last executing test programs: 1m26.616107095s ago: executing program 2 (id=539): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x1) (async) close(r1) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x8, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000eb000100811201000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) (async, rerun: 64) r2 = socket$inet(0xa, 0x801, 0x84) (rerun: 64) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r2, 0x8) (async) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x3}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x5}, &(0x7f0000000100)=0x8) (async) sendmsg$nl_route(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_getnetconf={0x24, 0x52, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NETCONFA_FORWARDING={0x8, 0x2, 0x6}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x232}]}, 0x24}, 0x1, 0x0, 0x0, 0x27ed71330add5a10}, 0x40) 1m15.758985153s ago: executing program 2 (id=539): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x1) (async) close(r1) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x8, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000eb000100811201000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) (async, rerun: 64) r2 = socket$inet(0xa, 0x801, 0x84) (rerun: 64) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r2, 0x8) (async) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x3}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x5}, &(0x7f0000000100)=0x8) (async) sendmsg$nl_route(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_getnetconf={0x24, 0x52, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NETCONFA_FORWARDING={0x8, 0x2, 0x6}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x232}]}, 0x24}, 0x1, 0x0, 0x0, 0x27ed71330add5a10}, 0x40) 1m3.371240597s ago: executing program 2 (id=539): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x1) (async) close(r1) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x8, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000eb000100811201000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) (async, rerun: 64) r2 = socket$inet(0xa, 0x801, 0x84) (rerun: 64) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r2, 0x8) (async) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x3}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x5}, &(0x7f0000000100)=0x8) (async) sendmsg$nl_route(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_getnetconf={0x24, 0x52, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NETCONFA_FORWARDING={0x8, 0x2, 0x6}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x232}]}, 0x24}, 0x1, 0x0, 0x0, 0x27ed71330add5a10}, 0x40) 54.386580177s ago: executing program 2 (id=539): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x1) (async) close(r1) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x8, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000eb000100811201000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) (async, rerun: 64) r2 = socket$inet(0xa, 0x801, 0x84) (rerun: 64) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r2, 0x8) (async) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x3}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x5}, &(0x7f0000000100)=0x8) (async) sendmsg$nl_route(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_getnetconf={0x24, 0x52, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NETCONFA_FORWARDING={0x8, 0x2, 0x6}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x232}]}, 0x24}, 0x1, 0x0, 0x0, 0x27ed71330add5a10}, 0x40) 45.474795995s ago: executing program 2 (id=539): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x1) (async) close(r1) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x8, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000eb000100811201000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) (async, rerun: 64) r2 = socket$inet(0xa, 0x801, 0x84) (rerun: 64) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r2, 0x8) (async) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x3}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x5}, &(0x7f0000000100)=0x8) (async) sendmsg$nl_route(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_getnetconf={0x24, 0x52, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NETCONFA_FORWARDING={0x8, 0x2, 0x6}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x232}]}, 0x24}, 0x1, 0x0, 0x0, 0x27ed71330add5a10}, 0x40) 35.87161403s ago: executing program 2 (id=539): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x1) (async) close(r1) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x8, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000eb000100811201000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) (async, rerun: 64) r2 = socket$inet(0xa, 0x801, 0x84) (rerun: 64) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r2, 0x8) (async) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x3}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x5}, &(0x7f0000000100)=0x8) (async) sendmsg$nl_route(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_getnetconf={0x24, 0x52, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NETCONFA_FORWARDING={0x8, 0x2, 0x6}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x232}]}, 0x24}, 0x1, 0x0, 0x0, 0x27ed71330add5a10}, 0x40) 2.349854658s ago: executing program 3 (id=1737): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000001c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000011c0)={{0x0, 0x800000000, 0x80000000, 0x9, 0x4b72ab92, 0x4, 0x5, 0x1, 0xfffffffd, 0x8, 0x1, 0x3, 0xf8d0, 0xfffffffffffffffd, 0x5}, 0x18, [0x0, 0x0, 0x0]}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f0000000240)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e20, @remote}, 0x1e, 0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0)='pimreg0\x00', 0x8, 0x33}) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000000)={'team_slave_1\x00', 0x7}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000002280)={r1, r2, "f0619df2eb45ab4d631411d20300000000000000ba9a1d8de02cf07f8edb3bbca9ef6e7d0a0a29673d159c10394a8bf867fe80228b9f28bb7f47c5b72ed80746334e2d22a3da9d31b50dc67fbfa8fc4d4fcb25af4d8871000dda73753ebfbd90ee2f48d0c2d9ca10b27023e29302f2744f7bde5c0e3860652ad3a4cf26d42f2bd27f4c4c17697ef607afb009844ddc0c59fa305fa7e3dcd35012cd2270ab554b66bdb34040d92ebc73763274da46da03730e038c000000000000000245c678e747a7ed6688f5fad0d139c3db1568354097f60708fd880063bdd00a3e07a40f81a69e8955e81023c6659a85238fa2c64aaf1bbb48056f00", "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"}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010001304000000000000000000006300", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800e0001006970366572732fc4a2100a8080080005000400000004001200"], 0x44}}, 0x0) 2.248763892s ago: executing program 1 (id=1739): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r3, 0x2f, 0x1, 0x9, 0x36, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x7800, 0x80, 0xc, 0xd}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'syztnl2\x00', r3, 0x29, 0x2, 0xb3, 0x10001, 0x4, @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x700, 0x7800, 0x1}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r3, 0x20, 0x8000, 0x8000, 0x1, {{0xe, 0x4, 0x1, 0x30, 0x38, 0x65, 0x0, 0xd, 0x2f, 0x0, @rand_addr=0x7, @private=0xa010101, {[@rr={0x7, 0x7, 0x85, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x44, 0x6, "5e4dd26c"}, @rr={0x7, 0x17, 0xe7, [@dev={0xac, 0x14, 0x14, 0x20}, @local, @rand_addr=0x64010100, @local, @private=0xa010101]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000840)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f0000000440)={0x3b4, r4, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x200, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r3}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r3}, {0x140, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x68b}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x3b4}, 0x1, 0x0, 0x0, 0xc000050}, 0x4000881) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000a400000240012800b0001006d61637365630000140002800500090000000000060002"], 0x44}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xa, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d0000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 2.187056997s ago: executing program 3 (id=1741): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x6, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="0701000009090c040500feff"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r2, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8002034}, 0x10) (rerun: 64) 2.126139618s ago: executing program 1 (id=1742): r0 = socket(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$xdp(0x2c, 0x3, 0x0) (rerun: 64) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) (async) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x14000, 0x4) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) (async, rerun: 32) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000240)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000380)="54f6c00168aa4825fb393ab2957bae6d94916b8ab58781a1833aa6dc822cf97d3f5d745e4a5db7280dabb01cc448de94f1a16578bf4f4fa145303e0a1722d9c053ef4234a11673d46df730c5b5e1869498dd8c9c470490a43e5511212a487ec9f8376a3099fea48d4e7120c42e905222267d3a6692d83d418b7a17374794226d1c6934ee3088bcf940337c82c1d41b215e", 0x91}, {&(0x7f0000000440)="4082ca040406a68dd03255469bfd65e22ebe7caf373e91ca5e7a0294d9dc8b578a23d40b5c5a810233687a8a2da5092ce7ffa00be646d2fcce717960fc1c260861209a8fc77fa1dd022ef8dc43164e5c2571161f0006b43e221e63bcaa2a8f24503a87fc39c0", 0x66}, {&(0x7f00000004c0)="dd7e143e7b559fe4cf0b7a46cb45b47d134cbf5587a141e4f64444c4954e82da4b8273ea9a5178dfaba4d411a4c8342bbf85c2de7fa5df35717ddc4d5b3f571e18f89d418bb9097fb9092a42a5faaacb819a3d498321fc956dcfb9ee56b06b69073937f33994fb61d4c7176444a133383d51e447cce2c2a1fa4356b1e0e96883fae0cc82774b281127d01adad70a2a2044fa0bb8644a7e2c9279410610602e32a4ff78d7e877d616d94ca78590", 0xad}], 0x3, &(0x7f00000005c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x30}, 0x50) (async, rerun: 32) ppoll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x1}, {r1, 0x40}, {r0, 0x3440}], 0x3, &(0x7f0000000280)={0x77359400}, &(0x7f0000000340)={[0x7]}, 0x8) (async, rerun: 32) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async, rerun: 32) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10, &(0x7f0000000200)=0x5, 0x4) (async) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) (async) socket$netlink(0x10, 0x3, 0x400000000000004) 1.954825247s ago: executing program 1 (id=1743): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async, rerun: 32) r0 = socket(0x10, 0x3, 0x0) (rerun: 32) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000180)=0xc) (async, rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x14) (rerun: 32) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r3, &(0x7f0000000080)="800037bbfa9ba189", 0x8, 0xfa068fc268af028d, 0x0, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x24, 0x79, 0x400, 0x0, 0x0, {}, [@typed={0x8, 0x9, 0x0, 0x0, @uid=r1}, @typed={0x8, 0x0, 0x0, 0x0, @fd=r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a841}, 0x0) (async) shutdown(r0, 0x1) (async) mmap(&(0x7f000037a000/0x2000)=nil, 0x2000, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) (async) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x44, 0x6, 0x488, 0x0, 0x218, 0x0, 0x218, 0x0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x6}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @ECN={0x28}}, {{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_team\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @TTL={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'vcan0\x00'}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e8) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f0000000d80)=""/157, &(0x7f0000000e40)=0x9d) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x8, 0x7ffffffe, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r6 = socket(0x10, 0x80003, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) (async, rerun: 32) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000016000119"], 0x78}}, 0x0) (rerun: 32) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = socket$can_j1939(0x1d, 0x2, 0x7) syz_emit_ethernet(0x68, &(0x7f0000000100)={@broadcast, @multicast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100, 0x2, 0x10, [], "7f1a"}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}}}, {0x8, 0x22eb, 0xfffffffc}}}}}}, 0x0) (async) getsockopt$SO_J1939_SEND_PRIO(r8, 0x6b, 0x5, 0x0, &(0x7f0000000000)=0xfffffffffffffe3b) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r9 = socket$inet6(0xa, 0x40000080806, 0x0) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x18) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 1.73466052s ago: executing program 1 (id=1744): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000004c0)=""/4082, 0xff2}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f0000000280)=""/168}], 0x2, 0x0, 0x45}, 0x5}], 0x1, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r3, @ANYBLOB="800202000a000200577f0000aabb000020000e80"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x48}}, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0700000004000000000300000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000058a8b3f83350ea99449082d9ed9c4df1ecf0c8d45f8a1a4f4b3e1c42cecfe3e37685b3977abe2ce400af4d9ddcb3db865340d31fb4ee4d9b07ad3c8cf9fd6a"], 0x48) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000100)={r5, 0x0, 0x0}, 0x20) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001880)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0200000002"], 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001880)=ANY=[], 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) (async) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000004c0)=""/4082, 0xff2}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f0000000280)=""/168}], 0x2, 0x0, 0x45}, 0x5}], 0x1, 0x0, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) (async) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r3, @ANYBLOB="800202000a000200577f0000aabb000020000e80"], 0x48}}, 0x0) (async) socket(0x10, 0x80002, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x48}}, 0x0) (async) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0700000004000000000300000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000058a8b3f83350ea99449082d9ed9c4df1ecf0c8d45f8a1a4f4b3e1c42cecfe3e37685b3977abe2ce400af4d9ddcb3db865340d31fb4ee4d9b07ad3c8cf9fd6a"], 0x48) (async) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000100)={r5, 0x0, 0x0}, 0x20) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001880)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0200000002"], 0x10) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001880)=ANY=[], 0x10) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) (async) 1.617722828s ago: executing program 1 (id=1745): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, {0x2, 0x0, @dev}, 0x107}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000001580)={r3, @in={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}}, 0x0, 0x31, 0xfffffffc, 0x1000}, &(0x7f0000000540)=0x9c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x3c, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000100)={'tunl0\x00', &(0x7f00000000c0)={'ip_vti0\x00', r4, 0x700, 0x40, 0x5, 0x4, {{0x5, 0x4, 0x0, 0x7, 0x14, 0x65, 0x0, 0xc4, 0x2f, 0x0, @local, @multicast1}}}}) 1.566918058s ago: executing program 1 (id=1746): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="1400000002060300000000000000001e00000000b5b80b92b836f9e8bff86f22391a5256b23f4544efc8a445afcaf894f5179d8d3cffc7864da102be51b4e9b3ec1aa3c78156032e445619dafa2e41ab76de59f42e8ced4de8be81d885fa5e729df6ece947fef24b46fef7a788490d907e7634d2345c81d8be9b86162f72cec1eb06ab006fb3"], 0x14}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0], 0x7c}, 0x1, 0x0, 0x0, 0x2c9162652cc69627}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r1}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x12, 0x4, &(0x7f0000000340)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7d7, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r2, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYRES32=r4, @ANYRES16=r3, @ANYBLOB="000428bd7000fbdbdf257600000008000300", @ANYRES32=r4, @ANYBLOB="0c009900ffffff7f0e0000000c00580058000000000000000c0058003c000000000000000c0058001c000000000000000c0058007e000000000000000c00580054000000000000000c0058005a00000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x40d1}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x80}}, 0x0) socket(0x10, 0x803, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(r6, &(0x7f0000000280)='D', 0x1, 0x2400c8c5, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4) close(r6) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x10010, r6, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000001ec0), 0xffffffffffffffff) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) r8 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x18) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r2) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e20, 0xfff, @empty, 0x8001}, 0x1c) 1.262802935s ago: executing program 3 (id=1748): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000500000008000600", @ANYRES32=r2, @ANYBLOB="08000300", @ANYRES32=r3], 0x34}}, 0x0) 1.12688913s ago: executing program 0 (id=1750): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf251500000008000300", @ANYRES32=r3, @ANYBLOB="2c002b80200003800c0500000000000000000000060001000200000008000200000000000800010000000000d1e8c9e2ce36e9aa6f2889ef91e9b3fcb71bfb93abadc8815109af583ec50981f1f79fdce5f1b7d9a24e7bd68037dc9d2ab1a1925c64c8fd59ddfe970de525ddd467a47f6e6293aa8df53b3c40e65f07f87864edb82c5013ffbf95eb92cbe647febf1e793ee977d6a16b4fea398e333921b55d773b18938ecb3090e8107fb26863171bb807672e8d38b8656a87236d8d9d4eaaf5d211fc45120b636b79b0ed297b"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x2040094) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611214000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 32) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000040), &(0x7f00000001c0)='%-5lx \x00'}, 0x20) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000006000000040000000000000c04000000000000000000000b00000000000000000100000d000000000000000001000000000400000000000d00000000000000004f00"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xd8, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce000720e000700008877fbac0c1416e000030a89079f03b18000440c0511e0845013f2325f000708050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d23", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="580000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32, @ANYBLOB="08002800988da8"], 0x58}, 0x1, 0x0, 0x0, 0xc041}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/376]}, 0x1f0) (async) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00000041000900000000000002000003"], 0x1c}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r9, 0x29, 0x13, 0x0, 0x0) (async) sendto$inet6(r4, &(0x7f0000010600)="40f9b108b1cdc885c9c533d21f474bec8bfef1df1e378571d8e275717528ee4b7a9beaf908d31137c11903064e83b4951f4d433a5404970c8fd92d7083fd38844ca60c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cb", 0x60, 0x88c0, 0x0, 0x0) splice(r4, 0x0, r0, 0x0, 0x406f413, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x4044884}, 0xc844) (async) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000280)={'batadv_slave_1\x00', &(0x7f00000012c0)=@ethtool_rxfh_indir={0x38}}) 1.086180573s ago: executing program 3 (id=1751): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@newsa={0x168, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x40}, {@in=@loopback, 0x0, 0x32}, @in, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ctr-camellia-aesni\x00'}}}, @coaddr={0x14, 0xe, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in6=@private0}}]}, 0x168}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x18, @loopback}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5}]}}}]}, 0x60}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@newsa={0x168, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x40}, {@in=@loopback, 0x0, 0x32}, @in, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ctr-camellia-aesni\x00'}}}, @coaddr={0x14, 0xe, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in6=@private0}}]}, 