ? __fget_files+0x2a/0x410 [ 106.288702][ T6816] ? __fget_files+0x2a/0x410 [ 106.293357][ T6816] __sys_sendmsg+0x209/0x350 [ 106.297963][ T6816] ? __pfx_lock_release+0x10/0x10 [ 106.302993][ T6816] ? __pfx___sys_sendmsg+0x10/0x10 [ 106.308133][ T6816] ? __pfx_vfs_write+0x10/0x10 [ 106.312929][ T6816] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 106.319277][ T6816] ? do_syscall_64+0x100/0x230 [ 106.324049][ T6816] ? do_syscall_64+0xb6/0x230 [ 106.328733][ T6816] do_syscall_64+0xf3/0x230 [ 106.333240][ T6816] ? clear_bhb_loop+0x35/0x90 [ 106.337937][ T6816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.343845][ T6816] RIP: 0033:0x7fa6a0385d29 [ 106.348264][ T6816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.367985][ T6816] RSP: 002b:00007fa6a110b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.376418][ T6816] RAX: ffffffffffffffda RBX: 00007fa6a0575fa0 RCX: 00007fa6a0385d29 [ 106.384401][ T6816] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 106.392378][ T6816] RBP: 00007fa6a110b090 R08: 0000000000000000 R09: 0000000000000000 [ 106.400356][ T6816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.408334][ T6816] R13: 0000000000000000 R14: 00007fa6a0575fa0 R15: 00007ffd96cc09f8 [ 106.416319][ T6816] [ 106.618634][ T6742] lo speed is unknown, defaulting to 1000 [ 106.630239][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.638135][ T2126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.638161][ T2126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.655967][ T6821] netlink: 28 bytes leftover after parsing attributes in process `syz.0.176'. [ 106.671943][ T6821] netlink: 28 bytes leftover after parsing attributes in process `syz.0.176'. [ 106.688861][ T6821] ipvlan1: entered promiscuous mode [ 106.695143][ T6821] ipvlan1: left promiscuous mode [ 106.715677][ T6742] lo speed is unknown, defaulting to 1000 [ 106.722694][ T6742] lo speed is unknown, defaulting to 1000 [ 106.730978][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.741150][ T6742] lo speed is unknown, defaulting to 1000 [ 106.802522][ T6742] lo speed is unknown, defaulting to 1000 [ 106.815998][ T6742] lo speed is unknown, defaulting to 1000 [ 107.064657][ T6843] netlink: 40 bytes leftover after parsing attributes in process `syz.3.178'. [ 107.106534][ T6841] netlink: 'syz.2.180': attribute type 2 has an invalid length. [ 107.692875][ T6868] raw_sendmsg: syz.0.185 forgot to set AF_INET. Fix it! [ 107.833483][ T6879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.186'. [ 108.061263][ T6884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.188'. [ 108.095444][ T6884] netlink: 'syz.4.188': attribute type 22 has an invalid length. [ 108.121257][ T6884] netlink: 4 bytes leftover after parsing attributes in process `syz.4.188'. [ 108.489244][ T6907] netlink: 244 bytes leftover after parsing attributes in process `syz.3.192'. [ 108.742593][ T71] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.892800][ T6885] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 109.010076][ T6922] netlink: 64 bytes leftover after parsing attributes in process `syz.2.195'. [ 109.100009][ T6920] netlink: 'syz.4.196': attribute type 5 has an invalid length. [ 109.122808][ T71] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.366580][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 109.377435][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 109.387460][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 109.405121][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 109.435529][ T5845] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 109.443504][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 109.445916][ T71] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.837430][ T71] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.930762][ T6971] syz.0.203 uses old SIOCAX25GETINFO [ 110.105339][ T5845] Bluetooth: hci0: command 0x0401 tx timeout [ 110.475698][ T6959] __nla_validate_parse: 2 callbacks suppressed [ 110.475723][ T6959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.203'. [ 111.149256][ T6994] netlink: 28 bytes leftover after parsing attributes in process `syz.0.207'. [ 111.165220][ T71] bridge_slave_1: left allmulticast mode [ 111.170951][ T71] bridge_slave_1: left promiscuous mode [ 111.220613][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.279690][ T71] bridge_slave_0: left allmulticast mode [ 111.310209][ T71] bridge_slave_0: left promiscuous mode [ 111.324883][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.546064][ T5845] Bluetooth: hci4: command tx timeout [ 111.822957][ T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.839758][ T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.852670][ T71] bond0 (unregistering): Released all slaves [ 111.902448][ T7013] veth1: entered promiscuous mode [ 111.909091][ T7013] macsec1: entered promiscuous mode [ 111.920024][ T7013] macsec1: entered allmulticast mode [ 111.932077][ T7013] veth1: entered allmulticast mode [ 111.983814][ T7013] veth1: left allmulticast mode [ 111.987066][ T7018] netlink: 12 bytes leftover after parsing attributes in process `syz.0.213'. [ 111.995293][ T7013] veth1: left promiscuous mode [ 112.083130][ T6933] chnl_net:caif_netlink_parms(): no params data found [ 112.145747][ T7018] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.222808][ T7025] xt_l2tp: missing protocol rule (udp|l2tpip) [ 112.376535][ T7038] FAULT_INJECTION: forcing a failure. [ 112.376535][ T7038] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.394816][ T7038] CPU: 1 UID: 0 PID: 7038 Comm: syz.4.219 Not tainted 6.13.0-rc5-syzkaller-00872-g7bf1659bad4e #0 [ 112.405465][ T7038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 112.415553][ T7038] Call Trace: [ 112.418853][ T7038] [ 112.421803][ T7038] dump_stack_lvl+0x241/0x360 [ 112.426524][ T7038] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.431758][ T7038] ? __pfx__printk+0x10/0x10 [ 112.436467][ T7038] ? __pfx_lock_release+0x10/0x10 [ 112.441547][ T7038] should_fail_ex+0x3b0/0x4e0 [ 112.446320][ T7038] _copy_from_iter+0x1e9/0x1c20 [ 112.451208][ T7038] ? __virt_addr_valid+0x183/0x530 [ 112.456366][ T7038] ? __alloc_skb+0x28f/0x440 [ 112.460981][ T7038] ? __pfx__copy_from_iter+0x10/0x10 [ 112.466565][ T7038] ? __virt_addr_valid+0x183/0x530 [ 112.471725][ T7038] ? __virt_addr_valid+0x183/0x530 [ 112.476872][ T7038] ? __virt_addr_valid+0x45f/0x530 [ 112.482009][ T7038] ? __phys_addr_symbol+0x2f/0x70 [ 112.487060][ T7038] ? __check_object_size+0x47a/0x730 [ 112.492380][ T7038] netlink_sendmsg+0x73d/0xcb0 [ 112.497187][ T7038] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.502512][ T7038] ? aa_sock_msg_perm+0x91/0x160 [ 112.507485][ T7038] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.512800][ T7038] __sock_sendmsg+0x221/0x270 [ 112.517518][ T7038] ____sys_sendmsg+0x52a/0x7e0 [ 112.522408][ T7038] ? __pfx_____sys_sendmsg+0x10/0x10 [ 112.527718][ T7038] ? __fget_files+0x2a/0x410 [ 112.532340][ T7038] ? __fget_files+0x2a/0x410 [ 112.536966][ T7038] __sys_sendmsg+0x269/0x350 [ 112.541586][ T7038] ? __pfx_lock_release+0x10/0x10 [ 112.546640][ T7038] ? __pfx___sys_sendmsg+0x10/0x10 [ 112.551786][ T7038] ? __pfx_vfs_write+0x10/0x10 [ 112.556603][ T7038] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 112.562956][ T7038] ? do_syscall_64+0x100/0x230 [ 112.567768][ T7038] ? do_syscall_64+0xb6/0x230 [ 112.572469][ T7038] do_syscall_64+0xf3/0x230 [ 112.576996][ T7038] ? clear_bhb_loop+0x35/0x90 [ 112.581702][ T7038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.587628][ T7038] RIP: 0033:0x7f85fb585d29 [ 112.592062][ T7038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.611704][ T7038] RSP: 002b:00007f85fc3a9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.620181][ T7038] RAX: ffffffffffffffda RBX: 00007f85fb775fa0 RCX: 00007f85fb585d29 [ 112.628193][ T7038] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 112.636206][ T7038] RBP: 00007f85fc3a9090 R08: 0000000000000000 R09: 0000000000000000 [ 112.644210][ T7038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.652301][ T7038] R13: 0000000000000000 R14: 00007f85fb775fa0 R15: 00007ffd67dc9b78 [ 112.660322][ T7038] [ 112.749819][ T7049] netlink: 4 bytes leftover after parsing attributes in process `syz.4.221'. [ 112.880545][ T7057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.222'. [ 112.978319][ T7062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.222'. [ 112.991598][ T7062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.222'. [ 113.016555][ T7062] netlink: 44 bytes leftover after parsing attributes in process `syz.2.222'. [ 113.086247][ T7061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.222'. [ 113.103566][ T7057] batadv1: entered promiscuous mode [ 113.110406][ T7061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.222'. [ 113.111367][ C1] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 113.270875][ T6933] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.292643][ T6933] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.314324][ T6933] bridge_slave_0: entered allmulticast mode [ 113.331729][ T6933] bridge_slave_0: entered promiscuous mode [ 113.344362][ T6933] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.372212][ T6933] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.392604][ T6933] bridge_slave_1: entered allmulticast mode [ 113.411963][ T6933] bridge_slave_1: entered promiscuous mode [ 113.485913][ T71] hsr_slave_0: left promiscuous mode [ 113.509414][ T71] hsr_slave_1: left promiscuous mode [ 113.535514][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.556323][ T71] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.574493][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.582593][ T71] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.624903][ T5845] Bluetooth: hci4: command tx timeout [ 113.642339][ T71] veth1_macvtap: left promiscuous mode [ 113.648151][ T71] veth0_macvtap: left promiscuous mode [ 113.655891][ T71] veth1_vlan: left promiscuous mode [ 113.663596][ T71] veth0_vlan: left promiscuous mode [ 113.757597][ T7100] FAULT_INJECTION: forcing a failure. [ 113.757597][ T7100] name failslab, interval 1, probability 0, space 0, times 0 [ 113.771191][ T7100] CPU: 1 UID: 0 PID: 7100 Comm: syz.2.231 Not tainted 6.13.0-rc5-syzkaller-00872-g7bf1659bad4e #0 [ 113.781823][ T7100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 113.791911][ T7100] Call Trace: [ 113.795216][ T7100] [ 113.798167][ T7100] dump_stack_lvl+0x241/0x360 [ 113.802969][ T7100] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.808209][ T7100] ? __pfx__printk+0x10/0x10 [ 113.812843][ T7100] should_fail_ex+0x3b0/0x4e0 [ 113.817556][ T7100] should_failslab+0xac/0x100 [ 113.822252][ T7100] ? skb_clone+0x20c/0x390 [ 113.826676][ T7100] kmem_cache_alloc_noprof+0x70/0x380 [ 113.832061][ T7100] skb_clone+0x20c/0x390 [ 113.836310][ T7100] __netlink_deliver_tap+0x3cc/0x7f0 [ 113.841601][ T7100] ? netlink_deliver_tap+0x2e/0x1b0 [ 113.846800][ T7100] netlink_deliver_tap+0x19d/0x1b0 [ 113.851912][ T7100] netlink_unicast+0x7c4/0x990 [ 113.856685][ T7100] ? __pfx_netlink_unicast+0x10/0x10 [ 113.861983][ T7100] ? __virt_addr_valid+0x45f/0x530 [ 113.867098][ T7100] ? __phys_addr_symbol+0x2f/0x70 [ 113.872123][ T7100] ? __check_object_size+0x47a/0x730 [ 113.877415][ T7100] netlink_sendmsg+0x8e4/0xcb0 [ 113.882184][ T7100] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.887472][ T7100] ? aa_sock_msg_perm+0x91/0x160 [ 113.892410][ T7100] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.897690][ T7100] __sock_sendmsg+0x221/0x270 [ 113.902373][ T7100] ____sys_sendmsg+0x52a/0x7e0 [ 113.907143][ T7100] ? __pfx_____sys_sendmsg+0x10/0x10 [ 113.912424][ T7100] ? __fget_files+0x2a/0x410 [ 113.917016][ T7100] ? __fget_files+0x2a/0x410 [ 113.921613][ T7100] __sys_sendmsg+0x269/0x350 [ 113.926198][ T7100] ? __pfx_lock_release+0x10/0x10 [ 113.931227][ T7100] ? __pfx___sys_sendmsg+0x10/0x10 [ 113.936356][ T7100] ? __pfx_vfs_write+0x10/0x10 [ 113.941135][ T7100] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 113.947461][ T7100] ? do_syscall_64+0x100/0x230 [ 113.952225][ T7100] ? do_syscall_64+0xb6/0x230 [ 113.956898][ T7100] do_syscall_64+0xf3/0x230 [ 113.961395][ T7100] ? clear_bhb_loop+0x35/0x90 [ 113.966091][ T7100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.971982][ T7100] RIP: 0033:0x7fa6a0385d29 [ 113.976397][ T7100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.996106][ T7100] RSP: 002b:00007fa6a110b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 114.004517][ T7100] RAX: ffffffffffffffda RBX: 00007fa6a0575fa0 RCX: 00007fa6a0385d29 [ 114.012481][ T7100] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 114.020446][ T7100] RBP: 00007fa6a110b090 R08: 0000000000000000 R09: 0000000000000000 [ 114.028411][ T7100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.036380][ T7100] R13: 0000000000000000 R14: 00007fa6a0575fa0 R15: 00007ffd96cc09f8 [ 114.044361][ T7100] [ 114.172760][ T7103] rdma_op ffff88805b2339f0 conn xmit_rdma 0000000000000000 [ 114.186407][ T7103] netlink: 'syz.4.232': attribute type 27 has an invalid length. [ 114.479615][ T71] team0 (unregistering): Port device team_slave_1 removed [ 114.530984][ T71] team0 (unregistering): Port device team_slave_0 removed [ 114.988028][ T6933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.047536][ T6933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.168828][ T7110] xt_hashlimit: max too large, truncated to 1048576 [ 115.245234][ T7116] netlink: zone id is out of range [ 115.265171][ T7116] netlink: zone id is out of range [ 115.284329][ T7116] netlink: del zone limit has 8 unknown bytes [ 115.314156][ T6933] team0: Port device team_slave_0 added [ 115.358369][ T7113] geneve2: entered promiscuous mode [ 115.547519][ T6933] team0: Port device team_slave_1 added [ 115.592402][ T7129] __nla_validate_parse: 7 callbacks suppressed [ 115.592425][ T7129] netlink: 112 bytes leftover after parsing attributes in process `syz.4.239'. [ 115.626960][ T7129] netlink: 'syz.4.239': attribute type 1 has an invalid length. [ 115.704842][ T5845] Bluetooth: hci4: command tx timeout [ 115.753909][ T6933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.759593][ T7140] netlink: 4 bytes leftover after parsing attributes in process `syz.2.241'. [ 115.804802][ T6933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.893750][ T6933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.922802][ T7141] tap0: tun_chr_ioctl cmd 1074025677 [ 115.940414][ T7141] tap0: linktype set to 774 [ 115.986871][ T7147] geneve0: entered allmulticast mode [ 116.038838][ T6933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.070505][ T6933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.104815][ T6933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.205754][ T7160] Cannot find add_set index 0 as target [ 116.259369][ C1] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 116.281457][ T7159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.246'. [ 116.329483][ T6933] hsr_slave_0: entered promiscuous mode [ 116.376949][ T6933] hsr_slave_1: entered promiscuous mode [ 116.390874][ T6933] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 116.398738][ T6933] Cannot create hsr debugfs directory [ 116.411824][ T7159] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 116.494954][ T7170] netlink: 4 bytes leftover after parsing attributes in process `syz.0.247'. [ 116.550447][ T7170] netlink: 24 bytes leftover after parsing attributes in process `syz.0.247'. [ 116.833633][ T7175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.250'. [ 116.950922][ T974] IPVS: starting estimator thread 0... [ 116.966601][ T7178] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 116.986452][ T7180] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.086425][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz.4.252'. [ 117.098552][ T7184] netlink: 44 bytes leftover after parsing attributes in process `syz.4.252'. [ 117.225237][ T7183] IPVS: using max 25 ests per chain, 60000 per kthread [ 117.680688][ T7213] netlink: 16 bytes leftover after parsing attributes in process `syz.4.257'. [ 117.774908][ T7192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.254'. [ 117.795237][ T5845] Bluetooth: hci4: command tx timeout [ 118.374055][ T7227] openvswitch: netlink: Tunnel attr 223 out of range max 16 [ 118.559642][ T7232] netlink: 'syz.0.262': attribute type 3 has an invalid length. [ 118.587242][ T7232] netlink: 'syz.0.262': attribute type 3 has an invalid length. [ 118.616000][ T7213] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 118.647819][ T7213] syz.4.257 (7213) used greatest stack depth: 18512 bytes left [ 118.884848][ T6933] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 118.897981][ T6933] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 118.950194][ T6933] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 119.042225][ T6933] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 119.322492][ T6933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.390830][ T6933] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.494703][ T5985] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.501873][ T5985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.561963][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.569164][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.654081][ T6933] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 119.687928][ T6933] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 119.717808][ T7275] netlink: 'syz.3.269': attribute type 4 has an invalid length. [ 120.078158][ T6933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.208785][ T6933] veth0_vlan: entered promiscuous mode [ 120.220874][ T6933] veth1_vlan: entered promiscuous mode [ 120.286059][ T6933] veth0_macvtap: entered promiscuous mode [ 120.310291][ T6933] veth1_macvtap: entered promiscuous mode [ 120.363787][ T7301] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 120.451991][ T6933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.472904][ T6933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.493857][ T6933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.517063][ T6933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.538662][ T6933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.560131][ T6933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.581404][ T6933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.616179][ T6933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.627992][ T6933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.740482][ T7282] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 120.757629][ T6933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.781153][ T6933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.831244][ T6933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.856734][ T6933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.878060][ T6933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.913062][ T6933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.933415][ T6933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.958842][ T6933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.982951][ T6933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.016306][ T7324] netlink: 'syz.4.277': attribute type 1 has an invalid length. [ 121.051512][ T7324] __nla_validate_parse: 13 callbacks suppressed [ 121.051532][ T7324] netlink: 224 bytes leftover after parsing attributes in process `syz.4.277'. [ 121.154023][ T6933] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.173887][ T6933] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.194590][ T6933] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.205206][ T6933] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.307678][ T7346] ax25_connect(): syz.0.279 uses autobind, please contact jreuter@yaina.de [ 121.584390][ C0] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 121.681082][ T7356] netlink: 'syz.4.281': attribute type 8 has an invalid length. [ 121.698962][ T7350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.280'. [ 121.844000][ T7337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.860258][ T7360] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 121.878813][ T7337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.084144][ T7334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.092439][ T7334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.443962][ T7382] IPVS: set_ctl: invalid protocol: 94 127.0.0.1:20000 [ 122.516945][ T7387] netlink: 156 bytes leftover after parsing attributes in process `syz.2.290'. [ 122.562499][ T7388] openvswitch: netlink: ERSPAN option length err (len 4096, max 255). [ 122.819773][ T7395] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 122.997002][ T7399] vlan0: entered promiscuous mode [ 123.028871][ T7399] team0: Port device vlan0 added [ 123.174057][ T2126] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.248884][ T2126] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.314266][ T2126] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.387252][ T2126] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.506214][ T2126] bridge_slave_1: left allmulticast mode [ 123.511912][ T2126] bridge_slave_1: left promiscuous mode [ 123.560761][ T2126] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.592558][ T2126] bridge_slave_0: left allmulticast mode [ 123.614975][ T2126] bridge_slave_0: left promiscuous mode [ 123.620765][ T2126] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.644988][ C1] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 123.658323][ T7416] netlink: 4 bytes leftover after parsing attributes in process `syz.3.298'. [ 123.659542][ T7417] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 123.970449][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 123.981479][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 123.990010][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 124.011529][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 124.021707][ T5839] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 124.030206][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 124.452298][ T2126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.463284][ T2126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.476191][ T2126] bond0 (unregistering): Released all slaves [ 125.397035][ T2126] hsr_slave_0: left promiscuous mode [ 125.421145][ T2126] hsr_slave_1: left promiscuous mode [ 125.432829][ T2126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.441822][ T2126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.459503][ T2126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.474053][ T2126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.534479][ T7481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.309'. [ 125.559094][ T2126] veth1_macvtap: left promiscuous mode [ 125.575305][ T2126] veth0_macvtap: left promiscuous mode [ 125.582289][ T2126] veth1_vlan: left promiscuous mode [ 125.602695][ T2126] veth0_vlan: left promiscuous mode [ 125.819400][ T7490] openvswitch: netlink: Key type 145 is out of range max 32 [ 126.106101][ T5839] Bluetooth: hci4: command tx timeout [ 126.113588][ T2126] team0 (unregistering): Port device team_slave_1 removed [ 126.154469][ T2126] team0 (unregistering): Port device team_slave_0 removed [ 126.495328][ T7429] chnl_net:caif_netlink_parms(): no params data found [ 126.783663][ T7493] netlink: 36 bytes leftover after parsing attributes in process `syz.2.312'. [ 126.874491][ T7505] atomic_op ffff88802f401198 conn xmit_atomic 0000000000000000 [ 126.913150][ T7509] netlink: 1264 bytes leftover after parsing attributes in process `syz.2.312'. [ 126.958850][ T7506] netlink: 28 bytes leftover after parsing attributes in process `syz.2.312'. [ 126.995440][ T7493] smc: net device bond0 applied user defined pnetid S [ 127.005067][ T7506] netlink: 28 bytes leftover after parsing attributes in process `syz.2.312'. [ 127.030385][ T7429] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.063525][ T7429] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.082256][ T7429] bridge_slave_0: entered allmulticast mode [ 127.095819][ T7429] bridge_slave_0: entered promiscuous mode [ 127.145668][ T7429] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.186763][ T7429] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.194074][ T7429] bridge_slave_1: entered allmulticast mode [ 127.232884][ T7429] bridge_slave_1: entered promiscuous mode [ 127.333632][ T7429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.352473][ T7429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.402703][ T7429] team0: Port device team_slave_0 added [ 127.412619][ T7429] team0: Port device team_slave_1 added [ 127.413081][ T7523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.315'. [ 127.465946][ T7429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.472957][ T7429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.499191][ T7429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.519065][ T7524] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 127.528782][ T7429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.535944][ T7429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.562607][ T7429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.682465][ T7429] hsr_slave_0: entered promiscuous mode [ 127.704253][ T7429] hsr_slave_1: entered promiscuous mode [ 127.719962][ T7429] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.737969][ T7429] Cannot create hsr debugfs directory [ 127.754980][ T7529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.318'. [ 128.124510][ T7541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.196683][ T5839] Bluetooth: hci4: command tx timeout [ 128.635067][ T7563] tipc: Enabling of bearer rejected, failed to enable media [ 128.818404][ T7567] netlink: 'syz.2.327': attribute type 3 has an invalid length. [ 128.849788][ T7567] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.327'. [ 128.909787][ T7570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.329'. [ 128.921627][ T7566] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 128.932985][ T7571] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 128.942822][ T7566] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 128.961131][ T5882] IPVS: starting estimator thread 0... [ 128.969820][ T7570] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 128.980753][ T7570] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 129.084812][ T7572] IPVS: using max 30 ests per chain, 72000 per kthread [ 129.129431][ T7429] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 129.157733][ T7429] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 129.191144][ T7429] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 129.332972][ T7429] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 129.414891][ T7587] netlink: 71 bytes leftover after parsing attributes in process `syz.3.331'. [ 129.683764][ T7429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.730446][ T7597] ip6gre1: entered allmulticast mode [ 129.738246][ T7603] netlink: 16 bytes leftover after parsing attributes in process `syz.3.336'. [ 129.771525][ C0] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 129.880469][ T7429] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.908140][ T5935] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.915363][ T5935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.978902][ T7611] netlink: 'syz.3.337': attribute type 8 has an invalid length. [ 130.045022][ T7611] ip6t_srh: unknown srh invflags 92A7 [ 130.148057][ T7611] pim6reg: entered allmulticast mode [ 130.163629][ T5935] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.170829][ T5935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.300323][ T5839] Bluetooth: hci4: command tx timeout [ 130.893810][ T7649] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.970708][ T7644] syz.2.343 (7644) used obsolete PPPIOCDETACH ioctl [ 131.142564][ T7649] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.218709][ T7429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.317891][ T7429] veth0_vlan: entered promiscuous mode [ 131.410572][ T7649] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.576876][ C0] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 131.602726][ T7677] netlink: 'syz.3.350': attribute type 8 has an invalid length. [ 131.640523][ T7649] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.682812][ T7429] veth1_vlan: entered promiscuous mode [ 131.717598][ T7674] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 131.758500][ T7429] veth0_macvtap: entered promiscuous mode [ 131.772871][ T7429] veth1_macvtap: entered promiscuous mode [ 131.880778][ T7429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.902460][ T7429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.912919][ T7429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.932798][ T7429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.944521][ T7429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.981586][ T7429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.992014][ T7429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.014083][ T7429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.039123][ T7429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.060125][ T7429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.077281][ T7429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.092236][ T7429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.103985][ T7429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.125261][ T7429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.143037][ T7429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.156792][ T7429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.167382][ T7429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.178942][ T7429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.233448][ T7649] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.301183][ T7649] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.346653][ T5839] Bluetooth: hci4: command tx timeout [ 132.357666][ T7429] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.394788][ T7429] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.403808][ T7429] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.412767][ T7429] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.431857][ T7649] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.454243][ T7649] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.544629][ T7707] __nla_validate_parse: 4 callbacks suppressed [ 132.586151][ T7707] netlink: 16 bytes leftover after parsing attributes in process `syz.0.357'. [ 132.601990][ T7710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.357'. [ 132.640105][ T7710] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 132.645124][ T7336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.658888][ T7710] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 132.675398][ T7712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.358'. [ 132.701141][ T7336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.741770][ T7714] netlink: 88 bytes leftover after parsing attributes in process `syz.4.358'. [ 132.823106][ T7336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.856696][ T7336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.127465][ C0] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 133.160435][ T7729] netlink: 4 bytes leftover after parsing attributes in process `syz.3.363'. [ 133.180974][ T7729] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 133.551013][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.608790][ T7336] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.764937][ T7336] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.921724][ T7336] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.007363][ T7336] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.138049][ T7336] bridge_slave_1: left allmulticast mode [ 134.143737][ T7336] bridge_slave_1: left promiscuous mode [ 134.163404][ T7336] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.180033][ T7336] bridge_slave_0: left allmulticast mode [ 134.199543][ T7336] bridge_slave_0: left promiscuous mode [ 134.210426][ T7336] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.804990][ T7766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.370'. [ 134.911431][ T7773] Cannot find add_set index 0 as target [ 134.926170][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 134.939805][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 134.948954][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 134.967247][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 134.977902][ T5845] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 134.987798][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 135.133622][ T7336] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.144641][ T7336] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.155950][ T7336] bond0 (unregistering): Released all slaves [ 135.391225][ T7777] erspan1: entered promiscuous mode [ 135.421583][ T7780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.376'. [ 135.430828][ T7780] netlink: 4 bytes leftover after parsing attributes in process `syz.4.376'. [ 135.444818][ T7777] erspan1: entered allmulticast mode [ 135.447612][ T7780] netlink: 'syz.4.376': attribute type 6 has an invalid length. [ 135.548127][ T7785] xt_ipcomp: unknown flags 12 [ 135.573351][ T7782] netlink: 'syz.2.377': attribute type 21 has an invalid length. [ 135.617405][ T7782] netlink: 132 bytes leftover after parsing attributes in process `syz.2.377'. [ 135.717963][ T7777] netlink: 'syz.3.375': attribute type 21 has an invalid length. [ 135.726147][ T7777] netlink: 'syz.3.375': attribute type 6 has an invalid length. [ 135.742643][ T7777] netlink: 64 bytes leftover after parsing attributes in process `syz.3.375'. [ 135.746120][ T7790] netlink: 'syz.0.378': attribute type 2 has an invalid length. [ 136.036242][ T7802] Cannot find set identified by id 0 to match [ 136.089718][ T7336] hsr_slave_0: left promiscuous mode [ 136.118100][ T7336] hsr_slave_1: left promiscuous mode [ 136.124016][ T7336] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.156935][ T7336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.202562][ T7336] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.221503][ T7336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.317329][ T7336] veth1_macvtap: left promiscuous mode [ 136.335299][ T7336] veth0_macvtap: left promiscuous mode [ 136.353493][ T7336] veth1_vlan: left promiscuous mode [ 136.370870][ T7336] veth0_vlan: left promiscuous mode [ 137.070079][ T5839] Bluetooth: hci4: command tx timeout [ 137.170616][ T7336] team0 (unregistering): Port device team_slave_1 removed [ 137.220140][ T7336] team0 (unregistering): Port device team_slave_0 removed [ 137.628802][ T7813] dvmrp0: entered allmulticast mode [ 137.634555][ T7813] dvmrp0: left allmulticast mode [ 137.682291][ T7837] tipc: Started in network mode [ 137.689119][ T7837] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 137.700106][ T7837] tipc: Enabling of bearer rejected, failed to enable media [ 137.708841][ T7770] chnl_net:caif_netlink_parms(): no params data found [ 137.718806][ T7840] netlink: 'syz.3.387': attribute type 1 has an invalid length. [ 137.728824][ T7840] netlink: 224 bytes leftover after parsing attributes in process `syz.3.387'. [ 138.079841][ T7855] tipc: Can't bind to reserved service type 1 [ 138.134512][ T7770] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.152700][ T7770] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.176151][ T7770] bridge_slave_0: entered allmulticast mode [ 138.189624][ T7770] bridge_slave_0: entered promiscuous mode [ 138.213583][ T7770] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.232247][ T7770] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.260097][ T7770] bridge_slave_1: entered allmulticast mode [ 138.297219][ T7770] bridge_slave_1: entered promiscuous mode [ 138.318711][ T7868] netlink: 'syz.3.395': attribute type 4 has an invalid length. [ 138.343698][ T7868] netlink: 152 bytes leftover after parsing attributes in process `syz.3.395'. [ 138.453828][ T7878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.396'. [ 138.523497][ T7770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.539994][ T7878] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 138.560736][ T7770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.676125][ T7770] team0: Port device team_slave_0 added [ 138.702541][ T7770] team0: Port device team_slave_1 added [ 138.903292][ T7770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.930892][ T7770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.983307][ T7900] netlink: 'syz.4.400': attribute type 8 has an invalid length. [ 138.991624][ T7770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.018268][ T7901] netlink: 44 bytes leftover after parsing attributes in process `syz.3.401'. [ 139.077132][ T7770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.097389][ T7770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.134154][ T7770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.146542][ T5839] Bluetooth: hci4: command 0x041b tx timeout [ 139.392814][ T7911] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.502654][ T7770] hsr_slave_0: entered promiscuous mode [ 139.534130][ T7770] hsr_slave_1: entered promiscuous mode [ 139.571854][ T7770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.593090][ T7770] Cannot create hsr debugfs directory [ 139.818364][ T7921] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 139.989749][ T7925] openvswitch: netlink: ufid size 24 bytes exceeds the range (1, 16) [ 140.028208][ T7925] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 140.408576][ T7956] netlink: 'syz.0.413': attribute type 1 has an invalid length. [ 140.455199][ T7956] netlink: 'syz.0.413': attribute type 2 has an invalid length. [ 140.472225][ T7956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.413'. [ 140.992475][ T7973] netlink: 20 bytes leftover after parsing attributes in process `syz.4.416'. [ 141.098863][ T7770] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 141.211168][ T7770] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 141.227472][ T5845] Bluetooth: hci4: command 0x041b tx timeout [ 141.273262][ T7770] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 141.363566][ T7770] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 141.634546][ T7770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.738596][ T7996] xt_CT: You must specify a L4 protocol and not use inversions on it [ 141.757083][ T7770] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.803467][ T5935] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.810715][ T5935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.883850][ T7336] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.891434][ T7336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.956764][ T8006] can: request_module (can-proto-0) failed. [ 142.111641][ T7770] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 142.178323][ T8023] netlink: 240 bytes leftover after parsing attributes in process `syz.0.428'. [ 142.239797][ T8025] netlink: 'syz.2.429': attribute type 10 has an invalid length. [ 142.292934][ T8025] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.313920][ T8025] bond0: (slave team0): Enslaving as an active interface with an up link [ 142.794372][ T7770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.986870][ T7770] veth0_vlan: entered promiscuous mode [ 143.055496][ T8056] xt_CT: No such helper "pptp" [ 143.058555][ T7770] veth1_vlan: entered promiscuous mode [ 143.117385][ T8064] netlink: 1280 bytes leftover after parsing attributes in process `syz.4.434'. [ 143.172444][ T8064] openvswitch: netlink: Flow actions attr not present in new flow. [ 143.222872][ T7770] veth0_macvtap: entered promiscuous mode [ 143.273123][ T8067] : entered promiscuous mode [ 143.292909][ T7770] veth1_macvtap: entered promiscuous mode [ 143.305010][ T5845] Bluetooth: hci4: command 0x041b tx timeout [ 143.373238][ T7770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.389374][ T7770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.412917][ T7770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.469425][ T7770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.511426][ T7770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.531422][ T7770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.543512][ T7770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.564426][ T7770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.575947][ T7770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.589859][ T7770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.632216][ T7770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.656979][ T7770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.673387][ T7770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.696939][ T7770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.724066][ T7770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.744998][ T7770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.771100][ T7770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.782306][ T7770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.819156][ T8079] bridge0: port 3(syz_tun) entered blocking state [ 143.856491][ T8079] bridge0: port 3(syz_tun) entered disabled state [ 143.911170][ T8079] syz_tun: entered allmulticast mode [ 143.927088][ T8079] syz_tun: entered promiscuous mode [ 144.006685][ T8102] Bluetooth: MGMT ver 1.23 [ 144.035593][ T7770] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.059346][ T7770] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.108138][ T7770] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.155354][ T7770] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.180585][ T8114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.440'. [ 144.512523][ T7336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.540324][ T7336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.634591][ T2126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.670535][ T2126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.686025][ T8130] sctp: [Deprecated]: syz.0.444 (pid 8130) Use of struct sctp_assoc_value in delayed_ack socket option. [ 144.686025][ T8130] Use struct sctp_sack_info instead [ 144.830168][ T8130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.248197][ T7332] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.411874][ T7332] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.570602][ T7332] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.667655][ T7332] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.827135][ T7332] bridge_slave_1: left allmulticast mode [ 145.832861][ T7332] bridge_slave_1: left promiscuous mode [ 145.839951][ T7332] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.848709][ T7332] bridge_slave_0: left allmulticast mode [ 145.854353][ T7332] bridge_slave_0: left promiscuous mode [ 145.862040][ T7332] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.324216][ T7332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.343451][ T7332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.356021][ T7332] bond0 (unregistering): Released all slaves [ 146.398724][ T8164] netlink: 60 bytes leftover after parsing attributes in process `syz.3.450'. [ 146.656937][ T8181] trusted_key: syz.3.454 sent an empty control message without MSG_MORE. [ 146.856758][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 146.869304][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 146.877968][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 147.020643][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 147.031257][ T5839] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 147.108021][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 147.498954][ T8205] netlink: 20 bytes leftover after parsing attributes in process `syz.4.459'. [ 147.626868][ T7332] hsr_slave_0: left promiscuous mode [ 147.644907][ T7332] hsr_slave_1: left promiscuous mode [ 147.653753][ T7332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.677836][ T7332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.769891][ T7332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.779204][ T7332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.822760][ T7332] veth1_macvtap: left promiscuous mode [ 147.828835][ T7332] veth0_macvtap: left promiscuous mode [ 147.834421][ T7332] veth1_vlan: left promiscuous mode [ 147.840375][ T7332] veth0_vlan: left promiscuous mode [ 148.272418][ T7332] team0 (unregistering): Port device team_slave_1 removed [ 148.312334][ T7332] team0 (unregistering): Port device team_slave_0 removed [ 148.797700][ T8237] netlink: 24 bytes leftover after parsing attributes in process `syz.2.465'. [ 148.807130][ T8237] netlink: 24 bytes leftover after parsing attributes in process `syz.2.465'. [ 148.851165][ T8237] tc_dump_action: action bad kind [ 148.977098][ T8245] netlink: 96 bytes leftover after parsing attributes in process `syz.3.467'. [ 149.149501][ T5839] Bluetooth: hci4: command tx timeout [ 149.169578][ T8189] chnl_net:caif_netlink_parms(): no params data found [ 149.458385][ T8270] IPv6: sit1: Disabled Multicast RS [ 149.491169][ T8270] sit1: entered allmulticast mode [ 149.760426][ T8279] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.812947][ T8293] netlink: 12 bytes leftover after parsing attributes in process `syz.2.476'. [ 149.840764][ T8293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.476'. [ 149.908829][ T8189] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.922896][ T8271] syz.0.468 (8271) used greatest stack depth: 18384 bytes left [ 149.937007][ T8189] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.957579][ T8189] bridge_slave_0: entered allmulticast mode [ 149.976292][ T8189] bridge_slave_0: entered promiscuous mode [ 149.994398][ T8189] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.002738][ T8189] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.010632][ T8189] bridge_slave_1: entered allmulticast mode [ 150.017892][ T8189] bridge_slave_1: entered promiscuous mode [ 150.040102][ T8279] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.143631][ T8299] netlink: 28 bytes leftover after parsing attributes in process `syz.4.478'. [ 150.207019][ T8189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.258504][ T8279] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.344348][ T8189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.389172][ T8309] netlink: 'syz.0.480': attribute type 10 has an invalid length. [ 150.450243][ T8279] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.556586][ T8309] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.576854][ T8309] bond0: (slave team0): Enslaving as an active interface with an up link [ 150.605110][ T8189] team0: Port device team_slave_0 added [ 150.632756][ T8189] team0: Port device team_slave_1 added [ 150.771800][ T8327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.484'. [ 150.845955][ T8329] tipc: Started in network mode [ 150.872112][ T8329] tipc: Node identity 6, cluster identity 4711 [ 150.898903][ T8329] tipc: Node number set to 6 [ 150.946544][ T8279] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.007561][ T8279] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.027073][ T8189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.034064][ T8189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.114472][ T8189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.147139][ T8279] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.189307][ T8279] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.198575][ T8189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.224082][ T8189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.255082][ T5839] Bluetooth: hci4: command tx timeout [ 151.285933][ T8189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.338027][ T8349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.489'. [ 151.421596][ T8189] hsr_slave_0: entered promiscuous mode [ 151.457614][ T8189] hsr_slave_1: entered promiscuous mode [ 151.477518][ T8189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.521037][ T8189] Cannot create hsr debugfs directory [ 151.678215][ T8364] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20000 [ 152.176323][ T8391] netlink: 28 bytes leftover after parsing attributes in process `syz.0.497'. [ 152.198555][ T8391] netlink: 68 bytes leftover after parsing attributes in process `syz.0.497'. [ 152.931375][ T8189] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 152.967725][ T8189] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 153.029481][ T8189] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 153.042812][ T8189] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 153.304860][ T5839] Bluetooth: hci4: command tx timeout [ 153.401193][ T8420] netlink: 'syz.2.505': attribute type 10 has an invalid length. [ 153.519287][ T8420] batman_adv: batadv0: Adding interface: virt_wifi0 [ 153.538587][ T8420] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.587570][ T8420] batman_adv: batadv0: Interface activated: virt_wifi0 [ 153.596155][ T8426] batadv_slave_1: entered promiscuous mode [ 153.781486][ T8189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.834501][ T8189] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.883399][ T7332] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.890560][ T7332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.933311][ T7332] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.940490][ T7332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.971722][ T8453] netlink: 'syz.0.511': attribute type 1 has an invalid length. [ 154.093983][ T8459] __nla_validate_parse: 3 callbacks suppressed [ 154.094003][ T8459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.511'. [ 154.094566][ T8453] bond2: entered promiscuous mode [ 154.127884][ T8453] 8021q: adding VLAN 0 to HW filter on device bond2 [ 154.164039][ T8189] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 154.175457][ T8189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 154.241611][ T8425] batadv_slave_1: left promiscuous mode [ 154.279004][ T8457] 8021q: adding VLAN 0 to HW filter on device bond2 [ 154.296564][ T8457] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 154.320356][ T8457] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 154.338924][ T8457] bond2: (slave ip6gre1): making interface the new active one [ 154.347670][ T8457] ip6gre1: entered promiscuous mode [ 154.366615][ T8457] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 154.609602][ T8459] bond2 (unregistering): (slave ip6gre1): Releasing backup interface [ 154.618170][ T8459] ip6gre1: left promiscuous mode [ 154.630460][ T8459] bond2 (unregistering): Released all slaves [ 154.886614][ T8189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.087058][ T8189] veth0_vlan: entered promiscuous mode [ 155.160646][ T8511] netlink: 'syz.0.518': attribute type 1 has an invalid length. [ 155.169383][ T8511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.518'. [ 155.196724][ T8189] veth1_vlan: entered promiscuous mode [ 155.209313][ T8513] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.519'. [ 155.281296][ T8189] veth0_macvtap: entered promiscuous mode [ 155.358442][ T8189] veth1_macvtap: entered promiscuous mode [ 155.379681][ T8513] netlink: 48 bytes leftover after parsing attributes in process `syz.4.519'. [ 155.409311][ T8524] netlink: 12 bytes leftover after parsing attributes in process `syz.0.522'. [ 155.419844][ T5839] Bluetooth: hci4: command tx timeout [ 155.530156][ T8189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.607784][ T8189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.640309][ T8189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.666278][ T8189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.688904][ T8189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.714826][ T8189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.735901][ T8189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.768049][ T8189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.795932][ T8189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.869967][ T8189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.926957][ T8189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.957282][ T8189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.986348][ T8189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.004776][ T8189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.034579][ T8189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.055033][ T8189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.067010][ T8189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.080753][ T8189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.151761][ T8546] vlan2: entered promiscuous mode [ 156.157148][ T8546] vlan2: entered allmulticast mode [ 156.163245][ T8546] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 156.172924][ T8546] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 156.190649][ T8546] team0: Port device vlan2 added [ 156.276137][ T8189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.312189][ T8189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.347558][ T8189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.378729][ T8189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.620178][ T5935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.653090][ T5935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.755456][ T2126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.780602][ T8587] netlink: 12 bytes leftover after parsing attributes in process `syz.0.527'. [ 156.784754][ T2126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.856739][ T8588] xt_TCPMSS: Only works on TCP SYN packets [ 157.174418][ T8606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.535'. [ 157.334318][ T8620] netlink: 24 bytes leftover after parsing attributes in process `syz.4.539'. [ 157.387538][ T8618] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 157.433318][ T8625] netlink: 12 bytes leftover after parsing attributes in process `syz.3.540'. [ 157.450523][ T8618] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 157.488243][ T8625] netlink: 31 bytes leftover after parsing attributes in process `syz.3.540'. [ 157.524053][ T8625] netlink: 'syz.3.540': attribute type 2 has an invalid length. [ 157.560370][ T5985] wlan1: Trigger new scan to find an IBSS to join [ 157.785784][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 157.804183][ C0] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 157.831002][ T8641] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 158.923392][ T7334] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.203695][ T8680] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.212239][ T8680] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.264429][ T8680] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 159.318444][ T7334] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.399571][ T7334] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.450005][ T7334] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.555046][ T7334] bridge_slave_1: left allmulticast mode [ 159.560769][ T7334] bridge_slave_1: left promiscuous mode [ 159.577143][ T7334] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.654465][ T7334] bridge_slave_0: left allmulticast mode [ 159.681666][ T7334] bridge_slave_0: left promiscuous mode [ 159.681994][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 159.700700][ T7334] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.912112][ T8709] __nla_validate_parse: 1 callbacks suppressed [ 159.912136][ T8709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.555'. [ 160.094593][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 160.122234][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 160.143180][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 160.152997][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 