last executing test programs: 13.962027927s ago: executing program 3 (id=734): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000001840)=""/225, 0xe1}, {&(0x7f0000001940)=""/184, 0xb8}, {&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000000600)=""/34, 0x22}, {&(0x7f00000007c0)=""/44, 0x2c}], 0x5}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000080)=0x2, 0x4) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x8004}, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket(0x15, 0x5, 0x0) r9 = socket(0x40000000015, 0x5, 0x0) connect$inet(r9, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r9, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r9, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000cc0)={&(0x7f0000000bc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@func={0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x2e, 0x10]}}, 0x0, 0x2b}, 0x20) getsockopt(r8, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f00000000c0)={0x20, r7, 0xd13, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0xb}]}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000b", @ANYRES16=r7, @ANYBLOB="010029bd7000ffdbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0xc000) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f00000001c0), 0x4) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)=@newtaction={0x488, 0x30, 0x2d, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x1, 0x2, 0x0, 0x0, 0x0, 0x101}}}]]}, {0x4}, {0xc, 0xa}, {0xc}}}]}]}, 0x488}}, 0x0) 13.148022963s ago: executing program 3 (id=740): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280), 0x14) write$binfmt_script(r1, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303}, "2a4001011f891d5b", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "fd6ed24e", "d4e9e1c90d89691c"}, 0x38) close(0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xe00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r7, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c00)=@deltfilter={0x30, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@newneigh={0x44, 0x1c, 0x4, 0x70bd29, 0x25dfdbfb, {0x1c, 0x0, 0x0, r8, 0x8, 0x1, 0xb}, [@NDA_LINK_NETNSID={0x8}, @NDA_LINK_NETNSID={0x8, 0xa, 0xc4}, @NDA_NH_ID={0x8, 0xd, 0x7}, @NDA_PROTOCOL={0x5, 0xc, 0x5a}, @NDA_VLAN={0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0xf2a0f19bd5f58727}, 0x4000014) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r10, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x7f, 0xe829, 0x2, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000600)=ANY=[@ANYRES16=r10]}, 0x7a) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="00fc00000200"}) close(0x3) 12.016399322s ago: executing program 3 (id=744): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_emit_ethernet(0x39, &(0x7f0000000140)={@local, @random="c6eb8947e4e4", @void, {@arp={0x806, @generic={0x0, 0x10, 0x6, 0x10, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, "1300134df9054c64f494ee030229cd97", @random="369d99781d2e", "d0b49d276fd45b"}}}}, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)="b6d98d4b81", 0x5}, 0x1, 0x0, 0x0, 0x800}, 0x8000) (async) sendmsg$802154_raw(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)="b6d98d4b81", 0x5}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 11.662254573s ago: executing program 3 (id=745): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) (rerun: 32) r1 = socket$packet(0x11, 0x3, 0x300) unshare(0x69a04c8e98d914be) (async) setsockopt$packet_add_memb(r1, 0x107, 0xa, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (rerun: 64) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) (async) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) (async) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) (async, rerun: 32) r7 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000040420f00b7030000000020008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r6, @ANYBLOB="001700000000000018000a80140001800c000200000000000000000000000000080004"], 0x40}}, 0x0) (async) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x6, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 5.682320685s ago: executing program 0 (id=796): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'hsr0\x00', 0x0}) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x20000140, 0x0, 0x0, 0x20000170], 0x2, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000fffffdff00"/73]}, 0xc1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x1f0, 0x1f0, 0x180, 0x1f0, 0x3, 0x0, {[{{@ip={@dev, @broadcast, 0x0, 0x0, 'wlan1\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x0, 0xffffffffa0028000}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0x0, "c0ad045882a32ba6adfc72c5addc5c57228310581053620648b616d412b6"}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x278) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r4) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', './file0', [], 0xa, "78e2236f967f58242957bea8"}, 0x17) write$binfmt_script(0xffffffffffffffff, &(0x7f00000003c0), 0x7981) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r4, 0x0, 0xfacf) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r2], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000004000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff1d6405000000000065040400210000000404000001e37c60b7040000000000006a0a00fe000000008500000032000000b70000000000000095000000000000000ce0de7621e5e832249c04112cf7af2b75d0d1f034b1b3fb6bd3ce8fa62c7941272ff49142d860010ab162aa2264ab67e55a00000000000000edfe0969a9ddc125b686a1e83c8790c893d713b3295dad0ea697181d1e85b64126b5d72f204754d1d4a93f24215dee354e93cfc3f50ff23f8432c72012f021c84c59a9d4c142f439d3040cfee621589fb3a2f1407c7cbed48e7026f8d52d4bca2608c79aa4a73732028f88ce07ed1075da4a2ef44e3d8b88873f0b1de87dfb6d15936ec0a27cb554def9e27396df6b7851ffa26237ea6730880f06371beb3b290b7d8629a6f0373fefa0acb60888fc14ad2b83ca03ac2aee792482ced58af4140cc4ce3efef26e00c5b2200a91cb80c6065a697d6fc8aa8b65aee0783b04cff0218ce82c9687b4474da89c474c23727555fc5e5f8ad0f2f7a261140440fce1f12cc6df312accd011d888384283092d987c40bbb46f68c2431b97906f00000000349834fa147bd5923bbd4e606708034931a8f1a89bdf77093a0000427aab8e21e1a33d3fe093547532fce6549dd648ad233e05a7b3ea178007c1c32e871ac81f287c4aabbd153390b16d1d41ee433e3aee000000000009e106d6b5289f0000000000000000000000f7bc9f46cb71f6b889d37807865e3b4e9916dd0f72c9d58ea333b90f8886dcbf5ddda0e42ca08e3303632401f2f5212b40c0e88c957fd767dbfc80b07ad668b4f6f92fb209d7c2dbac597843c8eb7bf92fe6d0bb0b72549795c2ed19e441eb69869844152ba9da0588e42cdbc5fcd245ce5e3ef0dca64931276702a312db7956f0a75eb9caa17d47a6331c7c963cbf86a845ce27c26b7136d3e7207318b1df7a6320c64f18ccd926eaeddcde8d5006d6c38db117fb1115221a66169172720ccca770bff37e59511b2606138377eda44b2f288b491ab8aae0e11a98303b0e407e0f9d21f4a3ebbd3fabf6da9a1a1f869a339fab465d8322b7280b0734fd115a19b33c8644fff71b3c62f2e1b827e2663e06a751182e968c8ab05fb1d0115d4b11d944f2c06acc023a02b7416a9a10218d21503cda13bb5df6c992e52e1c01793b728eac000058ab3b3900d279297dadc127e2f38fc60c23af2e1fefa5a83456647191ba1953d320f59aa261fe79613df6bf43884e9649691e32680d75a541c27ffe74f9d13340f2cf1c7dc2b7db01213216cd4ecfd30efe137641471987289b7e23482e026b26eacd1b97443e2ea2d1d6e31a01ee0ae7fa195a2152b2338b086423a3883f2ce3e2f84e04f4d52c985eac4b46336908599564b47db0e6aa97ee51a360f4382fd99745725d44c77d097f69d19fe86f71c38a0226d44ebe0ecbd959f14b540745cd03b8c9f02b825ba45ca85706c73115f70871db9d2a1bc2a517b39f9648123917a5db07ba4e27f961373767e1ea8f7cc558e483abef1a9923c5cfa2081e430680950b7d7c377726b557ad31fdee17ba7057741f39d29d8ab295222f96297a777bb235416e72c84afef2bdb08fb375147b028b89f15af45bc8976b91158c13c9876daa71e7db0f5a17376be39ea79ce1246c547c740e31c64e5d293e0e5a544dd166010061d6ccae46c173b8e11721e4bce22c16af00000021f80ac6c3971006db853e3c40a5417d6eac09eb0e01ac6bd4c6dacdcb1d6d2ef9c8bdea91c984022821e961236d08f8b9072ec6cb5d5a68833fd5b4e80a5ac2bc6ff323f5ce612b59ce8177956c1affcc8baf4c8b59ab959aff9a7bd81f7c7c1f1bb92ddbeed6bce8041c7f0c1c584e6ae027678ce3cfbfea938aecc3c5119c5875b7fb35dc20f5c7aaae1e276104f607a73fe501c1045873a2b1eb80e95c87f099d98028dc82bdc7ef08c871fb3061c3c5ebd613e6e5e8cf099bb6e8c0441a133c85138b36a02c47fbedf7ed1d3ce74c9ec2c676c0b2d4b5eca61dbf5769b483c2a9f6bec666dae4e81960e9bad7f17cfc3d5bcc7b7f437110ca8ffa908c12086b2227eb202a8d56e0925ba994b05c98c39de44d25932449ddf08e5377814a40877eab4440ca01b3f50d2014a61a7d32105254b424238122386424efa3a7041254f686a5faac120942287f75e8e3db569ce47b120059d774a37e11d013be50cd2cbb00f6d2a23af61ec7d30bb7dc33a92f900b6ff1d29dc61cc40b846040dbafd00c6bcfbcf700"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000540)={'syztnl2\x00', r7, 0x10, 0x7, 0x1, 0x7, {{0x22, 0x4, 0x2, 0x6, 0x88, 0x64, 0x0, 0x0, 0x4, 0x0, @loopback, @local, {[@cipso={0x86, 0x23, 0x0, [{0x7, 0xc, "e1477044923f62533404"}, {0x1, 0x6, "2a6e8c64"}, {0x1, 0xb, "ebc9851f1cb0ddb9e0"}]}, @generic={0x1c, 0x9, "1e485efa8d50f9"}, @rr={0x7, 0x23, 0x9b, [@empty, @multicast2, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @loopback, @multicast1, @broadcast]}, @ssrr={0x89, 0x1b, 0x6a, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x18}, @loopback, @dev={0xac, 0x14, 0x14, 0x3e}, @local]}, @rr={0x7, 0x7, 0x87, [@multicast2]}]}}}}}) sendmsg$nl_route_sched_retired(r4, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000e00)=@deltclass={0x5a0, 0x29, 0x400, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xd, 0x6}, {0x2, 0xa}}, [@c_atm={{0x8}, {0x84, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0xffff, 0x4}}, @TCA_ATM_EXCESS={0x8, 0x4, {0x4, 0xffe0}}, @TCA_ATM_EXCESS={0x8, 0x4, {0xfff1, 0x8}}, @TCA_ATM_EXCESS={0x8, 0x4, {0xfff2, 0xffff}}, @TCA_ATM_FD={0x8, 0x1, r5}, @TCA_ATM_HDR={0x17, 0x3, "1065700bf4fdb0925e380104d22304b6cdcf90"}, @TCA_ATM_EXCESS={0x8, 0x4, {0x2, 0x3}}, @TCA_ATM_HDR={0x36, 0x3, "692ffa754a3cf5682c34589f2b1271d61de7e6c45f0f57709178135d30ad0b3fdd6895fe254f5f8b4c68220bc6df36fceb8d"}]}}, @c_cbq={{0x8}, {0x460, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x9, 0x5, 0xff, 0x4, 0x80000001, 0x1, 0x7ff, 0xfeda, 0x3, 0x5, 0x0, 0xa5, 0x10001, 0x7, 0x8e, 0x0, 0x6, 0x1, 0xfffffffd, 0x7fffffff, 0xffff, 0x1, 0x0, 0x8, 0x5, 0x401, 0x7ff, 0x7, 0x146f32ea, 0x875, 0x81, 0x2, 0x8, 0x5, 0x3aeabde5, 0x6, 0x2, 0x3ff, 0x4, 0x2, 0x0, 0x2, 0xffffc210, 0x4, 0x0, 0xfffffffe, 0x9, 0x6, 0x7462, 0x3, 0x5, 0xfffffff8, 0x0, 0x8f, 0x1, 0x1000, 0x7, 0x3, 0x3, 0xfffffffa, 0x8000, 0xfffffff2, 0x8, 0x9b0, 0x9, 0x4, 0x4, 0x5, 0x200, 0x8, 0x0, 0x2, 0x8, 0x8, 0xf3c, 0x2, 0x6, 0x5, 0x200, 0x76, 0x9, 0x1, 0x1f1, 0xfff, 0x0, 0x3, 0xff, 0x800, 0x526c788e, 0xb8, 0xffff0001, 0xfffffff4, 0xadb2, 0x400, 0x81, 0x9, 0x8001, 0x3, 0x4, 0xd, 0xc6, 0x42f0000, 0x10, 0x13a43e39, 0xf2e7, 0x101, 0x7, 0x401, 0x5, 0x9, 0x0, 0x1b, 0x80, 0x5, 0x19e4, 0x8, 0x1, 0xd0, 0x7fffffff, 0x7, 0x7, 0x80, 0x4, 0xb, 0x4, 0xf, 0xb, 0x1, 0x2, 0x80, 0x280, 0x9, 0x4, 0x3, 0x9, 0x9, 0x8, 0x3, 0x95a3, 0x52, 0x4, 0x100, 0x5, 0x8, 0x8, 0x0, 0xfffff2a3, 0xff, 0x7ff, 0x9, 0x1d, 0x2, 0x1000, 0xa, 0x6, 0x10, 0x5, 0x3, 0x75c, 0x0, 0x1, 0x5, 0x8, 0xffff, 0x5, 0x3, 0x7, 0x3, 0x4, 0x6, 0x0, 0x65f, 0x2, 0x8, 0x5224, 0x8, 0x5, 0x2, 0x0, 0xfffffff8, 0x7ff, 0x32, 0x80000000, 0x8, 0x3, 0x5, 0x8, 0x4, 0x7, 0x9, 0x100, 0x2, 0x0, 0xfffffffc, 0x4, 0x1, 0x9, 0x401, 0x8, 0x6, 0xbb69, 0x7fffffff, 0x9ac7, 0xf41, 0x6, 0x6, 0x0, 0x6, 0x9, 0xffff8c55, 0x6af0, 0xfffffff7, 0xff, 0x80000000, 0x4b, 0x3, 0x9, 0x200, 0x27abb048, 0x800, 0x2, 0xd1, 0x0, 0x101, 0x80000001, 0x3, 0x100, 0x433e84ae, 0x7fffffff, 0x8001, 0x0, 0x7, 0x0, 0x0, 0xfffffffd, 0x7, 0x2b, 0x8, 0x6, 0x8, 0x6, 0x7, 0xfffffffa, 0x81, 0xa63f, 0x7, 0x3, 0x1, 0x78, 0x9, 0x10001, 0x9, 0x7fffffff, 0x3, 0x401, 0xc93]}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x8, 0x0, 0x7f, 0x9, 0xfffff80e, 0xfffffffd}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x7, 0xf}, 0x8, 0x7045}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x4, 0x0, 0xcb, 0x94, 0x2f}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0xf, 0x3, 0x1, 0xa8, 0x7ff, 0x4}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x2f, 0x0, 0xb, 0x3, 0x7, 0x4, 0x5, 0x6}}]}}, @c_atm={{0x8}, {0x6c, 0x2, [@TCA_ATM_FD={0x8}, @TCA_ATM_HDR={0x38, 0x3, "ef45593ef73eb7f056af68b329378e4c4e662cc71359667d19cf42102c0be014ab5a42b22e2ae1b702ff3aa9d832f52313e1ec67"}, @TCA_ATM_FD={0x8, 0x1, r1}, @TCA_ATM_HDR={0x20, 0x3, "2242d06752295d0df7a1ff1e6cf8afc60b28d95d334adcba76c76982"}]}}, @c_atm={{0x8}, {0xc, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0xe, 0xb}}]}}]}, 0x5a0}, 0x1, 0x0, 0x0, 0x5c850}, 0x811) r10 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r10, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r11, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r12, 0x29, 0xb, 0x0, &(0x7f0000000080)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r4}, &(0x7f0000000380), &(0x7f0000000440)=r5}, 0x20) 5.171707381s ago: executing program 0 (id=800): r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e, 0x800) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000000c0)={{0x0, 0x5, 0x5, 0x5, 0xfffffffffffffffe, 0x3, 0x5, 0x0, 0x7, 0x8, 0x3ff, 0x46, 0x81, 0x81, 0x46f070b7}, 0x20, [0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000180)={{r1, 0x8, 0x3, 0x4, 0x8, 0x1, 0x8, 0x10000, 0xc0, 0x3, 0x7f, 0x9, 0x9, 0x2, 0x770}, 0x8, [0x0]}) r2 = socket(0x3, 0x5, 0x101) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000200)={r2, 0xf, 0x2, 0x1}) write$cgroup_freezer_state(r3, &(0x7f0000000240)='FREEZING\x00', 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r5, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000004}, 0x80) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000500), &(0x7f0000000540)=0xc) sendto$ax25(r2, &(0x7f0000000580)="16ce493d7e0d998d3a7e38c31dd2cc1e6478ee66c3612c117ea98812ded7c0042b9a776a41b0ae717887c59bb57b0950bd0de566804f6873f264d3a8c0d433a2a807a98e1515cf79566be16a40094aff56bb6278db52ed3d1b9dd89f02b031dc1272df9c14904083452b58dc5faa3125211dd029df6c33444f784c458ffc8bda2821301bd0eda8cc0e9021063ff0082255604e6283da7538cf4729a2b66b33dac5c58712a262dc1b2a2c31be26c9ea631fa1e6c2af6007791f86d47c3e21b5985324beda57ef9a8c618e64ca14f6f80b42027b9bfcf194594f2130ed1cbe9ebdfbfd84164399107386d55d", 0xeb, 0x8000, &(0x7f0000000680)={{0x3, @bcast, 0x5}, [@null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r10, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x800}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x800) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x20, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x4044112}, 0xc045) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000940)='veth0_virt_wifi\x00', 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000c00)={r3, 0x20, &(0x7f0000000bc0)={&(0x7f0000000a80)=""/216, 0xd8, 0x0, &(0x7f0000000b80)=""/10, 0xa}}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000cc0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000c40), &(0x7f0000000c80)='%-5lx \x00'}, 0x20) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x20, 0x8, &(0x7f0000000980)=@raw=[@map_idx_val={0x18, 0x0, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}, @map_fd={0x18, 0x2, 0x1, 0x0, r3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}], &(0x7f00000009c0)='syzkaller\x00', 0x8000, 0x0, 0x0, 0x41100, 0x40, '\x00', r11, 0xd, r3, 0x8, &(0x7f0000000a00)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000a40)={0x0, 0xe, 0x178, 0x3}, 0x10, r12, 0xffffffffffffffff, 0x3, &(0x7f0000000d00)=[r3, r13], &(0x7f0000000d40)=[{0x2, 0x3, 0x9, 0x1}, {0x5, 0x5, 0xe, 0x8}, {0x0, 0x2, 0xc}], 0x10, 0x401}, 0x90) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = openat$cgroup_ro(r3, &(0x7f0000000e40)='memory.events\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f00)={{r3, 0xffffffffffffffff}, &(0x7f0000000e80), &(0x7f0000000ec0)=r14}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000011c0)={0x6, 0x19, &(0x7f0000000f40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10000}, {{0x18, 0x1, 0x1, 0x0, r15}}, {}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffe}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_val={0x18, 0x3, 0x2, 0x0, r16, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x5, 0x1, 0x0, r2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001040)='syzkaller\x00', 0x5, 0x14, &(0x7f0000001080)=""/20, 0x40f00, 0x15, '\x00', r11, 0x25, r3, 0x8, &(0x7f00000010c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000001100)={0x4, 0x5, 0x0, 0x9}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001140)=[r13, r3, r13, r3], &(0x7f0000001180)=[{0x5, 0x1, 0x0, 0x9}], 0x10, 0xc}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001280)={'pim6reg0\x00'}) 4.864453332s ago: executing program 0 (id=805): r0 = socket(0x2a, 0x2, 0xfffa) bind$l2tp(r0, &(0x7f00000001c0)={0x2, 0x0, @multicast1, 0x3}, 0x10) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x1205000, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x98}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) 4.656238241s ago: executing program 0 (id=808): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_int(r1, 0x29, 0x6, 0x0, 0x2000000) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000340)="d6", 0x1}], 0x1}}], 0x2, 0x2400c040) 4.491432597s ago: executing program 0 (id=811): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0, r3}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) socket(0x21, 0x80000, 0x7) (async) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYRESOCT=r7, @ANYRES16=r4, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r6, @ANYBLOB="24002d800800020003000000050001000000000005000400000000001800"], 0x40}}, 0x24040800) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r8, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001500)={0x28, r9, 0x1e4154a047550949, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x6, 0x1, 0x1}]}]}, 0x28}}, 0x24004002) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r1, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x17}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x10) (async) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="e5ff28bd7000ffdbdf250700000008000500ac1414aa08000400ac14141e0500010000000000"], 0x2c}}, 0x10) (async) r13 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) (async) getsockname$packet(r13, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=@newtfilter={0x70, 0x2c, 0xd27, 0x4, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x70}}, 0x20000051) (async) r15 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r15, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r16 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x4, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000200000000000000000818110000", @ANYRES32=r16, @ANYRESHEX=r16], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r17 