0x168}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x18, @loopback}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5}]}}}]}, 0x60}}, 0x0) (async) 922.766592ms ago: executing program 0 (id=1753): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000080)='/', 0x1}, {&(0x7f00000002c0)='\f', 0x1}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x0]}}, &(0x7f0000000300)=""/101, 0x1b, 0x65, 0x0, 0x4, 0x10000, @value=r0}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r1}, 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000980)={@val={0x0, 0x9100}, @void, @eth={@empty, @random="1f00", @val={@void}, {@ipv6={0x86dd, @tcp={0x5, 0x6, "363ce7", 0x14, 0x6, 0x0, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @local}, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8, 0x0, 0x0, 0x28}}}}}}}}, 0x52) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1e00000008000000040000000400000086180000", @ANYRES32=r5, @ANYBLOB="01040000000000003c9300"/20, @ANYRES32=r8, @ANYRES32=r5, @ANYBLOB="0400000000000000010000000800"/28], 0x50) 898.007738ms ago: executing program 3 (id=1754): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) pselect6(0x71, 0x0, &(0x7f0000000040)={0x2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140), 0x8}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x21010000) 651.022468ms ago: executing program 3 (id=1756): r0 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000002c0)={0x1, [0x0]}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={r2}, &(0x7f0000000380)=0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x30, r5, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_VLAN={0x8}]}, 0x30}}, 0x0) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000010400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000010280)={0x5c, r6, 0x11, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "4d5506729b0de8f696917c45892289e3cfbee57d15c80cf5e1d52fc6"}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40c00}, 0x20008800) 569.056998ms ago: executing program 0 (id=1757): r0 = socket(0x11, 0x3, 0x0) socket$inet(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000001140)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x2000) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x200000100000011, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x20480, 0x0) ioctl$TUNSETNOCSUM(r4, 0x400454ca, 0x20000000) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYRES16=r3], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0) 520.898197ms ago: executing program 4 (id=1758): sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)={0x14, 0x0, 0x1, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002bc0)=@delchain={0x668, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}, {0xffe0, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x634, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x3f5}, @TCA_U32_FLAGS={0x8, 0xb, 0x5}, @TCA_U32_INDEV={0x14, 0x8, 'veth1_to_bridge\x00'}, @TCA_U32_ACT={0x60c, 0x7, [@m_gact={0xb4, 0x8, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1eb, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1e14, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x18f0, 0x8}}]}, {0x61, 0x6, "016e0e8ccce8b438002b9a280a547f6dcc992613bee7e806d9e109449422cbe54423fbdabccd281045d5e6f219d08e9d8413a7e7c05279c68c7feb414ca2bdc1564df509a816a7534774b4ae6f8fa13216cf11f3899d1dc6cff841dda7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mirred={0x168, 0x1e, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x7, 0x20000000, 0xffff, 0x6}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x8, 0x8, 0x8, 0x401}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3a61, 0x5a68ce02, 0x10000000, 0x2eca, 0x5}, 0x3}}]}, {0xd9, 0x6, "71558f82c797ed40aa96cae0561caac80e37421fbe6b5847795e9152419bd6e36082801f37e53ccbea50d8b4e7d6d4cd06cec76ec462499bdf122811144a51b56146738d4d25cbd285f2e729dbbe3c6137f7cd123b784cfddefd732ecc306f6cd0dc9c82fffc066125185fd50c16a59b8228811ffa42a3fc06ae6c491841f2d3b022b410d20071f23972ad211e8d088570180a0b72ec30b207b439e9499530f5ed3add294c6979c4716758179993cb396d139e8371981dc62a4369aa602ac542d2123e008f091efa1ef638699b7da3eaf710563945"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0xb8, 0x12, 0x0, 0x0, {{0x9}, {0x48, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x9}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7, 0x10000, 0x5, 0x7, 0x6}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x35d}]}, {0x45, 0x6, "3963d4cb11c85fb73e2eb7fa544272241b7979e3bda823f9a46a866d6bafff5c274b84a39f570d37c5a3f259dd5372d13110e3096d23b0940c45747d6b9f6aa211"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_ife={0x168, 0x12, 0x0, 0x0, {{0x8}, {0x78, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x1, 0x0, 0x2, 0x7d}}}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, @TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x7ff}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_METALST={0x2c, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x6}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x1}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x1}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0xc9, 0x6, "e429cc476e5a6b2bfe572c4920d343d428d2d62e337aedf0b81700410284c9b3bf0a511fffa6d416cc3b5ff995d0cd3e4f2656fb972f24e7c94b2df03aaad9835392bca70719cb1aa7cd3abe1c6df10410af14e75e2e761362bf9c813542b1375d5c28f2eb45a767eb9b182d3c67c24285c4482806a7087d1d4021f864e35922a41e9f5db9775b3d88b1058b40237c9a4d9c801ba52bae5aebc90c4cddd7b2c193e3fd550d29bb604246cdd79b7624d92c95813d7639db2837fff30928788aa929c8b28924"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ct={0x44, 0x1a, 0x0, 0x0, {{0x7}, {0x4}, {0x19, 0x6, "3b8dd99ff628f0e136ea03ee3bb7e4eb97a588c1fa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ctinfo={0x40, 0xf, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ct={0x148, 0x2, 0x0, 0x0, {{0x7}, {0x78, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @empty}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e21}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @rand_addr=' \x01\x00'}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @loopback}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @mcast2}, @TCA_CT_LABELS_MASK={0x14, 0x8, "0e16c0fbcfd4e59e5f04cfa3cef75f58"}]}, {0xa9, 0x6, "a1f2a4ce007ddd8790543600a2420ec559f8c649a2a9f3d420934096de08ac63d9c315e8dded6fb2508c68041b7a0aaceed27574893969cda1525b9c8934a0e1e629652c69b92b0c6af575f0df47a043720f08c20d25a11fd3d0a1a33bb49821dd083349fa0d176cd4a307e71c04cd22f512591403a4b3bf2f517e65c5c9da8db780c47af490bf4f5a3657faefcdd5726a3328052df3f62a23cdddee72c32714d8e6fe2a05"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}, @TCA_RATE={0x6}]}, 0x668}, 0x1, 0x0, 0x0, 0x1}, 0x20000810) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x19}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 406.723848ms ago: executing program 0 (id=1759): bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f00000001c0), 0x0}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cgroup.controllers\x00', 0x0, 0x0) syz_emit_ethernet(0x20, &(0x7f0000000540)={@multicast, @multicast, @void, {@llc_tr={0x11, {@llc={0xaa, 0xf4, "1e", "bf8d139514f513bcc2aff00f0894e8"}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000400), &(0x7f0000000440)=0x8) (async) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000400), &(0x7f0000000440)=0x8) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x158, 0xc8, 0x8, 0x0, 0x5803, 0x268, 0x2e8, 0x2e8, 0x268, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x118, 0x158, 0x0, {0x0, 0x2000000000000}, [@common=@dst={{0x48}, {0x5, 0x0, 0x0, [0x1, 0x3f1, 0x3, 0x6, 0x7, 0x9, 0x8, 0x3, 0x4, 0x7ff, 0xfff, 0x0, 0x9, 0x2, 0x7, 0x4], 0xc}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4, 0x0, "80a18cb784bb203c43561c2c18422f72b0a800"}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x7fff, 0x5, 0x9, 'snmp_trap\x00', 'syz1\x00', {0x42aa6dc4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x158, 0xc8, 0x8, 0x0, 0x5803, 0x268, 0x2e8, 0x2e8, 0x268, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x118, 0x158, 0x0, {0x0, 0x2000000000000}, [@common=@dst={{0x48}, {0x5, 0x0, 0x0, [0x1, 0x3f1, 0x3, 0x6, 0x7, 0x9, 0x8, 0x3, 0x4, 0x7ff, 0xfff, 0x0, 0x9, 0x2, 0x7, 0x4], 0xc}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4, 0x0, "80a18cb784bb203c43561c2c18422f72b0a800"}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x7fff, 0x5, 0x9, 'snmp_trap\x00', 'syz1\x00', {0x42aa6dc4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x3c, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x145}, 0x40040) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r1, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000340)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x88}}}}}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xc8, r3, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x800}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xc}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xc7e}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x40}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x10}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x14000044}, 0x80) getpid() 387.444249ms ago: executing program 4 (id=1760): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in6=@mcast2}, {@in=@remote, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f00000024c0)=0x7d, 0x4) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000080)=@buf={0xcc, &(0x7f00000003c0)="03bb8dd6793c1701fdc27953be5e354032821fdd7c5e8010906cb014538e86ea056fcb6114c8a6e8bc72ba895265ef245efa08c15fb2895806f00cf2425f3bd91924e136e19fca5d8d674b3e2f525f8b90d90b17218789393c91b0e152fa292078dd555b94802ac02f6039ddd665a526859aa3d4c5443c439975785a80054cb0f52d703905485d4ff6c26e31517a63247e6d89569052105c5fcaed28f8d193cd07cfd7291362457d2d1fec48d8d90f7be89c2345ac4a70be4df41be57d1ee9cb6716a5fa9c95ccdb4baf0b3f"}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x7, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x24, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r4, &(0x7f00000002c0)="d2", 0x20000000}, 0x20) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r4, &(0x7f0000000040), 0x20000000}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r4}, &(0x7f0000000700), &(0x7f0000000740)=r3}, 0x20) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_getaddrlabel={0x30, 0x1a, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x30}}, 0x0) 279.104361ms ago: executing program 0 (id=1761): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x3, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x2}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x2}]}, 0x2c}}, 0x802) (async) r1 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @null}, [@remote, @remote, @bcast, @remote, @null, @bcast, @rose, @null]}, &(0x7f0000000080)=0x48, 0xc0800) getsockname$ax25(r1, &(0x7f00000000c0)={{0x3, @null}, [@default, @bcast, @rose, @rose, @remote, @default, @null, @bcast]}, &(0x7f0000000140)=0x48) 207.004709ms ago: executing program 4 (id=1762): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket(0x1d, 0x2, 0x6) r3 = epoll_create(0x9660) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) close(r2) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x11}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_getroute={0x140, 0x1a, 0xb008f69c51e61368, 0x70bd27, 0x25dfdbfe, {0xa, 0x20, 0x80, 0x40, 0xfc, 0x3, 0xff, 0x9, 0x100}, [@RTA_PREF={0x5, 0x14, 0x5}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_IIF={0x8, 0x6, 0xff}}, @RTA_PREF={0x5, 0x14, 0x9}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x3}}, @RTA_EXPIRES={0x8, 0x17, 0x7fff}, @RTA_METRICS={0xbb, 0x8, 0x0, 0x1, "4e691fc5ef0f1abf512ca64d71d0ed625487a490210c2996baf9a30e73c844a9ccf88f91d65c777d621977c47aa4dd7e81a1361fafe324c623100108bb2576c79290cb0be2dd66a94b3364ed415128dac59a86b6399f5b3d81e9ce2db43f60aed039a0da11d39f6f82e17f2f93e09e7693856772b0d02a44e82dc2ce5ceaec4b71a0559bf862e51b7971f76d5ea26accfe6964cb1a7184fac429ce25f83143c71d857ef0448cb746907b80648ca713036bff4cabf695ce"}, @RTA_GATEWAY={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_ID={0xc, 0x1, 0x80000001}}]}, 0x140}, 0x1, 0x0, 0x0, 0x40}, 0xc0) 186.952125ms ago: executing program 4 (id=1763): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xfffffffc}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_NG_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0xf, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000020020000000900020073797a320000000008000440000000000900010073797a30000000000800034000000008"], 0x64}}, 0x0) 182.560103ms ago: executing program 0 (id=1764): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_sa2={0x2, 0x13, 0x2}]}, 0x50}, 0x1, 0x7}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}]}, 0x24}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x60100100}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05042bbd7000fedbdf250b00000008000300", @ANYRES32=r2, @ANYBLOB="0a00060008021100000000000800370002000000080037000000000005000800020000000400281014006e8004000100040001000400020004000100"], 0x58}}, 0x24000804) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="3894642067000000", @ANYRES16=r6, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001000000"], 0x38}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20010000", @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r2, @ANYBLOB="47000e00800000000802110000000802110000015050505050500000000000000000000064000000000602020202020204060000000000000602000025030034003c040106b80400080026006c09000008000c006400000008000d0000000000a2000f00019ce8cd9881221f534d607b"], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0) 66.930679ms ago: executing program 4 (id=1765): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8f0, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, &(0x7f0000000080), 0x0}, 0x20) (async) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)}, 0x0) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000600)={r0, &(0x7f0000000400)="e02e8b3aaf60ab5f81e8079c6afba806890c1ddc878171788c1fc8b047e4afc0d6855ef1844fb46380f5a20f7bf2a627a7a91aaa857a8945b85f2f17f4c53f6d6b5bea0d8c20dfb0894032a6960ec1545e56ceca0147abca538754b64989de0480abc88bb34245f0afcd5f023db007db8ed15d1c385d4b99f1e1952ef74fc95f7fb5055303f6ed56b8fca40cf96ff3ae4d9086a7b719caa11b2c29530cd376373afbb81114d325225ae01bf645467745b22803ce40c88f850829f34dba30d912271cd4558eebfe4f8488f857", &(0x7f0000000500)=""/255}, 0x20) (async) r1 = socket(0x6, 0x80000, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_opts(r2, 0x29, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x10000}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRES8=r1, @ANYRES8=r1], 0x20}}, 0x80c4) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) (async) bind$ax25(0xffffffffffffffff, &(0x7f0000000380)={{0x3, @bcast, 0x1}, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002280)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e65409da6d1b17a4011f521355b39abbea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d643b00a27f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4b7de3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000070414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d9871338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966f02000000a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c701652e8c6eea6d87ef74e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ada1d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92c9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534cfb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a00000000000000000000000000c09b1c485730d67a5774eed2a26f12969726405892f545daed1d002d4693495ef5c3c2c2df1803ef5476bb3d4898792a6424a9457360703bbc35e08377ccffe1788d74fda46a1747fa63c34004add111108a4c85088ede47caa067a82e09ee54c13f155d4c9c381ecb52a877fade77960fdcb9602a1929a97557e4f04bfc5b57278e474148854ad523094f30c2a49107d6d52f21e7f531ee64c222cb0cf9de7f4d5f85deb6dbb7da7cca124b2d5ca8b65393b26d90e652811b412cb5706cb944e05eee9cdb7886a5bf58a004b6e8ca38d65438711a387a7872692b392b831ebd4f655fd2bcb16a11bdc3b083fa0cd4151a7d1d717f8de1aefd2015c67b24000661404ac02955e6f85c23c484e6c975433b542be881a792ddefce354a78"], &(0x7f0000000640)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000380)="b9ff03086844268cb89e0ef086dd", 0x0, 0x0, 0x60000000, 0x0, 0xe2, 0x0, &(0x7f0000000040)="a4"}, 0x48) (async) bpf$ENABLE_STATS(0x20, &(0x7f00000002c0), 0x4) recvmmsg$unix(r3, 0x0, 0x0, 0x10000, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x38, r7, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x38}}, 0x0) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r8 = accept4(r5, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/52, 0x34}, {&(0x7f0000001240)=""/4106, 0x100a}], 0x2}}], 0x1, 0x0, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40), 0x2328}}, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pimreg\x00', 0x8000}) 0s ago: executing program 4 (id=1766): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) recvmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000540)=""/151, 0x97}, {&(0x7f0000000300)=""/3, 0x3}, {&(0x7f00000008c0)=""/183, 0xb7}, {&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000000480)=""/6, 0x6}, {&(0x7f0000000a00)=""/143, 0x8f}, {&(0x7f00000006c0)}], 0x7, &(0x7f0000000b40)=""/248, 0xf8}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000c40)=""/154, 0x9a}, {&(0x7f0000000700)=""/45, 0x2d}, {&(0x7f0000000780)=""/29, 0x1d}, {&(0x7f0000000d00)=""/207, 0xcf}, {&(0x7f0000003800)=""/4096, 0x1000}, {&(0x7f0000000e00)=""/155, 0x9b}, {&(0x7f0000000ec0)=""/54, 0x36}], 0x7, &(0x7f0000002fc0)=""/238, 0xee}, 0x9}], 0x2, 0x0, &(0x7f0000000f80)) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000003140)=ANY=[@ANYBLOB="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"], 0xe0}], 0x1}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = getpid() ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000380)=r4) r5 = socket(0x1e, 0x1, 0x0) connect$tipc(r5, &(0x7f0000000040)=@id, 0x10) shutdown(r5, 0x2) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f0000000100)={@none, 0x4}) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000003340)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100008}, 0xc, &(0x7f00000006c0)={&(0x7f0000003380)=ANY=[@ANYBLOB="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"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) sendmsg$AUDIT_SET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x3e9, 0x200, 0x70bd2c, 0x25dfdbfe, {0x34, 0x1, 0x0, r4, 0xffffff7e, 0x1, 0x6, 0x4000, 0x0, 0x2, 0xe6a}, [""]}, 0x3c}, 0x1, 0x0, 0x0, 0xc001}, 0x80) kernel console output (not intermixed with test programs): [ 83.494387][ T6749] lo speed is unknown, defaulting to 1000 [ 83.537185][ T6749] lo speed is unknown, defaulting to 1000 [ 83.573439][ T6749] lo speed is unknown, defaulting to 1000 [ 83.608679][ T6771] netlink: 32 bytes leftover after parsing attributes in process `syz.4.230'. [ 83.902397][ T6787] netlink: 16 bytes leftover after parsing attributes in process `syz.4.232'. [ 84.030139][ T6810] netlink: 56 bytes leftover after parsing attributes in process `syz.1.231'. [ 84.141892][ T6790] bond0: (slave syz_tun): Releasing backup interface [ 84.210486][ T6819] veth0_to_hsr: entered promiscuous mode [ 84.427602][ T6812] hsr_slave_0 (unregistering): left promiscuous mode [ 84.503903][ T6832] netlink: 28 bytes leftover after parsing attributes in process `syz.0.237'. [ 84.512746][ T6835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.239'. [ 84.528847][ T6832] netlink: 28 bytes leftover after parsing attributes in process `syz.0.237'. [ 84.564568][ T6783] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 84.635013][ T3784] net_ratelimit: 23 callbacks suppressed [ 84.635036][ T3784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.674619][ T6832] bond0: entered promiscuous mode [ 84.709596][ T6839] No such timeout policy "syz0" [ 84.732302][ T6832] bond_slave_0: entered promiscuous mode [ 84.750702][ T6832] bond_slave_1: entered promiscuous mode [ 84.784158][ T6832] bond0: left promiscuous mode [ 84.799615][ T6832] bond_slave_0: left promiscuous mode [ 84.806055][ T6832] bond_slave_1: left promiscuous mode [ 85.067445][ T6861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.206163][ T6869] veth0: entered promiscuous mode [ 85.222211][ T6865] veth0: left promiscuous mode [ 85.345890][ T5958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.664938][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.717816][ T6897] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 