160.189613][ T5845] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 160.216055][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 160.458514][ T7334] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.471221][ T7334] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.486002][ T7334] bond0 (unregistering): Released all slaves [ 160.589762][ T5985] wlan1: Trigger new scan to find an IBSS to join [ 160.678074][ T8698] vlan2: entered promiscuous mode [ 160.693458][ T8698] dummy0: entered promiscuous mode [ 160.712816][ T8698] dummy0: left promiscuous mode [ 160.773928][ T8709] vlan2: entered allmulticast mode [ 160.779970][ T8709] bond0: entered allmulticast mode [ 160.785400][ T8709] bond_slave_0: entered allmulticast mode [ 160.791342][ T8709] bond_slave_1: entered allmulticast mode [ 160.797249][ T8709] team0: entered allmulticast mode [ 160.802567][ T8709] team_slave_0: entered allmulticast mode [ 160.809831][ T8709] team_slave_1: entered allmulticast mode [ 160.820740][ T8709] bond0: left allmulticast mode [ 160.827570][ T8709] bond_slave_0: left allmulticast mode [ 160.833134][ T8709] bond_slave_1: left allmulticast mode [ 160.838832][ T8709] team0: left allmulticast mode [ 160.843783][ T8709] team_slave_0: left allmulticast mode [ 160.851792][ T8709] team_slave_1: left allmulticast mode [ 161.076709][ T8720] netlink: 32 bytes leftover after parsing attributes in process `syz.0.560'. [ 161.107126][ T8723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.559'. [ 161.195455][ T8720] netlink: 32 bytes leftover after parsing attributes in process `syz.0.560'. [ 161.366962][ T8734] netlink: 28 bytes leftover after parsing attributes in process `syz.2.562'. [ 161.531947][ T7334] hsr_slave_0: left promiscuous mode [ 161.546263][ T7334] hsr_slave_1: left promiscuous mode [ 161.552371][ T7334] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.561058][ T7334] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.577775][ T7334] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.594414][ T7334] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.653839][ T7334] veth1_macvtap: left promiscuous mode [ 161.688536][ T7334] veth0_macvtap: left promiscuous mode [ 161.702181][ T7334] veth1_vlan: left promiscuous mode [ 161.718963][ T7334] veth0_vlan: left promiscuous mode [ 162.349986][ T5839] Bluetooth: hci4: command tx timeout [ 162.480800][ T7334] team0 (unregistering): Port device team_slave_1 removed [ 162.528614][ T7334] team0 (unregistering): Port device team_slave_0 removed [ 163.214606][ T8782] netlink: 40 bytes leftover after parsing attributes in process `syz.4.569'. [ 163.342267][ T8788] netlink: 28 bytes leftover after parsing attributes in process `syz.2.570'. [ 163.351959][ T8788] netlink: 28 bytes leftover after parsing attributes in process `syz.2.570'. [ 163.407965][ T8791] netlink: 'syz.0.572': attribute type 1 has an invalid length. [ 163.435623][ T8791] netlink: 'syz.0.572': attribute type 1 has an invalid length. [ 163.449670][ T8792] netlink: 'syz.0.572': attribute type 1 has an invalid length. [ 163.461864][ T8792] netlink: 'syz.0.572': attribute type 1 has an invalid length. [ 163.573757][ T8712] chnl_net:caif_netlink_parms(): no params data found [ 163.627074][ T5985] wlan1: Trigger new scan to find an IBSS to join [ 163.900044][ T8827] netlink: 12 bytes leftover after parsing attributes in process `syz.3.575'. [ 163.975347][ T8712] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.982839][ T8712] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.990479][ T8712] bridge_slave_0: entered allmulticast mode [ 163.998594][ T8712] bridge_slave_0: entered promiscuous mode [ 164.012014][ T8712] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.028328][ T8712] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.036464][ T8712] bridge_slave_1: entered allmulticast mode [ 164.043597][ T8712] bridge_slave_1: entered promiscuous mode [ 164.101652][ T8835] dvmrp1: entered allmulticast mode [ 164.134552][ T8837] pimreg: entered allmulticast mode [ 164.159630][ T8838] pimreg: left allmulticast mode [ 164.168159][ T8838] dvmrp1: left allmulticast mode [ 164.241869][ T8835] dvmrp1: entered allmulticast mode [ 164.260422][ T8712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.362410][ T8712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.434914][ T5839] Bluetooth: hci4: command tx timeout [ 164.469237][ T8712] team0: Port device team_slave_0 added [ 164.478495][ T8712] team0: Port device team_slave_1 added [ 164.539214][ T7336] wlan1: Creating new IBSS network, BSSID 6e:00:95:c8:6b:36 [ 164.539964][ T8712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.563796][ T8712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.601057][ T8712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.622590][ T8712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.630108][ T8712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.662834][ T8712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.852362][ T8712] hsr_slave_0: entered promiscuous mode [ 164.953193][ T8712] hsr_slave_1: entered promiscuous mode [ 164.965427][ T8712] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.973071][ T8712] Cannot create hsr debugfs directory [ 165.080991][ T8869] netlink: 100 bytes leftover after parsing attributes in process `syz.4.587'. [ 165.105057][ T8869] netlink: 100 bytes leftover after parsing attributes in process `syz.4.587'. [ 165.139165][ T8864] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 165.359968][ T8873] pim6reg1: entered promiscuous mode [ 165.390341][ T8873] pim6reg1: entered allmulticast mode [ 165.591282][ T8899] netlink: 'syz.4.594': attribute type 6 has an invalid length. [ 165.599237][ T8899] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.594'. [ 165.613301][ C0] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 166.507834][ T5839] Bluetooth: hci4: command tx timeout [ 166.545500][ T8954] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 166.619583][ T8959] geneve0: entered promiscuous mode [ 166.639175][ T8712] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 166.677212][ T8712] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 166.775042][ T8954] tipc: Enabling of bearer rejected, failed to enable media [ 166.787151][ T8953] geneve0: left promiscuous mode [ 166.792587][ T8712] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 166.821705][ T8712] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 167.015136][ T8978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.609'. [ 167.023980][ T8978] netlink: 12 bytes leftover after parsing attributes in process `syz.2.609'. [ 167.230247][ T8974] bond0: (slave team0): Releasing backup interface [ 167.278678][ T8974] team0 (unregistering): Port device team_slave_0 removed [ 167.306008][ T8974] team0 (unregistering): Port device team_slave_1 removed [ 167.548459][ T8712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.580420][ T8996] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 167.609706][ T8712] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.650545][ T9001] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 167.679059][ T5985] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.686276][ T5985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.731327][ T5985] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.738573][ T5985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.112123][ T9030] netlink: 'syz.0.619': attribute type 1 has an invalid length. [ 168.132186][ T9030] netlink: 'syz.0.619': attribute type 4 has an invalid length. [ 168.174849][ T9030] netlink: 15363 bytes leftover after parsing attributes in process `syz.0.619'. [ 168.306184][ T9041] vlan3: entered promiscuous mode [ 168.311407][ T9041] vlan3: entered allmulticast mode [ 168.586151][ T5839] Bluetooth: hci4: command tx timeout [ 168.677271][ T8712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.797476][ T8712] veth0_vlan: entered promiscuous mode [ 168.822673][ T8712] veth1_vlan: entered promiscuous mode [ 168.914567][ T8712] veth0_macvtap: entered promiscuous mode [ 168.936352][ T8712] veth1_macvtap: entered promiscuous mode [ 169.016158][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.037180][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.047434][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.060269][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.076661][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.089521][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.099903][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.118426][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.150654][ T8712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.168145][ T9062] bridge0: port 3(gretap0) entered blocking state [ 169.179894][ T9062] bridge0: port 3(gretap0) entered disabled state [ 169.189536][ T9062] gretap0: entered allmulticast mode [ 169.207340][ T9062] gretap0: entered promiscuous mode [ 169.265904][ T9062] bridge0: port 3(gretap0) entered blocking state [ 169.274220][ T9062] bridge0: port 3(gretap0) entered forwarding state [ 169.344364][ T9065] gretap0: left allmulticast mode [ 169.376139][ T9065] gretap0: left promiscuous mode [ 169.381702][ T9065] bridge0: port 3(gretap0) entered disabled state [ 169.470715][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.483144][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.505999][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.516402][ T9086] netlink: 76 bytes leftover after parsing attributes in process `syz.2.630'. [ 169.529933][ T9085] netlink: 'syz.0.631': attribute type 3 has an invalid length. [ 169.536107][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.546421][ T9085] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.631'. [ 169.560831][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.573377][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.594884][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.609889][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.623760][ T8712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.675492][ T8712] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.696478][ T8712] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.744579][ T8712] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.764791][ T8712] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.010638][ T2126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.027600][ T7337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.040653][ T7337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.060902][ T2126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.280211][ T9110] netlink: 'syz.4.639': attribute type 10 has an invalid length. [ 170.458346][ T9122] netlink: 'syz.0.640': attribute type 10 has an invalid length. [ 170.488030][ T9110] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 170.548533][ T9118] netlink: 'syz.0.640': attribute type 10 has an invalid length. [ 170.939037][ T7337] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.053496][ T7337] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.269059][ T7337] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.331770][ T7337] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.494346][ T7337] bridge_slave_1: left allmulticast mode [ 171.500274][ T7337] bridge_slave_1: left promiscuous mode [ 171.506532][ T7337] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.518995][ T7337] bridge_slave_0: left allmulticast mode [ 171.524938][ T7337] bridge_slave_0: left promiscuous mode [ 171.530725][ T7337] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.027687][ T9147] netlink: 'syz.3.648': attribute type 10 has an invalid length. [ 172.073784][ T7337] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.087984][ T7337] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.102939][ T7337] bond0 (unregistering): Released all slaves [ 172.340524][ T9166] netlink: 104 bytes leftover after parsing attributes in process `syz.4.652'. [ 172.400786][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 172.427241][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 172.438803][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 172.456802][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 172.517767][ T5845] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 172.527407][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 172.782708][ T9182] netlink: 256 bytes leftover after parsing attributes in process `syz.0.656'. [ 172.799807][ T9182] unsupported nlmsg_type 40 [ 172.833570][ T9167] netlink: 4 bytes leftover after parsing attributes in process `syz.4.652'. [ 172.882035][ T7337] hsr_slave_0: left promiscuous mode [ 172.895852][ T7337] hsr_slave_1: left promiscuous mode [ 172.901889][ T7337] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.924973][ T7337] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.935587][ T7337] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.954875][ T7337] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.998075][ T7337] veth1_macvtap: left promiscuous mode [ 173.005137][ T7337] veth0_macvtap: left promiscuous mode [ 173.010975][ T7337] veth1_vlan: left promiscuous mode [ 173.023286][ T7337] veth0_vlan: left promiscuous mode [ 173.614960][ T7337] team0 (unregistering): Port device team_slave_1 removed [ 173.725121][ T7337] team0 (unregistering): Port device team_slave_0 removed [ 174.585343][ T5839] Bluetooth: hci4: command tx timeout [ 174.805025][ T9193] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.831842][ T9193] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.113184][ T9193] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.126385][ T9193] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.136300][ T9193] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.145615][ T9193] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.243412][ T9194] bridge0: left allmulticast mode [ 175.254127][ T9194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.262157][ T9194] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.273080][ T9194] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 175.803657][ T9171] chnl_net:caif_netlink_parms(): no params data found [ 176.259629][ T9171] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.271130][ T9171] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.296582][ T9171] bridge_slave_0: entered allmulticast mode [ 176.334287][ T9171] bridge_slave_0: entered promiscuous mode [ 176.353459][ T9171] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.389330][ T9171] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.440591][ T9171] bridge_slave_1: entered allmulticast mode [ 176.495814][ T9171] bridge_slave_1: entered promiscuous mode [ 176.665108][ T5839] Bluetooth: hci4: command tx timeout [ 176.703401][ T9171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.751246][ T9171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.843626][ T9171] team0: Port device team_slave_0 added [ 176.873294][ T9171] team0: Port device team_slave_1 added [ 176.964211][ T9171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.969667][ T9278] netlink: 36 bytes leftover after parsing attributes in process `syz.4.673'. [ 176.980296][ T9171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.037967][ T9171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.057646][ T9171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.074760][ T9171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.123879][ T9171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.279124][ T9171] hsr_slave_0: entered promiscuous mode [ 177.314945][ T9171] hsr_slave_1: entered promiscuous mode [ 177.334368][ T9171] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 177.354790][ T9171] Cannot create hsr debugfs directory [ 177.673774][ T9291] netlink: 188 bytes leftover after parsing attributes in process `syz.0.679'. [ 177.710505][ T9291] netlink: 'syz.0.679': attribute type 1 has an invalid length. [ 177.751857][ T9291] syzkaller1: entered promiscuous mode [ 177.769835][ T9291] syzkaller1: entered allmulticast mode [ 178.167118][ T9299] netlink: 100 bytes leftover after parsing attributes in process `syz.0.681'. [ 178.449102][ T9171] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 178.467694][ T9171] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 178.507246][ T9171] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 178.538292][ T9171] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 178.610144][ T9303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.683'. [ 178.655076][ T9303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.683'. [ 178.675200][ T9304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.683'. [ 178.712234][ T9307] openvswitch: netlink: Actions may not be safe on all matching packets [ 178.745263][ T5839] Bluetooth: hci4: command tx timeout [ 178.807486][ T9171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.082319][ T9171] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.117894][ T7334] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.125095][ T7334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.166549][ T7334] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.173788][ T7334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.434420][ T9340] netlink: 12 bytes leftover after parsing attributes in process `syz.3.691'. [ 179.435983][ T9336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.689'. [ 179.519666][ T9340] bond1: entered promiscuous mode [ 179.576411][ T9171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.737266][ T9171] veth0_vlan: entered promiscuous mode [ 179.778489][ T9171] veth1_vlan: entered promiscuous mode [ 179.815909][ T9352] netlink: 16 bytes leftover after parsing attributes in process `syz.3.693'. [ 179.839095][ T9171] veth0_macvtap: entered promiscuous mode [ 179.883507][ T9171] veth1_macvtap: entered promiscuous mode [ 179.927718][ T9171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.974915][ T9171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.000193][ T9171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.021299][ T9171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.060553][ T9171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.091896][ T9171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.116450][ T9171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.155775][ T9171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.196159][ T9171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.226476][ T9171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.236877][ T9360] sctp: [Deprecated]: syz.2.694 (pid 9360) Use of int in maxseg socket option. [ 180.236877][ T9360] Use struct sctp_assoc_value instead [ 180.283349][ T9171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.299354][ T9171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.321649][ T9171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.349388][ T9171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.375213][ T9360] geneve2: entered promiscuous mode [ 180.380681][ T9360] geneve2: entered allmulticast mode [ 180.420782][ T9171] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.454871][ T9171] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.484051][ T9171] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.525135][ T9171] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.533077][ T9362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.696'. [ 180.706027][ T7334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.734279][ T7334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.786895][ T7336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.812062][ T7336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.826836][ T5845] Bluetooth: hci4: command tx timeout [ 180.942357][ T9369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.698'. [ 181.835891][ T9394] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 182.081025][ T7336] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.217589][ T7336] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.310535][ T7336] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.443940][ T7336] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.764903][ T7336] bridge_slave_1: left allmulticast mode [ 182.770627][ T7336] bridge_slave_1: left promiscuous mode [ 182.797762][ T7336] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.856356][ T7336] bridge_slave_0: left allmulticast mode [ 182.862072][ T7336] bridge_slave_0: left promiscuous mode [ 182.885502][ T7336] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.905345][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 183.033001][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 183.044210][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 183.054211][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 183.063570][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 183.072260][ T5845] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 183.079847][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 183.452692][ T7336] dvmrp1 (unregistering): left allmulticast mode [ 183.793069][ T7336] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.805436][ T7336] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.816664][ T7336] bond0 (unregistering): Released all slaves [ 183.943021][ T7336] bond1 (unregistering): Released all slaves [ 183.956935][ T7336] bond2 (unregistering): Released all slaves [ 184.264606][ T7336] tipc: Left network mode [ 184.604523][ T9408] chnl_net:caif_netlink_parms(): no params data found [ 184.693034][ T7336] hsr_slave_0: left promiscuous mode [ 184.707100][ T7336] hsr_slave_1: left promiscuous mode [ 184.713012][ T7336] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.721892][ T7336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.729941][ T7336] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.737466][ T7336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.788980][ T7336] veth1_macvtap: left promiscuous mode [ 184.794856][ T7336] veth1_vlan: left promiscuous mode [ 184.800180][ T7336] veth0_vlan: left promiscuous mode [ 185.145688][ T5839] Bluetooth: hci0: command tx timeout [ 185.577416][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 185.587947][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 185.597445][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 185.616008][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 185.625090][ T5845] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 185.632523][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 185.708551][ T9436] netlink: 'syz.3.717': attribute type 1 has an invalid length. [ 186.064491][ T9444] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 186.312062][ T9408] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.350129][ T9408] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.359439][ T9408] bridge_slave_0: entered allmulticast mode [ 186.373051][ T9408] bridge_slave_0: entered promiscuous mode [ 186.456376][ T9408] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.463661][ T9408] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.483505][ T9408] bridge_slave_1: entered allmulticast mode [ 186.503748][ T9408] bridge_slave_1: entered promiscuous mode [ 186.664242][ T9408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.707396][ T9408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.733259][ T9462] __nla_validate_parse: 1 callbacks suppressed [ 186.733284][ T9462] netlink: 48 bytes leftover after parsing attributes in process `syz.2.726'. [ 186.862369][ T9408] team0: Port device team_slave_0 added [ 186.992875][ T9408] team0: Port device team_slave_1 added [ 187.092098][ T7336] IPVS: stop unused estimator thread 0... [ 187.153865][ T9408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.178393][ T9408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.220708][ T9408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.235046][ T5845] Bluetooth: hci0: command tx timeout [ 187.251411][ T9471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.728'. [ 187.265391][ T9460] netlink: 'syz.4.725': attribute type 4 has an invalid length. [ 187.273081][ T9460] netlink: 17 bytes leftover after parsing attributes in process `syz.4.725'. [ 187.300625][ T9408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.314596][ T9408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.341160][ T9408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.401019][ T9433] chnl_net:caif_netlink_parms(): no params data found [ 187.421722][ T9459] tipc: New replicast peer: 255.255.255.255 [ 187.431299][ T9459] tipc: Enabled bearer , priority 10 [ 187.503286][ T5935] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.646807][ T5935] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.705573][ T5845] Bluetooth: hci4: command tx timeout [ 187.711244][ T9486] netlink: 100 bytes leftover after parsing attributes in process `syz.3.732'. [ 187.753494][ T9489] netlink: 'syz.4.733': attribute type 11 has an invalid length. [ 187.759766][ T9408] hsr_slave_0: entered promiscuous mode [ 187.772011][ T9408] hsr_slave_1: entered promiscuous mode [ 187.773256][ T9486] netlink: 'syz.3.732': attribute type 1 has an invalid length. [ 187.789927][ T9408] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 187.797745][ T9408] Cannot create hsr debugfs directory [ 187.833650][ T5935] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.940999][ T9433] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.985003][ T9433] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.995115][ T9433] bridge_slave_0: entered allmulticast mode [ 188.011210][ T9433] bridge_slave_0: entered promiscuous mode [ 188.038831][ T5935] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.059738][ T9500] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073357230079) [ 188.071817][ T9500] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 188.083189][ T9433] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.094606][ T9433] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.110737][ T9433] bridge_slave_1: entered allmulticast mode [ 188.119553][ T9433] bridge_slave_1: entered promiscuous mode [ 188.197159][ T9433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.252430][ T9433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.348905][ T9433] team0: Port device team_slave_0 added [ 188.358212][ T9433] team0: Port device team_slave_1 added [ 188.471285][ T9433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.492112][ T9433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.530934][ T9433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.558458][ T5935] bridge_slave_1: left allmulticast mode [ 188.564246][ T5935] bridge_slave_1: left promiscuous mode [ 188.578899][ T5935] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.609953][ T5935] bridge_slave_0: left allmulticast mode [ 188.618100][ T5935] bridge_slave_0: left promiscuous mode [ 188.625604][ T5935] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.642999][ T9518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.740'. [ 189.305172][ T5845] Bluetooth: hci0: command tx timeout [ 189.325198][ T5935] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.354050][ T5935] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.375357][ T5935] bond0 (unregistering): Released all slaves [ 189.399598][ T9433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.406891][ T9433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.446625][ T9433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.673549][ T9539] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.682656][ T9539] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.691957][ T9539] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.701334][ T9539] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.785068][ T5845] Bluetooth: hci4: command tx timeout [ 189.791773][ T9539] netlink: 'syz.4.744': attribute type 10 has an invalid length. [ 189.819012][ T9433] hsr_slave_0: entered promiscuous mode [ 