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r17, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x0, 0x1170, 0x1398, 0x120, 0x1170, 0x260, 0x1398, 0x1398, 0x260, 0x1398, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast1, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6, 0x0, 0x0, 0x41}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x10}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@hbh={{0x48}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) 4.225015413s ago: executing program 0 (id=813): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) (async) r0 = socket(0x400000000010, 0x1, 0x0) (async) unshare(0x22020400) (async) unshare(0x40000000) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup, 0xffffffffffffffff, 0x12, 0x300, 0x0, @prog_id}, 0x20) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800000080000001daf6516eb75176bb91d1abfae0575d25f9205ad2a64d96159ea312c26be2f8bfb7e0b8681487ab575a6dec3bdbb3eaa9897e4839b3c4f2659eeeeb2f944160054e77c34dc19a412205969daf9f0f8e4576189c31c0c489c3df74eb537be5fec479a9abd5d79d5be8d5d6a6f16ecfd76a1176d4af5869f14f33ee721cc9d37f99c1510a471f7dca79d69cdffe44486f31f4ecd119c5e3b6e446c4382591afd7511df8dc6f24e787ae729ec21beb07aefada27518e020c"], 0x24}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$nl_crypto(0x10, 0x3, 0x15) (async) gettid() (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000500000000b704000000000000850000000f0000009570de5f12cf04893c4740771f25ed780a45bd6ea23e409a7d592e597b4bef73429e94728b4f07598b0baf226b619178758361fc3f59d05db8155f25f203ff88919f99613f7789cba345e104bc32afdcf1ec4f45bfbdb77ec09e5673701a6e575caf5023d9f5203add8c266abb10177a72a56f5a93cfa8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in=@remote, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={""/10, ""/2, @initdev}}}, &(0x7f0000000200)=0xe8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x5, 0xff}, 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) socket$inet(0x2, 0x4000000000000001, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x3a, 0x8, 0x2}, 0x48) (async) bpf$BPF_PROG_ATTACH(0x1c, &(0x7f00000001c0)={@map=r4, 0xffffffffffffffff, 0x2c}, 0x20) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) 4.223102665s ago: executing program 1 (id=814): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, r2, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004004}, 0x40040d0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x94}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x8004, {0xfeffff7f}}]}]}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x4004014) 3.801965973s ago: executing program 4 (id=816): close(0xffffffffffffffff) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x4, 0x4}, 0x48) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x24, 0x4, 0x2}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r2, &(0x7f00000002c0), 0x20000000}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r0}, &(0x7f0000000700), &(0x7f0000000740)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000200000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000001c0)={0x6, 0x2000, 0x0, 0x200}, 0x10) (async) sendmsg$ETHTOOL_MSG_WOL_SET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x20}}, 0x4000000) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) write$binfmt_script(r6, 0x0, 0xfffffe5d) (async) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r7, @ANYBLOB="01ff00e1c2ed00001c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) getsockname$packet(r6, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) (async) r9 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r8], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newqdisc={0x24, 0x11, 0x1, 0x0, 0x0, {0x10, 0x0, 0x4c, r7}}, 0x24}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786cab00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000004000000850000007d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='*\x00'}]}, 0x1c}}, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r12) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000080)={0x1, 0x1, 0x1, r10, 0xb}, 0xc) (async) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r13, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.512755497s ago: executing program 1 (id=818): syz_emit_ethernet(0x7a, &(0x7f00000006c0)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "508359", 0x0, 0x33, 0x0, @private1, @private1, [@hopopts={0x32}, @routing]}}}}}}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x15, &(0x7f0000000340)=@ringbuf={{0x18, 0x8, 0x2, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x8}], {{0x5, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r4, 0x29, 0x3e, 0x0, &(0x7f0000000000)) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3456e03c", @ANYRES16=r5, @ANYBLOB="000229bd7000fedbdf2501000000000000000141000000180017000000222000000769623a70696d726567000000"], 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x4080) r6 = socket$packet(0x11, 0x0, 0x300) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a00000000000000000000000000000900010073797a30000000004c000000090a000000000000000000000008000a40000020080900020073797a31000000000900010073797a30000000000800054000000000080006400000000008000340000000002c0000000c0a00000000000000000000000000000900020073797a31000000000900010073797a3000000000140000001000010000002a66ccc16525b0ed4e71ba02c80000ad"], 0xc0}}, 0x0) write$binfmt_script(r8, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1, 0x12, r7, 0x0) r9 = socket(0xa, 0x6, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000180)={@mcast1}, &(0x7f00000001c0)=0x20) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendto$packet(r10, &(0x7f00000002c0)="05040500d3fc030000004788031c09100628", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @multicast}, 0x14) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r13, 0x0, 0x8ec0, 0x0) read$alg(r1, &(0x7f00000004c0)=""/203, 0xcb) r14 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r14, 0x1, 0x3c, &(0x7f0000000040)={0x1, 0x5}, 0x8) 3.253973751s ago: executing program 4 (id=819): socket$igmp(0x2, 0x3, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000480)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x2, 0x12, 0xe, @loopback, 0x0, "20f0ddf9a66ac057"}]}}}}}}}}, 0x0) 3.088624384s ago: executing program 4 (id=821): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000200), &(0x7f00000004c0)=0x4) socket(0x10, 0x3, 0x9) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200"], 0x0}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x23c, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_gred={{0x9}, {0x20c, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x23c}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb92f"], 0xfdef) (async) write$cgroup_subtree(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb92f"], 0xfdef) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) (async) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="70010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x170}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r5) (async) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x24, r6, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x24d8}], 0x1}, 0x0) (async) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x24d8}], 0x1}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) socket$alg(0x26, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) socket$alg(0x26, 0x5, 0x0) 2.970775864s ago: executing program 2 (id=822): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800e6ff"], 0x0}, 0x90) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x107, 0x18, 0x0, 0x20000000) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000b0e000c00000c0000000600005f2e0000000000dfffffffffffffff00000000"], 0x0, 0x2a}, 0x20) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x3, @private2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x4, &(0x7f0000000340)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x71}]}, &(0x7f0000000400)='syzkaller\x00', 0x6}, 0x90) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000280), 0x14) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2f00020b, 0x3, 0x0, &(0x7f0000000200)="63eced", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff}) sendmsg$inet(r4, 0x0, 0x40) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000001801000069b0070000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000080850000000400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) sendmsg$inet(0xffffffffffffffff, 0x0, 0x800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303}, "2a4001011f891d5b", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "fd6ed24e", "d4e9e1c90d89691c"}, 0x38) writev(r2, &(0x7f0000000900)=[{&(0x7f0000000180)="4d363805afa9f06e7a8dae832ab882969c6a9e1946d3d447d7ac2f5ac53deedde2cbb288d0ff7affa7ead17e8dd3e154384689", 0x33}, {&(0x7f0000000300)="f07d3487a06a1aee44648f03d9d69beb4b58a5d5be3d3c9c5b0beb0ed54ad77fb236d1ce36da6f500a0dc8850189844072aa388cd8e5b22876f4eea1413e0438f5d39b24640fa709c108b4c05700fb75cf6c750d7d9596f6dde368714b41fee9bc328154de69237b7d70e478b1cb1ec8610617c99d05485c4a970556000e628d936f056ffc62acc7dde7b44eed0b5659186fe400ae5c999f078dade80a330f1eaa83f1e33dce736023f0ce1b19ffc323e2150342975c98dfa477aa52d60b66dc74fc71f813a76b62f603f26416cebbbbe0095b196821ff1f252cdf9e1ee8a6cdf9b2059def094aa885acb92c7ee05c90db", 0xf1}, {&(0x7f00000001c0)="dd02a85b69969e725dec6f509ebc1dc79c0ededbff97d59ba326a26a8d729784ef66d70a800344aeb7bd3c6d843ca1855d", 0x31}, {&(0x7f0000000400)="51019580908f11b2f5ea4b9c7957f55ff5e8c47b071463ec09241d8c549ee93541dec3ac4166fd83bea2d78d607ca001f7bf6ab54fc99d979476407930f4f8bbcc67746f9be793ef9ecc246e69b7dcf2dc7e8fe0960bd54c3d6894099972fd96c2a9584ae6805537c5f29fbc4baa13644eb56e2ffcd89ca5662243a67b6fa7d33dfeb446072f5a7d336468102f02f00dd1d3cb4ac71e1afde870175bb0d0768e9a488db248b45ee540e4c5d87a33803d930c23ed24301d7ef46ccc7047b95b09b04dc80342f34cad39cc1ca95fc5176b8f", 0xd1}, {&(0x7f0000000540)="f9340e6ada7b641781e0bf00c6ce1499504d22306f1056ff50ad36b936ef1b2b26d8b1f3a8a7561e5e86d2bc3ecd397db466662cdbffca50088754fb68ed6b3499d662e6f9cd967bf63f95e43dd7b37604d814ddebb10fee0be271cb8a7a254d10f158ed00f22978f77a6be56586c3438ceab5e9ef394cfeb66d9053c6b77649ba73674526709a5b48d907e600a403906a1a4b47f775f46cef4b9a738bb14a9a89eab94a0b6016", 0xa7}, {&(0x7f0000000600)="b3d46d0375c530f84d6b12db2fc03b116685b7a56fff88051916b0b4b84679527e6e7db64c7c15e6e77c03003ab560f92dc1269f9e8ec1aa42f1544654c13b26fa5d24485a11f87a8935edd96d7bcce05962965d35d3375211f7302bb05a78d2253a5c5d62e9a6bd58f180debdfc7319c063787120eaa5b729962ce00969a6bc0f2cbc285431f9e29391fc04c0bf405ea5f8e91e6b57665a345fdfe19dba595230daa82119ea14f6673e34c3fe747d9f9aff7adc4a11627429b29a0978acfde9bd70635f15c873b25be560977719dece85ece9aa347a00c857392691bfa99b2e3fe2555c3706d9cb255d30710c14b33e39fd", 0xf2}, {&(0x7f0000000200)="0ba5ce07556b1502480ad981dc514f5e8b00876d78ece2ed76816cf4ab94d7b8", 0x20}, {&(0x7f0000000700)="90e2e2525460b434cd32ed2b140be71bf4b7e3d52322fd55455aec0c96e287ea3224e49809d4275d90ef6a7fea840f16e207e3f4029f6c4e8b4912927757e99520ef57307fe8eb74b496614ba43d0291d0445b993bdf5d69dff70e27a72907c1bb406298396dcdeaa85aac0623689f039d697af2b8839c26f9a339df167862166088fec97408789b675646b122ae4bb2076e2cfb8afc7f70bebf2077c9131e236041b998db80553c9f60cd8e759a5e84a498c3f009c95934a2f4607e8b3ca024a6048db7b6d59fb18bc4ba2228e8", 0xce}, {&(0x7f0000000800)="3239f0e1c731ef29a7cfc191d1dd3bb21e2ac7ed0353492377d5823a24e3b9abf3067a030d2a7ba40c56779d6e7c58756d6a165ae4f1ed515a31571a44af44b77f1b2f510bce458894e96375ce7e4e611a277e316cfc053c45fff09d01fdd3322a9ad804f820c2d11ba1b419746ec961ed68f9f9ce921f23f84c8858a84f370133cb86f0bbfa51f96b3bd04b2c421ba880f914dfb531dbd75dad5aa4bd0fef3dbe419c4d9a66faaccffa4a94e413e1f5f2b0cfb4f3aa97841deb93f00ff3ec4b4d616b4441e8d1fefeb37c8559005ca93799dc5602cfa5ab1a1d82606fd17614e12077944f9a15a018d1ed791b52881bd178cd59b0", 0xf5}], 0x9) close(0x4) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_int(r6, 0x29, 0x3e, 0x0, 0x0) 2.641793472s ago: executing program 2 (id=823): r0 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r1], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000540)={'ip_vti0\x00', 0x0, 0x0, 0x10, 0x5, 0xfffffff9, {{0x19, 0x4, 0x2, 0x0, 0x64, 0x65, 0x0, 0x2, 0x29, 0x0, @empty, @multicast2, {[@generic={0x88, 0x11, "ab7bbc2ee8836929365cc04399436f"}, @timestamp_prespec={0x44, 0x3c, 0x5c, 0x3, 0x9, [{@broadcast, 0x2323066d}, {@multicast1, 0x400}, {@empty, 0x2}, {@rand_addr=0x64010101, 0xe56}, {@empty, 0x80}, {@private=0xa010101}, {@loopback, 0x7}]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f0000000b00)={0x14, 0x0, 0x300, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xc840}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r3, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x2, 0x80, 0xc2, 0xc}}) r4 = socket$kcm(0x10, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x17, 0x3, &(0x7f0000000040)=@raw=[@ldst={0x3, 0x0, 0x3, 0x9, 0x9, 0x8, 0x4}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x29}], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) recvmsg$kcm(r4, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r4, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) recvmsg$kcm(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], 0x7c}}, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r6, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="180000000114010040030000000000000800010000000000e83be99f141ac3b932de2cc4694bc9cce233df41530cc200c218a3844e"], 0x18}}, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000840)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 2.490517972s ago: executing program 1 (id=824): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x780, 0x40, 0xffff, 0x7, {{0x29, 0x4, 0x3, 0x0, 0xa4, 0x68, 0x0, 0x4, 0x0, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010100, {[@lsrr={0x83, 0x13, 0x6e, [@dev={0xac, 0x14, 0x14, 0x33}, @empty, @remote, @dev={0xac, 0x14, 0x14, 0x29}]}, @rr={0x7, 0xf, 0x26, [@broadcast, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x1c, 0xd9, 0x3, 0x3, [{@empty, 0x196}, {@rand_addr=0x64010101, 0x5}, {@local, 0xc10}]}, @ssrr={0x89, 0xf, 0x1c, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @private=0xa010102]}, @ssrr={0x89, 0xf, 0xb8, [@multicast1, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop, @end, @ssrr={0x89, 0x7, 0x54, [@multicast1]}, @ssrr={0x89, 0x27, 0x66, [@loopback, @loopback, @broadcast, @loopback, @remote, @broadcast, @remote, @private=0xa010102, @remote]}, @noop]}}}}}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x91d, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe, 0x3}, 0x48) getsockname$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000480)=0x14) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, 0x0, 0xfdef) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000000)=0x204000, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x198, 0x10, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@loopback}, {@in, 0x0, 0x32}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x5d, 0x14, {{'cmac(aes)\x00'}, 0x88, 0x0, "e363215f3da533f861c33b10bf7d0ec8a2"}}]}, 0x198}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r5) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="07ef0000f7ff0000000008"], 0x14}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x2, 0x4, 0x3}, 0x48) r9 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r9, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r8, &(0x7f0000000480), &(0x7f0000000540)=@tcp=r9}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r8, &(0x7f0000000180), &(0x7f0000000100)=@tcp=r9, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r11, 0x8933, &(0x7f0000000240)={'wg2\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r10}, @IFLA_HSR_SLAVE2={0x8, 0x2, r12}, @IFLA_HSR_VERSION={0x5}]}}}]}, 0x48}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000380)={'syztnl1\x00', r1, 0x8000, 0x7800, 0xd5d, 0x1, {{0x6, 0x4, 0x3, 0x0, 0x18, 0x64, 0x0, 0xe, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, {[@generic={0x82, 0x3, "85"}]}}}}}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000009c0)={{{@in, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast2}}}, &(0x7f0000000740)=0xe8) sendmsg$nl_xfrm(r4, &(0x7f00000008c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000780)=@newsa={0xf8, 0x10, 0x400, 0x70bd26, 0x25dfdbfb, {{@in=@empty, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e21, 0x4, 0x2, 0xfffb, 0xa, 0x0, 0x0, 0x62, r13, r14}, {@in=@multicast1, 0x4d6, 0xf6}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0x80000000, 0x1, 0x637c, 0xe, 0x2, 0x1, 0x800000000, 0x5}, {0x5, 0x0, 0x8, 0x9}, {0x7, 0x4, 0x4}, 0x70bd2f, 0x3507, 0x2, 0x2, 0xff, 0x1}, [@extra_flags={0x8, 0x18, 0x8}]}, 0xf8}, 0x1, 0x0, 0x0, 0x48041}, 0x411) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000040000000000000000000000850056005d0000009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.403349174s ago: executing program 3 (id=825): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt(r1, 0x0, 0x50, &(0x7f0000000000)=""/61, &(0x7f0000000040)=0x3d) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000df000044000000000b0000000005001473797a300000ffff"], 0x28}}, 0x0) 2.150175751s ago: executing program 3 (id=826): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000b40)="a2", 0xfffffd2a}], 0x1, 0x0, 0x0, 0x20000000}, 0x4000041) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="08001c"], 0x3c}, 0x1, 0x0, 0x0, 0x44080}, 0x0) 630.107741ms ago: executing program 4 (id=827): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="00020201"], 0x18) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f00000002c0)={0xa, 0x4e20, 0x0, @dev, 0x7}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000880)="47856127", 0x4}], 0x1}}], 0x1, 0x40040) 541.741124ms ago: executing program 2 (id=828): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)={0x64, r2, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x48, 0x8, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 504.357077ms ago: executing program 1 (id=829): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000080)={0xfc, 0x4, 0x9, 0x2, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x8f}, 0xb) 362.020198ms ago: executing program 4 (id=830): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x15, &(0x7f0000000700)={0x0, 0xa3}, 0x8) 361.891272ms ago: executing program 2 (id=831): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000200)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000900)={0x48, 0x2}, 0x10) 295.609177ms ago: executing program 1 (id=832): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0xa, &(0x7f00000001c0), 0x4) 187.997883ms ago: executing program 2 (id=833): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e63, 0x5, @remote, 0x100005}]}, &(0x7f0000000100)=0x10) 129.951935ms ago: executing program 4 (id=834): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in6=@private1}, {@in6=@loopback, 0x1, 0x32}, @in=@loopback, {}, {0x0, 0x2}, {0x0, 0x0, 0x6}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x8}, [@algo_aead={0x61, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa8, 0x80, "c3a59382c716c31c769eb7aad59e76b9f7346b9289"}}]}, 0x154}}, 0x0) 58.885379ms ago: executing program 1 (id=835): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {0x1b}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 0s ago: executing program 2 (id=836): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800c0001006d6163766c616e002c000280280005800a000400aaaaaaaaaaaa00000a000400aa"], 0x5c}}, 0x0) kernel console output (not intermixed with test programs): : attribute type 5 has an invalid length. [ 64.127299][ T5417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.29'. [ 64.156234][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 64.233400][ T5417] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (7) [ 66.458764][ T5481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 66.526003][ T5481] __nla_validate_parse: 1 callbacks suppressed [ 66.526021][ T5481] netlink: 12 bytes leftover after parsing attributes in process `syz.3.41'. [ 66.629774][ T5481] bridge_slave_1: left allmulticast mode [ 66.655319][ T5481] bridge_slave_1: left promiscuous mode [ 66.661362][ T5481] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.709191][ T5481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 66.759946][ T5481] netlink: 16 bytes leftover after parsing attributes in process `syz.3.41'. [ 67.253876][ T5487] netlink: 'syz.1.43': attribute type 1 has an invalid length. [ 67.329575][ T5487] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.337209][ T5488] netlink: 28 bytes leftover after parsing attributes in process `syz.1.43'. [ 67.406980][ T5487] batadv0: entered promiscuous mode [ 67.416400][ T5487] vlan2: entered promiscuous mode [ 67.421798][ T5487] vlan2: entered allmulticast mode [ 67.427060][ T5487] batadv0: entered allmulticast mode [ 67.437087][ T5493] netlink: 12 bytes leftover after parsing attributes in process `syz.2.44'. [ 67.446462][ T5495] netlink: 12 bytes leftover after parsing attributes in process `syz.0.45'. [ 67.466902][ T5497] netlink: 'syz.3.46': attribute type 9 has an invalid length. [ 67.489940][ T5497] bond_slave_0: entered promiscuous mode [ 67.496002][ T5497] bond_slave_1: entered promiscuous mode [ 67.501796][ T5497] team_slave_0: entered promiscuous mode [ 67.507709][ T5497] team_slave_1: entered promiscuous mode [ 67.523023][ T5497] macvlan2: entered promiscuous mode [ 67.565185][ T5497] bond0: entered promiscuous mode [ 67.583759][ T5497] team0: entered promiscuous mode [ 67.621526][ T5497] macvlan2: entered allmulticast mode [ 67.634883][ T5497] bond0: entered allmulticast mode [ 67.640611][ T5497] bond_slave_0: entered allmulticast mode [ 67.643328][ T5501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 67.650229][ T5506] sctp: [Deprecated]: syz.1.47 (pid 5506) Use of struct sctp_assoc_value in delayed_ack socket option. [ 67.650229][ T5506] Use struct sctp_sack_info instead [ 67.657819][ T5497] bond_slave_1: entered allmulticast mode [ 67.681423][ T5497] team0: entered allmulticast mode [ 67.682027][ T5505] sctp: [Deprecated]: syz.1.47 (pid 5505) Use of struct sctp_assoc_value in delayed_ack socket option. [ 67.682027][ T5505] Use struct sctp_sack_info instead [ 67.688246][ T5497] team_slave_0: entered allmulticast mode [ 67.709149][ T5497] team_slave_1: entered allmulticast mode [ 67.717003][ T5497] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 67.886401][ T5512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 67.908010][ T5514] netlink: 256 bytes leftover after parsing attributes in process `syz.1.50'. [ 67.936941][ T5514] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.069483][ T5520] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 68.159932][ T5523] Illegal XDP return value 4294967274 on prog (id 24) dev N/A, expect packet loss! [ 68.234518][ T5525] netlink: 136 bytes leftover after parsing attributes in process `syz.1.54'. [ 68.571756][ T5539] Bluetooth: MGMT ver 1.23 [ 68.580050][ T5540] netlink: 'syz.0.57': attribute type 2 has an invalid length. [ 68.979026][ T5558] netlink: 36 bytes leftover after parsing attributes in process `syz.1.63'. [ 69.128047][ T5563] Cannot find add_set index 0 as target [ 69.184147][ T5569] netlink: 'syz.1.66': attribute type 3 has an invalid length. [ 69.205339][ T5569] netlink: 'syz.1.66': attribute type 1 has an invalid length. [ 69.238682][ T5569] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.66'. [ 69.480569][ T5587] netlink: 32 bytes leftover after parsing attributes in process `syz.1.69'. [ 71.221731][ T5619] nlmon0: entered promiscuous mode [ 71.249752][ T5619] vlan2: entered promiscuous mode [ 71.299214][ T5619] nlmon0: left promiscuous mode [ 71.559348][ T5633] __nla_validate_parse: 2 callbacks suppressed [ 71.559366][ T5633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.78'. [ 71.605324][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.614195][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.632181][ T5633] veth0_macvtap: left promiscuous mode [ 71.691302][ T5644] netlink: 20 bytes leftover after parsing attributes in process `syz.2.81'. [ 71.838747][ T5653] netlink: 36 bytes leftover after parsing attributes in process `syz.3.82'. [ 71.864719][ T5650] netlink: 104 bytes leftover after parsing attributes in process `syz.0.83'. [ 71.922805][ T5655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.84'. [ 71.934234][ T5655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.84'. [ 71.973002][ T5655] netlink: 'syz.2.84': attribute type 1 has an invalid length. [ 71.980755][ T5655] netlink: 224 bytes leftover after parsing attributes in process `syz.2.84'. [ 72.236707][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 72.454470][ T5677] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.90'. [ 72.510639][ T5677] mac80211_hwsim hwsim12 syzkaller0: renamed from wlan1 (while UP) [ 72.532618][ T5681] netlink: 12 bytes leftover after parsing attributes in process `syz.2.92'. [ 72.552142][ T5677] netlink: 24 bytes leftover after parsing attributes in process `syz.1.90'. [ 72.586020][ T5677] netlink: 'syz.1.90': attribute type 5 has an invalid length. [ 72.593574][ T5681] bond1: entered promiscuous mode [ 72.603096][ T5683] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 72.618266][ T5683] ip6gretap1: entered promiscuous mode [ 72.624146][ T5683] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 72.652811][ T5685] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.686932][ T5681] bond1: left promiscuous mode [ 72.707487][ T5681] ip6gretap1: left promiscuous mode [ 72.714236][ T5681] 8021q: adding VLAN 0 to HW filter on device bond1 [ 73.181209][ T5716] warning: `syz.0.103' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 73.411500][ T5729] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 73.651618][ T5738] Cannot find set identified by id 0 to match [ 73.745730][ T5743] gtp0: entered promiscuous mode [ 73.750721][ T5743] gtp0: entered allmulticast mode [ 73.979772][ T5754] Bluetooth: MGMT ver 1.23 [ 74.091652][ T5759] netlink: 'syz.2.116': attribute type 4 has an invalid length. [ 74.104212][ T5761] netlink: 'syz.2.116': attribute type 4 has an invalid length. [ 74.946393][ T5801] dccp_close: ABORT with 2 bytes unread [ 75.328422][ T5826] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 76.727447][ T942] cfg80211: failed to load regulatory.db [ 76.954696][ T5861] nftables ruleset with unbound chain [ 77.185768][ T5229] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 77.197447][ T5229] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 77.212534][ T5229] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 77.216310][ T5868] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 512 [ 77.236763][ T5229] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 77.245546][ T5229] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 77.252974][ T5229] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 77.596001][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.766186][ T5879] team_slave_0: entered promiscuous mode [ 77.772100][ T5879] team_slave_1: entered promiscuous mode [ 77.818388][ T5879] bond0: (slave vlan3): Enslaving as an active interface with an up link [ 77.924822][ T5881] team0: Port device macvlan1 added [ 78.286648][ T5904] xt_TCPMSS: Only works on TCP SYN packets [ 78.398207][ T5904] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 78.615406][ T5918] Bluetooth: hci3: expected 2 bytes, got 7 bytes [ 78.688677][ T5920] __nla_validate_parse: 12 callbacks suppressed [ 78.688703][ T5920] netlink: 20 bytes leftover after parsing attributes in process `syz.0.155'. [ 78.868738][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 78.962202][ T5934] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 79.161896][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.178668][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.198031][ T5866] bridge_slave_0: entered allmulticast mode [ 79.229750][ T5866] bridge_slave_0: entered promiscuous mode [ 79.259162][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.278698][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.287409][ T5866] bridge_slave_1: entered allmulticast mode [ 79.294889][ T5866] bridge_slave_1: entered promiscuous mode [ 79.357766][ T4617] Bluetooth: hci5: command tx timeout [ 79.388133][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.417963][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.463026][ T5932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.490204][ T5952] netlink: 'syz.3.164': attribute type 10 has an invalid length. [ 79.536495][ T5954] netlink: 256 bytes leftover after parsing attributes in process `syz.0.165'. [ 79.624815][ T5866] team0: Port device team_slave_0 added [ 79.654744][ T5866] team0: Port device team_slave_1 added [ 79.782334][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.805828][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.887903][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.993658][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.010238][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.046170][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.083791][ T5960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.168'. [ 80.122924][ T5960] bridge_slave_1: left allmulticast mode [ 80.131680][ T5960] bridge_slave_1: left promiscuous mode [ 80.137834][ T5960] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.160870][ T5960] bridge_slave_0: left allmulticast mode [ 80.175291][ T5960] bridge_slave_0: left promiscuous mode [ 80.183038][ T5960] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.382900][ T5974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.173'. [ 80.565092][ T5982] netlink: 80 bytes leftover after parsing attributes in process `syz.3.174'. [ 80.613170][ T5984] netlink: 32 bytes leftover after parsing attributes in process `syz.2.176'. [ 80.614337][ T5866] hsr_slave_0: entered promiscuous mode [ 80.661436][ T5866] hsr_slave_1: entered promiscuous mode [ 80.681308][ T5866] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.703399][ T5866] Cannot create hsr debugfs directory [ 81.445334][ T4617] Bluetooth: hci5: command tx timeout [ 81.887218][ T6007] netlink: 24 bytes leftover after parsing attributes in process `syz.2.181'. [ 82.074067][ T6014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.184'. [ 82.107302][ T6014] netlink: 56 bytes leftover after parsing attributes in process `syz.1.184'. [ 82.151165][ T6014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.184'. [ 82.170862][ T6018] pim6reg1: entered promiscuous mode [ 82.185356][ T6018] pim6reg1: entered allmulticast mode [ 82.340100][ T5866] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.459009][ T5866] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.601186][ T5866] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.699811][ T5866] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.928260][ T5236] cgroup: fork rejected by pids controller in /syz1 [ 83.030952][ T5866] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.070720][ T5866] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.135600][ T6047] team_slave_0: entered promiscuous mode [ 83.141328][ T6047] team_slave_1: entered promiscuous mode [ 83.180952][ T6047] team0: Device macsec1 is already an upper device of the team interface [ 83.210433][ T6047] team_slave_0: left promiscuous mode [ 83.215939][ T6047] team_slave_1: left promiscuous mode [ 83.311837][ T5866] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.323526][ T5866] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.515588][ T4617] Bluetooth: hci5: command tx timeout [ 83.596099][ T6064] (unnamed net_device) (uninitialized): (slave team0): Device is not bonding slave [ 83.631239][ T6068] netlink: zone id is out of range [ 83.636478][ T6064] (unnamed net_device) (uninitialized): option active_slave: invalid value (team0) [ 83.657458][ T6068] netlink: zone id is out of range [ 83.687302][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.731726][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.815069][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.822251][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.868878][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.876062][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.230004][ T6095] __nla_validate_parse: 1 callbacks suppressed [ 84.230021][ T6095] netlink: 36 bytes leftover after parsing attributes in process `syz.0.205'. [ 84.276797][ T5229] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.286023][ T5229] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.301404][ T5229] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.324902][ T5229] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.348806][ T5229] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 84.363830][ T5229] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.592256][ T6112] netlink: 332 bytes leftover after parsing attributes in process `syz.0.209'. [ 84.634162][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.942249][ T6122] netlink: 3 bytes leftover after parsing attributes in process `syz.2.211'. [ 84.975988][ T6122] sctp: [Deprecated]: syz.2.211 (pid 6122) Use of int in max_burst socket option. [ 84.975988][ T6122] Use struct sctp_assoc_value instead [ 85.022549][ T6122] netlink: 3 bytes leftover after parsing attributes in process `syz.2.211'. [ 85.275561][ T6135] sctp: [Deprecated]: syz.2.214 (pid 6135) Use of int in maxseg socket option. [ 85.275561][ T6135] Use struct sctp_assoc_value instead [ 85.418734][ T6135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.214'. [ 85.475543][ T6096] chnl_net:caif_netlink_parms(): no params data found [ 85.560540][ T6142] No such timeout policy "syz0" [ 85.595550][ T4617] Bluetooth: hci5: command tx timeout [ 85.654595][ T6142] netlink: 'syz.0.215': attribute type 58 has an invalid length. [ 85.680840][ T6142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.714194][ T6142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.933434][ T5866] veth0_vlan: entered promiscuous mode [ 85.950148][ T6096] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.964018][ T6096] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.980533][ T6096] bridge_slave_0: entered allmulticast mode [ 85.990605][ T6096] bridge_slave_0: entered promiscuous mode [ 86.084502][ T6096] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.103531][ T6096] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.115459][ T6096] bridge_slave_1: entered allmulticast mode [ 86.124557][ T6096] bridge_slave_1: entered promiscuous mode [ 86.217737][ T6096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.230426][ T6096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.241551][ T5866] veth1_vlan: entered promiscuous mode [ 86.364910][ T6096] team0: Port device team_slave_0 added [ 86.409187][ T6096] team0: Port device team_slave_1 added [ 86.476510][ T4617] Bluetooth: hci4: command tx timeout [ 86.493436][ T6166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.605491][ T12] tipc: Subscription rejected, illegal request [ 86.636144][ T6096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.643192][ T6096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.669776][ T6096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.685286][ T6096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.692238][ T6096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.719091][ T6096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.902057][ T6173] netlink: 'syz.3.224': attribute type 34 has an invalid length. [ 86.938242][ T6096] hsr_slave_0: entered promiscuous mode [ 86.944592][ T6096] hsr_slave_1: entered promiscuous mode [ 86.952120][ T6096] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.964031][ T6096] Cannot create hsr debugfs directory [ 86.973082][ T6180] netlink: 40 bytes leftover after parsing attributes in process `syz.2.225'. [ 86.986908][ T5866] veth0_macvtap: entered promiscuous mode [ 87.063016][ T5866] veth1_macvtap: entered promiscuous mode [ 87.101040][ T5866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.112427][ T5866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.123630][ T5866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.134821][ T5866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.144956][ T5866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.160936][ T5866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.170917][ T5866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.186660][ T5866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.199486][ T5866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.211733][ T5866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.224342][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.243833][ T5866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.262717][ T5866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.272624][ T5866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.287383][ T5866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.298273][ T5866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.311660][ T5866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.322222][ T5866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.334549][ T5866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.344475][ T5866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.355091][ T5866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.367566][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.403145][ T5866] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.424138][ T5866] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.433825][ T5866] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.442635][ T5866] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.596261][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 87.676098][ T6199] openvswitch: netlink: Missing key (keys=20040, expected=2000) [ 87.725863][ T6096] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.798416][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.808688][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.841470][ T6096] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.872193][ T6199] netlink: 'syz.3.230': attribute type 10 has an invalid length. [ 87.937084][ T6199] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 87.941750][ T6212] netlink: 12 bytes leftover after parsing attributes in process `syz.2.233'. [ 87.950913][ T6199] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 87.963946][ T6199] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 88.024650][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.035366][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.099968][ T6219] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 88.120332][ T6096] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.233376][ T6096] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.470048][ T6231] netlink: 'syz.4.139': attribute type 10 has an invalid length. [ 88.533926][ T6235] netlink: 132 bytes leftover after parsing attributes in process `syz.2.240'. [ 88.556091][ T6238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.241'. [ 88.556334][ T4617] Bluetooth: hci4: command tx timeout [ 88.593724][ T6238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.241'. [ 88.611237][ T6096] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.684681][ T6096] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.700259][ T6096] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.719045][ T6096] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.822157][ T6246] pim6reg1: entered promiscuous mode [ 88.847708][ T6246] pim6reg1: entered allmulticast mode [ 89.129415][ T6257] pim6reg1: entered allmulticast mode [ 89.227836][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 90.023389][ T6285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.256'. [ 90.135914][ T5229] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.146552][ T5229] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.155028][ T5229] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.173198][ T5229] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.182320][ T5229] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 90.190011][ T5229] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.366446][ T12] bridge_slave_1: left allmulticast mode [ 90.386204][ T12] bridge_slave_1: left promiscuous mode [ 90.406548][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.484819][ T12] bridge_slave_0: left allmulticast mode [ 90.501059][ T5229] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.512498][ T5229] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.520387][ T5229] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.522089][ T12] bridge_slave_0: left promiscuous mode [ 90.534267][ T5229] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.542106][ T5229] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 90.551506][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.560141][ T5229] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.633599][ T6313] netlink: 24 bytes leftover after parsing attributes in process `syz.3.262'. [ 90.753106][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.766587][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.778854][ T12] bond0 (unregistering): Released all slaves [ 91.815737][ T6349] trusted_key: syz.3.267 sent an empty control message without MSG_MORE. [ 91.966031][ T12] hsr_slave_0: left promiscuous mode [ 92.011127][ T12] hsr_slave_1: left promiscuous mode [ 92.056104][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.079773][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.116295][ T6358] netlink: 'syz.0.268': attribute type 11 has an invalid length. [ 92.127157][ T6358] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.268'. [ 92.245767][ T4617] Bluetooth: hci2: command tx timeout [ 92.322636][ T12] team0 (unregistering): Port device team_slave_1 removed [ 92.393420][ T12] team0 (unregistering): Port device team_slave_0 removed [ 92.635696][ T4617] Bluetooth: hci4: command tx timeout [ 92.817441][ T6378] netlink: 892 bytes leftover after parsing attributes in process `syz.4.272'. [ 92.834929][ T6381] Cannot find add_set index 5 as target [ 92.861375][ T6383] Cannot find add_set index 5 as target [ 93.001797][ T6289] chnl_net:caif_netlink_parms(): no params data found [ 93.420967][ T6399] netlink: 4 bytes leftover after parsing attributes in process `syz.4.276'. [ 93.480062][ T6399] veth0_macvtap: left promiscuous mode [ 93.520208][ T6416] netlink: 136 bytes leftover after parsing attributes in process `syz.0.278'. [ 93.523909][ T6415] Dead loop on virtual device ip6_vti0, fix it urgently! [ 93.810742][ T6289] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.828042][ T6289] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.850592][ T6289] bridge_slave_0: entered allmulticast mode [ 93.877362][ T6289] bridge_slave_0: entered promiscuous mode [ 93.930061][ T6307] chnl_net:caif_netlink_parms(): no params data found [ 93.968906][ T6289] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.983436][ T6289] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.994610][ T6289] bridge_slave_1: entered allmulticast mode [ 94.023662][ T6289] bridge_slave_1: entered promiscuous mode [ 94.030763][ T6435] netlink: 40 bytes leftover after parsing attributes in process `syz.0.285'. [ 94.207809][ T6289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.250195][ T6289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.315262][ T4617] Bluetooth: hci2: command tx timeout [ 94.478036][ T6289] team0: Port device team_slave_0 added [ 94.496988][ T29] audit: type=1107 audit(1724568492.736:2): pid=6456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ý‹)äs' [ 94.506391][ T6457] xt_CT: No such helper "snmp" [ 94.638929][ T6289] team0: Port device team_slave_1 added [ 94.725316][ T4617] Bluetooth: hci4: command tx timeout [ 94.742324][ T6307] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.753270][ T6307] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.769885][ T6307] bridge_slave_0: entered allmulticast mode [ 94.777725][ T6307] bridge_slave_0: entered promiscuous mode [ 94.787792][ T6307] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.795936][ T6307] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.804743][ T6307] bridge_slave_1: entered allmulticast mode [ 94.818930][ T6307] bridge_slave_1: entered promiscuous mode [ 94.842558][ T6469] netlink: 'syz.4.292': attribute type 5 has an invalid length. [ 94.931219][ T6289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.956774][ T6289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.034198][ T6289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.149203][ T6289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.183348][ T6289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.211386][ T6289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.266613][ T6307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.346528][ T6307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.384362][ T6289] hsr_slave_0: entered promiscuous mode [ 95.402841][ T6289] hsr_slave_1: entered promiscuous mode [ 95.414214][ T6289] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.424700][ T6289] Cannot create hsr debugfs directory [ 95.553949][ T6307] team0: Port device team_slave_0 added [ 95.622593][ T6510] netlink: 536 bytes leftover after parsing attributes in process `syz.0.303'. [ 95.668584][ T6307] team0: Port device team_slave_1 added [ 95.833250][ T6518] sctp: [Deprecated]: syz.3.304 (pid 6518) Use of int in max_burst socket option deprecated. [ 95.833250][ T6518] Use struct sctp_assoc_value instead [ 95.882758][ T6307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.896406][ T6307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.928476][ T6307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.947897][ T6521] sctp: [Deprecated]: syz.3.304 (pid 6521) Use of struct sctp_assoc_value in delayed_ack socket option. [ 95.947897][ T6521] Use struct sctp_sack_info instead [ 95.976747][ T6307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.983696][ T6307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.030007][ T6307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.269428][ T6307] hsr_slave_0: entered promiscuous mode [ 96.289199][ T6307] hsr_slave_1: entered promiscuous mode [ 96.327496][ T6307] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.342492][ T6307] Cannot create hsr debugfs directory [ 96.397430][ T4617] Bluetooth: hci2: command tx timeout [ 96.795353][ T4617] Bluetooth: hci4: command tx timeout [ 96.833365][ T6551] netlink: 'syz.0.310': attribute type 1 has an invalid length. [ 96.910629][ T6289] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.170949][ T6289] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.282216][ T6561] netlink: 4 bytes leftover after parsing attributes in process `syz.0.313'. [ 97.308912][ T6561] bond_slave_0: entered promiscuous mode [ 97.314840][ T6561] bond_slave_1: entered promiscuous mode [ 97.343402][ T6561] macvtap1: entered promiscuous mode [ 97.351010][ T6561] bond0: entered promiscuous mode [ 97.363112][ T6561] macvtap1: entered allmulticast mode [ 97.368714][ T6561] bond0: entered allmulticast mode [ 97.369974][ T6567] raw_sendmsg: syz.0.313 forgot to set AF_INET. Fix it! [ 97.373992][ T6561] bond_slave_0: entered allmulticast mode [ 97.388829][ T6561] bond_slave_1: entered allmulticast mode [ 97.396034][ T6561] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 97.517070][ T6289] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.552023][ T6564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.313'. [ 97.759474][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 97.826386][ T6289] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.865459][ T6574] netlink: 24 bytes leftover after parsing attributes in process `syz.0.316'. [ 97.932176][ T6578] netlink: 1328 bytes leftover after parsing attributes in process `syz.4.314'. [ 97.964344][ T6579] bridge0: port 3(macvlan2) entered blocking state [ 97.972353][ T6579] bridge0: port 3(macvlan2) entered disabled state [ 97.981201][ T6579] macvlan2: entered allmulticast mode [ 97.988866][ T6579] macvlan2: entered promiscuous mode [ 98.228275][ T6585] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 98.296690][ T6585] dccp_xmit_packet: Payload too large (65475) for featneg. [ 98.485811][ T4617] Bluetooth: hci2: command tx timeout [ 98.534391][ T6289] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 98.617394][ T6289] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 98.617768][ T6596] Bluetooth: hci3: invalid length 0, exp 1 for type 31 [ 98.666868][ T6598] Bluetooth: hci3: invalid length 0, exp 1 for type 31 [ 98.682350][ T6289] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 98.744845][ T6602] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 98.780259][ T6604] netlink: 16 bytes leftover after parsing attributes in process `syz.4.320'. [ 98.855676][ T6289] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 98.877491][ T4617] Bluetooth: hci4: command tx timeout [ 99.076066][ T6608] debugfs: Directory 'netdev:nicvf0' with parent 'phy3' already present! [ 99.368748][ T6624] tipc: Started in network mode [ 99.385234][ T6624] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 99.403735][ T6624] tipc: Enabled bearer , priority 10 [ 99.432458][ T6633] netlink: 28 bytes leftover after parsing attributes in process `syz.0.325'. [ 99.631873][ T6289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.709237][ T6289] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.743891][ T6307] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 99.763013][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.770197][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.784949][ T6307] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 99.804339][ T6307] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 99.840644][ T6639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.328'. [ 99.865055][ T6307] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 99.879149][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.886405][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.948153][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.340615][ T6307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.427040][ T6307] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.478072][ T2531] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.485343][ T2531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.525554][ T8] tipc: Node number set to 4269801488 [ 100.539111][ T6668] netlink: 12 bytes leftover after parsing attributes in process `syz.0.332'. [ 100.567869][ T2531] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.575511][ T2531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.579042][ T6668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.332'. [ 100.625461][ T6669] netlink: 24 bytes leftover after parsing attributes in process `syz.4.333'. [ 100.682666][ T6671] netlink: 12 bytes leftover after parsing attributes in process `syz.4.333'. [ 100.705495][ T6668] netlink: 256 bytes leftover after parsing attributes in process `syz.0.332'. [ 100.736065][ T6676] syz.3.334[6676] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.736300][ T6676] syz.3.334[6676] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.799872][ T6289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.023041][ T6289] veth0_vlan: entered promiscuous mode [ 101.064553][ T6289] veth1_vlan: entered promiscuous mode [ 101.098729][ T6687] netlink: 44 bytes leftover after parsing attributes in process `syz.3.336'. [ 101.218154][ T6289] veth0_macvtap: entered promiscuous mode [ 101.257474][ T6289] veth1_macvtap: entered promiscuous mode [ 101.339083][ T6289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.383887][ T6289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.424088][ T6289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.464535][ T6289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.507424][ T6289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.545777][ T6714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.548713][ T6289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.568571][ T6289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.595385][ T6289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.625453][ T6289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.685582][ T6289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.719059][ T6289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.742981][ T6289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.776345][ T6289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.794293][ T6712] ip6gretap0: entered promiscuous mode [ 101.823498][ T6712] ip6gretap0: left promiscuous mode [ 101.893175][ T6289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.904263][ T6289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.924690][ T6289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.940293][ T6289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.959018][ T6289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.971690][ T6289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.984003][ T6289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.994913][ T6289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.005424][ T6289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.016349][ T6289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.028598][ T6289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.039590][ T6289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.054518][ T6289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.069875][ T6729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.342'. [ 102.131583][ T6289] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.151574][ T6289] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.198759][ T6289] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.219898][ T6289] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.300036][ T6307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.619672][ T6762] netlink: 48 bytes leftover after parsing attributes in process `syz.3.347'. [ 102.637826][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.687559][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.738522][ T6307] veth0_vlan: entered promiscuous mode [ 102.765612][ T6762] netlink: 24 bytes leftover after parsing attributes in process `syz.3.347'. [ 102.832628][ T6764] netlink: 48 bytes leftover after parsing attributes in process `syz.3.347'. [ 102.876093][ T6765] netlink: 24 bytes leftover after parsing attributes in process `syz.3.347'. [ 102.973597][ T6307] veth1_vlan: entered promiscuous mode [ 103.013388][ T2531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.057752][ T2531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.151581][ T6307] veth0_macvtap: entered promiscuous mode [ 103.219197][ T6307] veth1_macvtap: entered promiscuous mode [ 103.341254][ T6307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.379912][ T6307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.400132][ T6307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.434914][ T6307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.457495][ T6307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.479456][ T6307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.496174][ T6307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.522889][ T6307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.546135][ T6307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.567049][ T6307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.584317][ T6307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.598815][ T6808] netlink: 56 bytes leftover after parsing attributes in process `syz.2.357'. [ 103.618455][ T6307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.638758][ T6307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.653713][ T6307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.674584][ T6307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.700051][ T6795] netlink: 'syz.0.355': attribute type 10 has an invalid length. [ 103.769651][ T6795] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 103.787253][ T6795] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 103.796719][ T6795] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 103.821532][ T6804] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.830666][ T6804] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.839646][ T6804] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.848416][ T6804] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.875902][ T6804] vxlan0: entered promiscuous mode [ 103.973123][ T6813] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.981108][ T6813] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.026879][ T6307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.048792][ T6307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.063689][ T6307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.108649][ T6307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.143753][ T6307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.178299][ T6307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.196806][ T6307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.229447][ T6307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.249435][ T6307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.280768][ T6307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.300985][ T6307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.322867][ T6307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.338829][ T6307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.355278][ T6307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.387169][ T6307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.400076][ T6307] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.435263][ T6307] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.447632][ T6307] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.477587][ T6307] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.802455][ T6851] veth1_macvtap: left promiscuous mode [ 104.816385][ T6851] macsec0: entered allmulticast mode [ 105.057434][ T6860] netlink: 'syz.4.364': attribute type 10 has an invalid length. [ 105.132651][ T6860] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.153491][ T6860] bond0: (slave team0): Enslaving as an active interface with an up link [ 105.228356][ T6860] netlink: 'syz.4.364': attribute type 10 has an invalid length. [ 105.298858][ T6860] bond0: (slave team0): Releasing backup interface [ 105.381958][ T6860] bridge0: port 3(team0) entered blocking state [ 105.412450][ T6860] bridge0: port 3(team0) entered disabled state [ 105.437496][ T6860] team0: entered allmulticast mode [ 105.469945][ T6860] team_slave_0: entered allmulticast mode [ 105.487870][ T6860] team_slave_1: entered allmulticast mode [ 105.516344][ T6860] team0: entered promiscuous mode [ 105.541771][ T6860] team_slave_0: entered promiscuous mode [ 105.556392][ T6860] team_slave_1: entered promiscuous mode [ 105.613329][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.634600][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.855925][ T2531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.917171][ T2531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.037983][ T6900] netlink: 'syz.4.371': attribute type 5 has an invalid length. [ 106.062998][ T6900] __nla_validate_parse: 7 callbacks suppressed [ 106.063014][ T6900] netlink: 4 bytes leftover after parsing attributes in process `syz.4.371'. [ 106.125510][ T6900] netlink: 'syz.4.371': attribute type 5 has an invalid length. [ 106.157172][ T6900] netlink: 4 bytes leftover after parsing attributes in process `syz.4.371'. [ 106.258364][ T6909] openvswitch: netlink: Key type 12291 is out of range max 32 [ 106.325628][ T6908] openvswitch: netlink: Key type 12291 is out of range max 32 [ 108.778200][ T6926] team0: Device is already in use. [ 108.821587][ T6930] bridge0: port 3(gretap0) entered blocking state [ 108.845603][ T6930] bridge0: port 3(gretap0) entered disabled state [ 108.861244][ T6930] gretap0: entered allmulticast mode [ 108.877641][ T6930] gretap0: entered promiscuous mode [ 108.893979][ T6930] bridge0: port 3(gretap0) entered blocking state [ 108.901167][ T6930] bridge0: port 3(gretap0) entered forwarding state [ 108.924985][ T6932] gretap0: left allmulticast mode [ 108.930220][ T6932] gretap0: left promiscuous mode [ 108.939916][ T6932] bridge0: port 3(gretap0) entered disabled state [ 109.601983][ T6961] netlink: 16 bytes leftover after parsing attributes in process `syz.4.384'. [ 109.685600][ T6965] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0 [ 109.874785][ T6971] netlink: 12 bytes leftover after parsing attributes in process `syz.3.387'. [ 110.005071][ T6971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.387'. [ 110.082256][ T6971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.387'. [ 110.116373][ T6971] bridge_slave_0: left allmulticast mode [ 110.122387][ T6971] bridge_slave_0: left promiscuous mode [ 110.142506][ T6971] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.594649][ T6988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.392'. [ 110.659945][ T6988] netlink: 224 bytes leftover after parsing attributes in process `syz.3.392'. [ 111.118176][ T7007] lo speed is unknown, defaulting to 1000 [ 111.134296][ T7007] lo speed is unknown, defaulting to 1000 [ 111.160061][ T7007] lo speed is unknown, defaulting to 1000 [ 111.194492][ T7007] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 111.196211][ T7012] rdma_op ffff88807ec839f0 conn xmit_rdma 0000000000000000 [ 111.261789][ T7007] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 111.342352][ T7007] lo speed is unknown, defaulting to 1000 [ 111.466352][ T7014] syzkaller0: entered promiscuous mode [ 111.483156][ T7014] syzkaller0: entered allmulticast mode [ 111.495019][ T7007] lo speed is unknown, defaulting to 1000 [ 111.522570][ T7007] lo speed is unknown, defaulting to 1000 [ 111.530512][ T7007] lo speed is unknown, defaulting to 1000 [ 111.538354][ T7007] lo speed is unknown, defaulting to 1000 [ 111.548638][ T7007] lo speed is unknown, defaulting to 1000 [ 111.567370][ T7007] lo speed is unknown, defaulting to 1000 [ 111.574787][ T7007] lo speed is unknown, defaulting to 1000 [ 111.688053][ T7028] netlink: 172 bytes leftover after parsing attributes in process `syz.2.402'. [ 111.784880][ T7033] netlink: 12 bytes leftover after parsing attributes in process `syz.1.404'. [ 111.826226][ T7033] team_slave_0: entered allmulticast mode [ 111.938768][ T7033] team_slave_0 (unregistering): left allmulticast mode [ 111.965575][ T7033] team0: Port device team_slave_0 removed [ 112.041229][ T7037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.406'. [ 112.057421][ T7041] pim6reg: entered allmulticast mode [ 112.541379][ T7065] Bluetooth: MGMT ver 1.23 [ 113.724203][ T7072] netlink: 24 bytes leftover after parsing attributes in process `syz.3.416'. [ 113.831006][ T7081] netlink: 'syz.2.417': attribute type 10 has an invalid length. [ 113.922685][ T7081] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 113.960862][ T7087] netlink: 12 bytes leftover after parsing attributes in process `syz.0.419'. [ 114.342602][ T7110] netlink: 36 bytes leftover after parsing attributes in process `syz.3.425'. [ 114.367602][ T7110] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 114.375273][ T7110] IPv6: NLM_F_CREATE should be set when creating new route [ 114.382528][ T7110] IPv6: NLM_F_CREATE should be set when creating new route [ 114.396302][ T7110] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.425'. [ 114.545761][ T7112] xt_bpf: check failed: parse error [ 114.780950][ T7124] netlink: 84 bytes leftover after parsing attributes in process `syz.0.429'. [ 114.985297][ T7135] netlink: 132 bytes leftover after parsing attributes in process `syz.4.431'. [ 115.143485][ T7107] lo speed is unknown, defaulting to 1000 [ 115.337497][ T7149] bridge0: entered promiscuous mode [ 115.344305][ T7148] bridge0: left promiscuous mode [ 115.648689][ T7163] netlink: 80 bytes leftover after parsing attributes in process `syz.2.440'. [ 115.678809][ T7163] netlink: 'syz.2.440': attribute type 1 has an invalid length. [ 115.701234][ T7163] netlink: 'syz.2.440': attribute type 2 has an invalid length. [ 115.722966][ T7163] netlink: 'syz.2.440': attribute type 2 has an invalid length. [ 115.761876][ T7136] lo speed is unknown, defaulting to 1000 [ 115.763098][ T7163] netlink: 'syz.2.440': attribute type 2 has an invalid length. [ 115.837261][ T7167] bond0: entered promiscuous mode [ 115.875289][ T7167] bond_slave_0: entered promiscuous mode [ 115.882334][ T7167] bond_slave_1: entered promiscuous mode [ 115.898472][ T7167] syz_tun: entered promiscuous mode [ 116.127284][ T7163] bond0: (slave syz_tun): Releasing backup interface [ 116.153244][ T7163] syz_tun: left promiscuous mode [ 116.286668][ T7163] bridge_slave_0: left allmulticast mode [ 116.292359][ T7163] bridge_slave_0: left promiscuous mode [ 116.306270][ T7163] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.328492][ T7163] bridge_slave_1: left allmulticast mode [ 116.334189][ T7163] bridge_slave_1: left promiscuous mode [ 116.340740][ T7163] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.360139][ T7163] bond0: (slave bond_slave_0): Releasing backup interface [ 116.368449][ T7163] bond_slave_0: left promiscuous mode [ 116.381087][ T7163] bond0: (slave bond_slave_1): Releasing backup interface [ 116.394475][ T7163] bond_slave_1: left promiscuous mode [ 116.464167][ T7163] team0: Port device team_slave_0 removed [ 116.492370][ T7163] team0: Port device team_slave_1 removed [ 116.505040][ T7163] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.518151][ T7163] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.534536][ T7163] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.542656][ T7163] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.569056][ T7167] bond0: left promiscuous mode [ 116.574829][ T7167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.583844][ T7167] team0: Port device bond0 added [ 116.754808][ T7186] __nla_validate_parse: 1 callbacks suppressed [ 116.754826][ T7186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.446'. [ 117.015624][ T7196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.449'. [ 117.036651][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 117.416671][ T7211] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.454'. [ 117.717694][ T7228] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 118.282204][ T7250] netlink: 40 bytes leftover after parsing attributes in process `syz.0.465'. [ 118.910966][ T7263] netlink: 'syz.4.467': attribute type 3 has an invalid length. [ 118.935217][ T7263] netlink: 'syz.4.467': attribute type 1 has an invalid length. [ 118.942976][ T7263] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.467'. [ 118.997735][ T7263] can: request_module (can-proto-0) failed. [ 119.632038][ T7250] dvmrp0: entered allmulticast mode [ 120.073404][ T7286] No such timeout policy "syz0" [ 120.242738][ T7293] netlink: 48 bytes leftover after parsing attributes in process `syz.3.476'. [ 120.268991][ T7294] x_tables: eb_tables: nflog.0 target: invalid size 80 (kernel) != (user) 0 [ 120.285262][ T7293] netlink: 48 bytes leftover after parsing attributes in process `syz.3.476'. [ 120.365478][ T7301] netlink: 16 bytes leftover after parsing attributes in process `syz.2.478'. [ 120.655647][ T7313] netlink: 28 bytes leftover after parsing attributes in process `syz.0.480'. [ 120.672524][ T7315] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.481'. [ 120.859904][ T7323] netlink: 'syz.2.483': attribute type 29 has an invalid length. [ 121.173046][ T7313] lo speed is unknown, defaulting to 1000 [ 121.759369][ T7320] lo speed is unknown, defaulting to 1000 [ 121.768494][ T7351] __nla_validate_parse: 7 callbacks suppressed [ 121.768510][ T7351] netlink: 12 bytes leftover after parsing attributes in process `syz.2.494'. [ 122.271127][ T7370] netlink: 'syz.4.499': attribute type 1 has an invalid length. [ 122.298533][ T7370] netlink: 32 bytes leftover after parsing attributes in process `syz.4.499'. [ 122.313771][ T7372] macvlan3: entered promiscuous mode [ 122.321916][ T7372] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 122.333759][ T7372] team0: Port device macvlan3 added [ 122.513358][ T7377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.503'. [ 122.605350][ T7378] netlink: 4 bytes leftover after parsing attributes in process `syz.0.503'. [ 123.142168][ T7405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.510'. [ 123.232413][ T7411] netlink: 16 bytes leftover after parsing attributes in process `syz.3.513'. [ 123.492620][ T7412] netlink: 48 bytes leftover after parsing attributes in process `syz.3.513'. [ 123.809633][ T7426] netlink: 4 bytes leftover after parsing attributes in process `syz.3.518'. [ 123.813682][ T7430] Bluetooth: hci3: service_discovery: too big uuid_count value 65535 [ 123.892709][ T7432] netlink: 'syz.0.520': attribute type 21 has an invalid length. [ 124.244387][ T7457] netlink: 20 bytes leftover after parsing attributes in process `syz.3.524'. [ 124.294373][ T7460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.528'. [ 124.339822][ T7461] xfrm1: entered allmulticast mode [ 125.090973][ T7515] netlink: 'syz.3.541': attribute type 3 has an invalid length. [ 125.320796][ T7526] bridge0: port 3(vlan2) entered blocking state [ 125.361947][ T7526] bridge0: port 3(vlan2) entered disabled state [ 125.399470][ T7526] vlan2: entered allmulticast mode [ 125.408369][ T7526] vlan2: left allmulticast mode [ 125.796941][ T7547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.124795][ T7578] tipc: Enabling of bearer rejected, failed to enable media [ 126.666280][ T7561] lo speed is unknown, defaulting to 1000 [ 127.002380][ T7620] vxcan0: entered promiscuous mode [ 127.019428][ T7620] vlan2: entered promiscuous mode [ 127.039402][ T7620] vxcan0: left promiscuous mode [ 127.135749][ T7561] __nla_validate_parse: 7 callbacks suppressed [ 127.135770][ T7561] netlink: 16 bytes leftover after parsing attributes in process `syz.2.553'. [ 127.201210][ T7624] netlink: 48 bytes leftover after parsing attributes in process `syz.0.566'. [ 127.531397][ T7634] netlink: 'syz.4.568': attribute type 4 has an invalid length. [ 127.705314][ T7649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.572'. [ 127.871509][ T7656] syz.0.573[7656] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.871741][ T7656] syz.0.573[7656] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.990472][ T7637] lo speed is unknown, defaulting to 1000 [ 128.220914][ T7675] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.578'. [ 128.266514][ T7675] netlink: 183228 bytes leftover after parsing attributes in process `syz.0.578'. [ 128.464117][ T7686] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.581'. [ 128.480073][ T7686] openvswitch: netlink: ERSPAN option length err (len 3060, max 255). [ 128.527209][ T7684] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 128.638738][ T7691] sit0: entered promiscuous mode [ 128.660661][ T7691] netlink: 'syz.4.584': attribute type 1 has an invalid length. [ 128.677304][ T7693] netlink: 44 bytes leftover after parsing attributes in process `syz.0.585'. [ 128.707524][ T7691] netlink: 1 bytes leftover after parsing attributes in process `syz.4.584'. [ 128.779918][ T7697] netlink: 9412 bytes leftover after parsing attributes in process `syz.2.586'. [ 128.874255][ T7697] Cannot find add_set index 0 as target [ 128.956234][ T7704] netlink: 104 bytes leftover after parsing attributes in process `syz.0.588'. [ 129.132460][ T7710] caif0: Master is either lo or non-ether device [ 129.211100][ T7712] pim6reg: entered allmulticast mode [ 129.228269][ T7712] pim6reg: left allmulticast mode [ 129.602917][ T7733] team0: Port device macvlan1 added [ 129.676878][ T7740] team_slave_0: entered promiscuous mode [ 129.682916][ T7740] team_slave_1: entered promiscuous mode [ 129.753702][ T7740] vlan2: entered promiscuous mode [ 129.769137][ T7740] team0: entered promiscuous mode [ 129.789917][ T7740] macvlan1: entered promiscuous mode [ 129.805606][ T7740] vlan2: entered allmulticast mode [ 129.826311][ T7740] team0: entered allmulticast mode [ 129.846133][ T7740] team_slave_0: entered allmulticast mode [ 129.859373][ T7740] team_slave_1: entered allmulticast mode [ 129.866560][ T7740] macvlan3: entered allmulticast mode [ 129.872073][ T7740] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 129.879663][ T7740] macvlan1: entered allmulticast mode [ 129.885680][ T7740] veth1_vlan: entered allmulticast mode [ 129.894121][ T7740] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 129.906279][ T7718] lo speed is unknown, defaulting to 1000 [ 130.114249][ T7757] pimreg3: entered allmulticast mode [ 130.283268][ T7763] netlink: 'syz.0.604': attribute type 1 has an invalid length. [ 130.313198][ T7763] netlink: 'syz.0.604': attribute type 2 has an invalid length. [ 130.337549][ T7774] xt_l2tp: v2 doesn't support IP mode [ 130.337784][ T7763] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 130.757035][ T7785] batadv0: entered promiscuous mode [ 130.763567][ T7785] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 130.873817][ T7796] batadv0: left promiscuous mode [ 131.060679][ T7806] netlink: 'syz.1.615': attribute type 75 has an invalid length. [ 131.589859][ T7824] sctp: [Deprecated]: syz.2.619 (pid 7824) Use of struct sctp_assoc_value in delayed_ack socket option. [ 131.589859][ T7824] Use struct sctp_sack_info instead [ 132.166416][ T7851] sctp: [Deprecated]: syz.3.628 (pid 7851) Use of int in max_burst socket option. [ 132.166416][ T7851] Use struct sctp_assoc_value instead [ 132.200793][ T7853] netlink: 'syz.4.629': attribute type 1 has an invalid length. [ 132.218626][ T7853] netlink: 'syz.4.629': attribute type 2 has an invalid length. [ 132.310634][ T7859] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 132.716292][ T7871] netlink: 'syz.3.634': attribute type 11 has an invalid length. [ 132.962411][ T7895] syz.0.637[7895] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.962565][ T7895] syz.0.637[7895] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 133.039119][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.093841][ T7906] syz.0.637[7906] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 133.093987][ T7906] syz.0.637[7906] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 133.410169][ T7917] __nla_validate_parse: 11 callbacks suppressed [ 133.410188][ T7917] netlink: 2 bytes leftover after parsing attributes in process `syz.2.641'. [ 133.561382][ T7926] IPv6: NLM_F_CREATE should be specified when creating new route [ 133.582092][ T7926] netlink: 1 bytes leftover after parsing attributes in process `syz.4.645'. [ 133.772536][ T7932] netlink: 4 bytes leftover after parsing attributes in process `syz.4.648'. [ 133.850466][ T7932] ªªªªªª: renamed from syzkaller0 [ 133.880342][ T7932] netlink: 36 bytes leftover after parsing attributes in process `syz.4.648'. [ 134.527368][ T7966] IPVS: Error connecting to the multicast addr [ 134.559335][ T7967] netlink: 'syz.3.658': attribute type 1 has an invalid length. [ 134.620453][ T7969] tipc: Failed to remove unknown binding: 66,1,1/0:758941578/758941580 [ 134.655737][ T7969] tipc: Failed to remove unknown binding: 66,1,1/0:758941578/758941580 [ 134.687364][ T7969] tipc: Failed to remove unknown binding: 66,1,1/0:758941578/758941580 [ 134.951825][ T7987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.664'. [ 134.975229][ T7987] netlink: 'syz.1.664': attribute type 7 has an invalid length. [ 134.994343][ T7987] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.003193][ T7987] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.012668][ T7987] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.021901][ T7987] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.034925][ T7987] vxlan0: entered promiscuous mode [ 135.633988][ T7999] netlink: 24 bytes leftover after parsing attributes in process `syz.2.667'. [ 136.035082][ T8017] tipc: Enabling of bearer rejected, failed to enable media [ 136.133052][ T8019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.671'. [ 136.179291][ T8020] netlink: 40 bytes leftover after parsing attributes in process `syz.3.671'. [ 136.215990][ T8019] netlink: 'syz.3.671': attribute type 10 has an invalid length. [ 136.296783][ T8019] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 136.304257][ T8019] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 136.333262][ T8019] team0: Failed to send options change via netlink (err -105) [ 136.363234][ T8019] team0: Port device netdevsim0 added [ 136.385640][ T8020] netlink: 'syz.3.671': attribute type 10 has an invalid length. [ 136.406456][ T8020] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 136.535685][ T8033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.911110][ T8061] netlink: 32 bytes leftover after parsing attributes in process `syz.2.680'. [ 137.153337][ T8063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.682'. [ 137.192384][ T8065] netlink: 'syz.3.681': attribute type 2 has an invalid length. [ 137.504561][ T8083] x_tables: ip6_tables: SNPT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING [ 138.223172][ T8116] netlink: 'syz.0.693': attribute type 11 has an invalid length. [ 138.584645][ T8128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.735594][ T8135] __nla_validate_parse: 6 callbacks suppressed [ 138.735615][ T8135] netlink: 40 bytes leftover after parsing attributes in process `syz.4.699'. [ 139.641584][ T8160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.707'. [ 168.225497][ T5229] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 168.245780][ T5229] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 168.256857][ T5229] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 168.270857][ T5229] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 168.278773][ T5229] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 168.305439][ T5229] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 168.394621][ T5226] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 168.404911][ T5226] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 168.443968][ T5226] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 168.453925][ T5226] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 168.469147][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 168.478068][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 168.486263][ T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 168.494690][ T54] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 168.496829][ T8178] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 168.503804][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 168.516316][ T54] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 168.516415][ T8178] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 168.523477][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 168.532201][ T8178] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 168.546907][ T8178] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 168.566975][ T8178] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 168.574923][ T8178] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 168.582852][ T8178] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 168.690920][ T8178] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 168.726848][ T8178] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 168.739534][ T8178] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 168.754286][ T8178] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 168.764117][ T8178] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 168.773945][ T8178] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 168.928350][ T136] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.957335][ T8169] lo speed is unknown, defaulting to 1000 [ 169.068224][ T136] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.127620][ T136] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.181021][ T8173] lo speed is unknown, defaulting to 1000 [ 169.211138][ T136] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.428947][ T8169] chnl_net:caif_netlink_parms(): no params data found [ 169.452443][ T8172] lo speed is unknown, defaulting to 1000 [ 170.109174][ T136] team0: Port device bond0 removed [ 170.118224][ T136] bond0 (unregistering): Released all slaves [ 170.153092][ T8175] lo speed is unknown, defaulting to 1000 [ 170.414965][ T8183] lo speed is unknown, defaulting to 1000 [ 170.479035][ T5226] Bluetooth: hci0: command tx timeout [ 170.490236][ T8169] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.505487][ T8169] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.512725][ T8169] bridge_slave_0: entered allmulticast mode [ 170.531039][ T8169] bridge_slave_0: entered promiscuous mode [ 170.545052][ T8169] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.565395][ T8169] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.572593][ T8169] bridge_slave_1: entered allmulticast mode [ 170.594148][ T8169] bridge_slave_1: entered promiscuous mode [ 170.635719][ T5226] Bluetooth: hci2: command tx timeout [ 170.635744][ T5229] Bluetooth: hci7: command tx timeout [ 170.636360][ T8178] Bluetooth: hci6: command tx timeout [ 170.875416][ T8178] Bluetooth: hci3: command tx timeout [ 171.021452][ T8169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.096025][ T8169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.105339][ T8173] chnl_net:caif_netlink_parms(): no params data found [ 171.183096][ T136] hsr_slave_0: left promiscuous mode [ 171.189117][ T136] hsr_slave_1: left promiscuous mode [ 171.209270][ T136] veth1_macvtap: left promiscuous mode [ 171.215010][ T136] veth0_macvtap: left promiscuous mode [ 171.220764][ T136] veth1_vlan: left promiscuous mode [ 171.226860][ T136] veth0_vlan: left promiscuous mode [ 172.060029][ T8169] team0: Port device team_slave_0 added [ 172.136501][ T8169] team0: Port device team_slave_1 added [ 172.358620][ T8172] chnl_net:caif_netlink_parms(): no params data found [ 172.375887][ T8169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.382854][ T8169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.422138][ T8169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.529185][ T8175] chnl_net:caif_netlink_parms(): no params data found [ 172.548622][ T8169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.557817][ T8178] Bluetooth: hci0: command tx timeout [ 172.563621][ T8169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.592688][ T8169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.604233][ T8173] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.611553][ T8173] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.619014][ T8173] bridge_slave_0: entered allmulticast mode [ 172.628081][ T8173] bridge_slave_0: entered promiscuous mode [ 172.636675][ T8173] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.645306][ T8173] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.652557][ T8173] bridge_slave_1: entered allmulticast mode [ 172.666788][ T8173] bridge_slave_1: entered promiscuous mode [ 172.716893][ T5226] Bluetooth: hci7: command tx timeout [ 172.717403][ T5229] Bluetooth: hci2: command tx timeout [ 172.722602][ T8178] Bluetooth: hci6: command tx timeout [ 172.871368][ T8183] chnl_net:caif_netlink_parms(): no params data found [ 172.902293][ T8173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.936374][ T8169] hsr_slave_0: entered promiscuous mode [ 172.942623][ T8169] hsr_slave_1: entered promiscuous mode [ 172.949294][ T8169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 172.957038][ T8178] Bluetooth: hci3: command tx timeout [ 172.960409][ T8169] Cannot create hsr debugfs directory [ 173.009868][ T8173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.139113][ T8173] team0: Port device team_slave_0 added [ 173.151537][ T8173] team0: Port device team_slave_1 added [ 173.164023][ T8172] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.172036][ T8172] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.179403][ T8172] bridge_slave_0: entered allmulticast mode [ 173.186680][ T8172] bridge_slave_0: entered promiscuous mode [ 173.263993][ T8173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.271558][ T8173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.297779][ T8173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.310802][ T8172] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.318042][ T8172] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.325271][ T8172] bridge_slave_1: entered allmulticast mode [ 173.332212][ T8172] bridge_slave_1: entered promiscuous mode [ 173.343974][ T8175] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.351225][ T8175] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.361836][ T8175] bridge_slave_0: entered allmulticast mode [ 173.373020][ T8175] bridge_slave_0: entered promiscuous mode [ 173.407298][ T8173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.414257][ T8173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.441758][ T8173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.476946][ T8175] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.484140][ T8175] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.491416][ T8175] bridge_slave_1: entered allmulticast mode [ 173.498835][ T8175] bridge_slave_1: entered promiscuous mode [ 173.582395][ T8183] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.590270][ T8183] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.598108][ T8183] bridge_slave_0: entered allmulticast mode [ 173.605936][ T8183] bridge_slave_0: entered promiscuous mode [ 173.656736][ T8172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.677006][ T8172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.700705][ T8175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.713881][ T8175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.726591][ T8183] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.734124][ T8183] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.747678][ T8183] bridge_slave_1: entered allmulticast mode [ 173.772223][ T8183] bridge_slave_1: entered promiscuous mode [ 173.846595][ T8173] hsr_slave_0: entered promiscuous mode [ 173.866889][ T8173] hsr_slave_1: entered promiscuous mode [ 173.875023][ T8173] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 173.898812][ T8173] Cannot create hsr debugfs directory [ 173.996502][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 174.047611][ T136] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.073165][ T136] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.130403][ T8183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.198822][ T8172] team0: Port device team_slave_0 added [ 174.208808][ T8175] team0: Port device team_slave_0 added [ 174.217116][ T8172] team0: Port device team_slave_1 added [ 174.248943][ T136] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.260390][ T136] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.292315][ T8183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.351169][ T8169] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.396737][ T8175] team0: Port device team_slave_1 added [ 174.454261][ T136] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.464708][ T136] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.552365][ T8169] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.571038][ T8172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.578415][ T8172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.604868][ T8172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.618082][ T8172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.625037][ T8172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.651858][ T8172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.662388][ T8178] Bluetooth: hci0: command tx timeout [ 174.694120][ T8183] team0: Port device team_slave_0 added [ 174.720179][ T136] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.730765][ T136] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.745458][ T8175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.752439][ T8175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.779185][ T8175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.795687][ T8178] Bluetooth: hci2: command tx timeout [ 174.800556][ T5229] Bluetooth: hci6: command tx timeout [ 174.801082][ T5226] Bluetooth: hci7: command tx timeout [ 174.832176][ T8169] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.865039][ T8183] team0: Port device team_slave_1 added [ 174.912546][ T8175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.919905][ T8175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.947169][ T8175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.008801][ T8172] hsr_slave_0: entered promiscuous mode [ 175.028662][ T8172] hsr_slave_1: entered promiscuous mode [ 175.036383][ T5226] Bluetooth: hci3: command tx timeout [ 175.051163][ T8172] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.065250][ T8172] Cannot create hsr debugfs directory [ 175.105782][ T8169] bond0: (slave netdevsim0): Releasing backup interface [ 175.126091][ T8169] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 175.147620][ T8169] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.192443][ T8183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.202834][ T8183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.245263][ T8183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.268711][ T8183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.285205][ T8183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.316271][ T8183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.634040][ T8183] hsr_slave_0: entered promiscuous mode [ 175.641490][ T8183] hsr_slave_1: entered promiscuous mode [ 175.649806][ T8183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.657524][ T8183] Cannot create hsr debugfs directory [ 175.718924][ T136] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.729486][ T136] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.768071][ T8175] hsr_slave_0: entered promiscuous mode [ 175.774783][ T8175] hsr_slave_1: entered promiscuous mode [ 175.786261][ T8175] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.793856][ T8175] Cannot create hsr debugfs directory [ 175.849230][ T136] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.859723][ T136] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.943297][ T8169] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 175.967681][ T136] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.978077][ T136] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.032640][ T8169] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 176.043119][ T8169] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 176.069235][ T8169] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 176.099234][ T136] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 176.110833][ T136] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode [ 176.128179][ T136] team0: Port device netdevsim0 removed [ 176.137369][ T136] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.147804][ T136] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.388791][ T136] bridge_slave_1: left allmulticast mode [ 176.394462][ T136] bridge_slave_1: left promiscuous mode [ 176.409991][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.431250][ T136] bridge_slave_0: left allmulticast mode [ 176.437256][ T136] bridge_slave_0: left promiscuous mode [ 176.442911][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.715618][ T5226] Bluetooth: hci0: command tx timeout [ 176.875525][ T5226] Bluetooth: hci6: command tx timeout [ 176.880970][ T5226] Bluetooth: hci7: command tx timeout [ 176.886530][ T8178] Bluetooth: hci2: command tx timeout [ 176.982309][ T136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.994154][ T136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.004460][ T136] bond0 (unregistering): Released all slaves [ 177.094810][ T136] bond0 (unregistering): left allmulticast mode [ 177.101511][ T136] bond_slave_0: left allmulticast mode [ 177.107099][ T136] bond_slave_1: left allmulticast mode [ 177.112565][ T136] team0: left allmulticast mode [ 177.117663][ T8178] Bluetooth: hci3: command tx timeout [ 