85.759031][ T5905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.784689][ T5905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.046586][ T6921] netlink: 'syz.0.263': attribute type 9 has an invalid length. [ 86.144896][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.537642][ T6959] netlink: zone id is out of range [ 86.570375][ T6959] netlink: zone id is out of range [ 86.603488][ T6959] netlink: zone id is out of range [ 86.624905][ T6959] netlink: zone id is out of range [ 86.632080][ T6959] netlink: zone id is out of range [ 87.271220][ T6991] __nla_validate_parse: 7 callbacks suppressed [ 87.271238][ T6991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.278'. [ 87.317540][ T6994] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.326668][ T6994] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.335628][ T6994] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.344350][ T6994] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.426525][ T6994] vxlan0: entered promiscuous mode [ 87.444597][ T6994] vxlan0: entered allmulticast mode [ 87.473314][ T6991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.505578][ T6991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.540430][ T6991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.570426][ T6991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.615004][ T6991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.670648][ T6991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.702147][ T7020] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 87.745896][ T7020] trusted_key: syz.3.285 sent an empty control message without MSG_MORE. [ 87.766856][ T7023] delete_channel: no stack [ 87.789119][ T7022] delete_channel: no stack [ 88.148024][ T7048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.293'. [ 88.161549][ T7048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.293'. [ 88.279806][ T7042] Bluetooth: MGMT ver 1.23 [ 88.315078][ T7046] netlink: 72 bytes leftover after parsing attributes in process `syz.4.292'. [ 88.782323][ T7085] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 88.783196][ T7081] xt_ecn: cannot match TCP bits for non-tcp packets [ 88.788712][ T7083] netlink: 'syz.4.305': attribute type 1 has an invalid length. [ 88.927000][ T7093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.309'. [ 89.065555][ T7098] netlink: 'syz.4.310': attribute type 5 has an invalid length. [ 89.078896][ T7102] bridge0: port 3(vlan2) entered blocking state [ 89.102040][ T7102] bridge0: port 3(vlan2) entered disabled state [ 89.111623][ T7102] vlan2: entered allmulticast mode [ 89.137986][ T7102] vlan2: left allmulticast mode [ 89.204459][ T7109] netlink: 80 bytes leftover after parsing attributes in process `syz.4.312'. [ 89.604246][ T7130] netlink: 12 bytes leftover after parsing attributes in process `syz.4.321'. [ 89.780181][ T7138] netlink: 4 bytes leftover after parsing attributes in process `syz.4.325'. [ 89.826027][ T3784] net_ratelimit: 10 callbacks suppressed [ 89.826046][ T3784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.041387][ T7149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.304838][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.785136][ T5164] Bluetooth: hci0: command tx timeout [ 90.827925][ T7204] netlink: 12 bytes leftover after parsing attributes in process `syz.3.344'. [ 90.864964][ T3784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.958534][ T7211] Cannot find del_set index 3 as target [ 91.004544][ T7213] netlink: 4 bytes leftover after parsing attributes in process `syz.3.347'. [ 91.034641][ T7213] xfrm0 speed is unknown, defaulting to 1000 [ 91.046300][ T7213] xfrm0 speed is unknown, defaulting to 1000 [ 91.053022][ T7213] xfrm0 speed is unknown, defaulting to 1000 [ 91.054923][ T7215] netlink: 'syz.2.348': attribute type 15 has an invalid length. [ 91.070951][ T7213] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 91.101837][ T7213] xfrm0 speed is unknown, defaulting to 1000 [ 91.109617][ T7213] xfrm0 speed is unknown, defaulting to 1000 [ 91.117841][ T7213] xfrm0 speed is unknown, defaulting to 1000 [ 91.125687][ T7213] xfrm0 speed is unknown, defaulting to 1000 [ 91.146592][ T7213] xfrm0 speed is unknown, defaulting to 1000 [ 91.345991][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.446807][ T7231] xt_hashlimit: size too large, truncated to 1048576 [ 91.545496][ T7237] netlink: 'syz.2.358': attribute type 1 has an invalid length. [ 91.705434][ T7244] netlink: 'syz.0.360': attribute type 1 has an invalid length. [ 91.737038][ T7248] ieee802154 phy0 wpan0: encryption failed: -22 [ 91.906847][ T3784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.189300][ T7275] net veth1_virt_wifi : renamed from virt_wifi0 [ 92.207903][ T7278] netlink: 'syz.3.370': attribute type 1 has an invalid length. [ 92.311663][ T7285] netlink: 'syz.3.372': attribute type 1 has an invalid length. [ 92.384846][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.437790][ T7289] __nla_validate_parse: 2 callbacks suppressed [ 92.437809][ T7289] netlink: 64 bytes leftover after parsing attributes in process `syz.1.374'. [ 92.460566][ T7289] netlink: 64 bytes leftover after parsing attributes in process `syz.1.374'. [ 92.585328][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.761554][ T7299] netlink: 'syz.1.377': attribute type 4 has an invalid length. [ 92.894423][ T7310] netlink: 'syz.4.383': attribute type 2 has an invalid length. [ 92.946173][ T7267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.978047][ T7314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.385'. [ 93.001739][ T7319] sctp: [Deprecated]: syz.1.387 (pid 7319) Use of int in max_burst socket option. [ 93.001739][ T7319] Use struct sctp_assoc_value instead [ 93.311977][ T7314] hsr_slave_1 (unregistering): left promiscuous mode [ 93.348137][ T7337] netlink: 12 bytes leftover after parsing attributes in process `syz.4.391'. [ 93.424855][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.730078][ T7358] netlink: 4 bytes leftover after parsing attributes in process `syz.4.398'. [ 93.745979][ T7356] SET target dimension over the limit! [ 93.854481][ T7352] netlink: 'syz.2.396': attribute type 10 has an invalid length. [ 94.607321][ T7400] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 94.836873][ T7404] lo speed is unknown, defaulting to 1000 [ 94.852877][ T7404] xfrm0 speed is unknown, defaulting to 1000 [ 95.044929][ T7267] net_ratelimit: 6 callbacks suppressed [ 95.044948][ T7267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.352754][ T7443] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 95.383040][ T7443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.426'. [ 95.399964][ T7443] netlink: 12 bytes leftover after parsing attributes in process `syz.2.426'. [ 95.411841][ T7445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.426'. [ 95.421669][ T7445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.426'. [ 95.442061][ T7441] netlink: 164 bytes leftover after parsing attributes in process `syz.1.424'. [ 95.504825][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.566619][ T7451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 95.587230][ T7451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.778642][ T7462] tipc: Failed to remove unknown binding: 66,1,1/0:2928805848/2928805850 [ 95.788939][ T7462] tipc: Failed to remove unknown binding: 66,1,1/0:2928805848/2928805850 [ 95.969702][ T7477] syzkaller1: entered promiscuous mode [ 95.985277][ T7477] syzkaller1: entered allmulticast mode [ 96.069650][ T7267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.317937][ T7493] netlink: 'syz.2.443': attribute type 4 has an invalid length. [ 96.478565][ T7507] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744072508124491) [ 96.527397][ T7507] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 96.546190][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.874098][ T7533] netlink: 'syz.2.454': attribute type 1 has an invalid length. [ 97.004162][ T7535] bond1: (slave ipip0): The slave device specified does not support setting the MAC address [ 97.019390][ T7535] bond1: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 97.029004][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.031546][ T7535] bond1: (slave ipip0): making interface the new active one [ 97.046005][ T7535] bond1: (slave ipip0): Enslaving as an active interface with an up link [ 97.111369][ T7267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.221849][ T7545] netlink: 'syz.0.456': attribute type 28 has an invalid length. [ 97.233983][ T7546] x_tables: duplicate underflow at hook 2 [ 97.240185][ T7545] netlink: 'syz.0.456': attribute type 3 has an invalid length. [ 97.253408][ T7549] xt_socket: unknown flags 0x4 [ 97.556061][ T7563] __nla_validate_parse: 15 callbacks suppressed [ 97.556081][ T7563] netlink: 8 bytes leftover after parsing attributes in process `syz.4.464'. [ 97.585039][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.598807][ T7563] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 97.637212][ T7570] netlink: 16 bytes leftover after parsing attributes in process `syz.2.467'. [ 97.869785][ T7586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.471'. [ 98.012461][ T7596] veth0: entered promiscuous mode [ 98.026109][ T7592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.476'. [ 98.057879][ T7591] veth0: left promiscuous mode [ 98.146324][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.200449][ T7267] IPVS: starting estimator thread 0... [ 98.209917][ T7608] lo speed is unknown, defaulting to 1000 [ 98.214660][ T7609] netlink: 'syz.1.480': attribute type 1 has an invalid length. [ 98.222265][ T7608] xfrm0 speed is unknown, defaulting to 1000 [ 98.314957][ T7610] IPVS: using max 21 ests per chain, 50400 per kthread [ 98.418544][ T7619] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 98.624812][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.048085][ T7649] netlink: 20 bytes leftover after parsing attributes in process `syz.3.490'. [ 99.133669][ T7658] netlink: 'syz.2.492': attribute type 24 has an invalid length. [ 99.233841][ T7644] netlink: 'syz.3.490': attribute type 1 has an invalid length. [ 99.259012][ T7644] netlink: 224 bytes leftover after parsing attributes in process `syz.3.490'. [ 99.372932][ T7669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.494'. [ 99.600437][ T7688] netlink: 16 bytes leftover after parsing attributes in process `syz.0.500'. [ 99.633758][ T7688] netlink: 16 bytes leftover after parsing attributes in process `syz.0.500'. [ 100.085227][ T8] net_ratelimit: 2 callbacks suppressed [ 100.085246][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.099644][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.248874][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.556819][ T7746] netlink: 'syz.0.515': attribute type 1 has an invalid length. [ 100.564149][ T7745] sctp: [Deprecated]: syz.4.514 (pid 7745) Use of int in max_burst socket option. [ 100.564149][ T7745] Use struct sctp_assoc_value instead [ 100.576497][ T7746] netlink: 'syz.0.515': attribute type 2 has an invalid length. [ 100.639721][ T7746] netlink: 3 bytes leftover after parsing attributes in process `syz.0.515'. [ 100.705173][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.866658][ T7766] xt_hashlimit: max too large, truncated to 1048576 [ 100.880325][ T7775] netlink: 'syz.2.519': attribute type 10 has an invalid length. [ 101.264976][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.634494][ T7821] syz.3.533 (7821) used obsolete PPPIOCDETACH ioctl [ 101.744824][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.193581][ T7843] netlink: 'syz.1.541': attribute type 3 has an invalid length. [ 102.309229][ T7267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.482825][ T7859] Cannot find add_set index 0 as target [ 102.533773][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 102.582018][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 102.604969][ T7861] netlink: 'syz.0.544': attribute type 1 has an invalid length. [ 102.615290][ T7861] netlink: 'syz.0.544': attribute type 2 has an invalid length. [ 102.625645][ T7861] __nla_validate_parse: 4 callbacks suppressed [ 102.625662][ T7861] netlink: 28 bytes leftover after parsing attributes in process `syz.0.544'. [ 102.641465][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 102.661075][ T7854] netlink: 24 bytes leftover after parsing attributes in process `syz.0.544'. [ 102.667206][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 102.670459][ T7854] netlink: 'syz.0.544': attribute type 1 has an invalid length. [ 102.682894][ T5849] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 102.685845][ T7854] netlink: 'syz.0.544': attribute type 2 has an invalid length. [ 102.692284][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 102.699814][ T7854] netlink: 28 bytes leftover after parsing attributes in process `syz.0.544'. [ 102.720509][ T7868] netlink: 104 bytes leftover after parsing attributes in process `syz.4.549'. [ 102.784878][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.835059][ T7860] lo speed is unknown, defaulting to 1000 [ 102.841812][ T7860] xfrm0 speed is unknown, defaulting to 1000 [ 102.858292][ T7868] netlink: 12 bytes leftover after parsing attributes in process `syz.4.549'. [ 102.902532][ T7873] netlink: 'syz.0.551': attribute type 1 has an invalid length. [ 103.055237][ T7860] chnl_net:caif_netlink_parms(): no params data found [ 103.111032][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.120058][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.226408][ T7880] netlink: 92 bytes leftover after parsing attributes in process `syz.3.553'. [ 104.005969][ T7891] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.029426][ T7891] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.199278][ T7891] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.210419][ T7891] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.377667][ T7891] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.390337][ T7891] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.403917][ T7860] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.411352][ T7860] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.418904][ T7860] bridge_slave_0: entered allmulticast mode [ 104.425796][ T7860] bridge_slave_0: entered promiscuous mode [ 104.434417][ T7860] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.453811][ T7860] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.461417][ T7860] bridge_slave_1: entered allmulticast mode [ 104.470913][ T7860] bridge_slave_1: entered promiscuous mode [ 104.495187][ T7891] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.507509][ T7891] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.588149][ T7860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.626645][ T7860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.680161][ T7860] team0: Port device team_slave_0 added [ 104.698148][ T7891] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.714903][ T7891] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.746683][ T7860] team0: Port device team_slave_1 added [ 104.757409][ T7891] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.783055][ T7891] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.791405][ T5849] Bluetooth: hci1: command tx timeout [ 104.854130][ T7929] xt_hashlimit: size too large, truncated to 1048576 [ 104.874506][ T7929] xt_hashlimit: max too large, truncated to 1048576 [ 104.899319][ T7929] xt_hashlimit: overflow, try lower: 0/0 [ 104.920377][ T7891] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.950321][ T7891] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.999673][ T7860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.010416][ T7860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.047728][ T7860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.061018][ T7860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.068277][ T7860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.118705][ T7860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.146925][ T7891] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.157621][ T7891] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.344051][ T7860] hsr_slave_0: entered promiscuous mode [ 105.374431][ T7860] hsr_slave_1: entered promiscuous mode [ 105.379640][ T7954] netlink: 28 bytes leftover after parsing attributes in process `syz.0.568'. [ 105.396160][ T7860] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.396175][ T7954] netlink: 28 bytes leftover after parsing attributes in process `syz.0.568'. [ 105.420947][ T7860] Cannot create hsr debugfs directory [ 105.435527][ T5893] net_ratelimit: 4 callbacks suppressed [ 105.435543][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.544458][ T7954] gretap0: entered promiscuous mode [ 105.562618][ T7954] batadv_slave_1: entered promiscuous mode [ 105.595806][ T7966] netlink: 72 bytes leftover after parsing attributes in process `syz.4.573'. [ 105.608868][ T7966] netlink: 16 bytes leftover after parsing attributes in process `syz.4.573'. [ 105.843906][ T7860] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.977768][ T7860] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.161308][ T7860] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.338156][ T7860] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.647650][ T8026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.666036][ T8026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.673490][ T8026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.733096][ T7860] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 106.765015][ T7860] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 106.787342][ T8030] tipc: Started in network mode [ 106.802554][ T8030] tipc: Node identity d60cce057576, cluster identity 4711 [ 106.823979][ T8030] tipc: Enabled bearer , priority 0 [ 106.865784][ T5849] Bluetooth: hci1: command tx timeout [ 106.878279][ T8035] netlink: 'syz.3.592': attribute type 16 has an invalid length. [ 106.907216][ T8030] tipc: Resetting bearer [ 106.914022][ T7860] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 106.979236][ T8033] tipc: Resetting bearer [ 107.332181][ T8062] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20001 [ 107.502532][ T8061] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5 [ 107.837515][ T7266] tipc: Node number set to 2742734341 [ 108.638084][ T8033] tipc: Disabling bearer [ 108.647463][ T7860] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 108.790951][ T8070] __nla_validate_parse: 5 callbacks suppressed [ 108.790971][ T8070] netlink: 284 bytes leftover after parsing attributes in process `syz.0.603'. [ 108.850686][ T8078] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 108.899812][ T8076] netlink: 20 bytes leftover after parsing attributes in process `syz.4.604'. [ 108.920629][ T7860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.942986][ T8070] netlink: 'syz.0.603': attribute type 10 has an invalid length. [ 108.944301][ T8076] lo speed is unknown, defaulting to 1000 [ 108.959698][ T5849] Bluetooth: hci1: command tx timeout [ 108.970399][ T8070] team0: Device hsr_slave_0 failed to register rx_handler [ 109.016604][ T7860] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.042523][ T6079] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.049677][ T6079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.090844][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.098063][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.189984][ T8089] gtp0: entered promiscuous mode [ 109.205691][ T8089] gtp0: entered allmulticast mode [ 109.513095][ T8104] syzkaller0: entered promiscuous mode [ 109.519053][ T8104] syzkaller0: entered allmulticast mode [ 109.884346][ T8130] netlink: 36 bytes leftover after parsing attributes in process `syz.4.620'. [ 111.027108][ T5849] Bluetooth: hci1: command tx timeout [ 111.143454][ T7860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.286811][ T7860] veth0_vlan: entered promiscuous mode [ 111.321247][ T7860] veth1_vlan: entered promiscuous mode [ 111.383388][ T7860] veth0_macvtap: entered promiscuous mode [ 111.409842][ T7860] veth1_macvtap: entered promiscuous mode [ 111.484338][ T7860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.499473][ T7860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.528313][ T7860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.539380][ T7860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.549518][ T7860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.560144][ T7860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.570307][ T7860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.581318][ T7860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.592775][ T7860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.617030][ T7860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.626164][ T8152] netlink: 240 bytes leftover after parsing attributes in process `syz.4.626'. [ 111.634180][ T7860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.653371][ T7860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.674874][ T7860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.708031][ T7860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.721366][ T7860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.731516][ T7860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.742177][ T7860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.754117][ T7860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.798519][ T7860] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.813551][ T8160] x_tables: unsorted entry at hook 3 [ 111.825375][ T7860] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.834119][ T7860] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.872212][ T7860] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.952019][ T8168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.630'. [ 111.955648][ T8169] netlink: 'syz.4.629': attribute type 2 has an invalid length. [ 112.031197][ T8169] netlink: 'syz.4.629': attribute type 1 has an invalid length. [ 112.047922][ T744] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.073060][ T744] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.130297][ T6074] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.138577][ T6074] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.255110][ T8180] netlink: 12 bytes leftover after parsing attributes in process `syz.4.633'. [ 112.287840][ T8180] tc_dump_action: action bad kind [ 112.336941][ T8180] netlink: 12 bytes leftover after parsing attributes in process `syz.4.633'. [ 112.357494][ T8180] tc_dump_action: action bad kind [ 112.381161][ T8188] netlink: 12 bytes leftover after parsing attributes in process `syz.3.634'. [ 112.462697][ T8180] netlink: 12 bytes leftover after parsing attributes in process `syz.4.633'. [ 112.479855][ T8180] tc_dump_action: action bad kind [ 112.571620][ T8180] netlink: 12 bytes leftover after parsing attributes in process `syz.4.633'. [ 112.585735][ T8180] tc_dump_action: action bad kind [ 112.593475][ T8180] tc_dump_action: action bad kind [ 112.618292][ T8180] tc_dump_action: action bad kind [ 112.631043][ T8180] tc_dump_action: action bad kind [ 112.645822][ T8180] tc_dump_action: action bad kind [ 112.653147][ T8180] tc_dump_action: action bad kind [ 112.659896][ T8180] tc_dump_action: action bad kind [ 112.665620][ T8197] netlink: 'syz.0.638': attribute type 1 has an invalid length. [ 112.673932][ T8180] tc_dump_action: action bad kind [ 112.685993][ T8180] tc_dump_action: action bad kind [ 112.705233][ T8180] tc_dump_action: action bad kind [ 112.710472][ T8180] tc_dump_action: action bad kind [ 112.724388][ T8180] tc_dump_action: action bad kind [ 112.730182][ T8201] netlink: 'syz.3.639': attribute type 7 has an invalid length. [ 112.738180][ T8180] tc_dump_action: action bad kind [ 112.743811][ T8180] tc_dump_action: action bad kind [ 112.749269][ T8180] tc_dump_action: action bad kind [ 112.754490][ T8180] tc_dump_action: action bad kind [ 112.775523][ T8180] tc_dump_action: action bad kind [ 112.780817][ T8180] tc_dump_action: action bad kind [ 112.796467][ T8180] tc_dump_action: action bad kind [ 112.801719][ T8180] tc_dump_action: action bad kind [ 112.807636][ T8201] netlink: 'syz.3.639': attribute type 7 has an invalid length. [ 112.822016][ T8180] tc_dump_action: action bad kind [ 112.827641][ T8180] tc_dump_action: action bad kind [ 112.850102][ T8180] tc_dump_action: action bad kind [ 112.863363][ T8180] tc_dump_action: action bad kind [ 112.871636][ T8206] 0·: renamed from hsr_slave_1 (while UP) [ 112.880398][ T8206] 0·: entered allmulticast mode [ 112.886066][ T8206] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 112.926589][ T8180] tc_dump_action: action bad kind [ 112.934420][ T8180] tc_dump_action: action bad kind [ 112.942894][ T8211] netlink: 'syz.1.642': attribute type 4 has an invalid length. [ 113.050865][ T8210] netlink: 'syz.1.642': attribute type 4 has an invalid length. [ 113.085195][ T8180] tc_dump_action: action bad kind [ 113.247888][ T6074] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.613149][ T5164] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 113.622775][ T8231] Cannot find add_set index 0 as target [ 113.629434][ T5164] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 113.641244][ T6074] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.658737][ T5164] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 113.677159][ T5164] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 113.691464][ T5164] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 113.703935][ T8220] lo speed is unknown, defaulting to 1000 [ 113.711858][ T8220] xfrm0 speed is unknown, defaulting to 1000 [ 113.718242][ T5164] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 113.918265][ T6074] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.960894][ T8232] lo speed is unknown, defaulting to 1000 [ 114.005892][ T8232] xfrm0 speed is unknown, defaulting to 1000 [ 114.028642][ T6074] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.326728][ T8255] __nla_validate_parse: 35 callbacks suppressed [ 114.326749][ T8255] netlink: 20 bytes leftover after parsing attributes in process `syz.0.654'. [ 114.346537][ T8255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.654'. [ 114.810065][ T6074] bridge_slave_1: left allmulticast mode [ 114.816249][ T6074] bridge_slave_1: left promiscuous mode [ 114.823410][ T6074] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.888809][ T6074] bridge_slave_0: left allmulticast mode [ 114.894798][ T6074] bridge_slave_0: left promiscuous mode [ 114.900699][ T6074] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.111478][ T8295] netlink: 28 bytes leftover after parsing attributes in process `syz.4.663'. [ 115.433276][ T6074] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.447344][ T6074] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.457828][ T6074] bond0 (unregistering): Released all slaves [ 115.472609][ T8232] chnl_net:caif_netlink_parms(): no params data found [ 115.825076][ T5164] Bluetooth: hci1: command tx timeout [ 115.986331][ T8328] netlink: 44 bytes leftover after parsing attributes in process `syz.4.669'. [ 116.005142][ T8328] netlink: 43 bytes leftover after parsing attributes in process `syz.4.669'. [ 116.030341][ T8328] netlink: 'syz.4.669': attribute type 6 has an invalid length. [ 116.044817][ T8328] netlink: 'syz.4.669': attribute type 5 has an invalid length. [ 116.055731][ T8331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.670'. [ 116.074930][ T8328] netlink: 43 bytes leftover after parsing attributes in process `syz.4.669'. [ 116.091125][ T8232] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.111397][ T8232] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.131658][ T8232] bridge_slave_0: entered allmulticast mode [ 116.149826][ T8232] bridge_slave_0: entered promiscuous mode [ 116.167341][ T8232] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.195668][ T8232] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.203018][ T8232] bridge_slave_1: entered allmulticast mode [ 116.220558][ T8232] bridge_slave_1: entered promiscuous mode [ 116.453151][ T6074] hsr_slave_0: left promiscuous mode [ 116.484949][ T6074] hsr_slave_1: left promiscuous mode [ 116.525601][ T6074] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.559384][ T6074] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.605281][ T6074] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.633140][ T6074] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.707955][ T6074] veth1_macvtap: left promiscuous mode [ 116.732668][ T6074] veth0_macvtap: left promiscuous mode [ 116.739802][ T6074] veth1_vlan: left promiscuous mode [ 116.759199][ T6074] veth0_vlan: left promiscuous mode [ 117.487970][ T6074] team0 (unregistering): Port device team_slave_1 removed [ 117.531549][ T6074] team0 (unregistering): Port device team_slave_0 removed [ 117.876021][ T8232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.919455][ T8232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.925184][ T5164] Bluetooth: hci1: command tx timeout [ 118.120985][ T8232] team0: Port device team_slave_0 added [ 118.155641][ T8232] team0: Port device team_slave_1 added [ 118.324089][ T8232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.342506][ T8232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.458219][ T8232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.501095][ T8232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.535019][ T8232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.625987][ T8232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.738546][ T8423] netlink: 100 bytes leftover after parsing attributes in process `syz.4.687'. [ 118.817170][ T8232] hsr_slave_0: entered promiscuous mode [ 118.838291][ T8232] hsr_slave_1: entered promiscuous mode [ 118.857270][ T8232] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.880847][ T8435] netlink: 'syz.1.688': attribute type 2 has an invalid length. [ 118.889150][ T8232] Cannot create hsr debugfs directory [ 118.929330][ T8435] netlink: 92 bytes leftover after parsing attributes in process `syz.1.688'. [ 119.245361][ T8454] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 119.375645][ T8454] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 119.397377][ T8454] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 119.550384][ T8470] netlink: 44 bytes leftover after parsing attributes in process `syz.0.694'. [ 119.638140][ T8470] netlink: 24 bytes leftover after parsing attributes in process `syz.0.694'. [ 119.690452][ T8470] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.707115][ T8470] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.714314][ T8470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.762965][ T8483] xt_cluster: node mask cannot exceed total number of nodes [ 119.940496][ T8493] netlink: 28 bytes leftover after parsing attributes in process `syz.3.700'. [ 119.974231][ T8490] netlink: 52 bytes leftover after parsing attributes in process `syz.0.699'. [ 119.985879][ T5164] Bluetooth: hci1: command tx timeout [ 120.063822][ T8498] netlink: 28 bytes leftover after parsing attributes in process `syz.4.702'. [ 120.703534][ T8232] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 120.752531][ T8232] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 120.833237][ T8232] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 120.853323][ T8232] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 120.872662][ T8537] netlink: 56 bytes leftover after parsing attributes in process `syz.3.713'. [ 121.139832][ T8232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.198102][ T8232] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.248525][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.255816][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.298592][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.305802][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.324957][ T8558] tipc: Started in network mode [ 121.329875][ T8558] tipc: Node identity 5f2d14aa, cluster identity 4711 [ 121.346550][ T8558] tipc: Enabling of bearer rejected, failed to enable media [ 121.363728][ T8565] C: renamed from team_slave_0 (while UP) [ 121.382231][ T8565] netlink: 'syz.0.719': attribute type 1 has an invalid length. [ 121.392186][ T8565] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 121.441865][ T8232] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 121.452660][ T8232] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 121.707252][ T8579] netlink: 'syz.0.721': attribute type 5 has an invalid length. [ 121.758353][ T8232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.912078][ T8232] veth0_vlan: entered promiscuous mode [ 121.934541][ T8232] veth1_vlan: entered promiscuous mode [ 122.008178][ T8232] veth0_macvtap: entered promiscuous mode [ 122.039899][ T8232] veth1_macvtap: entered promiscuous mode [ 122.056987][ T8232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.068205][ T8232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.078294][ T8232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.089054][ T8232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.099452][ T8232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.110367][ T8232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.119259][ T5164] Bluetooth: hci1: command tx timeout [ 122.120469][ T8232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.137104][ T8232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.149787][ T8232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.221080][ T8232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.235604][ T8232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.245551][ T8232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.256331][ T8232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.266376][ T8232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.276840][ T8232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.290240][ T8232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.296564][ T8609] netlink: 'syz.1.725': attribute type 1 has an invalid length. [ 122.301151][ T8232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.322534][ T8232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.332821][ T8232] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.341626][ T8232] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.354838][ T8232] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.374216][ T8232] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.497624][ T8610] bond2: entered allmulticast mode [ 122.517969][ T8610] 8021q: adding VLAN 0 to HW filter on device bond2 [ 122.532122][ T8610] bond1: (slave bond2): making interface the new active one [ 122.541088][ T8610] bond1: (slave bond2): Enslaving as an active interface with an up link [ 122.574964][ T8614] gtp0: entered promiscuous mode [ 122.580026][ T8614] gtp0: entered allmulticast mode [ 122.846136][ T8625] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.901003][ T6079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.964986][ T6079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.049367][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.086307][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.151124][ T8654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.736'. [ 123.400082][ T8667] netlink: 44 bytes leftover after parsing attributes in process `syz.0.739'. [ 123.480793][ T8667] netlink: 24 bytes leftover after parsing attributes in process `syz.0.739'. [ 123.593458][ T8681] IPv6: sit1: Disabled Multicast RS [ 123.789652][ T8694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.745'. [ 123.879396][ T6079] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.447666][ T6079] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.655829][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 124.670200][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 124.680032][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 124.688257][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 124.696084][ T5849] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 124.703519][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 124.750496][ T8739] netlink: 'syz.1.753': attribute type 9 has an invalid length. [ 124.773733][ T8739] __nla_validate_parse: 1 callbacks suppressed [ 124.773750][ T8739] netlink: 244 bytes leftover after parsing attributes in process `syz.1.753'. [ 124.813482][ T6079] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.862840][ T8733] lo speed is unknown, defaulting to 1000 [ 124.898864][ T6079] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.941905][ T8733] xfrm0 speed is unknown, defaulting to 1000 [ 124.942309][ T8741] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.755'. [ 124.966156][ T8749] netlink: 4 bytes leftover after parsing attributes in process `syz.4.754'. [ 125.376730][ T6079] bridge_slave_1: left allmulticast mode [ 125.382474][ T6079] bridge_slave_1: left promiscuous mode [ 125.401317][ T6079] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.494152][ T6079] bridge_slave_0: left allmulticast mode [ 125.502878][ T6079] bridge_slave_0: left promiscuous mode [ 125.513132][ T6079] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.791021][ T8798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.765'. [ 126.127289][ T6079] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.141740][ T6079] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.153651][ T6079] bond0 (unregistering): Released all slaves [ 126.186226][ T8779] netlink: 'syz.4.763': attribute type 11 has an invalid length. [ 126.322309][ T8815] veth0_to_hsr: entered promiscuous mode [ 126.480740][ T8816] hsr_slave_0 (unregistering): left promiscuous mode [ 126.588560][ T8821] tipc: Started in network mode [ 126.593481][ T8821] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 126.624315][ T8821] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 126.648201][ T8821] tipc: Enabled bearer , priority 10 [ 126.749492][ T8835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.774'. [ 126.785467][ T5849] Bluetooth: hci1: command tx timeout [ 126.842581][ T8845] netlink: 36 bytes leftover after parsing attributes in process `syz.0.775'. [ 127.027236][ T8733] chnl_net:caif_netlink_parms(): no params data found [ 127.113472][ T6079] hsr_slave_0: left promiscuous mode [ 127.149368][ T6079] hsr_slave_1: left promiscuous mode [ 127.176407][ T6079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.183876][ T6079] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.225799][ T6079] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.233236][ T6079] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.263871][ T6079] veth1_macvtap: left promiscuous mode [ 127.271714][ T6079] veth0_macvtap: left promiscuous mode [ 127.285097][ T6079] veth1_vlan: left promiscuous mode [ 127.290402][ T6079] veth0_vlan: left promiscuous mode [ 127.765204][ T7268] tipc: Node number set to 1 [ 127.793794][ T6079] team0 (unregistering): Port device team_slave_1 removed [ 127.837375][ T6079] team0 (unregistering): Port device team_slave_0 removed [ 128.520597][ T8733] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.553436][ T8733] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.593230][ T8733] bridge_slave_0: entered allmulticast mode [ 128.606222][ T8733] bridge_slave_0: entered promiscuous mode [ 128.613956][ T8733] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.621915][ T8733] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.629223][ T8733] bridge_slave_1: entered allmulticast mode [ 128.636512][ T8733] bridge_slave_1: entered promiscuous mode [ 128.701872][ T8903] ebt_among: wrong size: 1048 against expected 1006634004, rounded to 1006634008 [ 128.761109][ T8733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.822294][ T8733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.865807][ T5849] Bluetooth: hci1: command tx timeout [ 129.034193][ T8733] team0: Port device team_slave_0 added [ 129.185684][ T8930] tipc: Enabled bearer , priority 10 [ 129.198592][ T8930] netlink: 28 bytes leftover after parsing attributes in process `syz.4.793'. [ 129.201241][ T8733] team0: Port device team_slave_1 added [ 129.225090][ T8930] netlink: 28 bytes leftover after parsing attributes in process `syz.4.793'. [ 129.274873][ T8938] netlink: 28 bytes leftover after parsing attributes in process `syz.4.793'. [ 129.310102][ T8938] netlink: 28 bytes leftover after parsing attributes in process `syz.4.793'. [ 129.461948][ T8733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.469786][ T8733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.496093][ T8733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.555730][ T8733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.562791][ T8733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.605159][ T8733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.640632][ T8947] veth0: entered promiscuous mode [ 129.646387][ T8947] veth0: left promiscuous mode [ 129.802023][ T8733] hsr_slave_0: entered promiscuous mode [ 129.811338][ T8733] hsr_slave_1: entered promiscuous mode [ 129.825051][ T8733] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 129.832665][ T8733] Cannot create hsr debugfs directory [ 130.164855][ T7266] tipc: Node number set to 1596789930 [ 130.223634][ T8992] netlink: 4 bytes leftover after parsing attributes in process `syz.1.807'. [ 130.950762][ T5849] Bluetooth: hci1: command tx timeout [ 131.108006][ T8733] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 131.190397][ T8733] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 131.199331][ T9048] netlink: 'syz.0.821': attribute type 126 has an invalid length. [ 131.222447][ T8733] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 131.270372][ T8733] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 131.581351][ T8733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.651266][ T9070] netlink: 'syz.3.826': attribute type 9 has an invalid length. [ 131.677826][ T9074] netlink: 36 bytes leftover after parsing attributes in process `syz.0.827'. [ 131.700464][ T9070] netlink: 244 bytes leftover after parsing attributes in process `syz.3.826'. [ 131.772352][ T8733] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.846118][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.853398][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.915651][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.922798][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.938116][ T9088] netlink: 'syz.4.831': attribute type 2 has an invalid length. [ 131.968533][ T9090] netlink: 72 bytes leftover after parsing attributes in process `syz.0.830'. [ 132.020138][ T9090] netlink: 72 bytes leftover after parsing attributes in process `syz.0.830'. [ 132.044894][ T9090] netlink: 32 bytes leftover after parsing attributes in process `syz.0.830'. [ 132.170935][ T8733] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 132.227337][ T9106] xt_bpf: check failed: parse error [ 132.260945][ T9104] netlink: 4 bytes leftover after parsing attributes in process `syz.4.838'. [ 132.281562][ T9107] netlink: 'syz.3.836': attribute type 10 has an invalid length. [ 132.761397][ T8733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.931627][ T9149] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 132.964459][ T8733] veth0_vlan: entered promiscuous mode [ 133.008903][ T8733] veth1_vlan: entered promiscuous mode [ 133.026250][ T5164] Bluetooth: hci1: command tx timeout [ 133.036834][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.043159][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.088567][ T9159] netlink: 14 bytes leftover after parsing attributes in process `syz.3.848'. [ 133.101656][ T9160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.845'. [ 133.115630][ T9159] sctp: [Deprecated]: syz.3.848 (pid 9159) Use of int in maxseg socket option. [ 133.115630][ T9159] Use struct sctp_assoc_value instead [ 133.144177][ T8733] veth0_macvtap: entered promiscuous mode [ 133.179805][ T8733] veth1_macvtap: entered promiscuous mode [ 133.261277][ T8733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.291618][ T8733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.334354][ T8733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.374875][ T8733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.400214][ T8733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.431942][ T8733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.448880][ T8733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.462317][ T8733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.490818][ T8733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.514409][ T8733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.538584][ T8733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.559136][ T8733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.582424][ T8733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.603936][ T8733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.631645][ T8733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.653883][ T8733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.667852][ T8733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.683777][ T8733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.716915][ T8733] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.738358][ T8733] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.757083][ T8733] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.802392][ T8733] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.029499][ T9192] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.116821][ T9204] netlink: 12 bytes leftover after parsing attributes in process `syz.1.856'. [ 134.253644][ T6084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.274970][ T6084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.383129][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.412624][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.101064][ T9239] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.333799][ T9239] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.477959][ T9239] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.521432][ T9278] __nla_validate_parse: 6 callbacks suppressed [ 135.521449][ T9278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.871'. [ 135.619399][ T9239] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.840506][ T9239] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.859757][ T9298] batadv1: entered allmulticast mode [ 135.881525][ T9239] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.899562][ T9239] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.918561][ T9239] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.918739][ T5164] Bluetooth: hci1: command 0x0405 tx timeout [ 136.052663][ T9302] netlink: 68 bytes leftover after parsing attributes in process `syz.4.881'. [ 136.156103][ T9305] netlink: 32 bytes leftover after parsing attributes in process `syz.4.881'. [ 136.297392][ T66] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.320756][ T9315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.886'. [ 136.331345][ T9315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.886'. [ 136.340384][ T9305] netem: change failed [ 136.345529][ T9316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.886'. [ 136.359114][ T9315] syz_tun: entered promiscuous mode [ 136.408807][ T66] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.490649][ T66] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.561950][ T66] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.667406][ T66] bridge_slave_1: left allmulticast mode [ 136.678834][ T66] bridge_slave_1: left promiscuous mode [ 136.685498][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.694681][ T66] bridge_slave_0: left allmulticast mode [ 136.701093][ T66] bridge_slave_0: left promiscuous mode [ 136.707922][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.914041][ T9319] netlink: 76 bytes leftover after parsing attributes in process `syz.3.889'. [ 136.923336][ T9319] netlink: 12 bytes leftover after parsing attributes in process `syz.3.889'. [ 137.010359][ T9326] netlink: 124 bytes leftover after parsing attributes in process `syz.0.887'. [ 137.232523][ T9330] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 137.259258][ T9332] netlink: 248 bytes leftover after parsing attributes in process `syz.1.892'. [ 137.292723][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.333677][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.356953][ T66] bond0 (unregistering): Released all slaves [ 137.372280][ T5164] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 137.383298][ T5164] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 137.392315][ T5164] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 137.407385][ T5164] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 137.417916][ T5164] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 137.427176][ T5164] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 137.453200][ T9325] ipvlan1: entered promiscuous mode [ 137.667183][ T9333] lo speed is unknown, defaulting to 1000 [ 137.688861][ T9333] xfrm0 speed is unknown, defaulting to 1000 [ 137.853916][ T9356] netlink: 'syz.1.896': attribute type 7 has an invalid length. [ 137.919250][ T66] hsr_slave_0: left promiscuous mode [ 137.938467][ T66] hsr_slave_1: left promiscuous mode [ 137.948822][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.965181][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.976773][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.989944][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.033694][ T66] veth1_macvtap: left promiscuous mode [ 138.040661][ T66] veth0_macvtap: left promiscuous mode [ 138.046432][ T66] veth1_vlan: left promiscuous mode [ 138.051980][ T66] veth0_vlan: left promiscuous mode [ 138.584692][ T66] team0 (unregistering): Port device team_slave_1 removed [ 138.643206][ T66] team0 (unregistering): Port device team_slave_0 removed [ 139.026871][ T9365] ip6gre2: entered allmulticast mode [ 139.449362][ T9333] chnl_net:caif_netlink_parms(): no params data found [ 139.505031][ T5164] Bluetooth: hci1: command tx timeout [ 139.797910][ T9333] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.815180][ T9333] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.833703][ T9333] bridge_slave_0: entered allmulticast mode [ 139.844570][ T9333] bridge_slave_0: entered promiscuous mode [ 139.944354][ T9407] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.970505][ T9407] batman_adv: batadv0: Interface deactivated: dummy0 [ 140.028324][ T9407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.041962][ T9407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.057398][ T9407] hsr0: left promiscuous mode [ 140.081464][ T9407] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.091922][ T9407] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.101058][ T9407] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.110794][ T9407] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.141997][ T9407] gtp0: left promiscuous mode [ 140.147762][ T9407] gtp0: left allmulticast mode [ 140.154773][ T9407] bond2: left allmulticast mode [ 140.160719][ T9407] syz_tun: left promiscuous mode [ 140.173552][ T9333] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.190856][ T9333] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.205432][ T9333] bridge_slave_1: entered allmulticast mode [ 140.215511][ T9333] bridge_slave_1: entered promiscuous mode [ 140.235926][ T9416] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 140.377827][ T9428] netlink: 'syz.4.921': attribute type 2 has an invalid length. [ 140.390053][ T9428] netlink: 'syz.4.921': attribute type 1 has an invalid length. [ 140.400252][ T9333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.464043][ T9425] bond0: option updelay: invalid value (18446744073709551615) [ 140.472643][ T9425] bond0: option updelay: allowed values 0 - 2147483647 [ 140.493463][ T9333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.590738][ T9437] netlink: 'syz.4.922': attribute type 21 has an invalid length. [ 140.612128][ T9333] team0: Port device team_slave_0 added [ 140.635905][ T9444] mac80211_hwsim hwsim3 ªªªªªª: renamed from syzkaller0 [ 140.657560][ T9443] tipc: Enabling of bearer rejected, failed to enable media [ 140.668375][ T9333] team0: Port device team_slave_1 added [ 140.717760][ T9442] netlink: 'syz.0.924': attribute type 11 has an invalid length. [ 140.747579][ T9333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.758196][ T9333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.795879][ T9333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.816961][ T9333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.834182][ T9333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.924923][ T9333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.927176][ T9465] __nla_validate_parse: 5 callbacks suppressed [ 140.927192][ T9465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.927'. [ 141.100876][ T9479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.933'. [ 141.111382][ T9479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.933'. [ 141.142533][ T9333] hsr_slave_0: entered promiscuous mode [ 141.151617][ T9333] hsr_slave_1: entered promiscuous mode [ 141.160176][ T9333] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.170004][ T9333] Cannot create hsr debugfs directory [ 141.178746][ T9482] netlink: 52 bytes leftover after parsing attributes in process `syz.3.933'. [ 141.200898][ T9481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.934'. [ 141.212035][ T9481] netlink: 12 bytes leftover after parsing attributes in process `syz.1.934'. [ 141.258735][ T9481] netlink: 'syz.1.934': attribute type 15 has an invalid length. [ 141.585800][ T5164] Bluetooth: hci1: command tx timeout [ 142.094700][ T9333] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 142.128142][ T9333] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 142.157866][ T9525] netlink: 'syz.3.944': attribute type 11 has an invalid length. [ 142.173111][ T9333] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 142.219573][ T9333] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 142.320190][ T9532] netlink: 504 bytes leftover after parsing attributes in process `syz.0.947'. [ 142.389746][ T9333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.434394][ T9333] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.475184][ T9537] netlink: 'syz.3.949': attribute type 18 has an invalid length. [ 142.489775][ T6079] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.496986][ T6079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.524144][ T5905] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.531385][ T5905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.581322][ T9541] netlink: 20 bytes leftover after parsing attributes in process `syz.0.951'. [ 142.624355][ T9333] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 142.803683][ T9553] netlink: 32 bytes leftover after parsing attributes in process `syz.0.955'. [ 143.017615][ T9570] hsr0: entered promiscuous mode [ 143.056669][ T9333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.126894][ T9574] netlink: 12 bytes leftover after parsing attributes in process `syz.4.959'. [ 143.212500][ T9333] veth0_vlan: entered promiscuous mode [ 143.244170][ T9582] netlink: 'syz.1.962': attribute type 11 has an invalid length. [ 143.251102][ T9333] veth1_vlan: entered promiscuous mode [ 143.280914][ T9582] netlink: 'syz.1.962': attribute type 11 has an invalid length. [ 143.343263][ T9333] veth0_macvtap: entered promiscuous mode [ 143.366902][ T9333] veth1_macvtap: entered promiscuous mode [ 143.413507][ T9333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.441940][ T9333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.461867][ T9333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.480311][ T9333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.506866][ T9333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.539049][ T9333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.568643][ T9333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.587613][ T9597] netlink: 'syz.0.965': attribute type 11 has an invalid length. [ 143.612932][ T9333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.645852][ T9604] delete_channel: no stack [ 143.655058][ T9333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.665591][ T5164] Bluetooth: hci1: command tx timeout [ 143.687253][ T9333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.698289][ T9333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.708417][ T9333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.719217][ T9333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.730719][ T9333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.780322][ T9333] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.798924][ T9333] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.807922][ T9333] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.817014][ T9333] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.851066][ T9614] delete_channel: no stack [ 143.874079][ T9609] lo speed is unknown, defaulting to 1000 [ 143.980939][ T9609] xfrm0 speed is unknown, defaulting to 1000 [ 144.040867][ T744] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.061924][ T744] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.121740][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.135112][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.023908][ T9678] netlink: 'syz.1.988': attribute type 1 has an invalid length. [ 145.280281][ T9692] netlink: 'syz.4.992': attribute type 4 has an invalid length. [ 145.291768][ T744] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.167846][ T744] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.213197][ T9708] dvmrp1: entered allmulticast mode [ 146.233763][ T9702] __nla_validate_parse: 6 callbacks suppressed [ 146.233785][ T9702] netlink: 160 bytes leftover after parsing attributes in process `syz.4.996'. [ 146.338824][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 146.349077][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 146.358771][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 146.374658][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 146.382424][ T5849] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 146.389958][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 146.457271][ T744] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.575257][ T9727] netlink: 'syz.4.1002': attribute type 11 has an invalid length. [ 146.590504][ T9727] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1002'. [ 146.601234][ T744] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.629007][ T9712] lo speed is unknown, defaulting to 1000 [ 146.644114][ T9712] xfrm0 speed is unknown, defaulting to 1000 [ 146.763240][ T9735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1004'. [ 146.783151][ T9736] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1005'. [ 146.794900][ T9736] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1005'. [ 146.898419][ T9739] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1006'. [ 146.961490][ T9741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1007'. [ 146.976416][ T744] bridge_slave_1: left allmulticast mode [ 146.993309][ T744] bridge_slave_1: left promiscuous mode [ 146.999459][ T744] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.012717][ T744] bridge_slave_0: left allmulticast mode [ 147.022460][ T744] bridge_slave_0: left promiscuous mode [ 147.051328][ T744] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.370364][ T744] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.381209][ T744] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.391859][ T744] bond0 (unregistering): Released all slaves [ 147.685835][ T9772] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1011'. [ 147.687400][ T9763] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1013'. [ 147.718414][ T9712] chnl_net:caif_netlink_parms(): no params data found [ 147.783668][ T9776] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1015'. [ 147.958184][ T744] hsr_slave_0: left promiscuous mode [ 147.970627][ T744] hsr_slave_1: left promiscuous mode [ 147.979387][ T744] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.993768][ T744] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.004274][ T744] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.019413][ T744] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.045812][ T744] veth1_macvtap: left promiscuous mode [ 148.051532][ T744] veth0_macvtap: left promiscuous mode [ 148.057402][ T744] veth1_vlan: left promiscuous mode [ 148.062854][ T744] veth0_vlan: left promiscuous mode [ 148.476329][ T5164] Bluetooth: hci1: command tx timeout [ 148.534696][ T744] team0 (unregistering): Port device team_slave_1 removed [ 148.576349][ T744] team0 (unregistering): Port device team_slave_0 removed [ 148.981052][ T9712] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.988376][ T9712] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.998911][ T9712] bridge_slave_0: entered allmulticast mode [ 149.006015][ T9712] bridge_slave_0: entered promiscuous mode [ 149.049377][ T9807] batadv_slave_1: default FDB implementation only supports local addresses [ 149.059721][ T9712] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.072771][ T9712] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.080492][ T9712] bridge_slave_1: entered allmulticast mode [ 149.087663][ T9712] bridge_slave_1: entered promiscuous mode [ 149.252894][ T9712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.281469][ T9712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.372310][ T9712] team0: Port device team_slave_0 added [ 149.420372][ T9712] team0: Port device team_slave_1 added [ 149.493134][ T9712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.532577][ T9712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.569895][ T9712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.594618][ T9712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.604856][ T9712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.674808][ T9712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.711571][ T9830] 0·: renamed from hsr0 [ 149.720043][ T9830] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 149.759502][ T9830] 0·: entered promiscuous mode [ 149.782102][ T9830] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 149.876686][ T9712] hsr_slave_0: entered promiscuous mode [ 149.903762][ T9712] hsr_slave_1: entered promiscuous mode [ 150.114599][ T9712] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 150.123557][ T9712] Cannot create hsr debugfs directory [ 150.262918][ T9865] netlink: 'syz.4.1041': attribute type 1 has an invalid length. [ 150.300424][ T9865] 8021q: adding VLAN 0 to HW filter on device bond3 [ 150.336851][ T9865] bond3: (slave veth3): Enslaving as an active interface with a down link [ 150.356830][ T9865] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 150.366005][ T9865] bond3: (slave batadv1): making interface the new active one [ 150.375223][ T9865] batadv1: entered promiscuous mode [ 150.380952][ T9865] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 150.545956][ T5164] Bluetooth: hci1: command tx timeout [ 150.774279][ T9892] netlink: 'syz.0.1047': attribute type 11 has an invalid length. [ 150.942561][ T9904] netlink: 'syz.0.1051': attribute type 9 has an invalid length. [ 151.048770][ T9910] 8021q: adding VLAN 0 to HW filter on device bond1 [ 151.157493][ T9712] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 151.213139][ T9712] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 151.238789][ T9712] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 151.292388][ T9712] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 151.298214][ T9928] __nla_validate_parse: 5 callbacks suppressed [ 151.298233][ T9928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1057'. [ 151.325828][ T9928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1057'. [ 151.358227][ T9928] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 151.506538][ T9712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.548245][ T9712] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.565745][ T6079] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.572901][ T6079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.604069][ T6079] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.611266][ T6079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.823178][ T9962] xt_hashlimit: invalid rate [ 152.052673][ T9712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.117722][ T9975] xt_TPROXY: Can be used only with -p tcp or -p udp [ 152.140151][ T9712] veth0_vlan: entered promiscuous mode [ 152.173514][ T9712] veth1_vlan: entered promiscuous mode [ 152.256543][ T9712] veth0_macvtap: entered promiscuous mode [ 152.286261][ T9712] veth1_macvtap: entered promiscuous mode [ 152.313512][ T9712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.341326][ T9712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.357124][ T9712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.368530][ T9988] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1071'. [ 152.373599][ T9712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.387930][ T9712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.399009][ T9712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.410636][ T9712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.420238][ T9712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.431013][ T9712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.441067][ T9712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.451661][ T9712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.461881][ T9712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.472769][ T9712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.483868][ T9712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.514393][ T9712] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.523839][ T9712] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.532843][ T9712] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.542006][ T9712] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.632284][ T5164] Bluetooth: hci1: command tx timeout [ 152.717247][ T6079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.725512][ T6079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.755127][T10008] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1075'. [ 152.774226][ T744] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.789105][ T744] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.034231][T10014] ipip0: entered promiscuous mode [ 153.059814][T10022] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 153.247948][T10038] xt_CT: You must specify a L4 protocol and not use inversions on it [ 153.254478][T10036] pim6reg1: entered promiscuous mode [ 153.263852][T10036] pim6reg1: entered allmulticast mode [ 153.573983][T10057] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1091'. [ 153.607148][T10057] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1091'. [ 153.957280][T10083] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1097'. [ 154.136251][T10091] syz.3.1100[10091] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 154.207374][ T744] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.021785][T10104] ieee802154 phy0 wpan0: encryption failed: -22 [ 155.163100][T10113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1107'. [ 155.287982][ T744] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.432486][ T744] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.507515][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 155.517413][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 155.526452][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 155.540480][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 155.550470][ T5849] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 155.551127][ T744] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.563791][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 155.642877][T10128] lo speed is unknown, defaulting to 1000 [ 155.650767][T10128] xfrm0 speed is unknown, defaulting to 1000 [ 155.681412][T10141] ieee802154 phy0 wpan0: encryption failed: -22 [ 155.752174][T10146] ieee802154 phy0 wpan0: encryption failed: -22 [ 155.784879][ T744] bridge_slave_1: left allmulticast mode [ 155.790700][ T744] bridge_slave_1: left promiscuous mode [ 155.799131][ T744] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.823929][ T744] bridge_slave_0: left allmulticast mode [ 155.839680][ T744] bridge_slave_0: left promiscuous mode [ 155.862877][ T744] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.073776][T10160] netlink: 'syz.0.1119': attribute type 10 has an invalid length. [ 156.131945][T10163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1119'. [ 156.303556][ T744] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.314782][ T744] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.325403][ T744] bond0 (unregistering): Released all slaves [ 156.341999][T10154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1120'. [ 156.363441][T10160] geneve0: entered promiscuous mode [ 156.388178][T10160] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 156.440400][T10164] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.480767][T10165] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.487984][T10165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.680757][T10182] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1125'. [ 156.840300][T10194] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1128'. [ 156.873433][T10198] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1130'. [ 157.098587][ T744] hsr_slave_0: left promiscuous mode [ 157.104642][ T744] hsr_slave_1: left promiscuous mode [ 157.127415][ T744] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.144922][ T744] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.158808][ T744] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.173610][ T744] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.213600][ T744] veth1_macvtap: left promiscuous mode [ 157.227140][ T744] veth0_macvtap: left promiscuous mode [ 157.232781][ T744] veth1_vlan: left promiscuous mode [ 157.249374][ T744] veth0_vlan: left promiscuous mode [ 157.665036][ T5849] Bluetooth: hci1: command tx timeout [ 157.742063][ T744] team0 (unregistering): Port device team_slave_1 removed [ 157.788560][ T744] team0 (unregistering): Port device team_slave_0 removed [ 157.849785][T10235] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1138'. [ 157.868123][T10235] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1138'. [ 158.174036][T10212] IPv6: sit2: Disabled Multicast RS [ 158.309832][T10128] chnl_net:caif_netlink_parms(): no params data found [ 158.321964][T10241] netlink: 38 bytes leftover after parsing attributes in process `syz.3.1141'. [ 158.606956][T10128] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.614319][T10128] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.629542][T10128] bridge_slave_0: entered allmulticast mode [ 158.640836][T10128] bridge_slave_0: entered promiscuous mode [ 158.654387][T10128] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.661708][T10128] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.669501][T10128] bridge_slave_1: entered allmulticast mode [ 158.669982][T10260] netlink: 'syz.1.1147': attribute type 27 has an invalid length. [ 158.676571][T10128] bridge_slave_1: entered promiscuous mode [ 158.759515][T10128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.807457][T10128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.898433][T10260] netlink: 'syz.1.1147': attribute type 3 has an invalid length. [ 158.912410][T10260] netlink: 'syz.1.1147': attribute type 3 has an invalid length. [ 158.938856][T10267] dvmrp0: entered allmulticast mode [ 159.011297][T10128] team0: Port device team_slave_0 added [ 159.039672][T10128] team0: Port device team_slave_1 added [ 159.056550][T10276] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1151'. [ 159.105269][T10276] ip6gretap0: entered promiscuous mode [ 159.115601][T10276] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1151'. [ 159.125613][T10283] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1153'. [ 159.152068][T10283] siw: device registration error -23 [ 159.287941][T10128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.297740][T10128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.328280][T10128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.445755][T10128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.452751][T10128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.489897][T10128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.508869][T10304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.606141][T10128] hsr_slave_0: entered promiscuous mode [ 159.632286][T10128] hsr_slave_1: entered promiscuous mode [ 159.642597][T10128] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 159.672989][T10128] Cannot create hsr debugfs directory [ 159.746130][ T5849] Bluetooth: hci1: command tx timeout [ 159.964315][T10328] netlink: 'syz.4.1167': attribute type 2 has an invalid length. [ 160.055705][T10336] netlink: 'syz.1.1169': attribute type 6 has an invalid length. [ 160.067033][T10336] netlink: 'syz.1.1169': attribute type 5 has an invalid length. [ 160.272778][T10350] sctp: [Deprecated]: syz.3.1173 (pid 10350) Use of struct sctp_assoc_value in delayed_ack socket option. [ 160.272778][T10350] Use struct sctp_sack_info instead [ 160.398988][T10128] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 160.426006][T10128] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 160.454275][T10128] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 160.468813][T10128] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 160.485496][T10356] xt_l2tp: v2 tid > 0xffff: 150994944 [ 160.629813][T10128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.646100][T10359] can: request_module (can-proto-5) failed. [ 160.693239][T10128] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.706117][T10369] netlink: 'syz.0.1180': attribute type 1 has an invalid length. [ 160.730620][ T6079] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.737832][ T6079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.771437][ T744] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.778615][ T744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.050294][T10383] pim6reg527: entered allmulticast mode [ 161.108720][T10128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.210303][T10128] veth0_vlan: entered promiscuous mode [ 161.237705][T10128] veth1_vlan: entered promiscuous mode [ 161.298406][T10128] veth0_macvtap: entered promiscuous mode [ 161.338489][T10128] veth1_macvtap: entered promiscuous mode [ 161.398454][T10128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.440470][T10128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.456828][T10128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.467937][T10128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.478337][T10128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.489199][T10128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.501996][T10128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.527603][T10128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.548374][T10128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.564702][T10128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.583097][T10128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.593464][T10128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.604042][T10128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.617697][T10128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.632151][T10411] bond0: option resend_igmp: invalid value (7540) [ 161.638915][T10411] bond0: option resend_igmp: allowed values 0 - 255 [ 161.648659][T10414] __nla_validate_parse: 12 callbacks suppressed [ 161.648678][T10414] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1191'. [ 161.650816][T10128] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.680760][T10128] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.690252][T10128] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.699503][T10128] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.766004][ T11] batadv1: left promiscuous mode [ 161.796918][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.817712][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.826873][ T5849] Bluetooth: hci1: command tx timeout [ 161.849521][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.864529][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.970853][T10424] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 162.031310][T10425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1195'. [ 162.103880][T10427] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1197'. [ 162.358666][T10444] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1201'. [ 162.456448][T10449] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1202'. [ 162.467675][T10449] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1202'. [ 162.593341][T10454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1204'. [ 162.617379][T10456] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1205'. [ 163.452732][T10483] netlink: 'syz.1.1214': attribute type 1 has an invalid length. [ 163.466590][T10485] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1215'. [ 163.480027][T10485] ebt_among: dst integrity fail: 101 [ 163.488227][T10483] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1214'. [ 163.746020][T10501] netlink: 'syz.1.1218': attribute type 33 has an invalid length. [ 163.807582][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.830046][T10511] DRBG: could not allocate digest TFM handle: hmac(sha384) [ 164.877851][T10523] netlink: 'syz.3.1223': attribute type 10 has an invalid length. [ 164.914984][T10523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.940210][T10523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.976295][T10523] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 165.067568][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.107603][ T5164] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 165.124677][ T5164] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 165.137177][ T5164] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 165.155256][ T5164] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 165.163927][ T5164] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 165.171336][ T5164] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 165.252855][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.280620][T10541] netlink: 'syz.3.1227': attribute type 10 has an invalid length. [ 165.292874][T10541] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.302671][T10541] bond0: (slave team0): Enslaving as an active interface with an up link [ 165.353489][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.386123][T10532] lo speed is unknown, defaulting to 1000 [ 165.393824][T10532] xfrm0 speed is unknown, defaulting to 1000 [ 165.553153][T10532] chnl_net:caif_netlink_parms(): no params data found [ 165.562814][ T11] bridge_slave_1: left allmulticast mode [ 165.572933][ T11] bridge_slave_1: left promiscuous mode [ 165.578814][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.587960][ T11] bridge_slave_0: left allmulticast mode [ 165.593626][ T11] bridge_slave_0: left promiscuous mode [ 165.599596][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.892061][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.902879][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.913398][ T11] bond0 (unregistering): Released all slaves [ 166.019594][T10532] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.027373][T10532] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.034643][T10532] bridge_slave_0: entered allmulticast mode [ 166.042051][T10532] bridge_slave_0: entered promiscuous mode [ 166.090986][T10532] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.099604][T10532] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.120395][T10532] bridge_slave_1: entered allmulticast mode [ 166.135597][T10532] bridge_slave_1: entered promiscuous mode [ 166.218885][T10532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.231607][T10532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.418778][T10532] team0: Port device team_slave_0 added [ 166.438434][T10532] team0: Port device team_slave_1 added [ 166.503175][ T11] hsr_slave_0: left promiscuous mode [ 166.522918][ T11] hsr_slave_1: left promiscuous mode [ 166.555265][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.562736][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.579802][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.592811][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.600506][T10582] netlink: 'syz.3.1237': attribute type 8 has an invalid length. [ 166.621505][ T11] veth1_macvtap: left promiscuous mode [ 166.627808][ T11] veth0_macvtap: left promiscuous mode [ 166.634547][ T11] veth1_vlan: left promiscuous mode [ 166.643778][ T11] veth0_vlan: left promiscuous mode [ 167.044297][ T11] team0 (unregistering): Port device team_slave_1 removed [ 167.089331][ T11] team0 (unregistering): Port device team_slave_0 removed [ 167.266506][ T5849] Bluetooth: hci1: command tx timeout [ 