189.830738][ T9433] hsr_slave_1: entered promiscuous mode [ 189.842191][ T9433] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 189.857078][ T9433] Cannot create hsr debugfs directory [ 189.917775][ T9548] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 189.973111][ T9525] mac80211_hwsim hwsim6 wlan0 (unregistering): left allmulticast mode [ 189.982072][ T9525] mac80211_hwsim hwsim6 wlan0 (unregistering): left promiscuous mode [ 190.040738][ T9525] team0: Failed to send options change via netlink (err -105) [ 190.048957][ T9525] team0: Failed to send port change of device vlan2 via netlink (err -105) [ 190.058722][ T9525] team0: Port device vlan2 removed [ 190.091224][ T9539] bridge0: port 3(syz_tun) entered disabled state [ 190.098711][ T9539] syz_tun: left allmulticast mode [ 190.103883][ T9539] bridge0: port 3(syz_tun) entered disabled state [ 190.124257][ T9539] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 190.327805][ T5935] hsr_slave_0: left promiscuous mode [ 190.351620][ T5935] hsr_slave_1: left promiscuous mode [ 190.359648][ T5935] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.382223][ T5935] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.401261][ T5935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.415096][ T5935] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.470681][ T5935] veth1_macvtap: left promiscuous mode [ 190.477329][ T5935] veth0_macvtap: left promiscuous mode [ 190.483016][ T5935] veth1_vlan: left promiscuous mode [ 190.497229][ T5935] veth0_vlan: left promiscuous mode [ 191.145436][ T5935] team0 (unregistering): Port device team_slave_1 removed [ 191.247410][ T5935] team0 (unregistering): Port device team_slave_0 removed [ 191.397853][ T5839] Bluetooth: hci0: command tx timeout [ 191.867323][ T5839] Bluetooth: hci4: command tx timeout [ 192.617092][ T9604] netlink: 16 bytes leftover after parsing attributes in process `syz.3.760'. [ 192.670912][ T9604] bridge0: entered promiscuous mode [ 192.705050][ T9604] bridge0: left promiscuous mode [ 192.795140][ T9607] netlink: 'syz.2.761': attribute type 8 has an invalid length. [ 192.802912][ T9607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.761'. [ 193.251643][ T9625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.766'. [ 193.459865][ T9633] IPVS: sync thread started: state = BACKUP, mcast_ifn = netdevsim0, syncid = 5, id = 0 [ 193.472882][ T9433] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 193.523397][ T9433] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 193.615026][ T9433] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 193.677466][ T9433] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 193.771874][ T9408] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 193.810090][ T9408] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 193.849277][ T9408] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 193.902201][ T9408] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 193.926520][ T9643] netlink: 'syz.4.770': attribute type 1 has an invalid length. [ 193.930008][ T9644] netlink: 12 bytes leftover after parsing attributes in process `syz.3.769'. [ 193.941956][ T9643] netlink: 12 bytes leftover after parsing attributes in process `syz.4.770'. [ 193.954740][ T5839] Bluetooth: hci4: command 0x0419 tx timeout [ 193.992764][ T9643] netlink: 4 bytes leftover after parsing attributes in process `syz.4.770'. [ 194.066651][ T9408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.112059][ T9408] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.125216][ T7333] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.132350][ T7333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.193358][ T9433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.201017][ T9651] Cannot find del_set index 0 as target [ 194.204566][ T7333] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.213774][ T7333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.308530][ T9433] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.341912][ T5985] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.349151][ T5985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.381503][ T7337] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.388739][ T7337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.442702][ T9408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.483934][ T9659] netlink: 16 bytes leftover after parsing attributes in process `syz.4.775'. [ 194.501126][ T9659] netlink: 'syz.4.775': attribute type 10 has an invalid length. [ 194.531934][ T9659] team0: Port device wlan1 added [ 194.563300][ T9659] netlink: 'syz.4.775': attribute type 30 has an invalid length. [ 194.567987][ T9408] veth0_vlan: entered promiscuous mode [ 194.618746][ T5935] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 194.634109][ T9408] veth1_vlan: entered promiscuous mode [ 194.692963][ T9408] veth0_macvtap: entered promiscuous mode [ 194.725343][ T9408] veth1_macvtap: entered promiscuous mode [ 194.784359][ T9408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.812065][ T9408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.832089][ T9408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.846791][ T9408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.858874][ T9408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.882329][ T9408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.921515][ T9408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.944769][ T9408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.974975][ T9408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.991635][ T9408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.014300][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.097364][ T9433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.132053][ T9408] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.162457][ T9408] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.180493][ T9408] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.204732][ T9408] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.403180][ T9680] sctp: [Deprecated]: syz.2.781 (pid 9680) Use of int in max_burst socket option deprecated. [ 195.403180][ T9680] Use struct sctp_assoc_value instead [ 195.554058][ T9433] veth0_vlan: entered promiscuous mode [ 195.648750][ T5985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.656967][ T5985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.711493][ T9433] veth1_vlan: entered promiscuous mode [ 195.752820][ T7336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.760243][ T9433] veth0_macvtap: entered promiscuous mode [ 195.783964][ T7336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.820651][ T9433] veth1_macvtap: entered promiscuous mode [ 196.035732][ T5839] Bluetooth: hci4: command 0x0419 tx timeout [ 196.074253][ T9433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.110043][ T9433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.137785][ T9433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.162276][ T9433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.173472][ T9433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.200321][ T9433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.228612][ T9433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.363760][ T9433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.386825][ T9433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.400832][ T9433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.413285][ T9433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.423570][ T9433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.450108][ T9433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.467209][ T9433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.481199][ T9705] netlink: 2 bytes leftover after parsing attributes in process `syz.3.786'. [ 196.513474][ T9708] vlan2: entered promiscuous mode [ 196.606566][ T9712] netlink: 32 bytes leftover after parsing attributes in process `syz.4.789'. [ 196.628291][ T9433] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.638063][ T9433] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.670370][ T9433] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.687449][ T9718] netlink: 36 bytes leftover after parsing attributes in process `syz.2.790'. [ 196.699409][ T9433] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.929149][ T7334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.937295][ T7334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.980174][ T7334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.010214][ T7334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.068686][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 197.075481][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 197.363655][ T5985] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.044116][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 198.053580][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 198.061725][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 198.070935][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 198.079219][ T5841] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 198.086688][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 198.233301][ T5985] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.250749][ T9742] chnl_net:caif_netlink_parms(): no params data found [ 198.296821][ T5985] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.341109][ T9742] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.349486][ T9742] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.357322][ T9742] bridge_slave_0: entered allmulticast mode [ 198.364230][ T9742] bridge_slave_0: entered promiscuous mode [ 198.388182][ T5985] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.402241][ T9742] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.410339][ T9742] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.418245][ T9742] bridge_slave_1: entered allmulticast mode [ 198.425675][ T9742] bridge_slave_1: entered promiscuous mode [ 198.455406][ T9742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.477735][ T9742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.529269][ T9742] team0: Port device team_slave_0 added [ 198.541284][ T9742] team0: Port device team_slave_1 added [ 198.559813][ T5985] bridge_slave_1: left allmulticast mode [ 198.567347][ T5985] bridge_slave_1: left promiscuous mode [ 198.573034][ T5985] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.582436][ T5985] bridge_slave_0: left allmulticast mode [ 198.588540][ T5985] bridge_slave_0: left promiscuous mode [ 198.594390][ T5985] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.204853][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 199.234293][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 199.256938][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 199.278967][ T9769] netlink: 'syz.2.799': attribute type 10 has an invalid length. [ 199.305370][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 199.314590][ T5985] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.323727][ T5845] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 199.332368][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 199.343925][ T5985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.366945][ T5985] bond0 (unregistering): Released all slaves [ 199.389888][ T9742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.397381][ T9742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.423540][ T9742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.546363][ T9769] [ 199.548920][ T9769] ====================================================== [ 199.555924][ T9769] WARNING: possible circular locking dependency detected [ 199.562937][ T9769] 6.13.0-rc5-syzkaller-00872-g7bf1659bad4e #0 Not tainted [ 199.570029][ T9769] ------------------------------------------------------ [ 199.577028][ T9769] syz.2.799/9769 is trying to acquire lock: [ 199.582913][ T9769] ffff888027368768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_open+0xe9/0x1e0 [ 199.592062][ T9769] [ 199.592062][ T9769] but task is already holding lock: [ 199.599421][ T9769] ffff88805d318e00 (team->team_lock_key#4){+.+.}-{4:4}, at: team_add_slave+0xb0/0x2730 [ 199.609116][ T9769] [ 199.609116][ T9769] which lock already depends on the new lock. [ 199.609116][ T9769] [ 199.619518][ T9769] [ 199.619518][ T9769] the existing dependency chain (in reverse order) is: [ 199.628535][ T9769] [ 199.628535][ T9769] -> #1 (team->team_lock_key#4){+.+.