177.119722][ T136] team_slave_0: left allmulticast mode [ 177.129299][ T136] team_slave_1: left allmulticast mode [ 177.136591][ T136] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 177.144663][ T136] bond0 (unregistering): left promiscuous mode [ 177.151064][ T136] bond_slave_0: left promiscuous mode [ 177.156821][ T136] bond_slave_1: left promiscuous mode [ 177.162280][ T136] team0: left promiscuous mode [ 177.167126][ T136] team_slave_0: left promiscuous mode [ 177.173431][ T136] team_slave_1: left promiscuous mode [ 177.179194][ T136] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 177.205385][ T136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.223501][ T136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.240606][ T136] bond0 (unregistering): (slave team0): Releasing backup interface [ 177.250166][ T136] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 177.267465][ T136] bond0 (unregistering): Released all slaves [ 177.381419][ T136] tipc: Disabling bearer [ 177.387615][ T136] tipc: Left network mode [ 177.559574][ T8169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.691315][ T8169] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.761920][ T8100] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.769114][ T8100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.842577][ T8100] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.849751][ T8100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.097010][ T8173] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 178.143100][ T8173] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 178.157357][ T8173] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 178.215487][ T8173] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 178.589630][ T8169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.780002][ T8173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.815220][ T136] hsr_slave_0: left promiscuous mode [ 178.839968][ T136] hsr_slave_1: left promiscuous mode [ 178.856339][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.863931][ T136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.886758][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.894198][ T136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.936874][ T136] hsr_slave_0: left promiscuous mode [ 178.946489][ T136] hsr_slave_1: left promiscuous mode [ 178.965497][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.974155][ T136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.996249][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.003686][ T136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.057145][ T136] veth1_macvtap: left promiscuous mode [ 179.062707][ T136] veth0_macvtap: left promiscuous mode [ 179.069642][ T136] veth1_vlan: left promiscuous mode [ 179.074994][ T136] veth0_vlan: left promiscuous mode [ 179.086041][ T136] veth1_macvtap: left promiscuous mode [ 179.091593][ T136] veth0_macvtap: left promiscuous mode [ 179.097533][ T136] veth1_vlan: left promiscuous mode [ 179.102860][ T136] veth0_vlan: left promiscuous mode [ 179.278918][ T136] infiniband syz1: set down [ 179.370636][ T136] pimreg3 (unregistering): left allmulticast mode [ 179.399340][ T136] pim6reg (unregistering): left allmulticast mode [ 179.713056][ T136] team0 (unregistering): Port device team_slave_1 removed [ 180.233574][ T52] smc: removing ib device syz1 [ 180.411552][ T136] team0 (unregistering): Port device team_slave_1 removed [ 180.450338][ T136] team0 (unregistering): Port device team_slave_0 removed [ 180.800759][ T9] infiniband syz1: ib_query_port failed (-19) [ 180.811587][ T5269] lo speed is unknown, defaulting to 1000 [ 181.067920][ T8172] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 181.088698][ T8172] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 181.196389][ T5226] Bluetooth: hci1: command 0x0406 tx timeout [ 181.386921][ T8172] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 181.423965][ T8172] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 181.722817][ T8173] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.204348][ T8169] veth0_vlan: entered promiscuous mode [ 182.353392][ T8101] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.360548][ T8101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.533295][ T8183] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.577268][ T8101] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.584414][ T8101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.673154][ T8169] veth1_vlan: entered promiscuous mode [ 182.799119][ T8183] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.950648][ T8183] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.989642][ T8172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.033134][ T8183] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.097402][ T8172] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.116988][ T8100] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.124136][ T8100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.137767][ T8169] veth0_macvtap: entered promiscuous mode [ 183.149580][ T8169] veth1_macvtap: entered promiscuous mode [ 183.208962][ T8100] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.216126][ T8100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.292317][ T8169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.306913][ T8169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.317338][ T8169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.328198][ T8169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.339610][ T8169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.350147][ T8169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.360232][ T8169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.370777][ T8169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.382056][ T8169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.392629][ T8169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.404627][ T8169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.427483][ T8172] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 183.438401][ T8172] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 183.519608][ T8169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.551064][ T8169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.562134][ T8169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.572802][ T8169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.584045][ T8169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.595238][ T8169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.606225][ T8169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.616752][ T8169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.637446][ T8169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.648241][ T8169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.661471][ T8169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.703217][ T8169] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.725275][ T8169] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.733997][ T8169] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.765481][ T8169] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.824867][ T8183] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 183.850765][ T8173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.860515][ T8183] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 183.871487][ T8183] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 183.881275][ T8183] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 183.907065][ T8172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.001388][ T8175] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 184.040834][ T8175] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 184.054961][ T8175] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 184.109912][ T8175] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 184.169237][ T134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.179049][ T134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.222973][ T8173] veth0_vlan: entered promiscuous mode [ 184.262712][ T8172] veth0_vlan: entered promiscuous mode [ 184.310240][ T8172] veth1_vlan: entered promiscuous mode [ 184.325860][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.333761][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.334300][ T8173] veth1_vlan: entered promiscuous mode [ 184.494273][ T8172] veth0_macvtap: entered promiscuous mode [ 184.520666][ T8183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.542853][ T8173] veth0_macvtap: entered promiscuous mode [ 184.563833][ T8172] veth1_macvtap: entered promiscuous mode [ 184.596678][ T8173] veth1_macvtap: entered promiscuous mode [ 184.734158][ T8340] FAULT_INJECTION: forcing a failure. [ 184.734158][ T8340] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 184.749021][ T8340] CPU: 0 UID: 0 PID: 8340 Comm: syz.0.715 Not tainted 6.11.0-rc4-syzkaller-00566-g7d3aed652d09 #0 [ 184.754363][ T8183] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.759626][ T8340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 184.759645][ T8340] Call Trace: [ 184.759653][ T8340] [ 184.759662][ T8340] dump_stack_lvl+0x241/0x360 [ 184.759705][ T8340] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.759726][ T8340] ? __pfx__printk+0x10/0x10 [ 184.759748][ T8340] ? __pfx_lock_release+0x10/0x10 [ 184.759774][ T8340] ? vfs_write+0x7c4/0xc90 [ 184.759800][ T8340] should_fail_ex+0x3b0/0x4e0 [ 184.759826][ T8340] _copy_from_user+0x2f/0xe0 [ 184.759852][ T8340] __sys_bpf+0x1a4/0x810 [ 184.759877][ T8340] ? __pfx___sys_bpf+0x10/0x10 [ 184.759909][ T8340] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 184.759936][ T8340] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 184.759961][ T8340] ? do_syscall_64+0x100/0x230 [ 184.759984][ T8340] __x64_sys_bpf+0x7c/0x90 [ 184.760004][ T8340] do_syscall_64+0xf3/0x230 [ 184.850662][ T8340] ? clear_bhb_loop+0x35/0x90 [ 184.855343][ T8340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.861236][ T8340] RIP: 0033:0x7f13a3579e79 [ 184.865649][ T8340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.885339][ T8340] RSP: 002b:00007f13a2fff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 184.893749][ T8340] RAX: ffffffffffffffda RBX: 00007f13a3715f80 RCX: 00007f13a3579e79 [ 184.901705][ T8340] RDX: 0000000000000020 RSI: 0000000020000140 RDI: 0000000000000012 [ 184.909669][ T8340] RBP: 00007f13a2fff090 R08: 0000000000000000 R09: 0000000000000000 [ 184.917632][ T8340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.925596][ T8340] R13: 0000000000000001 R14: 00007f13a3715f80 R15: 00007ffca722aa38 [ 184.933566][ T8340] [ 184.948268][ T8172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.966589][ T8172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.976467][ T8172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.986922][ T8172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.005180][ T8172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.025364][ T8172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.059749][ T8172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.086417][ T8172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.102686][ T8172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.125556][ T8172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.147946][ T8172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.158562][ T8172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.170427][ T8172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.187854][ T8173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.215675][ T8173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.226839][ T8173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.237443][ T8173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.247430][ T8173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.259976][ T8173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.281276][ T8173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.291863][ T8173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.301862][ T8173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.312481][ T8173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.323967][ T8173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.345458][ T8173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.369947][ T8173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.385225][ T8173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.409890][ T8173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.468371][ T8173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.495437][ T8173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.515206][ T8173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.540648][ T8173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.563029][ T8173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.585043][ T8173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.602029][ T8173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.622115][ T8173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.633858][ T8173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.640686][ T8364] netlink: 40 bytes leftover after parsing attributes in process `syz.0.718'. [ 185.646364][ T8173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.663445][ T8173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.686576][ T8173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.699097][ T8173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.746373][ T8173] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.765383][ T8173] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.784104][ T8173] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.793043][ T8173] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.819037][ T8172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.831014][ T8172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.856662][ T8172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.888578][ T8172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.905404][ T8172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.925198][ T8172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.935025][ T8172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.964680][ T8172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.975586][ T8172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.986161][ T8172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.997490][ T8172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.008484][ T8172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.018948][ T8172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.029603][ T8172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.044318][ T8172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.051996][ T8364] netlink: 36 bytes leftover after parsing attributes in process `syz.0.718'. [ 186.074505][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.081682][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.121374][ T8172] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.142359][ T8172] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.173182][ T8172] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.209272][ T8172] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.270553][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.277736][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.428777][ T8175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.606340][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.635075][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.659611][ T8175] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.765287][ T8101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.779976][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.787154][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.793797][ T8101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.872906][ T134] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.880125][ T134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.951290][ T8404] bridge0: port 2(bridge_slave_1) entered listening state [ 187.020895][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.051935][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.269051][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.293342][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.298267][ T8175] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 187.393131][ T8183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.744944][ T8421] x_tables: eb_tables: nflog.0 target: invalid size 80 (kernel) != (user) 0 [ 187.978653][ T8175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.074855][ T8450] IPv6: sit1: Disabled Multicast RS [ 188.105356][ T8454] netlink: 'syz.3.725': attribute type 1 has an invalid length. [ 188.310908][ T8175] veth0_vlan: entered promiscuous mode [ 188.388112][ T8175] veth1_vlan: entered promiscuous mode [ 188.823654][ T8183] veth0_vlan: entered promiscuous mode [ 188.883198][ T8183] veth1_vlan: entered promiscuous mode [ 189.066186][ T8175] veth0_macvtap: entered promiscuous mode [ 189.120064][ T8175] veth1_macvtap: entered promiscuous mode [ 189.249164][ T8183] veth0_macvtap: entered promiscuous mode [ 189.257266][ T8493] dccp_invalid_packet: P.Data Offset(100) too large [ 189.299648][ T8183] veth1_macvtap: entered promiscuous mode [ 189.348647][ T8175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.408150][ T8175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.447293][ T8175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.485490][ T8175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.505680][ T8175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.535323][ T8175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.552853][ T8175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.576840][ T8175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.595863][ T8175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.619443][ T8175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.645209][ T8175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.657227][ T8175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.686708][ T8175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.708573][ T8175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.720610][ T8175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.733327][ T8175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.770437][ T8175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.008131][ T8503] netlink: 