167.583982][T10532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.595910][T10532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.626553][T10532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.662421][T10595] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 167.725488][T10532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.732533][T10532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.810555][T10532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.906733][T10532] hsr_slave_0: entered promiscuous mode [ 167.918795][T10532] hsr_slave_1: entered promiscuous mode [ 167.940467][T10532] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 167.948373][T10532] Cannot create hsr debugfs directory [ 168.194602][T10615] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 168.215978][T10615] netlink: 'syz.3.1248': attribute type 2 has an invalid length. [ 168.359869][T10619] netlink: 'syz.3.1250': attribute type 27 has an invalid length. [ 168.532299][T10532] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 168.552302][T10532] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 168.569840][T10532] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 168.587547][T10532] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 168.587576][T10628] netlink: 'syz.1.1253': attribute type 1 has an invalid length. [ 168.751960][T10633] __nla_validate_parse: 1 callbacks suppressed [ 168.751982][T10633] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.1255'. [ 168.846849][T10532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.870303][T10532] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.926010][T10646] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1258'. [ 169.000605][ T6076] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.007785][ T6076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.164712][ T6076] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.172032][ T6076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.344902][ T5849] Bluetooth: hci1: command tx timeout [ 169.416710][T10687] ip6tnl0: entered promiscuous mode [ 169.535697][T10686] ip6tnl0: left promiscuous mode [ 169.611150][T10703] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1265'. [ 169.623461][T10703] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1265'. [ 169.669115][T10709] nft_compat: unsupported protocol 5 [ 169.676614][T10703] erspan0: entered promiscuous mode [ 169.722353][T10714] x_tables: duplicate underflow at hook 3 [ 169.730361][T10703] batadv_slave_1: entered promiscuous mode [ 169.742234][T10716] nft_compat: unsupported protocol 5 [ 169.769639][T10719] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1266'. [ 169.779918][T10703] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.790728][T10703] Cannot create hsr debugfs directory [ 169.800977][T10703] hsr0: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 169.819132][T10703] hsr0: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 169.906011][T10532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.980441][T10532] veth0_vlan: entered promiscuous mode [ 170.012598][T10532] veth1_vlan: entered promiscuous mode [ 170.069661][T10532] veth0_macvtap: entered promiscuous mode [ 170.100418][T10532] veth1_macvtap: entered promiscuous mode [ 170.151373][T10532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.163033][T10532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.173108][T10532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.184160][T10532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.200211][T10532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.218996][T10532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.234882][T10532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.254295][T10532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.272228][T10532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.293884][T10532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.307876][T10532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.315306][T10738] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 170.319130][T10532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.342448][T10740] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1274'. [ 170.370056][T10532] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.392076][T10532] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.410820][T10532] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.421079][T10532] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.460530][T10744] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1275'. [ 170.485073][T10744] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1275'. [ 170.498463][T10745] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1275'. [ 170.508366][T10745] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1275'. [ 170.544260][T10744] netlink: 'syz.1.1275': attribute type 3 has an invalid length. [ 170.556589][T10676] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.566540][T10676] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.601980][T10676] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.626856][T10676] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.934322][T10763] dvmrp0: left allmulticast mode [ 171.278538][T10792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.296783][T10792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.313462][T10792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.326491][T10792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.341129][T10792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.360240][T10792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.433709][ T5164] Bluetooth: hci1: command tx timeout [ 171.519774][T10803] netlink: 'syz.4.1296': attribute type 10 has an invalid length. [ 171.762637][T10821] netlink: 'syz.1.1303': attribute type 12 has an invalid length. [ 171.802140][T10823] netlink: 'syz.4.1304': attribute type 10 has an invalid length. [ 171.820281][T10823] netlink: 'syz.4.1304': attribute type 2 has an invalid length. [ 171.828517][T10823] netlink: 'syz.4.1304': attribute type 8 has an invalid length. [ 172.827048][T10898] netlink: 'syz.3.1328': attribute type 7 has an invalid length. [ 172.836560][T10898] netlink: 'syz.3.1328': attribute type 8 has an invalid length. [ 172.973637][T10905] IPVS: set_ctl: invalid protocol: 59 10.1.1.2:20004 [ 173.001784][T10910] netlink: 'syz.3.1330': attribute type 7 has an invalid length. [ 174.126931][T10967] __nla_validate_parse: 18 callbacks suppressed [ 174.126951][T10967] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1346'. [ 174.192502][T10969] xt_TCPMSS: Only works on TCP SYN packets [ 174.198717][T10970] xt_TCPMSS: Only works on TCP SYN packets [ 174.413592][T10979] x_tables: duplicate underflow at hook 1 [ 174.993037][T11014] syz.1.1360[11014] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 174.993107][T11014] syz.1.1360[11014] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 175.006833][T11014] syz.1.1360[11014] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 175.167327][T11019] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1362'. [ 175.289826][T11025] IPVS: length: 157 != 24 [ 175.326627][T11027] bond4: entered promiscuous mode [ 175.401037][T11030] validate_nla: 1 callbacks suppressed [ 175.401058][T11030] netlink: 'syz.3.1366': attribute type 21 has an invalid length. [ 175.436100][T11030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1366'. [ 175.547146][T11041] ebt_limit: overflow, try lower: 570423552/2483027968 [ 175.566145][T11044] netlink: 'syz.3.1370': attribute type 8 has an invalid length. [ 175.767604][T11056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1372'. [ 175.783032][T11056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1372'. [ 176.589445][T11078] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1378'. [ 176.614474][T11078] xt_limit: Overflow, try lower: 0/0 [ 176.756273][T11088] tipc: Started in network mode [ 176.785229][T11088] tipc: Node identity ac14140f, cluster identity 4711 [ 176.799335][T11088] tipc: New replicast peer: 255.255.255.255 [ 176.815359][T11088] tipc: Enabled bearer , priority 10 [ 176.834613][T11090] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1382'. [ 177.256770][T11110] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1387'. [ 177.712632][T11143] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 177.825416][ T5897] tipc: Node number set to 2886997007 [ 177.878141][T11158] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1402'. [ 178.119738][T11173] netlink: 'syz.4.1405': attribute type 21 has an invalid length. [ 178.350519][T11178] ip6t_srh: unknown srh match flags 536B [ 178.474018][T11178] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.484890][T11178] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.500191][T11178] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 178.513658][T11178] bond0 (unregistering): Released all slaves [ 178.594171][T11181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1409'. [ 178.671810][T11186] netlink: 'syz.1.1411': attribute type 1 has an invalid length. [ 178.731255][T11186] bond4: entered promiscuous mode [ 178.739467][T11186] 8021q: adding VLAN 0 to HW filter on device bond4 [ 179.193830][T11216] xt_CT: You must specify a L4 protocol and not use inversions on it [ 180.065013][ T5164] Bluetooth: hci4: command tx timeout [ 180.219466][T11234] __nla_validate_parse: 5 callbacks suppressed [ 180.219486][T11234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1426'. [ 180.241159][T11241] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1428'. [ 180.491086][T11255] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 180.720592][T11266] tipc: Enabling of bearer rejected, failed to enable media [ 180.730598][T11266] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1439'. [ 180.906133][T11270] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1441'. [ 181.280659][T11292] x_tables: arp_tables: MARK.2 target: invalid size 8 (kernel) != (user) 0 [ 181.300828][T11292] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1448'. [ 181.313428][T11292] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1448'. [ 181.353110][T11295] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1448'. [ 181.362795][T11295] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1448'. [ 181.431777][T11294] bridge_slave_0: left allmulticast mode [ 181.442375][T11294] bridge_slave_0: left promiscuous mode [ 181.448574][T11294] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.493651][T11294] bridge_slave_1: left allmulticast mode [ 181.501981][T11294] bridge_slave_1: left promiscuous mode [ 181.513202][T11294] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.560524][T11294] bond0: (slave bond_slave_0): Releasing backup interface [ 181.615316][T11294] bond0: (slave bond_slave_1): Releasing backup interface [ 181.665275][T11294] team0: Port device team_slave_0 removed [ 181.705062][T11294] team0: Port device team_slave_1 removed [ 181.721558][T11294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.735001][T11294] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.759275][T11294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.775910][T11294] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.797057][T11294] bond3: (slave veth3): Releasing active interface [ 181.803773][T11294] bond3: (slave veth3): the permanent HWaddr of slave - b2:f1:dc:06:a9:aa - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 181.830576][T11294] batadv1: entered promiscuous mode [ 181.839428][T11317] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1456'. [ 181.857672][T11294] bond3: (slave batadv1): Releasing active interface [ 181.864640][T11294] batadv1: left promiscuous mode [ 181.871090][T11317] netlink: 'syz.1.1456': attribute type 39 has an invalid length. [ 181.918700][T11316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1455'. [ 182.262494][T11337] vlan2: entered allmulticast mode [ 182.268984][T11337] gretap0: entered allmulticast mode [ 182.445901][T11351] netlink: 'syz.4.1467': attribute type 10 has an invalid length. [ 182.750358][T11367] netlink: 'syz.1.1473': attribute type 10 has an invalid length. [ 182.761554][T11367] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 182.872530][T11370] bridge_slave_1: left allmulticast mode [ 182.878394][T11370] bridge_slave_1: left promiscuous mode [ 182.884152][T11370] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.892885][T11370] bridge_slave_0: left allmulticast mode [ 182.898734][T11370] bridge_slave_0: left promiscuous mode [ 182.904496][T11370] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.219854][T11425] netlink: 'syz.3.1490': attribute type 13 has an invalid length. [ 184.579642][T11451] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 184.613621][T11451] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 185.073184][T11481] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 185.155814][T11486] x_tables: duplicate underflow at hook 3 [ 185.162552][T11486] IPVS: set_ctl: invalid protocol: 41 172.20.20.170:20003 [ 185.260760][T11490] __nla_validate_parse: 17 callbacks suppressed [ 185.260782][T11490] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1512'. [ 185.447151][T11499] netlink: 'syz.1.1515': attribute type 21 has an invalid length. [ 185.468974][T11499] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1515'. [ 185.618375][T11517] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1517'. [ 185.919388][T11531] netlink: 'syz.0.1523': attribute type 3 has an invalid length. [ 186.309147][ T5164] Bluetooth: hci2: command 0x0406 tx timeout [ 186.309161][ T5859] Bluetooth: hci3: command 0x0406 tx timeout [ 186.393799][T11550] veth0: entered promiscuous mode [ 186.402259][T11549] veth0: left promiscuous mode [ 186.550632][T11564] netlink: 'syz.0.1533': attribute type 10 has an invalid length. [ 186.651688][T11566] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1534'. [ 186.721776][T11572] vlan2: entered allmulticast mode [ 186.733670][T11572] bond0: entered allmulticast mode [ 186.742199][T11572] bond0: left allmulticast mode [ 186.801112][T11580] netlink: 'syz.4.1537': attribute type 4 has an invalid length. [ 186.824828][T11580] netlink: 'syz.4.1537': attribute type 1 has an invalid length. [ 186.854425][T11580] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 187.230820][T11605] netlink: 'syz.4.1549': attribute type 21 has an invalid length. [ 187.239126][T11605] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1549'. [ 187.251883][T11605] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1549'. [ 187.271640][T11605] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1549'. [ 187.275941][T11608] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1547'. [ 187.391836][T11613] netlink: 'syz.3.1551': attribute type 1 has an invalid length. [ 187.415914][T11613] 8021q: adding VLAN 0 to HW filter on device bond4 [ 187.833605][T11639] syzkaller1: entered promiscuous mode [ 187.850130][T11639] syzkaller1: entered allmulticast mode [ 187.965561][T11647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1561'. [ 188.138929][T11650] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1562'. [ 188.455371][T11670] xt_cgroup: invalid path, errno=-2 [ 188.767880][T11694] delete_channel: no stack [ 188.865006][ T5852] Bluetooth: hci0: command tx timeout [ 189.266421][T11721] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 60 [ 189.448982][T11727] raw_sendmsg: syz.3.1589 forgot to set AF_INET. Fix it! [ 189.603880][T11736] netlink: 'syz.4.1591': attribute type 10 has an invalid length. [ 189.814226][T11746] netlink: 'syz.4.1595': attribute type 10 has an invalid length. [ 190.005220][T11757] netlink: 'syz.3.1599': attribute type 8 has an invalid length. [ 190.216826][T11778] sctp: [Deprecated]: syz.0.1604 (pid 11778) Use of int in max_burst socket option. [ 190.216826][T11778] Use struct sctp_assoc_value instead [ 190.225541][T11780] mac80211_hwsim hwsim10 ÿ: renamed from wlan1 (while UP) [ 190.468558][T11797] dvmrp0: entered allmulticast mode [ 190.685009][ T7267] IPVS: starting estimator thread 0... [ 190.720838][T11811] __nla_validate_parse: 12 callbacks suppressed [ 190.720853][T11811] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1613'. [ 190.785551][T11809] IPVS: using max 23 ests per chain, 55200 per kthread [ 190.895055][T11817] rdma_rxe: rxe_newlink: failed to add lo [ 191.137738][T11832] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 191.282729][T11839] bond5: entered promiscuous mode [ 191.290296][T11839] bond5: entered allmulticast mode [ 191.298991][T11839] 8021q: adding VLAN 0 to HW filter on device bond5 [ 191.493855][T11853] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1628'. [ 191.522638][T11855] netlink: 'syz.4.1628': attribute type 2 has an invalid length. [ 191.527589][T11846] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 191.535527][T11855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1628'. [ 191.575871][T11857] netlink: 'syz.3.1629': attribute type 2 has an invalid length. [ 191.858110][T11875] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1634'. [ 191.896897][T11879] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1635'. [ 191.916018][T11879] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1635'. [ 191.984323][T11881] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1637'. [ 192.166512][T11889] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1640'. [ 192.254088][T11896] syz.4.1642[11896] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 192.504712][T11907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1646'. [ 192.575325][T11910] netlink: 'syz.4.1647': attribute type 4 has an invalid length. [ 192.604104][T11912] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1648'. [ 192.741109][T11918] netlink: 'syz.1.1652': attribute type 4 has an invalid length. [ 192.812666][T11918] team0 (unregistering): Port device team_slave_0 removed [ 192.830619][T11918] team0 (unregistering): Port device team_slave_1 removed [ 192.872978][T11921] netlink: 'syz.4.1649': attribute type 2 has an invalid length. [ 193.143235][T11945] netlink: 'syz.4.1658': attribute type 10 has an invalid length. [ 193.169845][T11950] netlink: 'syz.4.1658': attribute type 10 has an invalid length. [ 193.666455][T11983] xt_TPROXY: Can be used only with -p tcp or -p udp [ 194.112178][T12010] netlink: 'syz.4.1676': attribute type 1 has an invalid length. [ 194.206816][T12015] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 194.243413][T12016] IPv6: NLM_F_CREATE should be specified when creating new route [ 194.469624][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.665662][T12045] netlink: 'syz.0.1689': attribute type 1 has an invalid length. [ 194.729749][T12045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.743625][T12048] bond0: (slave ip6gretap1): making interface the new active one [ 194.752568][T12048] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 194.764461][T12048] netlink: 'syz.0.1689': attribute type 1 has an invalid length. [ 195.259423][T12067] sctp: [Deprecated]: syz.1.1693 (pid 12067) Use of struct sctp_assoc_value in delayed_ack socket option. [ 195.259423][T12067] Use struct sctp_sack_info instead [ 195.553911][T12082] veth0_to_team: entered promiscuous mode [ 195.584663][T12082] veth0_to_team: entered allmulticast mode [ 195.743847][T12104] netlink: 'syz.4.1707': attribute type 1 has an invalid length. [ 195.822912][T12104] 8021q: adding VLAN 0 to HW filter on device bond6 [ 195.849162][T12097] netem: unknown loss type 0 [ 195.854291][T12097] netem: change failed [ 195.870928][T12104] __nla_validate_parse: 7 callbacks suppressed [ 195.870947][T12104] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1707'. [ 195.892585][T12106] bond6: (slave veth7): Enslaving as an active interface with a down link [ 196.138449][T12128] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1715'. [ 196.147996][T12128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1715'. [ 196.295583][T12132] xfrm1: entered allmulticast mode [ 196.588714][T12147] netlink: 'syz.0.1720': attribute type 4 has an invalid length. [ 196.808324][T12159] nbd: must specify a size in bytes for the device [ 196.926827][T12167] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1729'. [ 197.117412][T12180] tipc: Enabling of bearer rejected, already enabled [ 197.220483][T12186] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1737'. [ 