}-{4:4}: [ 199.636725][ T9769] lock_acquire+0x1ed/0x550 [ 199.641757][ T9769] __mutex_lock+0x1ac/0xee0 [ 199.646782][ T9769] team_port_change_check+0x51/0x1e0 [ 199.652584][ T9769] team_device_event+0x161/0x5b0 [ 199.658036][ T9769] notifier_call_chain+0x1a5/0x3f0 [ 199.663674][ T9769] dev_close_many+0x33c/0x4c0 [ 199.668873][ T9769] unregister_netdevice_many_notify+0x530/0x1da0 [ 199.675720][ T9769] vlan_device_event+0x1da7/0x1de0 [ 199.681352][ T9769] notifier_call_chain+0x1a5/0x3f0 [ 199.686974][ T9769] unregister_netdevice_many_notify+0xedd/0x1da0 [ 199.693818][ T9769] unregister_netdevice_queue+0x303/0x370 [ 199.700054][ T9769] _cfg80211_unregister_wdev+0x163/0x590 [ 199.706208][ T9769] ieee80211_if_remove+0x25d/0x3a0 [ 199.711834][ T9769] ieee80211_del_iface+0x19/0x30 [ 199.717287][ T9769] cfg80211_remove_virtual_intf+0x23f/0x410 [ 199.723691][ T9769] genl_rcv_msg+0xb14/0xec0 [ 199.728716][ T9769] netlink_rcv_skb+0x1e3/0x430 [ 199.733996][ T9769] genl_rcv+0x28/0x40 [ 199.738501][ T9769] netlink_unicast+0x7f6/0x990 [ 199.743776][ T9769] netlink_sendmsg+0x8e4/0xcb0 [ 199.749058][ T9769] __sock_sendmsg+0x221/0x270 [ 199.754257][ T9769] ____sys_sendmsg+0x52a/0x7e0 [ 199.759537][ T9769] __sys_sendmsg+0x269/0x350 [ 199.764645][ T9769] do_syscall_64+0xf3/0x230 [ 199.769664][ T9769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.776074][ T9769] [ 199.776074][ T9769] -> #0 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 199.783803][ T9769] validate_chain+0x18ef/0x5920 [ 199.789172][ T9769] __lock_acquire+0x1397/0x2100 [ 199.794537][ T9769] lock_acquire+0x1ed/0x550 [ 199.799559][ T9769] __mutex_lock+0x1ac/0xee0 [ 199.804581][ T9769] ieee80211_open+0xe9/0x1e0 [ 199.809685][ T9769] __dev_open+0x2d3/0x450 [ 199.814535][ T9769] dev_open+0xae/0x1b0 [ 199.819118][ T9769] team_add_slave+0x9af/0x2730 [ 199.824401][ T9769] do_setlink+0xe40/0x4210 [ 199.829331][ T9769] rtnl_newlink+0x1bb6/0x2210 [ 199.834519][ T9769] rtnetlink_rcv_msg+0x791/0xcf0 [ 199.839968][ T9769] netlink_rcv_skb+0x1e3/0x430 [ 199.845246][ T9769] netlink_unicast+0x7f6/0x990 [ 199.850521][ T9769] netlink_sendmsg+0x8e4/0xcb0 [ 199.855798][ T9769] __sock_sendmsg+0x221/0x270 [ 199.860990][ T9769] ____sys_sendmsg+0x52a/0x7e0 [ 199.866265][ T9769] __sys_sendmsg+0x269/0x350 [ 199.871365][ T9769] do_syscall_64+0xf3/0x230 [ 199.876378][ T9769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.882785][ T9769] [ 199.882785][ T9769] other info that might help us debug this: [ 199.882785][ T9769] [ 199.893000][ T9769] Possible unsafe locking scenario: [ 199.893000][ T9769] [ 199.900439][ T9769] CPU0 CPU1 [ 199.905800][ T9769] ---- ---- [ 199.911153][ T9769] lock(team->team_lock_key#4); [ 199.916095][ T9769] lock(&rdev->wiphy.mtx); [ 199.923107][ T9769] lock(team->team_lock_key#4); [ 199.930564][ T9769] lock(&rdev->wiphy.mtx); [ 199.935066][ T9769] [ 199.935066][ T9769] *** DEADLOCK *** [ 199.935066][ T9769] [ 199.943199][ T9769] 2 locks held by syz.2.799/9769: [ 199.948224][ T9769] #0: ffffffff8fcb3d08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xce2/0x2210 [ 199.957289][ T9769] #1: ffff88805d318e00 (team->team_lock_key#4){+.+.}-{4:4}, at: team_add_slave+0xb0/0x2730 [ 199.967390][ T9769] [ 199.967390][ T9769] stack backtrace: [ 199.973279][ T9769] CPU: 0 UID: 0 PID: 9769 Comm: syz.2.799 Not tainted 6.13.0-rc5-syzkaller-00872-g7bf1659bad4e #0 [ 199.983855][ T9769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 199.993903][ T9769] Call Trace: [ 199.997174][ T9769] [ 200.000099][ T9769] dump_stack_lvl+0x241/0x360 [ 200.004780][ T9769] ? __pfx_dump_stack_lvl+0x10/0x10 [ 200.009973][ T9769] ? __pfx__printk+0x10/0x10 [ 200.014590][ T9769] print_circular_bug+0x13a/0x1b0 [ 200.019617][ T9769] check_noncircular+0x36a/0x4a0 [ 200.024551][ T9769] ? __pfx_check_noncircular+0x10/0x10 [ 200.030004][ T9769] ? lockdep_lock+0x123/0x2b0 [ 200.034682][ T9769] ? validate_chain+0x11e/0x5920 [ 200.039620][ T9769] validate_chain+0x18ef/0x5920 [ 200.044465][ T9769] ? __lock_acquire+0x1397/0x2100 [ 200.049503][ T9769] ? __pfx_validate_chain+0x10/0x10 [ 200.054713][ T9769] ? __pfx_validate_chain+0x10/0x10 [ 200.059913][ T9769] ? __pfx_validate_chain+0x10/0x10 [ 200.065115][ T9769] ? __lock_acquire+0x1397/0x2100 [ 200.070140][ T9769] ? __pfx_validate_chain+0x10/0x10 [ 200.075335][ T9769] ? mark_lock+0x9a/0x360 [ 200.079661][ T9769] ? __lock_acquire+0x1397/0x2100 [ 200.084678][ T9769] ? mark_lock+0x9a/0x360 [ 200.089001][ T9769] __lock_acquire+0x1397/0x2100 [ 200.093850][ T9769] lock_acquire+0x1ed/0x550 [ 200.098366][ T9769] ? ieee80211_open+0xe9/0x1e0 [ 200.103126][ T9769] ? __pfx_lock_acquire+0x10/0x10 [ 200.108145][ T9769] ? __pfx_lock_release+0x10/0x10 [ 200.113176][ T9769] ? __pfx___might_resched+0x10/0x10 [ 200.118480][ T9769] ? ib_device_get_by_netdev+0x595/0x5e0 [ 200.124110][ T9769] ? ib_device_get_by_netdev+0x85/0x5e0 [ 200.129650][ T9769] __mutex_lock+0x1ac/0xee0 [ 200.134148][ T9769] ? ieee80211_open+0xe9/0x1e0 [ 200.138904][ T9769] ? vxlan_netdevice_event+0x448/0x4c0 [ 200.144358][ T9769] ? rxe_notify+0xef/0x4c0 [ 200.148777][ T9769] ? __pfx_vxlan_netdevice_event+0x10/0x10 [ 200.154617][ T9769] ? ieee80211_open+0xe9/0x1e0 [ 200.159385][ T9769] ? __pfx___mutex_lock+0x10/0x10 [ 200.164409][ T9769] ? hsr_netdev_notify+0x295/0xb50 [ 200.169524][ T9769] ? ip6_route_dev_notify+0x99/0x600 [ 200.174805][ T9769] ieee80211_open+0xe9/0x1e0 [ 200.179388][ T9769] __dev_open+0x2d3/0x450 [ 200.183718][ T9769] ? __pfx___dev_open+0x10/0x10 [ 200.188566][ T9769] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 200.194019][ T9769] dev_open+0xae/0x1b0 [ 200.198095][ T9769] ? __pfx_dev_open+0x10/0x10 [ 200.202768][ T9769] ? trace_kmalloc+0x1f/0xd0 [ 200.207351][ T9769] ? team_add_slave+0x879/0x2730 [ 200.212285][ T9769] team_add_slave+0x9af/0x2730 [ 200.217053][ T9769] ? __pfx___dev_notify_flags+0x10/0x10 [ 200.222586][ T9769] ? __dev_change_flags+0x515/0x6f0 [ 200.227775][ T9769] ? __pfx_team_add_slave+0x10/0x10 [ 200.232969][ T9769] ? __pfx___dev_change_flags+0x10/0x10 [ 200.238507][ T9769] ? validate_linkmsg+0x828/0xa40 [ 200.243525][ T9769] ? do_raw_spin_unlock+0x13c/0x8b0 [ 200.248714][ T9769] ? __pfx_validate_linkmsg+0x10/0x10 [ 200.254079][ T9769] ? mutex_is_locked+0x17/0x50 [ 200.258842][ T9769] do_setlink+0xe40/0x4210 [ 200.263266][ T9769] ? __pfx_do_setlink+0x10/0x10 [ 200.268110][ T9769] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 200.274082][ T9769] ? preempt_schedule+0xe1/0xf0 [ 200.278925][ T9769] ? preempt_schedule_common+0x84/0xd0 [ 200.284374][ T9769] ? preempt_schedule+0xe1/0xf0 [ 200.289215][ T9769] ? lockdep_hardirqs_on+0x99/0x150 [ 200.294508][ T9769] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 200.300442][ T9769] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 200.306793][ T9769] ? preempt_schedule_thunk+0x1a/0x30 [ 200.312172][ T9769] ? __mutex_lock+0xd5f/0xee0 [ 200.316858][ T9769] ? __mutex_lock+0x5ef/0xee0 [ 200.321541][ T9769] ? rtnl_newlink+0xce2/0x2210 [ 200.326334][ T9769] ? __pfx___mutex_lock+0x10/0x10 [ 200.331361][ T9769] ? ns_capable+0x8a/0xf0 [ 200.335691][ T9769] ? rtnl_link_get_net_capable+0x168/0x340 [ 200.341495][ T9769] rtnl_newlink+0x1bb6/0x2210 [ 200.346180][ T9769] ? __pfx_rtnl_newlink+0x10/0x10 [ 200.351200][ T9769] ? __netlink_deliver_tap+0x56b/0x7f0 [ 200.356670][ T9769] ? __pfx_validate_chain+0x10/0x10 [ 200.361889][ T9769] ? __sock_sendmsg+0x221/0x270 [ 200.366754][ T9769] ? ____sys_sendmsg+0x52a/0x7e0 [ 200.371716][ T9769] ? __sys_sendmsg+0x269/0x350 [ 200.376485][ T9769] ? do_syscall_64+0xf3/0x230 [ 200.381166][ T9769] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.387252][ T9769] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 200.393245][ T9769] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 200.399576][ T9769] ? mark_lock+0x9a/0x360 [ 200.403906][ T9769] ? __lock_acquire+0x1397/0x2100 [ 200.408933][ T9769] ? __pfx_lock_release+0x10/0x10 [ 200.413956][ T9769] ? __pfx_rtnl_newlink+0x10/0x10 [ 200.418976][ T9769] rtnetlink_rcv_msg+0x791/0xcf0 [ 200.423925][ T9769] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 200.429047][ T9769] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 200.434513][ T9769] ? ref_tracker_free+0x643/0x7e0 [ 200.439556][ T9769] netlink_rcv_skb+0x1e3/0x430 [ 200.444332][ T9769] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 200.449801][ T9769] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 200.455101][ T9769] ? netlink_deliver_tap+0x2e/0x1b0 [ 200.460314][ T9769] netlink_unicast+0x7f6/0x990 [ 200.465092][ T9769] ? __pfx_netlink_unicast+0x10/0x10 [ 200.470376][ T9769] ? __virt_addr_valid+0x45f/0x530 [ 200.475586][ T9769] ? __phys_addr_symbol+0x2f/0x70 [ 200.480635][ T9769] ? __check_object_size+0x47a/0x730 [ 200.485962][ T9769] netlink_sendmsg+0x8e4/0xcb0 [ 200.490742][ T9769] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.496029][ T9769] ? aa_sock_msg_perm+0x91/0x160 [ 200.500979][ T9769] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.506359][ T9769] __sock_sendmsg+0x221/0x270 [ 200.511056][ T9769] ____sys_sendmsg+0x52a/0x7e0 [ 200.515824][ T9769] ? __pfx_____sys_sendmsg+0x10/0x10 [ 200.521108][ T9769] ? __fget_files+0x2a/0x410 [ 200.525698][ T9769] ? __fget_files+0x2a/0x410 [ 200.530304][ T9769] __sys_sendmsg+0x269/0x350 [ 200.534893][ T9769] ? __pfx___sys_sendmsg+0x10/0x10 [ 200.540013][ T9769] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 200.546347][ T9769] ? do_syscall_64+0x100/0x230 [ 200.551109][ T9769] ? do_syscall_64+0xb6/0x230 [ 200.555784][ T9769] do_syscall_64+0xf3/0x230 [ 200.560291][ T9769] ? clear_bhb_loop+0x35/0x90 [ 200.564973][ T9769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.570862][ T9769] RIP: 0033:0x7fa6a0385d29 [ 200.575270][ T9769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.594870][ T9769] RSP: 002b:00007fa6a110b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.603291][ T9769] RAX: ffffffffffffffda RBX: 00007fa6a0575fa0 RCX: 00007fa6a0385d29 [ 200.611256][ T9769] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 200.619241][ T9769] RBP: 00007fa6a0401b08 R08: 0000000000000000 R09: 0000000000000000 [ 200.627217][ T9769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.635191][ T9769] R13: 0000000000000000 R14: 00007fa6a0575fa0 R15: 00007ffd96cc09f8 [ 200.643174][ T9769] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 200.678981][ T5845] Bluetooth: hci0: command tx timeout [ 200.787562][ T9769] team0: Port device wlan1 added [ 200.965635][ T9742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.973066][ T9742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.024705][ T9742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.222775][ T9771] bond0: (slave syz_tun): Releasing backup interface [ 201.363642][ T5985] hsr_slave_0: left promiscuous mode [ 201.369602][ T5985] hsr_slave_1: left promiscuous mode [ 201.377931][ T5985] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.385395][ T5985] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.393043][ T5985] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.400705][ T5985] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.411593][ T5985] veth1_macvtap: left promiscuous mode [ 201.417193][ T5985] veth0_macvtap: left promiscuous mode [ 201.422710][ T5985] veth1_vlan: left promiscuous mode [ 201.428112][ T5985] veth0_vlan: left promiscuous mode [ 201.560068][ T5985] team0 (unregistering): Port device team_slave_1 removed [ 201.587796][ T5985] team0 (unregistering): Port device team_slave_0 removed [ 201.976571][ T5985] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.025468][ T5985] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.104237][ T5985] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.176005][ T5985] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.239040][ T5985] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.289116][ T5985] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.329803][ T5985] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.378178][ T5985] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.428588][ T5985] bridge_slave_1: left allmulticast mode [ 202.434266][ T5985] bridge_slave_1: left promiscuous mode [ 202.440072][ T5985] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.449061][ T5985] bridge_slave_0: left allmulticast mode [ 202.455505][ T5985] bridge_slave_0: left promiscuous mode [ 202.461134][ T5985] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.470845][ T5985] bridge_slave_1: left allmulticast mode [ 202.476657][ T5985] bridge_slave_1: left promiscuous mode [ 202.482305][ T5985] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.491457][ T5985] bridge_slave_0: left allmulticast mode [ 202.497329][ T5985] bridge_slave_0: left promiscuous mode [ 202.502965][ T5985] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.514298][ T5985] bridge_slave_1: left allmulticast mode [ 202.520513][ T5985] bridge_slave_1: left promiscuous mode [ 202.526477][ T5985] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.534580][ T5985] bridge_slave_0: left allmulticast mode [ 202.540748][ T5985] bridge_slave_0: left promiscuous mode [ 202.546568][ T5985] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.058729][ T5985] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.068479][ T5985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.078171][ T5985] bond0 (unregistering): Released all slaves [ 203.173196][ T5985] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.182628][ T5985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.194542][ T5985] bond0 (unregistering): (slave team0): Releasing backup interface [ 203.203833][ T5985] bond0 (unregistering): Released all slaves [ 203.212141][ T5985] bond1 (unregistering): Released all slaves [ 203.221995][ T5985] bond2 (unregistering): Released all slaves [ 203.233440][ T5985] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.243627][ T5985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.253191][ T5985] bond0 (unregistering): Released all slaves [ 203.343464][ T5985] : left promiscuous mode [ 203.377078][ T5985] tipc: Disabling bearer [ 203.382549][ T5985] tipc: Left network mode [ 203.400087][ T5985] team0: Port device wlan1 removed [ 203.608871][ T5985] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.616757][ T5985] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.626630][ T5985] hsr_slave_0: left promiscuous mode [ 203.632418][ T5985] hsr_slave_1: left promiscuous mode [ 203.638234][ T5985] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.647046][ T5985] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.657698][ T5985] hsr_slave_0: left promiscuous mode [ 203.663371][ T5985] hsr_slave_1: left promiscuous mode [ 203.669505][ T5985] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.677760][ T5985] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.685657][ T5985] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.693055][ T5985] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.702000][ T5985] veth1_macvtap: left promiscuous mode [ 203.707601][ T5985] veth0_macvtap: left promiscuous mode [ 203.713133][ T5985] veth1_vlan: left promiscuous mode [ 203.718495][ T5985] veth0_vlan: left promiscuous mode [ 203.766229][ T5985] team0 (unregistering): Port device team_slave_1 removed [ 203.777158][ T5985] team0 (unregistering): Port device team_slave_0 removed [ 204.097464][ T5985] team0 (unregistering): Port device team_slave_1 removed [ 204.136175][ T5985] team0 (unregistering): Port device team_slave_0 removed [ 204.539979][ T5985] team0 (unregistering): Port device team_slave_1 removed [ 204.563868][ T5985] team0 (unregistering): Port device team_slave_0 removed