24 bytes leftover after parsing attributes in process `syz.3.734'. [ 190.018050][ T8510] netlink: 28 bytes leftover after parsing attributes in process `syz.0.735'. [ 190.130603][ T8175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.171396][ T8175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.185167][ T8175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.215227][ T8175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.233189][ T8175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.283880][ T8175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.327526][ T8175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.357832][ T8175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.375220][ T8175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.402125][ T8175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.414285][ T8525] netlink: 32 bytes leftover after parsing attributes in process `syz.0.738'. [ 190.423391][ T8175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.434219][ T8175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.452276][ T8175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.473924][ T8175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.499944][ T8175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.520983][ T8175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.542844][ T8175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.581221][ T8506] netlink: 'syz.3.734': attribute type 11 has an invalid length. [ 190.623930][ T8183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.693924][ T8183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.726572][ T8183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.755473][ T8183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.773827][ T8183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.792877][ T8183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.806935][ T8183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.826570][ T8183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.836652][ T8183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.848911][ T8183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.860958][ T8183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.871570][ T8183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.885292][ T8183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.896889][ T8183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.910040][ T8183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.923181][ T8183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.933373][ T8183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.960450][ T8183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.977244][ T8183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.070169][ T8547] macvlan2: entered allmulticast mode [ 191.076284][ T8547] mac80211_hwsim hwsim22 wlan0: entered promiscuous mode [ 191.085701][ T8547] mac80211_hwsim hwsim22 wlan0: entered allmulticast mode [ 191.121931][ T8547] team0: Port device macvlan2 added [ 191.153282][ T8175] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.189355][ T8175] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.227880][ T8175] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.260050][ T8175] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.313208][ T8183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.344967][ T8183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.355037][ T8183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.392055][ T8183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.415362][ T8183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.445186][ T8183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.455040][ T8183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.470518][ T8183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.482134][ T8183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.494556][ T8183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.504766][ T8183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.519069][ T8183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.529206][ T8183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.541274][ T8183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.559790][ T8183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.608051][ T8183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.635201][ T8183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.677199][ T8183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.709502][ T8183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.814022][ T8183] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.829583][ T8577] FAULT_INJECTION: forcing a failure. [ 191.829583][ T8577] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.852694][ T8183] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.861980][ T8577] CPU: 1 UID: 0 PID: 8577 Comm: syz.1.743 Not tainted 6.11.0-rc4-syzkaller-00566-g7d3aed652d09 #0 [ 191.872590][ T8577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 191.882662][ T8577] Call Trace: [ 191.885763][ T8579] ieee802154 phy0 wpan0: encryption failed: -22 [ 191.885937][ T8577] [ 191.895107][ T8577] dump_stack_lvl+0x241/0x360 [ 191.899808][ T8577] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.905025][ T8577] ? __pfx__printk+0x10/0x10 [ 191.909642][ T8577] ? __pfx_lock_release+0x10/0x10 [ 191.914689][ T8577] should_fail_ex+0x3b0/0x4e0 [ 191.919385][ T8577] _copy_from_user+0x2f/0xe0 [ 191.923997][ T8577] btf_new_fd+0x324/0xd30 [ 191.928357][ T8577] ? __pfx_btf_new_fd+0x10/0x10 [ 191.933234][ T8577] ? bpf_btf_load+0xcf/0x1a0 [ 191.937845][ T8577] __sys_bpf+0x6ef/0x810 [ 191.942111][ T8577] ? __pfx___sys_bpf+0x10/0x10 [ 191.946906][ T8577] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 191.952917][ T8577] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 191.959269][ T8577] ? do_syscall_64+0x100/0x230 [ 191.964055][ T8577] __x64_sys_bpf+0x7c/0x90 [ 191.968489][ T8577] do_syscall_64+0xf3/0x230 [ 191.973010][ T8577] ? clear_bhb_loop+0x35/0x90 [ 191.977712][ T8577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.983632][ T8577] RIP: 0033:0x7f2e98379e79 [ 191.988071][ T8577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.007700][ T8577] RSP: 002b:00007f2e9923f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 192.009847][ T8581] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.016116][ T8577] RAX: ffffffffffffffda RBX: 00007f2e98515f80 RCX: 00007f2e98379e79 [ 192.016133][ T8577] RDX: 0000000000000020 RSI: 0000000020000140 RDI: 0000000000000012 [ 192.016145][ T8577] RBP: 00007f2e9923f090 R08: 0000000000000000 R09: 0000000000000000 [ 192.016157][ T8577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.016168][ T8577] R13: 0000000000000001 R14: 00007f2e98515f80 R15: 00007fff8b690058 [ 192.016194][ T8577] [ 192.018740][ T8183] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.083545][ T8183] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.386379][ T8593] vlan2: entered promiscuous mode [ 192.415309][ T8593] bridge0: entered promiscuous mode [ 192.434028][ T8586] lo speed is unknown, defaulting to 1000 [ 192.494788][ T8100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.503674][ T8100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.535521][ T8586] lo speed is unknown, defaulting to 1000 [ 192.622636][ T8586] lo speed is unknown, defaulting to 1000 [ 192.635786][ T8101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.643626][ T8101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.707138][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.727732][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.864660][ T8100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.894426][ T8100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.197276][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 193.335679][ T8586] infiniband syz0: set active [ 193.340410][ T8586] infiniband syz0: added lo [ 193.372561][ T8586] syz0: rxe_create_cq: returned err = -12 [ 193.397325][ T5269] lo speed is unknown, defaulting to 1000 [ 193.445219][ T8586] infiniband syz0: Couldn't create ib_mad CQ [ 193.451378][ T8586] infiniband syz0: Couldn't open port 1 [ 193.521335][ T8626] netlink: 16 bytes leftover after parsing attributes in process `syz.1.752'. [ 193.567799][ T8586] RDS/IB: syz0: added [ 193.605929][ T8586] smc: adding ib device syz0 with port count 1 [ 193.629595][ T8586] smc: ib device syz0 port 1 has pnetid [ 193.674846][ T8626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.752'. [ 193.703607][ T7003] lo speed is unknown, defaulting to 1000 [ 193.760858][ T8586] lo speed is unknown, defaulting to 1000 [ 194.446882][ T8665] netlink: 164 bytes leftover after parsing attributes in process `syz.0.755'. [ 194.522646][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.531079][ T8665] netlink: 'syz.0.755': attribute type 1 has an invalid length. [ 194.552565][ T8665] netlink: 104 bytes leftover after parsing attributes in process `syz.0.755'. [ 194.669096][ T8669] xt_TCPMSS: Only works on TCP SYN packets [ 194.736447][ T8586] lo speed is unknown, defaulting to 1000 [ 194.997255][ T8684] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.761'. [ 195.053482][ T8684] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 195.652740][ T8586] lo speed is unknown, defaulting to 1000 [ 195.739234][ T8714] netlink: 36 bytes leftover after parsing attributes in process `syz.4.766'. [ 195.827958][ T8720] netlink: 16 bytes leftover after parsing attributes in process `syz.2.768'. [ 195.861811][ T8720] openvswitch: netlink: Flow key attr not present in new flow. [ 196.149606][ T8728] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 196.198247][ T8586] lo speed is unknown, defaulting to 1000 [ 196.547263][ T8749] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.774'. [ 196.618273][ T8749] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 196.628635][ T8586] lo speed is unknown, defaulting to 1000 [ 197.012445][ T8777] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 197.044228][ T8777] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 197.251455][ T8586] lo speed is unknown, defaulting to 1000 [ 197.743541][ T8586] lo speed is unknown, defaulting to 1000 [ 197.942693][ T8815] netlink: 36 bytes leftover after parsing attributes in process `syz.4.792'. [ 197.956316][ T8810] netlink: 24 bytes leftover after parsing attributes in process `syz.0.790'. [ 197.975007][ T8815] xt_CT: You must specify a L4 protocol and not use inversions on it [ 198.219048][ T8586] lo speed is unknown, defaulting to 1000 [ 198.292984][ T8823] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 198.366207][ T8829] hsr0: entered promiscuous mode [ 198.371792][ T8832] hsr_slave_0: left promiscuous mode [ 198.392375][ T8832] hsr_slave_1: left promiscuous mode [ 198.482225][ T8832] hsr0 (unregistering): left promiscuous mode [ 198.523830][ T8833] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 198.664975][ T8586] lo speed is unknown, defaulting to 1000 [ 198.903039][ T8852] syz.4.803[8852] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 198.903266][ T8852] syz.4.803[8852] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 199.026433][ T8855] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.803'. [ 199.158045][ T8586] lo speed is unknown, defaulting to 1000 [ 199.620534][ C1] hrtimer: interrupt took 534683 ns [ 200.129459][ T8586] lo speed is unknown, defaulting to 1000 [ 200.174648][ T8891] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 200.408609][ T8900] netlink: 4 bytes leftover after parsing attributes in process `syz.4.816'. [ 200.632604][ T8911] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 200.668512][ T8912] netlink: 'syz.2.820': attribute type 1 has an invalid length. [ 200.696861][ T8912] netlink: 224 bytes leftover after parsing attributes in process `syz.2.820'. [ 200.783357][ T8586] lo speed is unknown, defaulting to 1000 [ 203.138230][ T8885] lo speed is unknown, defaulting to 1000 [ 203.925740][ T8958] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000f8: 0000 [#1] PREEMPT SMP KASAN PTI [ 203.938369][ T8958] KASAN: null-ptr-deref in range [0x00000000000007c0-0x00000000000007c7] [ 203.946793][ T8958] CPU: 1 UID: 0 PID: 8958 Comm: syz.1.835 Not tainted 6.11.0-rc4-syzkaller-00566-g7d3aed652d09 #0 [ 203.957392][ T8958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 203.967719][ T8958] RIP: 0010:phy_start_cable_test_tdr+0x3a/0x5c0 [ 203.973985][ T8958] Code: ec 38 48 89 54 24 18 49 89 f6 48 89 fb 49 bd 00 00 00 00 00 fc ff df e8 74 26 2b fb 48 8d bb c0 07 00 00 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 05 e8 2a 68 92 fb 48 8b 83 c0 07 00 00 48 89 44 [ 203.993606][ T8958] RSP: 0018:ffffc90004947230 EFLAGS: 00010202 [ 203.999694][ T8958] RAX: 00000000000000f8 RBX: 0000000000000000 RCX: 0000000000040000 [ 204.007679][ T8958] RDX: ffffc900185b3000 RSI: 0000000000000ad6 RDI: 00000000000007c0 [ 204.015666][ T8958] RBP: ffffc90004947470 R08: ffffffff89cb108d R09: 1ffff1100c9e5015 [ 204.023650][ T8958] R10: dffffc0000000000 R11: ffffffff866864a0 R12: ffffc900049473f0 [ 204.031628][ T8958] R13: dffffc0000000000 R14: ffffc90004947740 R15: 0000000000000000 [ 204.039609][ T8958] FS: 00007f2e9923f6c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 204.048544][ T8958] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 204.055132][ T8958] CR2: 00007f6bf2c1d762 CR3: 000000007d970000 CR4: 00000000003506f0 [ 204.063117][ T8958] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 204.071098][ T8958] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 204.079085][ T8958] Call Trace: [ 204.082375][ T8958] [ 204.085316][ T8958] ? __die_body+0x88/0xe0 [ 204.089677][ T8958] ? die_addr+0x108/0x140 [ 204.094020][ T8958] ? exc_general_protection+0x3dd/0x5d0 [ 204.099556][ T8958] ? netdev_get_by_index+0x7a/0xb0 [ 204.104661][ T8958] ? asm_exc_general_protection+0x26/0x30 [ 204.110367][ T8958] ? __pfx_phy_start_cable_test_tdr+0x10/0x10 [ 204.116417][ T8958] ? ethnl_act_cable_test_tdr+0x5ad/0x10d0 [ 204.122211][ T8958] ? phy_start_cable_test_tdr+0x3a/0x5c0 [ 204.127831][ T8958] ? ethnl_ops_begin+0x1ae/0x1f0 [ 204.132750][ T8958] ? __pfx_phy_start_cable_test_tdr+0x10/0x10 [ 204.138802][ T8958] ethnl_act_cable_test_tdr+0x607/0x10d0 [ 204.144421][ T8958] ? __pfx_ethnl_act_cable_test_tdr+0x10/0x10 [ 204.150501][ T8958] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 204.156740][ T8958] ? __nla_parse+0x40/0x60 [ 204.161143][ T8958] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 204.167460][ T8958] genl_rcv_msg+0xb14/0xec0 [ 204.171972][ T8958] ? mark_lock+0x9a/0x350 [ 204.176289][ T8958] ? __pfx_genl_rcv_msg+0x10/0x10 [ 204.181306][ T8958] ? __pfx_lock_acquire+0x10/0x10 [ 204.186330][ T8958] ? __pfx_ethnl_act_cable_test_tdr+0x10/0x10 [ 204.192402][ T8958] ? __pfx___might_resched+0x10/0x10 [ 204.197674][ T8958] netlink_rcv_skb+0x1e3/0x430 [ 204.202424][ T8958] ? __pfx_genl_rcv_msg+0x10/0x10 [ 204.207433][ T8958] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 204.212703][ T8958] ? __netlink_deliver_tap+0x77e/0x7c0 [ 204.218146][ T8958] genl_rcv+0x28/0x40 [ 204.222111][ T8958] netlink_unicast+0x7f6/0x990 [ 204.226876][ T8958] ? __pfx_netlink_unicast+0x10/0x10 [ 204.232165][ T8958] ? __virt_addr_valid+0x183/0x530 [ 204.237262][ T8958] ? __check_object_size+0x49c/0x900 [ 204.242525][ T8958] ? bpf_lsm_netlink_send+0x9/0x10 [ 204.247619][ T8958] netlink_sendmsg+0x8e4/0xcb0 [ 204.252382][ T8958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.257657][ T8958] ? __import_iovec+0x536/0x820 [ 204.262489][ T8958] ? aa_sock_msg_perm+0x91/0x160 [ 204.267424][ T8958] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 204.272716][ T8958] ? security_socket_sendmsg+0x87/0xb0 [ 204.278162][ T8958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.283427][ T8958] __sock_sendmsg+0x221/0x270 [ 204.288099][ T8958] ____sys_sendmsg+0x525/0x7d0 [ 204.292858][ T8958] ? __pfx_____sys_sendmsg+0x10/0x10 [ 204.298133][ T8958] __sys_sendmsg+0x2b0/0x3a0 [ 204.302708][ T8958] ? __pfx___sys_sendmsg+0x10/0x10 [ 204.307816][ T8958] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 204.314130][ T8958] ? do_syscall_64+0x100/0x230 [ 204.318892][ T8958] ? do_syscall_64+0xb6/0x230 [ 204.323563][ T8958] do_syscall_64+0xf3/0x230 [ 204.328055][ T8958] ? clear_bhb_loop+0x35/0x90 [ 204.332718][ T8958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.338595][ T8958] RIP: 0033:0x7f2e98379e79 [ 204.343078][ T8958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.362665][ T8958] RSP: 002b:00007f2e9923f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 204.371065][ T8958] RAX: ffffffffffffffda RBX: 00007f2e98515f80 RCX: 00007f2e98379e79 [ 204.379021][ T8958] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 [ 204.386984][ T8958] RBP: 00007f2e983e793e R08: 0000000000000000 R09: 0000000000000000 [ 204.394938][ T8958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.402894][ T8958] R13: 0000000000000000 R14: 00007f2e98515f80 R15: 00007fff8b690058 [ 204.410864][ T8958] [ 204.413864][ T8958] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 204.464880][ T8958] ---[ end trace 0000000000000000 ]--- [ 204.470442][ T8958] RIP: 0010:phy_start_cable_test_tdr+0x3a/0x5c0 [ 204.476868][ T8958] Code: ec 38 48 89 54 24 18 49 89 f6 48 89 fb 49 bd 00 00 00 00 00 fc ff df e8 74 26 2b fb 48 8d bb c0 07 00 00 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 05 e8 2a 68 92 fb 48 8b 83 c0 07 00 00 48 89 44 [ 204.507215][ T8958] RSP: 0018:ffffc90004947230 EFLAGS: 00010202 [ 204.513882][ T8958] RAX: 00000000000000f8 RBX: 0000000000000000 RCX: 0000000000040000 [ 204.522629][ T8958] RDX: ffffc900185b3000 RSI: 0000000000000ad6 RDI: 00000000000007c0 [ 204.531896][ T8958] RBP: ffffc90004947470 R08: ffffffff89cb108d R09: 1ffff1100c9e5015 [ 204.540612][ T8958] R10: dffffc0000000000 R11: ffffffff866864a0 R12: ffffc900049473f0 [ 204.549496][ T8958] R13: dffffc0000000000 R14: ffffc90004947740 R15: 0000000000000000 [ 204.569926][ T8958] FS: 00007f2e9923f6c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 204.582123][ T8958] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 204.589348][ T8958] CR2: 00007f11116e7ab8 CR3: 000000007d970000 CR4: 00000000003506f0 [ 204.598095][ T8958] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 204.607164][ T8958] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 204.639005][ T8958] Kernel panic - not syncing: Fatal exception [ 204.645303][ T8958] Kernel Offset: disabled [ 204.649617][ T8958] Rebooting in 86400 seconds..