197.273314][T12190] bridge_slave_0: default FDB implementation only supports local addresses [ 197.382962][T12194] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1739'. [ 197.719331][T12212] IPVS: length: 157 != 24 [ 197.729530][T12212] validate_nla: 3 callbacks suppressed [ 197.729550][T12212] netlink: 'syz.1.1743': attribute type 10 has an invalid length. [ 197.745827][T12212] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 197.867430][T12217] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1744'. [ 197.885676][T12217] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1744'. [ 198.395514][T12228] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1748'. [ 198.555325][T12239] netlink: 'syz.3.1751': attribute type 24 has an invalid length. [ 198.565167][T12239] netlink: 'syz.3.1751': attribute type 24 has an invalid length. [ 198.611152][ T5859] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 198.620238][ T5859] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 198.630209][ T5859] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 198.642846][ T5859] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 198.654993][ T5859] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 198.665082][ T5859] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 198.697261][T12244] lo speed is unknown, defaulting to 1000 [ 198.703943][T12244] xfrm0 speed is unknown, defaulting to 1000 [ 198.883113][T12262] netlink: 'syz.4.1755': attribute type 3 has an invalid length. [ 198.962467][T12244] chnl_net:caif_netlink_parms(): no params data found [ 199.049475][T12270] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1757'. [ 199.086187][T12244] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.099932][T12244] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.107574][T12244] bridge_slave_0: entered allmulticast mode [ 199.114580][T12244] bridge_slave_0: entered promiscuous mode [ 199.145612][T12244] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.152843][T12244] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.160506][T12244] bridge_slave_1: entered allmulticast mode [ 199.173863][T12276] xt_CT: You must specify a L4 protocol and not use inversions on it [ 199.176148][T12244] bridge_slave_1: entered promiscuous mode [ 199.209327][T12277] xt_CT: You must specify a L4 protocol and not use inversions on it [ 199.232048][T12279] nbd: must specify at least one socket [ 199.241488][T12244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.254156][T12244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.263840][T12279] netlink: 'syz.4.1760': attribute type 1 has an invalid length. [ 199.272304][ T5862] Bluetooth: hci4: command 0x0405 tx timeout [ 199.402273][T12244] team0: Port device team_slave_0 added [ 199.411835][T12244] team0: Port device team_slave_1 added [ 199.442838][T12244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.457649][T12244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.496536][T12244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.512352][T12288] netlink: 'syz.0.1764': attribute type 5 has an invalid length. [ 199.522113][T12244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.529208][T12244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.565460][T12244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.666015][ C0] ------------[ cut here ]------------ [ 199.671930][ C0] WARNING: CPU: 0 PID: 12294 at net/ipv4/route.c:1254 ip_rt_bug+0x2c/0x110 [ 199.680645][ C0] Modules linked in: [ 199.684588][ C0] CPU: 0 UID: 0 PID: 12294 Comm: syz.0.1764 Not tainted 6.12.0-syzkaller-05491-g5d066766c5f1 #0 [ 199.695156][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 199.705299][ C0] RIP: 0010:ip_rt_bug+0x2c/0x110 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 199.710297][ C0] Code: 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 6b 9d 63 f7 66 90 e8 64 9d 63 f7 31 ff 48 89 de ba 02 00 00 00 e8 e5 3e 6a ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc f3 0f 1e [ 199.730002][ C0] RSP: 0018:ffffc90000007680 EFLAGS: 00010286 [ 199.736154][ C0] RAX: 6fd6d4530de9a100 RBX: ffff88806375ea00 RCX: ffffffff8171048a [ 199.744173][ C0] RDX: dffffc0000000000 RSI: ffffffff8c2ad300 RDI: ffffffff8c820860 [ 199.752224][ C0] RBP: 0000000000000001 R08: ffffffff9454692f R09: ffffffff8a31658b [ 199.760273][ C0] R10: dffffc0000000000 R11: fffffbfff28a8d26 R12: dffffc0000000000 [ 199.768316][ C0] R13: ffffc900000078f8 R14: ffff88805f320000 R15: ffff888145ab1b00 [ 199.776352][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 199.785351][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 199.791964][ C0] CR2: 000000110c39ccec CR3: 000000005a4b2000 CR4: 00000000003526f0 [ 199.800012][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 199.808044][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 199.816085][ C0] Call Trace: [ 199.819383][ C0] [ 199.822242][ C0] ? __warn+0x168/0x4e0 [ 199.826466][ C0] ? ip_rt_bug+0x2c/0x110 [ 199.830852][ C0] ? report_bug+0x2b3/0x500 [ 199.835438][ C0] ? ip_rt_bug+0x2c/0x110 [ 199.839904][ C0] ? handle_bug+0x60/0x90 [ 199.844265][ C0] ? exc_invalid_op+0x1a/0x50 [ 199.849046][ C0] ? asm_exc_invalid_op+0x1a/0x20 [ 199.854107][ C0] ? ip_rt_bug+0x2b/0x110 [ 199.858529][ C0] ? mark_lock+0x9a/0x360 [ 199.862977][ C0] ? ip_rt_bug+0x2c/0x110 [ 199.867390][ C0] ip_push_pending_frames+0xbf/0x150 [ 199.872707][ C0] __icmp_send+0x1013/0x15c0 [ 199.877377][ C0] ? __icmp_send+0x5cb/0x15c0 [ 199.882081][ C0] ? __pfx___icmp_send+0x10/0x10 [ 199.887101][ C0] ? mark_lock+0x9a/0x360 [ 199.891456][ C0] ? look_up_lock_class+0x77/0x170 [ 199.896681][ C0] ipv4_link_failure+0x62f/0xa10 [ 199.901674][ C0] ? __pfx_ipv4_link_failure+0x10/0x10 [ 199.907215][ C0] ? do_raw_write_lock+0x148/0x4f0 [ 199.912357][ C0] ? __pfx_ipv4_link_failure+0x10/0x10 [ 199.917895][ C0] arp_error_report+0x114/0x160 [ 199.922788][ C0] neigh_invalidate+0x247/0x470 [ 199.927732][ C0] neigh_timer_handler+0x8a5/0xfe0 [ 199.932889][ C0] call_timer_fn+0x18e/0x650 [ 199.937549][ C0] ? call_timer_fn+0xc0/0x650 [ 199.942253][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 199.947959][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 199.953103][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 199.958806][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 199.964464][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 199.970158][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 199.975425][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 199.980654][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 199.986361][ C0] __run_timer_base+0x66a/0x8e0 [ 199.991271][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 199.996728][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 200.003094][ C0] run_timer_softirq+0xb7/0x170 [ 200.008018][ C0] handle_softirqs+0x2c5/0x980 [ 200.012822][ C0] ? __irq_exit_rcu+0xf7/0x220 [ 200.017670][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 200.023006][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 200.028288][ C0] __irq_exit_rcu+0xf7/0x220 [ 200.032929][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 200.038201][ C0] irq_exit_rcu+0x9/0x30 [ 200.042476][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 200.048190][ C0] [ 200.051140][ C0] [ 200.054177][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 200.060221][ C0] RIP: 0010:stack_trace_consume_entry+0x0/0x280 [ 200.066529][ C0] Code: f2 7e 00 e9 6a ff ff ff e8 6d 10 59 0a 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 83 ec 18 48 89 fb 48 [ 200.086292][ C0] RSP: 0018:ffffc9000d4e7018 EFLAGS: 00000282 [ 200.092390][ C0] RAX: ffffffff81571c67 RBX: ffffc9000d4e7020 RCX: ffffffff91a05000 [ 200.100432][ C0] RDX: ffffffff91bb4101 RSI: ffffffff81571c67 RDI: ffffc9000d4e7100 [ 200.108460][ C0] RBP: ffffc9000d4e70b0 R08: ffffc9000d4e7c20 R09: 0000000000000000 [ 200.116495][ C0] R10: ffffc9000d4e7070 R11: ffffffff8180c110 R12: ffff888025111e00 [ 200.124505][ C0] R13: ffffffff8180c110 R14: ffffc9000d4e7100 R15: 0000000000000000 [ 200.132547][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 200.138782][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 200.144997][ C0] ? do_group_exit+0x207/0x2c0 [ 200.149787][ C0] ? __init_begin+0x41000/0x41000 [ 200.154886][ C0] ? no_hash_pointers_enable+0xa1/0xe0 [ 200.160462][ C0] ? do_group_exit+0x207/0x2c0 [ 200.165301][ C0] arch_stack_walk+0x10e/0x150 [ 200.170100][ C0] ? do_group_exit+0x207/0x2c0 [ 200.174935][ C0] stack_trace_save+0x118/0x1d0 [ 200.179831][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 200.185285][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 200.191294][ C0] kasan_save_track+0x3f/0x80 [ 200.196106][ C0] ? kasan_save_track+0x3f/0x80 [ 200.200990][ C0] ? kasan_save_free_info+0x40/0x50 [ 200.206242][ C0] ? __kasan_slab_free+0x59/0x70 [ 200.211214][ C0] ? kmem_cache_free+0x1a2/0x420 [ 200.216218][ C0] ? ___pte_free_tlb+0x2b/0x140 [ 200.221088][ C0] ? free_pgd_range+0x727/0xdd0 [ 200.226009][ C0] ? free_pgtables+0x719/0x840 [ 200.230834][ C0] ? exit_mmap+0x48e/0xc40 [ 200.235318][ C0] ? __mmput+0x115/0x390 [ 200.239583][ C0] ? exit_mm+0x220/0x310 [ 200.243847][ C0] ? do_exit+0x9b2/0x28e0 [ 200.248292][ C0] kasan_save_free_info+0x40/0x50 [ 200.253343][ C0] __kasan_slab_free+0x59/0x70 [ 200.258178][ C0] ? ___pte_free_tlb+0x2b/0x140 [ 200.263058][ C0] kmem_cache_free+0x1a2/0x420 [ 200.267901][ C0] ? unlink_file_vma_batch_process+0x293/0x2f0 [ 200.274079][ C0] ? ___pte_free_tlb+0x2b/0x140 [ 200.279001][ C0] ___pte_free_tlb+0x2b/0x140 [ 200.283704][ C0] free_pgd_range+0x727/0xdd0 [ 200.288461][ C0] ? __pfx_free_pgd_range+0x10/0x10 [ 200.293687][ C0] ? unlink_file_vma_batch_process+0x293/0x2f0 [ 200.299918][ C0] free_pgtables+0x719/0x840 [ 200.304545][ C0] ? __pfx_free_pgtables+0x10/0x10 [ 200.309715][ C0] ? __pfx_down_write+0x10/0x10 [ 200.314588][ C0] ? __mas_set_range+0x133/0x3c0 [ 200.319604][ C0] exit_mmap+0x48e/0xc40 [ 200.323888][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 200.328738][ C0] ? __pfx_exit_aio+0x10/0x10 [ 200.333463][ C0] ? uprobe_clear_state+0x271/0x290 [ 200.338757][ C0] ? mm_update_next_owner+0xa4/0x810 [ 200.344101][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 200.349377][ C0] __mmput+0x115/0x390 [ 200.353476][ C0] exit_mm+0x220/0x310 [ 200.357613][ C0] ? __pfx_exit_mm+0x10/0x10 [ 200.362224][ C0] ? taskstats_exit+0x326/0xa60 [ 200.367158][ C0] do_exit+0x9b2/0x28e0 [ 200.371351][ C0] ? __pfx_do_exit+0x10/0x10 [ 200.376001][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 200.382011][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 200.388404][ C0] ? cgroup_freezing+0x2a8/0x350 [ 200.393378][ C0] do_group_exit+0x207/0x2c0 [ 200.398026][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 200.403343][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 200.408602][ C0] get_signal+0x16b2/0x1750 [ 200.413151][ C0] ? __pfx_get_signal+0x10/0x10 [ 200.418077][ C0] arch_do_signal_or_restart+0x96/0x860 [ 200.423658][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 200.429875][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 200.435922][ C0] ? syscall_exit_to_user_mode+0xa3/0x340 [ 200.441672][ C0] syscall_exit_to_user_mode+0xce/0x340 [ 200.447312][ C0] do_syscall_64+0x100/0x230 [ 200.452023][ C0] ? clear_bhb_loop+0x35/0x90 [ 200.456769][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.462696][ C0] RIP: 0033:0x7fae7157e819 [ 200.467202][ C0] Code: Unable to access opcode bytes at 0x7fae7157e7ef. [ 200.474328][ C0] RSP: 002b:00007fae6f3d50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 200.482860][ C0] RAX: fffffffffffffe00 RBX: 00007fae71736088 RCX: 00007fae7157e819 [ 200.490889][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fae71736088 [ 200.498930][ C0] RBP: 00007fae71736080 R08: 0000000000000000 R09: 0000000000000000 [ 200.507029][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fae7173608c [ 200.515054][ C0] R13: 0000000000000000 R14: 00007ffc920b52f0 R15: 00007ffc920b53d8 [ 200.523061][ C0] [ 200.526132][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 200.533412][ C0] CPU: 0 UID: 0 PID: 12294 Comm: syz.0.1764 Not tainted 6.12.0-syzkaller-05491-g5d066766c5f1 #0 [ 200.543819][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 200.553869][ C0] Call Trace: [ 200.557151][ C0] [ 200.559987][ C0] dump_stack_lvl+0x241/0x360 [ 200.564758][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 200.569955][ C0] ? __pfx__printk+0x10/0x10 [ 200.574545][ C0] ? vscnprintf+0x5d/0x90 [ 200.578877][ C0] panic+0x349/0x880 [ 200.582799][ C0] ? __warn+0x177/0x4e0 [ 200.586966][ C0] ? __pfx_panic+0x10/0x10 [ 200.591400][ C0] __warn+0x34b/0x4e0 [ 200.595376][ C0] ? ip_rt_bug+0x2c/0x110 [ 200.599705][ C0] report_bug+0x2b3/0x500 [ 200.604037][ C0] ? ip_rt_bug+0x2c/0x110 [ 200.608367][ C0] handle_bug+0x60/0x90 [ 200.612520][ C0] exc_invalid_op+0x1a/0x50 [ 200.617019][ C0] asm_exc_invalid_op+0x1a/0x20 [ 200.621867][ C0] RIP: 0010:ip_rt_bug+0x2c/0x110 [ 200.626808][ C0] Code: 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 6b 9d 63 f7 66 90 e8 64 9d 63 f7 31 ff 48 89 de ba 02 00 00 00 e8 e5 3e 6a ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc f3 0f 1e [ 200.646417][ C0] RSP: 0018:ffffc90000007680 EFLAGS: 00010286 [ 200.652486][ C0] RAX: 6fd6d4530de9a100 RBX: ffff88806375ea00 RCX: ffffffff8171048a [ 200.660454][ C0] RDX: dffffc0000000000 RSI: ffffffff8c2ad300 RDI: ffffffff8c820860 [ 200.668420][ C0] RBP: 0000000000000001 R08: ffffffff9454692f R09: ffffffff8a31658b [ 200.676389][ C0] R10: dffffc0000000000 R11: fffffbfff28a8d26 R12: dffffc0000000000 [ 200.684351][ C0] R13: ffffc900000078f8 R14: ffff88805f320000 R15: ffff888145ab1b00 [ 200.692324][ C0] ? ip_rt_bug+0x2b/0x110 [ 200.696656][ C0] ? mark_lock+0x9a/0x360 [ 200.700987][ C0] ip_push_pending_frames+0xbf/0x150 [ 200.706273][ C0] __icmp_send+0x1013/0x15c0 [ 200.710870][ C0] ? __icmp_send+0x5cb/0x15c0 [ 200.715543][ C0] ? __pfx___icmp_send+0x10/0x10 [ 200.720498][ C0] ? mark_lock+0x9a/0x360 [ 200.724819][ C0] ? look_up_lock_class+0x77/0x170 [ 200.729978][ C0] ipv4_link_failure+0x62f/0xa10 [ 200.734953][ C0] ? __pfx_ipv4_link_failure+0x10/0x10 [ 200.740451][ C0] ? do_raw_write_lock+0x148/0x4f0 [ 200.745571][ C0] ? __pfx_ipv4_link_failure+0x10/0x10 [ 200.751035][ C0] arp_error_report+0x114/0x160 [ 200.755904][ C0] neigh_invalidate+0x247/0x470 [ 200.760774][ C0] neigh_timer_handler+0x8a5/0xfe0 [ 200.765893][ C0] call_timer_fn+0x18e/0x650 [ 200.770493][ C0] ? call_timer_fn+0xc0/0x650 [ 200.775189][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 200.780823][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 200.785945][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 200.791584][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 200.797217][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 200.802849][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 200.808045][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 200.813239][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 200.818886][ C0] __run_timer_base+0x66a/0x8e0 [ 200.823747][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 200.829126][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 200.835462][ C0] run_timer_softirq+0xb7/0x170 [ 200.840324][ C0] handle_softirqs+0x2c5/0x980 [ 200.845188][ C0] ? __irq_exit_rcu+0xf7/0x220 [ 200.849951][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 200.855249][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 200.860452][ C0] __irq_exit_rcu+0xf7/0x220 [ 200.865046][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 200.870253][ C0] irq_exit_rcu+0x9/0x30 [ 200.874503][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 200.880136][ C0] [ 200.883059][ C0] [ 200.885990][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 200.891986][ C0] RIP: 0010:stack_trace_consume_entry+0x0/0x280 [ 200.898244][ C0] Code: f2 7e 00 e9 6a ff ff ff e8 6d 10 59 0a 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 83 ec 18 48 89 fb 48 [ 200.917856][ C0] RSP: 0018:ffffc9000d4e7018 EFLAGS: 00000282 [ 200.923925][ C0] RAX: ffffffff81571c67 RBX: ffffc9000d4e7020 RCX: ffffffff91a05000 [ 200.931892][ C0] RDX: ffffffff91bb4101 RSI: ffffffff81571c67 RDI: ffffc9000d4e7100 [ 200.939859][ C0] RBP: ffffc9000d4e70b0 R08: ffffc9000d4e7c20 R09: 0000000000000000 [ 200.947828][ C0] R10: ffffc9000d4e7070 R11: ffffffff8180c110 R12: ffff888025111e00 [ 200.955795][ C0] R13: ffffffff8180c110 R14: ffffc9000d4e7100 R15: 0000000000000000 [ 200.963795][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 200.969949][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 200.976100][ C0] ? do_group_exit+0x207/0x2c0 [ 200.980892][ C0] ? __init_begin+0x41000/0x41000 [ 200.985918][ C0] ? no_hash_pointers_enable+0xa1/0xe0 [ 200.991378][ C0] ? do_group_exit+0x207/0x2c0 [ 200.996150][ C0] arch_stack_walk+0x10e/0x150 [ 201.000912][ C0] ? do_group_exit+0x207/0x2c0 [ 201.005671][ C0] stack_trace_save+0x118/0x1d0 [ 201.010529][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 201.015904][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 201.021881][ C0] kasan_save_track+0x3f/0x80 [ 201.026554][ C0] ? kasan_save_track+0x3f/0x80 [ 201.031398][ C0] ? kasan_save_free_info+0x40/0x50 [ 201.036591][ C0] ? __kasan_slab_free+0x59/0x70 [ 201.041533][ C0] ? kmem_cache_free+0x1a2/0x420 [ 201.046573][ C0] ? ___pte_free_tlb+0x2b/0x140 [ 201.051444][ C0] ? free_pgd_range+0x727/0xdd0 [ 201.056301][ C0] ? free_pgtables+0x719/0x840 [ 201.061087][ C0] ? exit_mmap+0x48e/0xc40 [ 201.065516][ C0] ? __mmput+0x115/0x390 [ 201.069756][ C0] ? exit_mm+0x220/0x310 [ 201.073998][ C0] ? do_exit+0x9b2/0x28e0 [ 201.078375][ C0] kasan_save_free_info+0x40/0x50 [ 201.083410][ C0] __kasan_slab_free+0x59/0x70 [ 201.088197][ C0] ? ___pte_free_tlb+0x2b/0x140 [ 201.093074][ C0] kmem_cache_free+0x1a2/0x420 [ 201.097860][ C0] ? unlink_file_vma_batch_process+0x293/0x2f0 [ 201.104017][ C0] ? ___pte_free_tlb+0x2b/0x140 [ 201.108875][ C0] ___pte_free_tlb+0x2b/0x140 [ 201.113556][ C0] free_pgd_range+0x727/0xdd0 [ 201.118246][ C0] ? __pfx_free_pgd_range+0x10/0x10 [ 201.123448][ C0] ? unlink_file_vma_batch_process+0x293/0x2f0 [ 201.129607][ C0] free_pgtables+0x719/0x840 [ 201.134197][ C0] ? __pfx_free_pgtables+0x10/0x10 [ 201.139308][ C0] ? __pfx_down_write+0x10/0x10 [ 201.144156][ C0] ? __mas_set_range+0x133/0x3c0 [ 201.149193][ C0] exit_mmap+0x48e/0xc40 [ 201.153443][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 201.158302][ C0] ? __pfx_exit_aio+0x10/0x10 [ 201.162992][ C0] ? uprobe_clear_state+0x271/0x290 [ 201.168193][ C0] ? mm_update_next_owner+0xa4/0x810 [ 201.173468][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 201.178667][ C0] __mmput+0x115/0x390 [ 201.182760][ C0] exit_mm+0x220/0x310 [ 201.186830][ C0] ? __pfx_exit_mm+0x10/0x10 [ 201.191417][ C0] ? taskstats_exit+0x326/0xa60 [ 201.196270][ C0] do_exit+0x9b2/0x28e0 [ 201.200423][ C0] ? __pfx_do_exit+0x10/0x10 [ 201.205030][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 201.211007][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 201.217328][ C0] ? cgroup_freezing+0x2a8/0x350 [ 201.222266][ C0] do_group_exit+0x207/0x2c0 [ 201.226851][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 201.232042][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 201.237237][ C0] get_signal+0x16b2/0x1750 [ 201.241755][ C0] ? __pfx_get_signal+0x10/0x10 [ 201.246607][ C0] arch_do_signal_or_restart+0x96/0x860 [ 201.252155][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 201.258309][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 201.264290][ C0] ? syscall_exit_to_user_mode+0xa3/0x340 [ 201.270097][ C0] syscall_exit_to_user_mode+0xce/0x340 [ 201.275650][ C0] do_syscall_64+0x100/0x230 [ 201.280235][ C0] ? clear_bhb_loop+0x35/0x90 [ 201.284921][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.290826][ C0] RIP: 0033:0x7fae7157e819 [ 201.295256][ C0] Code: Unable to access opcode bytes at 0x7fae7157e7ef. [ 201.302352][ C0] RSP: 002b:00007fae6f3d50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 201.310765][ C0] RAX: fffffffffffffe00 RBX: 00007fae71736088 RCX: 00007fae7157e819 [ 201.318738][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fae71736088 [ 201.326703][ C0] RBP: 00007fae71736080 R08: 0000000000000000 R09: 0000000000000000 [ 201.334672][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fae7173608c [ 201.342644][ C0] R13: 0000000000000000 R14: 00007ffc920b52f0 R15: 00007ffc920b53d8 [ 201.350624][ C0] [ 201.353889][ C0] Kernel Offset: disabled [ 201.358319][ C0] Rebooting in 86400 seconds..